last executing test programs: 1.754001516s ago: executing program 3 (id=2365): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x60, 0x1, 0x4, 0xd04, 0x0, 0x0, {}, [@NFULA_CFG_MODE={0xa, 0x2, {0x9, 0x2}}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x9}, @NFULA_CFG_CMD={0x5}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x4}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x5}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x400}, 0x40000) (async, rerun: 64) r2 = socket(0x848000000015, 0x805, 0x0) (rerun: 64) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) (async) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x10}, 0x1c) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x2, 0x0, 0x0, {[@sack={0x5, 0x2}]}}}}}}}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a09040000000000000000020000000800048024000180080001006c6f67001800028008000640ea6c767a0900024073797a30000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x7c}}, 0x0) 1.678632306s ago: executing program 4 (id=2368): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000080654d970008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8918, &(0x7f0000000000)={r3}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000100)={0x0, 0x2, 0xd5}, 0x8) listen(r0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=0x0, @ANYRES64=r1, @ANYRES32=r2], 0x68}}, 0x0) 1.451380794s ago: executing program 0 (id=2371): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000011c0)={0x48, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x34, 0x18, 0x0, 0x1, [@nested={0x2d, 0x1c, 0x0, 0x1, [@typed={0x8, 0xcf, 0x0, 0x0, @pid}, @generic="f3cc50fe634d094ec09b27ebad7974a937072c2cb851ba4a0630dbb1fa35788811"]}]}]}, 0x48}], 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_NAT_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1ec, 0x3, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xfffff85a}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_REPLY={0x24, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xb}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x80000001}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_REPLY={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010100}}}]}, @CTA_PROTOINFO={0x34, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x30, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x1}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x7}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x9}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x69}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x81}]}}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_LABELS_MASK={0x8, 0x17, [0x9]}, @CTA_NAT_SRC={0xf0, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x44, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @local}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_PROTO={0x44, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}]}, @CTA_TUPLE_MASTER={0x2c, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @remote}}}]}, @CTA_SEQ_ADJ_REPLY={0x24, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x698e}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x10}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x401}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, 0x1ec}}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x9b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0xc, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 1.424196846s ago: executing program 3 (id=2372): socket$key(0xf, 0x3, 0x2) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$rds(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="17000000000000000084000001000000000000", @ANYBLOB], 0x48) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r5, @ANYBLOB="10007d8005", @ANYRES8=0x0, @ANYRES32=r3], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000380)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e150400000000000000000000000000000d040000000400007aa6000007000000000000f9ffffffff09030000000000005f00"], 0x0, 0x52}, 0x28) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) shutdown(r2, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="16210000021404002dbd7000fe0002000000000000797a310000000005005400ab70000008000100020000000900020073797a320000000018b025c7071e9227a6769e4a7078aa89338c111454c80621d2242063bbcbe05d2cb9ddf9363be3f4afa4b20d19714ed5cb4a1a90dd16"], 0x38}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) sendmsg$kcm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083911000000000000a1180015000600142603600e120900210000000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r10, 0x29, 0x10, 0x0, &(0x7f00000000c0)) getsockopt$llc_int(r9, 0x10c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r7, {0xfff3}, {0xa}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0xc000) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 1.414400883s ago: executing program 2 (id=2373): syz_extract_tcp_res(&(0x7f0000000000)={0x41424344, 0x41424344}, 0x11f6e8e8, 0x80) syz_extract_tcp_res(&(0x7f0000000040)={0x41424344, 0x41424344}, 0x6, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000009b80)=ANY=[@ANYBLOB="3c0000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000100003"], 0x3c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffc1e}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x15f, &(0x7f0000000140)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @tcp={{0x22, 0x4, 0x0, 0x2, 0x151, 0x64, 0x0, 0x0, 0x6, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x2f}, {[@generic={0x82, 0x5, "b10a08"}, @timestamp_prespec={0x44, 0x54, 0x9e, 0x3, 0x8, [{@broadcast, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@empty, 0x9}, {@empty, 0x2}, {@rand_addr=0x64010102, 0xffffffc1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xa}, {@multicast2, 0x5}, {@remote, 0x1}, {@loopback, 0x401}, {@private=0xa010102, 0x8}]}, @generic={0x86, 0xe, "127489bfe641281ffc4816c0"}, @timestamp_prespec={0x44, 0xc, 0x2a, 0x3, 0x3, [{@remote, 0x6}]}]}}, {{0x4e22, 0x4e24, r0, r1, 0x1, 0x0, 0x12, 0x40, 0x6, 0x0, 0xfff, {[@nop, @exp_smc={0xfe, 0x6}, @generic={0x8, 0x3, "ef"}, @timestamp={0x8, 0xa, 0x0, 0xf31f}, @mptcp=@mp_join={0x1e, 0x3, 0x5}, @mptcp=@syn={0x1e, 0xc, 0x5, 0x1, 0x81, 0x7, 0xbe38}, @exp_smc={0xfe, 0x6}, @timestamp={0x8, 0xa, 0x2, 0xfffffff7}]}}, {"3f9b83c262657abf431b12dbcba24b5a3419bb9fb880779ec9845e828c954ebcd478c88e8c0a51887f5b8a29642d1ad02c03f98a81acb8d8c956771cc2cda445d718062ed1a4250f18bd802e4577eadab33fdf09d3c2ddb051103b3517b31c1e9cff7e812fd8406b63b6164d13b029c920a472f24e0bf8c5c731d255d9616e73f8"}}}}}}, 0x0) 1.291841466s ago: executing program 4 (id=2375): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'gre0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x20, 0x10, 0x3, 0x1, {{0x35, 0x4, 0x1, 0x4, 0xd4, 0x67, 0x0, 0x1, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}, @local, {[@timestamp_prespec={0x44, 0xc, 0x48, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}]}, @cipso={0x86, 0x3f, 0xfffffffffffffffe, [{0x6, 0xe, "13e20296b2c6b1f8cb959631"}, {0x7, 0xc, "d14c9c29f55652fc7ab1"}, {0x5, 0x2}, {0x6, 0x9, "829f1ccbd34451"}, {0x6, 0x7, "5907115bb2"}, {0x5, 0xd, "8f2a159ec99072024461e0"}]}, @timestamp_prespec={0x44, 0xc, 0xc3, 0x3, 0x4, [{@multicast2, 0x2}]}, @end, @timestamp={0x44, 0x24, 0x57, 0x0, 0xc, [0x4, 0xe, 0x0, 0x2, 0x8, 0xfffffd75, 0x0, 0x3ff]}, @cipso={0x86, 0x41, 0xffffffffffffffff, [{0x5, 0x4, "2aa0"}, {0x5, 0x8, "82f8514aff2e"}, {0x7, 0xe, "bbadddf4a9f56f900389dc3f"}, {0x2, 0x7, "75958d8c7a"}, {0x2, 0x9, "84ff35a7b6d720"}, {0x5, 0x7, "867a67d02e"}, {0x5, 0x6, "d3ca182f"}, {0x7, 0x4, "b225"}]}]}}}}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) getsockopt$sock_buf(r2, 0x1, 0x4d, 0xffffffffffffffff, &(0x7f0000000000)) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x200, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xfff6, 0x6}, {0xd, 0xfff3}, {0x4, 0x9}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x34}}, 0x0) r11 = socket(0x2a, 0x2, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000040)={'wlan0\x00', &(0x7f0000000680)=@ethtool_gstrings={0x1b, 0x4}}) r13 = accept4$packet(r11, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14, 0x0) getsockname$packet(r13, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0xe, 0x7}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r11, 0x84, 0x11, &(0x7f00000001c0)={r14, 0x291}, 0x8) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000080), &(0x7f0000000100)=0x8) r15 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r15, &(0x7f0000000300)={&(0x7f0000000040)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f00000000c0)={0x0}, 0x7, 0x0, 0x0, 0x2004c004}, 0x0) 1.242880598s ago: executing program 0 (id=2376): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000006301a2000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet_sctp_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f0000000180)=0xf, 0x4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtfilter={0x38, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x8001}]}}]}, 0x38}}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x4924b68, 0x0) write$cgroup_pid(r0, &(0x7f0000000340), 0x12) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) 1.099405567s ago: executing program 4 (id=2377): r0 = socket$inet(0xa, 0x801, 0x84) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) socket$inet_tcp(0x2, 0x1, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000011140100000000000000000008004a00000000f107004b"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async, rerun: 32) listen(r0, 0x8) (async, rerun: 32) ppoll(&(0x7f0000000240)=[{r0, 0x384}], 0x1, &(0x7f0000000280)={0x0, 0x3938700}, 0x0, 0x0) 1.099020113s ago: executing program 1 (id=2378): connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) socket$can_raw(0x1d, 0x3, 0x1) (async, rerun: 64) r0 = socket$can_raw(0x1d, 0x3, 0x1) (rerun: 64) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f00000000c0)=0x6, 0x5c) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) 1.083732661s ago: executing program 2 (id=2379): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="110000006a"], 0xfe33) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000180)={0x0, 0x9}, 0x8) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newtfilter={0x30, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000010}, 0x10000840) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa452}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001c40)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xfff2, 0xfff3}, {0x0, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 973.547601ms ago: executing program 3 (id=2380): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000100)=0xfffffff7, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x6}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macsec0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, r2}, {@in=@broadcast, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5c}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x24}, [@algo_auth={0x48, 0x1, {{'xcbc(aes)\x00'}}}]}, 0x138}}, 0x4000040) 835.314922ms ago: executing program 0 (id=2381): r0 = socket$inet6(0xa, 0x4, 0x8c) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r1, 0x84, 0x10, &(0x7f0000001f00)=""/4062, &(0x7f00000004c0)=0x744) setsockopt$sock_int(r0, 0x1, 0x28, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x82, 0x0, 0x1}, 0x28) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_0\x00', 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xfe33) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r4, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r5, 0x113, 0x4, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x5}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000180)={r7, 0xfde6}, &(0x7f0000000200)=0x8) 834.070096ms ago: executing program 1 (id=2382): r0 = socket(0x2, 0x3, 0xff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r1) r3 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x3, 0x20000008, 0x4) sendmsg$IEEE802154_ASSOCIATE_REQ(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000003e301724cc8cb9433900c5420be8bf4c46ee403b1564bcff37eb50bd166e3dc7d82904c63cee283afb1e9dd3943d6c3946b49651810e3f3508f53a99a51a95f37039038363eeaf1f8b0e2b70", @ANYRES16=r2, @ANYBLOB="110c0000000000000000010000000500070000000000"], 0x1c}}, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x2, @local}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e40)={0x6, 0x4, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18000000000000000000000000000000d3e8c6878fd96bb55b85000000550000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x90) connect$inet(r0, &(0x7f00000000c0)={0x2, 0xfff9, @multicast1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xd0}, 0x1, 0x0, 0x0, 0x404c8c6}, 0x0) 833.638769ms ago: executing program 3 (id=2383): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f00000003c0)={0x3, @bcast}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="440000004ec6"}) 766.469369ms ago: executing program 2 (id=2384): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000740)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x3, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@empty, 0x80000}, {@multicast1}]}, @ssrr={0x89, 0x3, 0xce}, @generic={0x82, 0xfffffffffffffe73}, @noop]}}, {{0x1, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, 0x0) r1 = socket(0x10, 0x3, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0x1, 0x5) write$cgroup_pid(r4, &(0x7f0000000080), 0x12) (async) r8 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) (async) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) r10 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r10, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) (async) setsockopt$inet_mreqn(r10, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) (async) setsockopt$inet_mreqn(r10, 0x0, 0x28, &(0x7f0000000080)={@multicast1, @local}, 0xc) r11 = accept4(r9, 0x0, 0x0, 0x800) sendmmsg$alg(r11, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000780)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r12) sendmsg$NLBL_CIPSOV4_C_ADD(r12, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="30010000", @ANYRES16=r13, @ANYBLOB="01000000000000000000010000000800010001000000040004800800020001000000080108802c0007800800ffeac3bc0000080006001c0000000800060000000000080005"], 0x130}}, 0x0) (async) bind$unix(r1, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e22}, 0xfffffffffffffdf3) 762.967043ms ago: executing program 4 (id=2385): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x80040005, 0x0, 0x0, 0x40f00, 0x18}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0x46, &(0x7f0000000900)={@random="e10931d8640a", @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ea0c00", 0x10, 0x88, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x100}}}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b2a, &(0x7f0000000040)) syz_emit_ethernet(0x52, &(0x7f0000000280)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x1c, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"5e4cd36bb96bd2b9"}}}}}}}, 0x0) 640.88325ms ago: executing program 1 (id=2386): r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x44080) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x1, 0x8, 0x8}, 0x50) (async) sendmsg(r1, &(0x7f0000003680)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="12ad40ae639074f77f1c3c756e8a1e83482b1187cfa44bbc1a145438322972d2befdba778d9ddf3fdd3e7a3c6a8cbf4d21476ae3cd082b88a121f42006272bc0701df51fb7ef1181e2156ff075286a695a84ac83b553f8e4605b047622c3e4ec12711b27a5ea11fd5538901fdc8d9d40de5392f26a43b4fa1451d7bc7c2e3409e3f7e4b06ba426ec169128297682f13f5c6b1aaa6540f729a2929ed48119146d3266eb6836", 0xa5}, {&(0x7f0000001700)="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", 0x1148}, {&(0x7f0000000500)="6fed291936d67545a590313462ce7cb2832da040f3a9e7ccb4bf40726c0fd8b345adf63cee09219d7936f86c4009441ac12230efb8ae66ca9ef84fc8f8e35054255479fdeb895e0758d2aacee5b89eecd03786a7e206cb77d48510a4cad3275500e5a08c22cda1f09021bcfd21d1bf755abce58fe828574f5979c62b2beadc4e92812f8ec037d470e1ba73bc4a6b3798440323cd1ca940f6741852b4fc54324df6c2e0aee805bd2c25cdcc0bc2bd5929b88f350256a85dca2bd986cc41acb11d6fa131964cd3ae6d2a5cc4a90dd8b0b2256c6f4af2ac4b653e2c32afbb7b9b92a6edebd63ce3f2", 0xe7}, {&(0x7f0000000180)="4e6b84cad350b2f3aeac993679f6b7a5c5b4b408c58151918b73fa8963bcc455ecebef80b80ad0180b23d71bed631fac6fd8408616d413d98f890fedcbb5d3dad3c6f185fbf2b3043c3f41960cf443da96fa48539f74fef76ffcf2183c1395217b6fb8a761a1d930391c04939baf34884211c70281e83453fb7770f5a96c5a28decb3f5eb6c15d5932bf958ada9db74d6f84c1b19545dbef0058e9468c3bcd43b2c1130bfb00"/175, 0xaf}, {&(0x7f0000000440)="c4735e7963f9d8dbe957a3477b10140c3515e85b717a2d0c0d94c924b2c64eac5dcf6e1f456ceb2cf73541583f19d0924b2e357f86e2610d5749da3312ab6f858c9d7715e3f85e2b531eaa6613d5270fc9345916d8309ac20658e4b2d4e898a8d3f47651b487d2075eb68b02f6369613482c61d433fc7433f82c4cf8bdac061065091f66e22bfb55997bca0fcdee", 0x8e}, {&(0x7f0000000340)="b31d677fccceac4d7525161a8e8e21aa025ad89135dde26f8de85fd1c0db9cb77a58632e41403f11440e726e9562370627727200000000000000edb0e59be46205652dcbf7f1b55e", 0x48}], 0x6}, 0x0) 579.049486ms ago: executing program 4 (id=2387): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @dev}, @IFLA_GENEVE_REMOTE={0x8, 0x2, @remote}]}}}]}, 0x50}}, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r1, 0x1, 0x70bd27, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x11, 0x5, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 519.929397ms ago: executing program 2 (id=2388): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000180)="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") bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0xfff) syz_emit_ethernet(0x56, &(0x7f00000002c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x7fff, 0x4}]}}}}}}}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x178, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r6, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x148, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x49}]}]}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0xfc, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x6, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3000000}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xc00}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x5, 0x1, 0x5ac}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x2c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x86}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x47, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x5, 0x1, 0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8c}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x0, 0x3, 0x10}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xe7}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x46}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x24, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x7fffffff}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xb5}]}]}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @local}]}}]}, 0x178}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_emit_ethernet(0x56, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x10, 0x0, 0x0, 0x3ff, {[@timestamp={0x8, 0xa, 0x8, 0x5}]}}}}}}}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYRES64=r1, @ANYRES32=r0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0xe8}}, 0x0) 498.233564ms ago: executing program 1 (id=2389): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', 0x0}) sendto$packet(r0, &(0x7f00000000c0)="04", 0x5e0, 0x0, &(0x7f0000000180)={0x11, 0x8100, r1, 0x1, 0xe0}, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, 0x20, 0x9, 0x2, 0x25dfdbff, {0x2}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="000425bd7000fddbdf256300000008000300", @ANYRES32=r7, @ANYBLOB="e4009dda1180f078f57f6daf9a46365c2262498d8882acb8b6ae57592bdbfccd66c5e3f396a507a5aa84fcb023a0abf2265996566e58c24db56175987aa57c702054317c728a9533911789996327ddb4cead7c8025585b86a37322fe11e196f2bb3ca9c16db7a838606b8a36afa8d7681a927c6f95ed7cd08f3815f0aba5d0ee1500"/145], 0x1c}, 0x1, 0x0, 0x0, 0xc010}, 0x40010) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="40000000010000e300000000004c7ab02b", @ANYRES32=0x0, @ANYBLOB="0000000000000600140012800b0001"], 0x40}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000f4000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r11}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r12, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r12, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r12, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r12, &(0x7f00000000c0)="8f2a0a65bd8c2c2b0304000e0580a7b6070d63e286a5cefe", 0x5ac) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000002280)={@private0, 0x200000, 0x2, 0x0, 0x0, 0xfffd}, 0x20) socket$inet6(0x10, 0x2, 0x0) 431.379834ms ago: executing program 0 (id=2390): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000140), 0x4) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x180, r1, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xc6b}, {0x6, 0x11, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6, 0x11, 0xb2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xb}, {0x6, 0x11, 0x672b}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xbd}, {0x6, 0x11, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x1ff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xa}, {0x6, 0x11, 0x5}}]}, 0x180}, 0x1, 0x0, 0x0, 0x20048021}, 0x810) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000033000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c0017800400ad001400fb0000000000010000000000000000000001"], 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) 422.932997ms ago: executing program 3 (id=2391): getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x4}, &(0x7f00000000c0)=0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x7}]}}}]}]}], {0x14}}, 0xd8}}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={r0, @in6={{0xa, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1000}}, 0x0, 0x5, 0x71f, 0x4, 0x10, 0x4, 0x5}, &(0x7f00000001c0)=0x9c) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20100}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wlan0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @random="ef05b9b215d0"}]}, 0x40}}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "910427876cb8a9e4", "1714817f93d6c1052dc8ba47dcf8a8df", "089133e2", "b65d27c5deb46142"}, 0x28) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r2, 0x4008941a, &(0x7f0000000240)) r4 = socket$qrtr(0x2a, 0x2, 0x0) getsockname$qrtr(r4, &(0x7f0000000300), &(0x7f00000003c0)=0xc) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0xfcef, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xfffa, 0xffe0}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8864}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x2400c011) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 417.237818ms ago: executing program 4 (id=2392): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000200), 0xe) listen(r1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000100), 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x50) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), r3) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r3, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x2046}, {{0x0, 0x0, 0x0}, 0x401}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f00000007c0)=""/4112, 0x1010}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f00000000c0)=""/115, 0x73}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/75, 0x4b}, {&(0x7f0000000240)=""/98, 0x62}, {&(0x7f00000003c0)=""/100, 0x64}, {&(0x7f0000001800)=""/203, 0xcb}, {&(0x7f0000000440)=""/67, 0x43}], 0xa}, 0x24d9}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, 0x0, &(0x7f00000001c0)) write(r0, &(0x7f0000000340)="07000000010000", 0x7) 341.877804ms ago: executing program 0 (id=2393): bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x5, 0x2, 0xfffff9a3, 0x4, 0x103, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) splice(r1, 0x0, r3, &(0x7f0000000040), 0x8f5, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r1, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000003c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0], 0x0, 0x77, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x1a, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000140)='thermal_power_devfreq_limit\x00', r6}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(r2, &(0x7f0000000300)='memory.events\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r8], 0x20}}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000680)=ANY=[@ANYBLOB="bc0000001000030529bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000003062000004000200880018801800018014000500c907ab8fd02b0b2b6f007c024c2e8be80c00018005000600010000002c00018005000600000000000e00020073797a6b616c6c6572000000050006000700000005000600030000003400018014000500a5b251ecca0f799a2eb24180ed9fc9711400050075006256752724d9c0d5dbb447ec02e10800020047504c00000000000000000000000000000000000327218be0380145620d4411ad03acb9ca235d5a5af6413db5caffae708e21add77f"], 0xbc}}, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000002c0)=@o_path={&(0x7f0000000240)='./file0\x00', r4, 0x4000, r7}, 0x18) 223.346839ms ago: executing program 1 (id=2394): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r2, 0x1, 0x70bd28, 0x18, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x44040) (async) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r2, 0x1, 0x70bd28, 0x18, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x44040) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x4}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r2, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0xab79e682e4d2e226}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044044}, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x0, 0x3, 0x1, 0x0, 0x41}, @NFTA_FIB_DREG={0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x20004815) 222.66747ms ago: executing program 3 (id=2395): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000200000000000000000073012b000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x2c, r2, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @inner={{0xa}, @val={0x4}}}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xe0}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c000b8018"], 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x24, r6, 0x5, 0xfffffffd, 0x2, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4810) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x4c, r6, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x5, 0x1a}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000844}, 0x48000) socket$kcm(0x10, 0x2, 0x0) syz_80211_join_ibss(&(0x7f0000000380)='wlan0\x00', &(0x7f00000003c0)=@default_ap_ssid, 0x6, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000016000500000000000004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000200000000000000000073012b000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x2c, r2, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x2c}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @inner={{0xa}, @val={0x4}}}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xe0}}, 0x0) (async) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c000b8018"], 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x24, r6, 0x5, 0xfffffffd, 0x2, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4810) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_DEL_PMK(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x4c, r6, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x5, 0x1a}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000844}, 0x48000) (async) socket$kcm(0x10, 0x2, 0x0) (async) syz_80211_join_ibss(&(0x7f0000000380)='wlan0\x00', &(0x7f00000003c0)=@default_ap_ssid, 0x6, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000016000500000000000004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) (async) 210.007392ms ago: executing program 2 (id=2396): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000007140100000000000000000005006000b8"], 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610414000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xd3, &(0x7f0000000080)=""/211, 0x0, 0x1, '\x00', r1, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xa68e}, 0x94) 132.601835ms ago: executing program 0 (id=2397): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000000)=0x1, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x26, &(0x7f0000000040)={@broadcast, @rand_addr=0x64010102, @remote}, 0xc) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'virt_wifi0\x00', &(0x7f0000000080)=@ethtool_modinfo={0x42, 0x1, 0xfffffc00}}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x1, 0x0, 0x9}, 0xfe}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0x1, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getchain={0x4c, 0x66, 0x100, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x6, 0xe}, {0xf, 0x9}, {0xfff2, 0x4}}, [{0x8, 0xb, 0xc}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x913}, {0x8, 0xb, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40004}, 0x40044001) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa0, r5, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xc}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x87d}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x100}]}, @IPVS_CMD_ATTR_SERVICE={0x4}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4c080}, 0xc080) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r4) sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r6, 0x400, 0x4, 0x25dfdbfc, {{}, {@void, @void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x44000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(r7, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r5, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffff112}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x8001) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000740)={r7, 0x81, 0x2, 0x5}) accept$phonet_pipe(r8, &(0x7f0000000780), &(0x7f00000007c0)=0x10) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000800)={0x0, 0x1000, "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"}, &(0x7f0000001840)=0x1008) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000001880)={r9, 0x1}, 0x8) ioctl$F2FS_IOC_SET_PIN_FILE(r7, 0x4004f50d, &(0x7f00000018c0)=0x1) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001940), r7) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r7, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x28, r10, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004051) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x5c, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x9}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000800}, 0x180) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000001b80)={0x0, 0x0, 0x0}, &(0x7f0000001bc0)=0xc) ioctl$TUNSETGROUP(r8, 0x400454ce, r11) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r12, &(0x7f0000001e40)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001c40)={0x18c, r6, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x20}}}}, [@NL80211_ATTR_IE={0xc7, 0x2a, [@ht={0x2d, 0x1a, {0x4000, 0x0, 0x6, 0x0, {0x1, 0x7, 0x0, 0x7, 0x0, 0x1, 0x1, 0x3}, 0x400, 0xe, 0x3}}, @ht={0x2d, 0x1a, {0x1000, 0x2, 0x3, 0x0, {0xe3e2, 0xa0e, 0x0, 0x9, 0x0, 0x1, 0x0, 0x3, 0x1}, 0x800, 0x2, 0xe}}, @supported_rates={0x1, 0x5, [{0x48, 0x1}, {0x6c, 0x1}, {0x6c}, {0x6, 0x1}, {0x18, 0x1}]}, @random_vendor={0xdd, 0x82, "e98351b17357d567327277ce98ce5e11d7a0d36ff4146255c56b66252ce5765fba02b88f2cc47d99a6a8834257cdbb27837753ab9722d08a4a2ef5632fa54748b1564c711ca6757e7f12b501e071b3f5a7e5133217ed54a3a71074dd5aacb99ad224c90040825a6c3aee772520832e8c305b6c7cd3ab7988ba7e50388911492f1958"}]}, @NL80211_ATTR_IE={0x87, 0x2a, [@peer_mgmt={0x75, 0x14, {0x1, 0x5, @void, @void, @val="12a4d862f33f206f9cc7377a20649cca"}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0xeb, 0x10, @device_b, 0x4, @value=@device_b, 0x4, 0x6, @device_a, 0xaf}}, @mesh_chsw={0x76, 0x6, {0xeb, 0x5, 0x1b, 0x3}}, @challenge={0x10, 0x1, 0x9d}, @supported_rates={0x1, 0x7, [{}, {0xb}, {0x6c}, {0x36, 0x1}, {0x4}, {0xa}, {0x2, 0x1}]}, @mesh_id={0x72, 0x6}, @channel_switch={0x25, 0x3, {0x0, 0x88, 0x8}}, @chsw_timing={0x68, 0x4, {0x2, 0x81}}, @mic={0x8c, 0x18, {0x309, "385bdf3633a4", @long="0a7406ec66676ff7fca127de56236cb3"}}, @channel_switch={0x25, 0x3, {0x1, 0xb8, 0xf7}}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0xd, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x60}}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x1) getsockname$packet(r8, &(0x7f0000001e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001ec0)=0x14) 3.372471ms ago: executing program 1 (id=2398): socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000017c0), 0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) (async) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) recvmsg(0xffffffffffffffff, 0x0, 0x0) (async) recvmsg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="270f2bbd7000fcdbdf251d000000"], 0x14}, 0x1, 0x0, 0x0, 0x8885}, 0x400c0) 0s ago: executing program 2 (id=2399): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@can_newroute={0x154, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_XOR={0x15, 0x3, {{{}, 0x0, 0x0, 0x0, 0x0, "02005300"}, 0x5}}, @CGW_CS_XOR={0x8, 0x5, {0x0, 0x8}}, @CGW_CS_CRC8={0x11e, 0x6, {0x7, 0x0, 0x0, 0x0, 0x0, "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", 0x0, "bd3d13746078e05fb6a2112ea9e93b498f4bdefc"}}]}, 0x154}}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11, 0x4000}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x4000}]}}]}, 0x40}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)={0x34, r5, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4044040) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x128, r6, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x84, 0x3, 0x0, 0x1, [{0x80, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x79, 0x1, "d5725f566482efbf26dd43e8364571a3fd454a8e59ab5457d27e80eba19e2900213bbae6e60ba715433496e4c4b6a516d2d33e0d2c607eeb00df2b137647568422c2c0d10324ed9a1e0a8cb4540b2a39a07eaa448e21839cdcd0c1bb05885d0626f2f8d7864a98f71b280e5d36fbe9ca5c06be1321"}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x54, 0x3, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x4b, 0x1, "688a3134fff3dec3d8cdd71d604f132c34bc4486f19a9d60aa843174a6b5e4ee8325d5111c191255a4a780973bebda16a3ca2647b105438c26975e41c45702eb9afd866122f5c3"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x5}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x128}, 0x1, 0x0, 0x0, 0x810}, 0x8c0) kernel console output (not intermixed with test programs): mode [ 99.819259][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.831704][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.861959][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.872076][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.888938][ T5861] veth0_macvtap: entered promiscuous mode [ 99.905899][ T5874] veth0_macvtap: entered promiscuous mode [ 99.915290][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.924457][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.938772][ T5865] veth1_vlan: entered promiscuous mode [ 99.951893][ T5861] veth1_macvtap: entered promiscuous mode [ 99.962728][ T5874] veth1_macvtap: entered promiscuous mode [ 100.052759][ T5873] veth0_vlan: entered promiscuous mode [ 100.063803][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.100806][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.113173][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.126389][ T5865] veth0_macvtap: entered promiscuous mode [ 100.149018][ T5873] veth1_vlan: entered promiscuous mode [ 100.165996][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.181318][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.211323][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.221896][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.246021][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.257292][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.274623][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.288424][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.298809][ T5865] veth1_macvtap: entered promiscuous mode [ 100.328464][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.338774][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.363759][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.383195][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.396115][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.409710][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.430427][ T5873] veth0_macvtap: entered promiscuous mode [ 100.453281][ T5873] veth1_macvtap: entered promiscuous mode [ 100.478753][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.540247][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.569763][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.579518][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.589261][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.621597][ T5870] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 100.631051][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.663348][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.703726][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.733606][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.745057][ T1147] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.779931][ T1147] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.793613][ T1147] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.826880][ T44] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.827672][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.851250][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.908810][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.926099][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.946435][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.956483][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.072633][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.085939][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.130818][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.149909][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.245752][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.256415][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.339420][ T5987] netlink: 'syz.3.4': attribute type 2 has an invalid length. [ 101.370603][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.396906][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.440078][ T5988] netlink: 'syz.3.4': attribute type 2 has an invalid length. [ 101.575731][ T5994] warning: `syz.4.5' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 101.587365][ T5864] Bluetooth: hci1: command tx timeout [ 101.597279][ T5864] Bluetooth: hci0: command tx timeout [ 101.668321][ T5864] Bluetooth: hci2: command tx timeout [ 101.713204][ T5998] tipc: Enabling of bearer rejected, failed to enable media [ 101.740155][ T5864] Bluetooth: hci3: command tx timeout [ 101.811369][ T5997] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 101.829102][ T5864] Bluetooth: hci4: command tx timeout [ 101.838443][ T6001] syz_tun: entered allmulticast mode [ 101.984022][ T6011] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8'. [ 102.000066][ T6011] netlink: 1 bytes leftover after parsing attributes in process `syz.1.8'. [ 102.009496][ T6011] netlink: 11 bytes leftover after parsing attributes in process `syz.1.8'. [ 102.073655][ T6004] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 102.107786][ T5999] syz_tun: left allmulticast mode [ 102.387014][ T6024] syz.4.12 uses obsolete (PF_INET,SOCK_PACKET) [ 102.436516][ T6026] netlink: 'syz.2.13': attribute type 1 has an invalid length. [ 102.519777][ T6026] vlan2: entered allmulticast mode [ 102.525251][ T6026] veth1: entered allmulticast mode [ 102.822367][ T6030] syzkaller0: entered promiscuous mode [ 102.828587][ T6030] syzkaller0: entered allmulticast mode [ 102.853296][ T6039] Zero length message leads to an empty skb [ 103.236942][ T6054] netlink: 'syz.2.22': attribute type 5 has an invalid length. [ 103.970150][ T6058] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 104.289270][ T30] audit: type=1800 audit(1754792658.112:2): pid=6052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.21" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 104.311497][ T6052] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 104.358418][ T6052] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 104.407323][ T6052] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 104.555944][ T6072] netlink: 11 bytes leftover after parsing attributes in process `syz.1.26'. [ 104.590560][ T6072] netlink: 11 bytes leftover after parsing attributes in process `syz.1.26'. [ 104.649114][ T6077] netlink: 24 bytes leftover after parsing attributes in process `syz.2.28'. [ 104.948807][ T6096] netlink: 'syz.0.33': attribute type 29 has an invalid length. [ 104.970865][ T6096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.33'. [ 105.054385][ T6100] netlink: 'syz.1.34': attribute type 1 has an invalid length. [ 105.174465][ T6104] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 105.258639][ T5864] Bluetooth: hci0: command 0x0401 tx timeout [ 105.669020][ T6121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.40'. [ 105.699886][ T6123] geneve2: entered promiscuous mode [ 105.705160][ T6123] geneve2: entered allmulticast mode [ 105.762120][ T13] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 105.811271][ T13] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 105.873152][ T13] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 105.894077][ T13] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 105.921467][ T6134] netlink: 24 bytes leftover after parsing attributes in process `syz.2.43'. [ 106.085375][ T6134] Bluetooth: MGMT ver 1.23 [ 106.205394][ T6153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.48'. [ 106.233718][ T5969] IPVS: starting estimator thread 0... [ 106.243995][ T6160] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 106.337007][ T6161] IPVS: using max 25 ests per chain, 60000 per kthread [ 106.568479][ T6174] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 106.585087][ T6171] raw_sendmsg: syz.4.52 forgot to set AF_INET. Fix it! [ 106.739273][ T6143] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 107.037072][ T6191] netlink: 'syz.1.60': attribute type 1 has an invalid length. [ 107.115838][ T6197] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 107.247475][ T5903] IPVS: starting estimator thread 0... [ 107.338258][ T6205] IPVS: using max 23 ests per chain, 55200 per kthread [ 107.832348][ T6235] __nla_validate_parse: 1 callbacks suppressed [ 107.832370][ T6235] netlink: 12 bytes leftover after parsing attributes in process `syz.1.69'. [ 107.883674][ T6218] team0 (unregistering): Port device team_slave_0 removed [ 107.912309][ T6218] team0 (unregistering): Port device team_slave_1 removed [ 107.996543][ T6235] netlink: 'syz.1.69': attribute type 2 has an invalid length. [ 108.108812][ T6241] netlink: 12 bytes leftover after parsing attributes in process `syz.3.72'. [ 108.138103][ T6243] netlink: 48 bytes leftover after parsing attributes in process `syz.4.73'. [ 108.164110][ T6243] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 108.748724][ T6255] netlink: 348 bytes leftover after parsing attributes in process `syz.0.79'. [ 108.878829][ T6263] bridge_slave_0: left allmulticast mode [ 108.918892][ T6263] bridge_slave_0: left promiscuous mode [ 108.927595][ T6263] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.983816][ T6263] bridge_slave_1: left allmulticast mode [ 109.005221][ T6263] bridge_slave_1: left promiscuous mode [ 109.028765][ T6263] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.041897][ T6274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.83'. [ 109.090998][ T6276] sctp: [Deprecated]: syz.2.84 (pid 6276) Use of int in max_burst socket option. [ 109.090998][ T6276] Use struct sctp_assoc_value instead [ 109.091613][ T6263] bond0: (slave bond_slave_0): Releasing backup interface [ 109.106886][ T6276] sctp: [Deprecated]: syz.2.84 (pid 6276) Use of int in max_burst socket option. [ 109.106886][ T6276] Use struct sctp_assoc_value instead [ 109.106945][ T6276] sctp: [Deprecated]: syz.2.84 (pid 6276) Use of int in max_burst socket option. [ 109.106945][ T6276] Use struct sctp_assoc_value instead [ 109.106971][ T6276] sctp: [Deprecated]: syz.2.84 (pid 6276) Use of int in max_burst socket option. [ 109.106971][ T6276] Use struct sctp_assoc_value instead [ 109.106996][ T6276] sctp: [Deprecated]: syz.2.84 (pid 6276) Use of int in max_burst socket option. [ 109.106996][ T6276] Use struct sctp_assoc_value instead [ 109.107021][ T6276] sctp: [Deprecated]: syz.2.84 (pid 6276) Use of int in max_burst socket option. [ 109.107021][ T6276] Use struct sctp_assoc_value instead [ 109.107046][ T6276] sctp: [Deprecated]: syz.2.84 (pid 6276) Use of int in max_burst socket option. [ 109.107046][ T6276] Use struct sctp_assoc_value instead [ 109.107068][ T6276] sctp: [Deprecated]: syz.2.84 (pid 6276) Use of int in max_burst socket option. [ 109.107068][ T6276] Use struct sctp_assoc_value instead [ 109.107091][ T6276] sctp: [Deprecated]: syz.2.84 (pid 6276) Use of int in max_burst socket option. [ 109.107091][ T6276] Use struct sctp_assoc_value instead [ 109.107116][ T6276] sctp: [Deprecated]: syz.2.84 (pid 6276) Use of int in max_burst socket option. [ 109.107116][ T6276] Use struct sctp_assoc_value instead [ 109.131742][ T6279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.83'. [ 109.281745][ T6263] bond0: (slave bond_slave_1): Releasing backup interface [ 109.324888][ T6263] team0: Port device team_slave_0 removed [ 109.339977][ T6263] team0: Port device team_slave_1 removed [ 109.347879][ T6263] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.355625][ T6263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.368373][ T6263] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.379911][ T6263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.645386][ T6294] netlink: 24 bytes leftover after parsing attributes in process `syz.1.89'. [ 109.689416][ T6294] netlink: 24 bytes leftover after parsing attributes in process `syz.1.89'. [ 109.804368][ T6299] netlink: 12 bytes leftover after parsing attributes in process `syz.2.91'. [ 109.866579][ T6298] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 109.896084][ T6314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.93'. [ 110.292948][ T6330] tipc: Invalid UDP bearer configuration [ 110.293024][ T6330] tipc: Enabling of bearer rejected, failed to enable media [ 110.337366][ T6330] netlink: 'syz.1.97': attribute type 20 has an invalid length. [ 110.373848][ T6330] netlink: 'syz.1.97': attribute type 20 has an invalid length. [ 110.386013][ T6335] netlink: 'syz.0.99': attribute type 18 has an invalid length. [ 110.414842][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.428712][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.450365][ T70] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.574911][ T70] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.580488][ T6336] syz.1.97 (6336) used greatest stack depth: 17448 bytes left [ 110.845601][ T6351] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 110.931542][ T6351] 0ªî{X¹¦: entered allmulticast mode [ 110.947355][ T6351] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 111.594337][ T6367] syzkaller0: entered promiscuous mode [ 111.617405][ T6367] syzkaller0: entered allmulticast mode [ 112.210914][ T6413] Driver unsupported XDP return value 0 on prog (id 22) dev N/A, expect packet loss! [ 113.273305][ T6398] team0: Device vti0 is of different type [ 113.355912][ T6424] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 113.425294][ T6424] bond2: entered promiscuous mode [ 113.607567][ T6433] team0: entered promiscuous mode [ 113.623373][ T6433] team_slave_0: entered promiscuous mode [ 113.634794][ T6433] team_slave_1: entered promiscuous mode [ 115.380738][ T6503] __nla_validate_parse: 11 callbacks suppressed [ 115.380759][ T6503] netlink: 40 bytes leftover after parsing attributes in process `syz.3.133'. [ 115.821058][ T6428] team0: left promiscuous mode [ 115.825900][ T6428] team_slave_0: left promiscuous mode [ 115.837014][ T6428] team_slave_1: left promiscuous mode [ 115.969622][ T6512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.134'. [ 116.021194][ T6512] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 116.096851][ T6512] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 116.283204][ T6529] : entered promiscuous mode [ 116.562157][ T6545] netlink: 12 bytes leftover after parsing attributes in process `syz.2.142'. [ 117.463863][ T6583] netlink: 32 bytes leftover after parsing attributes in process `syz.0.152'. [ 117.598919][ T6588] netlink: 'syz.3.154': attribute type 4 has an invalid length. [ 117.849834][ T6597] netlink: 32 bytes leftover after parsing attributes in process `syz.0.158'. [ 118.025924][ T6604] netlink: 'syz.4.161': attribute type 19 has an invalid length. [ 118.623797][ T6631] netlink: 'syz.1.169': attribute type 10 has an invalid length. [ 118.674737][ T6638] netlink: 'syz.3.172': attribute type 1 has an invalid length. [ 118.722860][ T6631] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 118.723448][ T6638] netlink: 48 bytes leftover after parsing attributes in process `syz.3.172'. [ 118.967408][ T6647] netlink: 152064 bytes leftover after parsing attributes in process `syz.4.174'. [ 118.995404][ T6647] netlink: zone id is out of range [ 118.999172][ T6645] geneve2: entered promiscuous mode [ 119.007983][ T6648] netlink: 108 bytes leftover after parsing attributes in process `syz.3.176'. [ 119.014073][ T6647] netlink: zone id is out of range [ 119.023078][ T6647] netlink: zone id is out of range [ 119.029257][ T6647] netlink: zone id is out of range [ 119.034684][ T6647] netlink: zone id is out of range [ 119.087731][ T6647] netlink: zone id is out of range [ 119.096468][ T6648] netlink: 108 bytes leftover after parsing attributes in process `syz.3.176'. [ 119.121773][ T6648] netlink: 108 bytes leftover after parsing attributes in process `syz.3.176'. [ 119.124693][ T6647] netlink: zone id is out of range [ 119.186781][ T6647] netlink: zone id is out of range [ 119.222458][ T6658] block nbd0: server does not support multiple connections per device. [ 119.251054][ T6658] block nbd0: shutting down sockets [ 119.552069][ T6679] Bluetooth: MGMT ver 1.23 [ 120.523998][ T6727] netlink: 'syz.1.197': attribute type 4 has an invalid length. [ 120.601612][ T6732] netlink: 'syz.3.198': attribute type 2 has an invalid length. [ 120.692997][ T6736] x_tables: ip_tables: MARK.2 target: invalid size 8 (kernel) != (user) 16 [ 120.837124][ T6738] __nla_validate_parse: 5 callbacks suppressed [ 120.837144][ T6738] netlink: 12 bytes leftover after parsing attributes in process `syz.4.202'. [ 120.940146][ T6747] netlink: 24 bytes leftover after parsing attributes in process `syz.0.204'. [ 121.060521][ T6748] netlink: 256 bytes leftover after parsing attributes in process `syz.4.202'. [ 121.096020][ T6748] netlink: 'syz.4.202': attribute type 9 has an invalid length. [ 121.998661][ T6796] netlink: 4 bytes leftover after parsing attributes in process `syz.1.214'. [ 122.100273][ T6796] netlink: 4 bytes leftover after parsing attributes in process `syz.1.214'. [ 122.312121][ T6808] netlink: 256 bytes leftover after parsing attributes in process `syz.4.219'. [ 122.334583][ T6804] netlink: 'syz.0.217': attribute type 10 has an invalid length. [ 122.443707][ T6804] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 122.483392][ T6807] delete_channel: no stack [ 122.497166][ T6807] delete_channel: no stack [ 122.698988][ T6825] netlink: 276 bytes leftover after parsing attributes in process `syz.1.220'. [ 122.908189][ T6830] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 122.918351][ T6830] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 122.997572][ T6831] netlink: 12 bytes leftover after parsing attributes in process `syz.3.216'. [ 122.997755][ T6832] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 123.033977][ T6832] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 123.112175][ T6831] xfrm1: entered promiscuous mode [ 123.117438][ T6831] xfrm1: entered allmulticast mode [ 123.443457][ T6853] net_ratelimit: 219 callbacks suppressed [ 123.443489][ T6853] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 123.509699][ T6853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.231'. [ 123.854943][ T6875] netlink: 56 bytes leftover after parsing attributes in process `syz.4.238'. [ 124.192484][ T6889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.205804][ T6889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.216346][ T6889] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.235900][ T6889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.612557][ T6910] mac80211_hwsim hwsim7 ÿ: renamed from wlan1 (while UP) [ 124.625086][ T6908] netlink: 'syz.0.249': attribute type 1 has an invalid length. [ 124.779242][ T6908] bond2 (unregistering): Released all slaves [ 124.882059][ T6916] ip6tnl3: entered promiscuous mode [ 124.922254][ T6916] ip6tnl3: entered allmulticast mode [ 125.275967][ T6943] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 125.467801][ T6951] Dead loop on virtual device ip6_vti0, fix it urgently! [ 125.475625][ T6951] Dead loop on virtual device ip6_vti0, fix it urgently! [ 125.483288][ T6951] Dead loop on virtual device ip6_vti0, fix it urgently! [ 125.491473][ T6951] Dead loop on virtual device ip6_vti0, fix it urgently! [ 125.498969][ T6951] Dead loop on virtual device ip6_vti0, fix it urgently! [ 125.506429][ T6951] Dead loop on virtual device ip6_vti0, fix it urgently! [ 125.604043][ T6959] dummy0: entered promiscuous mode [ 125.611501][ T6959] dummy0: left promiscuous mode [ 125.721521][ T6960] dvmrp1: entered allmulticast mode [ 126.034623][ T6981] netlink: 'syz.4.274': attribute type 1 has an invalid length. [ 126.054921][ T6980] sctp: [Deprecated]: syz.0.273 (pid 6980) Use of struct sctp_assoc_value in delayed_ack socket option. [ 126.054921][ T6980] Use struct sctp_sack_info instead [ 126.080500][ T6981] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.090142][ T6984] __nla_validate_parse: 7 callbacks suppressed [ 126.090162][ T6984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.274'. [ 126.135786][ T6980] syzkaller1: entered promiscuous mode [ 126.157361][ T6980] syzkaller1: entered allmulticast mode [ 126.171583][ T6980] netlink: 20 bytes leftover after parsing attributes in process `syz.0.273'. [ 126.182419][ T6981] netlink: 4 bytes leftover after parsing attributes in process `syz.4.274'. [ 126.183301][ T6980] netlink: 'syz.0.273': attribute type 1 has an invalid length. [ 126.212917][ T6980] netlink: 172 bytes leftover after parsing attributes in process `syz.0.273'. [ 126.222647][ T6980] netlink: 'syz.0.273': attribute type 1 has an invalid length. [ 126.247528][ T6981] veth3: entered promiscuous mode [ 126.258558][ T6981] bond1: (slave veth3): Enslaving as an active interface with a down link [ 126.569824][ T7000] netlink: 'syz.2.278': attribute type 4 has an invalid length. [ 126.639229][ T7005] netlink: 2 bytes leftover after parsing attributes in process `syz.4.280'. [ 126.645817][ T7000] netlink: 'syz.2.278': attribute type 4 has an invalid length. [ 126.729782][ T7000] netlink: zone id is out of range [ 126.735194][ T7000] netlink: zone id is out of range [ 127.039505][ T7025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.286'. [ 127.402094][ T7038] bond1: entered promiscuous mode [ 127.411297][ T7053] netlink: 'syz.4.293': attribute type 10 has an invalid length. [ 127.442307][ T7038] bond1: entered allmulticast mode [ 127.465946][ T7038] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.753598][ T7053] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 127.831648][ T7068] netlink: 24 bytes leftover after parsing attributes in process `syz.0.299'. [ 127.968706][ T7078] netlink: 'syz.2.303': attribute type 1 has an invalid length. [ 127.982198][ T7078] netlink: 244 bytes leftover after parsing attributes in process `syz.2.303'. [ 128.288278][ T7094] netlink: 28 bytes leftover after parsing attributes in process `syz.1.305'. [ 128.317013][ T7094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.305'. [ 128.992112][ T7123] : entered promiscuous mode [ 129.839710][ T7167] syzkaller1: entered promiscuous mode [ 129.845284][ T7167] syzkaller1: entered allmulticast mode [ 129.852407][ T7173] netlink: 'syz.3.327': attribute type 1 has an invalid length. [ 130.499738][ T7196] netlink: 'syz.1.333': attribute type 3 has an invalid length. [ 130.548354][ T7196] netlink: 'syz.1.333': attribute type 1 has an invalid length. [ 131.362046][ T7225] __nla_validate_parse: 8 callbacks suppressed [ 131.362068][ T7225] netlink: 4 bytes leftover after parsing attributes in process `syz.4.341'. [ 131.388666][ T7226] netlink: 12 bytes leftover after parsing attributes in process `syz.2.340'. [ 131.412522][ T7225] netlink: 12 bytes leftover after parsing attributes in process `syz.4.341'. [ 131.754247][ T7245] netlink: 'syz.0.346': attribute type 1 has an invalid length. [ 131.762320][ T7245] netlink: 24 bytes leftover after parsing attributes in process `syz.0.346'. [ 131.984694][ T7251] net_ratelimit: 1 callbacks suppressed [ 131.984713][ T7251] erspan0: mtu less than device minimum [ 132.066171][ T7261] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 132.080279][ T7261] netlink: 12 bytes leftover after parsing attributes in process `syz.0.348'. [ 132.289605][ T7274] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.306370][ T7274] Bluetooth: MGMT ver 1.23 [ 132.336154][ T7274] netlink: 12 bytes leftover after parsing attributes in process `syz.3.349'. [ 132.563589][ T7288] netlink: 24 bytes leftover after parsing attributes in process `syz.4.355'. [ 132.593992][ T7291] netlink: 'syz.2.353': attribute type 39 has an invalid length. [ 132.594163][ T7288] netlink: 4 bytes leftover after parsing attributes in process `syz.4.355'. [ 133.096305][ T7305] netlink: 'syz.0.359': attribute type 2 has an invalid length. [ 133.132094][ T7305] netlink: 16 bytes leftover after parsing attributes in process `syz.0.359'. [ 133.166363][ T7314] netlink: 11 bytes leftover after parsing attributes in process `syz.3.360'. [ 133.415204][ T7324] netlink: 'syz.2.364': attribute type 2 has an invalid length. [ 133.726006][ T7337] macvlan2: entered promiscuous mode [ 133.733402][ T7337] macvlan2: entered allmulticast mode [ 133.915331][ T7344] netlink: 'syz.2.370': attribute type 1 has an invalid length. [ 134.499729][ T7372] netlink: 'syz.0.378': attribute type 8 has an invalid length. [ 134.718725][ T7383] openvswitch: netlink: Message has 4 unknown bytes. [ 134.742836][ T7383] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 134.951797][ T7396] netlink: 'syz.0.383': attribute type 23 has an invalid length. [ 135.224330][ T7405] netlink: 'syz.0.387': attribute type 1 has an invalid length. [ 135.334123][ T7419] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 135.403500][ T7405] 8021q: adding VLAN 0 to HW filter on device bond2 [ 135.507162][ T7410] netlink: 'syz.3.389': attribute type 1 has an invalid length. [ 135.524649][ T7410] netlink: 'syz.3.389': attribute type 1 has an invalid length. [ 135.533968][ T7410] netlink: 'syz.3.389': attribute type 2 has an invalid length. [ 135.548974][ T7417] 8021q: adding VLAN 0 to HW filter on device bond2 [ 135.557115][ T7417] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 135.592312][ T7417] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 135.715747][ T7431] bond0: entered promiscuous mode [ 135.744474][ T7431] bond_slave_0: entered promiscuous mode [ 135.775811][ T7431] bond_slave_1: entered promiscuous mode [ 136.520744][ T7466] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.720354][ T7475] __nla_validate_parse: 11 callbacks suppressed [ 136.720376][ T7475] netlink: 44 bytes leftover after parsing attributes in process `syz.1.405'. [ 136.771541][ T7483] netlink: 44 bytes leftover after parsing attributes in process `syz.1.405'. [ 136.913359][ T7494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.409'. [ 137.487787][ T7522] netlink: 'syz.4.416': attribute type 4 has an invalid length. [ 137.518048][ T7522] netlink: 12 bytes leftover after parsing attributes in process `syz.4.416'. [ 137.610801][ T7529] netlink: 164 bytes leftover after parsing attributes in process `syz.1.419'. [ 137.772904][ T7537] netlink: 'syz.2.421': attribute type 1 has an invalid length. [ 137.802315][ T7537] netlink: 224 bytes leftover after parsing attributes in process `syz.2.421'. [ 138.080099][ T7552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.424'. [ 138.126531][ T7552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.424'. [ 138.200481][ T7552] netlink: 'syz.1.424': attribute type 11 has an invalid length. [ 138.292143][ T7552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.424'. [ 138.318154][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.687491][ T7581] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 138.971387][ T7592] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 139.183742][ T7602] team0: Device wireguard0 is of different type [ 139.425076][ T7621] netlink: 'syz.2.443': attribute type 11 has an invalid length. [ 139.438491][ T7621] netlink: 'syz.2.443': attribute type 11 has an invalid length. [ 139.449389][ T7621] netlink: 152 bytes leftover after parsing attributes in process `syz.2.443'. [ 139.612567][ T7627] netlink: 'syz.4.445': attribute type 1 has an invalid length. [ 139.670294][ T7627] nbd: couldn't find device at index 1048576 [ 139.884009][ T7640] netlink: 'syz.3.449': attribute type 3 has an invalid length. [ 140.750527][ T7676] netem: incorrect gi model size [ 140.780927][ T7676] netem: change failed [ 140.857579][ T7676] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 141.229576][ T7709] pim6reg1: entered promiscuous mode [ 141.241907][ T7709] pim6reg1: entered allmulticast mode [ 141.297359][ T7713] netlink: 'syz.3.464': attribute type 3 has an invalid length. [ 141.760801][ T7728] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 141.776286][ T7727] __nla_validate_parse: 8 callbacks suppressed [ 141.776307][ T7727] netlink: 12 bytes leftover after parsing attributes in process `syz.4.469'. [ 141.895745][ T7727] bond0: entered promiscuous mode [ 141.905351][ T7727] bond_slave_0: entered promiscuous mode [ 141.912551][ T7727] bond_slave_1: entered promiscuous mode [ 141.922364][ T7727] dummy0: entered promiscuous mode [ 141.933524][ T7727] bond0: left promiscuous mode [ 141.941930][ T7727] bond_slave_0: left promiscuous mode [ 141.949379][ T7727] bond_slave_1: left promiscuous mode [ 141.955147][ T7727] dummy0: left promiscuous mode [ 143.122852][ T7778] veth0: entered promiscuous mode [ 143.239867][ T7778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.484'. [ 143.588466][ T7798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.653195][ T7798] bond0: (slave rose0): Enslaving as an active interface with an up link [ 143.678072][ T7807] netlink: 'syz.0.490': attribute type 2 has an invalid length. [ 143.793657][ T7794] netlink: 144 bytes leftover after parsing attributes in process `syz.3.486'. [ 143.874545][ T7816] netlink: 10 bytes leftover after parsing attributes in process `syz.4.491'. [ 143.920880][ T7816] netlink: 'syz.4.491': attribute type 1 has an invalid length. [ 144.179225][ T7827] bridge_slave_0: default FDB implementation only supports local addresses [ 145.266188][ T7882] netlink: 'syz.4.508': attribute type 21 has an invalid length. [ 145.285492][ T7885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.507'. [ 145.490998][ T7893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.504'. [ 145.806175][ T7871] bond2: left promiscuous mode [ 145.816588][ T7871] geneve2: left promiscuous mode [ 145.857555][ T7882] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 145.907456][ T5961] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.916399][ T5961] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.975193][ T36] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.037662][ T36] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.084481][ T7905] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 146.190165][ T36] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.224704][ T36] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.256532][ T7912] netlink: 12 bytes leftover after parsing attributes in process `syz.4.511'. [ 146.310452][ T36] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.362157][ T36] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.550637][ T7935] netlink: 28 bytes leftover after parsing attributes in process `syz.4.517'. [ 146.560925][ T7934] netlink: 16 bytes leftover after parsing attributes in process `syz.0.516'. [ 146.592613][ T7938] netlink: 24 bytes leftover after parsing attributes in process `syz.2.518'. [ 146.621194][ T7935] gretap0: entered promiscuous mode [ 146.650779][ T7935] batadv_slave_1: entered promiscuous mode [ 146.947911][ T7956] netlink: 'syz.0.521': attribute type 16 has an invalid length. [ 146.955807][ T7956] netlink: 'syz.0.521': attribute type 17 has an invalid length. [ 147.110200][ T7956] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 147.204836][ T7975] __nla_validate_parse: 1 callbacks suppressed [ 147.204858][ T7975] netlink: 12 bytes leftover after parsing attributes in process `syz.4.526'. [ 147.491892][ T7988] batadv_slave_0: mtu greater than device maximum [ 147.533404][ T7985] tipc: Started in network mode [ 147.539220][ T7985] tipc: Node identity 42750b65bf4f, cluster identity 4711 [ 147.547351][ T7985] tipc: Enabled bearer , priority 0 [ 147.836376][ T7996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.531'. [ 147.885801][ T7985] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 147.886547][ T7998] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 147.938253][ T7998] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 147.950430][ T8002] netlink: 32 bytes leftover after parsing attributes in process `syz.2.533'. [ 147.962733][ T7998] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 148.029451][ T7983] tipc: Disabling bearer [ 148.177939][ T8011] netlink: 44 bytes leftover after parsing attributes in process `syz.1.535'. [ 148.305075][ T8016] netlink: 'syz.4.537': attribute type 21 has an invalid length. [ 148.333907][ T8016] netlink: 156 bytes leftover after parsing attributes in process `syz.4.537'. [ 148.515186][ T8027] IPVS: Unknown mcast interface: vcan0 [ 148.586006][ T8027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.540'. [ 148.621719][ T8027] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.918331][ T8027] bridge_slave_1 (unregistering): left allmulticast mode [ 148.925449][ T8027] bridge_slave_1 (unregistering): left promiscuous mode [ 149.008817][ T8027] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.309392][ T8045] netlink: 24 bytes leftover after parsing attributes in process `syz.1.544'. [ 149.824499][ T8068] netlink: 16 bytes leftover after parsing attributes in process `syz.4.551'. [ 149.875360][ T8070] openvswitch: netlink: IPv6 tunnel dst address is zero [ 149.929494][ T8067] netlink: 16 bytes leftover after parsing attributes in process `syz.4.551'. [ 150.046310][ T8077] openvswitch: netlink: Key type 85 is out of range max 32 [ 150.099966][ T8077] netlink: 96 bytes leftover after parsing attributes in process `syz.0.553'. [ 150.164378][ T8077] vlan2: entered allmulticast mode [ 150.202278][ T8077] gretap0: entered allmulticast mode [ 150.372312][ T8092] syzkaller0: entered promiscuous mode [ 150.379029][ T8092] syzkaller0: entered allmulticast mode [ 150.656221][ T8106] bridge1: entered promiscuous mode [ 150.675088][ T8106] bridge1: entered allmulticast mode [ 150.722900][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 150.752795][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 150.763857][ T5903] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 150.808930][ T8117] netlink: 'syz.2.566': attribute type 1 has an invalid length. [ 151.056932][ T5903] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 151.225162][ T8137] tipc: Started in network mode [ 151.244105][ T8137] tipc: Node identity 5a64a5d29b55, cluster identity 4711 [ 151.258331][ T8137] tipc: Enabled bearer , priority 0 [ 151.265195][ T5903] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 151.280707][ T8141] syzkaller0: entered promiscuous mode [ 151.300820][ T8141] syzkaller0: entered allmulticast mode [ 151.485422][ T8137] tipc: Resetting bearer [ 151.530510][ T8134] tipc: Resetting bearer [ 151.558186][ T8134] tipc: Disabling bearer [ 151.939636][ T8170] netlink: 'syz.2.580': attribute type 7 has an invalid length. [ 152.008067][ T8170] netlink: 'syz.2.580': attribute type 8 has an invalid length. [ 152.474538][ T8193] __nla_validate_parse: 11 callbacks suppressed [ 152.474559][ T8193] netlink: 12 bytes leftover after parsing attributes in process `syz.4.587'. [ 152.720966][ T8200] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.003249][ T8219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.595'. [ 153.155233][ T8223] netlink: 'syz.1.597': attribute type 2 has an invalid length. [ 153.383547][ T8234] netlink: 68 bytes leftover after parsing attributes in process `syz.4.600'. [ 153.475699][ T8230] netlink: 28 bytes leftover after parsing attributes in process `syz.1.601'. [ 153.476998][ T8240] netlink: 36 bytes leftover after parsing attributes in process `syz.3.602'. [ 153.928805][ T8262] netlink: 80 bytes leftover after parsing attributes in process `syz.1.609'. [ 154.012377][ T8269] team0: Device gtp0 is of different type [ 154.362113][ T8296] netlink: 12 bytes leftover after parsing attributes in process `syz.1.613'. [ 154.948698][ T8328] tipc: Enabling of bearer rejected, failed to enable media [ 154.962884][ T8325] netlink: 'syz.2.623': attribute type 1 has an invalid length. [ 154.990948][ T8325] netlink: 172 bytes leftover after parsing attributes in process `syz.2.623'. [ 155.016923][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 155.036747][ T8325] netlink: 'syz.2.623': attribute type 1 has an invalid length. [ 155.066949][ T8330] tipc: Enabling of bearer rejected, failed to enable media [ 155.324315][ T8345] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 155.487750][ T8350] netlink: 92 bytes leftover after parsing attributes in process `syz.3.630'. [ 155.755075][ T8362] netlink: 12 bytes leftover after parsing attributes in process `syz.4.635'. [ 156.154889][ T8363] netlink: 'syz.4.635': attribute type 5 has an invalid length. [ 156.371244][ T8373] geneve3: entered promiscuous mode [ 156.470158][ T8377] 8021q: VLANs not supported on xfrm0 [ 156.724449][ T59] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 156.912693][ T8407] syzkaller0: entered promiscuous mode [ 156.941624][ T8407] syzkaller0: entered allmulticast mode [ 156.954501][ T8405] tipc: Started in network mode [ 156.980374][ T8405] tipc: Node identity 16b7a5907d87, cluster identity 4711 [ 156.989366][ T8405] tipc: Enabled bearer , priority 0 [ 157.098512][ T8405] tipc: Resetting bearer [ 157.153936][ T8405] tipc: Disabling bearer [ 157.342596][ T8432] netlink: 'syz.3.656': attribute type 1 has an invalid length. [ 157.589712][ T8440] netlink: 'syz.3.661': attribute type 1 has an invalid length. [ 157.632569][ T8440] __nla_validate_parse: 4 callbacks suppressed [ 157.632586][ T8440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.661'. [ 157.649507][ T8440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.661'. [ 157.666461][ T8440] netlink: 'syz.3.661': attribute type 11 has an invalid length. [ 157.741031][ T8448] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 157.844706][ T8453] ieee802154 phy0 wpan0: encryption failed: -22 [ 157.939401][ T8461] netlink: 36 bytes leftover after parsing attributes in process `syz.3.667'. [ 158.080008][ T8471] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 158.114515][ T8472] syzkaller1: entered promiscuous mode [ 158.134921][ T8472] syzkaller1: entered allmulticast mode [ 158.282342][ T8479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.674'. [ 158.480332][ T8489] netlink: 'syz.2.678': attribute type 1 has an invalid length. [ 158.520158][ T8489] 8021q: adding VLAN 0 to HW filter on device bond1 [ 158.592158][ T8489] veth5: entered promiscuous mode [ 158.654363][ T8494] netlink: 11 bytes leftover after parsing attributes in process `syz.4.681'. [ 158.669986][ T8494] netlink: 11 bytes leftover after parsing attributes in process `syz.4.681'. [ 158.783909][ T8505] ieee802154 phy0 wpan0: encryption failed: -22 [ 158.935349][ T8509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.683'. [ 159.004843][ T8509] netlink: 44 bytes leftover after parsing attributes in process `syz.0.683'. [ 159.021582][ T8516] lo: entered promiscuous mode [ 159.053180][ T8516] netlink: 'syz.3.685': attribute type 2 has an invalid length. [ 159.102453][ T8516] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 159.128195][ T8517] netlink: 'syz.3.685': attribute type 2 has an invalid length. [ 159.160780][ T8517] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 159.764201][ T8550] netlink: 68 bytes leftover after parsing attributes in process `syz.4.692'. [ 159.831573][ T8552] netlink: 'syz.4.692': attribute type 3 has an invalid length. [ 159.831573][ T8550] netlink: 'syz.4.692': attribute type 3 has an invalid length. [ 160.370300][ T8566] netlink: 24 bytes leftover after parsing attributes in process `syz.3.697'. [ 160.424648][ T8566] openvswitch: netlink: Actions may not be safe on all matching packets [ 160.468633][ T8573] smc: net device bond0 applied user defined pnetid SYZ2 [ 160.616941][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 160.743450][ T5960] IPVS: starting estimator thread 0... [ 160.760363][ T8586] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 160.814283][ T8591] netlink: 'syz.1.706': attribute type 1 has an invalid length. [ 160.928646][ T8586] sch_fq: defrate 0 ignored. [ 160.959427][ T8589] IPVS: using max 23 ests per chain, 55200 per kthread [ 162.722603][ T8658] netlink: 'syz.3.723': attribute type 1 has an invalid length. [ 162.774711][ T8655] __nla_validate_parse: 6 callbacks suppressed [ 162.774732][ T8655] netlink: 32 bytes leftover after parsing attributes in process `syz.3.723'. [ 162.802247][ T8658] bond2: entered promiscuous mode [ 162.836962][ T8658] 8021q: adding VLAN 0 to HW filter on device bond2 [ 163.175896][ T8679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.727'. [ 163.179008][ T8681] netlink: 24 bytes leftover after parsing attributes in process `syz.0.730'. [ 163.206410][ T8682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.729'. [ 163.256907][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 163.293449][ T8687] netlink: 'syz.1.731': attribute type 32 has an invalid length. [ 163.305867][ T8687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.731'. [ 163.351292][ T8679] macvtap1: entered promiscuous mode [ 163.356812][ T8679] vlan0: entered promiscuous mode [ 163.362460][ T8679] macvtap1: entered allmulticast mode [ 163.368388][ T8679] vlan0: entered allmulticast mode [ 163.373711][ T8679] veth0_vlan: entered allmulticast mode [ 163.414568][ T8687] (unnamed net_device) (uninitialized): option coupled_control: invalid value (9) [ 163.435045][ T8694] netlink: 256 bytes leftover after parsing attributes in process `syz.3.732'. [ 163.476101][ T8689] bridge0: entered allmulticast mode [ 163.501826][ T8697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.733'. [ 163.531718][ T8698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.733'. [ 163.721618][ T8709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.735'. [ 163.882141][ T8701] bond2: entered promiscuous mode [ 163.890475][ T8701] bond2: entered allmulticast mode [ 163.901388][ T8701] 8021q: adding VLAN 0 to HW filter on device bond2 [ 164.091551][ T8701] bond2 (unregistering): Released all slaves [ 164.280218][ T8734] netlink: 24 bytes leftover after parsing attributes in process `syz.1.743'. [ 164.398529][ T8738] netlink: 'syz.3.745': attribute type 23 has an invalid length. [ 164.455125][ T8738] netlink: 'syz.3.745': attribute type 23 has an invalid length. [ 164.678061][ T8743] trusted_key: syz.0.747 sent an empty control message without MSG_MORE. [ 164.865966][ T8754] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 164.914502][ T8754] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 164.985486][ T8765] netlink: 'syz.3.755': attribute type 1 has an invalid length. [ 165.296059][ T8777] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 165.867534][ T8802] smc: net device erspan0 applied user defined pnetid SYZ0 [ 166.175353][ T8816] netlink: 'syz.3.771': attribute type 1 has an invalid length. [ 166.390291][ T8819] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 166.892238][ T8832] netlink: 'syz.3.776': attribute type 1 has an invalid length. [ 166.936757][ T8832] netlink: 'syz.3.776': attribute type 11 has an invalid length. [ 167.461446][ T8861] bond0: (slave dummy0): Releasing backup interface [ 167.530671][ T8861] bridge_slave_0: left allmulticast mode [ 167.544113][ T8861] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.574753][ T8861] bridge_slave_1: left allmulticast mode [ 167.584723][ T8861] bridge_slave_1: left promiscuous mode [ 167.591155][ T8861] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.611170][ T8861] bond0: (slave bond_slave_0): Releasing backup interface [ 167.648483][ T8861] bond0: (slave bond_slave_1): Releasing backup interface [ 167.689189][ T8861] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.698683][ T8861] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.730317][ T8861] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.752309][ T8861] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.777789][ T8861] bond1: (slave veth3): Releasing active interface [ 167.926147][ T8875] __nla_validate_parse: 10 callbacks suppressed [ 167.926168][ T8875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.788'. [ 167.972247][ T8875] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 167.992451][ T8875] netlink: 184 bytes leftover after parsing attributes in process `syz.2.788'. [ 168.235378][ T8888] netlink: 12 bytes leftover after parsing attributes in process `syz.0.792'. [ 168.376870][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 168.578811][ T8906] netlink: 4 bytes leftover after parsing attributes in process `syz.0.798'. [ 168.728439][ T8909] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 168.759519][ T8909] netlink: 'syz.4.799': attribute type 28 has an invalid length. [ 168.780236][ T8909] netlink: 'syz.4.799': attribute type 3 has an invalid length. [ 168.794869][ T8909] netlink: 132 bytes leftover after parsing attributes in process `syz.4.799'. [ 168.840625][ T8911] 8021q: adding VLAN 0 to HW filter on device bond2 [ 169.063024][ T8918] syzkaller0: entered promiscuous mode [ 169.068727][ T8918] syzkaller0: entered allmulticast mode [ 169.116390][ T8921] bond0: entered promiscuous mode [ 169.122743][ T8921] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 169.140131][ T8921] batadv0: entered promiscuous mode [ 169.146508][ T8921] debugfs: 'hsr1' already exists in 'hsr' [ 169.154284][ T8921] Cannot create hsr debugfs directory [ 169.168321][ T8921] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 169.182227][ T8921] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 169.194590][ T8921] hsr1: entered allmulticast mode [ 169.203117][ T8921] bond0: entered allmulticast mode [ 169.210161][ T8921] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 169.254298][ T8921] batadv0: entered allmulticast mode [ 169.260716][ T8921] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 169.277795][ T8921] bond0: left promiscuous mode [ 169.290253][ T8921] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 169.299628][ T8921] batadv0: left promiscuous mode [ 171.666599][ T8953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.808'. [ 172.214576][ T8977] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 172.263223][ T8977] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 172.434770][ T8990] pimreg3: entered allmulticast mode [ 172.659930][ T8993] netlink: 'syz.1.821': attribute type 1 has an invalid length. [ 172.687094][ T9000] netlink: 16 bytes leftover after parsing attributes in process `syz.0.820'. [ 172.696407][ T8993] netlink: 244 bytes leftover after parsing attributes in process `syz.1.821'. [ 172.952089][ T9013] netlink: 168 bytes leftover after parsing attributes in process `syz.2.825'. [ 172.962959][ T9009] openvswitch: netlink: Multiple metadata blocks provided [ 172.971170][ T9015] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.826'. [ 172.991937][ T9009] batadv0: entered allmulticast mode [ 173.004415][ T9009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.824'. [ 173.079450][ T9020] netlink: 28 bytes leftover after parsing attributes in process `syz.3.827'. [ 173.101209][ T9021] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 173.590369][ T9042] netlink: 12 bytes leftover after parsing attributes in process `syz.4.834'. [ 173.801958][ T9051] netlink: 12 bytes leftover after parsing attributes in process `syz.4.838'. [ 173.864955][ T9057] netlink: 20 bytes leftover after parsing attributes in process `syz.1.839'. [ 174.064901][ T9061] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.115071][ T9061] syz.4.840 uses old SIOCAX25GETINFO [ 174.169123][ T9066] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.842'. [ 174.261002][ T9067] netlink: 36 bytes leftover after parsing attributes in process `syz.1.842'. [ 174.362189][ T9079] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.784037][ T9097] netlink: 80 bytes leftover after parsing attributes in process `syz.0.850'. [ 174.901773][ T9109] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20003 [ 175.205826][ T9119] netlink: 'syz.2.854': attribute type 14 has an invalid length. [ 175.231979][ T9119] netlink: 'syz.2.854': attribute type 13 has an invalid length. [ 175.618059][ T9131] ieee802154 phy0 wpan0: encryption failed: -22 [ 175.650490][ T9131] block nbd1: Unsupported socket: shutdown callout must be supported. [ 175.725236][ T9134] tipc: Started in network mode [ 175.755321][ T9134] tipc: Node identity eaf4d05e1bc6, cluster identity 4711 [ 175.789778][ T9134] tipc: Enabled bearer , priority 0 [ 175.808104][ T9133] tipc: Enabling of bearer rejected, already enabled [ 176.076564][ T9138] syzkaller0: entered promiscuous mode [ 176.083103][ T9138] syzkaller0: entered allmulticast mode [ 176.105507][ T9138] tipc: Resetting bearer [ 176.132296][ T9151] netem: incorrect gi model size [ 176.153182][ T9151] netem: change failed [ 176.204856][ T9138] tipc: Resetting bearer [ 176.798842][ T5960] tipc: Node number set to 4046639198 [ 178.095632][ T9138] tipc: Disabling bearer [ 178.193445][ T9206] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 178.282570][ T9215] veth0: entered promiscuous mode [ 178.284383][ T9217] __nla_validate_parse: 7 callbacks suppressed [ 178.284405][ T9217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.884'. [ 178.288771][ T9212] veth0: left promiscuous mode [ 178.410766][ T9225] netlink: 'syz.4.887': attribute type 1 has an invalid length. [ 178.512772][ T9222] 8021q: adding VLAN 0 to HW filter on device bond5 [ 178.518886][ T9225] netlink: 28 bytes leftover after parsing attributes in process `syz.4.887'. [ 178.526234][ T9222] bond4: (slave bond5): making interface the new active one [ 178.538627][ T9222] bond4: (slave bond5): Enslaving as an active interface with an up link [ 178.553801][ T9225] 8021q: adding VLAN 0 to HW filter on device bond4 [ 178.641963][ T9237] wlan1 speed is unknown, defaulting to 1000 [ 178.648713][ T9237] wlan1 speed is unknown, defaulting to 1000 [ 178.658156][ T9237] wlan1 speed is unknown, defaulting to 1000 [ 178.670778][ T9237] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 178.686547][ T9237] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 178.721077][ T9237] wlan1 speed is unknown, defaulting to 1000 [ 178.731468][ T9237] wlan1 speed is unknown, defaulting to 1000 [ 178.740075][ T9237] wlan1 speed is unknown, defaulting to 1000 [ 178.749116][ T9237] wlan1 speed is unknown, defaulting to 1000 [ 178.757915][ T9237] wlan1 speed is unknown, defaulting to 1000 [ 179.006965][ T9226] netlink: 4 bytes leftover after parsing attributes in process `syz.0.886'. [ 179.016236][ T9226] netlink: 4 bytes leftover after parsing attributes in process `syz.0.886'. [ 179.212900][ T9246] netlink: 44 bytes leftover after parsing attributes in process `syz.4.891'. [ 179.461460][ T9259] netlink: 20 bytes leftover after parsing attributes in process `syz.4.897'. [ 179.498026][ T9259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.897'. [ 179.612808][ T9262] netlink: 'syz.3.899': attribute type 1 has an invalid length. [ 179.633722][ T9262] netlink: 244 bytes leftover after parsing attributes in process `syz.3.899'. [ 179.848354][ T9273] netlink: 28 bytes leftover after parsing attributes in process `syz.4.903'. [ 179.897078][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 180.022764][ T9284] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave [ 180.041683][ T9284] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 180.112116][ T9282] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 180.152937][ T9282] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 180.216446][ T9294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.908'. [ 181.086394][ T9344] openvswitch: netlink: Key type 85 is out of range max 32 [ 181.276098][ T9356] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !å¿¿$ûÌÌUL…D£øßDŒw˜}zR3âëp(@ [ 181.454843][ T9354] sysfs: cannot create duplicate filename '/class/ieee80211/!å¿¿$ûÌÌUL…D£øßDŒw˜}zR3âëp(@Ož>ÆÀ–PÛ' [ 181.469826][ T9354] CPU: 0 UID: 0 PID: 9354 Comm: syz.0.926 Not tainted 6.16.0-syzkaller-12084-g33caa208dba6 #0 PREEMPT(full) [ 181.469857][ T9354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 181.469877][ T9354] Call Trace: [ 181.469886][ T9354] [ 181.469896][ T9354] dump_stack_lvl+0x189/0x250 [ 181.469933][ T9354] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.469961][ T9354] ? __pfx__printk+0x10/0x10 [ 181.469994][ T9354] ? __rcu_read_unlock+0x84/0xe0 [ 181.470024][ T9354] ? kernfs_path_from_node+0x2f/0x290 [ 181.470049][ T9354] ? kernfs_path_from_node+0x250/0x290 [ 181.470071][ T9354] ? kernfs_path_from_node+0x2f/0x290 [ 181.470100][ T9354] sysfs_warn_dup+0x8e/0xa0 [ 181.470122][ T9354] sysfs_do_create_link_sd+0xc0/0x110 [ 181.470149][ T9354] device_add_class_symlinks+0x1cf/0x240 [ 181.470187][ T9354] device_add+0x475/0xb50 [ 181.470224][ T9354] wiphy_register+0x1ba6/0x28d0 [ 181.470272][ T9354] ? __pfx_wiphy_register+0x10/0x10 [ 181.470298][ T9354] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 181.470341][ T9354] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 181.470379][ T9354] ieee80211_register_hw+0x3425/0x4080 [ 181.470434][ T9354] ? ieee80211_register_hw+0x1451/0x4080 [ 181.470478][ T9354] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 181.470517][ T9354] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 181.470552][ T9354] ? __hrtimer_setup+0x187/0x210 [ 181.470571][ T9354] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 181.470602][ T9354] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 181.470658][ T9354] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 181.470687][ T9354] ? trace_kmalloc+0x1f/0xd0 [ 181.470714][ T9354] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 181.470744][ T9354] ? kstrndup+0xbf/0x160 [ 181.470775][ T9354] hwsim_new_radio_nl+0xea4/0x1b10 [ 181.470803][ T9354] ? __pfx___nla_validate_parse+0x10/0x10 [ 181.470855][ T9354] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 181.470893][ T9354] ? __nla_parse+0x40/0x60 [ 181.470926][ T9354] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 181.470959][ T9354] genl_family_rcv_msg_doit+0x215/0x300 [ 181.470989][ T9354] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 181.471026][ T9354] ? bpf_lsm_capable+0x9/0x20 [ 181.471055][ T9354] ? security_capable+0x7e/0x2e0 [ 181.471090][ T9354] genl_rcv_msg+0x60e/0x790 [ 181.471120][ T9354] ? __pfx_genl_rcv_msg+0x10/0x10 [ 181.471141][ T9354] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 181.471183][ T9354] netlink_rcv_skb+0x205/0x470 [ 181.471209][ T9354] ? __lock_acquire+0xab9/0xd20 [ 181.471242][ T9354] ? __pfx_genl_rcv_msg+0x10/0x10 [ 181.471266][ T9354] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 181.471318][ T9354] ? down_read+0x1ad/0x2e0 [ 181.471351][ T9354] genl_rcv+0x28/0x40 [ 181.471383][ T9354] netlink_unicast+0x82c/0x9e0 [ 181.471420][ T9354] ? __pfx_netlink_unicast+0x10/0x10 [ 181.471448][ T9354] ? netlink_sendmsg+0x642/0xb30 [ 181.471475][ T9354] ? skb_put+0x11b/0x210 [ 181.471510][ T9354] netlink_sendmsg+0x805/0xb30 [ 181.471551][ T9354] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.471585][ T9354] ? aa_sock_msg_perm+0xf1/0x1d0 [ 181.471641][ T9354] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 181.471665][ T9354] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.471702][ T9354] __sock_sendmsg+0x219/0x270 [ 181.471731][ T9354] ____sys_sendmsg+0x505/0x830 [ 181.471771][ T9354] ? __pfx_____sys_sendmsg+0x10/0x10 [ 181.471814][ T9354] ? import_iovec+0x74/0xa0 [ 181.471838][ T9354] ___sys_sendmsg+0x21f/0x2a0 [ 181.471873][ T9354] ? __pfx____sys_sendmsg+0x10/0x10 [ 181.471948][ T9354] ? __fget_files+0x2a/0x420 [ 181.471978][ T9354] ? __fget_files+0x3a0/0x420 [ 181.472024][ T9354] __x64_sys_sendmsg+0x19b/0x260 [ 181.472061][ T9354] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 181.472107][ T9354] ? rcu_is_watching+0x15/0xb0 [ 181.472134][ T9354] ? do_syscall_64+0xbe/0x3b0 [ 181.472168][ T9354] do_syscall_64+0xfa/0x3b0 [ 181.472195][ T9354] ? lockdep_hardirqs_on+0x9c/0x150 [ 181.472221][ T9354] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.472243][ T9354] ? clear_bhb_loop+0x60/0xb0 [ 181.472270][ T9354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.472291][ T9354] RIP: 0033:0x7fb9fd38ebe9 [ 181.472323][ T9354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.472342][ T9354] RSP: 002b:00007fb9fb5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 181.472368][ T9354] RAX: ffffffffffffffda RBX: 00007fb9fd5b5fa0 RCX: 00007fb9fd38ebe9 [ 181.472384][ T9354] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000f [ 181.472397][ T9354] RBP: 00007fb9fd411e19 R08: 0000000000000000 R09: 0000000000000000 [ 181.472410][ T9354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.472422][ T9354] R13: 00007fb9fd5b6038 R14: 00007fb9fd5b5fa0 R15: 00007fff472365c8 [ 181.472457][ T9354] [ 182.309645][ T9387] bridge_slave_1: left allmulticast mode [ 182.315542][ T9387] bridge_slave_1: left promiscuous mode [ 182.341850][ T9387] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.362609][ T9396] netlink: 'syz.1.938': attribute type 1 has an invalid length. [ 182.404713][ T9387] bridge_slave_0: left allmulticast mode [ 182.411347][ T9387] bridge_slave_0: left promiscuous mode [ 182.417791][ T9387] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.612301][ T9407] openvswitch: netlink: IP tunnel TTL not specified. [ 182.630093][ T9396] 8021q: adding VLAN 0 to HW filter on device bond3 [ 182.683699][ T9404] bond3: (slave gretap1): making interface the new active one [ 182.694934][ T9404] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 183.345337][ T9442] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.393322][ T9444] netlink: 'syz.3.950': attribute type 1 has an invalid length. [ 183.402797][ T9444] netlink: 'syz.3.950': attribute type 2 has an invalid length. [ 183.493362][ T9448] netlink: 'syz.2.952': attribute type 8 has an invalid length. [ 183.682325][ T9456] __nla_validate_parse: 8 callbacks suppressed [ 183.682345][ T9456] netlink: 4 bytes leftover after parsing attributes in process `syz.0.955'. [ 183.702747][ T9455] netlink: 4 bytes leftover after parsing attributes in process `syz.0.955'. [ 183.737054][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 184.053806][ T9467] netlink: 'syz.0.959': attribute type 16 has an invalid length. [ 184.064410][ T9467] netlink: 'syz.0.959': attribute type 17 has an invalid length. [ 184.091466][ T9467] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 184.132123][ T9467] netlink: 'syz.0.959': attribute type 11 has an invalid length. [ 184.137240][ T9477] netlink: 'syz.2.961': attribute type 7 has an invalid length. [ 184.141702][ T9467] netlink: 64 bytes leftover after parsing attributes in process `syz.0.959'. [ 184.159772][ T9467] netlink: 'syz.0.959': attribute type 1 has an invalid length. [ 184.162647][ T9477] : entered promiscuous mode [ 184.170172][ T9467] netlink: 'syz.0.959': attribute type 4 has an invalid length. [ 184.180878][ T9477] netlink: 'syz.2.961': attribute type 11 has an invalid length. [ 184.180904][ T9477] netlink: 'syz.2.961': attribute type 11 has an invalid length. [ 184.180919][ T9477] netlink: 152 bytes leftover after parsing attributes in process `syz.2.961'. [ 184.197897][ T9467] netlink: 9422 bytes leftover after parsing attributes in process `syz.0.959'. [ 184.929261][ T9512] netlink: 64 bytes leftover after parsing attributes in process `syz.0.971'. [ 184.994202][ T9516] netlink: 244 bytes leftover after parsing attributes in process `syz.2.973'. [ 185.012466][ T9516] NCSI netlink: No device for ifindex 808464389 [ 185.052954][ T9516] netlink: 277 bytes leftover after parsing attributes in process `syz.2.973'. [ 185.066164][ T9517] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.973'. [ 185.090787][ T9525] bond3: (slave gretap1): making interface the new active one [ 185.100721][ T9525] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 185.312996][ T9538] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.978'. [ 185.913449][ T9570] team0: Port device geneve0 added [ 186.339248][ T9601] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 186.999968][ T9635] tipc: Enabled bearer , priority 0 [ 187.025493][ T9635] syzkaller0: MTU too low for tipc bearer [ 187.035725][ T9635] tipc: Disabling bearer [ 188.311379][ T9716] tipc: Enabling of bearer rejected, failed to enable media [ 188.347548][ T9716] validate_nla: 4 callbacks suppressed [ 188.347570][ T9716] netlink: 'syz.0.1033': attribute type 10 has an invalid length. [ 188.399817][ T9716] team0: Port device geneve0 added [ 188.410452][ T9718] netlink: 'syz.3.1034': attribute type 1 has an invalid length. [ 188.423579][ T9718] netlink: 'syz.3.1034': attribute type 1 has an invalid length. [ 188.875564][ T9735] netlink: 'syz.4.1038': attribute type 4 has an invalid length. [ 188.943250][ T9740] __nla_validate_parse: 13 callbacks suppressed [ 188.943270][ T9740] netlink: 528 bytes leftover after parsing attributes in process `syz.4.1038'. [ 188.969292][ T9739] netlink: 'syz.2.1040': attribute type 1 has an invalid length. [ 189.129571][ T9744] wlan1 speed is unknown, defaulting to 1000 [ 189.252987][ T9752] netlink: 3648 bytes leftover after parsing attributes in process `syz.4.1042'. [ 189.277666][ T9752] netlink: 3648 bytes leftover after parsing attributes in process `syz.4.1042'. [ 189.554308][ T9759] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1045'. [ 189.675854][ T9767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1048'. [ 189.802028][ T9776] tipc: Enabled bearer , priority 0 [ 189.829787][ T9770] syzkaller0: entered promiscuous mode [ 189.841084][ T9780] netlink: 'syz.2.1048': attribute type 1 has an invalid length. [ 189.842258][ T9770] syzkaller0: entered allmulticast mode [ 189.914126][ T9783] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1053'. [ 189.941225][ T9780] bond3: entered promiscuous mode [ 189.947369][ T9780] 8021q: adding VLAN 0 to HW filter on device bond3 [ 189.955152][ T9770] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 189.990678][ T9776] tipc: Resetting bearer [ 190.033556][ T9768] tipc: Resetting bearer [ 190.083799][ T9768] tipc: Disabling bearer [ 190.272918][ T9796] netlink: 'syz.1.1057': attribute type 58 has an invalid length. [ 190.300671][ T9796] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1057'. [ 190.769495][ T9812] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1063'. [ 190.880959][ T9822] netlink: 'syz.4.1061': attribute type 1 has an invalid length. [ 190.926363][ T9822] netlink: 784 bytes leftover after parsing attributes in process `syz.4.1061'. [ 191.047586][ T9833] netlink: 'syz.1.1066': attribute type 8 has an invalid length. [ 191.132468][ T9838] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1070'. [ 191.494653][ T9867] netlink: 'syz.1.1071': attribute type 10 has an invalid length. [ 191.522123][ T9867] team0: Device hsr_slave_0 failed to register rx_handler [ 191.565269][ T9872] IPv6: NLM_F_CREATE should be specified when creating new route [ 191.569308][ T9869] team0: Device gtp0 is of different type [ 192.378823][ T5960] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 192.450587][ T5960] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 192.938064][ T9946] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.340393][ T5969] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 193.372344][ T9969] netdevsim netdevsim4 ÿÿÿÿÿÿþ€: renamed from netdevsim0 [ 193.549032][ T9978] af_packet: tpacket_rcv: packet too big, clamped from 212960 to 3944. macoff=96 [ 193.655093][ T9978] wlan1 speed is unknown, defaulting to 1000 [ 193.972630][ T9991] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 194.343415][T10014] __nla_validate_parse: 11 callbacks suppressed [ 194.343438][T10014] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1117'. [ 194.395200][T10015] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1119'. [ 194.430346][T10015] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 194.447446][T10015] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1119'. [ 194.646186][T10029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1125'. [ 194.682161][T10023] bond4: entered promiscuous mode [ 194.723253][T10023] bond4: entered allmulticast mode [ 194.746101][T10031] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1125'. [ 194.767868][T10023] 8021q: adding VLAN 0 to HW filter on device bond4 [ 195.000302][T10023] bond4 (unregistering): Released all slaves [ 195.167385][T10043] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 195.176418][T10043] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 196.267790][T10083] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1139'. [ 196.306605][T10086] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1141'. [ 196.486055][T10096] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1144'. [ 196.669845][T10108] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 196.857923][T10116] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1150'. [ 196.872199][T10116] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1150'. [ 197.161408][T10136] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 197.493100][T10157] validate_nla: 4 callbacks suppressed [ 197.493119][T10157] netlink: 'syz.2.1160': attribute type 1 has an invalid length. [ 197.583660][ T30] audit: type=1800 audit(1754792751.392:3): pid=10166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1162" name="memory.events" dev="tmpfs" ino=1214 res=0 errno=0 [ 197.641754][ T30] audit: type=1804 audit(1754792751.402:4): pid=10166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1162" name="/newroot/234/memory.events" dev="tmpfs" ino=1214 res=1 errno=0 [ 198.161282][T10191] netlink: 'syz.3.1171': attribute type 1 has an invalid length. [ 198.169941][T10191] netlink: 'syz.3.1171': attribute type 1 has an invalid length. [ 198.453418][T10206] bond5: entered promiscuous mode [ 198.459051][T10206] bond5: entered allmulticast mode [ 198.468087][T10206] 8021q: adding VLAN 0 to HW filter on device bond5 [ 198.712946][T10226] netlink: 'syz.0.1181': attribute type 11 has an invalid length. [ 198.733247][T10226] netlink: 'syz.0.1181': attribute type 4 has an invalid length. [ 198.767014][T10231] openvswitch: netlink: IPv4 tun info is not correct [ 199.047422][T10247] netlink: 'syz.0.1188': attribute type 1 has an invalid length. [ 199.074775][T10247] netlink: 'syz.0.1188': attribute type 2 has an invalid length. [ 199.093510][T10247] netlink: 'syz.0.1188': attribute type 1 has an invalid length. [ 199.178135][T10249] wlan1 speed is unknown, defaulting to 1000 [ 199.518031][T10269] block nbd4: not configured, cannot reconfigure [ 199.743967][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.061400][T10295] __nla_validate_parse: 16 callbacks suppressed [ 200.061420][T10295] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1200'. [ 200.421092][T10324] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.738938][T10343] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1212'. [ 200.834481][T10348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1216'. [ 200.864640][T10348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1216'. [ 200.900012][T10348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1216'. [ 200.943217][T10348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1216'. [ 200.990896][T10348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1216'. [ 201.006412][T10348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1216'. [ 201.050081][T10348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1216'. [ 201.071367][T10348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1216'. [ 201.138493][T10362] macvtap2: entered promiscuous mode [ 201.144100][T10362] macvtap2: entered allmulticast mode [ 201.204546][T10369] macvtap3: entered promiscuous mode [ 201.229637][T10369] macvtap3: entered allmulticast mode [ 201.481143][T10383] netlink: 'syz.0.1227': attribute type 1 has an invalid length. [ 201.536981][T10389] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 201.639360][T10389] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 201.777175][T10389] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 201.856262][T10389] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 201.891043][T10389] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 201.960709][T10389] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 202.048288][T10389] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 202.126452][T10389] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 202.215707][T10389] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 203.355936][T10448] netlink: 'syz.4.1246': attribute type 24 has an invalid length. [ 204.455039][T10429] vlan2: entered allmulticast mode [ 204.460698][T10429] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 205.124961][T10483] dvmrp1: entered allmulticast mode [ 205.154581][T10486] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 205.235492][T10493] __nla_validate_parse: 34 callbacks suppressed [ 205.235514][T10493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1260'. [ 205.295125][T10492] tipc: Enabled bearer , priority 0 [ 205.302928][T10492] tunl0: entered promiscuous mode [ 205.309122][T10492] tunl0: entered allmulticast mode [ 205.324478][T10495] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1262'. [ 205.346621][T10490] tipc: Disabling bearer [ 206.029980][T10543] net_ratelimit: 3 callbacks suppressed [ 206.030002][T10543] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 206.104702][T10546] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 206.560797][T10550] netlink: 'syz.1.1277': attribute type 1 has an invalid length. [ 206.575796][T10551] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1279'. [ 206.595319][T10550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1277'. [ 206.639132][T10556] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1280'. [ 206.675843][T10556] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1280'. [ 206.736005][T10556] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1280'. [ 206.753074][T10556] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1280'. [ 206.764888][T10559] netlink: 4388 bytes leftover after parsing attributes in process `syz.3.1281'. [ 206.826292][T10563] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1282'. [ 206.921295][T10572] netlink: 'syz.2.1286': attribute type 1 has an invalid length. [ 207.114020][T10591] openvswitch: netlink: Duplicate or invalid key (type 0). [ 207.122734][T10591] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.953329][T10626] sctp_getsockopt_maxburst: 23 callbacks suppressed [ 207.953349][T10626] sctp: [Deprecated]: syz.2.1300 (pid 10626) Use of int in max_burst socket option. [ 207.953349][T10626] Use struct sctp_assoc_value instead [ 207.959795][T10625] pim6reg: entered allmulticast mode [ 208.181810][T10639] netlink: 'syz.3.1304': attribute type 1 has an invalid length. [ 208.270882][T10642] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 208.284501][T10642] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 208.392074][T10639] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 208.448388][T10639] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 209.310556][T10690] netlink: 'syz.3.1317': attribute type 1 has an invalid length. [ 209.334404][T10692] macsec0: entered promiscuous mode [ 209.416987][ T51] Bluetooth: hci2: command 0x0401 tx timeout [ 209.424075][ T5864] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 209.563124][T10700] netlink: 'syz.1.1318': attribute type 10 has an invalid length. [ 209.584325][T10700] bridge_slave_1: entered allmulticast mode [ 209.602221][T10700] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 209.833292][T10709] xt_policy: too many policy elements [ 210.017370][T10717] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 210.063755][T10714] netlink: 'syz.1.1325': attribute type 29 has an invalid length. [ 210.073866][T10717] netlink: 'syz.0.1324': attribute type 16 has an invalid length. [ 210.089907][T10714] netlink: 'syz.1.1325': attribute type 29 has an invalid length. [ 210.704364][T10758] __nla_validate_parse: 15 callbacks suppressed [ 210.704385][T10758] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1337'. [ 210.760751][T10754] erspan0: entered promiscuous mode [ 210.766495][T10754] vlan3: entered promiscuous mode [ 210.850235][T10764] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1338'. [ 210.865886][T10766] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1338'. [ 210.881967][T10766] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.547795][T10803] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1348'. [ 211.561039][T10804] ip6gre1: entered allmulticast mode [ 211.833898][T10824] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1355'. [ 212.224027][T10847] netlink: 35 bytes leftover after parsing attributes in process `syz.1.1362'. [ 212.367958][T10849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1363'. [ 212.791950][T10877] macvtap3: entered allmulticast mode [ 212.802898][T10877] veth0_macvtap: entered allmulticast mode [ 212.833414][T10874] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1372'. [ 212.885587][T10879] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1374'. [ 212.899568][T10879] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1374'. [ 213.321714][T10902] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 213.474122][T10909] tipc: Enabled bearer , priority 0 [ 213.611661][T10915] netlink: 'syz.2.1385': attribute type 1 has an invalid length. [ 213.654083][T10909] tipc: Disabling bearer [ 213.810531][T10930] netlink: 'syz.0.1389': attribute type 2 has an invalid length. [ 213.816874][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 213.818634][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 215.549293][T11004] dummy0: entered promiscuous mode [ 215.565644][T11004] dummy0: left promiscuous mode [ 215.842611][T11025] wlan1 speed is unknown, defaulting to 1000 [ 216.380444][T11040] tipc: Enabled bearer , priority 0 [ 216.403880][T11041] syzkaller0: entered promiscuous mode [ 216.420397][T11041] syzkaller0: entered allmulticast mode [ 216.551910][T11043] __nla_validate_parse: 12 callbacks suppressed [ 216.551934][T11043] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1422'. [ 216.599151][T11040] tipc: Resetting bearer [ 216.611681][T11049] netlink: 'syz.4.1424': attribute type 1 has an invalid length. [ 216.628061][T11049] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1424'. [ 216.640536][T11040] tipc: Disabling bearer [ 216.809586][T11056] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1426'. [ 216.894861][T11064] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1428'. [ 216.990633][T11068] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1430'. [ 217.177627][ T5182] Bluetooth: hci3: command 0x0406 tx timeout [ 217.184533][ T5182] Bluetooth: hci1: command 0x0406 tx timeout [ 217.191393][ T5182] Bluetooth: hci2: command 0x0401 tx timeout [ 217.220471][T11083] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1433'. [ 217.338857][T11092] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1434'. [ 217.373991][T11092] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.693065][T11116] sctp: [Deprecated]: syz.0.1439 (pid 11116) Use of struct sctp_assoc_value in delayed_ack socket option. [ 217.693065][T11116] Use struct sctp_sack_info instead [ 217.781063][T11120] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1440'. [ 217.849227][T11122] netlink: 'syz.4.1441': attribute type 8 has an invalid length. [ 218.186387][T11146] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1446'. [ 218.236802][T11146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1446'. [ 218.894192][T11185] netlink: 'syz.2.1464': attribute type 10 has an invalid length. [ 218.905912][T11187] netlink: 'syz.2.1464': attribute type 10 has an invalid length. [ 218.946548][T11185] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.953878][T11185] bridge0: port 1(bridge_slave_0) entered listening state [ 219.013586][T11185] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 219.089494][T11187] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.208401][T11205] openvswitch: netlink: Flow actions attr not present in new flow. [ 219.225292][T11209] syzkaller0: entered promiscuous mode [ 219.257766][T11209] syzkaller0: entered allmulticast mode [ 219.306288][T11208] tipc: Enabled bearer , priority 0 [ 219.388653][T11208] tipc: Resetting bearer [ 219.443440][T11207] tipc: Resetting bearer [ 219.516346][T11226] netlink: 'syz.4.1473': attribute type 6 has an invalid length. [ 219.525455][T11207] tipc: Disabling bearer [ 219.743306][T11236] netlink: 'syz.4.1477': attribute type 16 has an invalid length. [ 219.781606][T11236] netlink: 'syz.4.1477': attribute type 17 has an invalid length. [ 219.888363][T11245] Bluetooth: MGMT ver 1.23 [ 219.905402][T11236] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 219.974591][T11248] team_slave_0: entered promiscuous mode [ 219.980659][T11248] team_slave_1: entered promiscuous mode [ 219.986490][T11248] geneve0: entered promiscuous mode [ 219.998773][T11248] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 220.007294][T11248] team0: Device macvtap1 is already an upper device of the team interface [ 220.019305][T11248] team_slave_0: left promiscuous mode [ 220.024782][T11248] team_slave_1: left promiscuous mode [ 220.030577][T11248] geneve0: left promiscuous mode [ 220.055683][T11251] netlink: 'syz.3.1483': attribute type 7 has an invalid length. [ 220.490776][T11274] netlink: 'syz.2.1491': attribute type 3 has an invalid length. [ 220.598612][T11282] wlan1 speed is unknown, defaulting to 1000 [ 221.200244][T11291] netlink: zone id is out of range [ 221.217161][T11291] netlink: zone id is out of range [ 221.222565][T11291] netlink: zone id is out of range [ 221.232542][T11291] netlink: zone id is out of range [ 221.246534][T11291] netlink: zone id is out of range [ 221.268008][T11291] netlink: zone id is out of range [ 221.274689][T11291] netlink: zone id is out of range [ 221.294961][T11291] netlink: zone id is out of range [ 221.590027][T11316] __nla_validate_parse: 8 callbacks suppressed [ 221.590049][T11316] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1501'. [ 221.660332][T11309] 8021q: adding VLAN 0 to HW filter on device bond4 [ 221.716413][T11313] bond0: (slave bond_slave_0): Releasing backup interface [ 221.774069][T11313] bond0: (slave bond_slave_1): Releasing backup interface [ 221.816153][T11313] team0: Port device team_slave_0 removed [ 221.852308][T11313] team0: Port device team_slave_1 removed [ 221.861177][T11313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.872902][T11313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.898591][T11313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.916214][T11313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.014259][T11313] team0: Port device geneve0 removed [ 222.059193][T11313] bond0: (slave wlan1): Releasing backup interface [ 222.135971][T11310] gretap2: entered promiscuous mode [ 222.157618][T11310] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 222.166590][T11318] netlink: 'syz.0.1502': attribute type 3 has an invalid length. [ 222.180400][T11326] vlan0: entered promiscuous mode [ 222.202600][T11326] team0: Port device vlan0 added [ 222.334171][T11352] netlink: 'syz.1.1508': attribute type 21 has an invalid length. [ 222.359920][T11348] bond5: entered promiscuous mode [ 222.365232][T11348] bond5: entered allmulticast mode [ 222.371534][T11348] 8021q: adding VLAN 0 to HW filter on device bond5 [ 222.504594][T11348] bond5 (unregistering): Released all slaves [ 222.715728][T11368] netlink: 512 bytes leftover after parsing attributes in process `syz.2.1511'. [ 222.914158][T11381] netlink: 'syz.1.1517': attribute type 10 has an invalid length. [ 222.934607][T11381] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1517'. [ 222.956253][T11381] team0: Port device geneve0 added [ 222.965738][ T1169] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.986283][ T1169] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.009121][ T1169] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.029520][ T1169] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.131578][T11396] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 223.301194][T11396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1521'. [ 223.345468][T11410] netlink: 'syz.4.1526': attribute type 13 has an invalid length. [ 223.346201][T11396] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1521'. [ 223.516438][T11417] pim6reg1: entered promiscuous mode [ 223.539608][T11417] pim6reg1: entered allmulticast mode [ 223.559283][T11420] netlink: 596 bytes leftover after parsing attributes in process `syz.3.1529'. [ 224.181036][T11464] netlink: 'syz.2.1540': attribute type 1 has an invalid length. [ 224.193333][T11464] netlink: 'syz.2.1540': attribute type 2 has an invalid length. [ 224.204452][T11464] netlink: 1172 bytes leftover after parsing attributes in process `syz.2.1540'. [ 224.231094][T11464] netlink: 'syz.2.1540': attribute type 1 has an invalid length. [ 224.239673][T11464] netlink: 'syz.2.1540': attribute type 2 has an invalid length. [ 224.248487][T11464] netlink: 1172 bytes leftover after parsing attributes in process `syz.2.1540'. [ 224.291778][T11471] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1541'. [ 224.449835][T11482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1545'. [ 224.931488][T11487] netlink: 'syz.1.1548': attribute type 1 has an invalid length. [ 225.016606][T11496] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 225.032683][T11491] 8021q: adding VLAN 0 to HW filter on device bond6 [ 225.043663][T11491] team0: Port device bond6 added [ 225.143847][T11487] bond6: (slave bridge4): making interface the new active one [ 225.165991][T11487] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 225.399619][T11520] net_ratelimit: 20 callbacks suppressed [ 225.399643][T11520] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 225.413918][T11520] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.432233][T11515] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 225.487097][T11516] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 225.826490][T11546] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 226.366052][T11568] bridge_slave_0: entered promiscuous mode [ 226.648570][T11584] __nla_validate_parse: 9 callbacks suppressed [ 226.648591][T11584] netlink: 288 bytes leftover after parsing attributes in process `syz.3.1577'. [ 226.695523][T11584] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 226.781051][T11591] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1579'. [ 226.802448][T11584] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1577'. [ 226.821589][T11591] vlan2: entered allmulticast mode [ 226.829989][T11591] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 226.965666][T11598] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 227.153379][T11603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1583'. [ 227.436700][T11620] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1589'. [ 227.654966][T11638] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1593'. [ 227.706598][T11638] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1593'. [ 227.709016][T11639] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1593'. [ 227.743003][T11638] netlink: 'syz.2.1593': attribute type 6 has an invalid length. [ 227.762854][T11638] netlink: 'syz.2.1593': attribute type 5 has an invalid length. [ 227.780402][T11638] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1593'. [ 227.847748][T11648] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1596'. [ 227.961737][T11653] 8021q: VLANs not supported on gre0 [ 228.006575][T11655] netlink: 'syz.0.1599': attribute type 2 has an invalid length. [ 228.169456][T11657] netlink: 'syz.2.1600': attribute type 1 has an invalid length. [ 228.178119][T11662] IPVS: set_ctl: invalid protocol: 8 127.0.0.1:20003 [ 228.186836][T11657] netlink: 'syz.2.1600': attribute type 1 has an invalid length. [ 228.488351][T11673] 8021q: VLANs not supported on ip6_vti0 [ 229.644727][T11723] macvtap1: entered promiscuous mode [ 229.669013][T11723] vlan0: entered promiscuous mode [ 229.680632][T11723] macvtap1: entered allmulticast mode [ 229.686305][T11723] vlan0: entered allmulticast mode [ 229.692177][T11723] veth0_vlan: entered allmulticast mode [ 229.850386][T11729] syzkaller0: entered promiscuous mode [ 229.855946][T11729] syzkaller0: entered allmulticast mode [ 229.863684][T11729] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 229.942605][T11732] pim6reg1: entered promiscuous mode [ 229.969029][T11732] pim6reg1: entered allmulticast mode [ 230.078816][T11745] netlink: 'syz.4.1621': attribute type 2 has an invalid length. [ 230.330919][T11759] dvmrp0: entered allmulticast mode [ 230.488560][T11765] netlink: 'syz.4.1625': attribute type 29 has an invalid length. [ 230.553202][T11769] C: renamed from team_slave_0 [ 230.591424][T11769] netlink: 'syz.0.1628': attribute type 1 has an invalid length. [ 230.608158][T11769] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 231.271158][T11818] netlink: 'syz.0.1639': attribute type 1 has an invalid length. [ 231.317323][T11818] 8021q: adding VLAN 0 to HW filter on device bond7 [ 231.364960][T11820] 8021q: adding VLAN 0 to HW filter on device bond7 [ 231.376503][T11820] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address [ 231.389791][T11820] bond7: (slave vxcan1): Error -95 calling set_mac_address [ 231.425291][T11818] gretap1: entered promiscuous mode [ 231.435140][T11818] bond7: (slave gretap1): making interface the new active one [ 231.443766][T11818] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 231.472460][T11820] macvlan3: entered promiscuous mode [ 231.478367][T11820] macvlan3: entered allmulticast mode [ 231.484721][T11820] bond7: entered promiscuous mode [ 231.491461][T11820] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 231.501295][T11820] bond7: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 231.514995][T11820] bond7: left promiscuous mode [ 231.705695][T11832] netlink: 'syz.4.1644': attribute type 3 has an invalid length. [ 232.150942][T11858] __nla_validate_parse: 47 callbacks suppressed [ 232.150967][T11858] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1651'. [ 232.373956][T11868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1656'. [ 233.019828][T11903] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1665'. [ 234.162645][T11891] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1662'. [ 234.389919][T11919] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1671'. [ 236.364362][T11916] vlan2: entered allmulticast mode [ 236.369899][T11916] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 236.422728][T11931] mpoa:mpoad_close: () going down [ 236.495401][T11938] syzkaller1: entered promiscuous mode [ 236.520280][T11938] syzkaller1: entered allmulticast mode [ 236.767895][T11940] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1675'. [ 236.806309][T11940] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 237.038347][T11965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1682'. [ 237.315453][T11982] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1690'. [ 237.351562][T11982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1690'. [ 237.663847][T12003] netem: change failed [ 237.703911][T12006] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1698'. [ 238.086369][T12026] delete_channel: no stack [ 238.609629][T12050] erspan0: entered promiscuous mode [ 238.615095][T12050] vlan3: entered promiscuous mode [ 238.928901][T12067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1717'. [ 239.009420][T12074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1719'. [ 239.022363][T12067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1717'. [ 239.519938][T12104] tipc: Enabling of bearer rejected, failed to enable media [ 239.534750][T12104] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20002 [ 239.684851][T12113] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1729'. [ 239.711633][T12112] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1728'. [ 239.728004][T12112] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1728'. [ 240.059927][T12136] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1735'. [ 240.542207][T12165] openvswitch: netlink: Unknown nsh attribute 0 [ 240.557353][T12165] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 241.027183][T12190] netlink: 'syz.2.1751': attribute type 2 has an invalid length. [ 244.121484][T12233] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 244.356411][T12251] __nla_validate_parse: 3 callbacks suppressed [ 244.356432][T12251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1765'. [ 244.375428][T12242] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1762'. [ 244.478730][T12250] bridge_slave_0: invalid flags given to default FDB implementation [ 244.642614][T12265] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 244.799763][T12270] netlink: 'syz.4.1772': attribute type 1 has an invalid length. [ 244.819838][T12270] netlink: 'syz.4.1772': attribute type 2 has an invalid length. [ 244.840295][T12270] netlink: 'syz.4.1772': attribute type 1 has an invalid length. [ 244.886253][T12270] netlink: 1156 bytes leftover after parsing attributes in process `syz.4.1772'. [ 245.007557][ T44] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 245.018371][T12279] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1774'. [ 245.127303][T12290] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 245.290646][T12301] netlink: 'syz.3.1781': attribute type 1 has an invalid length. [ 245.319608][T12294] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.342424][T12306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1780'. [ 245.358323][T12298] netlink: 'syz.4.1782': attribute type 22 has an invalid length. [ 245.358854][T12302] netlink: 'syz.0.1783': attribute type 2 has an invalid length. [ 245.366439][T12298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1782'. [ 245.492309][T12294] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.524182][T12306] gtp0: entered promiscuous mode [ 245.534632][T12306] gtp0: entered allmulticast mode [ 245.577963][T12298] netlink: 'syz.4.1782': attribute type 22 has an invalid length. [ 245.591352][T12294] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.616071][T12298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1782'. [ 245.621669][ T59] netdevsim netdevsim4 ÿÿÿÿÿÿþ€: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.667455][ T5961] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.676340][ T5961] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.705558][ T5961] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.754565][T12325] netlink: 604 bytes leftover after parsing attributes in process `syz.2.1788'. [ 245.780215][T12294] bond0: (slave netdevsim0): Releasing backup interface [ 245.787937][T12328] netlink: 788 bytes leftover after parsing attributes in process `syz.0.1790'. [ 245.800883][T12294] bond0: (slave netdevsim0): the permanent HWaddr of slave - 42:ee:40:89:a4:53 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 245.832082][T12294] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode [ 245.847201][T12294] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.868459][T12323] netlink: 'syz.2.1788': attribute type 29 has an invalid length. [ 245.944264][T12333] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1791'. [ 245.962582][T12330] netlink: 'syz.3.1789': attribute type 1 has an invalid length. [ 246.244283][ T1169] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.271455][ T1169] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.303272][ T1169] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.377537][ T1169] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.837410][T12384] openvswitch: netlink: Unknown nsh attribute 0 [ 246.843784][T12384] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.911966][T12384] openvswitch: netlink: Unknown nsh attribute 0 [ 246.935832][T12384] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.960596][T12449] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.052355][T12455] netlink: 'syz.2.1825': attribute type 2 has an invalid length. [ 248.392057][T12466] netlink: 'syz.4.1828': attribute type 21 has an invalid length. [ 248.697011][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 248.858180][T12491] bond8: entered promiscuous mode [ 248.863467][T12491] bond8: entered allmulticast mode [ 248.870628][T12491] 8021q: adding VLAN 0 to HW filter on device bond8 [ 248.958600][T12497] netlink: 'syz.0.1835': attribute type 11 has an invalid length. [ 248.971178][T12497] netlink: 'syz.0.1835': attribute type 11 has an invalid length. [ 249.153377][T12491] bond8 (unregistering): Released all slaves [ 249.420648][T12521] netlink: 'syz.2.1842': attribute type 10 has an invalid length. [ 249.489980][T12521] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 249.517534][T12534] netlink: 'syz.4.1845': attribute type 6 has an invalid length. [ 249.617571][T12538] __nla_validate_parse: 13 callbacks suppressed [ 249.617594][T12538] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1846'. [ 250.123620][T12577] openvswitch: netlink: Message has -1 unknown bytes. [ 250.219329][T12578] wlan1 speed is unknown, defaulting to 1000 [ 250.261665][T12536] netlink: 'syz.1.1843': attribute type 21 has an invalid length. [ 250.279563][T12536] netlink: 'syz.1.1843': attribute type 22 has an invalid length. [ 250.327681][T12536] netlink: 'syz.1.1843': attribute type 23 has an invalid length. [ 250.342018][T12536] netlink: 'syz.1.1843': attribute type 25 has an invalid length. [ 250.350770][T12536] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1843'. [ 250.558585][T12591] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1859'. [ 250.579578][T12586] syzkaller1: entered promiscuous mode [ 250.585140][T12586] syzkaller1: entered allmulticast mode [ 250.721679][T12591] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1859'. [ 250.744636][T12591] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1859'. [ 250.754555][T12591] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1859'. [ 250.979975][T12617] dvmrp1: left allmulticast mode [ 251.285322][T12634] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1871'. [ 251.550102][T12642] mac80211_hwsim hwsim8 wlan0 (unregistering): left promiscuous mode [ 251.571315][T12650] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1874'. [ 253.915510][T12649] lo: left promiscuous mode [ 253.925910][T12649] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 253.971558][T12653] team0: Device vlan0 failed to register rx_handler [ 254.144869][T12672] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1880'. [ 254.144884][T12667] syzkaller0: entered promiscuous mode [ 254.144906][T12667] syzkaller0: entered allmulticast mode [ 254.219685][T12675] netlink: 'syz.0.1881': attribute type 11 has an invalid length. [ 254.234072][T12675] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1881'. [ 254.359852][T12683] veth0: entered promiscuous mode [ 254.500442][T12682] veth0: left promiscuous mode [ 254.639689][T12702] vlan3: entered promiscuous mode [ 254.644801][T12702] bridge0: entered promiscuous mode [ 254.654942][T12706] __nla_validate_parse: 4 callbacks suppressed [ 254.654960][T12706] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1890'. [ 254.827778][T12713] syzkaller1: entered promiscuous mode [ 254.858124][T12713] syzkaller1: entered allmulticast mode [ 254.872475][T12717] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1894'. [ 254.888340][T12712] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 255.011667][T12725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1895'. [ 255.040840][T12728] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1897'. [ 255.142919][T12725] bridge_slave_0: left allmulticast mode [ 255.184764][T12725] bridge_slave_0: left promiscuous mode [ 255.213198][T12725] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.335304][T12725] bond0: (slave bridge0): Releasing backup interface [ 255.384032][T12746] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1903'. [ 255.393948][T12746] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1903'. [ 255.410833][T12739] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1899'. [ 255.678179][T12762] netlink: 'syz.2.1907': attribute type 29 has an invalid length. [ 255.691762][T12762] netlink: 'syz.2.1907': attribute type 29 has an invalid length. [ 255.701571][T12762] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1907'. [ 255.718094][T12762] unsupported nla_type 58 [ 255.839942][T12766] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1908'. [ 255.881990][T12766] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1908'. [ 256.660142][T12817] vlan2: entered promiscuous mode [ 256.696842][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 256.975597][T12838] netlink: 'syz.0.1931': attribute type 1 has an invalid length. [ 256.984440][T12839] netlink: 'syz.4.1930': attribute type 6 has an invalid length. [ 257.094807][T12845] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 257.560669][T12840] vlan0 (unregistering): left allmulticast mode [ 257.578294][T12840] veth0_vlan (unregistering): left allmulticast mode [ 257.740893][T12876] netlink: 'syz.3.1936': attribute type 1 has an invalid length. [ 258.090835][T12865] bond8: entered allmulticast mode [ 258.100517][T12865] 8021q: adding VLAN 0 to HW filter on device bond8 [ 258.112081][T12865] bridge0: port 1(bond8) entered blocking state [ 258.122213][T12865] bridge0: port 1(bond8) entered disabled state [ 258.132268][T12865] bond8: entered promiscuous mode [ 258.143335][T12865] bridge0: port 1(bond8) entered blocking state [ 258.150707][T12865] bridge0: port 1(bond8) entered forwarding state [ 258.164416][T12861] netlink: 'syz.1.1934': attribute type 3 has an invalid length. [ 258.180514][T12861] netlink: 'syz.1.1934': attribute type 3 has an invalid length. [ 258.555292][T12892] ip6gre0: Master is either lo or non-ether device [ 258.579052][T12898] bridge0: entered allmulticast mode [ 258.753702][T12913] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 258.938427][T12928] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 259.037320][T12928] bond0: entered promiscuous mode [ 259.077616][T12928] bond0: left promiscuous mode [ 259.162406][ T36] bridge0: port 1(bond8) entered disabled state [ 260.023396][T12986] __nla_validate_parse: 13 callbacks suppressed [ 260.023419][T12986] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1967'. [ 261.181853][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 272.056927][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 276.546989][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 281.656930][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 284.173114][T13013] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 284.567336][T13037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1981'. [ 284.738449][T13050] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1985'. [ 284.815353][T13057] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1986'. [ 285.000793][T13068] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1990'. [ 285.027432][T13068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1990'. [ 285.054658][T13068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1990'. [ 285.097781][T13073] netlink: 'syz.0.1990': attribute type 1 has an invalid length. [ 285.140662][T13080] sctp: [Deprecated]: syz.4.1995 (pid 13080) Use of struct sctp_assoc_value in delayed_ack socket option. [ 285.140662][T13080] Use struct sctp_sack_info instead [ 285.173214][T13080] sctp: [Deprecated]: syz.4.1995 (pid 13080) Use of struct sctp_assoc_value in delayed_ack socket option. [ 285.173214][T13080] Use struct sctp_sack_info instead [ 285.320657][T13068] bond9: (slave gretap2): making interface the new active one [ 285.384626][T13068] bond9: (slave gretap2): Enslaving as an active interface with an up link [ 285.476509][T13097] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1997'. [ 285.629091][T13105] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1999'. [ 285.702286][T13105] xfrm1: entered promiscuous mode [ 285.720975][T13105] xfrm1: entered allmulticast mode [ 285.738525][T13105] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1999'. [ 285.858471][T13107] netlink: 'syz.1.2001': attribute type 10 has an invalid length. [ 285.882651][T13107] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2001'. [ 285.950661][T13107] dummy0: entered promiscuous mode [ 285.975841][T13107] bridge0: port 1(dummy0) entered blocking state [ 285.983486][T13107] bridge0: port 1(dummy0) entered disabled state [ 285.992232][T13107] dummy0: entered allmulticast mode [ 286.242109][T13135] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 286.446539][T13148] netlink: 'syz.3.2014': attribute type 2 has an invalid length. [ 286.680292][T13162] veth0: entered promiscuous mode [ 286.943858][T13174] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma? [ 287.505068][T13195] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 287.523147][T13208] netlink: 'syz.0.2032': attribute type 6 has an invalid length. [ 287.591363][T13208] netlink: 'syz.0.2032': attribute type 5 has an invalid length. [ 288.018605][T13229] netlink: 'syz.0.2037': attribute type 29 has an invalid length. [ 288.528895][T13269] netlink: zone id is out of range [ 288.534130][T13269] netlink: zone id is out of range [ 288.545786][T13269] netlink: get zone limit has 8 unknown bytes [ 289.250392][T13309] netlink: 'syz.1.2057': attribute type 1 has an invalid length. [ 289.342641][T13309] 8021q: adding VLAN 0 to HW filter on device bond7 [ 289.390307][T13307] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 289.402654][T13314] bond7: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 289.427245][ T5868] Bluetooth: hci4: command 0x0405 tx timeout [ 289.791153][T13334] __nla_validate_parse: 23 callbacks suppressed [ 289.791178][T13334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2065'. [ 289.910010][T13342] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 289.958529][T13346] netlink: 'syz.3.2069': attribute type 1 has an invalid length. [ 289.968849][T13346] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2069'. [ 289.983063][T13346] netlink: 'syz.3.2069': attribute type 1 has an invalid length. [ 290.017449][T13346] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 290.145549][T13352] IPv6: Can't replace route, no match found [ 290.933928][T13394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2079'. [ 290.980811][T13397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2080'. [ 291.027115][T13397] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2080'. [ 291.158453][ T1147] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 291.183277][T13407] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2083'. [ 291.208158][T13407] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 291.670665][T13434] syzkaller0: entered promiscuous mode [ 291.676454][T13434] syzkaller0: entered allmulticast mode [ 291.952189][T13442] delete_channel: no stack [ 292.057404][T13446] netlink: 'syz.1.2096': attribute type 13 has an invalid length. [ 292.121520][T13450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2096'. [ 292.461612][T13465] netlink: 'syz.4.2100': attribute type 1 has an invalid length. [ 292.471897][T13465] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2100'. [ 293.495897][T13446] lo: entered promiscuous mode [ 293.504356][T13446] lo: entered allmulticast mode [ 293.512913][T13446] gre0: entered promiscuous mode [ 293.521509][T13446] gre0: entered allmulticast mode [ 293.528098][T13446] gretap0: entered promiscuous mode [ 293.533556][T13446] gretap0: entered allmulticast mode [ 293.542560][T13446] gretap0: refused to change device tx_queue_len [ 293.550410][T13446] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 293.665928][T13466] pim6reg: entered allmulticast mode [ 293.867561][T13489] openvswitch: netlink: Unknown key attributes 2 [ 293.963631][T13497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2109'. [ 293.987194][T13497] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2109'. [ 294.953752][T13564] __nla_validate_parse: 3 callbacks suppressed [ 294.953772][T13564] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2128'. [ 295.173810][T13571] netlink: 'syz.1.2130': attribute type 1 has an invalid length. [ 295.194724][T13575] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2132'. [ 295.215085][T13578] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2133'. [ 295.247670][T13577] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2133'. [ 295.265251][T13578] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2133'. [ 295.530063][T13595] netlink: 'syz.1.2138': attribute type 6 has an invalid length. [ 295.624644][T13603] tipc: Enabled bearer , priority 0 [ 295.851745][T13617] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2144'. [ 296.004012][T13616] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2143'. [ 296.014159][T13617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2144'. [ 296.433848][T13634] netlink: 'syz.0.2150': attribute type 3 has an invalid length. [ 296.724446][T13659] netlink: 'syz.4.2158': attribute type 1 has an invalid length. [ 296.919623][T13670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2161'. [ 296.940776][T13671] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2162'. [ 296.955534][T13673] netlink: 'syz.3.2163': attribute type 1 has an invalid length. [ 296.978873][T13673] netlink: 'syz.3.2163': attribute type 1 has an invalid length. [ 297.474198][T13702] netlink: 'syz.3.2172': attribute type 17 has an invalid length. [ 298.053081][T13734] netlink: 'syz.3.2184': attribute type 7 has an invalid length. [ 298.094420][T13732] macvlan2: entered promiscuous mode [ 298.100376][T13732] macvlan2: entered allmulticast mode [ 299.491480][T13820] pim6reg527: entered allmulticast mode [ 300.074118][T13856] openvswitch: netlink: VXLAN extension message has 11 unknown bytes. [ 300.428677][T13873] __nla_validate_parse: 14 callbacks suppressed [ 300.428698][T13873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2223'. [ 300.621993][T13880] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2228'. [ 300.695637][T13883] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 300.789132][T13889] netlink: 'syz.2.2231': attribute type 1 has an invalid length. [ 300.820693][T13889] netlink: 216 bytes leftover after parsing attributes in process `syz.2.2231'. [ 300.992445][T13903] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.056434][T13903] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2237'. [ 301.084157][T13907] netlink: 'syz.1.2238': attribute type 7 has an invalid length. [ 301.173803][T13907] netlink: 'syz.1.2238': attribute type 24 has an invalid length. [ 301.196176][T13917] netlink: 'syz.3.2240': attribute type 4 has an invalid length. [ 301.209212][T13915] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2239'. [ 301.336185][T13915] bridge0 (unregistering): left allmulticast mode [ 301.580699][T13940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2247'. [ 301.605809][T13940] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 301.622315][T13940] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.760150][T13950] netlink: 324 bytes leftover after parsing attributes in process `syz.2.2252'. [ 301.772506][T13950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2252'. [ 301.958772][T13953] netlink: 'syz.4.2253': attribute type 13 has an invalid length. [ 302.102851][T13966] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 302.360255][T13977] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2257'. [ 302.371593][T13975] netlink: 'syz.2.2258': attribute type 1 has an invalid length. [ 302.423956][T13975] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2258'. [ 302.545766][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058230800: rx timeout, send abort [ 302.556208][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888058230800: 0x2fe01: (3) A timeout occurred and this is the connection abort to close the session. [ 302.733305][ T70] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 302.741563][ T70] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 302.759405][ T5942] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 303.224192][ T36] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.264757][ T36] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.300715][ T36] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.321814][T14017] netlink: 'syz.1.2273': attribute type 4 has an invalid length. [ 303.332655][T14014] veth0: entered promiscuous mode [ 303.416924][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 303.473576][ T36] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.497209][ T5922] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 303.824642][ T5922] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 304.026381][T14062] netlink: 'syz.3.2283': attribute type 33 has an invalid length. [ 304.515815][T14087] ip6gre2: entered allmulticast mode [ 304.762916][T14100] openvswitch: netlink: Duplicate or invalid key (type 0). [ 304.783745][T14103] netlink: 'syz.1.2296': attribute type 2 has an invalid length. [ 304.787171][T14100] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 305.602038][T14135] lo: left promiscuous mode [ 305.620967][T14135] lo: left allmulticast mode [ 305.649003][T14135] tunl0: left promiscuous mode [ 305.658928][T14135] tunl0: left allmulticast mode [ 305.669345][T14135] gre0: left promiscuous mode [ 305.677067][T14137] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 305.681012][T14135] gre0: left allmulticast mode [ 305.713193][T14141] __nla_validate_parse: 13 callbacks suppressed [ 305.713214][T14141] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2307'. [ 305.717516][T14135] gretap0: left promiscuous mode [ 305.724265][T14141] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2307'. [ 305.744047][T14135] gretap0: left allmulticast mode [ 305.757963][T14144] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2306'. [ 305.797433][T14135] bridge0: port 1(dummy0) entered blocking state [ 305.804029][T14135] bridge0: port 1(dummy0) entered forwarding state [ 305.824206][T14135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.841610][T14135] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.853884][T14135] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 305.888121][T14134] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 306.061930][T14157] netlink: 1036 bytes leftover after parsing attributes in process `syz.1.2310'. [ 306.074690][T14157] sch_tbf: burst 0 is lower than device lo mtu (76) ! [ 306.102360][T14160] netlink: 'syz.2.2309': attribute type 142 has an invalid length. [ 306.601151][T14176] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2316'. [ 306.865794][T14185] : renamed from bridge_slave_0 (while UP) [ 307.114870][T14200] syzkaller1: entered promiscuous mode [ 307.134587][T14200] syzkaller1: entered allmulticast mode [ 307.176822][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 307.281486][T14208] netlink: 'syz.1.2325': attribute type 13 has an invalid length. [ 307.315300][T14208] lo: entered promiscuous mode [ 307.334713][T14208] lo: entered allmulticast mode [ 307.341662][T14208] tunl0: entered promiscuous mode [ 307.363500][T14208] tunl0: entered allmulticast mode [ 307.383755][T14208] gre0: entered promiscuous mode [ 307.393744][T14208] gre0: entered allmulticast mode [ 307.445158][T14208] gretap0: entered promiscuous mode [ 307.452268][T14208] gretap0: entered allmulticast mode [ 307.501073][T14208] gretap0: refused to change device tx_queue_len [ 307.507958][T14208] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 307.548989][T14216] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2330'. [ 307.574309][T14216] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2330'. [ 307.606246][T14216] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2330'. [ 307.655505][T14216] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2330'. [ 307.683669][T14216] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2330'. [ 308.031756][T14251] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 308.137013][ T5868] Bluetooth: hci2: command 0x0401 tx timeout [ 308.628255][T14287] bond6: entered allmulticast mode [ 308.634061][T14287] 8021q: adding VLAN 0 to HW filter on device bond6 [ 308.772184][T14300] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 308.784095][T14300] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 309.145208][T14313] netlink: 'syz.2.2361': attribute type 13 has an invalid length. [ 309.334221][T14319] veth0_virt_wifi: renamed from veth0_vlan [ 309.581700][T14335] lo: entered promiscuous mode [ 309.592701][T14335] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 309.672058][T14338] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 309.884606][T14352] netlink: 'syz.3.2372': attribute type 33 has an invalid length. [ 310.092965][T14368] netlink: 'syz.4.2377': attribute type 75 has an invalid length. [ 310.128172][T14368] netlink: 'syz.4.2377': attribute type 75 has an invalid length. [ 310.138322][T14368] netlink: 'syz.4.2377': attribute type 75 has an invalid length. [ 310.146425][T14368] netlink: 'syz.4.2377': attribute type 75 has an invalid length. [ 310.214266][T14368] netlink: 'syz.4.2377': attribute type 75 has an invalid length. [ 310.223756][T14368] netlink: 'syz.4.2377': attribute type 75 has an invalid length. [ 310.247021][T14368] netlink: 'syz.4.2377': attribute type 75 has an invalid length. [ 310.270954][T14368] netlink: 'syz.4.2377': attribute type 75 has an invalid length. [ 310.478056][T14380] tipc: Enabled bearer , priority 0 [ 310.493070][T14380] syzkaller0: MTU too low for tipc bearer [ 310.519964][T14380] tipc: Disabling bearer [ 310.797780][T14398] __nla_validate_parse: 18 callbacks suppressed [ 310.797802][T14398] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2388'. [ 310.895649][T14410] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2393'. [ 310.994978][T14415] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 311.076130][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.096802][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.138047][ C1] ------------[ cut here ]------------ [ 311.143580][ C1] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 311.154806][ C1] WARNING: CPU: 1 PID: 44 at net/mac80211/rate.c:403 __rate_control_send_low+0x5df/0x820 [ 311.164749][ C1] Modules linked in: [ 311.168844][ C1] CPU: 1 UID: 0 PID: 44 Comm: kworker/u8:3 Not tainted 6.16.0-syzkaller-12084-g33caa208dba6 #0 PREEMPT(full) [ 311.180566][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 311.190726][ C1] Workqueue: bat_events batadv_nc_worker [ 311.196441][ C1] RIP: 0010:__rate_control_send_low+0x5df/0x820 [ 311.202785][ C1] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 60 60 b0 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 82 13 94 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 311.222589][ C1] RSP: 0018:ffffc90000a08758 EFLAGS: 00010246 [ 311.228766][ C1] RAX: 76a4b2c2c6960800 RBX: 000000000000000c RCX: ffff88801faada00 [ 311.236827][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 311.244857][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 311.252923][ C1] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff88807ce662a8 [ 311.261077][ C1] R13: 0000000000000000 R14: ffff888027b08e40 R15: ffff888027b0b0d8 [ 311.269243][ C1] FS: 0000000000000000(0000) GS:ffff888125d21000(0000) knlGS:0000000000000000 [ 311.278262][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 311.284890][ C1] CR2: 00007f31f1ce56c0 CR3: 0000000076aa2000 CR4: 00000000003526f0 [ 311.292993][ C1] Call Trace: [ 311.296324][ C1] [ 311.299290][ C1] rate_control_send_low+0x194/0x7a0 [ 311.304645][ C1] rate_control_get_rate+0x20b/0x5d0 [ 311.310064][ C1] ieee80211_beacon_get_finish+0x39a/0x6c0 [ 311.315926][ C1] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 311.322386][ C1] ? __pfx___netdev_alloc_skb+0x10/0x10 [ 311.328029][ C1] ? __ieee80211_beacon_get+0xce1/0x1880 [ 311.333738][ C1] __ieee80211_beacon_get+0xd3d/0x1880 [ 311.339888][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 311.345641][ C1] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 311.351239][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 311.357520][ C1] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 311.363244][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 311.370593][ C1] __iterate_interfaces+0x2ab/0x590 [ 311.375861][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 311.382326][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 311.389646][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 311.395793][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 311.402951][ C1] mac80211_hwsim_beacon+0xbb/0x1c0 [ 311.408255][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 311.414122][ C1] __hrtimer_run_queues+0x52c/0xc60 [ 311.419460][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 311.425317][ C1] ? read_tsc+0x9/0x20 [ 311.429493][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 311.435352][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 311.440567][ C1] handle_softirqs+0x283/0x870 [ 311.445388][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 311.450237][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 311.455632][ C1] __irq_exit_rcu+0xca/0x1f0 [ 311.460300][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 311.465659][ C1] irq_exit_rcu+0x9/0x30 [ 311.469996][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 311.475688][ C1] [ 311.478703][ C1] [ 311.481670][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 311.487763][ C1] RIP: 0010:lock_acquire+0xe/0x360 [ 311.492928][ C1] Code: cc cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 41 57 41 56 41 55 41 54 53 <48> 83 ec 60 4d 89 ce 45 89 c7 41 89 cc 89 54 24 04 89 f3 49 89 fd [ 311.512778][ C1] RSP: 0018:ffffc90000b479e0 EFLAGS: 00000246 [ 311.518922][ C1] RAX: 0000000000000001 RBX: ffff888078a6bfc0 RCX: 0000000000000002 [ 311.526965][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e139ee0 [ 311.534974][ C1] RBP: ffff888050e68670 R08: 0000000000000000 R09: 0000000000000000 [ 311.543066][ C1] R10: dffffc0000000000 R11: ffffffff8b464590 R12: dffffc0000000000 [ 311.551179][ C1] R13: ffffffff8b464662 R14: ffff88807a850d80 R15: 00000000000000ce [ 311.559314][ C1] ? batadv_nc_worker+0xd2/0x610 [ 311.564299][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 311.569784][ C1] ? batadv_nc_worker+0xd2/0x610 [ 311.574770][ C1] batadv_nc_worker+0xef/0x610 [ 311.579615][ C1] ? batadv_nc_worker+0xd2/0x610 [ 311.584628][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 311.590518][ C1] process_scheduled_works+0xade/0x17b0 [ 311.596171][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 311.602324][ C1] worker_thread+0x8a0/0xda0 [ 311.607177][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 311.613572][ C1] ? __kthread_parkme+0x7b/0x200 [ 311.618643][ C1] kthread+0x70e/0x8a0 [ 311.622820][ C1] ? __pfx_worker_thread+0x10/0x10 [ 311.628054][ C1] ? __pfx_kthread+0x10/0x10 [ 311.632785][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 311.638284][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 311.643717][ C1] ? __pfx_kthread+0x10/0x10 [ 311.648436][ C1] ret_from_fork+0x3fc/0x770 [ 311.653065][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 311.658255][ C1] ? __switch_to_asm+0x39/0x70 [ 311.663072][ C1] ? __switch_to_asm+0x33/0x70 [ 311.668042][ C1] ? __pfx_kthread+0x10/0x10 [ 311.672804][ C1] ret_from_fork_asm+0x1a/0x30 [ 311.677724][ C1] [ 311.680784][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 311.688299][ C1] CPU: 1 UID: 0 PID: 44 Comm: kworker/u8:3 Not tainted 6.16.0-syzkaller-12084-g33caa208dba6 #0 PREEMPT(full) [ 311.700119][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 311.710652][ C1] Workqueue: bat_events batadv_nc_worker [ 311.716324][ C1] Call Trace: [ 311.719633][ C1] [ 311.722500][ C1] dump_stack_lvl+0x99/0x250 [ 311.727111][ C1] ? __asan_memcpy+0x40/0x70 [ 311.731721][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 311.736951][ C1] ? __pfx__printk+0x10/0x10 [ 311.741600][ C1] vpanic+0x281/0x750 [ 311.745651][ C1] ? __pfx__printk+0x10/0x10 [ 311.750317][ C1] ? __pfx_vpanic+0x10/0x10 [ 311.754867][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 311.760202][ C1] panic+0xb9/0xc0 [ 311.763991][ C1] ? __pfx_panic+0x10/0x10 [ 311.768443][ C1] __warn+0x31b/0x4b0 [ 311.772441][ C1] ? __rate_control_send_low+0x5df/0x820 [ 311.778210][ C1] ? __rate_control_send_low+0x5df/0x820 [ 311.783875][ C1] report_bug+0x2be/0x4f0 [ 311.788218][ C1] ? __rate_control_send_low+0x5df/0x820 [ 311.793890][ C1] ? __rate_control_send_low+0x5df/0x820 [ 311.799774][ C1] ? __rate_control_send_low+0x5e1/0x820 [ 311.805526][ C1] handle_bug+0x84/0x160 [ 311.809889][ C1] exc_invalid_op+0x1a/0x50 [ 311.814539][ C1] asm_exc_invalid_op+0x1a/0x20 [ 311.819434][ C1] RIP: 0010:__rate_control_send_low+0x5df/0x820 [ 311.825738][ C1] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 60 60 b0 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 82 13 94 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 311.845571][ C1] RSP: 0018:ffffc90000a08758 EFLAGS: 00010246 [ 311.851686][ C1] RAX: 76a4b2c2c6960800 RBX: 000000000000000c RCX: ffff88801faada00 [ 311.859764][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 311.867837][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 311.875916][ C1] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff88807ce662a8 [ 311.884163][ C1] R13: 0000000000000000 R14: ffff888027b08e40 R15: ffff888027b0b0d8 [ 311.892167][ C1] ? __rate_control_send_low+0x5de/0x820 [ 311.897851][ C1] rate_control_send_low+0x194/0x7a0 [ 311.903164][ C1] rate_control_get_rate+0x20b/0x5d0 [ 311.908651][ C1] ieee80211_beacon_get_finish+0x39a/0x6c0 [ 311.914477][ C1] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 311.920854][ C1] ? __pfx___netdev_alloc_skb+0x10/0x10 [ 311.926419][ C1] ? __ieee80211_beacon_get+0xce1/0x1880 [ 311.932088][ C1] __ieee80211_beacon_get+0xd3d/0x1880 [ 311.937609][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 311.943184][ C1] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 311.948667][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 311.954765][ C1] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 311.960345][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 311.967569][ C1] __iterate_interfaces+0x2ab/0x590 [ 311.972901][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 311.978995][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 311.986210][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 311.992299][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 311.999367][ C1] mac80211_hwsim_beacon+0xbb/0x1c0 [ 312.004618][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 312.010443][ C1] __hrtimer_run_queues+0x52c/0xc60 [ 312.015694][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 312.021443][ C1] ? read_tsc+0x9/0x20 [ 312.025567][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 312.031567][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 312.036735][ C1] handle_softirqs+0x283/0x870 [ 312.041548][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 312.046346][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 312.051772][ C1] __irq_exit_rcu+0xca/0x1f0 [ 312.056384][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 312.061606][ C1] irq_exit_rcu+0x9/0x30 [ 312.065955][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 312.071788][ C1] [ 312.074727][ C1] [ 312.077665][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 312.083743][ C1] RIP: 0010:lock_acquire+0xe/0x360 [ 312.088876][ C1] Code: cc cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 41 57 41 56 41 55 41 54 53 <48> 83 ec 60 4d 89 ce 45 89 c7 41 89 cc 89 54 24 04 89 f3 49 89 fd [ 312.108569][ C1] RSP: 0018:ffffc90000b479e0 EFLAGS: 00000246 [ 312.114666][ C1] RAX: 0000000000000001 RBX: ffff888078a6bfc0 RCX: 0000000000000002 [ 312.122739][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e139ee0 [ 312.130725][ C1] RBP: ffff888050e68670 R08: 0000000000000000 R09: 0000000000000000 [ 312.138709][ C1] R10: dffffc0000000000 R11: ffffffff8b464590 R12: dffffc0000000000 [ 312.146717][ C1] R13: ffffffff8b464662 R14: ffff88807a850d80 R15: 00000000000000ce [ 312.154705][ C1] ? batadv_nc_worker+0xd2/0x610 [ 312.159693][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 312.165087][ C1] ? batadv_nc_worker+0xd2/0x610 [ 312.170040][ C1] batadv_nc_worker+0xef/0x610 [ 312.174837][ C1] ? batadv_nc_worker+0xd2/0x610 [ 312.179785][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 312.185567][ C1] process_scheduled_works+0xade/0x17b0 [ 312.191237][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 312.197243][ C1] worker_thread+0x8a0/0xda0 [ 312.201934][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 312.208284][ C1] ? __kthread_parkme+0x7b/0x200 [ 312.213247][ C1] kthread+0x70e/0x8a0 [ 312.217426][ C1] ? __pfx_worker_thread+0x10/0x10 [ 312.222719][ C1] ? __pfx_kthread+0x10/0x10 [ 312.227324][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 312.232796][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 312.238011][ C1] ? __pfx_kthread+0x10/0x10 [ 312.242622][ C1] ret_from_fork+0x3fc/0x770 [ 312.247229][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 312.252356][ C1] ? __switch_to_asm+0x39/0x70 [ 312.257132][ C1] ? __switch_to_asm+0x33/0x70 [ 312.261908][ C1] ? __pfx_kthread+0x10/0x10 [ 312.266518][ C1] ret_from_fork_asm+0x1a/0x30 [ 312.271416][ C1] [ 312.274791][ C1] Kernel Offset: disabled [ 312.279124][ C1] Rebooting in 86400 seconds..