last executing test programs: 5.496278965s ago: executing program 0 (id=2114): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x40, 0x20, 0x0, 0x8}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000080)={r1, 0xfb39}, 0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000000c0)={r1, 0x8f1, 0x3, [0xfffe, 0x0, 0x8000]}, 0xe) r3 = socket$phonet(0x23, 0x2, 0x1) recvfrom$phonet(r3, &(0x7f0000000100)=""/9, 0x9, 0x140, &(0x7f0000000140)={0x23, 0x1, 0x8, 0x9}, 0x10) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000180)={r1, 0x2}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000200)={r4, 0xfff}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={r1, @in6={{0xa, 0x4e22, 0x9, @mcast1, 0x1}}, 0x888, 0x3, 0x8001, 0x56, 0x4, 0x2, 0x8}, 0x9c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000340)={r1, @in6={{0xa, 0x4e20, 0x7, @remote, 0x4}}, 0x4, 0x718, 0x7, 0xfffffffe, 0x1}, &(0x7f0000000400)=0x98) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000440)={r5, 0x3ff}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000004c0)={r5, 0xbe83, 0x83, 0x8, 0x3, 0x6, 0x2, 0x8, {0x0, @in6={{0xa, 0x4e23, 0x8, @remote, 0x8}}, 0x10000, 0x7, 0x4, 0x0, 0x9}}, &(0x7f0000000580)=0xb0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000005c0)={r7, 0x4, 0x2}, &(0x7f0000000600)=0x8) r8 = socket$isdn(0x22, 0x3, 0x10) ioctl$IMCLEAR_L2(r8, 0x80044946, &(0x7f0000000640)=0xa4e0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r9, 0x84, 0x17, &(0x7f0000000680)={r4, 0x5, 0xb9, "426b9b9d197c68d9b06e237c573c8ca12b7c4cf92b73461dfef5da4150b78f71ee568dc9c4234e98cea3ee7d6b86d23f340b25022d3116543b8255096ab5d1e6591820515628591883b92a6b2ad5f7cbae6d05e46ee74757eba9e107b8fe1809cbfc3c4b66fbf89d5f3d21f8448819f8c40ba6e6568b4f3455f6aba27a369124d6f16c9b4105f92fa440e99ec8ea07b2eb476aafaa89271db4a4481f1615e48ce064003735da2a08801596bc5f53bda18b8f8c939adc282446"}, 0xc1) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000780)={r4, 0x100}, &(0x7f00000007c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000800)={r10, @in6={{0xa, 0x4e21, 0xd, @local, 0x9}}, 0x7, 0xf168}, 0x90) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000008c0)={r6, 0xfffffa4e}, &(0x7f0000000900)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000940)={r11, @in6={{0xa, 0x4e20, 0x9, @loopback, 0x9}}, 0x3, 0x2, 0xc9a, 0xff0, 0x80, 0x1, 0x1}, 0x9c) openat$nci(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000a40)=[@in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e20, 0x7fff, @rand_addr=' \x01\x00', 0x7a}], 0x2c) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000b00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r12, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x4c, r13, 0x2, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_FRAME={0x29, 0x33, @action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, {0xf4}, @broadcast, @broadcast, @from_mac=@device_b, {0x5, 0x80}}, @sp_mp_open={0xf, 0x1, {0x4104, {0x1, 0x7, [{0x5}, {0x16}, {0x36}, {0x12, 0x1}, {0x24}, {0x9}, {0x5}]}, @void, @void}}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x440d4}, 0x4004000) recvmmsg(r0, &(0x7f0000005ac0)=[{{&(0x7f0000000c40)=@hci, 0x80, &(0x7f0000001080)=[{&(0x7f0000000cc0)=""/121, 0x79}, {&(0x7f0000000d40)=""/197, 0xc5}, {&(0x7f0000000e40)=""/227, 0xe3}, {&(0x7f0000000f40)=""/130, 0x82}, {&(0x7f0000001000)=""/93, 0x5d}], 0x5, &(0x7f0000001100)=""/4096, 0x1000}, 0x7ff}, {{&(0x7f0000002100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000002180)=""/127, 0x7f}], 0x1, &(0x7f0000002240)=""/254, 0xfe}, 0xf}, {{&(0x7f0000002340)=@ax25={{0x3, @rose}, [@rose, @netrom, @default, @rose, @null, @bcast, @bcast, @bcast]}, 0x80, &(0x7f0000002500)=[{&(0x7f00000023c0)=""/60, 0x3c}, {&(0x7f0000002400)=""/182, 0xb6}, {&(0x7f00000024c0)=""/12, 0xc}], 0x3}, 0x5}, {{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000002540)=""/36, 0x24}, {&(0x7f0000002580)=""/181, 0xb5}, {&(0x7f0000002640)=""/170, 0xaa}, {&(0x7f0000002700)=""/109, 0x6d}, {&(0x7f0000002780)=""/169, 0xa9}, {&(0x7f0000002840)}, {&(0x7f0000002880)=""/143, 0x8f}], 0x7, &(0x7f00000029c0)=""/85, 0x55}, 0x8001}, {{&(0x7f0000002a40)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000004040)=[{&(0x7f0000002ac0)=""/240, 0xf0}, {&(0x7f0000002bc0)=""/83, 0x53}, {&(0x7f0000002c40)=""/82, 0x52}, {&(0x7f0000002cc0)=""/254, 0xfe}, {&(0x7f0000002dc0)=""/181, 0xb5}, {&(0x7f0000002e80)=""/109, 0x6d}, {&(0x7f0000002f00)=""/204, 0xcc}, {&(0x7f0000003000)=""/4096, 0x1000}, {&(0x7f0000004000)}], 0x9, &(0x7f0000004100)=""/168, 0xa8}, 0x80}, {{0x0, 0x0, &(0x7f0000005380)=[{&(0x7f00000041c0)=""/241, 0xf1}, {&(0x7f00000042c0)=""/141, 0x8d}, {&(0x7f0000004380)=""/4096, 0x1000}], 0x3, &(0x7f00000053c0)=""/102, 0x66}, 0x1000}, {{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000005440)=""/173, 0xad}, {&(0x7f0000005500)=""/169, 0xa9}, {&(0x7f00000055c0)=""/216, 0xd8}], 0x3}, 0x5}, {{&(0x7f0000005700)=@nfc_llcp, 0x80, &(0x7f0000005980)=[{&(0x7f0000005780)=""/42, 0x2a}, {&(0x7f00000057c0)=""/247, 0xf7}, {&(0x7f00000058c0)=""/172, 0xac}], 0x3, &(0x7f00000059c0)=""/235, 0xeb}, 0x8}], 0x8, 0x2, &(0x7f0000005cc0)={0x0, 0x989680}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r9, 0x84, 0x6c, &(0x7f0000005d00)={r10, 0x78, "7feeba42007baacc7ff004458dc2368f9b36bd1d1203352f21f3a700f5580afbc99975bddf6a5fa3598fc1c9a302c4c6190c2687bc5ad3fcb54092f4a827a5eaa11bc68f02858177023c3598a6267230cf6845908a5fe8f129dd0e3fee595e08a185cdbf6950e430f0b33623ea1561c8207a8c154a40d7ed"}, &(0x7f0000005d80)=0x80) 5.206772808s ago: executing program 0 (id=2119): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000050700"/20, @ANYRESDEC=r0, @ANYBLOB="00000000080000002000128008000100687372"], 0x40}}, 0x0) 5.047714911s ago: executing program 0 (id=2122): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x33, 0x0, 0xffffffffffffffff}, {@in=@private=0xa010100, 0x0, 0x6c}, @in=@broadcast, {}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x0, 0x2}}}, 0xf8}}, 0x0) (async) socket$inet6(0xa, 0x800, 0x101) 4.788516385s ago: executing program 0 (id=2124): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="500100001000130429bd70000000000000000000000000000000000000000000e0000002000000000000000000000000000000004e2400000200002021000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="640101020000000000000000000000000000000032000000e000000100000080000000000003000000000000000000000000000000000000000000000000000000000000000000000800000000000000000008000000000081000000000000000000000000000000000000000000000005000000000000000400000000000000060000040000000000000000f9ffffff00000800000000000000000002000481680000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000080"], 0x150}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x0) 4.728986033s ago: executing program 0 (id=2125): ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvfrom(r0, 0x0, 0x0, 0x40002020, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, 0x7, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x2000c094) 4.482810238s ago: executing program 0 (id=2131): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x6}, 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x300f000, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) openat$tun(0xffffffffffffff9c, 0x0, 0x440, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0x4) syz_emit_ethernet(0x0, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601020000000000800000000000000900020073797a310000000005000100070000001c0007800c00018008000140640101020c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000400000000000000000c00078008000640000000070500010007000000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c706f727400"], 0x58}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6}]}}}]}, 0x40}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) 2.490480545s ago: executing program 1 (id=2150): syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x65, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0x0, [0xff, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {}, {}, {0x8, 0x6558, 0xfffffffd}}}}}}, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) (async, rerun: 64) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (rerun: 64) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000200)={r1, 0x2, 0x30}, &(0x7f0000000240)=0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) (async) setsockopt$inet6_int(r2, 0x29, 0x38, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2, 0x0) (async, rerun: 32) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async, rerun: 32) r3 = socket(0x11, 0x2, 0x0) close(r3) (async) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async, rerun: 32) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) (rerun: 32) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000000)={r5, 0x2}, 0xc) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=r5, 0x4) (rerun: 64) 2.186183185s ago: executing program 1 (id=2156): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x80, 0xd, 0x5, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}, @dev={0xfe, 0x80, '\x00', 0x11}, 0x7800, 0x8020, 0x14853, 0x400000}}) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e0030000280080006"], 0x68}}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @rand_addr=0x64010102}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000020000000000800040001000000", 0x24) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x44}, 0x2}, 0x1c) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000140000006000000001001100fe88a4"], 0xfdef) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000000100)={0x0, 0x32, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x24000000) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r12, &(0x7f0000000000)={0x0, 0x36, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff64}, 0x40000040) 2.060298998s ago: executing program 3 (id=2157): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000220}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r1], 0x30}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) 1.896481062s ago: executing program 3 (id=2159): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x3e, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0xff, 0x0, @empty}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x0, 0xfffffffa}]}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a40)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@restrict={0x6, 0x0, 0x0, 0xb, 0x5}, @typedef={0x40000008, 0x0, 0x0, 0x8, 0x4}]}}, 0x0, 0x32, 0x0, 0x1, 0x7fffffff}, 0x28) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.swap.events\x00', 0x275a, 0x0) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x7fff, 0x0) sendfile(r6, r7, 0x0, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002d00210000000000000000000400008008000c"], 0x1c}], 0x1}, 0x0) 1.795798904s ago: executing program 1 (id=2160): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000003c0)={0x6, 0x35, 0x8205, 0xc42a, 0xd, 0x9b45, 0x4, 0xfffffff8}, 0x20) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001800128008000100767469000c00028008000100", @ANYRES32=r1, @ANYBLOB="08020a00", @ANYRES32=r1, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x20000881}, 0x4004044) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4800) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="000126bd7000fedbdf25050000004c00018014000200776c616e30000000000000000000000008000300010000001400020074756e6c300000000000000000000000080003000100000008000300020000000800030000000000"], 0x60}, 0x1, 0x0, 0x0, 0x20044800}, 0x4c004) 1.520149354s ago: executing program 1 (id=2164): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000000)={'veth0_virt_wifi\x00', {0x2, 0x0, @dev}}) 1.446094454s ago: executing program 2 (id=2165): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)={0x44, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xd}]}]}, 0x44}}, 0x4000000) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, 0x0, 0x8, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x2400c000}, 0x44001) (async) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r2) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r3, 0x1, 0x70bd2c, 0x0, {0x3}}, 0x14}}, 0x0) pselect6(0x40, &(0x7f0000000000)={0x6, 0x2, 0xfffffffffffffffd, 0x1, 0x7, 0x100000001, 0x2, 0x6}, &(0x7f0000000040)={0xb, 0x40f, 0x0, 0x6, 0x5, 0x2, 0x6, 0x1}, &(0x7f0000000080)={0x10001, 0x4, 0xf80, 0x4, 0x7, 0x4, 0x37c, 0x3}, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000140)={&(0x7f0000000100)={[0x8]}, 0x8}) 1.410572367s ago: executing program 4 (id=2166): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) socket$netlink(0x10, 0x3, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000200)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @multicast1}, "00186371ae9b1c03"}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r2, 0x1, 0x20000000, 0xfffffffe, {0x27}, [{@nsim={{0xe}, {0xffffffffffffff99, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x51}}]}, 0x50}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="660a00000000000061114c000000000085000000cf00000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x150, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@dev={0xac, 0x14, 0x14, 0x3d}, 0x0, 0x0, 0x4c21, 0x2, 0x0, 0x0, 0x0, 0x5c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@remote, {0x0, 0x0, 0x0, 0xa, 0x0, 0x80000, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x40, "217d66d38547aa140db8a200000000c538c7cb7a"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x0) 1.169178248s ago: executing program 4 (id=2167): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) (async) r1 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x3d}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) (async) shutdown(r2, 0x0) (async) r3 = socket(0x1d, 0x2, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r3, 0x6a, 0x4, 0x20000000, 0x4) (async) recvmsg$unix(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) syz_open_procfs$namespace(r4, 0x0) (async) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xf4, r0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x6000, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000400)={0x1, 0x2, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random="672bfc560d12"]}) (async) r6 = socket$inet6(0xa, 0x80002, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r8, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) listen(r8, 0x80) listen(r8, 0x0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x24}}, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) (async) sendmsg$sock(r6, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e23, 0x41d, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x14, 0x1, 0x51, 0x1}}], 0x18}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x37}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0xc, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) 1.053958727s ago: executing program 2 (id=2168): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)={0x60, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "31329eae551326051c0ecba1df0ef9cc9415b343831f26fe"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0x60}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x2a, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)={0x60, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "31329eae551326051c0ecba1df0ef9cc9415b343831f26fe"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0x60}}, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x2a, 0x0, &(0x7f0000000000)) (async) 1.029587403s ago: executing program 4 (id=2169): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x81000) sendmsg$alg(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="18df4eb5edb0f06f8d35653d39ea305f81a2731c2b6983200f1acdb41b61b3d7f6c46f4eadff5f2f2ceeb50d726702a0a953a8ddce48af35abdf635d6571f01dd28c62c153006f915b8125f56e6fabffe57c1e27324149e4b29f83a2f3033c99334c66630b3ee980d0098de52879d91c2fd2c0beecd804cb241580776549314b6394a1e10293abac5742ecd9bd98b0bb0c325554ad7824485e6e756f4b7b04de984ac1ed9aaee91c15bffa8aab789f461fdc4305c7092d9c2e8d678482874b4390c5623b0dab42399f309eb071f411754222bc9b6309e162c2ad831c4ac3", 0xde}, {&(0x7f00000001c0)="97b7bcf53d059f1ef3f8b2b29f558f40dd6f15351b905500e34e70eaf043d6f1f73fad27cb8acf15c5f5c690992fde648dd2f0fe09cebd63f20008924f358f8322c1a9bdcbb43d00fd4a47f642fc45f73bdc60656c3aa1e46b9321cf7a570cb052305f2325400ef5b99c07adb80fd10a197982ec4f33c727a0851d89349187a1e4875cd80266663fd2fd473c75cca30798f8adcb17505e1ce80a6a2ebe", 0x9d}], 0x2, &(0x7f0000000300)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x9}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x100, 0x117, 0x2, 0xe9, "7aafb98a4723a9c5f4ffc4e175b88ab9fd7fe54462d88ad6d8926ee32b17955ffb4cdef5dd3fd21f80d8e2d04b7f644c01d09f97a782f31cf0ed20b47ea7d852268aed367c28d72cc2012d34ed4443d52feeaa47a3ddd685d78753cac3618d552460905500ed4799c41defaa9d73581d77badbf2eef2de968b2150b78cc88cef1b039865ddced9cccd3138b879272de693c0f4a04286ec192256fb175c464a3d26249ac573607766a8950522f633e91d60b505409a8365e3dbaa903a8c63041c1d7f324a362b211f3dfccf9728b059cf6733dcbec1fd8ddebe08b994122a1401b3c65c2276810c8619"}, @iv={0x68, 0x117, 0x2, 0x4d, "c36877e7a5ac2a467c4cd2f67dd1305eedafb3a745124d62fc4bb24ee8040b050ebdc1c63c7a1e4be5c8489f3464abc3c7f2d7b1eb3ec9caf7025c2ccadccf0816787df96b39365fc6e7ccb747"}, @op={0x18}, @iv={0x50, 0x117, 0x2, 0x39, "d9d56bbcbc026b81391e6c171248ba55ba36998ebe15b1ea5ab2e8411f9a9883a812f3a6125246d1528c32630e227befd34aac6ac0e7d2443c"}], 0x218, 0x4}, 0x44011) (async) sendmsg$alg(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="18df4eb5edb0f06f8d35653d39ea305f81a2731c2b6983200f1acdb41b61b3d7f6c46f4eadff5f2f2ceeb50d726702a0a953a8ddce48af35abdf635d6571f01dd28c62c153006f915b8125f56e6fabffe57c1e27324149e4b29f83a2f3033c99334c66630b3ee980d0098de52879d91c2fd2c0beecd804cb241580776549314b6394a1e10293abac5742ecd9bd98b0bb0c325554ad7824485e6e756f4b7b04de984ac1ed9aaee91c15bffa8aab789f461fdc4305c7092d9c2e8d678482874b4390c5623b0dab42399f309eb071f411754222bc9b6309e162c2ad831c4ac3", 0xde}, {&(0x7f00000001c0)="97b7bcf53d059f1ef3f8b2b29f558f40dd6f15351b905500e34e70eaf043d6f1f73fad27cb8acf15c5f5c690992fde648dd2f0fe09cebd63f20008924f358f8322c1a9bdcbb43d00fd4a47f642fc45f73bdc60656c3aa1e46b9321cf7a570cb052305f2325400ef5b99c07adb80fd10a197982ec4f33c727a0851d89349187a1e4875cd80266663fd2fd473c75cca30798f8adcb17505e1ce80a6a2ebe", 0x9d}], 0x2, &(0x7f0000000300)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x9}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x100, 0x117, 0x2, 0xe9, "7aafb98a4723a9c5f4ffc4e175b88ab9fd7fe54462d88ad6d8926ee32b17955ffb4cdef5dd3fd21f80d8e2d04b7f644c01d09f97a782f31cf0ed20b47ea7d852268aed367c28d72cc2012d34ed4443d52feeaa47a3ddd685d78753cac3618d552460905500ed4799c41defaa9d73581d77badbf2eef2de968b2150b78cc88cef1b039865ddced9cccd3138b879272de693c0f4a04286ec192256fb175c464a3d26249ac573607766a8950522f633e91d60b505409a8365e3dbaa903a8c63041c1d7f324a362b211f3dfccf9728b059cf6733dcbec1fd8ddebe08b994122a1401b3c65c2276810c8619"}, @iv={0x68, 0x117, 0x2, 0x4d, "c36877e7a5ac2a467c4cd2f67dd1305eedafb3a745124d62fc4bb24ee8040b050ebdc1c63c7a1e4be5c8489f3464abc3c7f2d7b1eb3ec9caf7025c2ccadccf0816787df96b39365fc6e7ccb747"}, @op={0x18}, @iv={0x50, 0x117, 0x2, 0x39, "d9d56bbcbc026b81391e6c171248ba55ba36998ebe15b1ea5ab2e8411f9a9883a812f3a6125246d1528c32630e227befd34aac6ac0e7d2443c"}], 0x218, 0x4}, 0x44011) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800c0001006d6163766c616e0018000280080001001000000004000580080003000300000008000500", @ANYRES32=r3, @ANYBLOB="0864e6db4eb5f3fd0633632a3ae466582a1947eb9463d3a2fe537c465a407ed1d6cdcced662c83a3b243e9e692e5d4cb143e482caefbb58349cd70029922b3fe96700e3e491734ebbdbe7e"], 0x50}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800c0001006d6163766c616e0018000280080001001000000004000580080003000300000008000500", @ANYRES32=r3, @ANYBLOB="0864e6db4eb5f3fd0633632a3ae466582a1947eb9463d3a2fe537c465a407ed1d6cdcced662c83a3b243e9e692e5d4cb143e482caefbb58349cd70029922b3fe96700e3e491734ebbdbe7e"], 0x50}}, 0x0) accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000640)=0x60) (async) r4 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000640)=0x60) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$nl_route(r0, &(0x7f0000000a40)={&(0x7f0000000980), 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)=@ipmr_getroute={0x1c, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfc, {0x80, 0x0, 0x14, 0xfa, 0xfc, 0x0, 0xfe, 0x2, 0x3000}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x40) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r8], 0x1c}}, 0x0) sendmsg$nfc_llcp(r4, &(0x7f0000000940)={&(0x7f0000000680)={0x27, r8, 0x1, 0x6, 0x3, 0x7, "2c5d6defd5f424cf3fd1b298bee854311405a15c29c9ccff058dde86ead37501164e7c0469f17c35dead117a2c680cbd1f7426a34d52b2f4a26a68f3c47b19", 0x15}, 0x60, &(0x7f00000007c0)=[{&(0x7f0000000700)="6ad83533511c98fa78d47533e6c460588ed14d5ee1e0a932a6a1318c2671133cf574f99d40827634ea6b7cb7b8f59dedfe2cee9fc516deaf938584142654fda43f10f472e0dbe88af01eae2be73bf61ce958697e8bdcbcc78f197b04d20cd1bee3ae96340a3ee158b13fe63e309578f9bb14d2b827c1857315f1db82edb236a3bcf7ca7bc001e7e64e0170daf4551e3031006b3441ea2d", 0x97}], 0x1, &(0x7f0000000800)={0x108, 0x1, 0x2e, "cb6474b664f1e12478dd886f897bc3bf190489d4e4485a07196b71af465043919b07ee356ba6190063828e08937e60c0e3777d9d288856e96ea8660896c875c71c80d1f55eb03f235a6aca5340a4ca08eead1bb0c20afa4822746d1124192606b7d72f3c522becc516fe2bf342afca79991928001f87f38a25a1e9ff158f9207d430dd7896226618db1a4e86c0d1d32648a69075fb7451b1955728a46073723bb464024496f43223403c595c794dd1825ad5b417a9489ec7c913d048a4d48d03765d72a8ed15534d007fc9461f75258542adfe62b302e8766c56793845ed549e1b9be9f33fae663486f2c725c7212f9c9b039cd8ac"}, 0x108, 0x4000815}, 0x40000) 832.387162ms ago: executing program 3 (id=2170): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7feee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc9", 0x26, 0x0, &(0x7f0000000540)={0xc9, 0x19, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 831.319756ms ago: executing program 4 (id=2171): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000006800e97800000000040000000a00d5367d01000000000004"], 0x1c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket(0x2b, 0x1, 0x1) (async) r4 = socket(0x2b, 0x1, 0x1) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c) (async) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r3) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r3, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f00000007c0)={0x160, r5, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0x2c, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0x3, 0x4}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0x1, 0x0, 0xffffffffffffffff, 0xb3, 0x28}}, @supported_rates={0x1, 0x3, [{0xc, 0x1}, {0x1, 0x1}, {0x18}]}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x9, 0xb4, 0xf0}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @chsw_timing={0x68, 0x4, {0x2, 0x26}}, @dsss={0x3, 0x1, 0xac}]}, @NL80211_ATTR_IE={0x41, 0x2a, [@erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xf5}}, @supported_rates={0x1, 0x5, [{0x9}, {0x60, 0x1}, {0x5}, {0x30, 0x1}, {0x1}]}, @ht={0x2d, 0x1a, {0x20, 0x0, 0x3, 0x0, {0xfffffffffffffff9, 0x2, 0x0, 0x225, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800, 0x2, 0x8}}, @chsw_timing={0x68, 0x4, {0x6f}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x7}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x40}, @NL80211_ATTR_IE={0xad, 0x2a, [@random_vendor={0xdd, 0x7c, "98ea89292505382bef3d3d4f9681cd02d575962d90ae74914603204d216627c996e059101fd08183a8abb00aa81e7ee607b46a0a3c421e07cc4d3fb6b6d2f082c17b3676416c80f326fe0d3ab806f3373cd5566a6eb248dcaf733087a8fb11ff3d70468a571f2dc2f0db1641aa7e7ce0a6f8cd419185fb5996374252"}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @prep={0x83, 0x1f, {{}, 0x1, 0x6, @device_a, 0x7, @void, 0x4, 0x7fa, @device_b}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @ibss={0x6, 0x2}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x55}]}, 0x160}, 0x1, 0x0, 0x0, 0x40850}, 0x20000054) (async) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r3, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f00000007c0)={0x160, r5, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0x2c, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0x3, 0x4}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0x1, 0x0, 0xffffffffffffffff, 0xb3, 0x28}}, @supported_rates={0x1, 0x3, [{0xc, 0x1}, {0x1, 0x1}, {0x18}]}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x9, 0xb4, 0xf0}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @chsw_timing={0x68, 0x4, {0x2, 0x26}}, @dsss={0x3, 0x1, 0xac}]}, @NL80211_ATTR_IE={0x41, 0x2a, [@erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xf5}}, @supported_rates={0x1, 0x5, [{0x9}, {0x60, 0x1}, {0x5}, {0x30, 0x1}, {0x1}]}, @ht={0x2d, 0x1a, {0x20, 0x0, 0x3, 0x0, {0xfffffffffffffff9, 0x2, 0x0, 0x225, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800, 0x2, 0x8}}, @chsw_timing={0x68, 0x4, {0x6f}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x7}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x40}, @NL80211_ATTR_IE={0xad, 0x2a, [@random_vendor={0xdd, 0x7c, "98ea89292505382bef3d3d4f9681cd02d575962d90ae74914603204d216627c996e059101fd08183a8abb00aa81e7ee607b46a0a3c421e07cc4d3fb6b6d2f082c17b3676416c80f326fe0d3ab806f3373cd5566a6eb248dcaf733087a8fb11ff3d70468a571f2dc2f0db1641aa7e7ce0a6f8cd419185fb5996374252"}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @prep={0x83, 0x1f, {{}, 0x1, 0x6, @device_a, 0x7, @void, 0x4, 0x7fa, @device_b}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @ibss={0x6, 0x2}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x55}]}, 0x160}, 0x1, 0x0, 0x0, 0x40850}, 0x20000054) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x2, 0x18, 0x1, 0x2, 0x2, 0x0, 0x70bd27, 0x25dfdbff}, 0x10}}, 0x4040000) (async) sendmsg$key(r6, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x2, 0x18, 0x1, 0x2, 0x2, 0x0, 0x70bd27, 0x25dfdbff}, 0x10}}, 0x4040000) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1100000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000240)={0x2, 0x3b7, 0x14, &(0x7f0000000000)=""/20}) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r9) (async) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r9) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r11) (async) close(r11) socket$unix(0x1, 0x1, 0x0) 791.723569ms ago: executing program 2 (id=2172): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000040)={0x3, 0xfffffffffffffff9}) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @broadcast}, &(0x7f00000000c0)=0x10) sendfile(r1, r0, &(0x7f0000000100)=0xdcd, 0x800) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000140)={0x1, 0xfe, 0xd, 0x3, 0x3, 0x0, 0x97, 0xb, 0x4, 0x2, 0x9, 0x3, 0xf, 0x7}, 0xe) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000280)={'broute\x00', 0x0, 0x4, 0xbe, [0x3, 0x2, 0x5, 0x5, 0x0, 0x80000001], 0x3, &(0x7f0000000180)=[{}, {}, {}], &(0x7f00000001c0)=""/190}, &(0x7f0000000300)=0x78) (async) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000340)={0x0, 0x9}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000003c0)={r2, 0x6, 0x1, [0x7]}, 0xa) (async) socketpair(0x1f, 0x80000, 0xfffffffa, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000440)=0x5, 0x4) (async) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000480)={r2, 0x9, 0x593, 0x6}, &(0x7f00000004c0)=0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000500)={r5, 0x7, 0x0, 0x9, 0xb, 0x7}, &(0x7f0000000540)=0x14) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f0000000580)={0x8, 'vxcan1\x00', {'veth0_to_batadv\x00'}}) (async) ioctl$FIBMAP(r4, 0x1, &(0x7f00000005c0)=0xc87b) (async) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000600)={r5, 0xfffffffc}, &(0x7f0000000640)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000680)=@sack_info={r6, 0xa14, 0x8}, 0xc) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r3) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000740)={'team0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000840)={'ip_vti0\x00', &(0x7f0000000780)={'syztnl0\x00', 0x0, 0x709, 0x16, 0x5, 0x0, {{0x20, 0x4, 0x1, 0x20, 0x80, 0x65, 0x0, 0x2, 0x4, 0x0, @remote, @loopback, {[@timestamp_prespec={0x44, 0x4c, 0x20, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x27}, 0x8001}, {@local, 0x4}, {@local, 0xfffff800}, {@loopback, 0x7}, {@local, 0x4}, {@private=0xa010102, 0xe}, {@loopback, 0x28e}, {@multicast2, 0x58}, {@loopback, 0xb9f}]}, @noop, @lsrr={0x83, 0x13, 0xcc, [@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x19}, @loopback, @rand_addr=0x64010101]}, @ra={0x94, 0x4}, @rr={0x7, 0x7, 0xf6, [@loopback]}]}}}}}) (async) getpeername$packet(r4, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000008c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000980)={'syztnl1\x00', &(0x7f0000000900)={'syztnl1\x00', 0x0, 0x4, 0x5, 0x5, 0x7, 0x0, @empty, @private2, 0x8000, 0x10, 0x2, 0x2e}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000a40)={'sit0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0xf80f, 0x8, 0x200000, 0x3, {{0x18, 0x4, 0x0, 0x3a, 0x60, 0x65, 0x0, 0xb3, 0x29, 0x0, @multicast2, @broadcast, {[@timestamp_prespec={0x44, 0x14, 0x93, 0x3, 0x7, [{@private=0xa010100, 0x10}, {@multicast2, 0x401}]}, @timestamp={0x44, 0x8, 0xa6, 0x0, 0x3, [0x3]}, @cipso={0x86, 0x30, 0x3, [{0x0, 0x4, "66cd"}, {0x5, 0x10, "1dc5d212aec653ea5fd609e3d442"}, {0x1, 0x10, "722c7e686c919e7a949085e1c380"}, {0x7, 0x6, "5a2d11bb"}]}]}}}}}) (async) getsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000a80)={@remote, 0x0}, &(0x7f0000000ac0)=0x14) (async) getsockname$packet(r4, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000b40)=0x14) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d40)={&(0x7f0000000b80)={0x1a8, r7, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x8091}, 0x4081) (async) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000dc0), &(0x7f0000000e00)=0x4) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000e40)={r6, 0x4, 0x2, 0x1}, &(0x7f0000000e80)=0x10) (async) recvfrom$l2tp6(r4, &(0x7f0000000ec0)=""/241, 0xf1, 0x12040, &(0x7f0000000fc0)={0xa, 0x0, 0x0, @private2}, 0x20) (async) r15 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001040)=@generic={&(0x7f0000001000)='./file0\x00', 0x0, 0x10}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=@base={0x17, 0xffff0b7d, 0x8000, 0x5, 0x8002, r15, 0xe, '\x00', r13, 0xffffffffffffffff, 0x4, 0x4, 0x3}, 0x50) 650.43478ms ago: executing program 2 (id=2173): r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80"], 0xfdef) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000)=0x4, 0x4) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="450400000000000000000a00000008000280040004007f827d9c23ca1e4d1ca4085c39a63c59bf1b08c0b6fdc19ddab92abefbeb28144e96abf55c18ead48622fcc99384b539ee98abbc6d83958708aef4701a570ae438ee5b3b898c5cac4d31650cd2565f469f2bbb7d07f156041f586a7b36adcefa555479e2f471f486a82941c2642d15f396300fb127b6d6a13516c40543612cd1988033890cc5"], 0x1c}}, 0x0) 606.923921ms ago: executing program 3 (id=2174): ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, &(0x7f0000000000)=0xffff) r0 = socket(0x3d, 0x2, 0xa5) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e22, @private=0xa010100}}, 0x100, 0x4}, &(0x7f0000000100)=0x90) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000140)={r1, 0x1000, "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"}, &(0x7f0000001180)=0x1008) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000011c0)={0x4, 0x1, 0xbf8, 0x5, r1}, 0x10) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000001200)={r1, 0x3, 0xa, [0x6, 0x25be, 0x7, 0xa87b, 0x8, 0x8, 0x101, 0x216c, 0x8000, 0x9]}, 0x1c) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000001240)={0x1, [0x0]}, &(0x7f0000001280)=0x8) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x50, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xa6b6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3ba}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}]}, 0x50}, 0x1, 0x0, 0x0, 0x44004}, 0x1) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x30, 0x140b, 0x400, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x84) r4 = accept4$phonet_pipe(r0, &(0x7f0000001500), &(0x7f0000001540)=0x10, 0x80000) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000001580)={0x2, 'ip6tnl0\x00', {0x3}, 0xf}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000015c0)={@empty, 0x9, 0x2, 0x0, 0x1, 0x100, 0x3}, &(0x7f0000001600)=0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000001640)={r2, @in={{0x2, 0x4e20, @remote}}, 0x6, 0x2}, 0x90) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000001700)={r2, 0x3, 0x10}, &(0x7f0000001740)=0xc) recvfrom(r0, &(0x7f0000001780)=""/157, 0x9d, 0x41, &(0x7f0000001840)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0x2, 0x1, 0x1, {0xa, 0x4e24, 0x101, @ipv4={'\x00', '\xff\xff', @local}, 0xc7e4}}}, 0x80) write$bt_hci(r0, &(0x7f00000018c0)={0x1, @read_remote_version={{0x41d, 0x2}, {0xc9}}}, 0x6) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000001900)={0x3, 'vlan0\x00', {0x1}, 0x2}) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000001940)={r3, 0x3}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_BALANCE(r4, 0x5000940c, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000001980)={'HL\x00'}, &(0x7f00000019c0)=0x1e) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x30, 0x2, 0x3, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x11}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x94, 0x1}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x20}]}, 0x30}, 0x1, 0x0, 0x0, 0x44001}, 0x1) recvmsg(r4, &(0x7f0000002c80)={&(0x7f0000001b00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001b80)=""/92, 0x5c}, {&(0x7f0000001c00)=""/35, 0x23}], 0x2, &(0x7f0000001c80)=""/4096, 0x1000}, 0x20) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000002cc0)={0x0, 0x8008, 0x9, 0x3ff, r2}, &(0x7f0000002d00)=0x10) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000002ec0)={'broute\x00', 0x0, 0x4, 0xd8, [0x9, 0x101, 0xa1, 0x0, 0x80000001, 0x4], 0x6, &(0x7f0000002d40)=[{}, {}, {}, {}, {}, {}], &(0x7f0000002dc0)=""/216}, &(0x7f0000002f40)=0x78) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000002f80)={r1, @in6={{0xa, 0x4e23, 0x9, @private1, 0xcf}}, 0x100, 0x3}, &(0x7f0000003040)=0x90) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000003080)={r5, 0xc, 0x8, 0x7fff, 0x5, 0xb1d, 0x3, 0x1, {r1, @in6={{0xa, 0x4e21, 0x101, @mcast1, 0x10001}}, 0x101, 0x400, 0x4, 0x5e4, 0xf05}}, &(0x7f0000003140)=0xb0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000003180)={0x40, 0x0, 0x1}, 0x10) accept4$llc(r0, &(0x7f00000031c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000003200)=0x10, 0x800) write$bt_hci(r0, &(0x7f0000003240)={0x1, @read_rssi={{0x1405, 0x2}}}, 0x6) 555.698474ms ago: executing program 1 (id=2175): r0 = socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0xfffffffb, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'lo\x00'}) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000dc0)=ANY=[@ANYRES32=r0, @ANYRES16, @ANYRESHEX=r0], 0x24}}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x20}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x30}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f00000007c0)={0x3, 'vlan1\x00'}) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000000)={0x2, &(0x7f0000000240)=[{0x5c}, {0x6}]}, 0x10) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x5, &(0x7f0000000100), &(0x7f0000000180)=0x4) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000000900)=[{{&(0x7f0000000280)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000680)="964b1c4e16e989b6d8fd016217", 0xd}], 0x1}}, {{&(0x7f0000000600)={0xa, 0x4e1c, 0xffffffff, @local, 0x7}, 0x1c, &(0x7f0000000c00)=[{&(0x7f00000009c0)="940125796489149bd8747a863baddff39f7a64794038f9da5380cd72e2b70c96b146862ec92b47b6e4ed9650bd3a49e79142d9c28275fb95f1f6d5038ae783dcfbb9926063aa5517df2e5df54e02e7deecc41cef2e0c0841b0eef0d90384b107f4d450e58de1978182f5b08d5051ae688d8a55287cc7f078fc57ca0af3134010b6e986e2ac2ad1f02fa7cf", 0x8b}, {&(0x7f0000000a80)="b2836f9acf159c14539d9e732ccd409fa96cbcf88fdb543c36e948f3900e183edeef437f852b725bbb00b460ada5f958fbb9f7f7735663038e2c5131447fdbb97b754fa53d1803f87ba2ef66f87aa3b91a1f09c2a6f36ef91f1f", 0x5a}, {&(0x7f0000000b00)="d01f7742979841d31a1ab1e42194cbdfd766785decad120d89c88c42d3e1f5062b8fc8c207452cf978e49dfcf92bf115670d2e57d09bd01b30872f79039781618a2e4a7a0798d4fa9ba222aa7cc8967588bede2d7f015ceb9dbab5dfe559fb30f0603c759935cdf7364d328a26356540a4b44cc0344a44971802b6c33f0d62b38f240b6ce76e65c9562f07d770f0be261749cdf5affb0a890c109b05dd0b74884ed064dc78f7869f49d7b59dd548c62dc6331b61534cd2720f52f721d8421074328f585d55755473c419b5d1b6c2ffc0e8208018cbd3ed940c744e314452805f8a59e26043564ff025e0d874a799ff6c", 0xf0}], 0x3}}, {{&(0x7f00000002c0)={0xa, 0x4e21, 0x2, @mcast1, 0xa}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000300)="397459a4f4b6825936d6c474c858931fa8afdd677cb2b0abd64e5630d7d1582b58ed9ebcf95c22f8701119e8406035b32e8473afa78532eb6ce50e5b53e3066a45773bcbbdfd664a804d50ba90e4f9a96492ca614569b7fd46f653620b877b92abbe2116da6956fabbdbd8f7950f0fcfcb42ea2ae725eb816afe3d28a390d892fc2e67e8ebd7489b7595398e5dd375ae6e997060f62abd8c32657b2ac41845953d0d1a405f04686bb9a2", 0xaa}, {&(0x7f00000003c0)="9cd1c8e59c55e336614b7c913f47bd441a5d890f4cfcd29332f4dec47e5bf3b8cb642ad57ac22925d5b08aa575d58c539b12fda70bbe12f981b36efb916874542021648c3a86c1121ead61afe20a5517d6a09daf06528b6b61f90b508c7eb0b58e60e553ee879424e88e0a8217709c34d56a7bdbd3c2508c4996d850e6140b4cd9f9d906eccca826e427ccf8a35b0028661ff5e02df8216d3ce7519b4801c01d18c18dc91020bdd525fd3cee1328148dd38d6aed41", 0xb5}, {&(0x7f00000004c0)="be1376b309428b5963bd6b3281ab90ace7600d6c2a065ec80b1de7e523548d56cccbe6a2694b67027ef0ef3629474d12ab5820ec75d6d783f99b00b39d717e6840a79c25ce783ef5368c28aea0e98bb278477bbe8e61bae837d48678ad58176f8c1aa734d863303f2aafda30914a6619fa0a437c3efa3ef22b7e4a39b3901e1e4a56ec", 0x83}, {&(0x7f0000000640)="9ca3710b8f3db952850c0560cb8c006d412c2f07daa94a51", 0x18}, {&(0x7f0000000700)="0989554330df340157f77868aef9b0edf1187332599540e0f67a4a2aea9063d9e71f32ca935416bc9614124304acac563545d53b35527941cfb1b997f7526a3872e58f18a0ed87f3aaf0a731a0cc0dee410abc2ee1bcbb68c2fa0222b41473587f3412b288f16d20f2361acba9c3f73369e9c40a391a5cb28e1559d13ea4edcfdfd01e851246bffebe4c6b58d3fb1288b737cbb1c59e4a08e8356671f4054a79f6d96e3c3067bb7da300927dffb7e81f3ded93783184c670c937e6d0b6c3f4097303579685f7caf707a0c862d7403c5a0d84a5720106c118bdab08977a353e61957fd9b6cc571268d9ece4a914", 0xed}], 0x5, &(0x7f0000000c80)=ANY=[@ANYBLOB="80000000000000002900000036000000040c000000000000040107074800000002103d0000010000000000000000000000000000008f0a000000000000010000000100000040000000746d88fb217f6f17e131d1c43da5847ec57d00000000070000000000000000000080000000000700000000000000c9100000000000000000000000000000000104013b010300000000"], 0x80}}], 0x3, 0x40000) shutdown(r5, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c40)={'ip6tnl0\x00'}) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x5, 0x3, 0x80000000, 0x9, 0x80000001}, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000400000000000008000c7fa0b0000001020c2017274e21863db70721942000000e802f8c57c70c5ce0000b95bb74624e882e6947ca682fd6a4666d74f9d7a7ce3ff72b2e60fde165cf424803cc62ea3c6"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x90) 504.157395ms ago: executing program 4 (id=2176): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xb}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8864}]}}]}, 0x3c}}, 0x24000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$AUTOFS_IOC_READY(r3, 0x400442c8, 0x200000f3) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x40, 0x24, 0x1, 0x70bd26, 0xfffffffe, "", [@nested={0x30, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x5}, @typed={0xa, 0x143, 0x0, 0x0, @binary="b840e5dc3442"}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}]}]}, 0x40}], 0x1}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r6, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0xc001}, 0x0) 424.097893ms ago: executing program 3 (id=2177): r0 = socket(0x2a, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) recvmmsg(0xffffffffffffffff, &(0x7f0000000b80), 0x0, 0x120, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0xffe0}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x6}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24004000) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xc}, &(0x7f00000000c0)=0x8) socket$isdn(0x22, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 267.906921ms ago: executing program 3 (id=2178): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x69801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r1, &(0x7f00000003c0)="11eb534bfc0baf745837da8886dd", 0xe, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r4, 0x1, 0x4, 0x6, @local}, 0x14) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d80000001c0081044e81f782db44b9040a1d080214000000020003a118000c000300000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000fdbccf137789dd5e3df5fc6047a353000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x400d0) 207.719749ms ago: executing program 4 (id=2179): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_join_ibss(&(0x7f0000000000)='wlan0\x00', &(0x7f0000000100)=@default_ap_ssid, 0x6, 0x2) syz_80211_inject_frame(&(0x7f00000000c0)=@device_b, &(0x7f0000000140)=ANY=[@ANYBLOB="80000000080211000001080611000000080211000000000000000000c26150f1fb018f0402152879d6014100000000640001000006020202020202010882848b960c121824a309b7863f404f15aa2d820e83b5b00ed260f62e3820d0bd9ec3a3f06ae540c2e9c9c6aeae49515e6bfe5705ab292c1c291142012017cc9e4be30bffd2792e48189ab4ed344724e6c2d67bc4851c51568e13549b8b8a879391236dc85591903d081485db3374849db4294de3"], 0x36) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) (async) syz_80211_join_ibss(&(0x7f0000000000)='wlan0\x00', &(0x7f0000000100)=@default_ap_ssid, 0x6, 0x2) (async) syz_80211_inject_frame(&(0x7f00000000c0)=@device_b, &(0x7f0000000140)=ANY=[@ANYBLOB="80000000080211000001080611000000080211000000000000000000c26150f1fb018f0402152879d6014100000000640001000006020202020202010882848b960c121824a309b7863f404f15aa2d820e83b5b00ed260f62e3820d0bd9ec3a3f06ae540c2e9c9c6aeae49515e6bfe5705ab292c1c291142012017cc9e4be30bffd2792e48189ab4ed344724e6c2d67bc4851c51568e13549b8b8a879391236dc85591903d081485db3374849db4294de3"], 0x36) (async) 197.6606ms ago: executing program 2 (id=2180): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a80)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000018c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000400)={0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r0], 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xbf9c4bfc2c5286a7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0xffb}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1600132982cd0000000000000400000001000000", @ANYRES32=0x1, @ANYBLOB="00000000000000d61d5600e35c5c596b650000000064ce0000000000000044d1e22c8824996aec0572bf68b22b05bb9a10cde4da53d529eb2b19e5699b9b9039f347ced29590bfbe93391a9ada2904a008830cd735b5e5fbadfe1e73e5b9e6a1", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003800010324bd7002fa0000ca07"], 0x14}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x1b4}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 452.489µs ago: executing program 1 (id=2181): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f00000002c0), 0x2, 0x0) (async) openat$cgroup_type(r0, &(0x7f00000002c0), 0x2, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/56, 0x38}], 0x1, 0x8, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x70, r2, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000841}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x40, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3c}, @val={0x8, 0x3, r4}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7}]}, 0x40}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2, 0xe, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x54}}, @map_fd={0x18, 0x4, 0x1, 0x0, r6}]}, &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2, 0xe, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x54}}, @map_fd={0x18, 0x4, 0x1, 0x0, r6}]}, &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 2 (id=2182): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@dellinkprop={0x90, 0x6d, 0x10, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x40c20, 0x1000}, [@IFLA_NET_NS_FD={0x8, 0x1c, r3}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xd321}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x10000}, @IFLA_BROADCAST={0xa, 0x2, @multicast}, @IFLA_PHYS_SWITCH_ID={0x22, 0x24, "6842f0638ea5f32c2cdb4dc07f1013ecf581bdce1f7d7fe72577efb9ae01"}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_ALT_IFNAME={0x14, 0x35, 'syzkaller1\x00'}, @IFLA_IFALIASn={0x4}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}]}, 0x90}, 0x1, 0x0, 0x0, 0x200440c4}, 0x20000000) r4 = socket(0xa, 0x3, 0x9) getsockopt$nfc_llcp(r4, 0x29, 0x24, 0x0, 0x2000005d) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) kernel console output (not intermixed with test programs): 4458][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.398114][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.420765][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.462925][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.505910][ T51] Bluetooth: hci0: command tx timeout [ 92.580243][ T6000] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.603695][ T51] Bluetooth: hci2: command tx timeout [ 92.651627][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.677795][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.747303][ T51] Bluetooth: hci3: command tx timeout [ 92.752944][ T5184] Bluetooth: hci1: command tx timeout [ 92.752957][ T5864] Bluetooth: hci4: command tx timeout [ 92.815017][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.835734][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.924237][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.939700][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.964980][ T6007] 8021q: VLANs not supported on ip_vti0 [ 92.979774][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.991930][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.041583][ T6009] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.058895][ T6009] netlink: 192 bytes leftover after parsing attributes in process `syz.3.13'. [ 93.148788][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.176008][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.279824][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.315074][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.372079][ T6017] netlink: 56 bytes leftover after parsing attributes in process `syz.3.15'. [ 93.446542][ T6017] netlink: 56 bytes leftover after parsing attributes in process `syz.3.15'. [ 93.563976][ T6025] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16'. [ 93.583399][ T6025] netlink: 10 bytes leftover after parsing attributes in process `syz.0.16'. [ 93.618502][ T6025] tipc: Enabling of bearer rejected, failed to enable media [ 93.898980][ T6035] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17'. [ 93.916353][ T6045] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 93.981000][ T6043] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 94.007004][ T6042] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 94.116419][ T6045] bridge_slave_1: left allmulticast mode [ 94.123778][ T6045] bridge_slave_1: left promiscuous mode [ 94.235180][ T6045] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.291009][ T6045] bridge_slave_0: left allmulticast mode [ 94.298885][ T6045] bridge_slave_0: left promiscuous mode [ 94.305290][ T6045] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.433369][ T6047] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 94.527985][ T6039] syzkaller1: entered promiscuous mode [ 94.535038][ T6039] syzkaller1: entered allmulticast mode [ 94.924657][ T6079] warning: `syz.4.27' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 95.082506][ T6092] netlink: 44 bytes leftover after parsing attributes in process `syz.0.28'. [ 95.092388][ T6092] netlink: 'syz.0.28': attribute type 5 has an invalid length. [ 95.314741][ T6100] vxcan1 speed is unknown, defaulting to 1000 [ 95.348261][ T6100] vxcan1 speed is unknown, defaulting to 1000 [ 95.438060][ T6100] vxcan1 speed is unknown, defaulting to 1000 [ 96.334489][ T6124] netlink: 'syz.3.41': attribute type 1 has an invalid length. [ 96.573806][ T6130] sctp: failed to load transform for md5: -2 [ 96.737490][ T24] vxcan1 speed is unknown, defaulting to 1000 [ 96.762359][ T6100] infiniband syz2: set active [ 96.779721][ T6100] infiniband syz2: added vxcan1 [ 96.791071][ T6100] syz2: rxe_create_cq: returned err = -12 [ 96.814786][ T6100] infiniband syz2: Couldn't create ib_mad CQ [ 96.842380][ T6100] infiniband syz2: Couldn't open port 1 [ 97.010471][ T6100] RDS/IB: syz2: added [ 97.033953][ T6100] smc: adding ib device syz2 with port count 1 [ 97.051507][ T6100] smc: ib device syz2 port 1 has pnetid [ 97.103864][ T5948] vxcan1 speed is unknown, defaulting to 1000 [ 97.141546][ T6100] vxcan1 speed is unknown, defaulting to 1000 [ 97.530398][ T6149] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.539189][ T6149] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.663930][ T6162] netlink: 'syz.2.49': attribute type 1 has an invalid length. [ 97.848126][ T6149] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 97.937021][ T6166] Zero length message leads to an empty skb [ 97.949252][ T6155] syzkaller0: entered promiscuous mode [ 97.958371][ T6155] syzkaller0: entered allmulticast mode [ 98.156231][ T6174] netlink: 'syz.2.51': attribute type 5 has an invalid length. [ 98.190808][ T6100] vxcan1 speed is unknown, defaulting to 1000 [ 98.707958][ T6200] __nla_validate_parse: 4 callbacks suppressed [ 98.707980][ T6200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.58'. [ 98.766302][ T6200] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 98.806180][ T6200] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 98.815062][ T6200] gretap1: entered promiscuous mode [ 98.829404][ T6200] gretap1: entered allmulticast mode [ 98.950420][ T6206] netlink: 76 bytes leftover after parsing attributes in process `syz.3.60'. [ 98.970385][ T6206] netlink: 40 bytes leftover after parsing attributes in process `syz.3.60'. [ 99.257859][ T6100] vxcan1 speed is unknown, defaulting to 1000 [ 99.263962][ T6220] bond0: Unable to set down delay as MII monitoring is disabled [ 99.296516][ T6222] sctp: [Deprecated]: syz.4.65 (pid 6222) Use of int in max_burst socket option deprecated. [ 99.296516][ T6222] Use struct sctp_assoc_value instead [ 99.837028][ T6234] netlink: 'syz.3.69': attribute type 4 has an invalid length. [ 99.889051][ T6236] netlink: 'syz.3.69': attribute type 4 has an invalid length. [ 99.935936][ T6234] netlink: 4 bytes leftover after parsing attributes in process `syz.3.69'. [ 99.972948][ T6100] vxcan1 speed is unknown, defaulting to 1000 [ 99.999375][ T6234] netlink: 12 bytes leftover after parsing attributes in process `syz.3.69'. [ 100.528576][ T6258] netlink: 'syz.0.79': attribute type 4 has an invalid length. [ 100.547772][ T6261] netlink: 12 bytes leftover after parsing attributes in process `syz.4.78'. [ 100.562419][ T6258] netlink: 17 bytes leftover after parsing attributes in process `syz.0.79'. [ 100.793970][ T6100] vxcan1 speed is unknown, defaulting to 1000 [ 101.235688][ T6290] netlink: 48 bytes leftover after parsing attributes in process `syz.2.87'. [ 101.358171][ T6294] syz.3.88 uses obsolete (PF_INET,SOCK_PACKET) [ 101.389790][ T6295] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.89'. [ 101.673929][ T6305] netlink: 'syz.2.93': attribute type 10 has an invalid length. [ 101.853419][ T6310] netlink: 'syz.0.94': attribute type 1 has an invalid length. [ 102.015025][ T6319] netlink: 96 bytes leftover after parsing attributes in process `syz.1.96'. [ 102.045327][ T6320] gretap1: entered promiscuous mode [ 102.055572][ T6320] bond1: (slave gretap1): making interface the new active one [ 102.064841][ T6320] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 102.162366][ T6319] vlan2: entered allmulticast mode [ 102.188461][ T6319] gretap0: entered allmulticast mode [ 102.260214][ T6313] A link change request failed with some changes committed already. Interface eth0 may have been left with an inconsistent configuration, please check. [ 102.304249][ T6318] vxcan1 speed is unknown, defaulting to 1000 [ 102.372760][ T6327] TCP: TCP_TX_DELAY enabled [ 102.410954][ T6327] batman_adv: batadv0: Adding interface: dummy0 [ 102.445680][ T6327] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.486488][ T6327] batman_adv: batadv0: Interface activated: dummy0 [ 102.642567][ T6337] tipc: Started in network mode [ 102.657106][ T6337] tipc: Node identity 3a511bcea38d, cluster identity 4711 [ 102.665922][ T6337] tipc: Enabled bearer , priority 0 [ 102.700798][ T6337] syzkaller0: entered promiscuous mode [ 102.715882][ T6337] syzkaller0: entered allmulticast mode [ 102.744320][ T6337] netlink: 'syz.0.101': attribute type 83 has an invalid length. [ 102.776188][ T6337] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 102.847741][ T6337] tipc: Resetting bearer [ 102.896435][ T6335] tipc: Resetting bearer [ 102.945226][ T6347] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 102.966254][ T6335] tipc: Disabling bearer [ 103.242301][ T6354] bond0: (slave bond_slave_1): Releasing backup interface [ 103.312157][ T6352] ve: renamed from veth0_vlan (while UP) [ 103.631739][ C1] Illegal XDP return value 16128 on prog (id 12) dev bond0, expect packet loss! [ 103.674862][ T6372] team0: Device gtp0 is of different type [ 104.047057][ T6387] __nla_validate_parse: 5 callbacks suppressed [ 104.047076][ T6387] netlink: 48 bytes leftover after parsing attributes in process `syz.4.112'. [ 104.819486][ T6413] netlink: 'syz.1.118': attribute type 4 has an invalid length. [ 104.895645][ T6412] FAULT_INJECTION: forcing a failure. [ 104.895645][ T6412] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 104.955633][ T6412] CPU: 1 UID: 0 PID: 6412 Comm: syz.0.117 Not tainted syzkaller #0 PREEMPT(full) [ 104.955661][ T6412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 104.955672][ T6412] Call Trace: [ 104.955679][ T6412] [ 104.955687][ T6412] dump_stack_lvl+0x189/0x250 [ 104.955716][ T6412] ? __pfx____ratelimit+0x10/0x10 [ 104.955744][ T6412] ? __pfx_dump_stack_lvl+0x10/0x10 [ 104.955766][ T6412] ? __pfx__printk+0x10/0x10 [ 104.955792][ T6412] ? __might_fault+0xb0/0x130 [ 104.955832][ T6412] should_fail_ex+0x414/0x560 [ 104.955864][ T6412] _copy_from_user+0x2d/0xb0 [ 104.955886][ T6412] kstrtouint_from_user+0xc4/0x170 [ 104.955917][ T6412] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 104.955967][ T6412] proc_fail_nth_write+0x88/0x200 [ 104.955988][ T6412] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 104.956014][ T6412] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 104.956035][ T6412] vfs_write+0x27b/0xb30 [ 104.956071][ T6412] ? __pfx_vfs_write+0x10/0x10 [ 104.956097][ T6412] ? __fget_files+0x2a/0x420 [ 104.956118][ T6412] ? __fget_files+0x3a0/0x420 [ 104.956133][ T6412] ? __fget_files+0x2a/0x420 [ 104.956161][ T6412] ksys_write+0x145/0x250 [ 104.956188][ T6412] ? __pfx_ksys_write+0x10/0x10 [ 104.956207][ T6412] ? rcu_is_watching+0x15/0xb0 [ 104.956232][ T6412] ? do_syscall_64+0xbe/0x3b0 [ 104.956254][ T6412] do_syscall_64+0xfa/0x3b0 [ 104.956269][ T6412] ? lockdep_hardirqs_on+0x9c/0x150 [ 104.956295][ T6412] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.956313][ T6412] ? clear_bhb_loop+0x60/0xb0 [ 104.956336][ T6412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.956354][ T6412] RIP: 0033:0x7f827ad8d65f [ 104.956372][ T6412] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 104.956386][ T6412] RSP: 002b:00007f827bbe0030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 104.956407][ T6412] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f827ad8d65f [ 104.956420][ T6412] RDX: 0000000000000001 RSI: 00007f827bbe00a0 RDI: 0000000000000004 [ 104.956431][ T6412] RBP: 00007f827bbe0090 R08: 0000000000000000 R09: 0000000000000000 [ 104.956442][ T6412] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 104.956452][ T6412] R13: 00007f827afd6038 R14: 00007f827afd5fa0 R15: 00007fff711d0dd8 [ 104.956485][ T6412] [ 105.320309][ T6430] netlink: 'syz.0.122': attribute type 1 has an invalid length. [ 105.330195][ T6430] netlink: 236 bytes leftover after parsing attributes in process `syz.0.122'. [ 105.584587][ T6443] netlink: 48 bytes leftover after parsing attributes in process `syz.3.124'. [ 105.955097][ T6435] syzkaller1: entered promiscuous mode [ 106.039999][ T6435] syzkaller1: entered allmulticast mode [ 106.166345][ T6461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.127'. [ 106.237781][ T6466] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 106.349865][ T6430] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 106.357284][ T6430] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 106.391943][ T6466] dvmrp1: entered allmulticast mode [ 106.493155][ T6430] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 106.517283][ T6430] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 106.629781][ T6482] netlink: 156 bytes leftover after parsing attributes in process `syz.4.132'. [ 106.693496][ T6430] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 106.721400][ T6430] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 106.868765][ T6492] netlink: 24 bytes leftover after parsing attributes in process `syz.2.134'. [ 106.887650][ T6430] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 106.910630][ T6430] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 107.011706][ T6430] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 107.040334][ T6430] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 107.083967][ T6500] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 107.252776][ T6504] netlink: 48 bytes leftover after parsing attributes in process `syz.1.137'. [ 107.388935][ T6496] team0 (unregistering): Port device team_slave_0 removed [ 107.402672][ T6496] team0 (unregistering): Port device team_slave_1 removed [ 107.447595][ T6508] netlink: 32 bytes leftover after parsing attributes in process `syz.4.138'. [ 107.463411][ T6508] netlink: 32 bytes leftover after parsing attributes in process `syz.4.138'. [ 107.905305][ T6531] 8021q: VLANs not supported on vcan0 [ 107.998818][ T6539] netlink: 'syz.3.144': attribute type 3 has an invalid length. [ 108.244113][ T6546] netlink: 'syz.4.145': attribute type 21 has an invalid length. [ 108.252334][ T6546] netlink: 4 bytes leftover after parsing attributes in process `syz.4.145'. [ 108.417802][ T6553] team0: No ports can be present during mode change [ 108.466617][ T3552] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.487639][ T3552] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.502417][ T3552] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.553148][ T3552] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.294539][ T6600] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 109.351552][ T6607] __nla_validate_parse: 3 callbacks suppressed [ 109.351572][ T6607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.157'. [ 109.408016][ T6607] netlink: 12 bytes leftover after parsing attributes in process `syz.2.157'. [ 109.477989][ T6610] FAULT_INJECTION: forcing a failure. [ 109.477989][ T6610] name failslab, interval 1, probability 0, space 0, times 1 [ 109.524298][ T6610] CPU: 1 UID: 0 PID: 6610 Comm: syz.1.160 Not tainted syzkaller #0 PREEMPT(full) [ 109.524323][ T6610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 109.524333][ T6610] Call Trace: [ 109.524341][ T6610] [ 109.524350][ T6610] dump_stack_lvl+0x189/0x250 [ 109.524379][ T6610] ? __pfx____ratelimit+0x10/0x10 [ 109.524408][ T6610] ? __pfx_dump_stack_lvl+0x10/0x10 [ 109.524430][ T6610] ? __pfx__printk+0x10/0x10 [ 109.524459][ T6610] ? __pfx___might_resched+0x10/0x10 [ 109.524478][ T6610] ? fs_reclaim_acquire+0x7d/0x100 [ 109.524524][ T6610] should_fail_ex+0x414/0x560 [ 109.524554][ T6610] should_failslab+0xa8/0x100 [ 109.524583][ T6610] __kmalloc_noprof+0xcb/0x4f0 [ 109.524608][ T6610] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 109.524639][ T6610] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 109.524671][ T6610] genl_family_rcv_msg_doit+0xb8/0x300 [ 109.524703][ T6610] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 109.524736][ T6610] ? apparmor_capable+0x137/0x1b0 [ 109.524761][ T6610] ? bpf_lsm_capable+0x9/0x20 [ 109.524784][ T6610] ? security_capable+0x7e/0x2e0 [ 109.524819][ T6610] genl_rcv_msg+0x60e/0x790 [ 109.524849][ T6610] ? __pfx_genl_rcv_msg+0x10/0x10 [ 109.524869][ T6610] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 109.524894][ T6610] ? __pfx_nl802154_add_llsec_dev+0x10/0x10 [ 109.524910][ T6610] ? __pfx_nl802154_post_doit+0x10/0x10 [ 109.524953][ T6610] netlink_rcv_skb+0x205/0x470 [ 109.524978][ T6610] ? __lock_acquire+0xab9/0xd20 [ 109.525006][ T6610] ? __pfx_genl_rcv_msg+0x10/0x10 [ 109.525029][ T6610] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 109.525080][ T6610] ? down_read+0x1ad/0x2e0 [ 109.525104][ T6610] genl_rcv+0x28/0x40 [ 109.525123][ T6610] netlink_unicast+0x82f/0x9e0 [ 109.525165][ T6610] ? __pfx_netlink_unicast+0x10/0x10 [ 109.525193][ T6610] ? netlink_sendmsg+0x642/0xb30 [ 109.525207][ T6610] ? skb_put+0x11b/0x210 [ 109.525231][ T6610] netlink_sendmsg+0x805/0xb30 [ 109.525258][ T6610] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.525281][ T6610] ? aa_sock_msg_perm+0xf1/0x1d0 [ 109.525302][ T6610] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 109.525322][ T6610] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.525341][ T6610] __sock_sendmsg+0x21c/0x270 [ 109.525372][ T6610] ____sys_sendmsg+0x505/0x830 [ 109.525398][ T6610] ? __pfx_____sys_sendmsg+0x10/0x10 [ 109.525428][ T6610] ? import_iovec+0x74/0xa0 [ 109.525454][ T6610] ___sys_sendmsg+0x21f/0x2a0 [ 109.525476][ T6610] ? __pfx____sys_sendmsg+0x10/0x10 [ 109.525553][ T6610] ? __fget_files+0x2a/0x420 [ 109.525569][ T6610] ? __fget_files+0x3a0/0x420 [ 109.525596][ T6610] __x64_sys_sendmsg+0x19b/0x260 [ 109.525620][ T6610] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 109.525650][ T6610] ? __pfx_ksys_write+0x10/0x10 [ 109.525672][ T6610] ? rcu_is_watching+0x15/0xb0 [ 109.525699][ T6610] ? do_syscall_64+0xbe/0x3b0 [ 109.525720][ T6610] do_syscall_64+0xfa/0x3b0 [ 109.525736][ T6610] ? lockdep_hardirqs_on+0x9c/0x150 [ 109.525761][ T6610] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.525780][ T6610] ? clear_bhb_loop+0x60/0xb0 [ 109.525804][ T6610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.525821][ T6610] RIP: 0033:0x7f43aeb8eba9 [ 109.525840][ T6610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.525854][ T6610] RSP: 002b:00007f43afaa2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 109.525876][ T6610] RAX: ffffffffffffffda RBX: 00007f43aedd5fa0 RCX: 00007f43aeb8eba9 [ 109.525889][ T6610] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 109.525901][ T6610] RBP: 00007f43afaa2090 R08: 0000000000000000 R09: 0000000000000000 [ 109.525912][ T6610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.525922][ T6610] R13: 00007f43aedd6038 R14: 00007f43aedd5fa0 R15: 00007ffeffb9c778 [ 109.525956][ T6610] [ 110.005027][ T6617] IPv6: sit1: Disabled Multicast RS [ 110.068976][ T6617] sit1: entered allmulticast mode [ 110.071422][ T6620] netlink: 'syz.2.164': attribute type 1 has an invalid length. [ 110.082089][ T6620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.164'. [ 110.287143][ T6631] trusted_key: syz.4.163 sent an empty control message without MSG_MORE. [ 110.341570][ T6622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.163'. [ 110.365894][ T6622] netlink: 20 bytes leftover after parsing attributes in process `syz.4.163'. [ 110.380414][ T6622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.163'. [ 110.399651][ T6633] tipc: Enabling of bearer rejected, failed to enable media [ 110.408629][ T6622] netlink: 20 bytes leftover after parsing attributes in process `syz.4.163'. [ 110.523954][ T6641] nftables ruleset with unbound chain [ 110.913774][ T6662] bridge_slave_0: entered promiscuous mode [ 111.072053][ T6665] FAULT_INJECTION: forcing a failure. [ 111.072053][ T6665] name failslab, interval 1, probability 0, space 0, times 0 [ 111.165729][ T6665] CPU: 1 UID: 0 PID: 6665 Comm: syz.4.175 Not tainted syzkaller #0 PREEMPT(full) [ 111.165757][ T6665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 111.165767][ T6665] Call Trace: [ 111.165775][ T6665] [ 111.165783][ T6665] dump_stack_lvl+0x189/0x250 [ 111.165811][ T6665] ? __pfx____ratelimit+0x10/0x10 [ 111.165838][ T6665] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.165861][ T6665] ? __pfx__printk+0x10/0x10 [ 111.165895][ T6665] ? __pfx___might_resched+0x10/0x10 [ 111.165913][ T6665] ? fs_reclaim_acquire+0x7d/0x100 [ 111.165949][ T6665] should_fail_ex+0x414/0x560 [ 111.165981][ T6665] should_failslab+0xa8/0x100 [ 111.166009][ T6665] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 111.166036][ T6665] ? __alloc_skb+0x112/0x2d0 [ 111.166061][ T6665] __alloc_skb+0x112/0x2d0 [ 111.166085][ T6665] netlink_ack+0x146/0xa50 [ 111.166110][ T6665] ? __pfx_genl_rcv_msg+0x10/0x10 [ 111.166131][ T6665] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 111.166157][ T6665] ? __pfx_nl802154_post_doit+0x10/0x10 [ 111.166201][ T6665] netlink_rcv_skb+0x28c/0x470 [ 111.166226][ T6665] ? __lock_acquire+0xab9/0xd20 [ 111.166263][ T6665] ? __pfx_genl_rcv_msg+0x10/0x10 [ 111.166287][ T6665] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 111.166340][ T6665] ? down_read+0x1ad/0x2e0 [ 111.166364][ T6665] genl_rcv+0x28/0x40 [ 111.166384][ T6665] netlink_unicast+0x82f/0x9e0 [ 111.166422][ T6665] ? __pfx_netlink_unicast+0x10/0x10 [ 111.166451][ T6665] ? netlink_sendmsg+0x642/0xb30 [ 111.166467][ T6665] ? skb_put+0x11b/0x210 [ 111.166491][ T6665] netlink_sendmsg+0x805/0xb30 [ 111.166519][ T6665] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.166542][ T6665] ? aa_sock_msg_perm+0xf1/0x1d0 [ 111.166563][ T6665] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 111.166583][ T6665] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.166603][ T6665] __sock_sendmsg+0x21c/0x270 [ 111.166633][ T6665] ____sys_sendmsg+0x505/0x830 [ 111.166662][ T6665] ? __pfx_____sys_sendmsg+0x10/0x10 [ 111.166696][ T6665] ? import_iovec+0x74/0xa0 [ 111.166723][ T6665] ___sys_sendmsg+0x21f/0x2a0 [ 111.166753][ T6665] ? __pfx____sys_sendmsg+0x10/0x10 [ 111.166822][ T6665] ? __fget_files+0x2a/0x420 [ 111.166837][ T6665] ? __fget_files+0x3a0/0x420 [ 111.166868][ T6665] __x64_sys_sendmsg+0x19b/0x260 [ 111.166893][ T6665] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 111.166927][ T6665] ? __pfx_ksys_write+0x10/0x10 [ 111.166950][ T6665] ? rcu_is_watching+0x15/0xb0 [ 111.166975][ T6665] ? do_syscall_64+0xbe/0x3b0 [ 111.166999][ T6665] do_syscall_64+0xfa/0x3b0 [ 111.167015][ T6665] ? lockdep_hardirqs_on+0x9c/0x150 [ 111.167042][ T6665] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.167061][ T6665] ? clear_bhb_loop+0x60/0xb0 [ 111.167085][ T6665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.167102][ T6665] RIP: 0033:0x7f63aef8eba9 [ 111.167120][ T6665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.167135][ T6665] RSP: 002b:00007f63afdfe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.167161][ T6665] RAX: ffffffffffffffda RBX: 00007f63af1d5fa0 RCX: 00007f63aef8eba9 [ 111.167174][ T6665] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 111.167186][ T6665] RBP: 00007f63afdfe090 R08: 0000000000000000 R09: 0000000000000000 [ 111.167198][ T6665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.167209][ T6665] R13: 00007f63af1d6038 R14: 00007f63af1d5fa0 R15: 00007ffe248acb98 [ 111.167243][ T6665] [ 111.964394][ T6701] netlink: 'syz.4.181': attribute type 7 has an invalid length. [ 112.060436][ T6702] netlink: 64 bytes leftover after parsing attributes in process `syz.2.180'. [ 112.069661][ T6702] netlink: 64 bytes leftover after parsing attributes in process `syz.2.180'. [ 112.152731][ T6701] : entered promiscuous mode [ 112.651434][ T6706] team0 (unregistering): Port device team_slave_0 removed [ 112.695152][ T6706] team0 (unregistering): Port device team_slave_1 removed [ 112.952776][ T6742] netlink: 'syz.0.191': attribute type 1 has an invalid length. [ 113.100040][ T6742] 8021q: adding VLAN 0 to HW filter on device bond2 [ 113.412615][ T6763] netlink: 4 bytes leftover after parsing attributes in process `syz.0.197'. [ 113.835935][ T6783] netlink: 'syz.1.201': attribute type 1 has an invalid length. [ 113.951493][ T6785] netlink: 'syz.1.201': attribute type 1 has an invalid length. [ 114.336992][ T6804] netlink: 'syz.3.208': attribute type 1 has an invalid length. [ 114.363357][ T6804] netlink: 'syz.3.208': attribute type 2 has an invalid length. [ 114.546079][ T6814] __nla_validate_parse: 4 callbacks suppressed [ 114.546100][ T6814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.211'. [ 114.638859][ T6814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.211'. [ 114.738345][ T6828] netlink: 'syz.4.215': attribute type 4 has an invalid length. [ 115.513418][ T6857] netlink: 232 bytes leftover after parsing attributes in process `syz.0.222'. [ 115.553701][ T6859] netlink: 120 bytes leftover after parsing attributes in process `syz.3.223'. [ 115.998670][ T6880] sctp: [Deprecated]: syz.1.228 (pid 6880) Use of int in maxseg socket option. [ 115.998670][ T6880] Use struct sctp_assoc_value instead [ 116.224384][ T6887] netlink: 8 bytes leftover after parsing attributes in process `syz.4.229'. [ 116.483391][ T6894] netlink: 256 bytes leftover after parsing attributes in process `syz.3.231'. [ 116.549314][ T6894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.231'. [ 116.617262][ T6894] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 116.718286][ T6906] unknown channel width for channel at 909000KHz? [ 117.499897][ T6939] netlink: 44 bytes leftover after parsing attributes in process `syz.1.242'. [ 117.984530][ T6963] batman_adv: batadv0: Adding interface: wlan1 [ 118.001627][ T6963] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.028525][ T6963] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 118.115753][ T6969] netlink: 24 bytes leftover after parsing attributes in process `syz.2.252'. [ 118.139159][ T6969] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 118.833564][ T7006] netlink: 'syz.2.260': attribute type 142 has an invalid length. [ 118.847917][ T7008] netlink: 'syz.0.261': attribute type 1 has an invalid length. [ 118.861201][ T7008] netlink: 'syz.0.261': attribute type 29 has an invalid length. [ 118.875607][ T7008] netlink: 'syz.0.261': attribute type 29 has an invalid length. [ 119.818317][ T7044] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒw˜}z [ 120.134647][ T7050] team0: Device ip6gre1 is of different type [ 121.176505][ T7103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.287'. [ 121.185343][ T7103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.287'. [ 121.252329][ T7103] tipc: Enabling of bearer rejected, failed to enable media [ 121.358919][ T7113] netlink: 12 bytes leftover after parsing attributes in process `syz.3.290'. [ 121.384322][ T7113] netlink: 12 bytes leftover after parsing attributes in process `syz.3.290'. [ 121.509879][ T7119] netlink: 4 bytes leftover after parsing attributes in process `syz.3.290'. [ 121.572638][ T7122] netlink: 12 bytes leftover after parsing attributes in process `syz.3.290'. [ 121.742075][ T7133] openvswitch: netlink: Missing key (keys=40, expected=100) [ 121.875044][ T7133] team0: Device wireguard0 is of different type [ 122.083271][ T7143] netlink: 'syz.4.294': attribute type 6 has an invalid length. [ 122.693911][ T7172] netlink: 'syz.1.300': attribute type 11 has an invalid length. [ 122.718888][ T7172] netlink: 'syz.1.300': attribute type 11 has an invalid length. [ 122.744159][ T7172] netlink: 152 bytes leftover after parsing attributes in process `syz.1.300'. [ 122.934345][ T7180] netlink: 16 bytes leftover after parsing attributes in process `syz.0.302'. [ 123.233106][ T7192] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 123.531960][ T7210] netlink: 'syz.4.308': attribute type 10 has an invalid length. [ 123.632845][ T7210] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 124.104895][ T7236] Bluetooth: MGMT ver 1.23 [ 124.175682][ T7236] IPVS: set_ctl: invalid protocol: 12 127.0.0.1:20002 [ 124.289778][ T7250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.315'. [ 124.384526][ T7250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.315'. [ 124.870865][ T7272] netlink: 'syz.4.323': attribute type 1 has an invalid length. [ 124.927850][ T959] IPVS: starting estimator thread 0... [ 125.025693][ T7277] IPVS: using max 23 ests per chain, 55200 per kthread [ 125.168931][ T7272] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.235126][ T7272] veth3: entered promiscuous mode [ 125.272577][ T7272] bond1: (slave veth3): Enslaving as an active interface with a down link [ 125.389863][ T7304] netlink: 'syz.1.326': attribute type 10 has an invalid length. [ 125.447006][ T7297] vlan0: entered allmulticast mode [ 125.452890][ T7297] bond1: entered allmulticast mode [ 125.462291][ T7297] bond1: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 126.223402][ T7335] __nla_validate_parse: 7 callbacks suppressed [ 126.223423][ T7335] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.338'. [ 126.506279][ T7347] netlink: 12 bytes leftover after parsing attributes in process `syz.1.343'. [ 126.562047][ T7353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.366859][ T7390] netlink: 'syz.2.357': attribute type 18 has an invalid length. [ 127.433628][ T7400] netlink: 104 bytes leftover after parsing attributes in process `syz.3.359'. [ 127.738130][ T7415] netlink: 13 bytes leftover after parsing attributes in process `syz.3.364'. [ 127.786899][ T7415] netlink: 36 bytes leftover after parsing attributes in process `syz.3.364'. [ 127.873884][ T7421] netlink: 'syz.0.367': attribute type 4 has an invalid length. [ 127.927573][ T7421] netlink: 'syz.0.367': attribute type 4 has an invalid length. [ 127.995619][ T7424] netlink: 'syz.4.368': attribute type 8 has an invalid length. [ 128.051794][ T7428] netlink: 44 bytes leftover after parsing attributes in process `syz.1.369'. [ 128.061115][ T7428] netlink: 43 bytes leftover after parsing attributes in process `syz.1.369'. [ 128.077365][ T7428] netlink: 'syz.1.369': attribute type 6 has an invalid length. [ 128.085151][ T7428] netlink: 'syz.1.369': attribute type 5 has an invalid length. [ 128.111349][ T7429] netlink: 'syz.3.370': attribute type 1 has an invalid length. [ 128.148947][ T7428] netlink: 43 bytes leftover after parsing attributes in process `syz.1.369'. [ 128.228133][ T7428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.369'. [ 128.497570][ T7450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.374'. [ 128.565501][ T7450] netlink: 'syz.0.374': attribute type 8 has an invalid length. [ 128.904595][ T7458] batman_adv: batadv0: Interface deactivated: dummy0 [ 129.032536][ T7458] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.046821][ T7458] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.171316][ T5979] vxcan1 speed is unknown, defaulting to 1000 [ 129.190175][ T5979] syz2: Port: 1 Link DOWN [ 129.214870][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.242707][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.278986][ T5979] vxcan1 speed is unknown, defaulting to 1000 [ 129.285258][ T36] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.334958][ T3580] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.487362][ T7479] syzkaller1: entered promiscuous mode [ 129.492977][ T7479] syzkaller1: entered allmulticast mode [ 130.085878][ T7517] netlink: 'syz.0.392': attribute type 1 has an invalid length. [ 130.146135][ T7521] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 130.393160][ T7526] netlink: 'syz.0.395': attribute type 15 has an invalid length. [ 130.785333][ T7542] nft_compat: unsupported protocol 0 [ 130.916997][ T7546] bond3 (unregistering): Released all slaves [ 130.981825][ T7545] IPv6: sit1: Disabled Multicast RS [ 130.993856][ T7545] sit1: entered allmulticast mode [ 131.409482][ T7571] vxcan1 speed is unknown, defaulting to 1000 [ 131.927977][ T7588] __nla_validate_parse: 32 callbacks suppressed [ 131.927999][ T7588] netlink: 8 bytes leftover after parsing attributes in process `syz.4.413'. [ 132.325731][ T7604] netlink: 12 bytes leftover after parsing attributes in process `syz.0.418'. [ 132.598691][ T7611] bridge0: entered promiscuous mode [ 132.631888][ T7611] macvtap1: entered allmulticast mode [ 132.665080][ T7611] bridge0: entered allmulticast mode [ 132.685276][ T7611] bridge0: port 3(macvtap1) entered blocking state [ 132.693553][ T7611] bridge0: port 3(macvtap1) entered disabled state [ 132.708912][ T7611] bridge0: left allmulticast mode [ 132.714596][ T7611] bridge0: left promiscuous mode [ 132.750414][ T7612] bridge0: entered promiscuous mode [ 132.756768][ T7612] macvtap1: entered allmulticast mode [ 132.762272][ T7612] bridge0: entered allmulticast mode [ 132.771321][ T7612] bridge0: port 3(macvtap1) entered blocking state [ 132.778258][ T7612] bridge0: port 3(macvtap1) entered disabled state [ 132.792481][ T7612] bridge0: left allmulticast mode [ 132.797708][ T7612] bridge0: left promiscuous mode [ 132.955089][ T7624] netlink: 20 bytes leftover after parsing attributes in process `syz.0.424'. [ 132.975353][ T7624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.424'. [ 133.053331][ T7624] sit1: entered promiscuous mode [ 133.059264][ T7624] sit1: entered allmulticast mode [ 133.074473][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.084276][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.832321][ T7654] netlink: 'syz.0.434': attribute type 12 has an invalid length. [ 134.361722][ T7678] ve: renamed from ipvlan1 [ 134.410773][ T7678] netlink: 12 bytes leftover after parsing attributes in process `syz.0.439'. [ 134.553879][ T7681] netlink: 'syz.3.441': attribute type 3 has an invalid length. [ 134.738450][ T7691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.445'. [ 134.786902][ T7689] netlink: 16 bytes leftover after parsing attributes in process `syz.3.444'. [ 134.921335][ T7695] netlink: 'syz.2.447': attribute type 4 has an invalid length. [ 134.951239][ T7695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.447'. [ 134.962353][ T7695] netlink: 24 bytes leftover after parsing attributes in process `syz.2.447'. [ 135.090586][ T7702] syzkaller1: entered promiscuous mode [ 135.121405][ T7702] syzkaller1: entered allmulticast mode [ 135.322586][ T7713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.451'. [ 135.552454][ T7722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.190882][ T7751] netlink: 'syz.0.464': attribute type 21 has an invalid length. [ 136.205212][ T7751] netlink: 'syz.0.464': attribute type 6 has an invalid length. [ 137.123955][ T7796] FAULT_INJECTION: forcing a failure. [ 137.123955][ T7796] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.145873][ T7796] CPU: 0 UID: 0 PID: 7796 Comm: syz.3.476 Not tainted syzkaller #0 PREEMPT(full) [ 137.145899][ T7796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 137.145910][ T7796] Call Trace: [ 137.145918][ T7796] [ 137.145927][ T7796] dump_stack_lvl+0x189/0x250 [ 137.145955][ T7796] ? __pfx____ratelimit+0x10/0x10 [ 137.145984][ T7796] ? __pfx_dump_stack_lvl+0x10/0x10 [ 137.146006][ T7796] ? __pfx__printk+0x10/0x10 [ 137.146049][ T7796] should_fail_ex+0x414/0x560 [ 137.146080][ T7796] _copy_from_user+0x2d/0xb0 [ 137.146104][ T7796] copy_from_sockptr+0x5e/0xa0 [ 137.146133][ T7796] packet_setsockopt+0x965/0x12c0 [ 137.146160][ T7796] ? __pfx_packet_setsockopt+0x10/0x10 [ 137.146190][ T7796] ? __lock_acquire+0xab9/0xd20 [ 137.146234][ T7796] ? aa_sk_perm+0x81e/0x950 [ 137.146265][ T7796] ? __pfx_aa_sk_perm+0x10/0x10 [ 137.146296][ T7796] ? __fget_files+0x2a/0x420 [ 137.146311][ T7796] ? aa_sock_opt_perm+0xff/0x1b0 [ 137.146334][ T7796] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 137.146354][ T7796] ? __pfx_packet_setsockopt+0x10/0x10 [ 137.146379][ T7796] do_sock_setsockopt+0x17c/0x1b0 [ 137.146407][ T7796] __x64_sys_setsockopt+0x13f/0x1b0 [ 137.146434][ T7796] do_syscall_64+0xfa/0x3b0 [ 137.146451][ T7796] ? lockdep_hardirqs_on+0x9c/0x150 [ 137.146478][ T7796] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.146497][ T7796] ? clear_bhb_loop+0x60/0xb0 [ 137.146520][ T7796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.146538][ T7796] RIP: 0033:0x7f988e98eba9 [ 137.146556][ T7796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.146571][ T7796] RSP: 002b:00007f988cbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 137.146592][ T7796] RAX: ffffffffffffffda RBX: 00007f988ebd6090 RCX: 00007f988e98eba9 [ 137.146605][ T7796] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000009 [ 137.146617][ T7796] RBP: 00007f988cbf6090 R08: 000000000000001c R09: 0000000000000000 [ 137.146628][ T7796] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 137.146639][ T7796] R13: 00007f988ebd6128 R14: 00007f988ebd6090 R15: 00007fffd740f658 [ 137.146673][ T7796] [ 137.773076][ T7811] tipc: Started in network mode [ 137.783263][ T7811] tipc: Node identity 62ac5e1c280e, cluster identity 4711 [ 137.827737][ T7811] tipc: Enabled bearer , priority 0 [ 137.933705][ T7818] syzkaller0: entered promiscuous mode [ 137.939573][ T7818] syzkaller0: entered allmulticast mode [ 137.946068][ T7818] tipc: Resetting bearer [ 137.980265][ T7821] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 138.013849][ T7810] tipc: Resetting bearer [ 138.880036][ T5866] tipc: Node number set to 1252154908 [ 139.516328][ T7850] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.767192][ T7810] tipc: Disabling bearer [ 139.777584][ T7826] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 140.203046][ T7876] __nla_validate_parse: 4 callbacks suppressed [ 140.203068][ T7876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.502'. [ 140.412682][ T7885] xt_limit: Overflow, try lower: 271964/0 [ 140.651674][ T7895] netlink: 'syz.0.507': attribute type 2 has an invalid length. [ 140.673239][ T7895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.507'. [ 141.007901][ T7908] openvswitch: netlink: Missing key (keys=40, expected=80) [ 141.021967][ T7908] openvswitch: netlink: Missing key (keys=40, expected=80) [ 141.032292][ T7905] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.509'. [ 141.187809][ T7909] netlink: 40 bytes leftover after parsing attributes in process `syz.4.511'. [ 141.265919][ T7915] netlink: 92 bytes leftover after parsing attributes in process `syz.1.514'. [ 141.325983][ T24] IPVS: starting estimator thread 0... [ 141.465658][ T7925] IPVS: using max 26 ests per chain, 62400 per kthread [ 142.155794][ T7962] netlink: 12 bytes leftover after parsing attributes in process `syz.1.524'. [ 142.236410][ T7963] netlink: 260 bytes leftover after parsing attributes in process `syz.1.524'. [ 142.878015][ T7999] netlink: 'syz.1.532': attribute type 11 has an invalid length. [ 143.439839][ T8028] netlink: 'syz.2.541': attribute type 21 has an invalid length. [ 143.491159][ T8028] netlink: 'syz.2.541': attribute type 6 has an invalid length. [ 143.512252][ T8028] netlink: 132 bytes leftover after parsing attributes in process `syz.2.541'. [ 143.718061][ T8035] netlink: 'syz.3.542': attribute type 5 has an invalid length. [ 143.903521][ T8044] netlink: 176 bytes leftover after parsing attributes in process `syz.4.546'. [ 143.929867][ T8048] netlink: 68 bytes leftover after parsing attributes in process `syz.2.547'. [ 144.314850][ T8068] netlink: 'syz.1.553': attribute type 1 has an invalid length. [ 144.765679][ T8088] af_packet: tpacket_rcv: packet too big, clamped from 3698 to 4294967272. macoff=96 [ 145.614040][ T8126] __nla_validate_parse: 4 callbacks suppressed [ 145.614061][ T8126] netlink: 256 bytes leftover after parsing attributes in process `syz.1.572'. [ 145.646022][ T8128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.571'. [ 145.654859][ T8128] netlink: 20 bytes leftover after parsing attributes in process `syz.4.571'. [ 145.707716][ T8126] tipc: Enabled bearer , priority 0 [ 145.715282][ T8126] syzkaller0: entered promiscuous mode [ 145.721051][ T8126] syzkaller0: entered allmulticast mode [ 145.738916][ T8128] geneve2: entered promiscuous mode [ 145.744293][ T8128] geneve2: entered allmulticast mode [ 145.760583][ T8126] tipc: Resetting bearer [ 145.786182][ T8126] netlink: 12 bytes leftover after parsing attributes in process `syz.1.572'. [ 145.808317][ T8126] netlink: 28 bytes leftover after parsing attributes in process `syz.1.572'. [ 145.818689][ T8134] tap0: tun_chr_ioctl cmd 1074025678 [ 145.824120][ T8134] tap0: group set to 0 [ 145.954166][ T8125] tipc: Resetting bearer [ 146.018324][ T8125] tipc: Disabling bearer [ 146.050445][ T8140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.575'. [ 146.604926][ T8166] netlink: 'syz.4.581': attribute type 10 has an invalid length. [ 146.649298][ T8166] netlink: 40 bytes leftover after parsing attributes in process `syz.4.581'. [ 146.676309][ T8165] netlink: 12 bytes leftover after parsing attributes in process `syz.1.580'. [ 146.737096][ T8166] team0: Port device geneve0 added [ 146.918865][ T8184] tipc: MTU too low for tipc bearer [ 147.008637][ T49] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 147.023138][ T8189] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 147.170455][ T8195] netlink: 'syz.1.587': attribute type 2 has an invalid length. [ 147.195593][ T8195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.587'. [ 147.532438][ T8213] tipc: Started in network mode [ 147.563779][ T8213] tipc: Node identity 0a3a596fa3fb, cluster identity 4711 [ 147.588050][ T8216] netlink: 28 bytes leftover after parsing attributes in process `syz.4.594'. [ 147.601771][ T8213] tipc: Enabled bearer , priority 0 [ 147.619680][ T8223] syzkaller0: entered promiscuous mode [ 147.631670][ T8223] syzkaller0: entered allmulticast mode [ 147.664805][ T8211] tipc: Resetting bearer [ 147.715107][ T8211] tipc: Disabling bearer [ 148.362681][ T8265] vxcan1 speed is unknown, defaulting to 1000 [ 149.001358][ T8294] netlink: 'syz.4.615': attribute type 1 has an invalid length. [ 149.457785][ T8302] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 150.822559][ T8333] __nla_validate_parse: 6 callbacks suppressed [ 150.822578][ T8333] netlink: 12 bytes leftover after parsing attributes in process `syz.3.624'. [ 151.043254][ T8344] netlink: 100 bytes leftover after parsing attributes in process `syz.4.625'. [ 151.087239][ T8343] netlink: 56 bytes leftover after parsing attributes in process `syz.2.627'. [ 151.142887][ T8343] netlink: 48 bytes leftover after parsing attributes in process `syz.2.627'. [ 151.235620][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 151.421236][ T8352] netlink: 'syz.1.629': attribute type 5 has an invalid length. [ 151.687828][ T8369] netlink: 16 bytes leftover after parsing attributes in process `syz.0.632'. [ 151.827282][ T8373] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒw˜}zë' [ 151.851617][ T8373] CPU: 1 UID: 0 PID: 8373 Comm: syz.0.632 Not tainted syzkaller #0 PREEMPT(full) [ 151.851644][ T8373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 151.851655][ T8373] Call Trace: [ 151.851663][ T8373] [ 151.851672][ T8373] dump_stack_lvl+0x189/0x250 [ 151.851706][ T8373] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.851729][ T8373] ? __pfx__printk+0x10/0x10 [ 151.851764][ T8373] ? kernfs_path_from_node+0x2f/0x290 [ 151.851785][ T8373] ? kernfs_path_from_node+0x250/0x290 [ 151.851804][ T8373] ? kernfs_path_from_node+0x2f/0x290 [ 151.851840][ T8373] sysfs_warn_dup+0x8e/0xa0 [ 151.851861][ T8373] sysfs_do_create_link_sd+0xc0/0x110 [ 151.851886][ T8373] device_add_class_symlinks+0x1cf/0x240 [ 151.851913][ T8373] device_add+0x475/0xb50 [ 151.851940][ T8373] wiphy_register+0x1ba6/0x28d0 [ 151.851991][ T8373] ? __pfx_wiphy_register+0x10/0x10 [ 151.852018][ T8373] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 151.852051][ T8373] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 151.852078][ T8373] ieee80211_register_hw+0x3484/0x4100 [ 151.852122][ T8373] ? ieee80211_register_hw+0x1451/0x4100 [ 151.852158][ T8373] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 151.852187][ T8373] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 151.852225][ T8373] ? __hrtimer_setup+0x187/0x210 [ 151.852243][ T8373] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 151.852276][ T8373] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 151.852341][ T8373] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 151.852365][ T8373] ? trace_kmalloc+0x1f/0xd0 [ 151.852387][ T8373] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 151.852412][ T8373] ? kstrndup+0xbf/0x160 [ 151.852446][ T8373] hwsim_new_radio_nl+0xea4/0x1b10 [ 151.852476][ T8373] ? __pfx___nla_validate_parse+0x10/0x10 [ 151.852530][ T8373] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 151.852574][ T8373] ? __nla_parse+0x40/0x60 [ 151.852607][ T8373] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 151.852643][ T8373] genl_family_rcv_msg_doit+0x215/0x300 [ 151.852677][ T8373] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 151.852718][ T8373] ? bpf_lsm_capable+0x9/0x20 [ 151.852743][ T8373] ? security_capable+0x7e/0x2e0 [ 151.852781][ T8373] genl_rcv_msg+0x60e/0x790 [ 151.852916][ T8373] ? __pfx_genl_rcv_msg+0x10/0x10 [ 151.852939][ T8373] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 151.852984][ T8373] netlink_rcv_skb+0x205/0x470 [ 151.853010][ T8373] ? __lock_acquire+0xab9/0xd20 [ 151.853039][ T8373] ? __pfx_genl_rcv_msg+0x10/0x10 [ 151.853064][ T8373] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 151.853117][ T8373] ? down_read+0x1ad/0x2e0 [ 151.853141][ T8373] genl_rcv+0x28/0x40 [ 151.853161][ T8373] netlink_unicast+0x82f/0x9e0 [ 151.853200][ T8373] ? __pfx_netlink_unicast+0x10/0x10 [ 151.853230][ T8373] ? netlink_sendmsg+0x642/0xb30 [ 151.853246][ T8373] ? skb_put+0x11b/0x210 [ 151.853271][ T8373] netlink_sendmsg+0x805/0xb30 [ 151.853303][ T8373] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.853327][ T8373] ? aa_sock_msg_perm+0xf1/0x1d0 [ 151.853349][ T8373] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 151.853369][ T8373] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.853389][ T8373] __sock_sendmsg+0x21c/0x270 [ 151.853421][ T8373] ____sys_sendmsg+0x505/0x830 [ 151.853451][ T8373] ? __pfx_____sys_sendmsg+0x10/0x10 [ 151.853486][ T8373] ? import_iovec+0x74/0xa0 [ 151.853515][ T8373] ___sys_sendmsg+0x21f/0x2a0 [ 151.853541][ T8373] ? __pfx____sys_sendmsg+0x10/0x10 [ 151.853613][ T8373] ? __fget_files+0x2a/0x420 [ 151.853629][ T8373] ? __fget_files+0x3a0/0x420 [ 151.853661][ T8373] __x64_sys_sendmsg+0x19b/0x260 [ 151.853687][ T8373] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 151.853724][ T8373] ? rcu_is_watching+0x15/0xb0 [ 151.853751][ T8373] ? do_syscall_64+0xbe/0x3b0 [ 151.853775][ T8373] do_syscall_64+0xfa/0x3b0 [ 151.853792][ T8373] ? lockdep_hardirqs_on+0x9c/0x150 [ 151.853848][ T8373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.853867][ T8373] ? clear_bhb_loop+0x60/0xb0 [ 151.853892][ T8373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.853910][ T8373] RIP: 0033:0x7f827ad8eba9 [ 151.853929][ T8373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.853944][ T8373] RSP: 002b:00007f827bb9e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 151.853966][ T8373] RAX: ffffffffffffffda RBX: 00007f827afd6180 RCX: 00007f827ad8eba9 [ 151.853980][ T8373] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008 [ 151.853991][ T8373] RBP: 00007f827ae11e19 R08: 0000000000000000 R09: 0000000000000000 [ 151.854003][ T8373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.854014][ T8373] R13: 00007f827afd6218 R14: 00007f827afd6180 R15: 00007fff711d0dd8 [ 151.854051][ T8373] [ 152.678832][ T8390] netlink: 40 bytes leftover after parsing attributes in process `syz.1.638'. [ 152.719488][ T8394] netlink: 'syz.3.637': attribute type 21 has an invalid length. [ 152.782415][ T8394] netlink: 152 bytes leftover after parsing attributes in process `syz.3.637'. [ 152.976477][ T8403] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 154.247452][ T8469] netlink: 16 bytes leftover after parsing attributes in process `syz.0.657'. [ 154.566237][ T8479] gre1: entered promiscuous mode [ 154.583720][ T8479] gre1: entered allmulticast mode [ 154.667824][ T8481] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.662'. [ 154.670640][ T8483] !€ÿ: renamed from bond_slave_0 [ 154.767466][ T8488] netlink: 36 bytes leftover after parsing attributes in process `syz.2.663'. [ 154.941558][ T8497] veth0_to_bridge: entered promiscuous mode [ 154.967268][ T8497] veth0_to_bridge: left promiscuous mode [ 155.267276][ T8511] netlink: 'syz.3.669': attribute type 83 has an invalid length. [ 155.880362][ T8544] netlink: 'syz.2.677': attribute type 16 has an invalid length. [ 155.925595][ T8544] netlink: 'syz.2.677': attribute type 17 has an invalid length. [ 156.057314][ T8544] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 156.120513][ T8549] lo speed is unknown, defaulting to 1000 [ 156.177667][ T8549] lo speed is unknown, defaulting to 1000 [ 156.178312][ T8552] vxcan1 speed is unknown, defaulting to 1000 [ 156.188940][ T8549] lo speed is unknown, defaulting to 1000 [ 156.570982][ T8571] openvswitch: netlink: Invalid VLAN frame [ 156.882546][ T8577] unknown channel width for channel at 909000KHz? [ 156.921064][ T8579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.687'. [ 156.963790][ T8579] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 156.975520][ T8579] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.074613][ T8586] netlink: 24 bytes leftover after parsing attributes in process `syz.0.689'. [ 157.083731][ T8575] netlink: 666 bytes leftover after parsing attributes in process `syz.3.687'. [ 157.261330][ T8594] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 157.304435][ T8594] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 157.355892][ T8594] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 157.547248][ T8601] syzkaller0: entered promiscuous mode [ 157.557412][ T8601] syzkaller0: entered allmulticast mode [ 157.705279][ T8549] infiniband syz0: set active [ 157.711786][ T8549] infiniband syz0: added lo [ 157.732299][ T959] lo speed is unknown, defaulting to 1000 [ 157.746685][ T8549] syz0: rxe_create_cq: returned err = -12 [ 157.752530][ T8549] infiniband syz0: Couldn't create ib_mad CQ [ 157.760370][ T8549] infiniband syz0: Couldn't open port 1 [ 157.879411][ T8549] RDS/IB: syz0: added [ 157.883533][ T8549] smc: adding ib device syz0 with port count 1 [ 157.915133][ T8549] smc: ib device syz0 port 1 has pnetid [ 157.961698][ T24] lo speed is unknown, defaulting to 1000 [ 157.969211][ T8549] lo speed is unknown, defaulting to 1000 [ 158.388642][ T8632] openvswitch: netlink: Flow actions attr not present in new flow. [ 158.463509][ T8627] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 158.669575][ T8642] netlink: 12 bytes leftover after parsing attributes in process `syz.4.705'. [ 158.927658][ T8650] netlink: 'syz.0.708': attribute type 10 has an invalid length. [ 158.961494][ T8650] netlink: 40 bytes leftover after parsing attributes in process `syz.0.708'. [ 158.993518][ T8650] dummy0: entered promiscuous mode [ 159.017090][ T8650] bridge0: port 3(dummy0) entered blocking state [ 159.023849][ T8650] bridge0: port 3(dummy0) entered disabled state [ 159.065971][ T8650] dummy0: entered allmulticast mode [ 159.185232][ T8549] lo speed is unknown, defaulting to 1000 [ 159.196943][ T8660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.711'. [ 159.305656][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 159.385288][ T8666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.714'. [ 159.414273][ T8669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.714'. [ 159.428216][ T8668] netlink: 12 bytes leftover after parsing attributes in process `syz.4.715'. [ 159.865959][ T8684] netlink: 'syz.3.719': attribute type 1 has an invalid length. [ 159.889009][ T8688] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:20002 [ 159.905671][ T8684] netlink: 184 bytes leftover after parsing attributes in process `syz.3.719'. [ 159.929133][ T8672] syzkaller1: entered promiscuous mode [ 159.936777][ T8672] syzkaller1: entered allmulticast mode [ 159.937036][ T8684] netlink: 'syz.3.719': attribute type 1 has an invalid length. [ 159.974008][ T8685] netlink: 'syz.3.719': attribute type 23 has an invalid length. [ 160.248544][ T8549] lo speed is unknown, defaulting to 1000 [ 160.261716][ T8699] vxcan1 speed is unknown, defaulting to 1000 [ 160.268235][ T8703] netlink: 'syz.4.722': attribute type 30 has an invalid length. [ 160.519875][ T8714] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20002 [ 160.527399][ T8713] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20002 [ 161.007949][ T8730] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 161.268837][ T8549] lo speed is unknown, defaulting to 1000 [ 161.553898][ T8753] netlink: 'syz.3.736': attribute type 16 has an invalid length. [ 161.562326][ T8753] netlink: 'syz.3.736': attribute type 3 has an invalid length. [ 161.916303][ T8699] lo speed is unknown, defaulting to 1000 [ 161.976360][ T8760] __nla_validate_parse: 4 callbacks suppressed [ 161.976380][ T8760] netlink: 28 bytes leftover after parsing attributes in process `syz.3.738'. [ 162.041450][ T8760] netlink: 12 bytes leftover after parsing attributes in process `syz.3.738'. [ 162.176982][ T8775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.741'. [ 162.200320][ T8777] netlink: 'syz.4.742': attribute type 13 has an invalid length. [ 162.223363][ T8777] lo: entered promiscuous mode [ 162.236338][ T8777] lo: entered allmulticast mode [ 162.255119][ T8777] tunl0: entered promiscuous mode [ 162.270805][ T8777] tunl0: entered allmulticast mode [ 162.288009][ T8777] gre0: entered promiscuous mode [ 162.303220][ T8777] gre0: entered allmulticast mode [ 162.331664][ T8777] gretap0: entered promiscuous mode [ 162.345784][ T8777] gretap0: entered allmulticast mode [ 162.365926][ T8777] erspan0: entered promiscuous mode [ 162.371286][ T8777] erspan0: entered allmulticast mode [ 162.386596][ T8777] erspan0: refused to change device tx_queue_len [ 162.393966][ T8777] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 162.440933][ T8549] lo speed is unknown, defaulting to 1000 [ 162.711060][ T8790] sch_tbf: burst 0 is lower than device lo mtu (17233) ! [ 162.750672][ T8793] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.024355][ T8805] netlink: 12 bytes leftover after parsing attributes in process `syz.3.749'. [ 163.122754][ T8808] netlink: 12 bytes leftover after parsing attributes in process `syz.3.749'. [ 163.260450][ T8549] lo speed is unknown, defaulting to 1000 [ 163.490767][ T8819] pim6reg527: entered allmulticast mode [ 163.681305][ T8827] netlink: 28 bytes leftover after parsing attributes in process `syz.4.754'. [ 163.887462][ T8800] vxcan1 speed is unknown, defaulting to 1000 [ 163.902726][ T8830] netlink: 232 bytes leftover after parsing attributes in process `syz.3.755'. [ 164.385356][ T8844] netlink: 14 bytes leftover after parsing attributes in process `syz.3.759'. [ 164.625071][ T8844] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.647675][ T8844] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.661237][ T8844] bond0 (unregistering): Released all slaves [ 164.771701][ T8834] vxcan1 speed is unknown, defaulting to 1000 [ 165.202099][ T8865] netlink: 92 bytes leftover after parsing attributes in process `syz.1.769'. [ 165.384992][ T8875] tipc: Enabled bearer , priority 0 [ 165.423828][ T8870] syzkaller0: entered promiscuous mode [ 165.465068][ T8870] syzkaller0: entered allmulticast mode [ 165.560700][ T8870] tipc: Resetting bearer [ 165.618512][ T8869] tipc: Resetting bearer [ 165.693241][ T8869] tipc: Disabling bearer [ 165.696897][ T8884] netlink: 72 bytes leftover after parsing attributes in process `syz.0.772'. [ 165.723864][ T8834] lo speed is unknown, defaulting to 1000 [ 165.937455][ T8897] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.955940][ T8897] team0: Cannot enslave team device to itself [ 166.796250][ T8928] netlink: 'syz.3.783': attribute type 7 has an invalid length. [ 166.804125][ T8928] netlink: 'syz.3.783': attribute type 8 has an invalid length. [ 167.546915][ T8957] netlink: 'syz.1.788': attribute type 1 has an invalid length. [ 167.554934][ T8957] netlink: 'syz.1.788': attribute type 3 has an invalid length. [ 167.576093][ T8957] __nla_validate_parse: 4 callbacks suppressed [ 167.576113][ T8957] netlink: 224 bytes leftover after parsing attributes in process `syz.1.788'. [ 168.152446][ T8971] netlink: 72 bytes leftover after parsing attributes in process `syz.0.790'. [ 168.473524][ T8987] netlink: 8 bytes leftover after parsing attributes in process `syz.3.796'. [ 168.474995][ T8986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.796'. [ 168.961021][ T8998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.801'. [ 169.002679][ T9003] netlink: 'syz.3.803': attribute type 1 has an invalid length. [ 169.127588][ T9003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.470656][ T9020] netlink: 'syz.3.808': attribute type 1 has an invalid length. [ 169.508670][ T9020] netlink: 'syz.3.808': attribute type 2 has an invalid length. [ 169.510926][ T9023] netlink: 'syz.1.809': attribute type 3 has an invalid length. [ 169.549409][ T9020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.808'. [ 169.606686][ T9030] netlink: 'syz.3.808': attribute type 1 has an invalid length. [ 169.649253][ T9030] netlink: 'syz.3.808': attribute type 2 has an invalid length. [ 169.649431][ T9020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.808'. [ 170.014941][ T9047] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.816'. [ 170.053244][ T9047] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.816'. [ 170.072334][ T9052] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 170.127494][ T9052] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 170.156331][ T9055] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.253666][ T9059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.819'. [ 170.362255][ T9065] dvmrp8: entered allmulticast mode [ 170.434329][ T9065] dvmrp8: left allmulticast mode [ 170.808490][ T9087] ieee802154 phy0 wpan0: encryption failed: -22 [ 172.022885][ T9159] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 172.855661][ T9208] __nla_validate_parse: 7 callbacks suppressed [ 172.855681][ T9208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.862'. [ 172.893831][ T9212] netlink: 256 bytes leftover after parsing attributes in process `syz.3.864'. [ 172.987441][ T9218] netlink: 32 bytes leftover after parsing attributes in process `syz.1.865'. [ 173.764659][ T9239] syzkaller0: entered promiscuous mode [ 173.780682][ T9239] syzkaller0: entered allmulticast mode [ 173.804262][ T9239] tipc: Enabled bearer , priority 0 [ 173.867692][ T8000] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xc8 [ 173.886114][ T9237] tipc: Resetting bearer [ 173.956472][ T9237] tipc: Disabling bearer [ 173.991345][ T9252] netlink: 24 bytes leftover after parsing attributes in process `syz.2.876'. [ 174.370536][ T9270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.881'. [ 174.834168][ T9287] netlink: del zone limit has 4 unknown bytes [ 174.910249][ T9293] siw: device registration error -23 [ 175.125767][ T9304] validate_nla: 3 callbacks suppressed [ 175.125785][ T9304] netlink: 'syz.1.892': attribute type 3 has an invalid length. [ 175.305993][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 175.383496][ T9320] netlink: 'syz.1.894': attribute type 3 has an invalid length. [ 175.656732][ T9337] netlink: 56 bytes leftover after parsing attributes in process `syz.3.897'. [ 175.677870][ T9331] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.896'. [ 175.726910][ T9336] netlink: 56 bytes leftover after parsing attributes in process `syz.3.897'. [ 175.780790][ T9343] netlink: 32 bytes leftover after parsing attributes in process `syz.1.900'. [ 175.850088][ T9346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.902'. [ 176.558243][ T9380] netlink: 'syz.4.910': attribute type 11 has an invalid length. [ 176.587634][ T9380] netlink: 'syz.4.910': attribute type 11 has an invalid length. [ 176.920943][ T9390] pimreg: entered allmulticast mode [ 177.470951][ T9413] netlink: 'syz.4.920': attribute type 20 has an invalid length. [ 177.492753][ T9413] netlink: 'syz.4.920': attribute type 20 has an invalid length. [ 177.795099][ T9434] FAULT_INJECTION: forcing a failure. [ 177.795099][ T9434] name failslab, interval 1, probability 0, space 0, times 0 [ 177.868032][ T9434] CPU: 0 UID: 0 PID: 9434 Comm: syz.4.925 Not tainted syzkaller #0 PREEMPT(full) [ 177.868061][ T9434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 177.868072][ T9434] Call Trace: [ 177.868080][ T9434] [ 177.868088][ T9434] dump_stack_lvl+0x189/0x250 [ 177.868116][ T9434] ? __pfx____ratelimit+0x10/0x10 [ 177.868143][ T9434] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.868165][ T9434] ? __pfx__printk+0x10/0x10 [ 177.868198][ T9434] ? __pfx___might_resched+0x10/0x10 [ 177.868216][ T9434] ? fs_reclaim_acquire+0x7d/0x100 [ 177.868250][ T9434] should_fail_ex+0x414/0x560 [ 177.868280][ T9434] should_failslab+0xa8/0x100 [ 177.868309][ T9434] __kmalloc_cache_noprof+0x70/0x3d0 [ 177.868339][ T9434] ? __request_module+0x2b5/0x5e0 [ 177.868372][ T9434] __request_module+0x2b5/0x5e0 [ 177.868406][ T9434] ? __pfx___request_module+0x10/0x10 [ 177.868452][ T9434] ? security_capable+0x7e/0x2e0 [ 177.868484][ T9434] ? dev_load+0x21/0x1f0 [ 177.868510][ T9434] dev_load+0x190/0x1f0 [ 177.868535][ T9434] ? __pfx_ioctl_standard_call+0x10/0x10 [ 177.868555][ T9434] wext_ioctl_dispatch+0x9d/0x410 [ 177.868579][ T9434] wext_handle_ioctl+0x100/0x1c0 [ 177.868601][ T9434] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 177.868618][ T9434] ? __lock_acquire+0xab9/0xd20 [ 177.868664][ T9434] sock_ioctl+0x15f/0x790 [ 177.868693][ T9434] ? __pfx_sock_ioctl+0x10/0x10 [ 177.868717][ T9434] ? __fget_files+0x2a/0x420 [ 177.868732][ T9434] ? __fget_files+0x3a0/0x420 [ 177.868747][ T9434] ? __fget_files+0x2a/0x420 [ 177.868767][ T9434] ? bpf_lsm_file_ioctl+0x9/0x20 [ 177.868790][ T9434] ? __pfx_sock_ioctl+0x10/0x10 [ 177.868813][ T9434] __se_sys_ioctl+0xfc/0x170 [ 177.868849][ T9434] do_syscall_64+0xfa/0x3b0 [ 177.868865][ T9434] ? lockdep_hardirqs_on+0x9c/0x150 [ 177.868892][ T9434] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.868910][ T9434] ? clear_bhb_loop+0x60/0xb0 [ 177.868933][ T9434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.868950][ T9434] RIP: 0033:0x7f63aef8eba9 [ 177.868968][ T9434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.868982][ T9434] RSP: 002b:00007f63afdfe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 177.869002][ T9434] RAX: ffffffffffffffda RBX: 00007f63af1d5fa0 RCX: 00007f63aef8eba9 [ 177.869016][ T9434] RDX: 0000200000000000 RSI: 0000000000008b04 RDI: 0000000000000003 [ 177.869027][ T9434] RBP: 00007f63afdfe090 R08: 0000000000000000 R09: 0000000000000000 [ 177.869038][ T9434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.869049][ T9434] R13: 00007f63af1d6038 R14: 00007f63af1d5fa0 R15: 00007ffe248acb98 [ 177.869082][ T9434] [ 178.565926][ T9453] vxcan1 speed is unknown, defaulting to 1000 [ 178.598102][ T9457] netlink: 'syz.4.931': attribute type 13 has an invalid length. [ 178.739500][ T9463] __nla_validate_parse: 3 callbacks suppressed [ 178.739519][ T9463] netlink: 1044 bytes leftover after parsing attributes in process `syz.1.932'. [ 179.127011][ T9484] nbd: must specify an index to disconnect [ 179.182611][ T9481] netlink: 'syz.2.936': attribute type 10 has an invalid length. [ 179.212855][ T9486] netlink: 'syz.0.937': attribute type 1 has an invalid length. [ 179.336038][ T9486] netlink: 232 bytes leftover after parsing attributes in process `syz.0.937'. [ 179.350726][ T9476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.936'. [ 179.357532][ T9481] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.367971][ T9481] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.416750][ T9481] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.424144][ T9481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.432142][ T9481] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.435546][ T9486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.937'. [ 179.439368][ T9481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.582970][ T9481] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 179.631289][ T9476] bridge_slave_1: left allmulticast mode [ 179.640314][ T9476] bridge_slave_1: left promiscuous mode [ 179.658500][ T9476] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.691662][ T9476] bridge_slave_0: left allmulticast mode [ 179.713754][ T9476] bridge_slave_0: left promiscuous mode [ 179.730113][ T9476] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.869179][ T9476] bond0: (slave bridge0): Releasing backup interface [ 179.987161][ T9453] lo speed is unknown, defaulting to 1000 [ 180.353763][ T9520] sctp: [Deprecated]: syz.0.943 (pid 9520) Use of struct sctp_assoc_value in delayed_ack socket option. [ 180.353763][ T9520] Use struct sctp_sack_info instead [ 180.381972][ T9522] macvtap1: entered promiscuous mode [ 180.413790][ T9522] vlan0: entered promiscuous mode [ 180.454003][ T9522] macvtap1: entered allmulticast mode [ 180.491563][ T9522] vlan0: entered allmulticast mode [ 180.505743][ T9522] veth0_vlan: entered allmulticast mode [ 180.602102][ T9527] macvtap2: entered promiscuous mode [ 180.625735][ T9527] macvtap2: entered allmulticast mode [ 180.702220][ T9525] syzkaller1: entered promiscuous mode [ 180.726192][ T9525] syzkaller1: entered allmulticast mode [ 181.049547][ T9550] netlink: 'syz.2.950': attribute type 14 has an invalid length. [ 181.394051][ T9564] bond0: (slave 1!€ÿ): Releasing backup interface [ 181.491327][ T9564] bond0: (slave bond_slave_1): Releasing backup interface [ 181.529709][ T9564] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.555019][ T9564] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.623103][ T9564] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.671649][ T9564] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.765630][ T9564] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 181.843714][ T5979] lo speed is unknown, defaulting to 1000 [ 182.376981][ T9599] netlink: 68 bytes leftover after parsing attributes in process `syz.1.961'. [ 182.465531][ T9599] netlink: 12 bytes leftover after parsing attributes in process `syz.1.961'. [ 183.169322][ T9628] syzkaller1: entered promiscuous mode [ 183.198226][ T9628] syzkaller1: entered allmulticast mode [ 184.057509][ T9673] netlink: 32 bytes leftover after parsing attributes in process `syz.3.978'. [ 184.149100][ T9671] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.728628][ T9700] netlink: 24 bytes leftover after parsing attributes in process `syz.3.985'. [ 185.044535][ T9709] netlink: 'syz.3.989': attribute type 4 has an invalid length. [ 185.582910][ T9733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.990'. [ 185.843370][ T9748] dvmrp1: entered allmulticast mode [ 186.069062][ T9763] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 186.092021][ T9763] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 186.134141][ T9764] netlink: 'syz.2.999': attribute type 1 has an invalid length. [ 186.165937][ T9764] netlink: 224 bytes leftover after parsing attributes in process `syz.2.999'. [ 186.523278][ T9786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1004'. [ 186.957736][ T9805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1009'. [ 187.416565][ T9823] netem: change failed [ 187.622667][ T9829] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 187.663957][ T9835] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1020'. [ 187.673442][ T9829] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1018'. [ 187.725786][ T9826] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.957137][ T9850] netlink: 'syz.2.1023': attribute type 17 has an invalid length. [ 187.973851][ T9850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1023'. [ 187.984351][ T9850] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1023'. [ 188.086597][ T9850] erspan0: entered promiscuous mode [ 188.367423][ T9850] erspan0: left promiscuous mode [ 188.604632][ T9826] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.765720][ T9869] netlink: 'syz.4.1028': attribute type 21 has an invalid length. [ 188.798534][ T9826] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.894922][ T9874] netlink: 'syz.2.1029': attribute type 21 has an invalid length. [ 188.928749][ T9826] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.156897][ T9882] __nla_validate_parse: 3 callbacks suppressed [ 189.156917][ T9882] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1034'. [ 189.291045][ T7997] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.311497][ T7997] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.358993][ T49] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.405807][ T9890] delete_channel: no stack [ 189.418322][ T49] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.653883][ T9896] netlink: 'syz.3.1038': attribute type 1 has an invalid length. [ 189.707926][ T9902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1040'. [ 189.807342][ T9896] 8021q: adding VLAN 0 to HW filter on device bond1 [ 189.821009][ T9899] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1039'. [ 189.922991][ T9903] 8021q: adding VLAN 0 to HW filter on device bond1 [ 189.936918][ T9903] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 189.994052][ T9903] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 190.116702][ T9906] veth5: entered promiscuous mode [ 190.151551][ T9906] bond1: (slave veth5): Enslaving as an active interface with a down link [ 190.251911][ T9934] netlink: 'syz.1.1044': attribute type 1 has an invalid length. [ 190.267981][ T9934] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1044'. [ 190.278580][ T9896] vlan2: entered allmulticast mode [ 190.285806][ T9896] bond1: entered allmulticast mode [ 190.370130][ T9940] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1046'. [ 190.749390][ T43] IPVS: starting estimator thread 0... [ 190.773603][ T9955] pim6reg: entered allmulticast mode [ 190.807827][ T9955] pim6reg: left allmulticast mode [ 190.860179][ T9960] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1054'. [ 190.869808][ T9956] IPVS: using max 26 ests per chain, 62400 per kthread [ 191.021228][ T9963] openvswitch: netlink: Message has 4 unknown bytes. [ 191.212928][ T9972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1059'. [ 191.244348][ T9972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1059'. [ 191.263463][ T9976] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1058'. [ 191.750752][ T9997] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1065'. [ 191.820625][ T9996] syzkaller1: entered promiscuous mode [ 191.832313][ T9996] syzkaller1: entered allmulticast mode [ 191.838164][ T5234] udevd[5234]: worker [5912] terminated by signal 33 (Unknown signal 33) [ 191.868751][ T5234] udevd[5234]: worker [5912] failed while handling '/devices/virtual/block/loop4' [ 192.006481][T10008] bond2: entered promiscuous mode [ 192.007810][T10016] netlink: 'syz.3.1067': attribute type 21 has an invalid length. [ 192.011826][T10008] bond2: entered allmulticast mode [ 192.027643][T10008] 8021q: adding VLAN 0 to HW filter on device bond2 [ 192.035601][T10016] netlink: 'syz.3.1067': attribute type 4 has an invalid length. [ 192.043454][T10016] netlink: 'syz.3.1067': attribute type 5 has an invalid length. [ 192.087220][T10020] netlink: 'syz.0.1070': attribute type 1 has an invalid length. [ 192.094229][T10007] netlink: 'syz.3.1067': attribute type 21 has an invalid length. [ 192.103478][T10007] netlink: 'syz.3.1067': attribute type 4 has an invalid length. [ 192.105018][T10021] netlink: 'syz.0.1070': attribute type 1 has an invalid length. [ 192.113048][T10007] netlink: 'syz.3.1067': attribute type 5 has an invalid length. [ 192.919717][T10067] smc: removing ib device syz0 [ 194.513107][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.524850][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.562384][T10129] __nla_validate_parse: 14 callbacks suppressed [ 194.562403][T10129] netlink: 360 bytes leftover after parsing attributes in process `syz.3.1100'. [ 194.666749][T10130] netlink: 360 bytes leftover after parsing attributes in process `syz.3.1100'. [ 194.714270][T10147] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1104'. [ 194.740717][T10144] tipc: Enabled bearer , priority 0 [ 194.748686][T10143] syzkaller0: entered promiscuous mode [ 194.754356][T10143] syzkaller0: entered allmulticast mode [ 194.824144][T10140] tipc: Resetting bearer [ 194.867592][T10140] tipc: Disabling bearer [ 195.170833][T10157] netlink: 'syz.3.1105': attribute type 10 has an invalid length. [ 195.494586][T10172] netlink: 'syz.0.1110': attribute type 1 has an invalid length. [ 195.602707][T10172] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1110'. [ 195.627813][T10178] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1112'. [ 195.881212][T10189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1115'. [ 195.924560][T10189] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1115'. [ 197.751221][T10229] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1127'. [ 197.799699][T10231] netlink: 'syz.3.1129': attribute type 12 has an invalid length. [ 197.817962][T10231] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1129'. [ 198.043968][T10243] veth1_to_bond: entered allmulticast mode [ 198.107817][T10241] veth1_to_bond: left allmulticast mode [ 198.770098][T10270] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1140'. [ 198.866529][T10270] hsr_slave_0: left promiscuous mode [ 198.927031][T10270] hsr_slave_1: left promiscuous mode [ 198.975656][T10279] IPv4: Oversized IP packet from 127.202.26.0 [ 199.004924][T10280] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 199.076295][T10281] IPVS: set_ctl: invalid protocol: 8 10.1.1.1:20001 [ 199.699877][T10295] rdma_op ffff88802f1e01f0 conn xmit_rdma 0000000000000000 [ 199.756900][T10295] netlink: 2972 bytes leftover after parsing attributes in process `syz.2.1146'. [ 200.334316][T10327] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1153'. [ 200.807573][T10346] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1155'. [ 200.860850][T10350] netlink: 'syz.1.1155': attribute type 21 has an invalid length. [ 200.891113][T10346] netlink: 272 bytes leftover after parsing attributes in process `syz.1.1155'. [ 200.915691][T10350] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1155'. [ 200.963573][T10346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1155'. [ 201.048905][T10350] netlink: 'syz.1.1155': attribute type 5 has an invalid length. [ 201.067988][T10350] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1155'. [ 201.409986][T10369] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1164'. [ 201.798698][T10383] geneve2: entered promiscuous mode [ 201.821594][T10383] geneve2: entered allmulticast mode [ 201.835776][ T8000] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 201.876314][T10389] netlink: 'syz.2.1170': attribute type 1 has an invalid length. [ 201.917200][ T8000] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 202.027337][T10389] 8021q: adding VLAN 0 to HW filter on device bond4 [ 202.080544][T10391] bond4: (slave gretap1): making interface the new active one [ 202.092578][T10391] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 202.109436][ T8000] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 202.143465][ T8000] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 202.599922][T10404] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1174'. [ 202.634351][T10404] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 202.662759][T10404] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 202.691300][T10404] gretap2: entered promiscuous mode [ 202.717316][T10404] gretap2: entered allmulticast mode [ 203.723245][T10446] netlink: 'syz.4.1187': attribute type 83 has an invalid length. [ 203.804520][T10452] erspan0: refused to change device tx_queue_len [ 203.826264][T10452] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 203.884918][T10456] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1189'. [ 204.163093][T10461] geneve3: entered promiscuous mode [ 204.187617][T10461] geneve3: entered allmulticast mode [ 205.108655][T10497] netlink: 'syz.4.1200': attribute type 3 has an invalid length. [ 205.141486][ T3552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.171086][ T3552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.387877][T10505] netlink: 'syz.1.1203': attribute type 1 has an invalid length. [ 205.563189][T10505] bond1: entered promiscuous mode [ 205.588200][T10505] 8021q: adding VLAN 0 to HW filter on device bond1 [ 205.808447][T10492] Can't find ip_set type [ 205.902027][T10516] __nla_validate_parse: 2 callbacks suppressed [ 205.902047][T10516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1206'. [ 205.923701][T10518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1207'. [ 206.025560][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 206.296278][T10533] netlink: 'syz.4.1213': attribute type 32 has an invalid length. [ 206.315134][T10533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1213'. [ 206.350678][T10536] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1213'. [ 206.519556][T10530] tipc: Enabled bearer , priority 0 [ 206.534922][T10533] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 206.596398][T10539] syzkaller0: entered promiscuous mode [ 206.621068][T10539] syzkaller0: entered allmulticast mode [ 206.763588][T10548] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 206.776772][T10530] tipc: Resetting bearer [ 206.803730][T10528] tipc: Resetting bearer [ 206.894467][T10528] tipc: Disabling bearer [ 207.134561][T10562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1220'. [ 207.179676][T10564] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 207.250350][T10558] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 207.257988][T10558] IPv6: NLM_F_CREATE should be set when creating new route [ 207.265347][T10558] IPv6: NLM_F_CREATE should be set when creating new route [ 207.272638][T10558] IPv6: NLM_F_CREATE should be set when creating new route [ 207.275505][T10567] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1222'. [ 207.316719][T10558] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 207.583116][T10577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1225'. [ 208.607333][T10605] netlink: 636 bytes leftover after parsing attributes in process `syz.0.1234'. [ 208.618932][T10603] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1238'. [ 208.662730][T10603] Bluetooth: MGMT ver 1.23 [ 209.213220][T10635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1247'. [ 209.819154][T10654] netlink: 'syz.2.1254': attribute type 1 has an invalid length. [ 210.054544][T10667] bond5: (slave bridge0): making interface the new active one [ 210.114510][T10667] bond5: (slave bridge0): Enslaving as an active interface with an up link [ 210.379945][T10670] 8021q: adding VLAN 0 to HW filter on device bond5 [ 210.527274][T10675] 8021q: adding VLAN 0 to HW filter on device bond5 [ 210.542367][T10675] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 210.608057][T10675] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 210.774460][ T5234] udevd[5234]: worker [5933] terminated by signal 33 (Unknown signal 33) [ 211.080464][T10706] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 211.351606][T10720] __nla_validate_parse: 3 callbacks suppressed [ 211.351628][T10720] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1267'. [ 211.356748][T10719] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1268'. [ 211.482851][T10719] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1268'. [ 211.646512][T10728] bridge0: entered promiscuous mode [ 211.671029][T10728] bond0: entered promiscuous mode [ 211.702182][T10728] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 211.743269][T10728] hsr1: entered allmulticast mode [ 211.758434][T10728] bridge0: entered allmulticast mode [ 211.772540][T10728] bond0: entered allmulticast mode [ 211.846650][T10739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1274'. [ 211.859112][T10732] pim6reg1: entered promiscuous mode [ 211.864460][T10732] pim6reg1: entered allmulticast mode [ 213.497977][T10796] openvswitch: netlink: Tunnel attr 18 out of range max 16 [ 213.527950][T10789] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 213.683000][T10792] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 214.424241][T10809] netlink: 'syz.2.1289': attribute type 1 has an invalid length. [ 214.488129][T10809] netlink: 'syz.2.1289': attribute type 3 has an invalid length. [ 214.525718][T10809] netlink: 'syz.2.1289': attribute type 235 has an invalid length. [ 214.583067][ T3552] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 214.601461][T10823] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 214.752298][T10823] vxcan1 speed is unknown, defaulting to 1000 [ 214.933592][T10834] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1296'. [ 215.166778][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056b52000: rx timeout, send abort [ 215.176579][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056b50800: rx timeout, send abort [ 215.187583][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888056b52000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 215.203197][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888056b50800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 215.918928][T10871] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1306'. [ 216.687180][T10881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1308'. [ 216.856719][T10881] batman_adv: batadv0: Removing interface: dummy0 [ 216.966275][T10894] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1310'. [ 217.303502][T10904] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1315'. [ 217.544603][T10914] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1317'. [ 217.922990][T10936] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1324'. [ 218.117097][T10943] syzkaller1: entered promiscuous mode [ 218.147225][T10943] syzkaller1: entered allmulticast mode [ 218.745764][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 218.809406][T10980] netlink: 'syz.2.1337': attribute type 1 has an invalid length. [ 218.849196][T10980] nbd: error processing sock list [ 218.874106][T10980] block nbd0: shutting down sockets [ 218.980280][T10995] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1339'. [ 219.501589][T11025] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1348'. [ 219.733692][T11035] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1352'. [ 219.922751][T11048] netlink: 'syz.0.1354': attribute type 4 has an invalid length. [ 219.932445][T11050] netlink: 'syz.0.1354': attribute type 4 has an invalid length. [ 220.110380][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 220.452076][T11073] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1364'. [ 221.134933][T11100] netlink: 212 bytes leftover after parsing attributes in process `syz.3.1372'. [ 221.173472][T11111] tipc: Enabled bearer , priority 0 [ 221.278845][T11111] bridge0: port 4(batadv1) entered blocking state [ 221.316359][T11111] bridge0: port 4(batadv1) entered disabled state [ 221.323622][T11111] batadv1: entered allmulticast mode [ 221.353789][T11111] batadv1: entered promiscuous mode [ 221.383746][T11116] syzkaller0: entered promiscuous mode [ 221.408066][T11116] syzkaller0: entered allmulticast mode [ 221.437911][T11116] tipc: Resetting bearer [ 221.483992][T11110] tipc: Resetting bearer [ 221.559885][T11110] tipc: Disabling bearer [ 221.612439][T11132] erspan0: entered promiscuous mode [ 221.642039][T11132] vlan0: entered promiscuous mode [ 221.750403][ T36] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 221.760192][ T36] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 221.884611][T11144] netlink: 'syz.1.1388': attribute type 30 has an invalid length. [ 221.911175][T11144] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 221.932811][T11144] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 221.962629][T11155] __nla_validate_parse: 4 callbacks suppressed [ 221.962647][T11155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1391'. [ 221.996750][T11150] team_slave_0: mtu greater than device maximum [ 222.041733][T11155] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1391'. [ 222.134862][T11155] 8021q: adding VLAN 0 to HW filter on device bond3 [ 222.222368][T11162] 8021q: adding VLAN 0 to HW filter on device bond3 [ 222.241343][T11162] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 222.257188][T11162] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 222.295671][T11167] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1396'. [ 222.429226][T11177] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1397'. [ 222.808098][T11192] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1404'. [ 222.829643][T11194] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1403'. [ 223.021986][T11204] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1406'. [ 223.064986][T11208] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1407'. [ 223.079661][T11204] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1406'. [ 223.116833][T11211] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 223.378622][T11245] vxcan1 speed is unknown, defaulting to 1000 [ 223.866265][T11338] netlink: 'syz.3.1416': attribute type 39 has an invalid length. [ 224.038470][T11324] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 224.051761][T11324] syzkaller0: linktype set to 264 [ 224.517898][T11358] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1421'. [ 224.924100][T11368] netlink: 'syz.0.1424': attribute type 33 has an invalid length. [ 226.179095][T11439] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 226.201761][T11437] netlink: 'syz.2.1443': attribute type 3 has an invalid length. [ 226.973671][T11478] __nla_validate_parse: 4 callbacks suppressed [ 226.973690][T11478] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1458'. [ 227.033652][T11478] netlink: 'syz.1.1458': attribute type 83 has an invalid length. [ 227.186500][T11491] tipc: Enabled bearer , priority 0 [ 227.256470][T11490] tipc: Disabling bearer [ 227.464515][T11506] syzkaller0: entered promiscuous mode [ 227.481390][T11506] syzkaller0: entered allmulticast mode [ 227.489331][T11507] syzkaller0: entered promiscuous mode [ 227.494920][T11507] syzkaller0: entered allmulticast mode [ 227.785694][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 227.818098][T11515] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1464'. [ 229.557395][T11532] bridge0: Device is already in use. [ 229.670689][T11538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1470'. [ 229.731725][T11538] dummy0: entered promiscuous mode [ 229.750478][T11538] batadv_slave_1: entered promiscuous mode [ 229.905599][T11550] netlink: 'syz.0.1473': attribute type 10 has an invalid length. [ 229.922820][T11545] tipc: Enabled bearer , priority 0 [ 229.959114][T11550] bridge_slave_1: left allmulticast mode [ 229.972979][T11550] bridge_slave_1: left promiscuous mode [ 229.983846][T11550] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.013415][T11550] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 230.023469][T11545] syzkaller0: entered promiscuous mode [ 230.046177][T11545] syzkaller0: entered allmulticast mode [ 230.113427][T11545] tipc: Resetting bearer [ 230.130263][T11558] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1475'. [ 230.147783][T11545] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1471'. [ 230.200792][T11545] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1471'. [ 230.271520][T11544] tipc: Resetting bearer [ 230.360349][T11544] tipc: Disabling bearer [ 230.383484][T11568] Bluetooth: hci1: Opcode 0x0401 failed: -22 [ 230.644830][T11586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1482'. [ 230.674730][T11586] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1482'. [ 230.898411][T11597] netlink: 'syz.4.1485': attribute type 1 has an invalid length. [ 230.936858][T11597] netlink: 'syz.4.1485': attribute type 1 has an invalid length. [ 230.968970][T11603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1489'. [ 231.323323][T11623] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1495'. [ 231.624746][T11630] netlink: 'syz.0.1496': attribute type 1 has an invalid length. [ 232.420946][T11667] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1503'. [ 232.435711][ T51] Bluetooth: hci1: command tx timeout [ 232.610569][T11686] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1508'. [ 233.489876][T11704] netlink: 'syz.3.1515': attribute type 10 has an invalid length. [ 233.600224][T11710] vxcan1 speed is unknown, defaulting to 1000 [ 234.013833][T11734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1523'. [ 234.330430][T11740] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 234.469377][T11754] netlink: 'syz.4.1530': attribute type 10 has an invalid length. [ 235.699370][T11774] netlink: 'syz.2.1535': attribute type 3 has an invalid length. [ 235.719727][T11774] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1535'. [ 236.114794][T11798] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1540'. [ 236.229093][T11805] pimreg2: entered allmulticast mode [ 236.400168][T11814] nbd: couldn't find a device at index -373156329 [ 236.490687][T11816] netlink: set zone limit has 8 unknown bytes [ 236.741480][T11830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1549'. [ 236.753216][T11827] netlink: 'syz.1.1550': attribute type 12 has an invalid length. [ 236.812115][T11830] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1549'. [ 236.883022][T11837] IPv6: NLM_F_CREATE should be specified when creating new route [ 237.153800][T11846] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 238.637227][T11854] syz_tun: entered allmulticast mode [ 238.797287][T11857] syz_tun: left allmulticast mode [ 238.819613][T11869] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1561'. [ 238.939377][T11873] sch_tbf: burst 88 is lower than device veth7 mtu (1514) ! [ 239.002459][T11876] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1563'. [ 239.162527][T11883] 8021q: VLANs not supported on wg1 [ 239.185295][T11883] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1565'. [ 239.643882][T11913] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 239.694892][T11917] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 239.778782][T11923] netlink: 212316 bytes leftover after parsing attributes in process `syz.4.1575'. [ 239.783315][T11928] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 240.341330][T11963] netlink: 'syz.2.1586': attribute type 1 has an invalid length. [ 240.366782][T11963] netlink: 'syz.2.1586': attribute type 10 has an invalid length. [ 240.407657][T11963] netlink: 'syz.2.1586': attribute type 4 has an invalid length. [ 240.433541][T11963] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1586'. [ 240.642563][T11979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1591'. [ 240.709253][T11979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1591'. [ 241.398575][T12017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1602'. [ 241.628078][T12031] netlink: 'syz.3.1605': attribute type 1 has an invalid length. [ 241.676270][T12035] netlink: 'syz.1.1606': attribute type 30 has an invalid length. [ 241.805078][T12031] bond4: entered promiscuous mode [ 241.830078][T12031] 8021q: adding VLAN 0 to HW filter on device bond4 [ 241.956510][T12044] veth3: entered allmulticast mode [ 242.014993][T12054] netlink: 65019 bytes leftover after parsing attributes in process `syz.0.1611'. [ 242.120049][T12063] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 242.394059][T12078] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1619'. [ 242.575719][T12090] netlink: 'syz.4.1623': attribute type 4 has an invalid length. [ 242.920142][T12110] netlink: 'syz.1.1625': attribute type 1 has an invalid length. [ 243.233760][T12120] netlink: 'syz.2.1632': attribute type 5 has an invalid length. [ 243.263197][T12125] netlink: 'syz.1.1634': attribute type 1 has an invalid length. [ 243.343193][T12134] nft_compat: unsupported protocol 0 [ 243.362541][T12125] 8021q: adding VLAN 0 to HW filter on device bond3 [ 243.413103][T12131] bond3: (slave geneve3): making interface the new active one [ 243.448903][T12131] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 243.474581][ T12] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 243.515999][ T12] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 243.562208][ T12] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 243.619208][ T12] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 243.790181][T12160] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 243.999144][T12165] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 244.029477][T12170] netlink: 'syz.1.1647': attribute type 5 has an invalid length. [ 244.132001][T12172] : entered promiscuous mode [ 244.174952][T12175] __nla_validate_parse: 6 callbacks suppressed [ 244.174971][T12175] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1649'. [ 244.255646][T12187] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1650'. [ 244.279085][T12186] netlink: 'syz.2.1651': attribute type 24 has an invalid length. [ 244.499064][ T7997] batman_adv: batadv1: IGMP Querier appeared [ 244.505142][ T7997] batman_adv: batadv1: MLD Querier appeared [ 244.564608][T12200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1655'. [ 244.665183][T12206] nftables ruleset with unbound set [ 244.729644][T12208] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 244.837744][ T7997] nci: nci_rx_work: unknown MT 0x1 [ 244.852683][T12223] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 244.852835][T12208] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 244.994533][T12230] netlink: 'syz.3.1663': attribute type 9 has an invalid length. [ 245.012285][T12234] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1666'. [ 245.053006][T12238] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1666'. [ 245.054296][T12234] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1666'. [ 245.065700][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 245.122076][T12238] xfrm1: entered promiscuous mode [ 245.136511][T12238] xfrm1: entered allmulticast mode [ 245.539015][T12255] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1673'. [ 245.567713][T12257] netlink: 'syz.2.1674': attribute type 5 has an invalid length. [ 245.654806][T12260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.703237][T12261] syzkaller0: entered promiscuous mode [ 245.709621][T12261] syzkaller0: entered allmulticast mode [ 245.900000][T12274] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1678'. [ 246.113925][T12284] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 246.183563][T12289] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1684'. [ 246.240705][T12294] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1684'. [ 246.377268][T12299] team0: Port device dummy0 added [ 246.401761][T12299] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 246.446887][T12299] team0: Failed to send options change via netlink (err -105) [ 246.454771][T12299] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 246.501000][T12299] team0: Port device dummy0 removed [ 246.513205][T12299] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 246.547378][T12305] bridge4: entered promiscuous mode [ 246.555025][T12305] bridge4: entered allmulticast mode [ 246.640687][T12314] sch_fq: defrate 2 ignored. [ 246.908093][T12335] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 246.944795][T12331] bond0: (slave dummy0): Releasing backup interface [ 247.011959][T12331] bridge_slave_0: left allmulticast mode [ 247.044219][T12331] bridge_slave_0: left promiscuous mode [ 247.077709][T12331] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.111650][T12331] bridge_slave_1: left allmulticast mode [ 247.118171][T12331] bridge_slave_1: left promiscuous mode [ 247.124225][T12331] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.191349][T12331] bond0: (slave bond_slave_0): Releasing backup interface [ 247.225104][T12331] bond0: (slave bond_slave_1): Releasing backup interface [ 247.259754][T12331] team0: Port device team_slave_0 removed [ 247.292493][T12331] team0: Port device team_slave_1 removed [ 247.300187][T12331] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.308551][T12331] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.324257][T12331] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.334366][T12331] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.363352][T12331] team0: Port device geneve0 removed [ 247.372300][T12331] bond0: (slave geneve1): Releasing backup interface [ 247.397815][T12331] bond1: (slave veth3): Releasing active interface [ 247.560824][T12355] geneve2: entered promiscuous mode [ 247.580521][T12355] geneve2: entered allmulticast mode [ 247.669035][T12347] vxcan1 speed is unknown, defaulting to 1000 [ 247.726181][T12367] validate_nla: 3 callbacks suppressed [ 247.726204][T12367] netlink: 'syz.0.1709': attribute type 1 has an invalid length. [ 247.757525][T12371] netlink: 'syz.0.1709': attribute type 1 has an invalid length. [ 247.768482][T12369] netlink: 'syz.1.1710': attribute type 1 has an invalid length. [ 247.945165][T12369] 8021q: adding VLAN 0 to HW filter on device bond4 [ 248.209129][T12393] delete_channel: no stack [ 248.413585][T12388] vxcan1 speed is unknown, defaulting to 1000 [ 248.915084][T12417] netlink: 'syz.2.1723': attribute type 7 has an invalid length. [ 248.928755][T12417] netlink: 'syz.2.1723': attribute type 8 has an invalid length. [ 249.210534][T12425] syzkaller1: entered promiscuous mode [ 249.220341][T12425] syzkaller1: entered allmulticast mode [ 249.284126][T12428] netlink: 'syz.4.1727': attribute type 11 has an invalid length. [ 249.546560][T12432] tipc: Enabled bearer , priority 0 [ 249.709641][T12432] syzkaller0: entered promiscuous mode [ 249.716347][T12432] syzkaller0: entered allmulticast mode [ 249.722728][T12432] tipc: Resetting bearer [ 249.781401][T12442] tipc: Started in network mode [ 249.794616][T12442] tipc: Node identity d2b4688439a4, cluster identity 4711 [ 249.822888][T12442] tipc: Enabled bearer , priority 0 [ 249.830274][T12431] tipc: Resetting bearer [ 250.102527][T12450] __nla_validate_parse: 13 callbacks suppressed [ 250.102546][T12450] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1733'. [ 250.215160][T12454] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1733'. [ 250.575833][ T24] tipc: Node number set to 2848020847 [ 250.927034][ T5926] tipc: Node number set to 3943721092 [ 250.941522][T12450] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 251.732602][T12431] tipc: Disabling bearer [ 251.750954][T12442] tipc: Disabling bearer [ 252.426185][T12497] tipc: Enabling of bearer rejected, failed to enable media [ 252.440762][T12501] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1747'. [ 252.479183][T12501] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1747'. [ 252.509436][T12501] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1747'. [ 253.019998][T12526] vxcan1 speed is unknown, defaulting to 1000 [ 253.257836][T12541] tipc: Can't bind to reserved service type 0 [ 253.727997][T12558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1762'. [ 253.861733][T12558] dummy0 (unregistering): left allmulticast mode [ 253.880078][T12558] bridge0: port 3(dummy0) entered disabled state [ 253.972066][T12571] netlink: 'syz.2.1766': attribute type 1 has an invalid length. [ 254.000926][T12571] netlink: 'syz.2.1766': attribute type 3 has an invalid length. [ 254.029485][T12571] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1766'. [ 254.067820][T12571] NCSI netlink: No device for ifindex 0 [ 254.146283][T12576] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1767'. [ 254.174244][T12581] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1769'. [ 254.393616][T12575] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1767'. [ 254.429324][T12592] netlink: 'syz.3.1772': attribute type 5 has an invalid length. [ 254.933194][T12616] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 254.948691][T12616] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 254.984944][T12621] netlink: 'syz.1.1779': attribute type 4 has an invalid length. [ 255.087662][T12627] 8021q: VLANs not supported on ip_vti0 [ 255.172611][T12632] __nla_validate_parse: 4 callbacks suppressed [ 255.172631][T12632] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1784'. [ 255.173195][T12626] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 255.470429][T12646] tipc: Enabled bearer , priority 0 [ 255.508776][T12650] openvswitch: netlink: IP tunnel TTL not specified. [ 255.647552][T12646] syzkaller0: entered promiscuous mode [ 255.662061][T12646] syzkaller0: entered allmulticast mode [ 255.677339][T12646] tipc: Resetting bearer [ 255.712963][T12651] tipc: Resetting bearer [ 255.735093][T12662] IPVS: set_ctl: invalid protocol: 46 172.30.1.4:20003 [ 255.956654][T12669] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1793'. [ 255.966603][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.972961][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.579981][T12651] tipc: Disabling bearer [ 257.602475][T12662] vxcan1 speed is unknown, defaulting to 1000 [ 257.675981][ T7997] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.722812][ T7997] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.731034][T12671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1794'. [ 257.750892][ T7997] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.786945][ T7997] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.821352][ T7997] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 19999 - 0 [ 257.854404][ T7997] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 257.886010][ T7997] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 19999 - 0 [ 257.939985][ T7997] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 257.949691][T12680] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1797'. [ 257.959936][ T7997] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 19999 - 0 [ 258.007618][ T7997] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 258.033986][ T7997] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 19999 - 0 [ 258.073016][ T7997] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 258.306369][T12690] netlink: zone id is out of range [ 258.437359][T12676] syzkaller0: entered promiscuous mode [ 258.442909][T12676] syzkaller0: entered allmulticast mode [ 258.570769][T12699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1804'. [ 258.630069][T12704] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1804'. [ 260.608750][T12724] netlink: 'syz.3.1808': attribute type 1 has an invalid length. [ 260.735213][T12724] 8021q: adding VLAN 0 to HW filter on device bond5 [ 260.810149][T12734] bond5: (slave veth9): Enslaving as an active interface with a down link [ 260.860057][T12724] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 260.872559][T12724] netlink: 'syz.3.1808': attribute type 1 has an invalid length. [ 260.908025][T12744] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1813'. [ 260.926988][T12751] openvswitch: netlink: Flow actions attr not present in new flow. [ 260.949608][T12724] bond5: (slave veth11): Enslaving as an active interface with a down link [ 261.256480][T12768] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1819'. [ 263.499028][T12807] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1831'. [ 263.604718][T12807] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 263.794213][T12827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1837'. [ 264.250933][T12847] netlink: 'syz.3.1844': attribute type 1 has an invalid length. [ 264.282822][T12847] netlink: 'syz.3.1844': attribute type 2 has an invalid length. [ 264.313731][T12847] net veth1_virt_wifi .: renamed from virt_wifi0 [ 264.475248][T12856] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 264.943659][T12891] netlink: 'syz.4.1857': attribute type 1 has an invalid length. [ 265.096015][T12891] 8021q: adding VLAN 0 to HW filter on device bond6 [ 265.239563][T12898] bond6: (slave veth5): Enslaving as an active interface with a down link [ 265.395061][T12904] veth7: entered promiscuous mode [ 265.421933][T12904] bond6: (slave veth7): Enslaving as an active interface with a down link [ 265.489834][T12912] bond5: entered promiscuous mode [ 265.495026][T12912] bond5: entered allmulticast mode [ 265.501622][T12912] 8021q: adding VLAN 0 to HW filter on device bond5 [ 265.711858][T12912] bond5 (unregistering): Released all slaves [ 266.073241][T12956] netlink: 'syz.1.1874': attribute type 1 has an invalid length. [ 266.111602][T12956] netlink: 15 bytes leftover after parsing attributes in process `syz.1.1874'. [ 266.196947][T12961] netlink: 'syz.3.1875': attribute type 1 has an invalid length. [ 266.204747][T12961] netlink: 'syz.3.1875': attribute type 4 has an invalid length. [ 266.223445][T12961] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1875'. [ 266.319283][T12965] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1877'. [ 266.330083][T12967] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1878'. [ 266.986538][T13007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1891'. [ 267.563546][T13043] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 267.775896][T13052] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1893'. [ 267.852344][T13052] netlink: 'syz.1.1893': attribute type 7 has an invalid length. [ 267.885869][T13052] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1893'. [ 267.983817][T13058] netlink: 191164 bytes leftover after parsing attributes in process `syz.2.1896'. [ 268.344047][T13080] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1903'. [ 268.447362][T13090] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1906'. [ 268.458385][T13069] syzkaller1: entered allmulticast mode [ 268.590476][T13094] netlink: 'syz.1.1907': attribute type 2 has an invalid length. [ 268.602702][T13094] netlink: 'syz.1.1907': attribute type 33 has an invalid length. [ 268.611555][T13094] netlink: 'syz.1.1907': attribute type 12 has an invalid length. [ 269.003873][T13125] netlink: 'syz.1.1917': attribute type 18 has an invalid length. [ 269.098531][T13125] netlink: 'syz.1.1917': attribute type 18 has an invalid length. [ 269.099211][ T3082] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.151746][ T3082] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.252937][ T3082] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.312188][ T3082] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.677015][T13162] veth9: entered allmulticast mode [ 269.786443][T13171] tc_dump_action: action bad kind [ 270.021802][T13183] netlink: 'syz.0.1932': attribute type 1 has an invalid length. [ 270.143910][T13192] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 270.259726][T13198] veth1_macvtap: left promiscuous mode [ 270.270850][T13198] macsec0: entered promiscuous mode [ 270.283075][T13198] macsec0: entered allmulticast mode [ 270.322432][T13200] veth1_macvtap: entered promiscuous mode [ 270.350585][T13200] veth1_macvtap: entered allmulticast mode [ 270.376306][T13200] macsec0: left promiscuous mode [ 270.394241][T13200] macsec0: left allmulticast mode [ 270.399536][T13200] veth1_macvtap: left allmulticast mode [ 270.603085][T13209] 8021q: adding VLAN 0 to HW filter on device bond3 [ 270.652368][T13209] 8021q: adding VLAN 0 to HW filter on device bond3 [ 270.673218][T13209] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 270.718677][T13209] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 270.792108][T13212] erspan0: refused to change device tx_queue_len [ 270.802940][T13212] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 271.305673][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 271.641028][T13243] __nla_validate_parse: 10 callbacks suppressed [ 271.641051][T13243] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1950'. [ 272.109939][T13263] netlink: 'syz.2.1955': attribute type 1 has an invalid length. [ 272.109939][T13259] validate_nla: 1 callbacks suppressed [ 272.109960][T13259] netlink: 'syz.2.1955': attribute type 1 has an invalid length. [ 272.190792][T13262] netlink: 'syz.4.1954': attribute type 11 has an invalid length. [ 272.191230][T13259] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1955'. [ 272.201593][T13265] ªªªªªª: renamed from vlan0 [ 272.220350][T13262] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1954'. [ 272.252247][T13259] bridge0: Device is already in use. [ 272.265203][T13259] bridge0: Device is already in use. [ 272.478178][T13279] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1956'. [ 272.653754][T13281] veth0: entered promiscuous mode [ 272.698516][T13281] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1959'. [ 272.791690][T13281] geneve3: entered promiscuous mode [ 272.910649][T13278] veth0: left promiscuous mode [ 273.034066][T13297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1964'. [ 273.343928][T13314] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1967'. [ 273.399220][T13319] netlink: 'syz.1.1969': attribute type 9 has an invalid length. [ 276.490534][T13344] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1977'. [ 276.603795][T13353] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1980'. [ 277.019543][T13378] netlink: 'syz.4.1988': attribute type 10 has an invalid length. [ 277.054831][T13378] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1988'. [ 277.070478][T13372] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1986'. [ 277.176568][T13382] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1989'. [ 277.626743][T13406] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1994'. [ 277.723380][T13412] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1995'. [ 277.979101][T13417] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1997'. [ 278.078916][T13424] raw_sendmsg: syz.2.1999 forgot to set AF_INET. Fix it! [ 278.097590][T13424] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1999'. [ 278.345603][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 278.372131][T13442] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2004'. [ 278.505937][T13442] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2004'. [ 278.560451][T13446] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2006'. [ 278.881003][ T30] audit: type=1800 audit(1757565184.524:2): pid=13468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2011" name=C3B1F185C1C3E819D232D795EC6B48C9A5DD5ADDD5365583F006F7424BC0EE14953098ECF4EB1FD90AF683FC7B4517BA11C275D3021AD7817D269B4ECEA6CDDC7E53CBD2132607 dev="tmpfs" ino=1958 res=0 errno=0 [ 279.256528][T13492] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 279.304988][T13487] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 279.960550][T13530] IPv6: sit1: Disabled Multicast RS [ 280.100118][T13523] bond7 (unregistering): Released all slaves [ 280.468718][T13558] netlink: 'syz.4.2036': attribute type 1 has an invalid length. [ 280.483810][T13558] netlink: 'syz.4.2036': attribute type 3 has an invalid length. [ 280.506502][T13564] netlink: 'syz.1.2039': attribute type 1 has an invalid length. [ 280.652759][T13564] 8021q: adding VLAN 0 to HW filter on device bond5 [ 280.716459][T13567] bond5: (slave veth7): Enslaving as an active interface with a down link [ 280.753390][T13576] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 280.970768][T13564] bond5: (slave veth9): Enslaving as an active interface with a down link [ 281.463141][T13615] Bluetooth: MGMT ver 1.23 [ 281.878975][T13633] netlink: 'syz.3.2058': attribute type 12 has an invalid length. [ 281.922067][ T8000] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.936265][T13633] netlink: 'syz.3.2058': attribute type 12 has an invalid length. [ 281.951052][ T8000] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.966281][ T8000] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.991758][ T8000] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.173726][T13638] openvswitch: netlink: IP tunnel TTL not specified. [ 282.721734][T13664] netlink: 'syz.2.2067': attribute type 10 has an invalid length. [ 282.733760][T13664] __nla_validate_parse: 17 callbacks suppressed [ 282.733781][T13664] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2067'. [ 282.791107][T13664] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 282.911659][T13673] tipc: Enabled bearer , priority 0 [ 282.928848][T13673] syzkaller0: entered promiscuous mode [ 282.934378][T13673] syzkaller0: entered allmulticast mode [ 283.592386][T13713] veth13: entered allmulticast mode [ 283.925195][T13733] vxcan1 speed is unknown, defaulting to 1000 [ 284.055755][T13749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2094'. [ 284.064694][T13749] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2094'. [ 284.108913][T13749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2094'. [ 284.146298][T13749] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2094'. [ 284.158810][T13756] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.389719][T13766] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2100'. [ 284.495002][T13771] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2103'. [ 284.573016][T13775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2103'. [ 284.707670][T13779] netlink: 'syz.3.2104': attribute type 10 has an invalid length. [ 284.852663][T13779] batman_adv: batadv0: Removing interface: wlan1 [ 285.365250][T13802] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2112'. [ 285.381105][T13802] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2112'. [ 285.632363][T13816] netlink: 'syz.3.2117': attribute type 1 has an invalid length. [ 286.094119][T13825] bond0 (unregistering): Released all slaves [ 286.330148][T13846] syzkaller1: entered promiscuous mode [ 286.339200][T13846] syzkaller1: entered allmulticast mode [ 286.905935][T13852] vxcan1 speed is unknown, defaulting to 1000 [ 288.126933][T13907] netlink: 'syz.3.2145': attribute type 4 has an invalid length. [ 288.154219][T13907] __nla_validate_parse: 7 callbacks suppressed [ 288.154239][T13907] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2145'. [ 288.721062][T13930] sctp: [Deprecated]: syz.2.2153 (pid 13930) Use of int in max_burst socket option. [ 288.721062][T13930] Use struct sctp_assoc_value instead [ 288.846028][T13940] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2156'. [ 288.881083][T13942] netlink: 212352 bytes leftover after parsing attributes in process `syz.4.2155'. [ 289.188243][T13955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2160'. [ 289.296273][T13954] syzkaller0: entered allmulticast mode [ 289.574979][T13969] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2166'. [ 290.227590][T13998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2171'. [ 290.388716][T14006] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2175'. [ 290.542611][T14010] netlink: 'syz.4.2176': attribute type 1 has an invalid length. [ 290.592075][T14010] netlink: 'syz.4.2176': attribute type 323 has an invalid length. [ 290.815459][T14016] netlink: 'syz.3.2178': attribute type 12 has an invalid length. [ 290.873018][T14016] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2178'. [ 290.886987][T13036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.894860][T13036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.910710][T14020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 290.915568][T14022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 290.995988][ T24] ------------[ cut here ]------------ [ 291.001814][ T24] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 291.012566][ T24] WARNING: CPU: 1 PID: 24 at net/mac80211/rate.c:403 __rate_control_send_low+0x5df/0x820 [ 291.022557][ T24] Modules linked in: [ 291.026837][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full) [ 291.036137][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 291.046354][ T24] Workqueue: mld mld_ifc_work [ 291.051099][ T24] RIP: 0010:__rate_control_send_low+0x5df/0x820 [ 291.057526][ T24] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 20 85 b0 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 32 ca 92 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 291.077388][ T24] RSP: 0018:ffffc900001e64d8 EFLAGS: 00010246 [ 291.083546][ T24] RAX: 209c96e46a35d600 RBX: 000000000000000c RCX: ffff88801d680000 [ 291.091778][ T24] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 291.099849][ T24] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 291.107959][ T24] R10: dffffc0000000000 R11: fffffbfff1bfa1f4 R12: ffff8880476a92a8 [ 291.116078][ T24] R13: 0000000000000000 R14: ffff888055b68e40 R15: ffff888055b6b0d8 [ 291.124174][ T24] FS: 0000000000000000(0000) GS:ffff888125d18000(0000) knlGS:0000000000000000 [ 291.133378][ T24] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 291.140103][ T24] CR2: 00007f43afa7ffb8 CR3: 000000000df36000 CR4: 00000000003526f0 [ 291.148326][ T24] Call Trace: [ 291.151636][ T24] [ 291.154701][ T24] rate_control_send_low+0x194/0x7a0 [ 291.160233][ T24] rate_control_get_rate+0x20b/0x5d0 [ 291.165638][ T24] ieee80211_tx_h_rate_ctrl+0xb32/0x1780 [ 291.171368][ T24] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 291.177533][ T24] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 291.183995][ T24] invoke_tx_handlers_late+0xb6/0x1820 [ 291.189822][ T24] ? ieee80211_tx_h_select_key+0xd1b/0x19f0 [ 291.195801][ T24] ieee80211_tx_dequeue+0x308e/0x4360 [ 291.201303][ T24] ? __pfx_ieee80211_tx_dequeue+0x10/0x10 [ 291.207102][ T24] ? __local_bh_enable_ip+0x12d/0x1c0 [ 291.212645][ T24] ieee80211_handle_wake_tx_queue+0x125/0x2a0 [ 291.218833][ T24] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 291.225497][ T24] ? __local_bh_enable_ip+0x12d/0x1c0 [ 291.231184][ T24] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 291.237076][ T24] ? do_raw_spin_unlock+0x122/0x240 [ 291.242326][ T24] ieee80211_queue_skb+0x1a31/0x21c0 [ 291.247751][ T24] ieee80211_tx+0x297/0x420 [ 291.252304][ T24] ? __pfx_ieee80211_tx+0x10/0x10 [ 291.257426][ T24] ? ieee80211_xmit+0x315/0x400 [ 291.262396][ T24] __ieee80211_subif_start_xmit+0xccf/0x1610 [ 291.268467][ T24] ? __ieee80211_subif_start_xmit+0x2be/0x1610 [ 291.274672][ T24] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 291.281175][ T24] ? ieee80211_multicast_to_unicast+0x19c/0x320 [ 291.287478][ T24] ieee80211_subif_start_xmit+0xe0/0x510 [ 291.293144][ T24] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 291.299570][ T24] ? __pfx_netif_skb_features+0x10/0x10 [ 291.305141][ T24] ? call_rcu+0x6ff/0x9c0 [ 291.309556][ T24] ? __lock_acquire+0xab9/0xd20 [ 291.314477][ T24] dev_hard_start_xmit+0x2d7/0x830 [ 291.319959][ T24] __dev_queue_xmit+0x1b8d/0x3b50 [ 291.325017][ T24] ? register_lock_class+0x51/0x320 [ 291.330429][ T24] ? __dev_queue_xmit+0x27b/0x3b50 [ 291.335624][ T24] ? __pfx___dev_queue_xmit+0x10/0x10 [ 291.341040][ T24] ? read_seqbegin+0x122/0x250 [ 291.345873][ T24] ? neigh_resolve_output+0x438/0x750 [ 291.351278][ T24] ? lockdep_hardirqs_on+0x9c/0x150 [ 291.356543][ T24] ? read_seqbegin+0x1ac/0x250 [ 291.361341][ T24] ? __pfx_read_seqbegin+0x10/0x10 [ 291.366534][ T24] ? __local_bh_enable_ip+0x12d/0x1c0 [ 291.371939][ T24] ? eth_header+0x11b/0x200 [ 291.376688][ T24] ? __asan_memcpy+0x40/0x70 [ 291.381355][ T24] ip6_finish_output2+0x11fb/0x16a0 [ 291.386652][ T24] ? ip6_finish_output2+0x701/0x16a0 [ 291.392065][ T24] ? ip6_mtu+0x7d/0x3f0 [ 291.396296][ T24] ? __pfx_ip6_finish_output2+0x10/0x10 [ 291.401883][ T24] ? ip6_mtu+0x7d/0x3f0 [ 291.406092][ T24] ? ip6_mtu+0x321/0x3f0 [ 291.410454][ T24] ? ip6_finish_output+0x2ef/0x4e0 [ 291.415851][ T24] NF_HOOK+0x9e/0x380 [ 291.419994][ T24] ? __pfx_NF_HOOK+0x10/0x10 [ 291.424616][ T24] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 291.430498][ T24] ? do_raw_spin_unlock+0x122/0x240 [ 291.435762][ T24] ? icmp6_dst_alloc+0x3a5/0x420 [ 291.440779][ T24] ? icmp6_dst_alloc+0x3a5/0x420 [ 291.445830][ T24] mld_sendpack+0x800/0xd80 [ 291.450390][ T24] ? mld_sendpack+0x1de/0xd80 [ 291.455101][ T24] ? __pfx_mld_sendpack+0x10/0x10 [ 291.460240][ T24] mld_ifc_work+0x83e/0xd60 [ 291.464777][ T24] ? _raw_spin_unlock_irq+0x23/0x50 [ 291.470133][ T24] ? process_scheduled_works+0x9ef/0x17b0 [ 291.475909][ T24] process_scheduled_works+0xae1/0x17b0 [ 291.481527][ T24] ? __pfx_process_scheduled_works+0x10/0x10 [ 291.487698][ T24] worker_thread+0x8a0/0xda0 [ 291.492357][ T24] kthread+0x70e/0x8a0 [ 291.496703][ T24] ? __pfx_worker_thread+0x10/0x10 [ 291.502065][ T24] ? __pfx_kthread+0x10/0x10 [ 291.506743][ T24] ? _raw_spin_unlock_irq+0x23/0x50 [ 291.512071][ T24] ? lockdep_hardirqs_on+0x9c/0x150 [ 291.517431][ T24] ? __pfx_kthread+0x10/0x10 [ 291.522053][ T24] ret_from_fork+0x3fc/0x770 [ 291.526716][ T24] ? __pfx_ret_from_fork+0x10/0x10 [ 291.531867][ T24] ? __switch_to_asm+0x39/0x70 [ 291.536734][ T24] ? __switch_to_asm+0x33/0x70 [ 291.541797][ T24] ? __pfx_kthread+0x10/0x10 [ 291.546468][ T24] ret_from_fork_asm+0x1a/0x30 [ 291.551385][ T24] [ 291.554436][ T24] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 291.561827][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full) [ 291.571119][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 291.581186][ T24] Workqueue: mld mld_ifc_work [ 291.585889][ T24] Call Trace: [ 291.589177][ T24] [ 291.592116][ T24] dump_stack_lvl+0x99/0x250 [ 291.596831][ T24] ? __asan_memcpy+0x40/0x70 [ 291.601434][ T24] ? __pfx_dump_stack_lvl+0x10/0x10 [ 291.606639][ T24] ? __pfx__printk+0x10/0x10 [ 291.611253][ T24] vpanic+0x281/0x750 [ 291.615267][ T24] ? __pfx__printk+0x10/0x10 [ 291.619899][ T24] ? __pfx_vpanic+0x10/0x10 [ 291.624436][ T24] ? is_bpf_text_address+0x292/0x2b0 [ 291.629752][ T24] panic+0xb9/0xc0 [ 291.633483][ T24] ? __pfx_panic+0x10/0x10 [ 291.637927][ T24] __warn+0x31b/0x4b0 [ 291.642104][ T24] ? __rate_control_send_low+0x5df/0x820 [ 291.648093][ T24] ? __rate_control_send_low+0x5df/0x820 [ 291.653730][ T24] report_bug+0x2be/0x4f0 [ 291.658170][ T24] ? __rate_control_send_low+0x5df/0x820 [ 291.663868][ T24] ? __rate_control_send_low+0x5df/0x820 [ 291.669502][ T24] ? __rate_control_send_low+0x5e1/0x820 [ 291.675224][ T24] handle_bug+0x84/0x160 [ 291.679471][ T24] exc_invalid_op+0x1a/0x50 [ 291.683984][ T24] asm_exc_invalid_op+0x1a/0x20 [ 291.688840][ T24] RIP: 0010:__rate_control_send_low+0x5df/0x820 [ 291.695085][ T24] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 20 85 b0 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 32 ca 92 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 291.714976][ T24] RSP: 0018:ffffc900001e64d8 EFLAGS: 00010246 [ 291.721151][ T24] RAX: 209c96e46a35d600 RBX: 000000000000000c RCX: ffff88801d680000 [ 291.729141][ T24] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 291.737115][ T24] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 291.745180][ T24] R10: dffffc0000000000 R11: fffffbfff1bfa1f4 R12: ffff8880476a92a8 [ 291.753350][ T24] R13: 0000000000000000 R14: ffff888055b68e40 R15: ffff888055b6b0d8 [ 291.761349][ T24] ? __rate_control_send_low+0x5de/0x820 [ 291.767019][ T24] rate_control_send_low+0x194/0x7a0 [ 291.772316][ T24] rate_control_get_rate+0x20b/0x5d0 [ 291.777613][ T24] ieee80211_tx_h_rate_ctrl+0xb32/0x1780 [ 291.783267][ T24] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 291.789347][ T24] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 291.795606][ T24] invoke_tx_handlers_late+0xb6/0x1820 [ 291.801092][ T24] ? ieee80211_tx_h_select_key+0xd1b/0x19f0 [ 291.807014][ T24] ieee80211_tx_dequeue+0x308e/0x4360 [ 291.812494][ T24] ? __pfx_ieee80211_tx_dequeue+0x10/0x10 [ 291.818236][ T24] ? __local_bh_enable_ip+0x12d/0x1c0 [ 291.823747][ T24] ieee80211_handle_wake_tx_queue+0x125/0x2a0 [ 291.829832][ T24] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 291.836426][ T24] ? __local_bh_enable_ip+0x12d/0x1c0 [ 291.841978][ T24] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 291.847702][ T24] ? do_raw_spin_unlock+0x122/0x240 [ 291.852924][ T24] ieee80211_queue_skb+0x1a31/0x21c0 [ 291.858242][ T24] ieee80211_tx+0x297/0x420 [ 291.862923][ T24] ? __pfx_ieee80211_tx+0x10/0x10 [ 291.867975][ T24] ? ieee80211_xmit+0x315/0x400 [ 291.872865][ T24] __ieee80211_subif_start_xmit+0xccf/0x1610 [ 291.878882][ T24] ? __ieee80211_subif_start_xmit+0x2be/0x1610 [ 291.885067][ T24] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 291.891501][ T24] ? ieee80211_multicast_to_unicast+0x19c/0x320 [ 291.897766][ T24] ieee80211_subif_start_xmit+0xe0/0x510 [ 291.903413][ T24] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 291.909659][ T24] ? __pfx_netif_skb_features+0x10/0x10 [ 291.915214][ T24] ? call_rcu+0x6ff/0x9c0 [ 291.919569][ T24] ? __lock_acquire+0xab9/0xd20 [ 291.924474][ T24] dev_hard_start_xmit+0x2d7/0x830 [ 291.929610][ T24] __dev_queue_xmit+0x1b8d/0x3b50 [ 291.934644][ T24] ? register_lock_class+0x51/0x320 [ 291.939864][ T24] ? __dev_queue_xmit+0x27b/0x3b50 [ 291.945002][ T24] ? __pfx___dev_queue_xmit+0x10/0x10 [ 291.950554][ T24] ? read_seqbegin+0x122/0x250 [ 291.955329][ T24] ? neigh_resolve_output+0x438/0x750 [ 291.960734][ T24] ? lockdep_hardirqs_on+0x9c/0x150 [ 291.965955][ T24] ? read_seqbegin+0x1ac/0x250 [ 291.970729][ T24] ? __pfx_read_seqbegin+0x10/0x10 [ 291.975850][ T24] ? __local_bh_enable_ip+0x12d/0x1c0 [ 291.981234][ T24] ? eth_header+0x11b/0x200 [ 291.985756][ T24] ? __asan_memcpy+0x40/0x70 [ 291.990389][ T24] ip6_finish_output2+0x11fb/0x16a0 [ 291.995617][ T24] ? ip6_finish_output2+0x701/0x16a0 [ 292.000926][ T24] ? ip6_mtu+0x7d/0x3f0 [ 292.005100][ T24] ? __pfx_ip6_finish_output2+0x10/0x10 [ 292.010651][ T24] ? ip6_mtu+0x7d/0x3f0 [ 292.014818][ T24] ? ip6_mtu+0x321/0x3f0 [ 292.019073][ T24] ? ip6_finish_output+0x2ef/0x4e0 [ 292.024369][ T24] NF_HOOK+0x9e/0x380 [ 292.028362][ T24] ? __pfx_NF_HOOK+0x10/0x10 [ 292.032961][ T24] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 292.038968][ T24] ? do_raw_spin_unlock+0x122/0x240 [ 292.044180][ T24] ? icmp6_dst_alloc+0x3a5/0x420 [ 292.049127][ T24] ? icmp6_dst_alloc+0x3a5/0x420 [ 292.054187][ T24] mld_sendpack+0x800/0xd80 [ 292.058719][ T24] ? mld_sendpack+0x1de/0xd80 [ 292.063411][ T24] ? __pfx_mld_sendpack+0x10/0x10 [ 292.068549][ T24] mld_ifc_work+0x83e/0xd60 [ 292.073063][ T24] ? _raw_spin_unlock_irq+0x23/0x50 [ 292.078380][ T24] ? process_scheduled_works+0x9ef/0x17b0 [ 292.084116][ T24] process_scheduled_works+0xae1/0x17b0 [ 292.089792][ T24] ? __pfx_process_scheduled_works+0x10/0x10 [ 292.095809][ T24] worker_thread+0x8a0/0xda0 [ 292.100529][ T24] kthread+0x70e/0x8a0 [ 292.104615][ T24] ? __pfx_worker_thread+0x10/0x10 [ 292.109826][ T24] ? __pfx_kthread+0x10/0x10 [ 292.114687][ T24] ? _raw_spin_unlock_irq+0x23/0x50 [ 292.119889][ T24] ? lockdep_hardirqs_on+0x9c/0x150 [ 292.125099][ T24] ? __pfx_kthread+0x10/0x10 [ 292.129699][ T24] ret_from_fork+0x3fc/0x770 [ 292.134322][ T24] ? __pfx_ret_from_fork+0x10/0x10 [ 292.139543][ T24] ? __switch_to_asm+0x39/0x70 [ 292.144309][ T24] ? __switch_to_asm+0x33/0x70 [ 292.149081][ T24] ? __pfx_kthread+0x10/0x10 [ 292.153689][ T24] ret_from_fork_asm+0x1a/0x30 [ 292.158480][ T24] [ 292.161880][ T24] Kernel Offset: disabled [ 292.166348][ T24] Rebooting in 86400 seconds..