last executing test programs: 17.832344445s ago: executing program 3 (id=11988): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='rxrpc_call\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015001f0f"], 0xb8}, 0x1, 0x0, 0x0, 0x2000c810}, 0x4) recvmsg(r1, &(0x7f0000001840)={0x0, 0x0, 0x0}, 0x40) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rxrpc_call\x00', r2}, 0x10) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0xfc00) 17.594478977s ago: executing program 3 (id=11991): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read(r1, &(0x7f0000000080)=""/22, 0x16) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, r0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_KEY={0x10, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x20008804) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, &(0x7f0000000000)=0x1c, 0x4) getsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000540)={0xf8, r0, 0x100, 0x70bd2c, 0x25dfdbfe}, 0xf8}}, 0x801) 4.418465209s ago: executing program 1 (id=12069): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={0x14, 0x3a, 0xb, 0x70bd26, 0x4002, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000100)=0x3f7, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r3, 0x0, 0x0, 0x48154, &(0x7f0000000240)={0x11, 0x15, r4, 0x1, 0x20, 0x6, @broadcast}, 0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x18, 0x3, "c6a41d106c72fffffffffffffff5000002000000"}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x4048010) r6 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r6, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4) accept4(r5, &(0x7f0000000400)=@ax25={{0x3, @default}, [@null, @null, @remote, @remote, @rose, @netrom, @null, @rose]}, &(0x7f0000000280)=0x80, 0x80000) ppoll(&(0x7f0000000180)=[{r6}], 0x1, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0, 0x0) r7 = socket$nl_generic(0x11, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x106f, 0x6, 0x0, 0xbb63, 0x200, 0xc45, 0x6, 0x4}}) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r6, 0x8983, &(0x7f00000001c0)={0x1, 'caif0\x00', {}, 0xe}) r8 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r8, 0x110, 0x3) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000031401002cbd7000fcdbdf250900020073797a3200000000080041"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) connect$rxrpc(r8, &(0x7f00000003c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) sendmsg$inet(r8, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) sendto$unix(r1, &(0x7f0000000040)="274ff2d30bd45900d78d4a6eb079bf90b4df124c2e2a25aeaba9221fd6e6c1e1d63e8d46c672c87c9ff58a76a3b231a048c90917d5e85688d5b742119baea5da4172c0d598d0cc0582b5494efc53cf00b1ae7f021f0a64810902a9c511712b9e6582a3efd5ba9cf3e90f31cc3f5e", 0x6e, 0x20040001, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e24}, 0x6e) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @private=0xa010100}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r11}]]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240008c4}, 0x0) 4.01558144s ago: executing program 1 (id=12074): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r5 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x60, r5, 0x1, 0x0, 0x25dfdc01, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r3}}}]}}]}, 0x60}, 0x1, 0x400000000000000}, 0x40010) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r2) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000003000)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002fc0)={&(0x7f00000017c0)={0x17d4, r7, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0x778, 0x8, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3ff}]}, {0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @loopback}}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "615068714578182a696341aaf693397573745ff0c90513aad0be2626deec7b71"}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0xc0, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x74, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x30}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0x11c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}, @WGPEER_A_ALLOWEDIPS={0xf0, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0xe}}, {0x5}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x14}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x974, @rand_addr=' \x01\x00', 0x1ff}}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "73816d81749be8f43ab1f43f86bc6c52097bf29f8173446ecd0673ce6547ed66"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}]}, {0x4ac, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x434, 0x9, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x4}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "bc306956dd9d4e9673b7572747474e21271911781833aec5a57b3c662046b1f9"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @broadcast}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "49d11542fbc7627762ff7f8dfb7812d82eacb77a247a3d5a43945469585ad848"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_PEERS={0x278, 0x8, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x80, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x8000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x38, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x200}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "624fcad175e47c3351a633c4fb47d8ad6937f287c2caacfb9b18b40d41f1eea0"}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x3f7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}}]}, {0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "ad808f7c4d6c32f51249051cefb6d2c635b2a237665b5a90f14672e39bbce742"}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0x44, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x3, @mcast2, 0x9}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a6327624a3cee3fe01cf3767ecfd1e5b1152cffa05a10ed79c1ad8e52743dcee"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PEERS={0xd78, 0x8, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x91ba, @rand_addr=' \x01\x00', 0x8}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, {0xa48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0xf, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7f}}, @WGPEER_A_ALLOWEDIPS={0x12c, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa3}}, @WGPEER_A_ALLOWEDIPS={0x350, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x28}}, {0x5, 0x3, 0x1}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2f}}, {0x5}}]}, {0x4}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, {0x5, 0x3, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x39}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ALLOWEDIPS={0x548, 0x9, 0x0, 0x1, [{0x148, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x25}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x10}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xe}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x20}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xe}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x13}}, {0x5}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x39}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x10}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x42}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x28}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1e}}, {0x5}}]}]}]}, {0x44, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "af32633adb890a1c4e42c536e6e7858ec6f36928afb8c048ae31e971321fa332"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast1}}]}, {0x54, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3a}}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x1, @empty, 0x6}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @broadcast}}]}, {0x98, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x2, @mcast1, 0x6}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "da2a7ab4322db64c209511074b927a297ed34659f14fd3130077dd6fed933515"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x9, @empty, 0x7abb}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00', 0x4}}]}, {0x40, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0xcc, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x40}}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d23ff8fa383dc5d235ef130ba94ee0d4611ec0f9321d676ef83355d811e7499b"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0xb0, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c1df160c52c47b0b2aeda11d0de30ebb1de0b1ba4ad89c3b91168bc69ab38c16"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @local}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @empty}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}]}, 0x17d4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)={0x13f8, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xd8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x5, 0x5, "11"}, @ETHTOOL_A_BITSET_VALUE={0x68, 0x4, "81b7fcb36c80d9997dd2d98ccf9921a47203b5ad6988578813e8749d6fb714e0a659db505001bd771f3205f09c0f93de8f5cca2e30e1d085e2ec0a7e759fd2bd5a7c83c047ebd21be4b47c3124a87b0321f3217622cbe5abf15d06591e51ae1a5eb2d715"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_MASK={0x51, 0x5, "d6b902af2c7a595a9773c06bbae54928104054b9a46d3d4ce4405e12d0115a400e004f379be943d1afbc65960617dc6124fd7b9df6594c275c9a90c83d421f3dde8d8896edc54f8a901dfe6a05"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x10d4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xc7, 0x5, "d0785f3c7bba35d48ce49e873a28daa7ab143259fbd93a28dd5962183f70d83e4a49a94335992eecae802bce4d3ab2e9b1c5b428f7bda2b0b457d137bac4a9139b42042d88fa211ca83bacb5a1c58cae8946d3a4d12398219a9b64672698d6a07a655cf730a73ecad24fa77e79247c48547c38460524cef1004cbbfebc7ce9c6e6ae726e5e180aeec3a80231611c7214dffff37661e36b8c2d1785f53dba70ef0016a515717e862c70888e50313141f630230ed468996ab26c32dc1de058883936bc18"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x238, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xfa, 0x5, "c834321006004c1b2208f20aa78636336bc41e6621f678d897f10d974a9f87c4bd0d1394ae350c4212edd5d6e10f34f425f78ba73c8e384089a962ae654913ffdc1f10a279e5090f00fd43f1a73e25dd8c7bfc899b0a317ab48399e1dc8a8545cd3a019cb50f485fd208a00cc32d7908ecc7cb936f264738022f64d1b97be7abc62a99a624c14b01492b94a3345d5762ed4fd06e9f1af00958642fb5e5ba8a6239d7fd2066ef52c4eec40908134acbc3d3f48ef412ea247db3652654f966f657d0430b469ce1913b2e019648d8c66facd24a155f61e234e7fde932e902b8f8ffac7c67976a64a6d33448953b8a2aa51be8234ef7d936"}, @ETHTOOL_A_BITSET_MASK={0x7f, 0x5, "e07be9c497ab51d7536c4951a396b86eae43fd7c64fe6fcb4340263827ca6c5d08e3da5759516bd4b82e8e3b4ade376e0b164d3d1516fe3b32f16ecaa5c5808b177ed7b5232f48ed15f02a85c347fa0ef3af078b4f9cbcd1314925aa6d159fbce29dc91a5a677761a391233a47a49dd316d20b12e9860c1a7c4c15"}, @ETHTOOL_A_BITSET_VALUE={0x81, 0x4, "e6d261f94f26f30e350c67b7e7613550ff2b256f96a3f8e39f7c80d6d510332b6e85320a986402c89bf42a3236bd92cd252a62a08420a6639b8881b19d4534d660847dac84ba421c09a7c72e67bcf88cb42a9f6b6c860f7325dcb258d73d43fe798cfb5a5b90e9043306cc09978496512851ce9f27e2c48f9a0ce49d06"}, @ETHTOOL_A_BITSET_BITS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\xf1\x9c\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x13f8}, 0x1, 0x0, 0x0, 0x4040004}, 0x2000c800) 3.520187244s ago: executing program 1 (id=12078): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000200000000000000023e0004"], 0x0, 0x56, 0x0, 0x8}, 0x20) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000014fb900b2f75218907a0203000000000000000000", @ANYRES32=0x0, @ANYRES32=r1], 0x3c}}, 0x54) preadv(r2, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/97, 0x61}, {&(0x7f0000003480)=""/4098, 0x1002}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/237, 0xed}, {&(0x7f0000002480)=""/4096, 0x1000}], 0x5, 0xb09, 0x2) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90924fc60", 0x8c0}], 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 3.276131343s ago: executing program 1 (id=12083): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, [0xffff]}}) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000e00)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a0000000900020073797a3000000000050004000000000005000100060000000c00078008001240fffffffd14000300686173683a69702c706f72742c6970"], 0x58}}, 0x0) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000180)='wg1\x00', 0x4) (async) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xa, 0x148, 0x120, 0x60, 0x1f8, 0x2a8, 0x2a8, 0x1f8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x200003ae, 0x7f00}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x10}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0xb6, 0x8, [0xb, 0x24, 0x24, 0x19, 0x3e, 0x19, 0x31, 0x3b, 0x5, 0x40, 0x12, 0x33, 0x3b, 0x3f, 0x3b, 0x7], 0x0, 0x7fff, 0x1}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00', {}, {}, 0x67, 0x0, 0x4}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x14, 0x1, 0x81, 0x0, 'netbios-ns\x00', 'syz1\x00', {0x9}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2f0) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000040)={0x936, {{0xa, 0x4e24, 0xd75, @dev={0xfe, 0x80, '\x00', 0x25}}}, {{0xa, 0x4e24, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}}}, 0x108) 3.101859424s ago: executing program 1 (id=12084): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x874, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x840, 0x2, [@TCA_MATCHALL_ACT={0x83c, 0x2, [@m_police={0x838, 0x1, 0x0, 0x0, {{0xb}, {0x80c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x5, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x4, 0x58b, 0x85a, 0x3ff, 0x9, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0xfffffffc, 0x6, 0x12a, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x863c, 0xff, 0x24, 0x5, 0x7, 0x6, 0x7a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x2007, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1080, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x30, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x40006, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0x4, 0x3, 0x9, 0xc, 0x0, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x9, 0x4, 0x3, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0x1000, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x3, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0xfff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dca, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x874}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002e00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021840000000c0a0101000000000000d955070000000900020073797a31000000000900010073797a30000000005800038054000080080003400000000248000b80340001800a0001006c696d69740000002400028008000440000000010c00024000000000000000000c000140"], 0x108}}, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xff, 0x0, 0x0, 0x8001, 0x3}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x100}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x10, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='GPL\x00', 0x3, 0x1000, &(0x7f0000000300)=""/4096}, 0x80) gettid() sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r4, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x808) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r5 = socket(0x2b, 0x2, 0x1) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r6, 0x400448e1, &(0x7f0000000000)={0x0, 0x0, "957008"}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xffa9, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r7, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) connect$can_bcm(r1, &(0x7f0000000080)={0x1d, r7}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x874, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x840, 0x2, [@TCA_MATCHALL_ACT={0x83c, 0x2, [@m_police={0x838, 0x1, 0x0, 0x0, {{0xb}, {0x80c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x5, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x4, 0x58b, 0x85a, 0x3ff, 0x9, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0xfffffffc, 0x6, 0x12a, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x863c, 0xff, 0x24, 0x5, 0x7, 0x6, 0x7a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x2007, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1080, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x30, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x40006, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0x4, 0x3, 0x9, 0xc, 0x0, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x9, 0x4, 0x3, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0x1000, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x3, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0xfff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dca, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x874}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002e00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021840000000c0a0101000000000000d955070000000900020073797a31000000000900010073797a30000000005800038054000080080003400000000248000b80340001800a0001006c696d69740000002400028008000440000000010c00024000000000000000000c000140"], 0x108}}, 0x0) (async) socket(0x10, 0x803, 0x0) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xff, 0x0, 0x0, 0x8001, 0x3}}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x100}) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x10, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='GPL\x00', 0x3, 0x1000, &(0x7f0000000300)=""/4096}, 0x80) (async) gettid() (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r4, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x808) (async) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) (async) socket(0x2b, 0x2, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$HCIINQUIRY(r6, 0x400448e1, &(0x7f0000000000)={0x0, 0x0, "957008"}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) (async) sendto$packet(r2, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xffa9, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r7, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) (async) connect$can_bcm(r1, &(0x7f0000000080)={0x1d, r7}, 0x10) (async) 2.834129986s ago: executing program 1 (id=12088): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet(r3, &(0x7f0000002180)=[{{&(0x7f0000000080)={0x2, 0x4e20, @private=0xa010102}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)="99b1", 0x2}], 0x1}}], 0x1, 0x0) sendto$inet(r3, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000003c0)="4c875ca1829aeeb2fab897971b525046745505ebc3fa0ced4d959dd6e775f1094339edc27952c8cefafb0ffb253f0e93400000007297a40d47a1c11f5548957453220e38abbdf0db533b1684902a49f816e89c0cce8ff91e93da6fdd3ff930b860f98b0dea21de358862b9f099cbda0305914b83b71e602e3823bd7e0c410f0053d30467699b5f4f83fec9f399635f3a808f1b2cf7deaf0b4b010000000000000099763a86e27487d6ea505848e42b93e6dc5c2271153f", 0xb7}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="200000000000000084000000020000000708410000e1ffffff000000", @ANYRES32=0x0], 0x20, 0x4048801}, 0x6050) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x2, 0x3, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x32, 0x1}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x1}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x2400c001) 2.08723718s ago: executing program 2 (id=12097): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x1, 0x2, 0x5}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000240)="800000800000210ee7decd7a000000", 0xf, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @broadcast}, 0x14) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'netpci0\x00'}}) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x118, 0x35, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x107, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac0b}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x8, 0x145, 0x0, 0x0, @ipv4=@remote}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r7 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r7, 0x0, 0x25, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc) 1.882167855s ago: executing program 4 (id=12098): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x8, 0xc, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x34}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fcdbdf251200000008000300", @ANYRES32=r3, @ANYBLOB="040081000a000600080211000001000006001a010400000006001000630700000800"], 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x80c0) 1.880215214s ago: executing program 3 (id=11996): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000016000500000000000004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f0000000000)={0x28, 0x2, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_TIMEOUT_L4PROTO={0xffffffffffffffee}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 1.723963699s ago: executing program 2 (id=12100): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbfe, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xb0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x0, 0x9], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x280000000000000}]}}]}, 0xb0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20042000}, 0x4010) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbfe, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x11, 0x800000003, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xb0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x0, 0x9], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x280000000000000}]}}]}, 0xb0}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20042000}, 0x4010) (async) 1.580711824s ago: executing program 4 (id=12101): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$SIOCGSTAMPNS(r3, 0x8907, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "4b3f7633015aff9fa5e73369ed3ed4f938752184f1af2029", "14ef0f501fd4f4fc0d232b48a86ef0222fb6364766977f816acb8f51148dba1a"}}}}}}, 0x0) sendto$inet6(r2, &(0x7f0000000000)="c0", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, 0x0, &(0x7f0000000100)) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r1, 0x6, 0x7c, 0xffffffff}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x58, r0, 0x917, 0x0, 0x2, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r4}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x88}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.297956199s ago: executing program 4 (id=12102): r0 = socket(0x15, 0x80005, 0x0) getsockopt(r0, 0x200000000114, 0x2711, 0xffffffffffffffff, &(0x7f0000000000)=0x7ffff000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xe}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 1.244159773s ago: executing program 4 (id=12103): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, 0xd, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_TABLE={0x0, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x402c880}, 0x80) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x18462, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vxcan1\x00', 0x800}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, 0xd, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_TABLE={0x0, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x402c880}, 0x80) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x18462, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vxcan1\x00', 0x800}) (async) 1.070978458s ago: executing program 4 (id=12105): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x5c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="5209670f00"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x5c}}, 0x481) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="38010000100013070000040000000000ff020000000000000000000000000001ac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0100000000000000000000000000010000000032000000ac1414aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000200000000000000000000000a00050b0000000000000000480002006563622d73657270656e742d6176780000000000e100"/240], 0x138}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000240012800b00010067726574617000001400028006000e0003000000080007007f00000108000a00", @ANYRES32=r3, @ANYBLOB="d37483c081918f3378eff618d64bf0bfa55c75db65ef6d197e63e47d3c6b9412aa349a"], 0x4c}}, 0x4000) 992.720877ms ago: executing program 2 (id=12107): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x14, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x2c000000}, 0xf8cc45c4b534eacf) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x16c}}, 0x24) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x80, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x3c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}}, 0x20050800) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x5}, 0x50) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r4, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x1]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20020000) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000157b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r7, 0xffffffffffffffff, 0x500}, 0x57) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000003c0)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x2, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2001}, [@IFLA_MASTER={0x8, 0xa, r8}, @IFLA_IFNAME={0x14}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 806.26761ms ago: executing program 0 (id=12108): r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e1e, 0x2, @remote, 0x4}, 0x1c) socket(0x11, 0x3, 0x82009) (async) r2 = socket(0x11, 0x3, 0x82009) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYRESDEC=r0], 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc99}, 0x48) close(r3) r4 = socket(0x28, 0x5, 0x0) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r5, 0x4) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0f00000000000012", @ANYRES8=r0, @ANYRESHEX=r5, @ANYBLOB="bbb219d5df8e56fbee9339e49afb001a07d716131ff0a3272d4df3660854c1afc78ded7d3793f46f36383a89e29aae7bac42b35277fd359bf802daf4f5915db8d4253a2195b0cb3026bcedcdf7af8f20518e5840bd646eef27445a2604bfc98f0e02b497585cfb948983e5a79c744e335c4a397b6ad91c6dfa0be1de7e9991ffdda19f40d063b79113", @ANYRES16=r2, @ANYRESHEX=r2, @ANYBLOB="d1426930f57da19b2b248e110cfd2a77fa716ae0f1a4a77a502ad7b36a3ce160bd48f314004c6c348742e776935b6356eb4cef027520456085104bb8ac950b5b1ec27d21d94b7bb897d080113266bdf2f25a715b849d481f4b04a23b72fd98468aeaf135abd8094970b4dbba617ce076d54d5f9608c1fcf06fc7c932961b82acd528b2a5a26d6e8cea49a43bea71fd4891f33c625f6047e8df1471719a3ac97595e87e"], 0x48) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0f00000000000012", @ANYRES8=r0, @ANYRESHEX=r5, @ANYBLOB="bbb219d5df8e56fbee9339e49afb001a07d716131ff0a3272d4df3660854c1afc78ded7d3793f46f36383a89e29aae7bac42b35277fd359bf802daf4f5915db8d4253a2195b0cb3026bcedcdf7af8f20518e5840bd646eef27445a2604bfc98f0e02b497585cfb948983e5a79c744e335c4a397b6ad91c6dfa0be1de7e9991ffdda19f40d063b79113", @ANYRES16=r2, @ANYRESHEX=r2, @ANYBLOB="d1426930f57da19b2b248e110cfd2a77fa716ae0f1a4a77a502ad7b36a3ce160bd48f314004c6c348742e776935b6356eb4cef027520456085104bb8ac950b5b1ec27d21d94b7bb897d080113266bdf2f25a715b849d481f4b04a23b72fd98468aeaf135abd8094970b4dbba617ce076d54d5f9608c1fcf06fc7c932961b82acd528b2a5a26d6e8cea49a43bea71fd4891f33c625f6047e8df1471719a3ac97595e87e"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) shutdown(r4, 0x0) recvmmsg$unix(r4, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x6cfc686d3553f0e1, 0x0) (async) recvmmsg$unix(r4, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x6cfc686d3553f0e1, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xf, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x800000}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffff6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="817ba29104000000040000001200000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000fbc77b230200000000000800", @ANYRES32=r0, @ANYRESOCT=r6, @ANYBLOB='\x00'/28], 0x48) r10 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r8, r9, 0x26, 0x0, @void}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000940)={r10, 0x0, 0x0}, 0x10) sendmsg$netlink(r7, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) (async) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000400)) socket(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) 701.944762ms ago: executing program 0 (id=12109): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_int(r0, 0x29, 0x12, 0x0, 0x9f) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xfffffffffffffea5, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r1}) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="68000000100001002fbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0201000000000000140003006e657464657673696d3000000000000034001680300001802c"], 0x68}}, 0x24040800) (async, rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_pressure(r3, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/58, 0x3a}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async) setsockopt$MRT_DEL_MFC_PROXY(r2, 0x0, 0xd3, &(0x7f0000000040)={@empty, @private=0xa010101, 0x0, "772646b463b2ce312847af0904bb68017b0fc6f9dcf59255b44f3b9b3e4dee83", 0xca5e, 0x1000, 0x1ff, 0x76d}, 0x3c) 677.718821ms ago: executing program 2 (id=12110): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x8, 0xc, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x34}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fcdbdf251200000008000300", @ANYRES32=r3, @ANYBLOB="040081000a000600080211000001000006001a010400000006001000630700000800"], 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x80c0) 626.905464ms ago: executing program 4 (id=12111): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40010}, 0x14000012) recvmmsg(0xffffffffffffffff, &(0x7f0000007480)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)=""/5, 0x5}, {&(0x7f00000001c0)=""/18, 0x12}, {&(0x7f0000001180)=""/4096, 0x1000}], 0x3}, 0x8}], 0x1, 0x2, 0x0) write$tun(r0, &(0x7f0000000400)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x2, 0xc, 0x14, 0xfffd}, @ipv4=@icmp={{0xa, 0x4, 0x0, 0x0, 0x44, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x16}, {[@generic={0x82, 0x11, "85046a1f770847b4bc893a5d553b60"}]}}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x11, 0xfffd, @local, @loopback}}}}, 0x52) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@RTM_GETNSID={0x4c, 0x5a, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NETNSA_FD={0x8}, @NETNSA_PID={0x8, 0x2, 0xffffffffffffffff}, @NETNSA_PID={0x8}, @NETNSA_FD={0x8}, @NETNSA_FD={0x8}, @NETNSA_PID={0x8}, @NETNSA_FD={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10002, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0xfffffffffffffffd}, {0x5, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d4, 0x6c}, 0x0, @in6=@mcast2, 0x0, 0x3, 0x1, 0xb7}}, 0xe8) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmmsg(r4, &(0x7f0000003f40)=[{{0x0, 0x0, 0x0}, 0x3ff}], 0x1, 0x2102, 0x0) shutdown(r4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='rpcgss_seqno\x00', 0xffffffffffffffff, 0x0, 0xa}, 0x18) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040084) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) close(0x3) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r7, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000520001000000000000000000020300000c00010001"], 0x20}}, 0x80) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 541.173565ms ago: executing program 2 (id=12112): r0 = socket$inet6(0xa, 0x400000000001, 0x0) (async) unshare(0x400) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmsg(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40000120) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500000008000000000000000000000300000000020000000200000012000000000000000000000b"], 0x0, 0x5a}, 0x20) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socket$packet(0x11, 0x3, 0x300) listen(r3, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x0, 0x0, 0x3}}}}}}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0xfa, 0xfffffff9, 0x20, @empty, @private1, 0x10, 0x10, 0xf, 0x4}}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0082010105000000852000000400000000000000000300000000000000000000184100000004000000000000000000009500000000000000950000000000000014583000ffffffff18160000", @ANYRES32=r1, @ANYBLOB="000000000000000045abffff00000000183800000400"/32], &(0x7f0000000580)='syzkaller\x00', 0xa, 0x5, &(0x7f0000000140)=""/5, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r1, r1, r1, r1, 0xffffffffffffffff, r1], 0x0, 0x10, 0xfffffffe}, 0xc3) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async, rerun: 32) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) (async, rerun: 32) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x3fd0, 0x4) (async) unshare(0x4010080) 538.4816ms ago: executing program 0 (id=12113): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@getnetconf={0x14, 0x52, 0x8, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x40000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a0104000000000000000001f9ffffff000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000000000000000000010000000900020073797a3200000000200003801c0000800400018008000340000000010c00054000000000000003ff0900010073797a3000000000140000001000010000000000000000000000000a00"/216], 0xd8}}, 0x0) r3 = socket$inet(0xa, 0x801, 0x5) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0xea10848443a1ce33}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000040)="27031c00160014000000002f1eafacf706e105000000894f00050003ee0b80558ddbba9b37786fd808252372a31e4939884f0abc3c", 0x35}, {&(0x7f00000001c0)="1276dd894f426bc3e626b00f5b46b0526368", 0x12}], 0x2}, 0x8c0) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r5 = accept4(r3, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x24, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x57}, @val={0x8, 0x3, r8}, @void}}}, 0x24}}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0x82, &(0x7f0000000680)={0x2, 0x0, 0x4, 0x3}, &(0x7f0000000280)=0x20) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, &(0x7f0000000680)="6e396043c7f73cdb24daad17f83ce74b34cd63b8facb5c284d61010075bfdbc35cfe8116ba2125d355b852159de6df41715a3e9d41970b39c9293403d0e740dd1fd8e8b590936714c68252a41c8876cefdd8a3b4e05edd64fafd10e7ab0feabc0e", 0x0, 0x0, 0x2}, 0x50) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r5) 313.415011ms ago: executing program 2 (id=12114): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000140001002bbd7000fddbdf2500000000000000000016000000000000fe8000090000000000000000000000bb4e2400024e2200000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000ff0000000a0010000000000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000200)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8881, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000180)=0x1) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f00000005c0)="bad3", 0x2, 0x24044085, &(0x7f00000001c0)={0x11, 0x88a8, r8, 0x1, 0xd8, 0x6, @multicast}, 0x14) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001980), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r3, &(0x7f0000001bc0)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001b80)={&(0x7f0000000c80)=ANY=[@ANYBLOB="bc010000", @ANYRES16=r10, @ANYBLOB="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"], 0x1bc}, 0x1, 0x0, 0x0, 0x8000}, 0x20080000) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r11 = socket$inet6(0xa, 0x5, 0x0) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x22, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000f7ffffff000000000100000018110000", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000185f00001004000000000000000000009500000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000001d40)='syzkaller\x00', 0x8, 0x90, &(0x7f0000001d80)=""/144, 0x41100, 0x9f50b5df59753dcf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001e40)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001f40)={r12, 0x0, 0x25, 0x30, @void}, 0x10) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet6(r13, &(0x7f0000001900)={&(0x7f00000000c0)={0xa, 0x4e22, 0x3, @local, 0x1}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000240)="4caddd4cdcf597ad2a9201c4bde7ccc081f00518b84543194b0ada1cb8382c3f6c3fbb8fa3370ed4f018132efc557b8f25c53ec90c638043764c3d48c2e56e293617e01882b77fc5c96e1f13fdad570ef77d35727dbb3fb45e3525132325d66f0a1be6ceb9f21f490f858bed2f9b9f30d8855578b7a87c6d52f81aa51b0c1bf6c00040f72f7c19406d717cc68c243791406c", 0x92}, {&(0x7f0000000300)="54f4bbe9e9113f2c063d4120946ca24f5ec1e03c3c26821a21777ef94a474497152d71fb21d0584e8c101e7990fb8e86a871b6eee291590bdd484ef6f776e7b8e537dd6aa6b265639c5e3e26cfedb36fef10c11bce10", 0x56}, {&(0x7f0000000140)="398a3794566a97d6a68453d1f6c7d66c", 0x10}, {&(0x7f0000000380)="484e14fd8429f9b52a5481c0d99f598c5f9f1315636646552085b5de735a17d0298f7ccd8d22b87845a3f357ec58422ba57b4386bca02c46afc4fd658de5c364517058255fa3c97e9928c0d816d064c924", 0x51}, {&(0x7f0000000400)="1cc548768ec3ec807a5276fe22dd27b44a5cb5530d14610247bd7a1d3581c4bd39dfc3a0b16adb22a7cd8cb4bd22c75d440f6e3102b316b9a70cd16f744f76634098f49cc5a735fc5c84e05ebf65c0e9304804676ac262fb4b0f1f0b9adf9e62db0aa678750f49ed028f7f46afc4b0235d994f35728b2db796f87b0e8d6d2443b4", 0x81}, {&(0x7f00000004c0)="e9d32f172607ba65f339613e2959936cec8e", 0x12}], 0x6, &(0x7f00000022c0)=ANY=[@ANYBLOB="c00000000000000029000000370000007314000000000000000100000100064ca072566e7ccd1422de1af5e8950f2bc1d0ecf33af902c4aff1b30b2e211025caa59a34a20f62a138dbe08b6d01f9bba8701cea6433ef230c8eaa12e93436e6a52eb3b611813589877e1f0377000100040110c910fc000000000000000000000000000001c2040000000608322416de91094110bfbbc510e0d8caf4421db1347619af40ef864063c6ee1714ba67f45ffb6c020cff2b53335f603f71ae40590000401100000000000029000000360000003b2400000000000004010900bb44a4ce41e6cb4846d929ac8f2197a6c5fc58e2e7eb8c1f3096f82db916cc61ef06aacba91c11a671066a19c9efda775380d34c3bd467033b966cf764a7bf2d29cd992f8729bad8c425fccc0dcfdcb4e067319e36f251f2862e2add8786bb6f4b76fc28d042e8508dd12e7e02000000000000536a7b5e9332e27c29e4a73a8d7ee687d1ba193af26998918225192c03633fe58c3368059c277b589fcaec475017a63ad28db87c4f859da05df5e4fb8faf5f544eb847277ef490b6330750000000031204000000000000010000000f6bffffffffffff100000000000000005000000000000003e0000000000000000000000000000007fffffffffffffff0100000000000000080000000000000040009182b0d5db0962a7398e7932d05b65921ef19c4413f27789246d9c697cd43833db342d1b21276e4121e2afdf4a24367cb0b9866ad05f1f0f602d31f42e640cfdf67f08248fafdced632181b9f271b2ce351c4be19cf9547ea0b145f516629b43c24aac8ecea7061fe42f248ccc8c996713c40eedf32c7cf026a8591f35ca689e3cbbe72dd8de38b44fee802d444cd84fbbb726d27046c5cb97df85e6b218e725276385bf670efbeefa66d14d47a3fd2ccbc6e8dd395291aaa2c4abbbd92f17078c3fdec0fe384dae3fe02706fc5a538e64730cbe3774127702af82576eafb424825b7bfd6541ffbefb22c093c42b483ad02709eaf0122bda6bb8b7a592daf2db08ea0deb2d97f5572221d95a5d4950f5a6608e6a9b914875e0f74769ae44be799cd4b5f39661152836630db79d4eda70e2ac4a8e1dd71eb5b5ceb9efd021361d849e86316abee794004f28dbbb7309da3fdc4a506b68d8897c85b951e6f03839d2a48ab9055426fa449d0927dc01efbb735943da47e574670fead9ef36e89e40d81a2f28b7e206f443a77ba55a09316cd9d327de917f9e66de1c87afb46d06b013e0b3f3e0402379acfe10231da46adaac568e6247eec96b397062fa1e8a8c4db99df4cce49ab64d8347a7ff26548eab3a6ebb07a5a672da2c2667f9c1159546f8fd058ee351a115da41940f8ad6b4514cfeb41bc851884fd6a25c92207ca898bf6dc867dfd50dba89ca0d065eda0172cf99a041d070147383dd0e15a252ce259e888d5c039d83ae0a35d677d8230369d13c9fa7bde3d00931332ebcf14bb0dc361725d2a60e6fa755335ad97db8f1beec45728abad652237054d981c3a9869a5cf0b2265ace101217f6b78aac4b82562a6ee99dab7cde4a68e00786fb1535caf0a0746501b626954abfca24146c654efa5e840088d6f16722759baa0a660728ece1f8b78e6e6c01885fd57921673c3bcd5ec250ec35bfc32bf1f32685b9e82d2558e45c094e0ead9a5efd2e86b8f19f11c88be7f8608bddf5dd66dcc98ff2ca66219c93e5dd5ac1c8ac53ac46996451fd1fcf76d5a91d38f56028462872fbdcb4d1be1c29c43f82b5a7f0a3351da8735ea84b01ba707fb07e3586e63575e18eb1ad599f791e1e5453abe30a70f6e03299aa47c4d11615865d8c8c44268d4786c54d3a04e8bca2cb2bf2c6f3e83a858104400116e4d2e9db600cd8edb37193f9a8fa309f22af2d744449ae37cb149e2cfbeb5a4eb7a343f0095f5f66cf6bc41f2ae0627ffec1a515ad7598a5d4d68517773b2f923c206bdb6403ae9a464a8ae9ed8090efbe6f6bf2b64a50571d134146043632632066f8e98741b1bc6959a10ee05718c8a5123003613419d02874755b8668322c417eb61d98744d331724f8caba40f042caff55ce857183c1e6fbfbcc9d8dff2d13844438de4f5c08194c4a7832b112b0b6f822c937058346eb924ca8324233060af32f79f218a20e2dc26b621153752f9c70bd02f82635ac3bc3201bfd6cb5ff45ecf84a7abaa5a520063dd92f9f392a15722befc7f19c171bdbde938579690355710b786e8884e76f90d245eecca7e1ebf28c73a56d1237c7b5e36293483b010f3722b152535f5189993a3db588475eeb3b514e26e0d63789d3d4965cca881f62cfcad648dc3289f085b3bb2f9c0dd6a1acc7c00fbedc2c523708772f5f0b4bc51093db468fcc1400a4ae9d36b65c8c3130790fdf3fcc5e08ecb0cc7dc9f5c344835d98e469bb15e55e3f66fcfbcd34e2671301dd629862a07c73f2293f417819bc667743201b8d27ed23e7ad96458d9c8086cc97b4c87d70558817d7f401ff6c894c52bb2a2c09ffd3c07101179f3d5518a1c9d7f04628c71f617c2b9c3b6d90274eb3df5e02ff3c2e8e863d99009bdd9faec1f7ce66eb3e85573bf8ff150ed333ab204ff038c48917b79264439592c895f3c1205e2bba05180431ee39cd62516aa30ba82b5448aca9449510ede7b51f2d8b755d365dd0476acbd4e7fd4c197401c1afdab224fdc5d0599ae496cf71dc049bf6c80fcf1bc37606b7fc31b2f2a88a8728cde8ab909de631b17160fe2dfaf385d725f4c798289fd1a9899004142f7521836f3fa59bc9cd0bdbace048f485ea980a0e7c0e8feb6a76b6a12c8d09544e4377048cfddfac2a666073ba2effe884ae1dc2947839a06834271ee0f965f4946a0d0d497132d71164686fefbda71215791e82d4fb547e752f46da3344e0bb0b36393d25235e4dc0e91cbd1cde056de5f5d324621fe9fa37fa2c143cc7141f21d88c1054d7803789fe8aec0bafcb06f6fce226d3362357d6bfead59849a086f70fe6d9c26d597c707b1584636969d20f6d9b31ded88f0ccdc54102c6ec2ca11878063002db7ed68443fb732028628ca0f089a077c93fd8a364de134d9a25e2e77d097e4df63eab96bbf483a3129ee435fd2d95e01f73468049c4f9ad620d641da5d72a8445503163dc8731d1eff04f81c3476345772e6f9e6367a53500abc34fc0e0e64105fe149f26a553af022fb61c0e5235e1b85016b5a295c07e05f40f7b60f4ac8fa878dd4e066ade7b6c2b966da4494cdaa7791e87dde23264b3012a6fae5d873deae0b3bedb2b42a7682648cf0d149bd687c4dac1b3135bfe95f7c2d45d39f33ff047d61d1fa8c25aca6394a5ed7041d9d148d6c0a0d57fee0b9541c244b70d52dd36f71748c00274d69fb827c1e7d720eb3478deeda6b1bfd1f99020c34df934dd14bd9a5302da0261c9cc50d970d597ee1a042ec03cfa882ffc9537c14079d93b53569036c922a9df62bbd6a99d68aa07fb57afc7aa2e500564088740a659e928cb1c8a1659b1e162813bf092020e88558dbbfd37c4847eea63f111309ef987423cffc83847fe75a6dcb05f4689efb65cc9751b5722d706a1abb93d44dc3ae1725536476614f6beabffe7955385e97427d118aef890fbe3909ca1b7f11389f275704629638ac27b5938ecc27abcda95cdd64b29757c58d0b1bc758c4611a099b534ee412226cd8afe7e7c70f11fcd6b7890af0a453e88bcbfbff8feb2fbb9b20ba85a3a2810c53c951dabbae0c68c08a75bab265e22f4465592abef60ff0dfa7e39f462faabc28fc53edf85f4e7b0191dd84cb7c7683fa21680eaa4dceac4ad1725a302b8ac48aa5435f2921ae713affc9329167b0c616c49655acbbd8260d503846cd2c44b0d98bad8747522718431783598e2cb18209e0d0499b4f6c305ea072b12fff8abe4ace07703e29ad115c3c71bdf63a74c94989a89c42d69c5d7e6f5075f3110dac6e9a486e0b66adabc5a55b8d67f0c5fc158cc101c8c6d7e0a2fc55834f4352961ebd4df1e64fe54590020e40eaa9109c0c2261c88ada361fedf94e27572cfc82c5aff67d883de7cf358e9cbe991d6e2a4d27e0df9dc659eae75e456dfb67524baf5e7562d9d48ffd5602b2a30371c5a74783ec08d5a18680477e95b1a8752a0ca5c6d9d61b803fcd595be59faa77556aa578787133dbfe726a060f3f56c5f89c20906ab25d8141ec495f5ede644d7379b533f95f8364a273af1e6f4aa71d67d80380b028d1bb294a34b097b625978760bde924af937c21ca5624636cfece5a61b8167da547324cc5af3040b59d23cf23414a876aec42213aa51161eac162cc9f574fb55606dcbd16fdfe24cb726db3f2bcc4dac0d205dc3c3e4267142ecd9be4124da0800af8f7b075fbd80556cb9b9a84c4ec6f04e03f8dc9c3d20ad46f28f7e679fd77ccf3793175aa90afdcc95a6cecd06b8a51c60195d65ad1f134fa5cda150d265a24d624f12d647fd04d84671084a92880d1eb0d1f14bd0725394c2dfd5cdb12a820817f2fed14d34848f04aa717b18e229a8caa3958bc9ad9a1dce42e0a8d504f8045d8c539f3110fe3babe84582c8fea9d8d3cdd0d03e4f280e549c743071eb50d9fdd730e24d921a0994cac4d6cab6f2ee1bc08f2185fede5d053a05d01d71d0ed1e7235c23a93ed975424483201527e315de87a7119a80e127f849c884a9b08c9ac36c3a7e53f3428228e363fda55201df02ba673634f1e7c72e8d7e5a5c2223092e1f53c19bf540e05f95c4e2874bcf77294650e8bd0804e189e6688c352a88b2019bba3b71d845593872818f06304e5940e7a0c62093b0ea75b907353e66f0ff61c73b21e849e20af66256e60eef20fcb6c7fd82e7bf23a02a85cdc29b0ed0c720ad21130de1ce49d82a1fcea39d7266915d292b3c3a65457300570e3f0660824bdfc7f57b33e710072145eb6cfe15da30c0138f511c7746065dd2dd8f69cf2d7a82dfcfa6f874569c915b2f0fe456841024e193d67196daa5e2731742c6ff5eaf1554e7a80a653b4af928d5730ae8fd5451396b630ff4d20172e4fdd272a924f217e6f5fffece5491ad7dc1d42d252f0e728aa9b8fb10aa5a3c741426871d3b29377b0efc6a896f27dc769309ff9e54d37433b72e9ab39b4207ac4287de7e0c3cd876a1ae4a2bc414cb20eff7217cb9fca6ad1c26433b11f89fb236e51d1d0b604ed5c591930164dd228de206107ccd3ba019a24607077def18bff76609e818bd3cc3c5884e8abf4aaf4aba31afff1044ea60f32dd250e741bea41d367080eba816f7b9db1903bfb26fd0b29880dc6228223aa9e6b03e43ea1c3e6c3591d43adb5e24836fae90de568af6fb6e5144dc4c8f3fe6e4e034a243f97c6dc73075c5b3fd39b4ec2f61d171bda3f149dd43999807c1efb159d74959457689250350c1b29e444a6b46baa356699f74d87fffe6020f1bcbf880e4082be4b48c76e1bd02921c9753cb69945d56a7991f835568c9441b5fdaecd23aed1f84de5db008c175882fa7ece6080005dfd537b17a7ae44c83d3fa01228f62240ded4fca9073bc30263724f11f68c563f55c8d6798f6fc2fc5d7750ab7796a2ff24b8cda0429299aec8f71b59796f76713a3fb47333581115f0e2570cd9d300495a33b7fd4ca61f0abff25e2db632b9959c34daa4d84c9c1c348ed284d8bf37978b9951f2999803e29635412e3d8bb24a641023d5b569e9b02c8d10c42834ebb54245d91fa4f1865797da23dd8a33a0cdc63b8200b49a70712dd2875ff5164e4d1c8bbe307aa6f8f695ffd3d13a869de7aaf20e3873add8181d62da556d29cb0f129371edea7ad6a68e1cec2c47ce770a98703c470dd75cd2783b06dc552343a4fc9cedbe672a417ee98f307d5520d75d6485a5158a8f625d6b18b0aeceada1178c4c31a2423afe6647ad9e9ffe0e403d18baf23e7c5a2caa2a0d0ddfc30132f906970b3eea632156730d6616540e881fc68ee86c9a28dfd1f2036a0504b22396ebff68315b131cde9c5bfd3caf95144cfb693229141845ea7591b4c26067524291c0a22c76a803a00a91e7ecb4ee0c0ac06abab3fa656bbee4305aa19fb469a3d66487847436f4bc7c68e695add42895aaede8f41f95f5d5fda70c010399a7bcb7070fe908c354f2e1a96f39ef3111754b28b5473d41c87b193f9e3fd41ec53faa91b66755b65b8efa6698d43e7b0e34bf82495601373e9e998c8a3a3092f2b6a15f4db04e69329ca61489c8d3733b5e7f3cb08b92a0c4c1fa088b451ac9b66cb5cc18f54b96ab8c41b0bf651a78e307b0839ab9a2409a1e58046d27ad3f91ff886182605a4c844d73a049c47908d69c73988f409477f7620b70bc333a02df806dab69e8f9b28162cb70d2ca86051021ea671610dfa0dc5a1d3d6d2533d1d6f221f7133a64d81ba85cc5a3aa4eb7a7a70b6739329b38a461185a3d5e8257ee31c3c910fe8000000000000000000000000000aa00001400000000000000290000003e0000009b0800000000000070000000000000002900000037000000870a0000000000000100072800000000080400000100000000000000020000000000000007000000000000000300000000000000040135c910fe8000000000000000000000000000aa04010101070000000000000004010e050207ff00000000"], 0x1288}, 0x1) setsockopt$inet6_int(r11, 0x29, 0x1000000000021, &(0x7f0000000040)=0x1, 0x0) 312.815879ms ago: executing program 0 (id=12115): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) sendmsg$NL80211_CMD_SET_PMK(r5, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0x70, r6, 0xf10, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x49}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "7ebc1d38dec5a2f3e4cce57ca27750e5"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "5a816a1cba7337330e7268e080837b83"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "074a94f5b8cca87541838d88cd7c20b4"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "c7945d4c1f9ad595422aec5fbf696fed"}]}, 0x70}, 0x1, 0x0, 0x0, 0x4c035}, 0x8000) (async) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x28, 0x14, 0x509, 0x70bd28, 0x40000, {0x2, 0x1f, 0xd, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}, @IFA_RT_PRIORITY={0x8, 0x9, 0xc}]}, 0x28}}, 0x0) sendmsg$netlink(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)={0x1c, 0x5e, 0x1, 0x0, 0x0, "", [@nested={0xc, 0xff, 0x0, 0x1, [@typed={0x8, 0x7e, 0x0, 0x0, @pid}]}]}, 0x1c}], 0x1}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r8, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_TID={0xc}, @GTPA_VERSION={0x8}]}, 0x30}}, 0x0) (async, rerun: 64) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 64) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="80a85913", @ANYRES16=r9, @ANYBLOB="000400100000fcdbdf252e0000001400340041e1f8577385908d36bc40b29a9abcaf0a00060008021100000100001000b000200000000100000809000a000400af000a004f0050505050505000000a000600ffffffffffff000006009800030000000800c900c81400000800c9006c090000"], 0x78}, 0x1, 0x0, 0x0, 0x60}, 0x4000) 284.583621ms ago: executing program 3 (id=12116): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=@newtclass={0x1058, 0x28, 0x400, 0x70bd28, 0x8, {0x0, 0x0, 0x0, 0x0, {0x8}, {0x2}, {0xfff2, 0xffff}}, [@c_cbq={{0x8}, {0x80c, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xa4b8, 0x3, 0x4, 0x10001, 0x8, 0x100, 0xd755, 0x7, 0x6, 0xffff, 0x4, 0x0, 0x6, 0x6, 0xb24, 0x80000001, 0xe00, 0x5, 0x1, 0x7, 0x3c, 0x3, 0x5, 0xfffff6cd, 0x4, 0xe5e, 0x1, 0x10000, 0xf, 0x6, 0xa929, 0xf, 0xf, 0x200000, 0x7ff, 0x4, 0xfffffffe, 0x41, 0x2, 0x100, 0x5c, 0x9, 0x4, 0x30, 0x1, 0x3, 0xffffffff, 0x1, 0x6, 0xfc29, 0x6, 0xfffffe3f, 0x7fffffff, 0x0, 0x3, 0x5, 0x9, 0xe18, 0x2, 0x8, 0x8, 0xb0a, 0x9, 0xff, 0x3, 0x7, 0xf, 0x7, 0x5, 0x6, 0x1, 0x101, 0x7, 0x7ff, 0xcd, 0x8, 0x3ee, 0x4b, 0x3, 0x8, 0xa4, 0x7, 0x6, 0x4, 0x89dc, 0x2, 0x76, 0x9, 0x81, 0x9, 0x5, 0x7f, 0x6, 0x6, 0x7, 0x3, 0x5, 0x10, 0xb, 0x1, 0xffff8001, 0xb6d, 0x4, 0x7ff, 0xf61, 0x5, 0x7, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x6, 0x6, 0x91, 0x1, 0x7, 0x8, 0x6, 0x1, 0x1800, 0x6, 0xe, 0x2, 0xd7d96f43, 0x40, 0x800, 0x9, 0xfffffff7, 0x3, 0x637d, 0x1000, 0x54, 0x15512f96, 0x2, 0x1, 0x39, 0x0, 0x3, 0x10, 0x1, 0x10, 0x4, 0x43, 0x8, 0x8001, 0x6, 0x2, 0x0, 0x0, 0xe, 0x0, 0xfff, 0x2, 0x3, 0x80000001, 0x7, 0x2e, 0x9, 0x0, 0x800, 0x6, 0x31, 0x6, 0x6, 0x5, 0x2, 0x3, 0x260df0e7, 0x8, 0x1, 0xb6, 0x4, 0x5, 0x8, 0x8141, 0x20000000, 0x1ff, 0x6, 0xfffffffe, 0x7, 0x3, 0xff, 0xb688, 0x7ff, 0x5, 0xff, 0x39, 0x100, 0x8, 0xd, 0x1, 0x0, 0x9, 0x7, 0x401, 0x8, 0x7, 0x40, 0x1, 0x4, 0x5, 0x0, 0x2f45, 0x40, 0x723, 0x5, 0x7ff, 0x2, 0x8000, 0x46, 0x5, 0x1, 0xac, 0x8001, 0x6, 0xfffffff9, 0x1, 0x73, 0x6, 0x48fbc151, 0x2, 0x6, 0x80000000, 0xff, 0x4, 0xfffffc00, 0x9, 0x8000, 0x6cb, 0x0, 0x80000000, 0x6, 0x6, 0x2, 0x8000, 0x847, 0xfffffff4, 0x7, 0x7, 0x1, 0x0, 0x8, 0x4, 0xb39, 0x9, 0x8, 0x5, 0x3, 0x29b, 0x4, 0x4c4, 0xffffffff, 0x9, 0x3ff]}, @TCA_CBQ_RTAB={0x404, 0x6, [0xffff, 0x3ff, 0x2, 0x800, 0x4, 0x6, 0x7ff, 0xfffffc00, 0x5, 0x6, 0x4, 0x4, 0x5, 0x5f6, 0x4, 0x1, 0x487a, 0x1b, 0x10000, 0xa, 0x4, 0x1, 0x5, 0x8c9, 0x10004, 0x400, 0x0, 0x6, 0x1538, 0x4, 0xff, 0x1000, 0x6, 0x0, 0x9, 0x542d, 0x9, 0xf, 0x4, 0x4, 0x1, 0x1, 0x7, 0x7, 0xd, 0x9, 0x81, 0x4, 0x130000, 0x252c000, 0x7, 0x1, 0x1, 0x4, 0x9f, 0x5, 0xe, 0xae7, 0x5, 0x7, 0x3, 0x8b, 0x0, 0x9, 0x0, 0x8, 0x10, 0x7, 0xfffffc01, 0x4c, 0x5, 0xfffffffb, 0xfffffffa, 0x8, 0x3, 0x2, 0xb42, 0x6, 0xfffffffb, 0x4, 0x9, 0x7f, 0x6, 0x379, 0x10000, 0xcca9, 0xcdd, 0x2, 0x0, 0x3, 0x1, 0x3a04, 0x7fffffff, 0x9, 0x1, 0x35, 0x3, 0xfffffffe, 0x1, 0x4, 0x8, 0x8, 0x1, 0x59be, 0xe5bd, 0xfffffffc, 0x5, 0x4, 0x6, 0x4, 0x1, 0x80, 0x31, 0xfff, 0x9, 0x2, 0x4, 0x9, 0x8, 0x3, 0x0, 0x8, 0xd, 0x7a31, 0x5, 0xffff590f, 0x1, 0x101, 0xc, 0x38, 0x3, 0x80000000, 0x5, 0x8b6, 0xb, 0x8, 0x80000001, 0xffff, 0x1, 0x87bb, 0x7, 0x7, 0x1, 0x40, 0x6, 0x4, 0x7, 0xa, 0x2, 0x2, 0x9, 0xffff, 0x5, 0x2, 0x9, 0x7fff, 0xc56e, 0x1, 0x8, 0x1000, 0x3790, 0x1, 0x3516, 0x1, 0x8, 0x6, 0x1, 0xfffff704, 0x0, 0xfffffbff, 0x5, 0x9, 0xd160, 0x7fffffff, 0x1, 0x2, 0xfffffffa, 0x3, 0x6, 0xe, 0xff, 0x4, 0x3, 0xfffffff9, 0x2, 0x46d, 0x4, 0xfffff957, 0x8, 0x1, 0x7, 0xeff, 0x5, 0xffffffff, 0x1, 0x0, 0xc27a, 0x4, 0x2, 0x1, 0xa, 0x0, 0x401, 0x588a, 0x7985, 0x0, 0x4, 0x3, 0x343e, 0xfffffffe, 0x400, 0x1, 0x0, 0xbd2, 0xfffffff4, 0x7fffffff, 0x1, 0xfffffb0c, 0x5, 0x3, 0xffff, 0x7a, 0x7, 0x8, 0x800, 0xf8000000, 0x3, 0x7, 0x8, 0x3, 0x3fc, 0x13, 0x7ff, 0x1ff, 0xe25e, 0x4648000, 0x3, 0xffff, 0x9ab, 0x5, 0x80, 0x7, 0x551cdd7, 0x1, 0x4, 0x8, 0x5, 0x4dd, 0x4384, 0x9, 0x2, 0x7, 0x80, 0x4e6, 0x5, 0x6]}]}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xe, 0x7, 0x5, 0xfff, 0x8, 0x3, 0x7f, 0xfff, 0x4, 0x894, 0x9, 0x6, 0x4, 0x100, 0x6, 0x8001, 0x5, 0x2, 0x2, 0x7, 0x7ff, 0x2a651f85, 0x8, 0xee, 0x8f6, 0x1, 0x8, 0xd67, 0x6, 0x8, 0x8, 0x80000001, 0x45c, 0x1, 0x3ff, 0xff5f, 0x1, 0x294, 0x4, 0x7, 0x9, 0x200, 0x7, 0x3, 0x0, 0x4, 0x5, 0x2, 0xfffffffe, 0x80000, 0x2, 0x1fd, 0x9, 0x5, 0xea, 0x1, 0x5, 0xf175, 0xc7, 0x1, 0x1000, 0xfffffde2, 0x800, 0xddf, 0x10, 0xdf1d, 0x6, 0x10, 0x3ff, 0x2, 0x0, 0x1, 0x0, 0x10, 0xbf3b, 0x5, 0x3, 0x4dd, 0x200, 0x4, 0x8, 0x4, 0x6, 0x5, 0x2, 0x5, 0xc, 0x81, 0xb41f, 0x9, 0x6, 0x41, 0x2, 0x9, 0x1, 0x6, 0x51e0, 0x103, 0x4, 0x78, 0x1, 0x3ff, 0x8000, 0x2, 0xda, 0x1, 0x6, 0x0, 0x200000, 0x3, 0x9, 0x5, 0x97, 0x800, 0x3, 0x7, 0x0, 0x0, 0x903, 0xf, 0x100, 0x7, 0x100, 0x1, 0x3, 0x2, 0x200, 0x7ff, 0x1, 0xc54, 0x879, 0x73, 0x81, 0x1000, 0x7e5, 0x583, 0x401, 0x0, 0xe0000000, 0x0, 0x4, 0xd, 0x192d, 0x247, 0x0, 0x985, 0x0, 0xf470, 0xfffffffa, 0x2b7, 0x3, 0x3, 0x8, 0x4, 0x1, 0x2, 0x8, 0x1, 0x4, 0x0, 0xff, 0x4, 0x80000000, 0xfffffffc, 0x7, 0x3ff, 0x8, 0x4, 0x4, 0x4, 0x8, 0x1, 0x6, 0x4fb, 0x1, 0x8, 0x200, 0x2, 0x252d5040, 0xda, 0x8, 0x5, 0x80000000, 0x0, 0x1, 0x3, 0x3800, 0x3, 0x2, 0x1000, 0x2, 0x0, 0x8, 0x4, 0xfffffff9, 0x100, 0x9, 0x9, 0x8, 0x10, 0x5, 0x9, 0x9, 0x8, 0x6, 0x5, 0x9, 0xa8, 0x5, 0x3, 0x10, 0x3, 0x7, 0x9, 0xf4b6, 0x2, 0x6a, 0x2, 0x3, 0x5, 0x8, 0x40, 0x3b, 0x4800000, 0x800, 0xdae, 0x9, 0x0, 0xfff, 0x9, 0xf, 0x26, 0x1, 0x2, 0x6, 0x6, 0x6, 0x0, 0xffffffff, 0x7, 0xfffffff9, 0xffffffff, 0xfffffff6, 0x10000, 0x3, 0x8000, 0x3231, 0x74e, 0x9, 0x8009, 0x1, 0xe7e1, 0x3db2, 0x375b, 0x9, 0x80]}]}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x8, 0x5, 0x80, 0x4af8, 0x5, 0x1, 0x1, 0x6, 0x7, 0x5, 0x9, 0x0, 0x9, 0x1, 0x5, 0xe, 0x3, 0xff, 0x8, 0x0, 0xfffffe00, 0x9, 0x3, 0x4, 0x9, 0x4, 0x4, 0xf, 0x6, 0x2, 0x4, 0x7, 0x4000, 0xfff, 0xf30a, 0x0, 0x4, 0xf, 0x9, 0x4, 0x7, 0x4961, 0xf, 0x1, 0x7, 0x4, 0x4, 0x0, 0x317, 0x2, 0x0, 0x6, 0x5, 0x40, 0x1, 0xffffffff, 0x847, 0x7d, 0x9, 0xffc00000, 0x613b, 0x7, 0xfffffffa, 0x0, 0x4a4, 0x200, 0xb44, 0x3, 0x9, 0x6, 0x3, 0x0, 0x6c5, 0x2, 0x7fffffff, 0x9, 0x8, 0x1, 0x401, 0x5, 0xfffffffa, 0x6, 0x479d, 0x7, 0xffffffff, 0xa, 0x5, 0x800, 0x8, 0x1, 0x7, 0x5e7b, 0x4, 0x10001, 0x6, 0x4, 0x16ab, 0xffff, 0x40, 0x9, 0x3, 0x6, 0x9, 0x3, 0xfffffff8, 0xfffffffe, 0xfffffff7, 0x8, 0x6, 0x5, 0x6, 0xc, 0x0, 0xa, 0x13b, 0x7fff, 0x9, 0x9132, 0x9, 0x1, 0x9, 0x9, 0xfffffffe, 0x0, 0x8, 0x5, 0x5, 0xe2dd, 0x3fd, 0x80a, 0x1, 0xb, 0xffff0000, 0x80, 0xe, 0x0, 0xa2, 0x400, 0x0, 0x48000000, 0x8, 0x0, 0x4, 0x6, 0x7, 0x80000001, 0x8, 0x97, 0x1, 0xb, 0x3, 0x9, 0x4, 0xb, 0x7fff, 0x100, 0x7ff, 0x100, 0x6, 0x5, 0x1, 0x5, 0x9, 0x400, 0xfd04, 0x3ff, 0xfffffff5, 0x3ff, 0xbfcb, 0x9, 0x1, 0xe329, 0x7, 0xfffffffc, 0x50000000, 0xec, 0x7, 0x1, 0x1000, 0x8000, 0x7, 0x7ffb, 0x3, 0xfffffff9, 0x2, 0x67, 0x1, 0x4, 0xd, 0xff, 0x6, 0x101, 0xcd1a, 0x8, 0x7, 0x5, 0x0, 0x80, 0x1ff, 0x1, 0x1, 0x7, 0xf, 0x1, 0x0, 0xe11, 0x6, 0x3, 0xfffffffc, 0x1ff, 0x1, 0x2, 0x2cae, 0xf3ff, 0x48d, 0x7fff, 0x9, 0x1000, 0xfffffe00, 0x37f4, 0x0, 0x9, 0x2000, 0x5, 0x2, 0xd, 0x6, 0x822, 0x8, 0x0, 0xbec9, 0x9, 0x5, 0x35, 0xc2a, 0x4b, 0xa, 0x80, 0x2000007, 0x1, 0x7, 0x0, 0x12, 0x1c, 0x2, 0x4, 0x8, 0x5704, 0xc975, 0x7, 0x1000, 0x365a8a29, 0x5624, 0x1e9019bc, 0x800, 0xfffffffa]}]}}]}, 0x1058}, 0x1, 0x0, 0x0, 0x40004}, 0x20008000) sendmmsg$alg(r1, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGMRU(r2, 0x80047453, 0x0) recvmsg$qrtr(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/59, 0x3b}, {&(0x7f00000002c0)=""/238, 0xee}], 0x2, 0x0, 0x0, 0x2}, 0x38, 0x100) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 258.07693ms ago: executing program 0 (id=12117): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000140)="96", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000180)=0x2, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r3 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) sendmmsg$inet6(r5, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f00000071c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)='H', 0x1}], 0x1}}], 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_PORT_DST_MIN={0x6, 0x59, 0x4e23}]}}]}, 0x4c}}, 0x24004000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001e00010000d2c1138d6f949a1b0c"], 0x24}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r9 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r9, &(0x7f0000000080), 0x10) close(r0) 98.67572ms ago: executing program 3 (id=12118): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x800001, 0x10012, r0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x14, 0x19, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xfffc}}, 0x14}, 0x1, 0x0, 0x0, 0x44004}, 0x0) sendto$inet(r1, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) 35.446375ms ago: executing program 0 (id=12119): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000001cc0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14200000", @ANYRES16=0x0, @ANYBLOB="00022cbd7000ffdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x40, 0x4}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r3 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x44080) sendmsg(r3, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x4000001) ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0x7fffffffffffffff) listen(r0, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x2, {0x41}}, 0x10, 0x0}, 0x0) accept4(r0, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=12120): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x7, 0x8000, 0x1ff, 0x4, {{0x22, 0x4, 0x1, 0x7, 0x88, 0x67, 0x0, 0x50, 0x4, 0x0, @private=0xa010100, @multicast2, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x34, 0x99, 0x3, 0x8, [{@empty, 0x7}, {@private=0xa010102, 0x3}, {@loopback, 0xffffffff}, {@multicast2, 0x1}, {@multicast2, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}]}, @timestamp={0x44, 0x8, 0xd8, 0x0, 0x4, [0x200]}, @generic={0x86, 0xb, "40b06967f8c858f4e3"}, @ssrr={0x89, 0x27, 0x76, [@multicast1, @broadcast, @broadcast, @local, @loopback, @loopback, @loopback, @private=0xa010100, @broadcast]}]}}}}}) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)=@bridge_dellink={0x38, 0x11, 0x200, 0x70bd25, 0x25dfdbff, {0x7, 0x0, 0x0, r2, 0x30608, 0x1000}, [@IFLA_IFALIASn={0x4}, @IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x6048040) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_BROADCAST={0xa, 0x2, @broadcast}, @IFLA_BROADCAST={0xa, 0x2, @broadcast}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) kernel console output (not intermixed with test programs): 10099'. [ 1150.363243][ T9031] set match dimension is over the limit! [ 1150.576686][ T9044] syzkaller0: entered promiscuous mode [ 1150.582947][ T9048] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.10101'. [ 1150.584077][ T9047] netlink: 64 bytes leftover after parsing attributes in process `syz.4.10103'. [ 1150.604563][ T9044] syzkaller0: entered allmulticast mode [ 1150.609411][ T9048] netlink: 'syz.2.10101': attribute type 7 has an invalid length. [ 1150.621316][ T9048] netlink: 'syz.2.10101': attribute type 8 has an invalid length. [ 1150.859242][ T9055] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1150.920578][ T9060] bridge0: entered allmulticast mode [ 1151.221482][ T9076] openvswitch: netlink: Message has 1 unknown bytes. [ 1151.230032][ T9076] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1151.308676][ T9078] netlink: 'syz.4.10111': attribute type 11 has an invalid length. [ 1151.542441][ T9095] netlink: 'syz.4.10115': attribute type 1 has an invalid length. [ 1151.576310][ T9095] netlink: 'syz.4.10115': attribute type 1 has an invalid length. [ 1151.585811][ T9095] netlink: 'syz.4.10115': attribute type 2 has an invalid length. [ 1151.600180][ T9095] netlink: 'syz.4.10115': attribute type 83 has an invalid length. [ 1151.622066][ T9101] IPVS: set_ctl: invalid protocol: 50 172.30.0.4:20002 [ 1152.351605][ T9140] wlan0 speed is unknown, defaulting to 1000 [ 1152.658171][ T9166] nbd: must specify an index to disconnect [ 1153.012299][ T9188] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 1153.232748][ T9202] validate_nla: 3 callbacks suppressed [ 1153.232770][ T9202] netlink: 'syz.0.10150': attribute type 30 has an invalid length. [ 1153.315493][ T9205] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1153.572272][ T9215] netlink: 'syz.0.10154': attribute type 10 has an invalid length. [ 1153.898262][ T9228] netlink: 'syz.0.10158': attribute type 1 has an invalid length. [ 1154.012446][ T9228] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1154.089820][ T9236] bond6: entered allmulticast mode [ 1154.130846][ T9228] bond6: (slave ip6gretap1): making interface the new active one [ 1154.140928][ T9228] ip6gretap1: entered allmulticast mode [ 1154.151968][ T9228] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1154.404307][ T9254] netlink: 'syz.4.10165': attribute type 21 has an invalid length. [ 1154.470807][ T9254] __nla_validate_parse: 14 callbacks suppressed [ 1154.470830][ T9254] netlink: 128 bytes leftover after parsing attributes in process `syz.4.10165'. [ 1154.506095][ T9254] netlink: 3 bytes leftover after parsing attributes in process `syz.4.10165'. [ 1154.630628][ T9266] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10168'. [ 1155.177852][ T9285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10171'. [ 1155.189835][ T9285] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10171'. [ 1155.200637][ T9285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10171'. [ 1155.287947][ T9296] netlink: 'syz.4.10175': attribute type 1 has an invalid length. [ 1155.351135][ T9296] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1155.937559][ T9328] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10184'. [ 1156.406862][ T9340] netlink: 'syz.3.10187': attribute type 2 has an invalid length. [ 1156.415458][ T9340] netlink: 'syz.3.10187': attribute type 11 has an invalid length. [ 1156.466829][ T9343] C: renamed from lo (while UP) [ 1156.475477][ T9340] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10187'. [ 1156.537666][ T9343] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1156.674374][ T9354] sctp: [Deprecated]: syz.1.10191 (pid 9354) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1156.674374][ T9354] Use struct sctp_sack_info instead [ 1156.699249][ T9350] IPVS: persistence engine module ip_vs_pe_ not found [ 1156.735292][ T9357] netlink: 'syz.0.10192': attribute type 29 has an invalid length. [ 1156.745831][ T9357] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10192'. [ 1156.787282][ T9350] IPVS: persistence engine module ip_vs_pe_ not found [ 1156.885766][ T9350] IPVS: persistence engine module ip_vs_pe_ not found [ 1156.966458][ T9350] IPVS: persistence engine module ip_vs_pe_ not found [ 1157.028783][ T9350] IPVS: persistence engine module ip_vs_pe_ not found [ 1157.110705][ T9350] IPVS: persistence engine module ip_vs_pe_ not found [ 1157.171717][ T9350] IPVS: persistence engine module ip_vs_pe_ not found [ 1157.267469][ T9350] IPVS: persistence engine module ip_vs_pe_ not found [ 1157.316906][ T9389] veth1_macvtap: left promiscuous mode [ 1157.366047][ T9350] IPVS: persistence engine module ip_vs_pe_ not found [ 1157.613610][ T9408] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10202'. [ 1157.660966][ T9409] sctp: [Deprecated]: syz.1.10204 (pid 9409) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1157.660966][ T9409] Use struct sctp_sack_info instead [ 1157.922814][ T9417] veth3: entered allmulticast mode [ 1158.157000][ T9436] xt_policy: neither incoming nor outgoing policy selected [ 1158.262201][ T9440] syz_tun: entered allmulticast mode [ 1158.334747][ T9442] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 1158.918506][ T9439] syz_tun: left allmulticast mode [ 1159.817344][ T9507] netlink: 'syz.2.10236': attribute type 1 has an invalid length. [ 1159.825796][ T9507] netlink: 'syz.2.10236': attribute type 7 has an invalid length. [ 1159.834850][ T9507] netlink: 'syz.2.10236': attribute type 8 has an invalid length. [ 1159.844073][ T9507] __nla_validate_parse: 11 callbacks suppressed [ 1159.844096][ T9507] netlink: 208 bytes leftover after parsing attributes in process `syz.2.10236'. [ 1159.862007][ T9507] NCSI netlink: No device for ifindex 65584 [ 1160.098665][ T9519] tipc: Started in network mode [ 1160.103673][ T9519] tipc: Node identity def4b09965d6, cluster identity 4711 [ 1160.121906][ T9519] tipc: Enabled bearer , priority 0 [ 1160.217999][ T9521] syzkaller0: entered promiscuous mode [ 1160.223815][ T9521] syzkaller0: entered allmulticast mode [ 1160.231366][ T9521] tipc: Resetting bearer [ 1160.265153][ T9521] tipc: Resetting bearer [ 1160.415107][T20211] IPVS: starting estimator thread 0... [ 1160.487761][ T9534] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10242'. [ 1160.500967][ T9534] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1160.532199][ T9530] IPVS: using max 26 ests per chain, 62400 per kthread [ 1161.019591][ T9545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10246'. [ 1161.270210][ T9553] netlink: 9 bytes leftover after parsing attributes in process `syz.2.10245'. [ 1163.328220][ T9521] tipc: Disabling bearer [ 1163.427257][T21804] tipc: Node number set to 3139612825 [ 1163.444712][ T9553] gretap0: entered promiscuous mode [ 1163.514930][ T9554] gretap0: left promiscuous mode [ 1163.601828][ T9554] bridge0: port 2(bridge_slave_1) entered blocking state [ 1163.609424][ T9554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1163.622451][ T9554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1163.633530][ T9554] 8021q: adding VLAN 0 to HW filter on device team0 [ 1163.645381][ T9554] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1163.853925][ T9575] netlink: 'syz.1.10254': attribute type 3 has an invalid length. [ 1163.935206][ T9579] netlink: 48 bytes leftover after parsing attributes in process `syz.0.10255'. [ 1163.963289][ T9584] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1164.169515][ T9600] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 1164.362256][ T9615] netlink: 'syz.0.10266': attribute type 8 has an invalid length. [ 1164.362451][ T9614] xt_socket: unknown flags 0x50 [ 1164.400983][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 1164.649369][ T9635] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.10270'. [ 1164.851499][ T9646] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10272'. [ 1164.879818][ T9646] netlink: 56 bytes leftover after parsing attributes in process `syz.4.10272'. [ 1164.892311][ T9646] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10272'. [ 1164.920698][ T9648] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10273'. [ 1164.932055][ T9648] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10273'. [ 1164.941325][ T9648] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10273'. [ 1165.008602][ T9654] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10275'. [ 1165.259058][ T9654] syzkaller0: entered promiscuous mode [ 1165.264906][ T9654] syzkaller0: entered allmulticast mode [ 1165.282655][ T9659] netlink: 'syz.2.10275': attribute type 1 has an invalid length. [ 1165.555438][ T9686] xt_TCPMSS: Only works on TCP SYN packets [ 1168.381653][ T9669] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1168.833672][ T30] audit: type=1800 audit(1768367170.872:17): pid=9732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.10297" name="memory.events" dev="tmpfs" ino=909 res=0 errno=0 [ 1169.124388][ T9753] syzkaller1: entered promiscuous mode [ 1169.144133][ T9753] syzkaller1: entered allmulticast mode [ 1169.173628][ T9755] netlink: 248 bytes leftover after parsing attributes in process `syz.2.10303'. [ 1169.214231][ T9755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10303'. [ 1169.303809][ T9762] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10303'. [ 1169.541142][ T9733] netlink: 'syz.1.10296': attribute type 10 has an invalid length. [ 1169.549557][ T9733] team0: entered promiscuous mode [ 1169.554841][ T9733] team_slave_0: entered promiscuous mode [ 1169.569206][ T9733] team_slave_1: entered promiscuous mode [ 1169.586297][ T9733] dummy0: entered promiscuous mode [ 1169.600008][ T9733] 8021q: adding VLAN 0 to HW filter on device team0 [ 1169.618005][ T9733] bridge0: port 3(team0) entered blocking state [ 1169.624807][ T9733] bridge0: port 3(team0) entered disabled state [ 1169.648167][ T9733] team0: entered allmulticast mode [ 1169.653453][ T9733] team_slave_0: entered allmulticast mode [ 1169.671131][ T9733] team_slave_1: entered allmulticast mode [ 1169.682676][ T9733] dummy0: entered allmulticast mode [ 1169.729313][ T9781] netlink: 'syz.4.10311': attribute type 4 has an invalid length. [ 1169.809884][ T9781] bond3: option miimon: invalid value (18446744073709551585) [ 1169.819038][ T9781] bond3: option miimon: allowed values 0 - 2147483647 [ 1169.833040][ T9781] bond3 (unregistering): Released all slaves [ 1169.923439][ T9789] netlink: 'syz.3.10310': attribute type 2 has an invalid length. [ 1169.936351][ T9789] __nla_validate_parse: 4 callbacks suppressed [ 1169.936375][ T9789] netlink: 244 bytes leftover after parsing attributes in process `syz.3.10310'. [ 1170.246039][ T9807] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10318'. [ 1170.395377][ T9814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10321'. [ 1172.953460][ T9812] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1173.137319][ T9836] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.10324'. [ 1173.158127][ T9832] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10323'. [ 1173.168844][ T9833] netlink: 44 bytes leftover after parsing attributes in process `syz.3.10323'. [ 1173.310868][ T9836] can: request_module (can-proto-0) failed. [ 1173.358443][ T9846] syzkaller1: entered promiscuous mode [ 1173.374433][ T9846] syzkaller1: entered allmulticast mode [ 1173.390994][ T9846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10327'. [ 1173.403938][ T9854] xt_l2tp: v2 doesn't support IP mode [ 1173.415205][ T9846] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10327'. [ 1173.429012][ T9855] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1173.445567][ T9855] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10326'. [ 1173.696367][ T9868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10332'. [ 1174.144708][ T9895] tipc: Started in network mode [ 1174.161353][ T9895] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 1174.168800][ T9895] tipc: Enabled bearer , priority 2 [ 1175.024891][ T9942] IPVS: set_ctl: invalid protocol: 50 172.30.0.2:20002 [ 1175.286607][ T7621] tipc: Node number set to 10136234 [ 1175.346737][ T9959] x_tables: duplicate underflow at hook 1 [ 1175.379394][ T9961] openvswitch: netlink: IP tunnel TTL not specified. [ 1175.564818][ T9972] __nla_validate_parse: 3 callbacks suppressed [ 1175.564840][ T9972] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10363'. [ 1175.762433][ T9984] bridge0: entered allmulticast mode [ 1175.859132][ T9984] xt_l2tp: v2 doesn't support IP mode [ 1175.878726][ T9987] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10368'. [ 1175.899798][ T9990] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10367'. [ 1176.085220][ T9998] netlink: 176 bytes leftover after parsing attributes in process `syz.0.10369'. [ 1176.350811][T10007] netlink: 'syz.3.10373': attribute type 32 has an invalid length. [ 1176.419268][T10007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10373'. [ 1176.531951][T10007] bond4: option coupled_control: invalid value (52) [ 1176.563807][T10007] bond4 (unregistering): Released all slaves [ 1176.638898][T10022] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1177.113143][T10037] openvswitch: netlink: IP tunnel dst address not specified [ 1177.451557][T10062] netlink: zone id is out of range [ 1177.484621][T10062] netlink: del zone limit has 4 unknown bytes [ 1177.845274][T10080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10394'. [ 1177.899532][T10084] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10395'. [ 1178.431139][T10115] netlink: 188 bytes leftover after parsing attributes in process `syz.2.10405'. [ 1178.533684][T10125] IPVS: set_ctl: invalid protocol: 33 172.20.20.187:20002 [ 1178.582284][T10123] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1178.802032][T10140] netlink: 'syz.3.10411': attribute type 4 has an invalid length. [ 1178.839865][T10143] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10412'. [ 1178.890923][T10143] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10412'. [ 1179.605658][T10181] bridge0: port 2(bridge_slave_1) entered blocking state [ 1179.613170][T10181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1179.620985][T10181] bridge0: port 1(bridge_slave_0) entered blocking state [ 1179.628501][T10181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1179.652410][T10181] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1179.705294][T18000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1179.738016][T18000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1179.758065][T10192] tipc: Started in network mode [ 1179.762998][T10192] tipc: Node identity ce37967b91ff, cluster identity 4711 [ 1179.802883][T10192] tipc: Enabled bearer , priority 0 [ 1179.830370][T10185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1179.987730][T10192] tipc: Disabling bearer [ 1180.259820][T10219] syzkaller1: entered promiscuous mode [ 1180.276270][T10219] syzkaller1: entered allmulticast mode [ 1180.423772][T10225] SET target dimension over the limit! [ 1180.629914][T18000] bridge0: port 1(bridge_slave_0) entered disabled state [ 1180.630253][T10238] __nla_validate_parse: 8 callbacks suppressed [ 1180.630269][T10238] netlink: 11 bytes leftover after parsing attributes in process `syz.2.10439'. [ 1180.918632][T10247] netlink: 312 bytes leftover after parsing attributes in process `syz.0.10444'. [ 1180.925771][T10254] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1180.944297][T10254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10447'. [ 1180.964736][T10252] netlink: 44 bytes leftover after parsing attributes in process `syz.1.10445'. [ 1180.994475][T10254] netlink: 'syz.4.10447': attribute type 5 has an invalid length. [ 1181.073078][T10254] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10447'. [ 1181.200496][T10261] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1181.212771][T10261] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1181.251082][T10254] geneve2: entered promiscuous mode [ 1181.257340][T10254] geneve2: entered allmulticast mode [ 1181.262904][T10274] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10452'. [ 1181.276008][T17999] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1181.292913][T17999] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1181.328041][T17999] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1181.439741][T10261] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1181.442514][T10284] netlink: 277 bytes leftover after parsing attributes in process `syz.2.10456'. [ 1181.452281][T10261] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1181.473779][T10261] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1181.507696][T10286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10455'. [ 1181.598196][T10261] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1181.616327][T10261] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1181.636106][T10261] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1181.740270][T10261] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1181.754248][T10261] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1181.765077][T10261] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1181.854880][ T3539] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1181.863379][ T3539] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 1181.872026][ T3539] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1181.889405][T16295] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1181.898033][T16295] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 1181.906544][T16295] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1181.925754][T17999] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1181.934162][T17999] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 1181.943091][T17999] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1181.958853][T17999] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1181.968525][T17999] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 1181.977303][T17999] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1182.484588][T10310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10465'. [ 1182.510001][T10310] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10465'. [ 1183.453312][T10367] IPVS: set_ctl: invalid protocol: 50 172.30.0.5:20002 [ 1184.040419][T10390] netlink: zone id is out of range [ 1184.078385][T10390] netlink: zone id is out of range [ 1184.084093][T10390] netlink: zone id is out of range [ 1184.096789][T10390] netlink: zone id is out of range [ 1184.131884][T10390] netlink: zone id is out of range [ 1184.156445][T10390] netlink: zone id is out of range [ 1184.189836][T10390] netlink: zone id is out of range [ 1184.220960][T10390] netlink: zone id is out of range [ 1184.244209][T10390] netlink: zone id is out of range [ 1184.271981][T10390] netlink: zone id is out of range [ 1184.639835][T10377] Bluetooth: MGMT ver 1.23 [ 1184.755594][T10410] tipc: Invalid UDP bearer configuration [ 1184.755738][T10410] tipc: Enabling of bearer rejected, failed to enable media [ 1184.922023][T10412] netlink: 'syz.0.10490': attribute type 13 has an invalid length. [ 1184.935736][T10412] veth0_macvtap: left promiscuous mode [ 1184.949871][T10412] macvtap0: entered allmulticast mode [ 1184.960539][T10412] macvtap0: refused to change device tx_queue_len [ 1185.106094][T10422] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 1185.136092][T10422] IPv6: sit2: Disabled Multicast RS [ 1185.143823][T10422] sit2: entered allmulticast mode [ 1185.298210][T10438] netlink: 'syz.3.10498': attribute type 10 has an invalid length. [ 1185.326769][T10438] team0: Device veth0_macvtap failed to register rx_handler [ 1185.499957][T10444] bridge_slave_0: left allmulticast mode [ 1185.516288][T10444] bridge_slave_0: left promiscuous mode [ 1185.522419][T10444] bridge0: port 1(bridge_slave_0) entered disabled state [ 1185.558823][T10444] bridge_slave_1: left allmulticast mode [ 1185.584889][T10444] bridge_slave_1: left promiscuous mode [ 1185.593917][T10444] bridge0: port 2(bridge_slave_1) entered disabled state [ 1185.611201][T10444] bond0: (slave bond_slave_0): Releasing backup interface [ 1185.633668][T10444] bond0: (slave bond_slave_1): Releasing backup interface [ 1185.666594][T10444] team0: Port device team_slave_0 removed [ 1185.696703][T10444] team0: Port device team_slave_1 removed [ 1185.717743][T10444] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1185.725436][T10444] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1185.785686][T10444] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1185.794117][T10444] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1185.805167][T10450] batadv_slave_1: entered promiscuous mode [ 1185.944527][T10448] batadv_slave_1: left promiscuous mode [ 1186.193736][T10479] mac80211_hwsim hwsim111 syzkaller0: entered promiscuous mode [ 1186.237389][T10479] mac80211_hwsim hwsim111 syzkaller0: entered allmulticast mode [ 1186.468436][T10486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1186.654896][T10507] __nla_validate_parse: 5 callbacks suppressed [ 1186.654918][T10507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10518'. [ 1186.671148][T10507] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10518'. [ 1186.707116][ T5852] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 1186.711095][ T5838] Bluetooth: hci2: command 0x0405 tx timeout [ 1186.840069][T10513] x_tables: duplicate underflow at hook 1 [ 1186.899453][T10515] netem: change failed [ 1187.135655][T10526] netlink: 56 bytes leftover after parsing attributes in process `syz.0.10524'. [ 1187.452844][T10545] netlink: 212328 bytes leftover after parsing attributes in process `syz.0.10530'. [ 1187.642054][T10563] macvlan0: entered promiscuous mode [ 1187.728652][T10566] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10537'. [ 1187.807824][T10574] delete_channel: no stack [ 1187.994416][T10582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10541'. [ 1188.040270][T10582] netlink: 'syz.0.10541': attribute type 5 has an invalid length. [ 1188.067641][T10582] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10541'. [ 1188.081874][T10581] bond4: option resend_igmp: invalid value (32767) [ 1188.091177][T10581] bond4: option resend_igmp: allowed values 0 - 255 [ 1188.095120][T10588] netlink: 'syz.2.10544': attribute type 142 has an invalid length. [ 1188.106849][T10587] netlink: 'syz.2.10544': attribute type 142 has an invalid length. [ 1188.108827][T10581] bond4 (unregistering): Released all slaves [ 1188.184390][T10582] geneve3: entered promiscuous mode [ 1188.191409][T10582] geneve3: entered allmulticast mode [ 1188.201704][T18005] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 256 - 0 [ 1188.207250][T10594] netlink: 'syz.2.10545': attribute type 6 has an invalid length. [ 1188.233847][T18005] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 256 - 0 [ 1188.247013][T18005] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 256 - 0 [ 1188.266377][T18005] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 256 - 0 [ 1188.407978][T10604] netlink: 'syz.4.10548': attribute type 11 has an invalid length. [ 1188.433079][T10604] netlink: 'syz.4.10548': attribute type 4 has an invalid length. [ 1188.457381][T10604] netlink: 'syz.4.10548': attribute type 5 has an invalid length. [ 1188.496043][T10604] netlink: 'syz.4.10548': attribute type 6 has an invalid length. [ 1188.526875][T10604] netlink: 199748 bytes leftover after parsing attributes in process `syz.4.10548'. [ 1188.748225][T10624] netlink: 'syz.1.10555': attribute type 10 has an invalid length. [ 1188.771943][T10624] netlink: 228 bytes leftover after parsing attributes in process `syz.1.10555'. [ 1188.858596][T10630] netlink: 260 bytes leftover after parsing attributes in process `syz.2.10557'. [ 1189.043385][T10636] mac80211_hwsim hwsim106 : renamed from wlan1 (while UP) [ 1189.511253][T10652] syzkaller1: entered promiscuous mode [ 1189.527848][T10652] syzkaller1: entered allmulticast mode [ 1189.974502][T10680] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 1190.308190][T10698] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1190.335723][T10698] net_ratelimit: 54 callbacks suppressed [ 1190.335747][T10698] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1190.563450][T10720] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan1, syncid = 1, id = 0 [ 1190.714819][T10725] netlink: 'syz.2.10583': attribute type 2 has an invalid length. [ 1190.884134][T10735] netlink: 'syz.2.10587': attribute type 10 has an invalid length. [ 1190.943943][T10735] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1191.366108][T10756] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1191.613585][T10762] gretap0: entered promiscuous mode [ 1191.996851][T10785] bond1: (slave vlan1): Enslaving as a backup interface with an up link [ 1192.352411][T10809] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 1192.532410][T10815] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 1192.563039][T10830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1192.590219][T10830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1192.624860][T10831] __nla_validate_parse: 13 callbacks suppressed [ 1192.624883][T10831] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10611'. [ 1192.748896][T10835] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10613'. [ 1192.848672][T10841] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1192.886959][T10843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10616'. [ 1193.023102][T10854] netlink: 'syz.2.10619': attribute type 1 has an invalid length. [ 1193.171123][T10855] bond2: (slave ip6gretap1): making interface the new active one [ 1193.238017][T10855] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1193.289864][T10855] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1193.316264][T10855] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1193.393824][T10867] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10622'. [ 1193.418784][T10869] netlink: 'syz.0.10623': attribute type 1 has an invalid length. [ 1193.429393][T10873] netlink: 'syz.2.10625': attribute type 4 has an invalid length. [ 1193.513883][T10873] netlink: 'syz.2.10625': attribute type 4 has an invalid length. [ 1193.551790][T10878] netlink: 'syz.3.10626': attribute type 2 has an invalid length. [ 1193.576321][T10878] netlink: 188 bytes leftover after parsing attributes in process `syz.3.10626'. [ 1193.597712][T10878] netlink: 'syz.3.10626': attribute type 1 has an invalid length. [ 1193.643687][T10881] netlink: 'syz.2.10627': attribute type 30 has an invalid length. [ 1193.920245][T10896] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1193.968248][T10904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10634'. [ 1194.097389][T10900] bond4 (unregistering): Released all slaves [ 1194.172707][T10914] openvswitch: netlink: Message has 592 unknown bytes. [ 1194.183200][T10914] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1194.380605][T10926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10644'. [ 1194.389918][T10926] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10644'. [ 1194.683884][T10942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10647'. [ 1194.684775][T10946] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10650'. [ 1194.978760][T10963] netlink: 'syz.4.10654': attribute type 1 has an invalid length. [ 1195.181732][T10968] bond4: (slave geneve3): making interface the new active one [ 1195.219241][T10968] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 1195.237031][T16295] netdevsim netdevsim4 eth0: set [1, 2] type 2 family 0 port 20004 - 0 [ 1195.298329][T16295] netdevsim netdevsim4 eth1: set [1, 2] type 2 family 0 port 20004 - 0 [ 1195.335183][T16295] netdevsim netdevsim4 eth2: set [1, 2] type 2 family 0 port 20004 - 0 [ 1195.377871][T16295] netdevsim netdevsim4 eth3: set [1, 2] type 2 family 0 port 20004 - 0 [ 1195.447984][T10985] batadv_slave_0: entered promiscuous mode [ 1195.646583][T10984] batadv_slave_0: left promiscuous mode [ 1195.838434][T11002] sctp: [Deprecated]: syz.1.10665 (pid 11002) Use of int in max_burst socket option. [ 1195.838434][T11002] Use struct sctp_assoc_value instead [ 1195.865824][T11007] validate_nla: 2 callbacks suppressed [ 1195.865845][T11007] netlink: 'syz.4.10668': attribute type 1 has an invalid length. [ 1195.876961][T11002] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1195.950433][T11007] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1195.999839][T11016] netlink: 'syz.1.10672': attribute type 23 has an invalid length. [ 1196.027249][T11012] macvlan2: entered promiscuous mode [ 1196.032627][T11012] macvlan2: entered allmulticast mode [ 1196.072459][T11012] bond5: entered allmulticast mode [ 1196.091837][T11012] bond5: entered promiscuous mode [ 1196.098966][T11012] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1196.112753][T11012] team0: Port device macvlan2 added [ 1196.347663][T11029] syzkaller0: entered promiscuous mode [ 1196.353382][T11029] syzkaller0: entered allmulticast mode [ 1199.215902][T11045] netlink: 'syz.3.10680': attribute type 1 has an invalid length. [ 1199.272634][T11045] gre2: entered promiscuous mode [ 1199.278764][T11045] gre2: entered allmulticast mode [ 1199.360644][T11052] IPVS: set_ctl: invalid protocol: 50 172.30.0.1:20002 [ 1199.515448][T11059] __nla_validate_parse: 5 callbacks suppressed [ 1199.515471][T11059] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10684'. [ 1199.522351][T11061] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 1199.802284][T11093] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10691'. [ 1199.881142][T11098] netlink: 7 bytes leftover after parsing attributes in process `syz.4.10691'. [ 1199.969494][T11102] netlink: 'syz.3.10695': attribute type 2 has an invalid length. [ 1199.998980][T11102] netlink: 44 bytes leftover after parsing attributes in process `syz.3.10695'. [ 1200.075311][T11102] netlink: 'syz.3.10695': attribute type 2 has an invalid length. [ 1200.091684][T11102] netlink: 44 bytes leftover after parsing attributes in process `syz.3.10695'. [ 1200.364488][T11126] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1200.387496][T11126] netlink: 'syz.2.10701': attribute type 2 has an invalid length. [ 1200.479699][T11137] netlink: 52 bytes leftover after parsing attributes in process `syz.3.10704'. [ 1200.637180][T11139] tipc: Enabled bearer , priority 0 [ 1200.665315][T11143] netlink: 'syz.4.10705': attribute type 27 has an invalid length. [ 1200.679400][T11146] netlink: 'syz.0.10707': attribute type 1 has an invalid length. [ 1200.689689][T11142] syzkaller0: entered promiscuous mode [ 1200.699423][T11148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10707'. [ 1200.722495][T11142] syzkaller0: entered allmulticast mode [ 1200.737147][T11146] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10707'. [ 1200.759939][T11139] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1200.847925][T11139] tipc: Resetting bearer [ 1200.863475][T11138] tipc: Resetting bearer [ 1200.933303][T11138] tipc: Disabling bearer [ 1201.479194][T11183] syzkaller0: entered promiscuous mode [ 1201.484750][T11183] syzkaller0: entered allmulticast mode [ 1201.530438][T11188] delete_channel: no stack [ 1201.550012][T11186] bridge0: port 4(veth0_to_bridge) entered blocking state [ 1201.558291][T11185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10716'. [ 1201.578339][T11186] bridge0: port 4(veth0_to_bridge) entered disabled state [ 1201.597520][T11185] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10716'. [ 1201.606980][T11186] veth0_to_bridge: entered allmulticast mode [ 1201.620952][T11186] veth0_to_bridge: entered promiscuous mode [ 1202.067166][ T5838] Bluetooth: hci4: command tx timeout [ 1202.251782][T11237] netlink: 'syz.1.10734': attribute type 1 has an invalid length. [ 1202.372466][T11237] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1202.419770][T11250] netlink: 'syz.2.10737': attribute type 21 has an invalid length. [ 1202.474700][T11243] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1202.537326][T11238] bond3: (slave geneve3): making interface the new active one [ 1202.564288][T11238] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 1203.548508][T11314] openvswitch: netlink: IP tunnel dst address not specified [ 1203.738308][T11321] blkio.reset_stats is deprecated [ 1204.208716][T11336] xt_ecn: cannot match TCP bits for non-tcp packets [ 1204.257372][T11346] sctp: [Deprecated]: syz.1.10767 (pid 11346) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1204.257372][T11346] Use struct sctp_sack_info instead [ 1204.957366][T11375] __nla_validate_parse: 9 callbacks suppressed [ 1204.957389][T11375] netlink: 176 bytes leftover after parsing attributes in process `syz.2.10775'. [ 1205.041647][T11384] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10777'. [ 1205.051612][T11385] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10777'. [ 1205.165634][T11381] can: request_module (can-proto-0) failed. [ 1205.330274][T11399] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10781'. [ 1205.480115][T11413] netlink: 'syz.2.10784': attribute type 3 has an invalid length. [ 1205.511335][T11413] netlink: 'syz.2.10784': attribute type 3 has an invalid length. [ 1205.539950][T11413] netlink: 'syz.2.10784': attribute type 3 has an invalid length. [ 1205.583024][T11417] netlink: 'syz.2.10784': attribute type 1 has an invalid length. [ 1205.613286][T11413] netlink: 'syz.2.10784': attribute type 3 has an invalid length. [ 1205.653571][T11417] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10784'. [ 1205.680305][T11413] netlink: 'syz.2.10784': attribute type 3 has an invalid length. [ 1205.681249][T11406] netlink: 5 bytes leftover after parsing attributes in process `syz.2.10784'. [ 1205.696545][T11413] netlink: 'syz.2.10784': attribute type 3 has an invalid length. [ 1205.708988][T11422] netlink: 44 bytes leftover after parsing attributes in process `syz.4.10788'. [ 1205.731694][T11413] netlink: 'syz.2.10784': attribute type 3 has an invalid length. [ 1205.767359][T11406] 0{X: renamed from gretap0 [ 1205.788830][T11406] 0{X: left promiscuous mode [ 1205.800119][T11406] 0{X: entered allmulticast mode [ 1205.823509][T11406] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 1206.063883][T11440] syzkaller0: entered promiscuous mode [ 1206.075119][T11440] syzkaller0: entered allmulticast mode [ 1206.230502][T11439] xt_CT: No such helper "pptp" [ 1206.279580][T11450] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10796'. [ 1206.388965][T11454] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10797'. [ 1206.399636][T11459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10796'. [ 1206.419705][T11459] macsec1: entered promiscuous mode [ 1206.425078][T11459] macsec1: entered allmulticast mode [ 1206.470393][T11462] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1206.678301][T11466] team0: Port device geneve0 added [ 1206.827920][T11471] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1207.099708][T11495] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 1207.584505][T11527] validate_nla: 42 callbacks suppressed [ 1207.584527][T11527] netlink: 'syz.0.10817': attribute type 5 has an invalid length. [ 1207.824376][T11526] syzkaller0: entered promiscuous mode [ 1207.846632][T11526] syzkaller0: entered allmulticast mode [ 1207.914542][T11541] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1208.068844][T11547] xt_l2tp: wrong L2TP version: 0 [ 1208.347496][T11560] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 1208.407747][T11562] openvswitch: netlink: Flow key attr not present in new flow. [ 1208.976804][T11585] netlink: 'syz.1.10833': attribute type 1 has an invalid length. [ 1209.608364][T11622] netlink: 'syz.2.10848': attribute type 7 has an invalid length. [ 1209.939663][T11635] netlink: 'syz.1.10852': attribute type 39 has an invalid length. [ 1210.019319][T11637] __nla_validate_parse: 20 callbacks suppressed [ 1210.019354][T11637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10853'. [ 1210.466302][ T5852] Bluetooth: hci5: command 0x040f tx timeout [ 1210.491034][T11667] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1210.745750][T11675] netlink: 'syz.4.10864': attribute type 10 has an invalid length. [ 1210.771314][T11678] netlink: 'syz.1.10865': attribute type 1 has an invalid length. [ 1210.772670][T11675] netlink: 228 bytes leftover after parsing attributes in process `syz.4.10864'. [ 1210.922977][T11678] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1210.974418][T11678] netlink: 'syz.1.10865': attribute type 10 has an invalid length. [ 1210.985967][T11689] netlink: 'syz.2.10869': attribute type 1 has an invalid length. [ 1211.010592][T11678] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10865'. [ 1211.045950][T11685] bond4: (slave veth5): Enslaving as an active interface with a down link [ 1211.189008][T11689] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1211.250097][T11694] bond4: (slave geneve2): making interface the new active one [ 1211.271059][T11694] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 1211.358834][T11707] netlink: 'syz.1.10875': attribute type 2 has an invalid length. [ 1211.393836][T11707] 9: entered promiscuous mode [ 1211.533330][T11719] IPv6: sit3: Disabled Multicast RS [ 1211.612413][T11730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10880'. [ 1211.849848][T11739] netlink: 'syz.4.10883': attribute type 12 has an invalid length. [ 1212.071195][T11753] netlink: 256 bytes leftover after parsing attributes in process `syz.1.10886'. [ 1212.175312][T11756] mac80211_hwsim hwsim88 : renamed from wlan1 (while UP) [ 1212.275245][T11765] netlink: 5468 bytes leftover after parsing attributes in process `syz.3.10891'. [ 1212.615270][T11792] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10898'. [ 1212.726702][T11797] netlink: 'syz.3.10899': attribute type 1 has an invalid length. [ 1212.818541][T11795] ip6tnl2: entered promiscuous mode [ 1212.824083][T11795] ip6tnl2: entered allmulticast mode [ 1212.875275][T11800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10900'. [ 1212.982206][T11812] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10903'. [ 1213.101436][T11800] bond8: option xmit_hash_policy: invalid value (64) [ 1213.163051][T11800] bond8 (unregistering): Released all slaves [ 1213.249728][T11810] syzkaller1: entered promiscuous mode [ 1213.287255][T11810] syzkaller1: entered allmulticast mode [ 1213.307361][T11817] : entered promiscuous mode [ 1213.646826][T11848] tipc: Enabling of bearer rejected, failed to enable media [ 1213.705219][T11844] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10909'. [ 1215.291205][T11929] xt_l2tp: wrong L2TP version: 0 [ 1215.562160][T11937] team0 (unregistering): Port device team_slave_0 removed [ 1215.585212][T11948] __nla_validate_parse: 14 callbacks suppressed [ 1215.598896][T11937] team0 (unregistering): Port device team_slave_1 removed [ 1215.607947][T11948] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.10939'. [ 1215.634654][T11937] team0 (unregistering): Port device 0! removed [ 1215.658593][T11937] team0 (unregistering): Port device geneve0 removed [ 1215.676215][T11953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10940'. [ 1215.704012][T11953] netlink: 'syz.2.10940': attribute type 8 has an invalid length. [ 1216.485884][T12005] wlan0 speed is unknown, defaulting to 1000 [ 1216.492907][T12008] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10955'. [ 1216.517141][T12004] wlan0 speed is unknown, defaulting to 1000 [ 1216.884766][T12024] batadv1: entered allmulticast mode [ 1217.078001][T12028] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10963'. [ 1217.103783][T12028] tc_dump_action: action bad kind [ 1217.126811][T12033] netlink: 696 bytes leftover after parsing attributes in process `syz.2.10964'. [ 1217.174561][T12037] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1217.257792][T12043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10967'. [ 1217.283956][T12046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10968'. [ 1217.324774][ T7621] IPVS: starting estimator thread 0... [ 1217.376300][T12043] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10967'. [ 1217.420649][T12051] IPVS: using max 24 ests per chain, 57600 per kthread [ 1217.449113][T12056] syzkaller0: entered promiscuous mode [ 1217.496661][T12056] syzkaller0: entered allmulticast mode [ 1217.602212][T12065] dvmrp0: entered allmulticast mode [ 1217.619660][T12070] netlink: 'syz.2.10976': attribute type 21 has an invalid length. [ 1217.664324][T12070] bond5: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 1217.685658][T12070] bond5 (unregistering): Released all slaves [ 1217.993309][T12086] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10980'. [ 1218.044960][T12089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1218.069611][T12089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1218.132503][T12089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1218.255632][T12102] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 1218.411083][T12111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10988'. [ 1218.595366][T12127] mac80211_hwsim hwsim111 syzkaller0: left promiscuous mode [ 1218.603517][T12127] mac80211_hwsim hwsim111 syzkaller0: left allmulticast mode [ 1218.718373][T12137] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1218.860863][T12141] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1219.412323][T12170] netlink: 'syz.2.11003': attribute type 64 has an invalid length. [ 1219.438614][T12170] netlink: 'syz.2.11003': attribute type 64 has an invalid length. [ 1219.481084][T12178] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 1219.539392][T12182] openvswitch: netlink: EtherType 0 is less than min 600 [ 1219.641410][T12187] xt_hashlimit: size too large, truncated to 1048576 [ 1220.160522][T12213] syzkaller0: entered promiscuous mode [ 1220.166344][T12213] syzkaller0: entered allmulticast mode [ 1220.647078][T12247] delete_channel: no stack [ 1220.987008][T12266] __nla_validate_parse: 7 callbacks suppressed [ 1220.987033][T12266] netlink: 48 bytes leftover after parsing attributes in process `syz.3.11029'. [ 1221.172890][T12275] netlink: 'syz.2.11031': attribute type 1 has an invalid length. [ 1221.226257][T12275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11031'. [ 1221.320947][T12281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11033'. [ 1221.561039][T12305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11041'. [ 1221.587822][T12305] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11041'. [ 1221.865080][T12324] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1221.932231][T12330] netlink: 'syz.1.11049': attribute type 11 has an invalid length. [ 1221.994522][T12324] vlan2: entered allmulticast mode [ 1222.000681][T12324] hsr0: entered allmulticast mode [ 1222.007234][T12324] hsr_slave_0: entered allmulticast mode [ 1222.009110][T12333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11045'. [ 1222.015457][T12324] hsr_slave_1: entered allmulticast mode [ 1222.030236][T12322] netlink: 'syz.4.11046': attribute type 2 has an invalid length. [ 1222.043413][T12336] netlink: 536 bytes leftover after parsing attributes in process `syz.1.11049'. [ 1222.068952][T12324] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11045'. [ 1222.135070][T12341] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11051'. [ 1222.153055][T12324] bond7: Invalid ad_actor_system MAC address. [ 1222.159645][T12324] bond7: option ad_actor_system: invalid value (1) [ 1222.169593][T12324] bond7 (unregistering): Released all slaves [ 1222.334107][T12351] x_tables: duplicate underflow at hook 1 [ 1222.551876][T12373] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11058'. [ 1222.810638][T12387] team0: left allmulticast mode [ 1222.817245][T12387] team_slave_0: left allmulticast mode [ 1222.822992][T12387] team_slave_1: left allmulticast mode [ 1222.832749][T12387] dummy0: left allmulticast mode [ 1222.841228][T12387] bridge0: port 3(team0) entered disabled state [ 1222.885944][T12391] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 1222.930725][T12387] dummy0: left promiscuous mode [ 1222.938476][T12387] team0: Port device dummy0 removed [ 1222.944301][T12387] veth0_to_bridge: left allmulticast mode [ 1222.950680][T12387] veth0_to_bridge: left promiscuous mode [ 1222.958427][T12387] bridge0: port 4(veth0_to_bridge) entered disabled state [ 1222.988342][T12387] bridge_slave_0: left allmulticast mode [ 1222.994205][T12387] bridge_slave_0: left promiscuous mode [ 1223.000891][T12387] bridge0: port 1(bridge_slave_0) entered disabled state [ 1223.019558][T12387] bridge_slave_1: left allmulticast mode [ 1223.025280][T12387] bridge_slave_1: left promiscuous mode [ 1223.032295][T12387] bridge0: port 2(bridge_slave_1) entered disabled state [ 1223.052314][T12387] bond0: (slave bond_slave_0): Releasing backup interface [ 1223.063486][T12387] bond0: (slave bond_slave_1): Releasing backup interface [ 1223.072284][T12387] team_slave_0: left promiscuous mode [ 1223.079167][T12387] team0: Port device team_slave_0 removed [ 1223.086070][T12387] team_slave_1: left promiscuous mode [ 1223.102572][T12387] team0: Port device team_slave_1 removed [ 1223.109802][T12387] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1223.247162][T12404] netlink: 'syz.1.11067': attribute type 1 has an invalid length. [ 1223.340956][T12404] vlan1: entered allmulticast mode [ 1223.355253][T12404] hsr0: entered allmulticast mode [ 1223.378200][T12404] hsr_slave_0: entered allmulticast mode [ 1223.383999][T12404] hsr_slave_1: entered allmulticast mode [ 1223.401771][T12411] netlink: 'syz.2.11069': attribute type 3 has an invalid length. [ 1223.467582][T12413] syzkaller0: entered promiscuous mode [ 1223.473172][T12413] syzkaller0: entered allmulticast mode [ 1223.872613][T12442] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1223.989829][T12454] sock: sock_set_timeout: `syz.4.11084' (pid 12454) tries to set negative timeout [ 1224.017463][T12454] sock: sock_set_timeout: `syz.4.11084' (pid 12454) tries to set negative timeout [ 1224.063278][T12454] sock: sock_set_timeout: `syz.4.11084' (pid 12454) tries to set negative timeout [ 1224.088728][T12454] sock: sock_set_timeout: `syz.4.11084' (pid 12454) tries to set negative timeout [ 1224.099885][T12454] sock: sock_set_timeout: `syz.4.11084' (pid 12454) tries to set negative timeout [ 1224.111656][T12454] sock: sock_set_timeout: `syz.4.11084' (pid 12454) tries to set negative timeout [ 1224.137228][T12454] sock: sock_set_timeout: `syz.4.11084' (pid 12454) tries to set negative timeout [ 1224.161292][T12454] sock: sock_set_timeout: `syz.4.11084' (pid 12454) tries to set negative timeout [ 1224.167999][T12468] netlink: 'syz.3.11088': attribute type 3 has an invalid length. [ 1224.277747][T12476] netlink: 'syz.0.11089': attribute type 2 has an invalid length. [ 1224.968738][T12520] netlink: 'syz.3.11108': attribute type 15 has an invalid length. [ 1224.973226][T12523] netlink: 'syz.2.11106': attribute type 1 has an invalid length. [ 1224.992354][T10343] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 22528 - 0 [ 1224.992496][T12520] netlink: 'syz.3.11108': attribute type 15 has an invalid length. [ 1225.054421][T10343] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 22528 - 0 [ 1225.064543][T10343] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 22528 - 0 [ 1225.095327][T10343] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 22528 - 0 [ 1225.142026][T12528] netlink: 'syz.1.11109': attribute type 1 has an invalid length. [ 1225.295512][T12535] tipc: Enabled bearer , priority 0 [ 1225.327930][T12534] netlink: 'syz.2.11111': attribute type 10 has an invalid length. [ 1225.339361][T12534] bridge0: port 1(team0) entered blocking state [ 1225.345706][T12534] bridge0: port 1(team0) entered disabled state [ 1225.386575][T12534] team0: entered allmulticast mode [ 1225.394749][T12534] team0: entered promiscuous mode [ 1225.543066][T12552] netlink: 'syz.2.11117': attribute type 3 has an invalid length. [ 1225.586429][ T5852] Bluetooth: hci4: command 0x0405 tx timeout [ 1225.950699][T12567] bridge0: port 2(bridge_slave_1) entered disabled state [ 1226.126086][T12567] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1226.302876][T12567] bond5: left allmulticast mode [ 1226.308869][T12567] bond5: left promiscuous mode [ 1226.570896][T11083] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1226.590112][T11083] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 1226.606814][T11083] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1226.615821][T11083] netdevsim netdevsim4 eth0: unset [1, 2] type 2 family 0 port 20004 - 0 [ 1226.635675][T11083] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1226.638361][T12606] __nla_validate_parse: 26 callbacks suppressed [ 1226.638381][T12606] netlink: 52 bytes leftover after parsing attributes in process `syz.1.11134'. [ 1226.644426][T11083] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 1226.699243][T11083] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1226.713781][T11083] netdevsim netdevsim4 eth1: unset [1, 2] type 2 family 0 port 20004 - 0 [ 1226.727265][T12601] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1226.729195][T12597] netlink: 80 bytes leftover after parsing attributes in process `syz.4.11131'. [ 1226.746054][T12597] netlink: 80 bytes leftover after parsing attributes in process `syz.4.11131'. [ 1226.757274][T11083] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1226.787422][T12597] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11131'. [ 1226.803931][T11083] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 1226.829317][T11083] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1226.849307][T11083] netdevsim netdevsim4 eth2: unset [1, 2] type 2 family 0 port 20004 - 0 [ 1226.870703][T11083] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1226.883076][T11083] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 1226.893594][T11083] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1226.902777][T11083] netdevsim netdevsim4 eth3: unset [1, 2] type 2 family 0 port 20004 - 0 [ 1269.649025][T12624] syzkaller0: entered promiscuous mode [ 1269.655388][T12624] syzkaller0: entered allmulticast mode [ 1270.060054][T12651] tunl0: entered promiscuous mode [ 1270.079586][T12651] gre0: left allmulticast mode [ 1270.082862][T12655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11148'. [ 1270.142091][T12651] gretap0: entered promiscuous mode [ 1270.250100][T12651] erspan0: entered promiscuous mode [ 1270.278581][T12672] netlink: 'syz.4.11151': attribute type 1 has an invalid length. [ 1270.344145][T12651] ip_vti0: entered promiscuous mode [ 1270.465107][T12672] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1270.507707][T12677] bond8: (slave veth5): Enslaving as an active interface with a down link [ 1270.573865][T12680] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1270.582525][T12680] bond8: (slave batadv2): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1270.632393][T12684] netlink: 'syz.1.11153': attribute type 1 has an invalid length. [ 1270.937428][T12705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11160'. [ 1271.259280][T12717] netlink: 220 bytes leftover after parsing attributes in process `syz.1.11164'. [ 1271.470650][T12730] netlink: 'syz.1.11168': attribute type 4 has an invalid length. [ 1271.513546][T12730] netlink: 'syz.1.11168': attribute type 4 has an invalid length. [ 1271.567343][T12733] netlink: 'syz.2.11169': attribute type 1 has an invalid length. [ 1271.744681][T12733] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1271.898790][T12747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11172'. [ 1272.005196][T12755] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11173'. [ 1272.092484][T12761] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11177'. [ 1272.125589][T12764] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11177'. [ 1272.444494][T12788] sctp: [Deprecated]: syz.3.11186 (pid 12788) Use of int in max_burst socket option deprecated. [ 1272.444494][T12788] Use struct sctp_assoc_value instead [ 1272.481486][T12787] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11184'. [ 1272.528468][T12797] netlink: 'syz.4.11189': attribute type 2 has an invalid length. [ 1272.631911][T12799] nbd: socks must be embedded in a SOCK_ITEM attr [ 1272.689952][T12803] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11191'. [ 1272.857617][T12812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11194'. [ 1272.887582][T12814] netlink: 'syz.3.11196': attribute type 1 has an invalid length. [ 1273.017230][T12820] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1273.481755][T12848] tipc: Enabled bearer , priority 0 [ 1273.512111][T12844] wlan0 speed is unknown, defaulting to 1000 [ 1273.512421][T12852] syzkaller0: entered promiscuous mode [ 1273.561834][T12852] syzkaller0: entered allmulticast mode [ 1273.631018][T12848] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 1273.707977][T12848] tipc: Resetting bearer [ 1273.715436][T12848] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1273.785138][T12846] tipc: Resetting bearer [ 1273.805942][T12846] tipc: Disabling bearer [ 1273.976349][T12862] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1274.303366][T12879] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1275.258737][T12925] __nla_validate_parse: 8 callbacks suppressed [ 1275.258763][T12925] netlink: 48 bytes leftover after parsing attributes in process `syz.1.11228'. [ 1275.309647][T12935] gre0: entered allmulticast mode [ 1275.553595][T12945] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11231'. [ 1276.005676][T12962] wlan0 speed is unknown, defaulting to 1000 [ 1276.673081][T12996] netlink: 108 bytes leftover after parsing attributes in process `syz.4.11246'. [ 1276.723837][T12999] delete_channel: no stack [ 1276.747291][T12996] netlink: 216 bytes leftover after parsing attributes in process `syz.4.11246'. [ 1276.779316][T12999] netlink: 216 bytes leftover after parsing attributes in process `syz.4.11246'. [ 1276.800676][T13000] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 1276.990753][T13016] netlink: 'syz.4.11251': attribute type 2 has an invalid length. [ 1277.052432][T13019] bridge0: port 1(batadv2) entered blocking state [ 1277.064887][T13019] bridge0: port 1(batadv2) entered disabled state [ 1277.083063][T13019] batadv2: entered allmulticast mode [ 1277.099248][T13019] batadv2: entered promiscuous mode [ 1277.469935][T13043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11257'. [ 1277.532188][T13039] syzkaller0: entered promiscuous mode [ 1277.539510][T13039] syzkaller0: entered allmulticast mode [ 1277.547246][T10346] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 1277.556783][T10346] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 1277.874847][T13065] netlink: 'syz.3.11264': attribute type 9 has an invalid length. [ 1277.886037][T13065] netlink: 'syz.3.11264': attribute type 11 has an invalid length. [ 1277.909363][T13065] netlink: 'syz.3.11264': attribute type 12 has an invalid length. [ 1277.924691][T13065] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.11264'. [ 1277.946007][T13065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11264'. [ 1277.997566][T13080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11261'. [ 1278.187866][T13088] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11267'. [ 1281.007397][T13061] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1281.034993][T13080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11261'. [ 1281.308804][T13111] netlink: 120 bytes leftover after parsing attributes in process `syz.2.11271'. [ 1281.331236][T13113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11274'. [ 1281.341963][T13113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11274'. [ 1281.358873][T13111] netlink: 'syz.2.11271': attribute type 1 has an invalid length. [ 1281.390112][T13111] netlink: 64 bytes leftover after parsing attributes in process `syz.2.11271'. [ 1281.412012][T13118] openvswitch: netlink: Key type 6403 is out of range max 32 [ 1281.412561][T13117] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11275'. [ 1281.432379][T13118] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11273'. [ 1281.464918][T13117] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11275'. [ 1281.593768][T13123] netlink: 'syz.2.11276': attribute type 39 has an invalid length. [ 1281.738786][T13132] mac80211_hwsim hwsim111 syzkaller0: entered promiscuous mode [ 1281.757976][T13132] mac80211_hwsim hwsim111 syzkaller0: entered allmulticast mode [ 1281.835022][T13138] netlink: 'syz.2.11282': attribute type 1 has an invalid length. [ 1281.910766][T13135] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1281.928966][T13132] netlink: 'syz.4.11280': attribute type 1 has an invalid length. [ 1281.945959][T13132] netlink: 'syz.4.11280': attribute type 1 has an invalid length. [ 1282.117959][T13149] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1282.214356][T13160] netlink: 'syz.1.11286': attribute type 1 has an invalid length. [ 1282.351724][T13160] bond6: entered promiscuous mode [ 1282.357506][T13160] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1282.365318][T13163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11290'. [ 1282.379013][T13163] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11290'. [ 1282.493562][T13160] bond6: (slave bridge4): making interface the new active one [ 1282.503772][T13160] bridge4: entered promiscuous mode [ 1282.511595][T13160] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 1282.604754][T13183] netlink: 'syz.2.11295': attribute type 11 has an invalid length. [ 1282.812480][T13194] x_tables: unsorted entry at hook 3 [ 1283.073031][T13214] batadv2: entered allmulticast mode [ 1283.111701][T13215] netlink: 'syz.2.11306': attribute type 11 has an invalid length. [ 1283.322924][T13228] bridge0: port 2(wlan0) entered blocking state [ 1283.334809][T13228] bridge0: port 2(wlan0) entered disabled state [ 1283.345067][T13228] mac80211_hwsim hwsim100 wlan0: entered allmulticast mode [ 1283.370720][T13228] mac80211_hwsim hwsim100 wlan0: entered promiscuous mode [ 1283.392151][T13227] netlink: 'syz.1.11312': attribute type 3 has an invalid length. [ 1283.460091][T13245] netlink: 'syz.2.11313': attribute type 1 has an invalid length. [ 1283.809233][T13259] syzkaller1: entered promiscuous mode [ 1283.814791][T13259] syzkaller1: entered allmulticast mode [ 1283.937374][T13266] netlink: 'syz.3.11321': attribute type 12 has an invalid length. [ 1283.989581][ T5852] Bluetooth: hci4: command 0x0405 tx timeout [ 1283.990364][T13270] xt_l2tp: invalid flags combination: 8 [ 1284.625354][T13312] tipc: Enabling of bearer rejected, failed to enable media [ 1284.856013][T13331] tipc: Enabled bearer , priority 0 [ 1285.287888][T13376] netlink: 'syz.4.11346': attribute type 4 has an invalid length. [ 1285.977969][ T7621] tipc: Node number set to 1 [ 1286.042621][T13415] __nla_validate_parse: 16 callbacks suppressed [ 1286.042647][T13415] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11360'. [ 1286.111521][T13415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11360'. [ 1286.168992][T13427] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.11364'. [ 1286.194927][T13428] ip6gre4: entered allmulticast mode [ 1286.498238][T13443] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11369'. [ 1286.712442][T13456] bond7: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 1286.728949][T13456] bond7 (unregistering): Released all slaves [ 1286.860676][T13469] netlink: 'syz.2.11376': attribute type 3 has an invalid length. [ 1287.175120][T13477] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11376'. [ 1287.705285][T13490] netlink: 44 bytes leftover after parsing attributes in process `syz.0.11377'. [ 1287.740610][T13492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11378'. [ 1287.762089][T13492] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11378'. [ 1287.800196][T13492] netlink: 'syz.3.11378': attribute type 6 has an invalid length. [ 1287.840138][T13492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11378'. [ 1287.847452][T13498] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11382'. [ 1287.867699][T13492] netlink: 'syz.3.11378': attribute type 6 has an invalid length. [ 1287.887712][T13504] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1287.989438][T13506] sit0: entered promiscuous mode [ 1288.531966][T13516] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20000 [ 1289.210204][T13547] syzkaller1: entered promiscuous mode [ 1289.231757][T13547] syzkaller1: entered allmulticast mode [ 1289.428287][T13571] netlink: 'syz.1.11400': attribute type 2 has an invalid length. [ 1289.504947][T13571] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1289.593996][T13580] netlink: 'syz.1.11404': attribute type 10 has an invalid length. [ 1289.610828][T13580] geneve0: entered promiscuous mode [ 1289.618448][T13580] team0: Port device geneve0 added [ 1289.763156][T13590] xt_hashlimit: size too large, truncated to 1048576 [ 1290.337735][T13623] IPv6: sit2: Disabled Multicast RS [ 1290.352058][T13623] sit2: entered allmulticast mode [ 1290.527971][T13642] netlink: 'syz.1.11420': attribute type 32 has an invalid length. [ 1291.167326][T13638] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1291.212570][T13653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1291.445275][T13676] __nla_validate_parse: 10 callbacks suppressed [ 1291.445299][T13676] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11424'. [ 1291.477477][T13676] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11424'. [ 1291.635580][T13690] netlink: 'syz.1.11428': attribute type 1 has an invalid length. [ 1291.644479][T13690] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11428'. [ 1291.657004][T13690] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11428'. [ 1291.666827][T13690] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11428'. [ 1291.675808][T13690] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11428'. [ 1291.686059][T13690] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11428'. [ 1291.714912][T13690] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11428'. [ 1291.727283][T13690] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11428'. [ 1291.920661][T13699] netlink: 96 bytes leftover after parsing attributes in process `syz.0.11433'. [ 1292.431188][T13736] wlan0 speed is unknown, defaulting to 1000 [ 1292.500437][T13747] netlink: 'syz.4.11440': attribute type 1 has an invalid length. [ 1292.510370][T13748] lo: entered promiscuous mode [ 1292.518741][T13748] tunl0: entered promiscuous mode [ 1292.529925][T13748] gre0: entered promiscuous mode [ 1292.565840][T13748] 0{X: entered promiscuous mode [ 1292.571371][T13748] 0{X: left allmulticast mode [ 1292.711441][T13748] erspan0: entered promiscuous mode [ 1292.729297][T13748] ip_vti0: entered promiscuous mode [ 1293.501040][T13789] syzkaller0: entered promiscuous mode [ 1293.508559][T13789] syzkaller0: entered allmulticast mode [ 1293.523895][T10344] syzkaller0: tun_net_xmit 70 [ 1293.530531][T13789] syzkaller0: tun_net_xmit 14 [ 1293.885056][T13801] netlink: 'syz.4.11461': attribute type 2 has an invalid length. [ 1294.065931][T13816] netlink: 'syz.3.11467': attribute type 1 has an invalid length. [ 1294.292810][T13828] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1294.303260][T13821] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 1294.843254][T13859] netlink: 'syz.1.11476': attribute type 1 has an invalid length. [ 1294.854304][T13856] x_tables: duplicate underflow at hook 1 [ 1294.890331][T13859] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1295.181240][T13890] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1295.197517][T13881] dvmrp6: entered allmulticast mode [ 1295.369882][T13903] netlink: 'syz.2.11490': attribute type 10 has an invalid length. [ 1295.413486][T13903] bridge0: port 1(team0) entered disabled state [ 1295.424509][T13903] team0: left allmulticast mode [ 1295.424803][T13907] x_tables: duplicate underflow at hook 2 [ 1295.432922][T13903] team0: left promiscuous mode [ 1295.442694][T13903] bridge0: port 1(team0) entered disabled state [ 1295.457317][T13903] 8021q: adding VLAN 0 to HW filter on device team0 [ 1295.467324][T13903] bond0: (slave team0): Enslaving as an active interface with an up link [ 1295.904224][T13921] tipc: Disabling bearer [ 1295.979516][T13921] bond1: (slave vlan1): Releasing backup interface [ 1296.061662][T13926] wlan0 speed is unknown, defaulting to 1000 [ 1296.217238][T13940] netlink: 'syz.2.11503': attribute type 1 has an invalid length. [ 1296.237394][T13940] netlink: 'syz.2.11503': attribute type 4 has an invalid length. [ 1296.247340][T13940] netlink: 'syz.2.11503': attribute type 1 has an invalid length. [ 1296.301632][T13940] netlink: 'syz.2.11503': attribute type 4 has an invalid length. [ 1296.409246][T13937] bond8: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 1296.421916][T13937] bond8 (unregistering): Released all slaves [ 1296.604907][T13956] __nla_validate_parse: 23 callbacks suppressed [ 1296.604933][T13956] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.11507'. [ 1296.879822][T13971] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11511'. [ 1296.880499][T13972] IPVS: set_ctl: invalid protocol: 143 224.0.0.1:20001 [ 1296.974438][T13969] wlan0 speed is unknown, defaulting to 1000 [ 1297.014185][T13977] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11512'. [ 1297.460595][T13988] xt_CT: No such helper "snmp_trap" [ 1297.882178][T14022] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11523'. [ 1297.939921][T14019] tipc: Resetting bearer [ 1297.969618][T14019] syz_tun: left allmulticast mode [ 1297.974913][T14019] syz_tun: left promiscuous mode [ 1298.014717][T14019] bridge0: port 1(syz_tun) entered disabled state [ 1298.077516][T14019] bond0: (slave bond_slave_0): Releasing backup interface [ 1298.132087][T14019] bond0: (slave bond_slave_1): Releasing backup interface [ 1298.161654][T14019] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1298.184176][T14019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1298.212338][T14019] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1298.230372][T14019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1298.252936][T14019] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1298.263931][T14039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11529'. [ 1298.457481][T14045] netlink: 'syz.4.11530': attribute type 11 has an invalid length. [ 1298.465460][T14045] netlink: 199828 bytes leftover after parsing attributes in process `syz.4.11530'. [ 1298.512681][T14048] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11532'. [ 1298.934272][T14066] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11535'. [ 1298.988558][T14075] syzkaller0: entered promiscuous mode [ 1298.994092][T14075] syzkaller0: entered allmulticast mode [ 1299.504544][T14090] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11540'. [ 1299.964344][T14127] xt_nat: multiple ranges no longer supported [ 1300.105323][T14132] netlink: 'syz.3.11551': attribute type 3 has an invalid length. [ 1300.130324][T14132] netlink: 'syz.3.11551': attribute type 1 has an invalid length. [ 1300.178310][T14132] netlink: 224 bytes leftover after parsing attributes in process `syz.3.11551'. [ 1300.573353][T14153] tipc: Enabling of bearer rejected, failed to enable media [ 1300.791995][T14163] gre3: entered promiscuous mode [ 1300.816806][T14163] gre3: entered allmulticast mode [ 1300.933348][T14178] bridge0: port 3(batadv1) entered blocking state [ 1300.966536][T14178] bridge0: port 3(batadv1) entered disabled state [ 1300.977179][T14178] batadv1: entered allmulticast mode [ 1300.984915][T14178] batadv1: entered promiscuous mode [ 1301.117455][T14187] syzkaller0: entered promiscuous mode [ 1301.136384][T14187] syzkaller0: entered allmulticast mode [ 1301.376855][T14204] syzkaller0: entered promiscuous mode [ 1301.382736][T14204] syzkaller0: entered allmulticast mode [ 1301.406446][T27711] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 1301.415947][T27711] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 1301.440800][T14204] xfrm1: entered promiscuous mode [ 1301.458720][T14204] xfrm1: entered allmulticast mode [ 1301.688320][T14215] netlink: 'syz.3.11577': attribute type 1 has an invalid length. [ 1301.769552][T14215] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1301.834687][T14221] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1301.851053][T14221] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1301.887638][T14221] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 1301.955565][T14215] vlan3: entered allmulticast mode [ 1301.975732][T14215] bond8: entered allmulticast mode [ 1302.898552][T14273] pim6reg: entered allmulticast mode [ 1303.037823][T14280] __nla_validate_parse: 8 callbacks suppressed [ 1303.037845][T14280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11592'. [ 1303.216476][T14290] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11596'. [ 1303.236656][T14292] netlink: 248 bytes leftover after parsing attributes in process `syz.4.11595'. [ 1303.397389][T14305] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11599'. [ 1303.406252][T14310] syzkaller0: entered promiscuous mode [ 1303.412368][T14310] syzkaller0: entered allmulticast mode [ 1303.531440][T14305] team0: Port device team_slave_0 removed [ 1303.710526][T14325] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11604'. [ 1303.780194][T14328] netlink: 'syz.2.11604': attribute type 1 has an invalid length. [ 1303.871356][T14330] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11603'. [ 1303.882576][T14330] bridge_slave_0: left allmulticast mode [ 1303.889241][T14330] bridge_slave_0: left promiscuous mode [ 1303.895278][T14330] bridge0: port 1(bridge_slave_0) entered disabled state [ 1303.905995][T14330] bridge_slave_1: left allmulticast mode [ 1303.912386][T14330] bridge_slave_1: left promiscuous mode [ 1303.918865][T14330] bridge0: port 2(bridge_slave_1) entered disabled state [ 1303.930938][T14330] bond0: (slave bond_slave_0): Releasing backup interface [ 1303.940615][T14330] bond0: (slave bond_slave_1): Releasing backup interface [ 1303.952117][T14330] team0: Port device team_slave_1 removed [ 1303.959483][T14330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1303.968207][T14330] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1304.291557][T14339] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11605'. [ 1304.337464][T14340] sctp: [Deprecated]: syz.4.11607 (pid 14340) Use of int in max_burst socket option deprecated. [ 1304.337464][T14340] Use struct sctp_assoc_value instead [ 1304.411960][T14343] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11609'. [ 1304.445779][T14347] netlink: 'syz.0.11610': attribute type 58 has an invalid length. [ 1304.460995][T14347] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11610'. [ 1304.482471][T14343] bond6: (slave veth15): Enslaving as a backup interface with a down link [ 1304.532747][T14354] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11611'. [ 1304.615925][T14345] bond7: ARP target 1.0.0.0 is already present [ 1304.652059][T14345] bond7: option arp_ip_target: invalid value (1) [ 1304.662556][T14360] netlink: 'syz.3.11613': attribute type 1 has an invalid length. [ 1304.689643][T14345] bond7 (unregistering): Released all slaves [ 1304.825688][T14363] bond9 (unregistering): Released all slaves [ 1305.932550][T14421] dvmrp6: entered allmulticast mode [ 1306.571522][T14456] netlink: 'syz.1.11638': attribute type 1 has an invalid length. [ 1306.607019][T14456] xt_policy: output policy not valid in PREROUTING and INPUT [ 1306.727174][T14467] 8021q: VLANs not supported on ip6gre0 [ 1306.927286][T14483] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1306.982155][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 1307.103545][T14492] netlink: 'syz.1.11648': attribute type 11 has an invalid length. [ 1307.703030][T14523] xt_HMARK: spi-set and port-set can't be combined [ 1307.741138][T14527] openvswitch: netlink: IP tunnel dst address not specified [ 1308.005474][T14543] netlink: 'syz.1.11663': attribute type 1 has an invalid length. [ 1308.169135][T14557] __nla_validate_parse: 14 callbacks suppressed [ 1308.169158][T14557] netlink: 76 bytes leftover after parsing attributes in process `syz.3.11668'. [ 1308.225330][T14557] syzkaller0: entered promiscuous mode [ 1308.242224][T14557] syzkaller0: entered allmulticast mode [ 1308.298402][T14557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11668'. [ 1308.334678][T14570] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11670'. [ 1308.551059][T14576] vxcan1 speed is unknown, defaulting to 1000 [ 1308.595316][T14576] vxcan1 speed is unknown, defaulting to 1000 [ 1308.663868][T14576] vxcan1 speed is unknown, defaulting to 1000 [ 1308.695338][T14588] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11676'. [ 1308.779487][T14591] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11677'. [ 1308.882693][T14593] dvmrp0: entered allmulticast mode [ 1309.131491][T14612] ip6gre0: Master is either lo or non-ether device [ 1309.399708][T14576] infiniband syz2: set down [ 1309.404612][T29533] vxcan1 speed is unknown, defaulting to 1000 [ 1309.408314][T14625] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11686'. [ 1309.416147][T14576] infiniband syz2: added vxcan1 [ 1309.428544][T14627] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1309.443092][T14576] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 1309.462778][T14623] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1309.519004][T14576] infiniband syz2: Couldn't open port 1 [ 1309.604259][T14576] RDS/IB: syz2: added [ 1309.637076][T14576] smc: adding ib device syz2 with port count 1 [ 1309.656277][T14576] smc: ib device syz2 port 1 has no pnetid [ 1309.689481][T14638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11690'. [ 1309.736628][T14634] bond7: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 1309.758297][T14634] bond7 (unregistering): Released all slaves [ 1309.785500][T21809] vxcan1 speed is unknown, defaulting to 1000 [ 1309.786412][T14638] netlink: 'syz.4.11690': attribute type 1 has an invalid length. [ 1309.802465][T14638] netlink: 'syz.4.11690': attribute type 2 has an invalid length. [ 1309.842002][T14640] bridge5: entered promiscuous mode [ 1309.847782][T14640] bridge5: entered allmulticast mode [ 1309.855519][T14576] vxcan1 speed is unknown, defaulting to 1000 [ 1310.067050][T14650] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1310.365176][T14576] vxcan1 speed is unknown, defaulting to 1000 [ 1310.504846][T14670] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1310.555625][T14678] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11698'. [ 1310.929937][T14692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11703'. [ 1310.976918][T14576] vxcan1 speed is unknown, defaulting to 1000 [ 1311.310292][T14716] netlink: 56 bytes leftover after parsing attributes in process `syz.0.11708'. [ 1311.875835][T14576] vxcan1 speed is unknown, defaulting to 1000 [ 1311.918260][T14749] bridge_slave_0: default FDB implementation only supports local addresses [ 1311.932024][T14749] netlink: 'syz.2.11717': attribute type 12 has an invalid length. [ 1312.034387][T14753] sctp: [Deprecated]: syz.0.11720 (pid 14753) Use of int in maxseg socket option. [ 1312.034387][T14753] Use struct sctp_assoc_value instead [ 1312.229360][T14760] bridge: RTM_NEWNEIGH with invalid state 0x10 [ 1312.391903][T14576] vxcan1 speed is unknown, defaulting to 1000 [ 1312.679448][T14781] wlan0 speed is unknown, defaulting to 1000 [ 1312.940033][T14576] vxcan1 speed is unknown, defaulting to 1000 [ 1312.969514][T14795] bridge0: port 1(ipvlan4) entered blocking state [ 1312.981345][T14795] bridge0: port 1(ipvlan4) entered disabled state [ 1312.988961][T14795] ipvlan4: entered allmulticast mode [ 1312.995395][T14795] bridge0: entered allmulticast mode [ 1313.007727][T14795] ipvlan4: left allmulticast mode [ 1313.014419][T14795] bridge0: left allmulticast mode [ 1313.040539][T14799] netlink: 'syz.0.11736': attribute type 5 has an invalid length. [ 1313.151595][T14805] netlink: 'syz.0.11737': attribute type 1 has an invalid length. [ 1313.176359][T14806] netlink: 'syz.0.11737': attribute type 1 has an invalid length. [ 1313.215428][T14808] gtp0: entered promiscuous mode [ 1313.246203][T14808] gtp0: entered allmulticast mode [ 1313.353868][T14781] vxcan1 speed is unknown, defaulting to 1000 [ 1313.385506][T14812] __nla_validate_parse: 5 callbacks suppressed [ 1313.385529][T14812] netlink: 44 bytes leftover after parsing attributes in process `syz.0.11739'. [ 1313.404987][T14812] netlink: 44 bytes leftover after parsing attributes in process `syz.0.11739'. [ 1313.488000][T14814] smc: ib device syz2 ibport 2 applied user defined pnetid SYZ1 [ 1313.710414][T14819] openvswitch: netlink: IP tunnel dst address not specified [ 1313.828038][T14824] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1313.841620][T14824] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1313.851145][T14824] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1313.860602][T14824] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1313.870340][T14824] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1313.925432][T14822] wlan0 speed is unknown, defaulting to 1000 [ 1313.992808][T14576] vxcan1 speed is unknown, defaulting to 1000 [ 1314.307412][ T5838] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1314.409502][T14839] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11750'. [ 1314.452273][T14576] vxcan1 speed is unknown, defaulting to 1000 [ 1314.600855][T14846] netlink: 'syz.3.11753': attribute type 3 has an invalid length. [ 1314.823970][T14860] netlink: 31 bytes leftover after parsing attributes in process `syz.3.11756'. [ 1314.827079][T14822] vxcan1 speed is unknown, defaulting to 1000 [ 1315.400350][T14882] netlink: 'syz.1.11764': attribute type 1 has an invalid length. [ 1315.433892][T14882] netlink: 'syz.1.11764': attribute type 1 has an invalid length. [ 1315.697798][T14895] netlink: 'syz.2.11769': attribute type 2 has an invalid length. [ 1315.774082][T14898] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11769'. [ 1315.792567][T14895] 9: entered promiscuous mode [ 1315.883199][T14822] chnl_net:caif_netlink_parms(): no params data found [ 1315.915163][ T5838] Bluetooth: hci3: command tx timeout [ 1316.389720][T14822] bridge0: port 1(bridge_slave_0) entered blocking state [ 1316.402926][T14822] bridge0: port 1(bridge_slave_0) entered disabled state [ 1316.413605][T14822] bridge_slave_0: entered allmulticast mode [ 1316.424242][T14822] bridge_slave_0: entered promiscuous mode [ 1316.435963][T14822] bridge0: port 2(bridge_slave_1) entered blocking state [ 1316.445128][T14822] bridge0: port 2(bridge_slave_1) entered disabled state [ 1316.454585][T14822] bridge_slave_1: entered allmulticast mode [ 1316.475693][T14822] bridge_slave_1: entered promiscuous mode [ 1316.710939][T14822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1316.750181][T14822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1316.939189][T14822] team0: Port device team_slave_0 added [ 1316.978541][T14822] team0: Port device team_slave_1 added [ 1317.029953][T14946] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1317.052899][T14948] netlink: 'syz.2.11780': attribute type 21 has an invalid length. [ 1317.069573][T14822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1317.077592][T14822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1317.126731][T14952] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11779'. [ 1317.126788][T14822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1317.137180][T14952] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1317.155680][T14948] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11780'. [ 1317.169624][T14822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1317.170827][T14952] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1317.176976][T14822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1317.177017][T14822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1317.351465][T14822] hsr_slave_0: entered promiscuous mode [ 1317.358295][T14822] hsr_slave_1: entered promiscuous mode [ 1317.365355][T14822] debugfs: 'hsr0' already exists in 'hsr' [ 1317.371384][T14822] Cannot create hsr debugfs directory [ 1317.377408][T14962] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11784'. [ 1317.638800][T14962] wlan0 speed is unknown, defaulting to 1000 [ 1317.703155][T14962] vxcan1 speed is unknown, defaulting to 1000 [ 1317.982408][T14822] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1317.986484][ T5838] Bluetooth: hci3: command tx timeout [ 1317.993614][T14822] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1318.012081][T14822] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1318.024311][T14822] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 1318.144473][T14990] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11789'. [ 1318.241803][T14822] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1318.274322][T14822] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1318.301762][T14822] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1318.320919][T14822] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 1318.440030][T14822] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1318.473381][T14822] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1318.483806][T14822] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1318.494779][T14822] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 1318.512079][T15006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11794'. [ 1318.573748][T15010] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11796'. [ 1318.595586][T15010] netlink: 'syz.1.11796': attribute type 1 has an invalid length. [ 1318.604695][T15010] netlink: 'syz.1.11796': attribute type 1 has an invalid length. [ 1318.613402][T15010] netlink: 68 bytes leftover after parsing attributes in process `syz.1.11796'. [ 1318.633203][T14822] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1318.645997][T14822] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1318.665265][T14822] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1318.689533][T14822] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 1319.369892][T14822] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1319.426062][T14822] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1319.449126][T14822] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1319.472505][T14822] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1319.489291][T15034] netlink: 'syz.3.11803': attribute type 1 has an invalid length. [ 1319.528099][T15034] netlink: 224 bytes leftover after parsing attributes in process `syz.3.11803'. [ 1319.700139][T15047] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11804'. [ 1319.710343][T15047] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11804'. [ 1319.732365][T15047] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11804'. [ 1319.753144][T14822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1319.761830][T15047] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11804'. [ 1319.778387][T15047] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11804'. [ 1319.805916][T14822] 8021q: adding VLAN 0 to HW filter on device team0 [ 1319.825341][T15047] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11804'. [ 1319.854702][ T3868] bridge0: port 1(bridge_slave_0) entered blocking state [ 1319.861999][ T3868] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1319.884987][T10343] bridge0: port 2(bridge_slave_1) entered blocking state [ 1319.892339][T10343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1320.067297][ T5838] Bluetooth: hci3: command tx timeout [ 1320.151383][T15069] erspan0: entered allmulticast mode [ 1320.363418][T14822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1320.431950][T14822] veth0_vlan: entered promiscuous mode [ 1320.448932][T14822] veth1_vlan: entered promiscuous mode [ 1320.512315][T14822] veth0_macvtap: entered promiscuous mode [ 1320.549540][T14822] veth1_macvtap: entered promiscuous mode [ 1320.634462][T14822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1320.680411][T14822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1320.723645][T27711] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1320.797463][T27711] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1320.811635][T27711] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1320.824075][T27711] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1321.161553][T11081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1321.184481][T11081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1321.284322][T15113] vlan0: entered promiscuous mode [ 1321.319189][T15113] vlan0: entered allmulticast mode [ 1321.324475][T15113] hsr_slave_1: entered allmulticast mode [ 1321.428790][T27711] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1321.456521][T27711] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1321.611193][T15130] FAULT_INJECTION: forcing a failure. [ 1321.611193][T15130] name failslab, interval 1, probability 0, space 0, times 1 [ 1321.636320][T15130] CPU: 0 UID: 0 PID: 15130 Comm: syz.1.11831 Not tainted syzkaller #0 PREEMPT(full) [ 1321.636351][T15130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1321.636364][T15130] Call Trace: [ 1321.636373][T15130] [ 1321.636383][T15130] dump_stack_lvl+0xe8/0x150 [ 1321.636418][T15130] should_fail_ex+0x414/0x560 [ 1321.636456][T15130] should_failslab+0xa8/0x100 [ 1321.636485][T15130] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 1321.636525][T15130] ? __alloc_skb+0x1dc/0x3a0 [ 1321.636546][T15130] ? __local_bh_enable_ip+0xd0/0x130 [ 1321.636569][T15130] ? __alloc_skb+0x198/0x3a0 [ 1321.636592][T15130] __alloc_skb+0x1dc/0x3a0 [ 1321.636618][T15130] nci_send_cmd+0x90/0x360 [ 1321.636660][T15130] nci_dev_up+0x363/0xda0 [ 1321.636699][T15130] ? __pfx_nci_dev_up+0x10/0x10 [ 1321.636723][T15130] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1321.636760][T15130] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1321.636794][T15130] nfc_dev_up+0x16d/0x350 [ 1321.636821][T15130] nfc_genl_dev_up+0x89/0xe0 [ 1321.636847][T15130] genl_family_rcv_msg_doit+0x215/0x300 [ 1321.636878][T15130] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1321.636915][T15130] ? bpf_lsm_capable+0x9/0x20 [ 1321.636938][T15130] ? security_capable+0x7e/0x2e0 [ 1321.636971][T15130] genl_rcv_msg+0x60e/0x790 [ 1321.637010][T15130] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1321.637040][T15130] ? __pfx_nfc_genl_dev_up+0x10/0x10 [ 1321.637085][T15130] netlink_rcv_skb+0x208/0x470 [ 1321.637112][T15130] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1321.637145][T15130] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1321.637166][T15130] ? genl_rcv+0x19/0x40 [ 1321.637219][T15130] ? down_read+0x274/0x2e0 [ 1321.637240][T15130] ? genl_rcv+0xd/0x40 [ 1321.637271][T15130] genl_rcv+0x28/0x40 [ 1321.637299][T15130] netlink_unicast+0x82f/0x9e0 [ 1321.637333][T15130] ? __pfx_netlink_unicast+0x10/0x10 [ 1321.637356][T15130] ? __alloc_skb+0x198/0x3a0 [ 1321.637377][T15130] ? netlink_sendmsg+0x642/0xb30 [ 1321.637400][T15130] ? skb_put+0x11b/0x210 [ 1321.637434][T15130] netlink_sendmsg+0x805/0xb30 [ 1321.637473][T15130] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1321.637512][T15130] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1321.637540][T15130] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1321.637560][T15130] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1321.637588][T15130] __sock_sendmsg+0x21c/0x270 [ 1321.637623][T15130] ____sys_sendmsg+0x505/0x820 [ 1321.637771][T15130] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1321.637806][T15130] ? import_iovec+0x74/0xa0 [ 1321.637836][T15130] ___sys_sendmsg+0x21f/0x2a0 [ 1321.637865][T15130] ? __pfx____sys_sendmsg+0x10/0x10 [ 1321.637934][T15130] ? __fget_files+0x2a/0x420 [ 1321.637960][T15130] ? __fget_files+0x3a0/0x420 [ 1321.637999][T15130] __x64_sys_sendmsg+0x19b/0x260 [ 1321.638028][T15130] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1321.638064][T15130] ? __pfx_ksys_write+0x10/0x10 [ 1321.638102][T15130] do_syscall_64+0xec/0xf80 [ 1321.638123][T15130] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1321.638142][T15130] ? trace_irq_disable+0x37/0x100 [ 1321.638170][T15130] ? clear_bhb_loop+0x60/0xb0 [ 1321.638196][T15130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1321.638217][T15130] RIP: 0033:0x7f796f18f749 [ 1321.638238][T15130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1321.638256][T15130] RSP: 002b:00007f796ffb9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1321.638280][T15130] RAX: ffffffffffffffda RBX: 00007f796f3e5fa0 RCX: 00007f796f18f749 [ 1321.638295][T15130] RDX: 0000000004008004 RSI: 0000200000000180 RDI: 0000000000000005 [ 1321.638309][T15130] RBP: 00007f796ffb9090 R08: 0000000000000000 R09: 0000000000000000 [ 1321.638323][T15130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1321.638335][T15130] R13: 00007f796f3e6038 R14: 00007f796f3e5fa0 R15: 00007ffed46a3548 [ 1321.638372][T15130] [ 1321.640613][T15130] nci: nci_send_cmd: no memory for command [ 1322.149603][ T5838] Bluetooth: hci3: command tx timeout [ 1322.405348][T15163] netlink: 'syz.3.11838': attribute type 5 has an invalid length. [ 1322.954486][T15189] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1322.955488][T15199] team0: Cannot enslave team device to itself [ 1322.987619][T15199] team0: Cannot enslave team device to itself [ 1322.997116][T15199] team0: Cannot enslave team device to itself [ 1323.012820][T15199] team0: Cannot enslave team device to itself [ 1323.032198][T15199] team0: Cannot enslave team device to itself [ 1323.040499][T15199] team0: Cannot enslave team device to itself [ 1323.047920][T15201] mac80211_hwsim hwsim111 syzkaller0: left promiscuous mode [ 1323.057370][T15201] mac80211_hwsim hwsim111 syzkaller0: left allmulticast mode [ 1323.065658][T15199] team0: Cannot enslave team device to itself [ 1323.075361][T15204] netlink: 'syz.2.11851': attribute type 10 has an invalid length. [ 1323.098128][T15199] team0: Cannot enslave team device to itself [ 1323.140193][T15199] team0: Cannot enslave team device to itself [ 1323.163441][T15199] team0: Cannot enslave team device to itself [ 1323.188100][T15199] team0: Cannot enslave team device to itself [ 1323.194972][T15199] team0: Cannot enslave team device to itself [ 1323.219227][T15199] team0: Cannot enslave team device to itself [ 1323.225733][T15199] team0: Cannot enslave team device to itself [ 1323.238230][T15199] team0: Cannot enslave team device to itself [ 1323.245337][T15199] team0: Cannot enslave team device to itself [ 1323.253251][T15199] team0: Cannot enslave team device to itself [ 1323.286717][T15199] team0: Cannot enslave team device to itself [ 1323.293498][T15199] team0: Cannot enslave team device to itself [ 1323.304789][T15199] team0: Cannot enslave team device to itself [ 1323.314190][T15199] team0: Cannot enslave team device to itself [ 1323.329375][T15199] team0: Cannot enslave team device to itself [ 1323.364758][T15199] team0: Cannot enslave team device to itself [ 1323.372805][T15199] team0: Cannot enslave team device to itself [ 1323.379865][T15199] team0: Cannot enslave team device to itself [ 1323.386571][T15199] team0: Cannot enslave team device to itself [ 1323.393809][T15199] team0: Cannot enslave team device to itself [ 1323.429599][T15199] team0: Cannot enslave team device to itself [ 1323.437898][T15199] team0: Cannot enslave team device to itself [ 1323.444675][T15199] team0: Cannot enslave team device to itself [ 1323.453610][T15199] team0: Cannot enslave team device to itself [ 1323.460591][T15199] team0: Cannot enslave team device to itself [ 1323.467213][T15199] team0: Cannot enslave team device to itself [ 1323.475642][T15199] team0: Cannot enslave team device to itself [ 1323.484586][T15199] team0: Cannot enslave team device to itself [ 1323.495055][T15199] team0: Cannot enslave team device to itself [ 1323.504006][T15199] team0: Cannot enslave team device to itself [ 1323.516648][T15199] team0: Cannot enslave team device to itself [ 1323.523464][T15199] team0: Cannot enslave team device to itself [ 1323.532671][T15199] team0: Cannot enslave team device to itself [ 1323.543274][T15199] team0: Cannot enslave team device to itself [ 1323.550649][T15199] team0: Cannot enslave team device to itself [ 1323.559863][T15199] team0: Cannot enslave team device to itself [ 1323.567419][T15199] team0: Cannot enslave team device to itself [ 1323.574265][T15199] team0: Cannot enslave team device to itself [ 1323.581576][T15199] team0: Cannot enslave team device to itself [ 1323.588389][T15199] team0: Cannot enslave team device to itself [ 1323.594932][T15199] team0: Cannot enslave team device to itself [ 1323.601574][T15199] team0: Cannot enslave team device to itself [ 1323.616377][T15199] team0: Cannot enslave team device to itself [ 1323.627758][T15199] team0: Cannot enslave team device to itself [ 1323.641210][T15199] team0: Cannot enslave team device to itself [ 1323.655984][T15199] team0: Cannot enslave team device to itself [ 1323.679972][T15199] team0: Cannot enslave team device to itself [ 1323.694514][T15199] team0: Cannot enslave team device to itself [ 1323.731058][T15199] team0: Cannot enslave team device to itself [ 1323.755045][T15199] team0: Cannot enslave team device to itself [ 1323.782774][T15199] team0: Cannot enslave team device to itself [ 1323.886016][T15230] __nla_validate_parse: 131 callbacks suppressed [ 1323.886038][T15230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11857'. [ 1324.325685][T15249] xt_bpf: check failed: parse error [ 1324.364332][T15253] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.11865'. [ 1324.494628][T15255] bond7: (slave C): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1324.522631][T15255] bond7: (slave C): speed changed to 0 on port 1 [ 1324.530885][T15255] bond7: (slave C): Enslaving as a backup interface with an up link [ 1324.539784][T15255] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1324.575703][T15262] netlink: 260 bytes leftover after parsing attributes in process `syz.4.11868'. [ 1324.704123][T15275] block nbd3: not configured, cannot reconfigure [ 1324.790855][T15280] netlink: 'syz.0.11872': attribute type 2 has an invalid length. [ 1324.822451][T15280] 9: entered promiscuous mode [ 1324.858495][T15283] netlink: 'syz.2.11873': attribute type 10 has an invalid length. [ 1324.894480][T15283] team0: Port device dummy0 added [ 1324.964899][T15292] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11877'. [ 1324.987739][T15291] sctp: [Deprecated]: syz.0.11876 (pid 15291) Use of int in max_burst socket option. [ 1324.987739][T15291] Use struct sctp_assoc_value instead [ 1325.342742][T15315] netlink: 'syz.2.11882': attribute type 1 has an invalid length. [ 1325.635251][T15333] netlink: 'syz.4.11887': attribute type 8 has an invalid length. [ 1325.673379][T15285] delete_channel: no stack [ 1326.011418][T15362] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11891'. [ 1326.794777][T15397] syzkaller1: entered promiscuous mode [ 1326.821319][T15397] syzkaller1: entered allmulticast mode [ 1326.928260][T15404] netlink: 'syz.1.11904': attribute type 12 has an invalid length. [ 1326.964734][T15404] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.11904'. [ 1327.009470][T15404] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11904'. [ 1327.032218][T15407] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11905'. [ 1327.129378][T15413] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11905'. [ 1327.493212][T15423] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11908'. [ 1327.891351][T15441] syzkaller0: entered promiscuous mode [ 1327.898081][T15441] syzkaller0: entered allmulticast mode [ 1327.954419][T15448] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1328.280740][T18005] smc: removing ib device syz2 [ 1328.489809][T15476] netlink: 'syz.4.11923': attribute type 23 has an invalid length. [ 1329.157954][T15503] netlink: 'syz.0.11932': attribute type 5 has an invalid length. [ 1329.173937][T15501] tipc: Enabling of bearer rejected, already enabled [ 1329.186719][T15503] __nla_validate_parse: 6 callbacks suppressed [ 1329.186740][T15503] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11932'. [ 1329.209399][T15501] mac80211_hwsim hwsim111 syzkaller0: entered promiscuous mode [ 1329.239831][T15501] mac80211_hwsim hwsim111 syzkaller0: entered allmulticast mode [ 1329.449364][T15501] tipc: Resetting bearer [ 1329.511205][T15501] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1329.765216][T15526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11939'. [ 1329.804727][T15523] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11937'. [ 1329.917534][T15527] bond10: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 1329.963968][T15527] bond10 (unregistering): Released all slaves [ 1330.252757][T15549] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11942'. [ 1330.315764][T15551] tipc: Started in network mode [ 1330.323968][T15553] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1330.334631][T15551] tipc: Node identity 3e4c207c6348, cluster identity 4711 [ 1330.355614][T15551] tipc: Enabled bearer , priority 0 [ 1330.373224][T15553] netlink: 56 bytes leftover after parsing attributes in process `syz.3.11944'. [ 1330.402218][T15551] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 1330.421157][T15551] tipc: Resetting bearer [ 1330.487811][T15550] tipc: Disabling bearer [ 1330.521014][T15558] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11946'. [ 1330.721806][T20211] hid-generic 0005:16C0:5505.0002: item fetching failed at offset 0/1 [ 1330.750965][T20211] hid-generic 0005:16C0:5505.0002: probe with driver hid-generic failed with error -22 [ 1331.094894][T15581] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11953'. [ 1331.157282][T15583] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11954'. [ 1331.330655][T15592] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 1331.419702][ T1322] batadv1: left allmulticast mode [ 1331.456593][ T1322] batadv1: left promiscuous mode [ 1331.472519][ T1322] bridge0: port 3(batadv1) entered disabled state [ 1331.490292][ T1322] bridge_slave_1: left allmulticast mode [ 1331.502111][T15592] netlink: 'syz.3.11957': attribute type 1 has an invalid length. [ 1331.516209][ T1322] bridge_slave_1: left promiscuous mode [ 1331.519811][T15602] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11958'. [ 1331.532514][ T1322] bridge0: port 2(bridge_slave_1) entered disabled state [ 1331.542310][T15592] netlink: 'syz.3.11957': attribute type 1 has an invalid length. [ 1331.558019][T15592] netlink: 'syz.3.11957': attribute type 1 has an invalid length. [ 1331.597541][ T1322] bridge_slave_0: left allmulticast mode [ 1331.615288][T15592] netlink: 'syz.3.11957': attribute type 2 has an invalid length. [ 1331.635689][ T1322] bridge_slave_0: left promiscuous mode [ 1331.655581][ T1322] bridge0: port 1(bridge_slave_0) entered disabled state [ 1331.674066][T15592] netlink: 76 bytes leftover after parsing attributes in process `syz.3.11957'. [ 1331.900723][ T1322] bond6 (unregistering): (slave ip6gretap1): Releasing active interface [ 1331.910125][ T1322] ip6gretap1 (unregistering): left allmulticast mode [ 1332.361781][ T1322] batman_adv: batadv0: Removing interface: bridge2 [ 1332.782839][ T1322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1332.795087][ T1322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1332.807379][ T1322] bond0 (unregistering): Released all slaves [ 1332.820996][ T1322] bond1 (unregistering): Released all slaves [ 1332.834963][ T1322] bond2 (unregistering): Released all slaves [ 1333.021590][ T1322] bond3 (unregistering): Released all slaves [ 1333.034830][ T1322] bond4 (unregistering): Released all slaves [ 1333.048891][ T1322] bond5 (unregistering): (slave lo): Releasing backup interface [ 1333.059800][ T1322] bond5 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1333.072059][ T1322] bond5 (unregistering): Released all slaves [ 1333.255412][ T1322] bond6 (unregistering): Released all slaves [ 1333.270351][ T1322] bond7 (unregistering): Released all slaves [ 1333.284191][ T1322] bond8 (unregistering): Released all slaves [ 1333.298292][T15594] bond0: entered promiscuous mode [ 1333.303380][T15594] bridge_slave_1: entered promiscuous mode [ 1333.310157][T15594] team0: entered promiscuous mode [ 1333.315391][T15594] dummy0: entered promiscuous mode [ 1333.515178][ T1322] tipc: Left network mode [ 1333.542281][T15616] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1333.686537][T15624] netlink: 'syz.0.11964': attribute type 1 has an invalid length. [ 1333.694483][T15624] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1333.701937][T15624] IPv6: NLM_F_CREATE should be set when creating new route [ 1333.911102][T15630] : entered promiscuous mode [ 1334.021443][T15640] batadv2: entered allmulticast mode [ 1334.132434][T15651] netlink: 'syz.0.11973': attribute type 11 has an invalid length. [ 1334.149899][T15651] netlink: 'syz.0.11973': attribute type 11 has an invalid length. [ 1334.224481][T15635] syzkaller1: entered promiscuous mode [ 1334.236265][T15635] syzkaller1: entered allmulticast mode [ 1334.404710][T15670] __nla_validate_parse: 7 callbacks suppressed [ 1334.404733][T15670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11977'. [ 1334.436368][T15670] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11977'. [ 1334.622368][T15673] netlink: 'syz.0.11980': attribute type 29 has an invalid length. [ 1334.640857][T15672] netlink: 500 bytes leftover after parsing attributes in process `syz.0.11980'. [ 1334.655192][T15675] netlink: 'syz.0.11980': attribute type 29 has an invalid length. [ 1334.655593][T15683] xt_l2tp: wrong L2TP version: 0 [ 1334.745229][T15683] netlink: 52 bytes leftover after parsing attributes in process `syz.2.11983'. [ 1334.759255][T15683] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11983'. [ 1334.784001][T15686] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.11984'. [ 1334.923388][T15692] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.11986'. [ 1335.120206][T15709] netlink: 'syz.2.11990': attribute type 21 has an invalid length. [ 1335.234629][T15709] bond7: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 1335.328565][T15709] bond7 (unregistering): Released all slaves [ 1335.608704][ T1322] hsr_slave_0: left promiscuous mode [ 1335.629890][ T1322] hsr_slave_1: left promiscuous mode [ 1335.647230][ T1322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1335.656571][T15741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11993'. [ 1335.686046][ T1322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1335.740542][ T1322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1335.786195][ T1322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1335.888321][ T1322] veth1_macvtap: left promiscuous mode [ 1335.902821][ T1322] veth1_vlan: left promiscuous mode [ 1335.912769][ T1322] veth0_vlan: left promiscuous mode [ 1336.021235][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1336.033726][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1336.043615][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1336.053160][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1336.061285][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1336.774556][ T1322] team0 (unregistering): Port device team_slave_1 removed [ 1336.832334][ T1322] team0 (unregistering): Port device team_slave_0 removed [ 1337.422715][T15730] netlink: 204 bytes leftover after parsing attributes in process `syz.4.11994'. [ 1337.691581][T15757] wlan0 speed is unknown, defaulting to 1000 [ 1337.851233][T15768] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.12001'. [ 1338.154303][ T5838] Bluetooth: hci2: command tx timeout [ 1338.204379][T15757] chnl_net:caif_netlink_parms(): no params data found [ 1338.238387][ T1322] IPVS: stop unused estimator thread 0... [ 1338.252406][T15783] wlan0 speed is unknown, defaulting to 1000 [ 1338.330336][T15795] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1338.603714][T15757] bridge0: port 1(bridge_slave_0) entered blocking state [ 1338.645185][T15757] bridge0: port 1(bridge_slave_0) entered disabled state [ 1338.664698][T15757] bridge_slave_0: entered allmulticast mode [ 1338.690105][T15757] bridge_slave_0: entered promiscuous mode [ 1338.711416][T15757] bridge0: port 2(bridge_slave_1) entered blocking state [ 1338.734960][T15757] bridge0: port 2(bridge_slave_1) entered disabled state [ 1338.751580][T15757] bridge_slave_1: entered allmulticast mode [ 1338.769521][T15757] bridge_slave_1: entered promiscuous mode [ 1338.901408][ T1322] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1338.926376][ T1322] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 22528 - 0 [ 1338.937518][ T1322] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1339.280114][ T1322] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1339.336912][ T1322] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 22528 - 0 [ 1339.371542][ T1322] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1339.521495][T15757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1339.541003][T15757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1339.604315][T15850] __nla_validate_parse: 6 callbacks suppressed [ 1339.604337][T15850] netlink: 52 bytes leftover after parsing attributes in process `syz.4.12019'. [ 1339.674121][ T1322] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1339.690249][ T1322] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 22528 - 0 [ 1339.707842][ T1322] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1339.743430][T15855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12022'. [ 1339.796913][T15855] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12022'. [ 1339.834992][T15859] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12023'. [ 1339.873972][T15757] team0: Port device team_slave_0 added [ 1339.918686][T15863] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12024'. [ 1339.929257][T15863] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12024'. [ 1339.986714][ T1322] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1340.000411][ T1322] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 22528 - 0 [ 1340.013211][ T1322] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1340.050466][T15757] team0: Port device team_slave_1 added [ 1340.158763][T15757] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1340.169761][T15757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1340.200151][T15757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1340.213759][T15757] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1340.224685][T15757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1340.254909][ T5838] Bluetooth: hci2: command tx timeout [ 1340.260958][T15757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1340.423185][T15757] hsr_slave_0: entered promiscuous mode [ 1340.430913][T15757] hsr_slave_1: entered promiscuous mode [ 1340.438772][T15757] debugfs: 'hsr0' already exists in 'hsr' [ 1340.444890][T15757] Cannot create hsr debugfs directory [ 1340.574844][ T1322] mac80211_hwsim hwsim100 wlan0: left allmulticast mode [ 1340.592703][ T1322] mac80211_hwsim hwsim100 wlan0: left promiscuous mode [ 1340.601807][ T1322] bridge0: port 2(wlan0) entered disabled state [ 1340.635374][ T1322] tipc: Resetting bearer [ 1341.486496][T15894] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12030'. [ 1342.308776][ T5838] Bluetooth: hci2: command tx timeout [ 1342.427938][ T1322] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 1342.437015][ T1322] ip6gretap1 (unregistering): left allmulticast mode [ 1342.621886][ T1322] tipc: Disabling bearer [ 1342.703643][ T1322] dvmrp6 (unregistering): left allmulticast mode [ 1342.722530][ T1322] dvmrp0 (unregistering): left allmulticast mode [ 1343.349900][ T1322] bond0 (unregistering): Released all slaves [ 1343.522958][ T1322] bond1 (unregistering): Released all slaves [ 1343.535865][ T1322] bond2 (unregistering): Released all slaves [ 1343.707455][ T1322] bond3 (unregistering): (slave veth9): Releasing backup interface [ 1343.719120][ T1322] bond3 (unregistering): Released all slaves [ 1343.733135][ T1322] bond4 (unregistering): Released all slaves [ 1343.750692][ T1322] bond5 (unregistering): Released all slaves [ 1343.765823][ T1322] bond6 (unregistering): (slave veth15): Releasing backup interface [ 1343.775785][ T1322] bond6 (unregistering): Released all slaves [ 1343.796712][ T1322] bond7 (unregistering): Released all slaves [ 1343.980869][ T1322] bond8 (unregistering): Released all slaves [ 1343.994087][ T1322] bond9 (unregistering): Released all slaves [ 1344.010688][T15884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12029'. [ 1344.229889][ T1322] 9: left promiscuous mode [ 1344.296993][T15907] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12033'. [ 1344.311072][T15903] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12033'. [ 1344.330879][ T1322] tipc: Left network mode [ 1344.360003][ T1322] IPVS: stopping backup sync thread 10720 ... [ 1344.367809][T15907] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1344.393554][ T5838] Bluetooth: hci2: command tx timeout [ 1344.462151][T15913] netlink: 'syz.1.12036': attribute type 20 has an invalid length. [ 1344.492904][T15913] netlink: 'syz.1.12036': attribute type 20 has an invalid length. [ 1344.631721][T15920] xt_l2tp: v2 doesn't support IP mode [ 1344.639652][T15918] __nla_validate_parse: 4 callbacks suppressed [ 1344.639672][T15918] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12038'. [ 1344.649080][T15915] pimreg3: entered allmulticast mode [ 1344.663247][T15921] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12038'. [ 1345.192003][T15946] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12049'. [ 1345.265570][T15943] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1345.424026][T15959] netlink: 2 bytes leftover after parsing attributes in process `syz.4.12051'. [ 1345.492314][ T1322] hsr_slave_0: left promiscuous mode [ 1345.504808][ T1322] hsr_slave_1: left promiscuous mode [ 1345.537394][ T1322] veth1_vlan: left promiscuous mode [ 1345.542885][ T1322] veth0_vlan: left promiscuous mode [ 1345.897302][T15978] ipt_ECN: cannot use operation on non-tcp rule [ 1346.156351][T15984] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12056'. [ 1347.268880][T15757] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1347.302518][T15996] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1347.345545][T15757] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1347.450697][T16010] netlink: 36 bytes leftover after parsing attributes in process `syz.4.12059'. [ 1347.554750][T15757] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1347.578281][T16016] netlink: 'syz.2.12061': attribute type 11 has an invalid length. [ 1347.621808][T15757] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1347.621969][T16016] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12061'. [ 1347.664031][T16014] netlink: 'syz.1.12062': attribute type 83 has an invalid length. [ 1347.855089][T16031] netlink: 'syz.0.12064': attribute type 21 has an invalid length. [ 1347.945131][T16031] bond1: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 1347.958384][T16038] netlink: 'syz.1.12066': attribute type 32 has an invalid length. [ 1347.966881][T16038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12066'. [ 1348.025799][T16031] bond1 (unregistering): Released all slaves [ 1348.125123][T16038] bond9: option coupled_control: invalid value (83) [ 1348.135096][T16038] bond9 (unregistering): Released all slaves [ 1348.354577][T16052] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 1348.409556][T15757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1348.445583][T16052] netlink: 'syz.1.12069': attribute type 10 has an invalid length. [ 1348.485414][T16052] dummy0: entered promiscuous mode [ 1348.509411][T16052] team0: Port device dummy0 added [ 1348.617403][T15757] 8021q: adding VLAN 0 to HW filter on device team0 [ 1348.642251][T18004] bridge0: port 1(bridge_slave_0) entered blocking state [ 1348.649646][T18004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1348.691982][ T1322] bridge0: port 2(bridge_slave_1) entered blocking state [ 1348.699380][ T1322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1348.807683][T16073] netlink: 36 bytes leftover after parsing attributes in process `syz.4.12072'. [ 1348.935249][T16074] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12073'. [ 1349.121322][T16078] netlink: Conntrack attr has 4 unknown bytes [ 1349.143572][T16089] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 1349.531013][T16107] ipt_rpfilter: unknown options [ 1349.625145][T15757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1349.678589][T16113] veth0_to_team: entered promiscuous mode [ 1349.726422][T16118] __nla_validate_parse: 8 callbacks suppressed [ 1349.726443][T16118] netlink: 36 bytes leftover after parsing attributes in process `syz.4.12085'. [ 1349.745155][T16120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12084'. [ 1349.762306][T16120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12084'. [ 1349.875139][T15757] veth0_vlan: entered promiscuous mode [ 1349.898620][T16126] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12086'. [ 1349.930183][T15757] veth1_vlan: entered promiscuous mode [ 1350.000821][T16135] netlink: 56 bytes leftover after parsing attributes in process `syz.4.12089'. [ 1350.015746][T15757] veth0_macvtap: entered promiscuous mode [ 1350.119516][T15757] veth1_macvtap: entered promiscuous mode [ 1350.195580][T16143] macvtap1: entered allmulticast mode [ 1350.214072][T16143] veth0_macvtap: entered allmulticast mode [ 1350.248172][T15757] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1350.281414][T15757] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1350.294839][T16146] syzkaller0: entered promiscuous mode [ 1350.302617][T16146] syzkaller0: entered allmulticast mode [ 1350.329975][T16146] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1350.342908][T11081] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1350.419631][T11081] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1350.443712][T11081] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1350.461426][T11081] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1350.608150][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1350.621123][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1350.722519][ T1322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1350.732557][ T1322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1350.772480][T16169] syzkaller0: entered promiscuous mode [ 1350.785966][T16169] syzkaller0: entered allmulticast mode [ 1350.901025][T16174] netlink: 'syz.3.11996': attribute type 11 has an invalid length. [ 1350.939167][T16177] netlink: 36 bytes leftover after parsing attributes in process `syz.4.12098'. [ 1351.322942][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1351.335907][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1351.345867][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1351.355461][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1351.375220][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1351.544913][T16194] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12103'. [ 1351.639105][T16174] wlan0 speed is unknown, defaulting to 1000 [ 1351.695517][T16202] netlink: 'syz.4.12105': attribute type 1 has an invalid length. [ 1351.753025][T16203] netlink: 72 bytes leftover after parsing attributes in process `syz.4.12105'. [ 1351.892982][T16204] bond11: (slave gretap1): making interface the new active one [ 1351.938755][T16204] bond11: (slave gretap1): Enslaving as an active interface with an up link [ 1351.980050][T16188] wlan0 speed is unknown, defaulting to 1000 [ 1352.104428][T16222] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12109'. [ 1352.123750][T16223] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12110'. [ 1352.586489][T16249] syzkaller0: entered promiscuous mode [ 1352.592037][T16249] syzkaller0: entered allmulticast mode [ 1352.699955][T16188] chnl_net:caif_netlink_parms(): no params data found [ 1352.827393][T11081] ------------[ cut here ]------------ [ 1352.833520][T11081] wlan1: Dropped data frame as no usable bitrate found while scanning and associated. Target station: 08:02:11:00:00:00 on 5 GHz band [ 1352.847396][T11081] WARNING: net/mac80211/tx.c:758 at ieee80211_tx_h_rate_ctrl+0xbdd/0x1760, CPU#1: kworker/u8:16/11081 [ 1352.858621][T11081] Modules linked in: [ 1352.863010][T11081] CPU: 1 UID: 0 PID: 11081 Comm: kworker/u8:16 Not tainted syzkaller #0 PREEMPT(full) [ 1352.872768][T11081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1352.883272][T11081] Workqueue: events_unbound cfg80211_wiphy_work [ 1352.889685][T11081] RIP: 0010:ieee80211_tx_h_rate_ctrl+0xc4a/0x1760 [ 1352.896235][T11081] Code: 00 00 48 8b 44 24 50 8b 30 45 31 ff 83 e6 07 41 0f 95 c7 31 ff e8 e6 32 e9 f6 43 8d 0c 7f 83 c1 02 48 89 df 4c 89 f6 4c 89 e2 <67> 48 0f b9 3a 41 be 01 00 00 00 49 bf 00 00 00 00 00 fc ff df e9 [ 1352.916104][T11081] RSP: 0018:ffffc9000be1f3c0 EFLAGS: 00010206 [ 1352.922397][T11081] RAX: ffffffff8ad7c91a RBX: ffffffff8f930590 RCX: 0000000000000005 [ 1352.930627][T11081] RDX: ffff888048dce744 RSI: ffff8880448b57c8 RDI: ffffffff8f930590 [ 1352.938758][T11081] RBP: ffffc9000be1f528 R08: ffff8880355e29c7 R09: 1ffff11006abc538 [ 1352.947124][T11081] R10: dffffc0000000000 R11: ffffed1006abc539 R12: ffff888048dce744 [ 1352.955377][T11081] R13: 1ffff920017c3e8c R14: ffff8880448b57c8 R15: 0000000000000001 [ 1352.963664][T11081] FS: 0000000000000000(0000) GS:ffff888125f1f000(0000) knlGS:0000000000000000 [ 1352.972737][T11081] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1352.979711][T11081] CR2: 00007f1bb5d156c0 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 1352.987826][T11081] Call Trace: [ 1352.991325][T11081] [ 1352.994308][T11081] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 1353.000492][T11081] ? ieee80211_is_bufferable_mmpdu+0x103/0x200 [ 1353.006679][T11081] invoke_tx_handlers_late+0xba/0x18a0 [ 1353.012159][T11081] ? invoke_tx_handlers_early+0xa0c/0x1d50 [ 1353.018022][T11081] ieee80211_tx+0x2ac/0x460 [ 1353.022812][T11081] ? __pfx_ieee80211_tx+0x10/0x10 [ 1353.027927][T11081] ? __ieee80211_tx_skb_tid_band+0x4cb/0x680 [ 1353.033958][T11081] __ieee80211_tx_skb_tid_band+0x50f/0x680 [ 1353.039824][T11081] ? ieee80211_scan_state_send_probe+0x4e8/0xa00 [ 1353.046288][T11081] ieee80211_scan_state_send_probe+0x594/0xa00 [ 1353.052656][T11081] ieee80211_scan_work+0x65f/0x1c50 [ 1353.058124][T11081] cfg80211_wiphy_work+0x2ab/0x450 [ 1353.063636][T11081] ? process_scheduled_works+0x9ef/0x1770 [ 1353.069415][T11081] process_scheduled_works+0xad1/0x1770 [ 1353.075038][T11081] ? __pfx_process_scheduled_works+0x10/0x10 [ 1353.081130][T11081] ? do_raw_spin_lock+0x121/0x290 [ 1353.086197][T11081] worker_thread+0x8a0/0xda0 [ 1353.090826][T11081] ? __kthread_parkme+0x7b/0x200 [ 1353.095868][T11081] kthread+0x711/0x8a0 [ 1353.100146][T11081] ? __pfx_worker_thread+0x10/0x10 [ 1353.105495][T11081] ? __pfx_kthread+0x10/0x10 [ 1353.110167][T11081] ? _raw_spin_unlock_irq+0x23/0x50 [ 1353.115816][T11081] ? __pfx_kthread+0x10/0x10 [ 1353.120504][T11081] ret_from_fork+0x510/0xa50 [ 1353.125373][T11081] ? __pfx_ret_from_fork+0x10/0x10 [ 1353.130549][T11081] ? __switch_to+0xc9e/0x1480 [ 1353.135723][T11081] ? __pfx_kthread+0x10/0x10 [ 1353.140586][T11081] ret_from_fork_asm+0x1a/0x30 [ 1353.145379][T11081] [ 1353.148702][T11081] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1353.156096][T11081] CPU: 1 UID: 0 PID: 11081 Comm: kworker/u8:16 Not tainted syzkaller #0 PREEMPT(full) [ 1353.165950][T11081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1353.176364][T11081] Workqueue: events_unbound cfg80211_wiphy_work [ 1353.182634][T11081] Call Trace: [ 1353.185933][T11081] [ 1353.189064][T11081] vpanic+0x1e0/0x670 [ 1353.193251][T11081] panic+0xb9/0xc0 [ 1353.196995][T11081] ? __pfx_panic+0x10/0x10 [ 1353.201472][T11081] ? ret_from_fork_asm+0x1a/0x30 [ 1353.206629][T11081] __warn+0x317/0x4b0 [ 1353.210800][T11081] ? ieee80211_tx_h_rate_ctrl+0xbdd/0x1760 [ 1353.216610][T11081] ? ieee80211_tx_h_rate_ctrl+0xbdd/0x1760 [ 1353.222442][T11081] __report_bug+0x288/0x500 [ 1353.227051][T11081] ? ieee80211_tx_h_rate_ctrl+0xbdd/0x1760 [ 1353.232899][T11081] ? __pfx___report_bug+0x10/0x10 [ 1353.238146][T11081] ? kasan_save_track+0x4f/0x80 [ 1353.243002][T11081] ? kasan_save_track+0x3e/0x80 [ 1353.248228][T11081] ? __kasan_slab_alloc+0x6c/0x80 [ 1353.253775][T11081] ? kmalloc_reserve+0xbd/0x290 [ 1353.258624][T11081] ? __alloc_skb+0x204/0x3a0 [ 1353.263225][T11081] ? __netdev_alloc_skb+0xc1/0x850 [ 1353.268957][T11081] ? ieee80211_probereq_get+0x60/0x270 [ 1353.274539][T11081] ? ieee80211_build_probe_req+0x178/0x480 [ 1353.280383][T11081] report_bug_entry+0x19a/0x290 [ 1353.285263][T11081] ? ieee80211_tx_h_rate_ctrl+0xc4a/0x1760 [ 1353.291159][T11081] ? ieee80211_tx_h_rate_ctrl+0xc4f/0x1760 [ 1353.297192][T11081] handle_bug+0xca/0x200 [ 1353.301460][T11081] exc_invalid_op+0x1a/0x50 [ 1353.305971][T11081] asm_exc_invalid_op+0x1a/0x20 [ 1353.310852][T11081] RIP: 0010:ieee80211_tx_h_rate_ctrl+0xc4a/0x1760 [ 1353.317371][T11081] Code: 00 00 48 8b 44 24 50 8b 30 45 31 ff 83 e6 07 41 0f 95 c7 31 ff e8 e6 32 e9 f6 43 8d 0c 7f 83 c1 02 48 89 df 4c 89 f6 4c 89 e2 <67> 48 0f b9 3a 41 be 01 00 00 00 49 bf 00 00 00 00 00 fc ff df e9 [ 1353.337510][T11081] RSP: 0018:ffffc9000be1f3c0 EFLAGS: 00010206 [ 1353.343610][T11081] RAX: ffffffff8ad7c91a RBX: ffffffff8f930590 RCX: 0000000000000005 [ 1353.351947][T11081] RDX: ffff888048dce744 RSI: ffff8880448b57c8 RDI: ffffffff8f930590 [ 1353.359951][T11081] RBP: ffffc9000be1f528 R08: ffff8880355e29c7 R09: 1ffff11006abc538 [ 1353.368034][T11081] R10: dffffc0000000000 R11: ffffed1006abc539 R12: ffff888048dce744 [ 1353.376182][T11081] R13: 1ffff920017c3e8c R14: ffff8880448b57c8 R15: 0000000000000001 [ 1353.384253][T11081] ? ieee80211_tx_h_rate_ctrl+0xc3a/0x1760 [ 1353.390079][T11081] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 1353.396270][T11081] ? ieee80211_is_bufferable_mmpdu+0x103/0x200 [ 1353.402667][T11081] invoke_tx_handlers_late+0xba/0x18a0 [ 1353.408224][T11081] ? invoke_tx_handlers_early+0xa0c/0x1d50 [ 1353.414139][T11081] ieee80211_tx+0x2ac/0x460 [ 1353.418691][T11081] ? __pfx_ieee80211_tx+0x10/0x10 [ 1353.423950][T11081] ? __ieee80211_tx_skb_tid_band+0x4cb/0x680 [ 1353.430219][T11081] __ieee80211_tx_skb_tid_band+0x50f/0x680 [ 1353.436352][T11081] ? ieee80211_scan_state_send_probe+0x4e8/0xa00 [ 1353.442964][T11081] ieee80211_scan_state_send_probe+0x594/0xa00 [ 1353.449239][T11081] ieee80211_scan_work+0x65f/0x1c50 [ 1353.454581][T11081] cfg80211_wiphy_work+0x2ab/0x450 [ 1353.459824][T11081] ? process_scheduled_works+0x9ef/0x1770 [ 1353.465747][T11081] process_scheduled_works+0xad1/0x1770 [ 1353.471626][T11081] ? __pfx_process_scheduled_works+0x10/0x10 [ 1353.477694][T11081] ? do_raw_spin_lock+0x121/0x290 [ 1353.482735][T11081] worker_thread+0x8a0/0xda0 [ 1353.487333][T11081] ? __kthread_parkme+0x7b/0x200 [ 1353.492548][T11081] kthread+0x711/0x8a0 [ 1353.496633][T11081] ? __pfx_worker_thread+0x10/0x10 [ 1353.501920][T11081] ? __pfx_kthread+0x10/0x10 [ 1353.506543][T11081] ? _raw_spin_unlock_irq+0x23/0x50 [ 1353.511951][T11081] ? __pfx_kthread+0x10/0x10 [ 1353.516769][T11081] ret_from_fork+0x510/0xa50 [ 1353.521561][T11081] ? __pfx_ret_from_fork+0x10/0x10 [ 1353.526774][T11081] ? __switch_to+0xc9e/0x1480 [ 1353.531541][T11081] ? __pfx_kthread+0x10/0x10 [ 1353.536143][T11081] ret_from_fork_asm+0x1a/0x30 [ 1353.540928][T11081] [ 1353.544606][T11081] Kernel Offset: disabled [ 1353.548983][T11081] Rebooting in 86400 seconds..