last executing test programs: 2.32078934s ago: executing program 1 (id=2069): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) r2 = socket(0x14, 0x2, 0x2000004) setsockopt$RDS_RECVERR(r2, 0x114, 0x5, 0x0, 0x0) 1.520733689s ago: executing program 3 (id=2080): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, r1, 0x1, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000100)=0x7fffffff, 0x28) (async) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000100)=0x7fffffff, 0x28) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) (async) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) (async) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x10) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448f0, 0x0) socket$isdn(0x22, 0x2, 0x3) (async) socket$isdn(0x22, 0x2, 0x3) 1.520150595s ago: executing program 0 (id=2081): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x401, 0x70bd2a, 0x2, {0x0, 0x0, 0x0, 0x0, 0x103, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x8, 0x5, 0x0, 0x1, [@IFLA_BRPORT_FLUSH={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'batadv_slave_0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x80c0}, 0x8c0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x54, r3, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x60, r3, 0x4c1dad3e3d6a7499, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x2, @local, 0x5}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) 1.377081484s ago: executing program 3 (id=2082): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000001a80)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@func={0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x2e, 0x5f]}}, 0x0, 0x2b}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r1, 0x110, 0x6, 0x0, 0x4) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000080)={0x108, 0x1f, 0x1, 0x800000, 0x0, "", [@nested={0xf5, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x8}, @typed={0x5, 0x12, 0x0, 0x0, @str='\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x108}], 0x1}, 0x0) 1.369821442s ago: executing program 1 (id=2083): r0 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x0) accept$netrom(r0, &(0x7f0000000340)={{0x3, @rose}, [@null, @rose, @remote, @default, @bcast, @netrom, @netrom, @default]}, &(0x7f0000000240)=0x48) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) r4 = socket$unix(0x1, 0x1, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001400)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r5, {0x8, 0x1}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x6}]}}]}, 0x38}}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r6, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r8, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fdc87873671ff29d3cdbdf250700000008000400120a78020800040012000000"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r13 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r13, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x18, 0x1e, 0x505, 0x0, 0x0, "", [@typed={0x5, 0x12b, 0x0, 0x0, @str='\x00'}]}, 0x18}], 0x1}, 0x0) (async) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r11, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000840)={0x58, r14, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_IE={0x23, 0x2a, [@preq={0x82, 0x1a, {{}, 0xf9, 0x40, 0x14a6, @broadcast, 0x401, @void, 0x9, 0xffffffff}}, @challenge={0x10, 0x1, 0xa}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r10, @ANYBLOB="0800050002000000050053000108000001bee97069a8255849e20f2da478baf690e3a76a24dda5000000260d22cbfe8c0a8f1e661a3943faf2ecbf64bb602573d0c2e9d0dc55b08f0827540e0e50e74bef1316331d3e4bacd47dd7b570e9b5655a40c9"], 0x2c}}, 0x0) 1.312874297s ago: executing program 2 (id=2084): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004070000000000000400000004000e1ff95000000000000002ba76bb33123751c4e3409e62751ee00ba19ce670d25010000020000040000009fc404000000c788b277beee1cbf9b0a4def23d410f6accd3641110bec4e90a6341965dac03d046837d907b09ec39e9ef8f6e396ad200e011ea665c45a3449abe802f5ab3e89cf40b8580218ce740068720000074e3e8eea3fd8cf49827ca315f5b87e1ca6433a8acd715f5888b2007f0000000000000000010089937090c34410000000000000090000000000414027efc842b6d6f800005335001db43a5c000000000000000024000000000000000000e75a89faff01210cce39bf405f1e846c1242000000000000cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617da7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf9938d6df8600a62e96b7cb8e52cbdce57a79d6fce424c22001f6c3784a1975fa657d05003a32a4fd67ce446ac5430207db79240acaf091231b986e77d05d988d6edc71df48dca02113a38300c2bd2b5543ffc16695572361629d1022f722ec23812b70d72cd0010000007881bfa35b9fd6864e90ddb31f75f6324989cdc7044f563a1f74d4efe895fdbc463f747c08f40105869035000000000003000000000000000000000000000000000000080000003ddf4aa4b1c8b8a0ae6feb6737c275dc2740f742b5425f1d5819610608bbab35471cdb0500000000000000d4123f955267fe4a75c114f874e086287547d4099aeec9f15b8ee25a2a5ccf4a9b603c88e12ff25184d4e3c2f7f623559435b2c505fb7113400000f0bc440550ee91302f5a00000000000000000000000000000000e67ccc00148ac4c43021cce9f24f4b2f9492c32e7a92a557ac2b44b8f7a49789906d922b3e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd0294bea179b0433f5c899119ec0c0acef5383b5a2720caeb68f1e9c05b05d89467ded84da092dea262e51811e2d7fa515722516bd5ef6c8c4966e5937562a5648a696abaa042a7097ddefe0671f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb328790700000021e041254f06bd7f000000000000000000000000000000282ffe000000000000000431e8e3204a7d95938c5334a0dd177f1a7389ee570d95e543a27546d3770740f354df6dfdb3d1179b4b9fccd0cd5b7578802c66f5dbf22ad0bd03cbe0fecd096bcf419d35988948d1cd4c51c406040000000090a3bc3cbc08255975f3cee08dab765d8a4ef870aaae3f81ed6364837171ce5564f3cf6feba1b6745409000000000000003459263499fae97e7dcb30e4cff009e0f4f78c155c4ab19b878fcb4cc14b8d2823643a17120418f42b42ed879cb23e6d4e0d11db988d0bc46de02702d29243b72215d5563bdae8c2ccda4498687cd50f3a9058f61d52d70aabccb18d41d75788faf60ce9be97c13e4252d9d112d9ac47368829f8a29eca17de807c840293dd387eee13fdecf3d5a334350f045a22b9adb0539d44d58a00fb9e83ebf4fea36b87e2afdf63f7abf5caf2b01317a5f65f22c8bcf36b390dece1e98541ae932ec3486f74c1eea673c1647568acb17efcef24a9c3504dfa7c7eefe3dcb8d570a730a0837839f54527ce334b8173e7bf73bcd8d80ef294fde6549a0f1a23b78b41f79ea543d2b38b80d3d28c6c93901b763fc8b88794aa74facc345e28f0ad79de4df5afd52e7dfc387e4d2ca4d5caca74754987dbbd4d64e233b4a1d81a9aeb981734ca5416cacf516ca8384d85310f24d393fd48c668465546117377547d11a61bd2bd9e35fa0da5118554a1d93147b103a51baf94aeb1b6292038300423344e6add2226ba5f6724a08567ef515898f0f7dfd3fc198092af3265c5df377a66bbde4fa4a049692e06ee5022c58290bdc37eeb16f4e099e33679044ba21898f76c982c8203663f1adb7bbb42ed8d9b0bb8bd9255e342959b822fa8b3d08b29f2201dfe3a3c5c8bf8bc82f249e7eb9f8571823d730fdc78c6b3122a3fd9209dcae70c10c7b17e83dd759a52fe5c362358dbb780a52f540000000000000000000011230e1d6f9fd3315ada8ecee55fc0ec6ec0ec950c0ad006a06a162035d5729795c4a58b59f9a252723480b08ae9bd52c176380a42b972a3400b5d28b273e60000007cac9d35a991c27e23ce5217fec9ce89ea2dea8ddb383e53cdd077e7c2d73404b7450664f70225897307d8a140ba97bfc2232dccdb1dd0496c219315c02f2ef46f30add1aa13e52d67116328c3a5ee3356eadea07abe8506767771d68e760f8c623fb64865a942acc4912dcd1fa5d729cb45c15577bbb8b08a705efeaf09dd6aadeb8d61501e4fd9c9b1ac845a2138cbde58a04589888c0e528a5134e1dfa8b3f6d8a76517df589cae1019a3bc280e99fb661271357dbbd7e9c42d3fe45efaaa00"/1810], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x35}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r2, 0x4) sendmsg$inet(r1, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000000180)='\x00\x00\x00\x00\x00', 0x5}], 0x1}, 0x2404c014) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) 1.269902841s ago: executing program 0 (id=2086): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000003700000828bd7000fddbdf251300000008004200", @ANYRES32=0x0, @ANYBLOB="3819bc9643b219b830267668f1cf310e290562002f836baa22d865518b2cd88677b9ac367a7f8bf848580e1a139182a10d023832e8b5f554687e92761ff6d645398a1c5c5e9f1a0f0d7712783cbcba36c045cb9e9f4ece4085e35a8e8242a6206169c2f4dbb8e75b592264ce28e6d3fbd986587b12f3f831f81b63a4f414ebfd03e2267999a3a02dc9714f739d4890787c75120f5c1db6324981d513"], 0x1c}, 0x1, 0x0, 0x0, 0x24841}, 0x4840) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80800) bind$bt_l2cap(r2, &(0x7f0000000100)={0x1f, 0xff, @none, 0x1, 0x1}, 0xe) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000003700000828bd7000fddbdf251300000008004200", @ANYRES32=0x0, @ANYBLOB="3819bc9643b219b830267668f1cf310e290562002f836baa22d865518b2cd88677b9ac367a7f8bf848580e1a139182a10d023832e8b5f554687e92761ff6d645398a1c5c5e9f1a0f0d7712783cbcba36c045cb9e9f4ece4085e35a8e8242a6206169c2f4dbb8e75b592264ce28e6d3fbd986587b12f3f831f81b63a4f414ebfd03e2267999a3a02dc9714f739d4890787c75120f5c1db6324981d513"], 0x1c}, 0x1, 0x0, 0x0, 0x24841}, 0x4840) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80800) (async) bind$bt_l2cap(r2, &(0x7f0000000100)={0x1f, 0xff, @none, 0x1, 0x1}, 0xe) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) (async) 1.219488749s ago: executing program 3 (id=2087): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1d, 0xa, 0x5, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d80)={0x6, 0x8, &(0x7f0000000b00)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4342}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x4}, @jmp={0x5, 0x1, 0x5, 0x8, 0x1, 0x1, 0x8}, @generic={0x40, 0x0, 0x9, 0x8, 0xd819}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0xf6c2}], &(0x7f0000000b40)='GPL\x00', 0x2, 0x7a, &(0x7f0000000b80)=""/122, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000c40)={0x5, 0x4, 0x3, 0x11}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000c80)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000cc0)=[{0x1, 0x1, 0x1, 0x4}, {0x3, 0x3, 0x7, 0x7}, {0x1, 0x2, 0x3, 0xa}, {0x3, 0x1, 0x10, 0x4}, {0x5, 0x1, 0x10, 0x8}, {0x2, 0x4, 0x5, 0x9}, {0x2, 0x2, 0xc, 0x8}, {0x5, 0x5, 0x4, 0xa}, {0x5, 0x2, 0x6, 0x1}], 0x10, 0xe}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001100)={r3, 0xe0, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000e40)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000e80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000ec0)=[0x0], 0x0, 0x5e, &(0x7f0000000f00)=[{}, {}], 0x10, 0x10, &(0x7f0000000f40), &(0x7f0000000f80), 0x8, 0xc4, 0x8, 0x8, &(0x7f0000000fc0)}}, 0x10) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x200, 0x5, [0x1, 0x0, 0x4, 0xd, 0x3]}, &(0x7f0000000380)=0x12) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x81}, 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000003c0)={r4, @in6={{0xa, 0x4e24, 0x800, @private2, 0x3}}, [0x2, 0x7, 0x7, 0x2, 0xe7e, 0x1ff, 0x7, 0x1, 0x6a, 0x1, 0xfffffffffffffffb, 0x7f, 0x7fff, 0x8000000000000001, 0x4]}, &(0x7f00000004c0)=0x100) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1, 0x0, 0x8}}]}}, @TCA_RATE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r11 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r12, {}, {0xffff, 0xffff}, {0x2, 0x6}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x0, 0x2, 0x0, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x10012, r10, 0x31a5a000) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) ioctl(0xffffffffffffffff, 0x8936, 0x0) recvmsg$unix(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/134, 0x86}, {&(0x7f0000000680)=""/215, 0xd7}, {&(0x7f0000000780)=""/143, 0x8f}, {&(0x7f0000000840)=""/35, 0x23}, {&(0x7f0000000880)=""/20, 0x14}, {&(0x7f00000008c0)=""/86, 0x56}], 0x6, &(0x7f00000009c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}, 0x100) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000500)=[@in={0x2, 0x9, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, @in6={0xa, 0x4e20, 0xe1fa, @dev={0xfe, 0x80, '\x00', 0x2d}, 0xfffffffb}, @in6={0xa, 0x4e23, 0x7, @remote, 0x4}], 0x64) 1.168936598s ago: executing program 4 (id=2088): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014400000000c0a01010000000000ffffff090000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1030000140000001100010000000000000000000100000a"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r0) (async) close(r0) 1.167779433s ago: executing program 2 (id=2089): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10c20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x800) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x7fff}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x8, 0x8000, 0x68, 0xc346, {{0x25, 0x4, 0x3, 0x1, 0x94, 0x68, 0x0, 0x6c, 0x4, 0x0, @multicast1, @empty, {[@ra={0x94, 0x4}, @rr={0x7, 0xf, 0x45, [@dev={0xac, 0x14, 0x14, 0x12}, @local, @dev={0xac, 0x14, 0x14, 0x39}]}, @timestamp={0x44, 0x24, 0x4f, 0x0, 0x0, [0x4, 0x1, 0xd, 0x100, 0x7f, 0x8, 0x84d, 0x5]}, @timestamp_prespec={0x44, 0x24, 0xc0, 0x3, 0x0, [{@broadcast, 0xe}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x54}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xff}]}, @timestamp_addr={0x44, 0x24, 0x3b, 0x1, 0x5, [{@broadcast, 0xc3ce}, {@remote, 0x100}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x7}, {@empty, 0x1}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x4, 0x9, 0x80, 0x8, 0x60, @private0, @dev={0xfe, 0x80, '\x00', 0x12}, 0x10, 0x10, 0xee, 0x5d0}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={0x1, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000600)={'syztnl1\x00', &(0x7f0000000540)={'syztnl1\x00', 0x0, 0x10, 0x10, 0x3ff, 0xe, {{0x1e, 0x4, 0x2, 0x32, 0x78, 0x64, 0x0, 0x8, 0x4, 0x0, @loopback, @private=0xa010101, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x24, 0xff, 0x0, 0x1, [0x800, 0xc, 0xc000, 0xffffff62, 0xfffffff7, 0x9, 0xfffffffb, 0xc69]}, @end, @cipso={0x86, 0x3b, 0x0, [{0x6, 0x7, "d3f14aaf66"}, {0x7, 0x9, "daeb3d0bb2098d"}, {0x5, 0x3, 'l'}, {0x5, 0xb, "705b5383ab7df29649"}, {0x1, 0x11, "5e4ecd0b637bbc8ea0bf674fe028e9"}, {0x1, 0x6, "8a1a921f"}]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000006c0)={0x1, 0x58, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000700)={'team0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000740)={@local, @private, 0x0}, &(0x7f0000000780)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000900)={'ip_vti0\x00', &(0x7f00000007c0)={'erspan0\x00', 0x0, 0x7800, 0x20, 0x9, 0x6ae, {{0x44, 0x4, 0x3, 0x9, 0x110, 0x9, 0x0, 0x4, 0x2f, 0x0, @private=0xa010101, @remote, {[@timestamp={0x44, 0x14, 0xe0, 0x0, 0xa, [0x8, 0x422, 0x0, 0x6]}, @cipso={0x86, 0x11, 0x0, [{0x6, 0xb, "f1d5638668e6e638a9"}]}, @cipso={0x86, 0x6e, 0x3, [{0x5, 0x12, "bea5d0026ade155ab4c5b0f3fe30dc00"}, {0x2, 0xb, "5d260c9e51391859cb"}, {0x0, 0x12, "507f84a3b872d8dc90b4369aed885536"}, {0x5, 0x7, "253263c545"}, {0x5, 0xe, "1f13034cabd89b96a5b908ca"}, {0x7, 0x3, '2'}, {0x6, 0xf, "706fd986e4c060d3778ece80d4"}, {0x5, 0x12, "fe063f4d1ae717e3f48ee901334e3abf"}]}, @rr={0x7, 0xb, 0x73, [@multicast1, @broadcast]}, @timestamp_addr={0x44, 0xc, 0x23, 0x1, 0x0, [{@empty, 0x3}]}, @cipso={0x86, 0x40, 0x0, [{0x5, 0x8, "a22963737697"}, {0x0, 0xc, "5a61d3c14b5da4a869c9"}, {0x6, 0x3, "94"}, {0x7, 0x10, "2bfe8c0ade0ff238ada22f7eb3dd"}, {0x2, 0x3, "1a"}, {0x5, 0x10, "5acd23bdb75b277cdd561b210dbd"}]}, @rr={0x7, 0xf, 0x15, [@rand_addr=0x64010100, @empty, @local]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000009c0)={'ip6_vti0\x00', &(0x7f0000000940)={'ip6_vti0\x00', 0x0, 0x0, 0x41, 0xf6, 0xcb4, 0x4, @loopback, @remote, 0x40, 0x700, 0x10000, 0x40}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000ec0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000a00)={0x474, r2, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x78, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x74, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe0000000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc6}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x828}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xf0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x44, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '}++%\\,\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3fff8000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0xa1, 0x5, "93c1d686b1dc936b0992097305c750a5ab56d56c3d0f38443ed517090a9061138216531e83a0874e135bff42ec20fd2cccd8b7df5c570e1eb5a2da81bf6826c838e95a583c2be307d789a8c463b36c37207f76e47ae08d8689e6d59680aea6ddb45b7f5037a5a3c242a690a139df853b1a52ac7903a2923ddc9f6f28c558cb7ea007ab27482c1ebecf764a053fe3a05fb743e369ab63e39c48e3da2d50"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1e4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xa3, 0x4, "8d0ae24b11b0bcb0587a1a6a701504909c82da318bb4bd6319f9a252a8c49899248e920bd698373d3e17b9f8c122f65471c55609b22377411e8d208520a7b534d494a9f8afe93058994f9c5602cae6334c6d0d87695eb3401bf6f1d7eebc144ff668c72dac544e8fc490b471e5876c5a8d956c3d042d640479c849d00da3b91744370ede2efa7b6e31981d02d80238740c4f1de5fabf97a361c860a31e968e"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3977}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x40}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x25, 0x5, "71cce53c39eb90aefd1ccb38e7d8d40e001f74ca246fac1902645e86005896a4a9"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_MASK={0xaa, 0x5, "f59b96a5e6a1dcd87aca8b21cf5a06459ba7b034910b170e645076ce77a0ab6ff8d44184f71441e0505d4a80576b5c9a8dc9a151fc33d90a78e8de20b12c944d713e8248659e16ad19cff8b10ca23f90109eeeb59ad9403d83a46f4c084fb56da864aa2fd26bf001833bf66ff61705fb21be085e5c7ee3bcb2efe2096915ca5bf961506f148fa3b214664c4c08ececbd10d6f63f84a29d3d1d20400d0b1aa8ea01cf85ac2e4a"}, @ETHTOOL_A_BITSET_VALUE={0x3f, 0x4, "175f5e6e1f272ccfaf58cb4ad05b5d9a6f0151d316e2da78e6a0740c991cccdd3b3a391a9cc80c0a7775904f86c488ffecae4008eb3614a5adc5df"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_DEBUG_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_DEBUG_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x474}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x24, 0x0, 0x205, 0x401, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x2}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) r12 = socket(0x11, 0x80000, 0x10) sendmsg$IPSET_CMD_HEADER(r12, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x2c, 0xc, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x60, 0x0, 0x524, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r11}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0xc000}, 0x20008000) r13 = gettid() r14 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001280)={&(0x7f0000001240)='tcp_retransmit_synack\x00', 0xffffffffffffffff, 0x0, 0x3ff}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001300)={r13, r14, 0x0, 0x3, &(0x7f00000012c0)='\'@\x00'}, 0x30) ioctl$sock_ax25_SIOCADDRT(r12, 0x890b, &(0x7f0000001340)={@null, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) sendmsg$TIPC_CMD_DISABLE_BEARER(r12, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x20100}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x2c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}, ["", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x8d8e60ff4364af4) r15 = openat$tun(0xffffffffffffff9c, &(0x7f00000014c0), 0x8480, 0x0) ioctl$TUNGETDEVNETNS(r15, 0x54e3, 0x0) r16 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r16, 0x84, 0x1c, &(0x7f0000001500), &(0x7f0000001540)=0x4) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f00000016c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x38, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2c}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x20010010}, 0x8000) 1.036623603s ago: executing program 2 (id=2090): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@ipv6_getroute={0x68, 0x1a, 0x10, 0x70bd2b, 0x25dfdbfb, {0xa, 0x0, 0x20, 0x80, 0xfc, 0x4, 0xfd, 0x8, 0x2200}, [@RTA_EXPIRES={0x8, 0x17, 0x7}, @RTA_PREF={0x5, 0x14, 0x9}, @RTA_GATEWAY={0x14, 0x5, @mcast2}, @RTA_PREF={0x5, 0x14, 0x3}, @RTA_OIF={0x8, 0x4, r1}, @RTA_PREF={0x5, 0x14, 0x2}, @RTA_PREF={0x5, 0x14, 0x20}, @RTA_IIF={0x8, 0x3, r1}]}, 0x68}, 0x1, 0xba01, 0x0, 0x4010}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@ipv6_getroute={0x68, 0x1a, 0x10, 0x70bd2b, 0x25dfdbfb, {0xa, 0x0, 0x20, 0x80, 0xfc, 0x4, 0xfd, 0x8, 0x2200}, [@RTA_EXPIRES={0x8, 0x17, 0x7}, @RTA_PREF={0x5, 0x14, 0x9}, @RTA_GATEWAY={0x14, 0x5, @mcast2}, @RTA_PREF={0x5, 0x14, 0x3}, @RTA_OIF={0x8, 0x4, r1}, @RTA_PREF={0x5, 0x14, 0x2}, @RTA_PREF={0x5, 0x14, 0x20}, @RTA_IIF={0x8, 0x3, r1}]}, 0x68}, 0x1, 0xba01, 0x0, 0x4010}, 0x0) (async) 1.01280553s ago: executing program 4 (id=2091): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)}, 0x12001) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0xff06, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x200, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000040)={r4, 0x7ff}, 0x8) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000009c000000060a010400000000000000000100000008000b400000000074000480340001800b000100657874686472000024000280080001400000000c0800034000000000080004400000002205000200070000003c0001800c00010062697477697365002c0002800800034000000002080001400000001408000240000000120800064000000000080006400000000a0900010073797a30"], 0x110}}, 0x0) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000440)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000400)="159f865967b6a60521a275536960d598e963c4b3f2c61dd4127989bf78bfce83", 0x20) r7 = accept$alg(r6, 0x0, 0x0) recvmmsg(r7, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/86, 0x56}], 0x1}, 0x8}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000740)=""/14, 0xe}], 0x1}, 0x31}], 0x2, 0x0, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1}, 0x0) 936.859989ms ago: executing program 0 (id=2092): r0 = socket$rds(0x15, 0x5, 0x0) getsockopt(r0, 0x1, 0x45, 0x0, &(0x7f0000000300)) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r3, &(0x7f0000000000)=ANY=[], 0x38) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000040)={0xfffffffffffffffc}, 0x1, 0x0, 0x0, 0x40800}, 0x1) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) read(r4, &(0x7f0000000200)=""/215, 0xd7) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x11c, 0x2b, 0x1, 0x2, 0x25dfdbfd, "", [@nested={0x109, 0x0, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@remote}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x11c}], 0x1}, 0x0) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000340)={r3}, 0x8) ioctl$sock_inet_udp_SIOCINQ(r7, 0x541b, &(0x7f0000000380)) (async) ioctl$AUTOFS_IOC_CATATONIC(r5, 0x800443d3, 0x20000002) 901.248897ms ago: executing program 2 (id=2093): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x800, @media='eth\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000001}, 0x8004) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r2, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x54}}, 0x805) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'tunl0\x00', &(0x7f0000000380)={'erspan0\x00', 0x0, 0x8000, 0x10, 0x156, 0x7, {{0x37, 0x4, 0x3, 0x3a, 0xdc, 0x65, 0x0, 0x3, 0x2f, 0x0, @remote, @empty, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x27, 0x97, [@local, @remote, @loopback, @multicast1, @private=0xa010101, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @multicast1]}, @cipso={0x86, 0x5b, 0x2, [{0x6, 0x5, "25e4cd"}, {0x5, 0x12, "8b870a645f99f2074dcb746bd0f39645"}, {0x5, 0x9, "44f5b555d6529b"}, {0x6, 0xc, "2c54092bb69b81595c4f"}, {0x1, 0x6, "3fa7b73f"}, {0x6, 0x7, "578ca48838"}, {0x7, 0x11, "698a6805e37ec2f20c864222a28d83"}, {0x6, 0xb, "89f74e718399ead359"}]}, @timestamp={0x44, 0x1c, 0x91, 0x0, 0x4, [0x3, 0xa, 0x9, 0x7, 0x4, 0x81]}, @rr={0x7, 0x23, 0xe0, [@multicast2, @loopback, @loopback, @multicast1, @private=0xa010102, @local, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'ip6gre0\x00', &(0x7f00000004c0)={'ip6_vti0\x00', 0x0, 0x4, 0x2, 0x0, 0x1, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x20}, 0x7800, 0x1, 0x40, 0x5}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xc8, r3, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x30, r1, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x7, 0x8, 0x7, 0x6}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x44081) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840), r0) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000a40)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000880)={0x150, r7, 0x60c, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0xac, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7c4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x722881bb}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa286}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x70f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xa6b7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x38b}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x593}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe}]}]}, 0x150}}, 0x4001) (async) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000ac0), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000b00)={'vlan0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000c40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0xa4, r8, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x93}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x16}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x16}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_TOKEN={0x8}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) (async) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000c80)={{{@in=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000d80)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000dc0)={{{@in=@remote, @in6=@remote, 0x4e24, 0xa82c, 0x4e23, 0xd50, 0x2, 0x0, 0xa0, 0x33, r4, r10}, {0x128, 0x8, 0x8000000000000000, 0x2, 0x6, 0xba54, 0xff, 0x4}, {0x9, 0x80000001, 0x8000, 0x2}, 0x7fffffff, 0x6e6bb5, 0x2, 0x0, 0x3, 0x3}, {{@in6=@mcast1, 0x4d6, 0x2b}, 0x8, @in=@loopback, 0x0, 0x0, 0x0, 0x7, 0x2b1c, 0x9, 0x8}}, 0xe8) (async) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000f00), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x1c, r11, 0x400, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0xd0) (async) r12 = socket$kcm(0x29, 0x2, 0x0) close(r12) socket$pppoe(0x18, 0x1, 0x0) (async) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001040)={'wpan3\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001080)={'wpan4\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000010c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r13, &(0x7f00000012c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001280)={&(0x7f0000001100)={0x160, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x58, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}, @NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffffce28dfca}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}, @NL802154_ATTR_SEC_DEVKEY={0xc0, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x80000000}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}, @NL802154_DEVKEY_ATTR_ID={0x94, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfff}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xfffe}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}]}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r16}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x160}, 0x1, 0x0, 0x0, 0x40000}, 0xc0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001380)={{0x1, 0xffffffffffffffff}, &(0x7f0000001300), &(0x7f0000001340)=r12}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0xc, 0xc, &(0x7f00000013c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x1, 0x1, 0x2, 0x9, 0x2, 0x100, 0x10}, @alu={0x7, 0x0, 0xc, 0x5, 0x2, 0xffffffffffffffc0, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r17}}]}, &(0x7f0000001440)='GPL\x00', 0x271, 0x89, &(0x7f0000001480)=""/137, 0x41100, 0x30, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, &(0x7f0000001540)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000001a40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001a80)=[{0x1, 0x2, 0xf2, 0x8}, {0x5, 0x3, 0x3, 0xc}, {0x1, 0x1, 0x9, 0xb}, {0x1, 0x2, 0xe, 0xc}, {0x0, 0x4, 0x2, 0x9}], 0x10, 0x1000}, 0x94) 855.429338ms ago: executing program 3 (id=2094): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000084000000060a010400000000000000000100000008000b40000000005c000480340001800b000100657874686472000024000280080001400000000b080003400000000008000440000000300500020007000000240001800b0001007470726f78790000140002800800034000000016080001400000000a0900010073797a30"], 0xf8}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xc, 0x8}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) (async) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xc, 0x8}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xc, 0xc}, {}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4041080) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@gettclass={0x24, 0x2a, 0x100, 0x70bd29, 0x41b, {0x0, 0x0, 0x0, 0x0, {0xe, 0xfff2}, {0x2, 0xf}, {0xfff2, 0xfff3}}, ["", "", "", ""]}, 0x24}}, 0x4000) r9 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYRES8=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYRES8=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000006110000000000000620002000000000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x5}, 0x90) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv6_getanyicast={0x14, 0x3e, 0x2, 0x70bd25, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40004840}, 0x4) (async) sendmsg$nl_route(r10, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv6_getanyicast={0x14, 0x3e, 0x2, 0x70bd25, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40004840}, 0x4) socket$inet(0x2, 0xa, 0x400) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x2, 0x9, 0x9, 0x7f, 0x4, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x700, 0x6, 0x4}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x2, 0x9, 0x9, 0x7f, 0x4, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x700, 0x6, 0x4}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000100)={'vxcan1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000100)={'vxcan1\x00'}) socket(0x2, 0x80805, 0x0) (async) r12 = socket(0x2, 0x80805, 0x0) sendmsg$IPSET_CMD_SAVE(r12, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0x30, 0x8, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x48c4) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r12, 0x84, 0x7a, &(0x7f0000000080)={0x0, 0x4, "179da51e"}, &(0x7f00000000c0)=0xc) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r12, 0x84, 0x7a, &(0x7f0000000080)={0x0, 0x4, "179da51e"}, &(0x7f00000000c0)=0xc) connect$packet(r9, &(0x7f00000000c0)={0x11, 0x7, r11, 0x1, 0xf8, 0x6, @local}, 0x14) ioctl$VFAT_IOCTL_READDIR_BOTH(r12, 0x82307201, &(0x7f0000000340)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 724.73668ms ago: executing program 4 (id=2095): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x0, 0xf0ffff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x1}}, 0x1c}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000080)={@random="2f094301cbe5", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "12109b", 0x10, 0x3a, 0x0, @empty, @mcast2, {[], @ni={0x8c, 0x0, 0x0, 0x4, 0xad, 0x689}}}}}}, 0x0) 724.299203ms ago: executing program 1 (id=2096): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x30, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x0, 0x96, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, @NDA_VLAN={0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000019"], 0x60}}, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@deltaction={0x14, 0x31, 0x800, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40054}, 0x20040002) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000080)={0x2, {{0x2, 0x4e22, @multicast2}}}, 0x88) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) setsockopt$inet_group_source_req(r6, 0x0, 0x2c, &(0x7f00000003c0)={0x6, {{0x2, 0x4e22, @private=0xa010101}}, {{0x2, 0x4e23, @multicast2}}}, 0x108) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r6) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)={0x54, r9, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x8}, @ETHTOOL_A_COALESCE_TX_USECS={0x8}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0xffffeebb}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0xd79}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x9}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x613}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x6}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x200}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x8081) ioctl$sock_SIOCBRDELBR(r4, 0x89a1, &(0x7f0000000380)='pimreg\x00') 722.146655ms ago: executing program 0 (id=2097): r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200c8804, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}}, 0x1c) (async) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000080), 0x4) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x604ab000) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f00000002c0)=0x40) 675.9711ms ago: executing program 2 (id=2098): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x9383, 0x4}, 0x4}}, @TCA_MPLS_TC={0x5}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x6c}}, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r3 = accept4$unix(r0, 0x0, 0x0, 0x800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="58000000020601020000000000000000000000000c000780080012400006000014000300686173683a69702c706f72742c697000050005000a00000005000400000000000900020073797a31000000000500010007"], 0x58}}, 0x0) recvfrom$unix(r3, &(0x7f0000000140)=""/263, 0x107, 0x102, 0x0, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bd7000fbdbdf254400000008000300", @ANYRES32=r7, @ANYBLOB="06002400818300000a001800030303031103000008000c006400000008090d0008000000"], 0x40}}, 0x24040890) 522.747083ms ago: executing program 4 (id=2099): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000700)=[{&(0x7f00000000c0)="0232e600", 0x4}, {&(0x7f0000000140)="1a36c585f33853c08764d056a86d003cbaf5cde47e5f51052d82c19aa673d671416429534237090097b3116d403a08c07bbbe72da665341d6592092455897fe84a54e94a435e8d3810ce4899d5b04d17b099bbec7fb7f005b03bb00f6860f0cdeae62faa71a5f2383e963aba417592d7a84958b0378e15fa25bca4ceabb5", 0x7e}], 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x10010, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x401c5820, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x13, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000090000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000073000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x7, &(0x7f00000003c0)=@framed={{}, [@map_val={0x18, 0xb, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ldst={0x2, 0x1, 0x0, 0x1, 0xb, 0x8, 0xfffffffffffffff0}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) close(r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0xa2f01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="b0000005", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fddbdf25030000004800028008000100090000000800020008000000080002000100000008000100090000000400040004000400080001007f0000000400040008000100050000000800010003000000540006804300040067636d28616573290000000000000000000000000000000000000000000000001b000000207b99cffd57036ff3423262e06e578d36ec1a235e399aca7141b900080006000000000004000500"], 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000814) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x40000020}, 0x20004000) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'ip_vti0\x00', @random="5464af7dc7df"}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) socket$unix(0x1, 0x1, 0x0) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYBLOB="000002000180c2000002aae9aaaaaac0"]) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 451.056563ms ago: executing program 0 (id=2100): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000480)={0x28, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3, 0x4d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000740)={0x28, r2, 0x1, 0x40000, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_MTU={0x8, 0x4, 0xffcd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 447.431997ms ago: executing program 1 (id=2101): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000040)=ANY=[@ANYRES8=0x0, @ANYRES32=r1, @ANYRESDEC=r0, @ANYRES64=r0, @ANYRES16=r1], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x91, 0x1000, &(0x7f0000000080)="8b7469f9fef7b82f9558c34b2148d215d8be8402443b39f22ac7d54d2b7d07780884ea869ad5525fd74b030eb39191c842b4d72a85fca24f4e2df6c98cb1d7c596dfc6a6504e91ecd33f47d9c00bda881010539f5392da4f25ff403d7174bceb558cd85ec38c4fdb2c82a3a3e14e27675ad34abee1bc5beb9faac431aa59229faff95bdf836d87bed869273d1c8a6b4b18", &(0x7f00000009c0)=""/4096, 0x10000, 0x0, 0x97, 0xa, &(0x7f0000000140)="8590e7b96d8aa3e0a36b10dd9f86932425efa3cf227c554bdc477c91467459b5f277581c6a40f49ed0f91feb642cacc3fa4c8814fa607a71b25cbe6e3bdccc6a7ef83ed0a93c8fb0f4762c45a966b3b0ce9e9355fc2f7056ddfe5d02e81b008b41b5ace250586f90281f79748d97e2e3f4c748b3563fe9c8332f6c4690f6bd70a52819f128297e838d7582338b91c4daa2aabe05db23a7", &(0x7f0000000000)="808150975d2053b6a326", 0x6, 0x0, 0x400000}, 0x50) 341.846485ms ago: executing program 2 (id=2102): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r1 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000040)=0x10, 0x80800) getsockopt$llc_int(r1, 0x10c, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000100), &(0x7f0000000140)=0x4) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000180)={0x0, 0xe2, "d5ee1e65724c671fbed9ccb84af5409b94f4e4f0be441da1ab3e0c3f959e76642d81d911423c50909c2c515e910a4c98ffcee4d44cb6a261094a82df6acc676a2f60c5a4c725033b4f5c1520b2ceaf8974e286a900b219e75fc5bc9a14f9a51310e20ddb994f2d30c3f12be761af3e898ff79727420c00687bcb6100e3af7360b278bc5126100ea1a7844fbdb86b7d682079c22f67870f1d5ec93e832ceafbbfaeea8a19f59c316fa277b9be1effba416d23c39be5861d6fd8fb3815cf4754a2f3792d21416f15d5e1c6eac771b3c2b26a8e66d560f164c829b09945003818c01064"}, &(0x7f0000000280)=0xea) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000002c0)={r4, 0x5c, 0x4, 0x101, 0x3, 0x6}, &(0x7f0000000300)=0x14) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f0000000340)=@gcm_128={{0x303}, "a984e17aab536a64", "54a7c5ba4888aa59b42d450688a2b215", "1395d04d", "ed218cbbde012c61"}, 0x28) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000380)) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f00000003c0), &(0x7f0000000400)=0x4) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000440)) sendto$inet6(r6, &(0x7f0000000480)="f62730cd864d3c81029287f0e2d3bdb5effa4885458af5b9afcd325023d055147df3146e1a4fffaf908ad4d0a45cf9c04d9042cb1563197d080638f205e99c37af1632d0b38cd753b92eaec90939ae458ffa77d748b0740d01b3ced635ad9f6ab6a8078edb50f0383ce91afa", 0x6c, 0x84, &(0x7f0000000500)={0xa, 0x4e21, 0x10000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80000000}, 0x1c) socket$alg(0x26, 0x5, 0x0) syz_80211_inject_frame(&(0x7f0000000540)=@device_b, &(0x7f0000000580)=@data_frame={@a_msdu=@type11={{0x0, 0x2, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x8}, @broadcast, @device_b, @initial, {0xe, 0xffd}, @device_b, @void, @value=@ver_80211n={0x0, 0xc, 0x2, 0x3, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1}}, @random="111f9fdf1c919298321eaa2dd897a824ac54c1e8af2bbcef21c28b173e01744bca297f677f23b11e7f9b27b562e4bde6bd87c45c1fe5df46cd9b9256d4b62073575104930824f4c12019fd9316c7977a17b94370843b02ce5f1afeb7574d5dacda34f00787af7812221c161b00e082ec64dfda24fc9bed869242bea560307bbb46f8764339489323816165469386d3af7958508bde98085bb5a40994bc516c295372d95133edf140d4db4cf509002a618d1d28f294061346b14d6afc5e4f6c61b0e533d4fb3ac1c4580432d04f3d0c422d55c66c49accc2aa846d1cb192676db0e1ec3b29f04b3a7fb93d7f2f55042c7abc7efe93133c9a033eb6d1969c164056ab8326620014d3331b48fde1bc8a1d75473a9ed6fc468d8da6b5054b1ba11547817b8b38e3e7f63b5db0b13c297b6a291d1b22219952eefd89230f80362c0ccd3de147f3b20114141c935e03224933e5dcdded19216cc30965fd32fcaee0dcc7d269bb5e27e1c29c581730f6d5efbe58003a7d42408b9ae0d56a5e996a94c791495ad6071381cf0191932a0791de66bb68f7dbbcd2e0143f1b3b28916e89a51a28dc66adbdd4898e68974aef0b612b9ba963deeb44c6af9470dcd51dea638da78c0eedb7e6b5acc745f1673360d94fc5c28bd7b847048c27727db677defa8c3eb34e4a1bc3ae40813c241f2d0bb69cc5695132c77f6ddce450612bf27baacf04d26a237de782ad59e0c8621a04454da60427b58579e05af7288d7aca8ede022bcfad28e48e6aafd3f171ea06a9b6367ee791d7765fd22522b43ba0d76467db53992e1615c67025f694a5cb19760c2ec2354f430c85f0ca4414a28d0d7071aa45dfdadfa6224afff4e418cacc67213b9203e0e4be09e6e3deb5099b211e2a9c60f006a27f7d526384a340c07ce53900a00d8f2cc45507fea8bab6f075799913dbcba2286e0c1ef225dee47c851ae63b10ae5fd4aa5ddaca7b2e440cbfb4e63edeeab9ec59e2c5f8c165e28ce3260939dba52e4eb766bf2ec0f320576a4b2c8dbf4d36bf6c41894c924dd6d6fed519e221b3bbfc23ac59599ad1d57fd443de5bc3e2fe646196837b1a992fb1cc0511b3a0e7519373ef1bedb230808e4700da504c09316779218625eb3a55827e9b42f0d7782661c3b1511524310e338c6e1777186b12bbd7c19a41de60336af5db90d297d297b13952607364bd763c573fb662ca555bb153116923d59d128439879de6e1806eb1cbfcbfc896a9f953d66d7c78bd0d9f19d8a"}, 0x3a7) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000009c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r7, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x30, r8, 0x2, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0xf}, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x6, 0x1e}}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x840}, 0x805) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r7, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x68, r8, 0x10, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7f, 0x3f}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x49}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x24}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5d}]}, 0x68}, 0x1, 0x0, 0x0, 0x804}, 0x4004891) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r10, 0x0, 0xca, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x4, @vifc_lcl_ifindex, @loopback}, 0x10) r11 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) setsockopt$sock_void(r11, 0x1, 0x24, 0x0, 0x0) sendmsg$TIPC_NL_NODE_GET(r7, &(0x7f0000000e00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x128, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xced8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4640}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f8ea1b2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_NET={0x74, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xafb2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x49000000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x11}, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000e40)={r5, 0x5, 0x0, 0x79}, 0x10) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40) 336.373442ms ago: executing program 3 (id=2103): r0 = socket$inet(0x2, 0x2, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0xe) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000100)={r2, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102}, 0xc) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x31) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000a8c5000000a50000001801000020206405000000000004000f7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000280)={'erspan0\x00', r2, 0x7800, 0x20, 0x6, 0x3, {{0xf, 0x4, 0x0, 0x3, 0x3c, 0x65, 0x0, 0x8, 0x33eeaf536f15d487, 0x0, @multicast1, @broadcast, {[@timestamp_addr={0x44, 0x1c, 0x5b, 0x1, 0xe, [{@multicast1, 0x1000}, {@multicast1, 0x6}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x7}]}, @timestamp={0x44, 0xc, 0x72, 0x0, 0x4, [0x4, 0xfffffff1]}]}}}}}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000300)={@private0, @mcast1, @empty, 0x800, 0x9, 0xf2b, 0x0, 0x3, 0x1020080, r6}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x0, 0xfffffffffffffdf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)}}], 0x2, 0x604c040) 216.984601ms ago: executing program 1 (id=2104): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x24, 0x3c, 0x107, 0x0, 0x0, {0x2, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) r1 = socket$kcm(0x10, 0x400000002, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000a00)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x1, 0x6, 0x20, 0x66, 0x0, 0x7, 0x1, 0x0, @remote, @private=0xa010100, {[@generic={0x82, 0x2}]}}, @echo_reply={0x0, 0x0, 0x0, 0x66, 0x4}}}}}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r3 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r5}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='O', 0x28}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add4050000000000000001117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000005580)=""/4084, 0xff4}, {&(0x7f0000000140)=""/159, 0x9f}], 0x2}, 0x2000) 190.27975ms ago: executing program 3 (id=2105): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r1) sendmsg$alg(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x840}, 0x4040880) sendmsg$nl_route_sched(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001dc0)=@newchain={0x80, 0x64, 0xf09d2fbf8b68c555, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x8}, {0xfff1, 0xd}, {0x9, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x7, 0xa}}]}}, @filter_kind_options=@f_flower={{0xb}, {0x38, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @loopback}, @TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x5, [0xff, 0x0, 0xff]}, @TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xffffffff, 0x0, 0xffffff00, 0xffffff00]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x44000) 170.54921ms ago: executing program 4 (id=2106): r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x4, 0x1c, 0x45, 0x7, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x1, 0x7, 0x7f, 0x6}}) sendto$packet(r0, &(0x7f0000001000)="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", 0x1000, 0x800, &(0x7f0000000240)={0x11, 0x8, r1, 0x1, 0x2}, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x80, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x44, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @val={0x6, 0x2, 0x6}, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=@RTM_DELMDB={0x18, 0x55, 0x701}, 0x18}}, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f0000000040)={'ip6_vti0\x00'}) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000000)=0x3) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=@getae={0x44c, 0x1f, 0x100, 0x70bd27, 0x25dfdbfd, {{@in6=@loopback, 0x4d3, 0x2, 0x33}, @in=@rand_addr=0x64010101, 0x4, 0x3501}, [@proto={0x5, 0x19, 0x6c}, @algo_comp={0x15b, 0x3, {{'lzjh\x00'}, 0x898, "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"}}, @replay_val={0x10, 0xa, {0x70bd2d, 0x70bd25, 0x8}}, @replay_esn_val={0x38, 0x17, {0x7, 0x70bd2a, 0x70bd26, 0x70bd28, 0x70bd29, 0x3, [0xffff, 0xfff, 0x7, 0x8001, 0x8, 0x7, 0x7]}}, @algo_aead={0x84, 0x12, {{'pcrypt(ccm-aes-ce)\x00'}, 0x1c0, 0x0, "24210133609495464f29aec63d96c390d2346eff16f9f3b097ed93d71852be9764c5fa9d99bc1aaa92e5f46521e62c71c0600feaf3cbb341"}}, @policy_type={0xa, 0x10, {0x1}}, @algo_crypt={0xb6, 0x2, {{'chacha20-generic\x00'}, 0x370, "505a3e6ecaf4f5c2cfeac73ed7d8815482ef6febf97ab25b89ea513cfeb444157a358146baf75db4ac743adec193e79b6a3067c600d7b83106fbfc6a9810eb49b6a2c95f5effaf0e2d161df2bb13b85ea498c1ec09d5da18e8948c53ed81348508bcd4683ee457367e22484542ae"}}, @coaddr={0x14, 0xe, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @algo_aead={0x102, 0x12, {{'morus640\x00'}, 0x5b0, 0x180, "08d7962515ccc8c502aec440c559b5e0dd6cbd1b82c155bbb0278cf1f68f1010eefd72fec7581d4ae3b895cc35bb44f2baba6396ac628ef8aad8b33ab2f6b140dfc4bd4a9b7d529a3e45d49e97cce39dfc4178f416d68fe63a0362053e483a554d99f1892ca3005d6a579d22002ebbde6ea7ee8fffb00cfc0d8cc7077cee88e368916ce26fb12f53fdc611c0a17c26ecea60369f4fc1d023bcedeb06c46493684b6a588aac0f775cf0f8f7d86fac3e22ea192da30cae"}}]}, 0x44c}, 0x1, 0x0, 0x0, 0x4020000}, 0x0) 109.039116ms ago: executing program 0 (id=2107): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r1, 0x110, 0x6, 0x0, &(0x7f0000000280)=0x51) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=ANY=[@ANYBLOB="88000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="6b0033008000de00ffffffffffff080211000000505050505050"], 0x88}, 0x1, 0x0, 0x0, 0x880}, 0x0) 50.891418ms ago: executing program 4 (id=2108): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f0000000080), &(0x7f0000000340)=r4}, 0x20) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x5, 0xe, 0x0, &(0x7f0000000040)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa}, 0x50) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_skb}, 0x94) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x89f1, &(0x7f0000000900)={'ip6_vti0\x00', @random="0600002000"}) (async) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)={0x34, r1, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "b545b72882"}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x404c000) 0s ago: executing program 1 (id=2109): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000280)={'veth1_to_batadv\x00', &(0x7f0000000500)=@ethtool_gstrings={0x1b, 0x6, 0xd1, "0f29be35c8973586ab4d220249af4fcabccb78a3c999da251ab7e87d6737574e86205ddbb45db2c85d8ba85c07fe88e34de0d8c7eb23fdbba5f01cb3a756d80d0f9d9edbe270a4415747268d3a146359e1eb97e6eca450d94c85ca12d3629f7c29e7e34888cbe328a0d24fd5ef2cf04837f345c3cf756bf91af23d23d446ff0ab81954e588748e2a61cb430eea420e6e26df0a81a55eb4e218499320bdebbcf037288bb0c4e06cb865005da4024e6fb4ab04e0680d048d82076b04dcde8923c7c93f4dcc8d7cb54c31205caf3e03305966"}}) r3 = socket$l2tp6(0xa, 0x2, 0x73) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x3}) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000100001042dbd70000000000000000000", @ANYRES32=r6, @ANYBLOB="000000000000000030001280080001007369740024000280080014002f00000008000300ac"], 0x50}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r7, 0x0) socketpair$unix(0x1, 0x5927079d14f8643e, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) bind$unix(r8, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r9 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r9, 0x6b, 0x3, &(0x7f0000000000), 0x4) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000000c0)={@local, 0x78, r6}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100"], 0x3c}}, 0x0) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b0100000000"], 0x38}, 0x0) kernel console output (not intermixed with test programs): vtap: entered promiscuous mode [ 95.381807][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.397099][ T5874] Bluetooth: hci0: command tx timeout [ 95.404000][ T5870] veth1_vlan: entered promiscuous mode [ 95.458810][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.557078][ T5874] Bluetooth: hci2: command tx timeout [ 95.567514][ T3525] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.582118][ T3525] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.613494][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.622637][ T3525] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.631989][ T3525] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.641058][ T5869] Bluetooth: hci4: command tx timeout [ 95.641165][ T5874] Bluetooth: hci1: command tx timeout [ 95.647245][ T5874] Bluetooth: hci3: command tx timeout [ 95.703588][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.743950][ T5870] veth0_macvtap: entered promiscuous mode [ 95.764360][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.778953][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.805732][ T5870] veth1_macvtap: entered promiscuous mode [ 95.854873][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.865457][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.894412][ T5865] veth0_vlan: entered promiscuous mode [ 95.951736][ T5866] veth0_vlan: entered promiscuous mode [ 95.958531][ T5860] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.967622][ T5865] veth1_vlan: entered promiscuous mode [ 95.987064][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.003257][ T5867] veth0_vlan: entered promiscuous mode [ 96.033038][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.093421][ T5866] veth1_vlan: entered promiscuous mode [ 96.125328][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.145374][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.154283][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.167598][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.181464][ T5867] veth1_vlan: entered promiscuous mode [ 96.232549][ T5978] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 96.314661][ C1] vcan0: j1939_session_tx_dat: 0xffff888027336c00: queue data error: -100 [ 96.351477][ T5865] veth0_macvtap: entered promiscuous mode [ 96.369093][ T5865] veth1_macvtap: entered promiscuous mode [ 96.380869][ T5979] bond0: (slave bond_slave_1): Releasing backup interface [ 96.428311][ T5866] veth0_macvtap: entered promiscuous mode [ 96.464559][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.497625][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.506321][ T5866] veth1_macvtap: entered promiscuous mode [ 96.527097][ T5867] veth0_macvtap: entered promiscuous mode [ 96.537880][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.552921][ T1150] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.561920][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.592960][ T1150] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.603055][ T1150] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.619775][ T5867] veth1_macvtap: entered promiscuous mode [ 96.635192][ T1150] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.668990][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.687718][ T4327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.698440][ T4327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.718764][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.738465][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.771529][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.818261][ T3525] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.859738][ T3525] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.874970][ T3525] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.909181][ T61] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.922300][ T61] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.955753][ T4327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.964401][ T61] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.973467][ T4327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.006892][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.018996][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.019083][ T5983] Zero length message leads to an empty skb [ 97.150779][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.186496][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.247811][ T10] cfg80211: failed to load regulatory.db [ 97.259618][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.296219][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.351643][ T5991] tipc: Can't bind to reserved service type 1 [ 97.404329][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.454001][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.473366][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.482519][ T5874] Bluetooth: hci0: command tx timeout [ 97.506015][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.570529][ T5998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9'. [ 97.613366][ T5998] netlink: 'syz.2.9': attribute type 1 has an invalid length. [ 97.625306][ T5998] netlink: 'syz.2.9': attribute type 2 has an invalid length. [ 97.644252][ T5874] Bluetooth: hci2: command tx timeout [ 97.664782][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.674348][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.684705][ T5999] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒw˜}z [ 97.717299][ T5874] Bluetooth: hci3: command tx timeout [ 97.722794][ T5874] Bluetooth: hci1: command tx timeout [ 97.729544][ T5869] Bluetooth: hci4: command tx timeout [ 97.778253][ T6004] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8'. [ 97.825208][ T6005] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10'. [ 97.860176][ T6005] netlink: 80 bytes leftover after parsing attributes in process `syz.4.10'. [ 98.256783][ T6015] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 98.372026][ T6021] netlink: 'syz.0.12': attribute type 11 has an invalid length. [ 98.424138][ T6025] netlink: 44 bytes leftover after parsing attributes in process `syz.2.15'. [ 98.738041][ T6036] netlink: 'syz.4.16': attribute type 1 has an invalid length. [ 98.843865][ T6046] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 98.881547][ T6036] bridge0: port 3(ip6erspan0) entered blocking state [ 98.938020][ T6036] bridge0: port 3(ip6erspan0) entered disabled state [ 98.945208][ T6036] ip6erspan0: entered allmulticast mode [ 98.954557][ T6036] ip6erspan0: entered promiscuous mode [ 98.966174][ T6044] tipc: Started in network mode [ 98.998096][ T6044] tipc: Node identity 4, cluster identity 4711 [ 99.020201][ T6044] tipc: Node number set to 4 [ 99.417196][ T6074] netlink: 'syz.3.25': attribute type 1 has an invalid length. [ 99.462134][ T6079] netlink: 20 bytes leftover after parsing attributes in process `syz.1.26'. [ 99.494587][ T5949] IPVS: starting estimator thread 0... [ 99.539651][ T6079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.26'. [ 99.592781][ T6081] netlink: 'syz.1.26': attribute type 1 has an invalid length. [ 99.604081][ T6080] IPVS: using max 29 ests per chain, 69600 per kthread [ 99.669957][ T6079] vlan2: entered allmulticast mode [ 99.677034][ T6059] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 99.686810][ T6059] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 99.710508][ T6079] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 99.732085][ T6081] warning: `syz.1.26' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 100.089113][ T6098] netlink: 12 bytes leftover after parsing attributes in process `syz.2.33'. [ 100.090664][ T6099] tunl0: entered promiscuous mode [ 100.168594][ T6099] netlink: 'syz.3.31': attribute type 3 has an invalid length. [ 100.215998][ T6099] netlink: 9 bytes leftover after parsing attributes in process `syz.3.31'. [ 100.725281][ T6129] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 101.220817][ T6153] netlink: 'syz.0.49': attribute type 1 has an invalid length. [ 101.689153][ T6174] __nla_validate_parse: 2 callbacks suppressed [ 101.689173][ T6174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.51'. [ 101.771469][ T6175] netlink: 'syz.3.52': attribute type 1 has an invalid length. [ 101.779247][ T6175] netlink: 'syz.3.52': attribute type 11 has an invalid length. [ 101.803713][ T6175] netlink: 220 bytes leftover after parsing attributes in process `syz.3.52'. [ 102.077145][ T6185] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 102.111713][ T6185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.54'. [ 102.150830][ T6195] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.265419][ T6197] tunl0: left promiscuous mode [ 102.472460][ T6197] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.481266][ T6197] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.714053][ T6197] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 102.745333][ T6219] 8021q: VLANs not supported on caif0 [ 103.065803][ T6246] netlink: 4 bytes leftover after parsing attributes in process `syz.3.66'. [ 103.113180][ T6243] netlink: 256 bytes leftover after parsing attributes in process `syz.2.65'. [ 103.133420][ T6249] netlink: 24 bytes leftover after parsing attributes in process `syz.4.68'. [ 103.150605][ T6252] netlink: 12 bytes leftover after parsing attributes in process `syz.1.69'. [ 103.213368][ T6252] netlink: 12 bytes leftover after parsing attributes in process `syz.1.69'. [ 103.290187][ T6252] netlink: 12 bytes leftover after parsing attributes in process `syz.1.69'. [ 103.369456][ T6259] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 103.385467][ T6259] gretap1: entered promiscuous mode [ 103.391122][ T6259] gretap1: entered allmulticast mode [ 103.640806][ T6274] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.75'. [ 103.664578][ T6269] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 103.702879][ T6269] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 103.835534][ T6286] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 104.032747][ T6299] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 104.403313][ T6305] syzkaller1: entered promiscuous mode [ 104.414377][ T6305] syzkaller1: entered allmulticast mode [ 104.414835][ T6306] Illegal XDP return value 16128 on prog (id 8) dev lo, expect packet loss! [ 104.610031][ T6333] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 104.895180][ T6355] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 104.931132][ T6360] netlink: 'syz.3.100': attribute type 1 has an invalid length. [ 104.960298][ T6358] syzkaller0: entered promiscuous mode [ 104.979739][ T6358] syzkaller0: entered allmulticast mode [ 105.014278][ T6367] syzkaller0: entered promiscuous mode [ 105.019890][ T6367] syzkaller0: entered allmulticast mode [ 105.845610][ T6415] netlink: 'syz.4.116': attribute type 2 has an invalid length. [ 105.906318][ T6423] netlink: 'syz.3.120': attribute type 1 has an invalid length. [ 106.012156][ T36] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 106.040977][ T6233] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 106.057314][ T36] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 106.223810][ T6429] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.240385][ T6429] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.251851][ T6429] bond0 (unregistering): Released all slaves [ 106.296257][ T6437] vlan2: entered promiscuous mode [ 106.302074][ T6437] bridge0: entered promiscuous mode [ 106.426743][ T6232] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 106.703131][ T6463] __nla_validate_parse: 16 callbacks suppressed [ 106.703151][ T6463] netlink: 48 bytes leftover after parsing attributes in process `syz.2.130'. [ 106.745407][ T6464] netlink: 48 bytes leftover after parsing attributes in process `syz.2.130'. [ 106.839079][ T6233] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 106.944438][ T6472] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 107.016668][ T6479] sctp: [Deprecated]: syz.2.135 (pid 6479) Use of int in maxseg socket option. [ 107.016668][ T6479] Use struct sctp_assoc_value instead [ 107.261243][ T6497] netlink: 192 bytes leftover after parsing attributes in process `syz.2.140'. [ 107.494497][ T6509] veth0: entered promiscuous mode [ 107.516400][ T6508] veth0: left promiscuous mode [ 107.570325][ T6513] tipc: Started in network mode [ 107.575244][ T6513] tipc: Node identity , cluster identity 4711 [ 107.598154][ T6513] tipc: Failed to obtain node identity [ 107.613959][ T6513] tipc: Enabling of bearer rejected, failed to enable media [ 107.645882][ T6513] syzkaller0: entered promiscuous mode [ 107.672390][ T6513] syzkaller0: entered allmulticast mode [ 107.796935][ T6526] netlink: 12 bytes leftover after parsing attributes in process `syz.2.150'. [ 107.863877][ T6526] geneve2: entered promiscuous mode [ 107.955953][ T6530] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 107.982435][ T6531] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR [ 108.323443][ T5981] IPVS: starting estimator thread 0... [ 108.448031][ T6570] IPVS: using max 28 ests per chain, 67200 per kthread [ 108.601256][ T6580] dvmrp0: entered allmulticast mode [ 108.610801][ T6580] dvmrp0: left allmulticast mode [ 108.672648][ T6590] netlink: 28 bytes leftover after parsing attributes in process `syz.4.167'. [ 108.692489][ T6590] netlink: 4 bytes leftover after parsing attributes in process `syz.4.167'. [ 108.702081][ T6590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.167'. [ 108.868915][ T6608] netlink: 56 bytes leftover after parsing attributes in process `syz.0.172'. [ 108.872750][ T6601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.170'. [ 108.887584][ T6601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.170'. [ 108.983245][ T6614] syz_tun: entered allmulticast mode [ 109.003965][ T6614] Bluetooth: MGMT ver 1.23 [ 109.032107][ T6614] syz_tun: left allmulticast mode [ 109.243542][ T6626] IPv6: NLM_F_CREATE should be specified when creating new route [ 109.274748][ T6626] IPv6: NLM_F_REPLACE set, but no existing node found! [ 109.665075][ T1150] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.684379][ T1150] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.722762][ T1150] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.748815][ T1150] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.823666][ T6663] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 109.905558][ T6663] netlink: 'syz.4.191': attribute type 10 has an invalid length. [ 109.951254][ T6663] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 110.196721][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 110.427107][ T5183] block nbd0: Receive control failed (result -32) [ 111.187767][ T6719] netlink: 'syz.0.208': attribute type 3 has an invalid length. [ 111.495765][ T6719] netlink: 'syz.0.208': attribute type 1 has an invalid length. [ 111.650128][ T6743] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 111.879584][ T6754] __nla_validate_parse: 5 callbacks suppressed [ 111.879605][ T6754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.216'. [ 111.941298][ T6754] bridge_slave_1: left allmulticast mode [ 111.966610][ T6754] bridge_slave_1: left promiscuous mode [ 111.973140][ T6754] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.068500][ T6754] bridge_slave_0: left allmulticast mode [ 112.094635][ T6754] bridge_slave_0: left promiscuous mode [ 112.104977][ T6754] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.146348][ T6773] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 112.153733][ T6773] IPv6: NLM_F_CREATE should be set when creating new route [ 112.161126][ T6773] IPv6: NLM_F_CREATE should be set when creating new route [ 112.168417][ T6773] IPv6: NLM_F_CREATE should be set when creating new route [ 112.186209][ T6773] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 112.522777][ T6786] netlink: 256 bytes leftover after parsing attributes in process `syz.2.223'. [ 112.991338][ T6819] netlink: 68 bytes leftover after parsing attributes in process `syz.0.233'. [ 113.109554][ T6822] netlink: 'syz.1.235': attribute type 1 has an invalid length. [ 113.141580][ T6830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.237'. [ 113.245573][ T6836] netlink: 'syz.3.239': attribute type 1 has an invalid length. [ 113.254902][ T6836] netlink: 224 bytes leftover after parsing attributes in process `syz.3.239'. [ 113.264481][ T6836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.239'. [ 113.281345][ T6836] netlink: 'syz.3.239': attribute type 1 has an invalid length. [ 113.292595][ T6836] netlink: 224 bytes leftover after parsing attributes in process `syz.3.239'. [ 113.303718][ T6836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.239'. [ 113.405518][ T6845] netlink: 36 bytes leftover after parsing attributes in process `syz.2.237'. [ 113.443869][ T6825] syzkaller0: entered promiscuous mode [ 113.449612][ T6825] syzkaller0: entered allmulticast mode [ 113.647726][ T6850] netlink: 16 bytes leftover after parsing attributes in process `syz.2.243'. [ 113.743072][ T6862] netlink: 'syz.0.247': attribute type 10 has an invalid length. [ 113.794723][ T6862] team0: Device hsr_slave_0 failed to register rx_handler [ 114.066082][ T6880] trusted_key: syz.0.254 sent an empty control message without MSG_MORE. [ 114.325906][ T6887] netlink: 'syz.1.256': attribute type 2 has an invalid length. [ 114.540636][ T6895] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.505553][ T6921] netlink: 'syz.0.264': attribute type 3 has an invalid length. [ 115.831678][ T6941] openvswitch: netlink: IPv4 frag type 128 is out of range max 2 [ 116.226730][ T6954] IPVS: ip_vs_edit_dest(): server weight less than zero [ 116.233902][ T6233] IPVS: starting estimator thread 0... [ 116.346728][ T6956] IPVS: using max 25 ests per chain, 60000 per kthread [ 116.383680][ T6945] tipc: Started in network mode [ 116.406947][ T6945] tipc: Node identity ac14140f, cluster identity 4711 [ 116.422863][ T6945] tipc: New replicast peer: 255.255.255.255 [ 116.431105][ T6945] tipc: Enabled bearer , priority 10 [ 116.449862][ T6964] veth0: entered promiscuous mode [ 116.736782][ T6979] bridge2: entered allmulticast mode [ 116.798701][ T6984] openvswitch: netlink: IP tunnel dst address not specified [ 116.935829][ T6992] __nla_validate_parse: 9 callbacks suppressed [ 116.935852][ T6992] netlink: 4 bytes leftover after parsing attributes in process `syz.2.291'. [ 116.972991][ T6996] netlink: 'syz.1.289': attribute type 1 has an invalid length. [ 116.992185][ T6996] netlink: 'syz.1.289': attribute type 2 has an invalid length. [ 117.037390][ T6996] netlink: 'syz.1.289': attribute type 1 has an invalid length. [ 117.046259][ T6992] team1: entered promiscuous mode [ 117.062131][ T6992] team1: entered allmulticast mode [ 117.068034][ T6996] netlink: 1156 bytes leftover after parsing attributes in process `syz.1.289'. [ 117.236174][ T7009] netlink: 12 bytes leftover after parsing attributes in process `syz.3.295'. [ 117.274487][ T7009] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 117.299715][ T7019] netlink: 12 bytes leftover after parsing attributes in process `syz.3.295'. [ 117.478407][ T7026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.298'. [ 117.496605][ T7026] netlink: 16 bytes leftover after parsing attributes in process `syz.4.298'. [ 117.547782][ T6220] tipc: Node number set to 2886997007 [ 117.577833][ T7030] syz.2.301: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 117.640338][ T7030] CPU: 1 UID: 0 PID: 7030 Comm: syz.2.301 Not tainted 6.17.0-rc1-syzkaller-00127-g715c7a36d59f #0 PREEMPT(full) [ 117.640370][ T7030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 117.640392][ T7030] Call Trace: [ 117.640401][ T7030] [ 117.640411][ T7030] dump_stack_lvl+0x189/0x250 [ 117.640452][ T7030] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.640490][ T7030] ? __pfx__printk+0x10/0x10 [ 117.640522][ T7030] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 117.640548][ T7030] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 117.640574][ T7030] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 117.640603][ T7030] warn_alloc+0x214/0x310 [ 117.640637][ T7030] ? stack_depot_save_flags+0x40/0x860 [ 117.640668][ T7030] ? __pfx_warn_alloc+0x10/0x10 [ 117.640703][ T7030] ? kasan_save_track+0x4f/0x80 [ 117.640731][ T7030] ? xskq_create+0x56/0x170 [ 117.640756][ T7030] ? xsk_init_queue+0xb0/0x110 [ 117.640779][ T7030] ? xsk_setsockopt+0x4dc/0x8d0 [ 117.640802][ T7030] ? do_sock_setsockopt+0x17c/0x1b0 [ 117.640832][ T7030] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 117.640849][ T7030] ? do_syscall_64+0xfa/0x3b0 [ 117.640877][ T7030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.640907][ T7030] __vmalloc_node_range_noprof+0x125/0x12f0 [ 117.640971][ T7030] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 117.641011][ T7030] ? __kasan_kmalloc+0x93/0xb0 [ 117.641042][ T7030] vmalloc_user_noprof+0xad/0xf0 [ 117.641071][ T7030] ? xskq_create+0xbf/0x170 [ 117.641099][ T7030] xskq_create+0xbf/0x170 [ 117.641128][ T7030] xsk_init_queue+0xb0/0x110 [ 117.641155][ T7030] xsk_setsockopt+0x4dc/0x8d0 [ 117.641184][ T7030] ? __pfx_xsk_setsockopt+0x10/0x10 [ 117.641208][ T7030] ? __pfx_aa_sk_perm+0x10/0x10 [ 117.641243][ T7030] ? aa_sock_opt_perm+0xff/0x1b0 [ 117.641267][ T7030] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 117.641289][ T7030] ? __pfx_xsk_setsockopt+0x10/0x10 [ 117.641322][ T7030] do_sock_setsockopt+0x17c/0x1b0 [ 117.641362][ T7030] __x64_sys_setsockopt+0x13f/0x1b0 [ 117.641389][ T7030] do_syscall_64+0xfa/0x3b0 [ 117.641417][ T7030] ? lockdep_hardirqs_on+0x9c/0x150 [ 117.641444][ T7030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.641476][ T7030] ? clear_bhb_loop+0x60/0xb0 [ 117.641501][ T7030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.641520][ T7030] RIP: 0033:0x7f66ff58ebe9 [ 117.641546][ T7030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.641562][ T7030] RSP: 002b:00007f670035b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 117.641583][ T7030] RAX: ffffffffffffffda RBX: 00007f66ff7b5fa0 RCX: 00007f66ff58ebe9 [ 117.641598][ T7030] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 117.641610][ T7030] RBP: 00007f66ff611e19 R08: 0000000000000004 R09: 0000000000000000 [ 117.641622][ T7030] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.641635][ T7030] R13: 00007f66ff7b6038 R14: 00007f66ff7b5fa0 R15: 00007ffee1bb0678 [ 117.641669][ T7030] [ 117.956193][ T7030] Mem-Info: [ 117.961545][ T7030] active_anon:3645 inactive_anon:0 isolated_anon:0 [ 117.961545][ T7030] active_file:2884 inactive_file:39834 isolated_file:0 [ 117.961545][ T7030] unevictable:768 dirty:97 writeback:0 [ 117.961545][ T7030] slab_reclaimable:11141 slab_unreclaimable:95414 [ 117.961545][ T7030] mapped:28783 shmem:1410 pagetables:871 [ 117.961545][ T7030] sec_pagetables:0 bounce:0 [ 117.961545][ T7030] kernel_misc_reclaimable:0 [ 117.961545][ T7030] free:1337521 free_pcp:15163 free_cma:0 [ 118.037292][ T7030] Node 0 active_anon:14680kB inactive_anon:0kB active_file:11536kB inactive_file:159136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115332kB dirty:388kB writeback:0kB shmem:4104kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11956kB pagetables:3432kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 118.069944][ T7030] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:80kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 118.109240][ T7030] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 118.142630][ T7030] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 118.166956][ T7030] Node 0 DMA32 free:1450692kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15004kB inactive_anon:0kB active_file:11536kB inactive_file:157560kB unevictable:1536kB writepending:388kB present:3129332kB managed:2557476kB mlocked:0kB bounce:0kB free_pcp:40920kB local_pcp:21400kB free_cma:0kB [ 118.227774][ T7047] netlink: 12 bytes leftover after parsing attributes in process `syz.0.302'. [ 118.248364][ T7030] lowmem_reserve[]: 0 0 1 1 1 [ 118.253348][ T7030] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 118.269820][ T7047] netlink: 12 bytes leftover after parsing attributes in process `syz.0.302'. [ 118.291993][ T7030] lowmem_reserve[]: 0 0 0 0 0 [ 118.296911][ T7030] Node 1 Normal free:3884628kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17840kB local_pcp:10624kB free_cma:0kB [ 118.333777][ T7030] lowmem_reserve[]: 0 0 0 0 0 [ 118.356805][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 118.378725][ T7030] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 118.427342][ T7030] Node 0 DMA32: 477*4kB (UM) 107*8kB (UM) 162*16kB (UME) 107*32kB (UME) 40*64kB (UME) 22*128kB (UM) 12*256kB (UM) 8*512kB (ME) 3*1024kB (M) 5*2048kB (ME) 346*4096kB (M) = 1451852kB [ 118.465771][ T7030] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 118.484370][ T7030] Node 1 Normal: 183*4kB (UME) 39*8kB (UME) 40*16kB (UME) 64*32kB (UME) 19*64kB (UME) 6*128kB (UME) 6*256kB (UME) 3*512kB (ME) 3*1024kB (UME) 1*2048kB (E) 945*4096kB (M) = 3884628kB [ 118.503305][ T7057] IPVS: length: 228 != 24 [ 118.563799][ T7030] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 118.581737][ T7030] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 118.591496][ T7030] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 118.616961][ T7030] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 118.667223][ T7030] 44076 total pagecache pages [ 118.671998][ T7030] 0 pages in swap cache [ 118.684586][ T7030] Free swap = 124996kB [ 118.695242][ T7030] Total swap = 124996kB [ 118.699803][ T7030] 2097051 pages RAM [ 118.703647][ T7030] 0 pages HighMem/MovableOnly [ 118.714448][ T7030] 425656 pages reserved [ 118.724445][ T7030] 0 pages cma reserved [ 118.782065][ T7073] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 118.809670][ T7073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.313'. [ 118.821959][ T7078] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 118.931609][ T7083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.316'. [ 119.381670][ T7112] bridge0: port 3(veth0_to_bridge) entered blocking state [ 119.418307][ T7112] bridge0: port 3(veth0_to_bridge) entered disabled state [ 119.445750][ T7112] veth0_to_bridge: entered allmulticast mode [ 119.472097][ T7112] veth0_to_bridge: entered promiscuous mode [ 119.752629][ T7131] netlink: 'syz.1.328': attribute type 11 has an invalid length. [ 119.813157][ T36] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.856026][ T36] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.894827][ T36] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.928868][ T36] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.261931][ T7157] netlink: 'syz.4.334': attribute type 1 has an invalid length. [ 120.419718][ T7166] netlink: 'syz.0.337': attribute type 1 has an invalid length. [ 121.018325][ T7208] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 121.539710][ T7234] netlink: 'syz.1.356': attribute type 17 has an invalid length. [ 121.590900][ T7238] tipc: Enabling of bearer rejected, failed to enable media [ 121.812751][ T7245] pim6reg: entered allmulticast mode [ 121.858604][ T7250] netlink: zone id is out of range [ 121.863995][ T7250] netlink: zone id is out of range [ 121.887461][ T7250] netlink: zone id is out of range [ 121.900285][ T7250] netlink: zone id is out of range [ 121.905456][ T7250] netlink: zone id is out of range [ 121.910762][ T7250] netlink: zone id is out of range [ 121.923820][ T7250] netlink: zone id is out of range [ 121.943668][ T7250] netlink: zone id is out of range [ 121.949562][ T7250] netlink: zone id is out of range [ 123.060063][ T7312] tc_dump_action: action bad kind [ 123.190453][ T7318] __nla_validate_parse: 17 callbacks suppressed [ 123.190476][ T7318] netlink: 88 bytes leftover after parsing attributes in process `syz.2.385'. [ 123.233234][ T7322] netlink: 52 bytes leftover after parsing attributes in process `syz.4.387'. [ 123.344817][ T7327] netlink: 'syz.2.389': attribute type 1 has an invalid length. [ 123.414465][ T7327] gretap2: entered promiscuous mode [ 123.424754][ T7327] bond1: (slave gretap2): making interface the new active one [ 123.435360][ T7327] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 123.499840][ T7327] netlink: 'syz.2.389': attribute type 1 has an invalid length. [ 123.541308][ T7327] netlink: 'syz.2.389': attribute type 2 has an invalid length. [ 123.557180][ T7343] tipc: Started in network mode [ 123.562227][ T7343] tipc: Node identity 6a3909c68ec8, cluster identity 4711 [ 123.570387][ T7343] tipc: Enabled bearer , priority 0 [ 123.594573][ T7327] macvlan2: entered promiscuous mode [ 123.600603][ T7327] macvlan2: entered allmulticast mode [ 123.607282][ T7327] bond1: entered promiscuous mode [ 123.613566][ T7327] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 123.622760][ T7327] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 123.669465][ T7327] bond1: left promiscuous mode [ 123.713052][ T7343] syzkaller0: entered promiscuous mode [ 123.722430][ T7343] syzkaller0: entered allmulticast mode [ 123.752753][ T7351] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 123.800220][ T7343] tipc: Resetting bearer [ 123.812352][ T7342] tipc: Resetting bearer [ 123.850294][ T7342] tipc: Disabling bearer [ 124.003767][ T7361] netlink: 80 bytes leftover after parsing attributes in process `syz.4.399'. [ 124.059864][ T7367] netlink: 12 bytes leftover after parsing attributes in process `syz.0.401'. [ 124.659378][ T7402] netlink: 32 bytes leftover after parsing attributes in process `syz.0.414'. [ 124.669997][ T7402] netlink: 32 bytes leftover after parsing attributes in process `syz.0.414'. [ 124.739614][ T7405] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 124.797724][ T7408] IPVS: length: 157 != 24 [ 124.825855][ T7413] IPVS: length: 157 != 24 [ 125.184923][ T7431] netlink: 20 bytes leftover after parsing attributes in process `syz.4.423'. [ 125.530930][ T7428] team0: Device vti0 is of different type [ 125.569535][ T36] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 125.609047][ T36] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 125.630491][ T36] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 125.675262][ T7442] netlink: 72 bytes leftover after parsing attributes in process `syz.2.425'. [ 125.700468][ T36] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 125.750268][ T7445] netlink: 12 bytes leftover after parsing attributes in process `syz.4.426'. [ 125.820897][ T7455] netlink: 104 bytes leftover after parsing attributes in process `syz.1.427'. [ 126.641650][ T7505] netlink: 'syz.3.442': attribute type 1 has an invalid length. [ 126.702528][ T7505] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.734623][ T7511] netlink: 'syz.4.444': attribute type 8 has an invalid length. [ 126.738504][ T7510] bond1: (slave ip6erspan0): making interface the new active one [ 126.761186][ T7510] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 126.835765][ T7515] veth1_macvtap: left promiscuous mode [ 126.845068][ T7515] macsec0: entered promiscuous mode [ 126.850530][ T7515] macsec0: entered allmulticast mode [ 126.860951][ T7517] veth1_macvtap: entered promiscuous mode [ 126.867367][ T7517] veth1_macvtap: entered allmulticast mode [ 126.873535][ T7517] macsec0: left promiscuous mode [ 126.879318][ T7517] macsec0: left allmulticast mode [ 126.886715][ T7517] veth1_macvtap: left allmulticast mode [ 126.950622][ T7520] netlink: 'syz.0.447': attribute type 21 has an invalid length. [ 126.991609][ T7520] netlink: 'syz.0.447': attribute type 4 has an invalid length. [ 127.006220][ T7520] netlink: 'syz.0.447': attribute type 5 has an invalid length. [ 127.025108][ T7523] netlink: 'syz.0.447': attribute type 21 has an invalid length. [ 127.044463][ T7523] netlink: 'syz.0.447': attribute type 4 has an invalid length. [ 128.255263][ T7592] xt_socket: unknown flags 0x50 [ 128.801055][ T7619] __nla_validate_parse: 12 callbacks suppressed [ 128.801080][ T7619] netlink: 20 bytes leftover after parsing attributes in process `syz.1.475'. [ 128.827226][ T7621] validate_nla: 1 callbacks suppressed [ 128.827247][ T7621] netlink: 'syz.0.477': attribute type 1 has an invalid length. [ 128.885354][ T7621] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 128.969185][ T7621] veth5: entered promiscuous mode [ 128.977750][ T7621] bond1: (slave veth5): Enslaving as a backup interface with a down link [ 129.120083][ T7636] netlink: 'syz.1.478': attribute type 10 has an invalid length. [ 129.224362][ T7640] netlink: 36 bytes leftover after parsing attributes in process `syz.2.481'. [ 129.261487][ T7633] net_ratelimit: 224 callbacks suppressed [ 129.261510][ T7633] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 129.385769][ T7646] netlink: 4 bytes leftover after parsing attributes in process `syz.3.483'. [ 129.450138][ T7648] netlink: 16 bytes leftover after parsing attributes in process `syz.0.484'. [ 129.618184][ T7651] netlink: 20 bytes leftover after parsing attributes in process `syz.3.485'. [ 129.913211][ T7654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.486'. [ 129.961597][ T7654] netlink: 96 bytes leftover after parsing attributes in process `syz.4.486'. [ 129.992717][ T7660] netlink: 16 bytes leftover after parsing attributes in process `syz.1.488'. [ 130.013725][ T7660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.488'. [ 130.167334][ T7666] netlink: 'syz.3.491': attribute type 21 has an invalid length. [ 130.183558][ T7666] netlink: 152 bytes leftover after parsing attributes in process `syz.3.491'. [ 130.836773][ T7707] raw_sendmsg: syz.4.502 forgot to set AF_INET. Fix it! [ 130.939901][ T7705] netlink: 'syz.1.501': attribute type 21 has an invalid length. [ 130.990833][ T7705] netlink: 'syz.1.501': attribute type 6 has an invalid length. [ 131.281496][ T7727] netlink: 'syz.4.509': attribute type 18 has an invalid length. [ 131.447193][ T7737] macvlan2: entered allmulticast mode [ 131.454174][ T7737] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 132.088475][ T7757] sctp: [Deprecated]: syz.0.520 (pid 7757) Use of int in maxseg socket option. [ 132.088475][ T7757] Use struct sctp_assoc_value instead [ 132.538207][ T30] audit: type=1107 audit(1755344538.085:2): pid=7768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 132.561710][ T7769] can: request_module (can-proto-0) failed. [ 133.029763][ T7799] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 133.272048][ T7806] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 133.346381][ T7806] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 133.877871][ T7845] nbd1: detected capacity change from 0 to 127 [ 133.953990][ T7860] sctp: [Deprecated]: syz.4.551 (pid 7860) Use of int in maxseg socket option. [ 133.953990][ T7860] Use struct sctp_assoc_value instead [ 133.980710][ T5183] block nbd1: Receive control failed (result -32) [ 133.984331][ T7847] __nla_validate_parse: 42 callbacks suppressed [ 133.984357][ T7847] netlink: 64 bytes leftover after parsing attributes in process `syz.2.547'. [ 134.205382][ T7870] netlink: 'syz.4.555': attribute type 1 has an invalid length. [ 134.356695][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 134.517085][ T7885] netlink: 56 bytes leftover after parsing attributes in process `syz.2.562'. [ 134.672975][ T7899] netlink: 'syz.4.568': attribute type 83 has an invalid length. [ 134.686025][ T7901] netlink: 'syz.1.567': attribute type 11 has an invalid length. [ 134.827804][ T7910] netlink: 12 bytes leftover after parsing attributes in process `syz.2.571'. [ 134.858826][ T7910] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.866267][ T7910] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.874978][ T7910] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.882476][ T7910] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.199501][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 161.866706][ T7916] netlink: 'syz.2.574': attribute type 39 has an invalid length. [ 162.325138][ T7947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.583'. [ 162.796926][ T7968] tipc: Enabling of bearer rejected, failed to enable media [ 162.867708][ T7965] netlink: 165 bytes leftover after parsing attributes in process `syz.2.588'. [ 163.044606][ T7980] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 163.213827][ T7987] netlink: 12 bytes leftover after parsing attributes in process `syz.4.594'. [ 163.226150][ T7984] netlink: 'syz.2.593': attribute type 1 has an invalid length. [ 163.376740][ T7989] syz_tun: entered allmulticast mode [ 163.494409][ T7987] syz_tun: left allmulticast mode [ 163.643352][ T8009] netlink: 'syz.2.601': attribute type 12 has an invalid length. [ 163.651301][ T8015] netlink: 32 bytes leftover after parsing attributes in process `syz.3.603'. [ 163.709378][ T8018] netlink: 'syz.1.604': attribute type 27 has an invalid length. [ 163.809096][ T8021] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 163.924733][ T8027] netlink: 12 bytes leftover after parsing attributes in process `syz.4.609'. [ 163.961726][ T8027] xfrm1: entered promiscuous mode [ 163.970305][ T8027] xfrm1: entered allmulticast mode [ 163.983525][ T8035] netlink: 12 bytes leftover after parsing attributes in process `syz.4.609'. [ 164.009624][ T8034] netlink: 12 bytes leftover after parsing attributes in process `syz.1.610'. [ 164.029557][ T8034] geneve2: entered promiscuous mode [ 164.540831][ T8065] : entered promiscuous mode [ 164.586862][ T8069] sctp: [Deprecated]: syz.0.621 (pid 8069) Use of int in maxseg socket option. [ 164.586862][ T8069] Use struct sctp_assoc_value instead [ 164.976307][ T8087] netlink: 28 bytes leftover after parsing attributes in process `syz.0.629'. [ 165.033652][ T8094] netlink: 'syz.4.631': attribute type 10 has an invalid length. [ 165.047380][ T8094] veth0_vlan: entered allmulticast mode [ 165.155328][ T8094] veth0_vlan: left promiscuous mode [ 165.166101][ T8094] veth0_vlan: entered promiscuous mode [ 165.178152][ T8094] team0: Device veth0_vlan failed to register rx_handler [ 165.203132][ T8100] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.511261][ T8104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.635'. [ 165.572598][ T8117] !€ÿ: renamed from bond_slave_0 (while UP) [ 165.854523][ T8133] netlink: 12 bytes leftover after parsing attributes in process `syz.0.640'. [ 166.272069][ T8161] bridge_slave_0: left allmulticast mode [ 166.283861][ T8161] bridge_slave_0: left promiscuous mode [ 166.300425][ T8161] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.329802][ T8161] bridge_slave_1: left allmulticast mode [ 166.350301][ T8161] bridge_slave_1: left promiscuous mode [ 166.375043][ T8161] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.401479][ T8167] warn_alloc: 1 callbacks suppressed [ 166.401506][ T8167] syz.4.651: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 166.464938][ T8161] bond0: (slave bond_slave_0): Releasing backup interface [ 166.475571][ T8167] CPU: 1 UID: 0 PID: 8167 Comm: syz.4.651 Not tainted 6.17.0-rc1-syzkaller-00127-g715c7a36d59f #0 PREEMPT(full) [ 166.475601][ T8167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 166.475613][ T8167] Call Trace: [ 166.475621][ T8167] [ 166.475630][ T8167] dump_stack_lvl+0x189/0x250 [ 166.475664][ T8167] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.475689][ T8167] ? __pfx__printk+0x10/0x10 [ 166.475719][ T8167] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 166.475743][ T8167] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 166.475770][ T8167] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 166.475797][ T8167] warn_alloc+0x214/0x310 [ 166.475836][ T8167] ? __pfx_warn_alloc+0x10/0x10 [ 166.475878][ T8167] ? __get_vm_area_node+0x28f/0x300 [ 166.475907][ T8167] ? xskq_create+0xbf/0x170 [ 166.475938][ T8167] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 166.476003][ T8167] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 166.476040][ T8167] ? __kasan_kmalloc+0x93/0xb0 [ 166.476072][ T8167] vmalloc_user_noprof+0xad/0xf0 [ 166.476101][ T8167] ? xskq_create+0xbf/0x170 [ 166.476128][ T8167] xskq_create+0xbf/0x170 [ 166.476158][ T8167] xsk_init_queue+0xb0/0x110 [ 166.476187][ T8167] xsk_setsockopt+0x57b/0x8d0 [ 166.476214][ T8167] ? __pfx_xsk_setsockopt+0x10/0x10 [ 166.476239][ T8167] ? __pfx_aa_sk_perm+0x10/0x10 [ 166.476272][ T8167] ? __fget_files+0x2a/0x420 [ 166.476288][ T8167] ? aa_sock_opt_perm+0xff/0x1b0 [ 166.476311][ T8167] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 166.476334][ T8167] ? __pfx_xsk_setsockopt+0x10/0x10 [ 166.476360][ T8167] do_sock_setsockopt+0x17c/0x1b0 [ 166.476403][ T8167] __x64_sys_setsockopt+0x13f/0x1b0 [ 166.476429][ T8167] do_syscall_64+0xfa/0x3b0 [ 166.476456][ T8167] ? lockdep_hardirqs_on+0x9c/0x150 [ 166.476484][ T8167] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.476512][ T8167] ? clear_bhb_loop+0x60/0xb0 [ 166.476538][ T8167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.476557][ T8167] RIP: 0033:0x7f949598ebe9 [ 166.476575][ T8167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.476590][ T8167] RSP: 002b:00007f94967ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 166.476611][ T8167] RAX: ffffffffffffffda RBX: 00007f9495bb5fa0 RCX: 00007f949598ebe9 [ 166.476625][ T8167] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000004 [ 166.476636][ T8167] RBP: 00007f9495a11e19 R08: 0000000000000004 R09: 0000000000000000 [ 166.476648][ T8167] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000000 [ 166.476660][ T8167] R13: 00007f9495bb6038 R14: 00007f9495bb5fa0 R15: 00007ffecbac08d8 [ 166.476693][ T8167] [ 166.789797][ T8161] bond0: (slave bond_slave_1): Releasing backup interface [ 166.811764][ T8167] Mem-Info: [ 166.815108][ T8167] active_anon:6189 inactive_anon:0 isolated_anon:0 [ 166.815108][ T8167] active_file:3012 inactive_file:39853 isolated_file:0 [ 166.815108][ T8167] unevictable:768 dirty:110 writeback:0 [ 166.815108][ T8167] slab_reclaimable:10541 slab_unreclaimable:98194 [ 166.815108][ T8167] mapped:28829 shmem:3392 pagetables:920 [ 166.815108][ T8167] sec_pagetables:0 bounce:0 [ 166.815108][ T8167] kernel_misc_reclaimable:0 [ 166.815108][ T8167] free:1336207 free_pcp:12256 free_cma:0 [ 166.894842][ T8167] Node 0 active_anon:16356kB inactive_anon:0kB active_file:12048kB inactive_file:159212kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115316kB dirty:436kB writeback:0kB shmem:3932kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11804kB pagetables:3628kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 166.944174][ T8161] team0: Port device team_slave_0 removed [ 166.955759][ T8167] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:80kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 166.955815][ T8182] netlink: 'syz.0.654': attribute type 3 has an invalid length. [ 166.996609][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 167.026505][ T8167] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 167.089598][ T8161] team0: Port device team_slave_1 removed [ 167.104506][ T8167] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 167.113670][ T8167] Node 0 DMA32 free:1449848kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16400kB inactive_anon:0kB active_file:12048kB inactive_file:157636kB unevictable:1536kB writepending:436kB present:3129332kB managed:2557476kB mlocked:0kB bounce:0kB free_pcp:35296kB local_pcp:15116kB free_cma:0kB [ 167.149953][ T8167] lowmem_reserve[]: 0 0 1 1 1 [ 167.154742][ T8167] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 167.156240][ T8161] bond1: (slave gretap2): Releasing active interface [ 167.186142][ T8167] lowmem_reserve[]: 0 0 0 0 0 [ 167.200747][ T8167] Node 1 Normal free:3885668kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16832kB local_pcp:6688kB free_cma:0kB [ 167.232974][ T8167] lowmem_reserve[]: 0 0 0 0 0 [ 167.239246][ T8167] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 167.252062][ T8167] Node 0 DMA32: 958*4kB (UM) 506*8kB (UME) 177*16kB (UM) 841*32kB (UME) 294*64kB (UME) 60*128kB (UME) 19*256kB (UME) 7*512kB (UME) 5*1024kB (ME) 4*2048kB (UM) 333*4096kB (UM) = 1449848kB [ 167.317939][ T8167] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 167.356578][ T8167] Node 1 Normal: 187*4kB (UME) 39*8kB (UME) 40*16kB (UME) 84*32kB (UME) 25*64kB (UME) 6*128kB (UME) 6*256kB (UME) 3*512kB (ME) 3*1024kB (UME) 1*2048kB (E) 945*4096kB (M) = 3885668kB [ 167.393796][ T8195] __nla_validate_parse: 3 callbacks suppressed [ 167.393818][ T8195] netlink: 52 bytes leftover after parsing attributes in process `syz.2.656'. [ 167.409734][ T8167] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 167.409760][ T8167] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 167.409779][ T8167] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 167.409796][ T8167] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 167.409814][ T8167] 44224 total pagecache pages [ 167.409823][ T8167] 0 pages in swap cache [ 167.409831][ T8167] Free swap = 124996kB [ 167.409840][ T8167] Total swap = 124996kB [ 167.409850][ T8167] 2097051 pages RAM [ 167.409859][ T8167] 0 pages HighMem/MovableOnly [ 167.409867][ T8167] 425656 pages reserved [ 167.409876][ T8167] 0 pages cma reserved [ 167.504473][ T8197] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.636906][ T8202] team0: Device vti0 is of different type [ 167.694022][ T8207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.661'. [ 167.822969][ T8215] netlink: 'syz.2.664': attribute type 1 has an invalid length. [ 167.834332][ T8218] netlink: 'syz.2.664': attribute type 1 has an invalid length. [ 167.883004][ T8216] netlink: 'syz.3.665': attribute type 5 has an invalid length. [ 167.963611][ T8222] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 168.054299][ T8229] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 168.065058][ T8229] netlink: 8 bytes leftover after parsing attributes in process `syz.3.668'. [ 168.313454][ T8240] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 168.326832][ T8251] tipc: Started in network mode [ 168.334105][ T8251] tipc: Node identity , cluster identity 3 [ 168.342514][ T8251] tipc: Failed to obtain node identity [ 168.363668][ T8251] tipc: Enabling of bearer rejected, failed to enable media [ 168.507766][ T8260] netlink: 16 bytes leftover after parsing attributes in process `syz.2.676'. [ 168.516884][ T8260] nbd: must specify at least one socket [ 168.669468][ T8262] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 168.728822][ T8268] netlink: 132 bytes leftover after parsing attributes in process `syz.1.680'. [ 168.829282][ T8277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.682'. [ 168.918313][ T8281] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.933366][ T8282] netlink: 'syz.4.684': attribute type 6 has an invalid length. [ 169.116558][ T8291] netlink: 24 bytes leftover after parsing attributes in process `syz.0.687'. [ 169.193891][ T8299] tipc: Enabled bearer , priority 0 [ 169.215927][ T8291] syzkaller0: entered promiscuous mode [ 169.238507][ T5183] Bluetooth: hci0: command tx timeout [ 169.250265][ T8291] syzkaller0: entered allmulticast mode [ 169.368472][ T8306] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 169.405474][ T8299] tipc: Resetting bearer [ 169.460955][ T8290] tipc: Resetting bearer [ 169.508241][ T8290] tipc: Disabling bearer [ 169.549008][ T8316] netlink: 'syz.2.692': attribute type 21 has an invalid length. [ 169.578365][ T8316] netlink: 4 bytes leftover after parsing attributes in process `syz.2.692'. [ 169.787811][ T8326] netlink: 20 bytes leftover after parsing attributes in process `syz.0.695'. [ 169.806660][ T8326] netlink: 88 bytes leftover after parsing attributes in process `syz.0.695'. [ 169.911547][ T8334] netlink: 'syz.1.697': attribute type 21 has an invalid length. [ 169.923550][ T8333] syz_tun: entered allmulticast mode [ 169.932476][ T8331] syz_tun: left allmulticast mode [ 169.999049][ T8337] geneve2: entered promiscuous mode [ 170.123049][ T8344] netlink: 'syz.1.701': attribute type 8 has an invalid length. [ 170.143779][ T8349] netlink: 'syz.3.703': attribute type 3 has an invalid length. [ 170.625874][ T8380] tipc: New replicast peer: 255.255.255.255 [ 170.632951][ T8380] tipc: Enabled bearer , priority 10 [ 170.711204][ T8382] tipc: Enabled bearer , priority 0 [ 170.725217][ T8382] syzkaller0: entered promiscuous mode [ 170.742446][ T8382] syzkaller0: entered allmulticast mode [ 170.856118][ T8382] tipc: Resetting bearer [ 170.909477][ T8381] tipc: Resetting bearer [ 170.948995][ T8381] tipc: Disabling bearer [ 171.159345][ T8409] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 171.429712][ T8428] netlink: 'syz.3.733': attribute type 11 has an invalid length. [ 171.750977][ T8444] pim6reg1: entered promiscuous mode [ 171.765916][ T8444] pim6reg1: entered allmulticast mode [ 172.338064][ T8468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.389300][ T8468] bond0: (slave rose0): Enslaving as an active interface with an up link [ 172.407075][ T8470] batadv1: entered allmulticast mode [ 172.593877][ T8480] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 172.799819][ T8492] __nla_validate_parse: 17 callbacks suppressed [ 172.799838][ T8492] netlink: 48 bytes leftover after parsing attributes in process `syz.2.755'. [ 172.881364][ T8492] netlink: 12 bytes leftover after parsing attributes in process `syz.2.755'. [ 173.202832][ T8505] openvswitch: netlink: IPv4 tun info is not correct [ 173.308873][ T8506] netlink: 4 bytes leftover after parsing attributes in process `syz.3.757'. [ 173.361991][ T8518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.762'. [ 173.377271][ T8518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.762'. [ 173.387837][ T8518] netlink: 20 bytes leftover after parsing attributes in process `syz.0.762'. [ 173.443054][ T8522] netlink: 36 bytes leftover after parsing attributes in process `syz.1.764'. [ 173.535857][ T8525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.765'. [ 173.852608][ T8551] netlink: 28 bytes leftover after parsing attributes in process `syz.2.770'. [ 173.943688][ T8555] netlink: 4 bytes leftover after parsing attributes in process `syz.0.774'. [ 173.982175][ T8557] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 174.314755][ T8568] netlink: 'syz.0.779': attribute type 1 has an invalid length. [ 174.324563][ T8570] netlink: 'syz.0.779': attribute type 1 has an invalid length. [ 174.400429][ T8568] 8021q: adding VLAN 0 to HW filter on device bond3 [ 174.412225][ T8568] bond2: (slave bond3): making interface the new active one [ 174.426020][ T8568] bond2: (slave bond3): Enslaving as an active interface with an up link [ 174.462600][ T8576] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 174.471928][ T8578] netlink: 'syz.4.781': attribute type 4 has an invalid length. [ 174.484500][ T8568] 8021q: adding VLAN 0 to HW filter on device bond2 [ 174.713742][ T8588] netlink: 'syz.2.785': attribute type 4 has an invalid length. [ 174.724043][ T8589] netlink: 'syz.4.784': attribute type 2 has an invalid length. [ 174.881068][ T8594] tipc: Enabled bearer , priority 0 [ 174.888768][ T8594] syzkaller0: entered promiscuous mode [ 174.894346][ T8594] syzkaller0: entered allmulticast mode [ 174.907625][ T8603] netlink: 'syz.4.789': attribute type 6 has an invalid length. [ 174.991549][ T8593] tipc: Resetting bearer [ 175.044637][ T8593] tipc: Disabling bearer [ 175.055410][ T8603] netlink: 'syz.4.789': attribute type 6 has an invalid length. [ 175.532263][ T8633] veth0: entered promiscuous mode [ 175.549658][ T8631] veth0: left promiscuous mode [ 177.149464][ T8657] netdevsim netdevsim0: Direct firmware load for ..€ failed with error -2 [ 177.162021][ T8657] netdevsim netdevsim0: Falling back to sysfs fallback for: ..€ [ 177.360493][ T8688] netlink: 'syz.3.813': attribute type 1 has an invalid length. [ 177.532030][ T6230] hid (null): unknown global tag 0xe [ 177.558243][ T6230] hid (null): nested delimiters [ 177.617191][ T8706] netlink: 'syz.4.821': attribute type 1 has an invalid length. [ 177.737246][ T8706] 8021q: adding VLAN 0 to HW filter on device bond2 [ 177.891964][ T8717] __nla_validate_parse: 16 callbacks suppressed [ 177.891984][ T8717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.823'. [ 177.909803][ T8719] netlink: 28 bytes leftover after parsing attributes in process `syz.4.821'. [ 177.926886][ T8717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.823'. [ 177.935821][ T8717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.823'. [ 177.945891][ T8706] bond1: (slave bond2): making interface the new active one [ 177.958685][ T8706] bond1: (slave bond2): Enslaving as an active interface with an up link [ 177.998939][ T8706] netlink: 'syz.4.821': attribute type 12 has an invalid length. [ 178.075692][ T8715] bond1: (slave gretap2): Enslaving as a backup interface with an up link [ 178.124294][ T8719] 8021q: adding VLAN 0 to HW filter on device bond1 [ 178.267336][ T8731] netlink: 24 bytes leftover after parsing attributes in process `syz.2.825'. [ 178.345787][ T8737] netlink: 28 bytes leftover after parsing attributes in process `syz.4.829'. [ 178.372051][ T8737] netlink: 28 bytes leftover after parsing attributes in process `syz.4.829'. [ 178.472827][ T8744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.831'. [ 178.545492][ T8744] netlink: 20 bytes leftover after parsing attributes in process `syz.3.831'. [ 178.594749][ T8744] geneve2: entered promiscuous mode [ 178.667278][ T8744] geneve2: entered allmulticast mode [ 178.674430][ T3525] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 178.694129][ T3525] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 178.739182][ T3525] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 178.778415][ T3525] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 178.858862][ T8762] netlink: 16 bytes leftover after parsing attributes in process `syz.0.836'. [ 178.993556][ T30] audit: type=1107 audit(1755344584.545:3): pid=8770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 179.023151][ T8769] IPv6: sit2: Disabled Multicast RS [ 179.067762][ T8769] sit2: entered allmulticast mode [ 179.145792][ T8775] pim6reg1: entered promiscuous mode [ 179.167289][ T8775] pim6reg1: entered allmulticast mode [ 179.313594][ T8781] IPVS: set_ctl: invalid protocol: 2 172.30.1.1:20003 [ 179.339069][ T8782] IPVS: set_ctl: invalid protocol: 2 172.30.1.1:20003 [ 179.699510][ T6230] hid-generic 0005:0D45:1012.0001: unknown global tag 0xe [ 179.707332][ T6230] hid-generic 0005:0D45:1012.0001: item 0 2 1 14 parsing failed [ 179.777385][ T6230] hid-generic 0005:0D45:1012.0001: probe with driver hid-generic failed with error -22 [ 179.789987][ T8800] validate_nla: 2 callbacks suppressed [ 179.790011][ T8800] netlink: 'syz.2.847': attribute type 4 has an invalid length. [ 179.845597][ T8808] netlink: 'syz.2.847': attribute type 4 has an invalid length. [ 180.011130][ T8813] bond4: entered promiscuous mode [ 180.070368][ T8813] bond4: entered allmulticast mode [ 180.084664][ T8813] 8021q: adding VLAN 0 to HW filter on device bond4 [ 181.193546][ T8893] netlink: 'syz.2.869': attribute type 11 has an invalid length. [ 181.389594][ T8900] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.537952][ T8909] netlink: 'syz.4.877': attribute type 5 has an invalid length. [ 182.652725][ T8902] vxlan0: entered promiscuous mode [ 182.658333][ T8902] vxlan0: entered allmulticast mode [ 182.670171][ T37] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.713575][ T37] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.748476][ T61] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.766496][ T61] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.091601][ T8945] __nla_validate_parse: 12 callbacks suppressed [ 183.091622][ T8945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.889'. [ 183.110903][ T8945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.889'. [ 183.121355][ T8953] netlink: 16 bytes leftover after parsing attributes in process `syz.3.890'. [ 183.762905][ T8986] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.900'. [ 183.869731][ T8983] netlink: 176 bytes leftover after parsing attributes in process `syz.3.900'. [ 183.995598][ T8992] netlink: 12 bytes leftover after parsing attributes in process `syz.2.904'. [ 184.015413][ T8992] netlink: 12 bytes leftover after parsing attributes in process `syz.2.904'. [ 184.045783][ T9000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.905'. [ 184.229606][ T9015] netlink: 8 bytes leftover after parsing attributes in process `syz.4.907'. [ 184.256855][ T9015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.907'. [ 184.282537][ T9015] netlink: 'syz.4.907': attribute type 15 has an invalid length. [ 184.709484][ T9039] netlink: 'syz.4.915': attribute type 16 has an invalid length. [ 184.723556][ T9039] netlink: 'syz.4.915': attribute type 3 has an invalid length. [ 184.745364][ T9040] netlink: 'syz.2.918': attribute type 7 has an invalid length. [ 184.757289][ T9040] netlink: 'syz.2.918': attribute type 8 has an invalid length. [ 184.778461][ T9040] bridge0: entered promiscuous mode [ 184.787998][ T9040] ip6gretap0: entered promiscuous mode [ 184.806524][ T9040] bridge0: left promiscuous mode [ 184.816720][ T9040] ip6gretap0: left promiscuous mode [ 184.841097][ T9046] block nbd1: NBD_DISCONNECT [ 184.846189][ T9046] block nbd1: Send disconnect failed -32 [ 184.866497][ T9046] block nbd1: shutting down sockets [ 184.918056][ T5183] Bluetooth: hci0: command tx timeout [ 185.082623][ T9055] hsr0 speed is unknown, defaulting to 1000 [ 185.090316][ T9055] hsr0 speed is unknown, defaulting to 1000 [ 185.102098][ T9055] hsr0 speed is unknown, defaulting to 1000 [ 185.194873][ T9055] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 185.333032][ T9055] hsr0 speed is unknown, defaulting to 1000 [ 185.345397][ T9055] hsr0 speed is unknown, defaulting to 1000 [ 185.383478][ T9055] hsr0 speed is unknown, defaulting to 1000 [ 185.462903][ T9067] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 185.464024][ T9055] hsr0 speed is unknown, defaulting to 1000 [ 185.490179][ T9055] hsr0 speed is unknown, defaulting to 1000 [ 186.452529][ T9132] netlink: 'syz.0.945': attribute type 1 has an invalid length. [ 187.547477][ T9172] tipc: Enabled bearer , priority 0 [ 187.662417][ T9172] syzkaller0: entered promiscuous mode [ 187.693242][ T9172] syzkaller0: entered allmulticast mode [ 187.699741][ T9172] tipc: Resetting bearer [ 187.764371][ T9171] tipc: Resetting bearer [ 188.164979][ T9202] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.183224][ T9202] __nla_validate_parse: 9 callbacks suppressed [ 188.183246][ T9202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.967'. [ 189.118673][ T9171] tipc: Disabling bearer [ 189.132435][ T9195] ip6gre0: Master is either lo or non-ether device [ 189.298305][ T9206] netlink: 12 bytes leftover after parsing attributes in process `syz.0.968'. [ 189.323567][ T9206] netlink: 12 bytes leftover after parsing attributes in process `syz.0.968'. [ 189.329410][ T9205] syzkaller1: entered promiscuous mode [ 189.338270][ T9205] syzkaller1: entered allmulticast mode [ 189.375700][ T9206] bridge0: port 3(vlan0) entered blocking state [ 189.401131][ T9206] bridge0: port 3(vlan0) entered disabled state [ 189.409686][ T9206] vlan0: entered allmulticast mode [ 189.422389][ T9206] bridge0: entered allmulticast mode [ 189.434080][ T9206] vlan0: left allmulticast mode [ 189.446055][ T9206] bridge0: left allmulticast mode [ 189.468230][ T9220] netlink: 28 bytes leftover after parsing attributes in process `syz.2.973'. [ 189.505998][ T9220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.973'. [ 189.771350][ T9236] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 189.844811][ T9240] netlink: 12 bytes leftover after parsing attributes in process `syz.0.982'. [ 189.941471][ T9245] tipc: Started in network mode [ 189.952273][ T9245] tipc: Node identity da0de3bfa189, cluster identity 3 [ 189.969302][ T9245] tipc: Enabled bearer , priority 0 [ 189.977547][ T9245] syzkaller0: entered promiscuous mode [ 189.983065][ T9245] syzkaller0: entered allmulticast mode [ 189.996981][ T9245] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 191.097264][ T6230] tipc: Node number set to 2072306623 [ 192.989956][ T9254] syz.2.986 uses old SIOCAX25GETINFO [ 193.046994][ T9251] tipc: Resetting bearer [ 193.077905][ T9238] tipc: Resetting bearer [ 193.179847][ T9238] tipc: Disabling bearer [ 193.421723][ T9264] netlink: 20 bytes leftover after parsing attributes in process `syz.2.988'. [ 193.645386][ T9272] netlink: 16 bytes leftover after parsing attributes in process `syz.0.992'. [ 193.680114][ T9272] netlink: 'syz.0.992': attribute type 5 has an invalid length. [ 193.697335][ T9272] netlink: 140 bytes leftover after parsing attributes in process `syz.0.992'. [ 193.809674][ T9278] netlink: 16 bytes leftover after parsing attributes in process `syz.4.995'. [ 193.865868][ T9280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.996'. [ 193.904425][ T9280] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 193.972610][ T9280] netlink: 'syz.3.996': attribute type 1 has an invalid length. [ 193.988759][ T9280] netlink: 'syz.3.996': attribute type 2 has an invalid length. [ 194.100268][ T9294] delete_channel: no stack [ 194.165875][ T9299] netlink: 'syz.3.1002': attribute type 11 has an invalid length. [ 194.202439][ T9299] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1002'. [ 194.242277][ T9310] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1005'. [ 194.650002][ T9333] netlink: 'syz.2.1008': attribute type 9 has an invalid length. [ 194.684412][ T9333] netlink: 'syz.2.1008': attribute type 9 has an invalid length. [ 194.835979][ T9335] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 194.865642][ T9335] netlink: 'syz.0.1009': attribute type 2 has an invalid length. [ 194.884765][ T9339] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1011'. [ 194.886691][ T9335] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1009'. [ 194.928540][ T9335] nbd: must specify a device to reconfigure [ 195.054716][ T9349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1013'. [ 195.362494][ T9362] IPVS: ip_vs_edit_dest(): server weight less than zero [ 195.430525][ T9366] netlink: 'syz.1.1020': attribute type 1 has an invalid length. [ 195.927906][ T9399] netlink: 'syz.4.1030': attribute type 1 has an invalid length. [ 195.939303][ T9399] netlink: 'syz.4.1030': attribute type 1 has an invalid length. [ 196.255099][ T9420] macvlan3: entered promiscuous mode [ 196.260786][ T9420] macvlan3: entered allmulticast mode [ 196.268359][ T9420] bond5: entered promiscuous mode [ 196.274387][ T9420] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 196.284429][ T9420] bond5: left promiscuous mode [ 196.628585][ T36] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.664628][ T37] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.734195][ T4327] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.752995][ T4327] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.800832][ T9448] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 197.008068][ T9465] tipc: Enabling of bearer rejected, failed to enable media [ 197.351975][ T4327] af_packet: tpacket_rcv: packet too big, clamped from 46 to 4294967272. macoff=96 [ 197.676180][ T9502] pim6reg1: entered promiscuous mode [ 197.682167][ T9502] pim6reg1: entered allmulticast mode [ 197.974961][ T9514] IPVS: set_ctl: invalid protocol: 92 10.1.1.0:20002 [ 198.073994][ T9520] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 198.134797][ T9525] team0: Port device team_slave_0 removed [ 198.183378][ T9525] team0: Port device team_slave_1 removed [ 198.195761][ T9525] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.204030][ T9525] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.213103][ T9525] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.221141][ T9525] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.309812][ T9533] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 198.347869][ T6220] hsr0 speed is unknown, defaulting to 1000 [ 198.562925][ T9554] __nla_validate_parse: 13 callbacks suppressed [ 198.562950][ T9554] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1079'. [ 198.756281][ T9567] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 198.892583][ T9574] validate_nla: 1 callbacks suppressed [ 198.892607][ T9574] netlink: 'syz.3.1084': attribute type 1 has an invalid length. [ 198.993233][ T9581] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1088'. [ 199.008665][ T9583] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1087'. [ 199.055204][ T9585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1087'. [ 199.079687][ T9581] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1088'. [ 199.388453][ T9600] 8021q: VLANs not supported on ipvlan1 [ 199.653750][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.656227][ T9612] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 199.900425][ T9631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1102'. [ 199.915441][ T9634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1104'. [ 199.938959][ T9631] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 199.981709][ T9631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1102'. [ 200.057947][ T9631] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1102'. [ 200.145739][ T9646] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 200.173262][ T9651] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 200.263495][ T9657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1110'. [ 200.404238][ T9665] netlink: 'syz.4.1112': attribute type 1 has an invalid length. [ 200.511349][ T9670] ip6gretap0: vlans aren't supported yet for dev_uc|mc_add() [ 201.020844][ T9704] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 201.076207][ T9707] delete_channel: no stack [ 201.210288][ T5183] Bluetooth: hci4: link tx timeout [ 201.216646][ T5183] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 201.227734][ T5874] Bluetooth: hci4: link tx timeout [ 201.233108][ T5874] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 201.251086][ T5874] Bluetooth: hci4: link tx timeout [ 201.257053][ T5874] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 201.264857][ T5874] Bluetooth: hci4: link tx timeout [ 201.270230][ T5874] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 201.299321][ T9717] hsr0 speed is unknown, defaulting to 1000 [ 201.478571][ T9727] netlink: 'syz.2.1134': attribute type 1 has an invalid length. [ 201.488109][ T9727] netlink: 'syz.2.1134': attribute type 1 has an invalid length. [ 201.961547][ T9758] netlink: 'syz.3.1145': attribute type 29 has an invalid length. [ 202.067387][ T9764] FAULT_INJECTION: forcing a failure. [ 202.067387][ T9764] name failslab, interval 1, probability 0, space 0, times 1 [ 202.106736][ T9764] CPU: 0 UID: 0 PID: 9764 Comm: syz.2.1146 Not tainted 6.17.0-rc1-syzkaller-00127-g715c7a36d59f #0 PREEMPT(full) [ 202.106766][ T9764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 202.106779][ T9764] Call Trace: [ 202.106787][ T9764] [ 202.106795][ T9764] dump_stack_lvl+0x189/0x250 [ 202.106824][ T9764] ? __pfx____ratelimit+0x10/0x10 [ 202.106852][ T9764] ? __pfx_dump_stack_lvl+0x10/0x10 [ 202.106876][ T9764] ? __pfx__printk+0x10/0x10 [ 202.106907][ T9764] ? __lock_acquire+0xab9/0xd20 [ 202.106949][ T9764] should_fail_ex+0x414/0x560 [ 202.106982][ T9764] should_failslab+0xa8/0x100 [ 202.107014][ T9764] kmem_cache_alloc_noprof+0x73/0x3c0 [ 202.107042][ T9764] ? skb_clone+0x212/0x3a0 [ 202.107069][ T9764] skb_clone+0x212/0x3a0 [ 202.107094][ T9764] __netlink_deliver_tap+0x404/0x850 [ 202.107138][ T9764] ? netlink_deliver_tap+0x2e/0x1b0 [ 202.107170][ T9764] netlink_deliver_tap+0x19c/0x1b0 [ 202.107201][ T9764] netlink_unicast+0x7fa/0x9e0 [ 202.107238][ T9764] ? __pfx_netlink_unicast+0x10/0x10 [ 202.107267][ T9764] ? netlink_sendmsg+0x642/0xb30 [ 202.107294][ T9764] ? skb_put+0x11b/0x210 [ 202.107316][ T9764] netlink_sendmsg+0x805/0xb30 [ 202.107368][ T9764] ? __pfx_netlink_sendmsg+0x10/0x10 [ 202.107403][ T9764] ? aa_sock_msg_perm+0xf1/0x1d0 [ 202.107437][ T9764] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 202.107459][ T9764] ? __pfx_netlink_sendmsg+0x10/0x10 [ 202.107490][ T9764] __sock_sendmsg+0x219/0x270 [ 202.107520][ T9764] ____sys_sendmsg+0x505/0x830 [ 202.107547][ T9764] ? __pfx_____sys_sendmsg+0x10/0x10 [ 202.107578][ T9764] ? import_iovec+0x74/0xa0 [ 202.107606][ T9764] ___sys_sendmsg+0x21f/0x2a0 [ 202.107629][ T9764] ? __pfx____sys_sendmsg+0x10/0x10 [ 202.107691][ T9764] ? __fget_files+0x2a/0x420 [ 202.107708][ T9764] ? __fget_files+0x3a0/0x420 [ 202.107737][ T9764] __x64_sys_sendmsg+0x19b/0x260 [ 202.107762][ T9764] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 202.107794][ T9764] ? __pfx_ksys_write+0x10/0x10 [ 202.107819][ T9764] ? rcu_is_watching+0x15/0xb0 [ 202.107845][ T9764] ? do_syscall_64+0xbe/0x3b0 [ 202.107879][ T9764] do_syscall_64+0xfa/0x3b0 [ 202.107906][ T9764] ? lockdep_hardirqs_on+0x9c/0x150 [ 202.107932][ T9764] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.107952][ T9764] ? clear_bhb_loop+0x60/0xb0 [ 202.107977][ T9764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.107996][ T9764] RIP: 0033:0x7f66ff58ebe9 [ 202.108013][ T9764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.108029][ T9764] RSP: 002b:00007f670035b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 202.108050][ T9764] RAX: ffffffffffffffda RBX: 00007f66ff7b5fa0 RCX: 00007f66ff58ebe9 [ 202.108063][ T9764] RDX: 0000000004000010 RSI: 00002000000038c0 RDI: 0000000000000003 [ 202.108076][ T9764] RBP: 00007f670035b090 R08: 0000000000000000 R09: 0000000000000000 [ 202.108087][ T9764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.108098][ T9764] R13: 00007f66ff7b6038 R14: 00007f66ff7b5fa0 R15: 00007ffee1bb0678 [ 202.108132][ T9764] [ 202.555287][ T9778] netlink: 'syz.1.1150': attribute type 2 has an invalid length. [ 202.588489][ T9778] nbd: must specify a device to reconfigure [ 203.316590][ T5874] Bluetooth: hci4: command 0x0406 tx timeout [ 203.338246][ T9835] Bluetooth: MGMT ver 1.23 [ 204.024029][ T9860] __nla_validate_parse: 15 callbacks suppressed [ 204.024048][ T9860] netlink: 332 bytes leftover after parsing attributes in process `syz.0.1175'. [ 204.045631][ T9857] macvtap1: entered allmulticast mode [ 204.053644][ T9857] veth0_macvtap: entered allmulticast mode [ 204.461976][ T9882] netdevsim netdevsim3: Firmware load for './file0/../file0' refused, path contains '..' component [ 204.469941][ T9880] netlink: 'syz.2.1183': attribute type 5 has an invalid length. [ 204.594250][ T9889] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1186'. [ 204.628094][ T9889] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1186'. [ 204.656632][ T9890] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1186'. [ 204.742826][ T9894] syz.2.1188 (9894) used greatest stack depth: 17864 bytes left [ 205.155988][ T9923] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1197'. [ 205.181809][ T9923] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 205.435950][ T9936] netlink: 'syz.4.1199': attribute type 10 has an invalid length. [ 205.475094][ T9936] bridge0: port 4(team0) entered blocking state [ 205.502592][ T9936] bridge0: port 4(team0) entered disabled state [ 205.515366][ T9936] team0: entered allmulticast mode [ 205.523756][ T9936] team_slave_0: entered allmulticast mode [ 205.542590][ T9936] team_slave_1: entered allmulticast mode [ 205.571874][ T9936] team0: entered promiscuous mode [ 205.591784][ T9936] team_slave_0: entered promiscuous mode [ 205.607389][ T9936] team_slave_1: entered promiscuous mode [ 205.618576][ T9936] bridge0: port 4(team0) entered blocking state [ 205.625241][ T9936] bridge0: port 4(team0) entered forwarding state [ 206.123964][ T9962] tipc: Enabled bearer , priority 0 [ 206.161473][ T9962] syzkaller0: entered promiscuous mode [ 206.179548][ T9962] syzkaller0: entered allmulticast mode [ 206.215133][ T9962] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 206.274105][ T9966] veth0: entered promiscuous mode [ 206.286921][ T9964] veth0: left promiscuous mode [ 206.315683][ T9962] tipc: Resetting bearer [ 206.340528][ T9961] tipc: Resetting bearer [ 206.412387][ T9961] tipc: Disabling bearer [ 206.456340][ T9975] geneve3: entered promiscuous mode [ 206.471628][ T9975] geneve3: entered allmulticast mode [ 206.496991][ T3525] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 206.548774][ T36] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 206.683617][ T9978] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.711930][ T9978] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.743628][ T36] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 206.898004][ T9996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1217'. [ 206.914642][ T9996] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1217'. [ 207.214391][T10013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1221'. [ 207.564076][T10037] netlink: 'syz.3.1231': attribute type 7 has an invalid length. [ 208.117799][T10052] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.174238][T10052] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.533823][T10052] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 208.656896][T10052] gretap1: left promiscuous mode [ 208.661920][T10052] gretap1: left allmulticast mode [ 208.696652][T10072] netlink: 'syz.2.1241': attribute type 4 has an invalid length. [ 208.749107][T10052] geneve2: left promiscuous mode [ 208.754247][T10052] geneve2: left allmulticast mode [ 208.819584][ T9978] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.851520][ T9978] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.873661][ T9978] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 208.907364][ T36] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.962595][ T36] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 209.007488][ T36] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.030060][ T36] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 209.162180][T10090] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1244'. [ 209.235838][ T9978] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.263048][ T9978] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.278717][ T9978] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 209.290790][T10097] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1245'. [ 209.304149][ T36] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.315592][ T36] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 209.329980][ T36] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.340695][ T36] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 209.461237][T10104] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1249'. [ 209.463752][ T9978] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.493978][ T9978] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.506074][ T9978] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 209.644984][T10114] netlink: 576 bytes leftover after parsing attributes in process `syz.1.1252'. [ 209.668699][T10116] FAULT_INJECTION: forcing a failure. [ 209.668699][T10116] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 209.721031][T10116] CPU: 1 UID: 0 PID: 10116 Comm: syz.2.1253 Not tainted 6.17.0-rc1-syzkaller-00127-g715c7a36d59f #0 PREEMPT(full) [ 209.721063][T10116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 209.721076][T10116] Call Trace: [ 209.721084][T10116] [ 209.721093][T10116] dump_stack_lvl+0x189/0x250 [ 209.721123][T10116] ? __pfx____ratelimit+0x10/0x10 [ 209.721152][T10116] ? __pfx_dump_stack_lvl+0x10/0x10 [ 209.721177][T10116] ? __pfx__printk+0x10/0x10 [ 209.721220][T10116] should_fail_ex+0x414/0x560 [ 209.721253][T10116] _copy_to_user+0x31/0xb0 [ 209.721280][T10116] simple_read_from_buffer+0xe1/0x170 [ 209.721316][T10116] proc_fail_nth_read+0x1b3/0x220 [ 209.721344][T10116] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 209.721371][T10116] ? rw_verify_area+0x2a6/0x4d0 [ 209.721396][T10116] ? __lock_acquire+0xab9/0xd20 [ 209.721424][T10116] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 209.721449][T10116] vfs_read+0x1fd/0xa30 [ 209.721474][T10116] ? fdget_pos+0x247/0x320 [ 209.721498][T10116] ? __pfx___mutex_lock+0x10/0x10 [ 209.721535][T10116] ? __pfx_vfs_read+0x10/0x10 [ 209.721563][T10116] ? __fget_files+0x2a/0x420 [ 209.721594][T10116] ? __fget_files+0x3a0/0x420 [ 209.721611][T10116] ? __fget_files+0x2a/0x420 [ 209.721639][T10116] ksys_read+0x145/0x250 [ 209.721670][T10116] ? __pfx_ksys_read+0x10/0x10 [ 209.721693][T10116] ? rcu_is_watching+0x15/0xb0 [ 209.721720][T10116] ? do_syscall_64+0xbe/0x3b0 [ 209.721755][T10116] do_syscall_64+0xfa/0x3b0 [ 209.721782][T10116] ? lockdep_hardirqs_on+0x9c/0x150 [ 209.721809][T10116] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.721829][T10116] ? clear_bhb_loop+0x60/0xb0 [ 209.721854][T10116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.721873][T10116] RIP: 0033:0x7f66ff58d5fc [ 209.721891][T10116] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 209.721907][T10116] RSP: 002b:00007f670035b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 209.721929][T10116] RAX: ffffffffffffffda RBX: 00007f66ff7b5fa0 RCX: 00007f66ff58d5fc [ 209.721943][T10116] RDX: 000000000000000f RSI: 00007f670035b0a0 RDI: 0000000000000005 [ 209.721955][T10116] RBP: 00007f670035b090 R08: 0000000000000000 R09: 0000000000000000 [ 209.721966][T10116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 209.721977][T10116] R13: 00007f66ff7b6038 R14: 00007f66ff7b5fa0 R15: 00007ffee1bb0678 [ 209.722012][T10116] [ 210.039549][ T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.082099][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 210.091145][ T13] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 210.106733][ T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.114969][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 210.140085][ T13] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 210.152836][ T37] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.161285][ T37] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 210.170128][ T37] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 210.178577][ T37] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.186968][ T37] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 210.195338][ T37] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 210.305943][T10135] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1255'. [ 210.767171][T10161] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1265'. [ 210.897857][T10170] TCP: TCP_TX_DELAY enabled [ 211.060701][T10175] netlink: 'syz.0.1269': attribute type 4 has an invalid length. [ 211.100547][T10175] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1269'. [ 211.281952][T10181] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1270'. [ 211.284508][T10183] blkio.reset_stats is deprecated [ 211.375840][T10194] netlink: 'syz.4.1273': attribute type 7 has an invalid length. [ 211.449564][T10194] : entered promiscuous mode [ 211.515222][T10198] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1275'. [ 211.553496][T10200] Unsupported ieee802154 address type: 0 [ 211.561702][T10200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1276'. [ 211.763040][T10211] vxcan1: tx address claim with different name [ 211.894207][T10223] IPVS: set_ctl: invalid protocol: 41 172.30.1.3:20003 [ 212.119161][ T5875] Bluetooth: hci0: command 0x0406 tx timeout [ 212.119527][ T5863] Bluetooth: hci1: command 0x0406 tx timeout [ 212.125296][ T5875] Bluetooth: hci2: command 0x0406 tx timeout [ 212.875109][T10283] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 213.109891][T10300] C: renamed from lo (while UP) [ 213.425491][T10317] sctp: [Deprecated]: syz.3.1314 (pid 10317) Use of int in max_burst socket option. [ 213.425491][T10317] Use struct sctp_assoc_value instead [ 214.269534][T10360] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 215.131922][T10396] veth0: entered promiscuous mode [ 215.162724][T10401] __nla_validate_parse: 5 callbacks suppressed [ 215.162746][T10401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1339'. [ 215.192107][T10393] veth0: left promiscuous mode [ 215.255641][ T493] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 215.333566][ T493] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 215.363213][ T493] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 215.406906][ T493] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 215.467647][T10416] rose0: entered promiscuous mode [ 215.591022][T10423] bond0: entered promiscuous mode [ 215.622100][T10423] batadv0: entered promiscuous mode [ 215.629371][T10426] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1348'. [ 215.654086][T10423] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 215.667326][T10430] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1348'. [ 215.682012][T10426] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1348'. [ 215.695961][T10423] hsr1: entered allmulticast mode [ 215.696256][T10428] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 215.717851][T10430] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1348'. [ 215.719308][T10423] bond0: entered allmulticast mode [ 215.793398][T10423] batadv0: entered allmulticast mode [ 215.801363][T10423] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 215.840100][T10423] bond0: left promiscuous mode [ 215.863330][T10423] batadv0: left promiscuous mode [ 216.111276][T10451] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1355'. [ 216.210840][T10464] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1359'. [ 216.421090][T10471] netlink: 'syz.0.1361': attribute type 1 has an invalid length. [ 216.434777][T10471] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1361'. [ 216.444244][T10471] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1361'. [ 216.726741][T10490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1366'. [ 217.121646][T10516] veth0: entered promiscuous mode [ 217.124004][T10515] netlink: 'syz.2.1372': attribute type 1 has an invalid length. [ 217.169907][T10516] veth0: left promiscuous mode [ 217.514299][T10527] pim6reg1: entered promiscuous mode [ 217.526623][T10527] pim6reg1: entered allmulticast mode [ 217.909661][T10544] pim6reg1: entered promiscuous mode [ 217.915280][T10544] pim6reg1: entered allmulticast mode [ 218.061836][T10553] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 218.089866][T10553] gretap3: entered promiscuous mode [ 218.105399][T10553] gretap3: entered allmulticast mode [ 221.240995][T10581] veth1_macvtap: left promiscuous mode [ 221.251384][T10581] macsec0: entered promiscuous mode [ 221.256729][T10581] macsec0: entered allmulticast mode [ 221.305048][T10575] hsr0 speed is unknown, defaulting to 1000 [ 221.312873][T10581] __nla_validate_parse: 4 callbacks suppressed [ 221.312892][T10581] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1391'. [ 221.653678][T10601] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1396'. [ 221.692970][T10606] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1399'. [ 221.870450][T10616] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1401'. [ 222.043954][T10626] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1405'. [ 222.069385][T10628] : renamed from hsr0 [ 222.250378][T10640] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1411'. [ 222.272379][T10635] team0: Device vti0 is up. Set it down before adding it as a team port [ 222.382978][T10645] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1413'. [ 222.482638][T10649] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1415'. [ 222.549530][T10652] pim6reg1: entered promiscuous mode [ 222.554889][T10652] pim6reg1: entered allmulticast mode [ 222.682763][T10657] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1418'. [ 222.683773][T10661] vlan1: entered allmulticast mode [ 222.892826][T10667] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1421'. [ 223.292618][T10702] tipc: Enabled bearer , priority 0 [ 223.326833][T10704] netlink: 'syz.2.1433': attribute type 25 has an invalid length. [ 223.648717][T10730] C: entered allmulticast mode [ 223.738359][T10734] netlink: 'syz.2.1442': attribute type 11 has an invalid length. [ 224.007566][T10751] lo: entered promiscuous mode [ 224.028132][T10751] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 224.114604][T10756] netlink: 'syz.3.1448': attribute type 2 has an invalid length. [ 224.408205][ T5935] tipc: Node number set to 3841001926 [ 224.556612][T10793] nbd: must specify an index to disconnect [ 224.844790][T10816] openvswitch: netlink: IP tunnel dst address not specified [ 225.279183][T10834] netlink: 'syz.3.1471': attribute type 11 has an invalid length. [ 225.313035][T10834] netlink: 'syz.3.1471': attribute type 11 has an invalid length. [ 225.357772][T10841] netlink: 'syz.1.1474': attribute type 1 has an invalid length. [ 225.375090][T10834] netlink: 'syz.3.1471': attribute type 1 has an invalid length. [ 225.417170][T10834] nbd: couldn't find device at index 1048576 [ 225.431525][T10841] bond6: (slave bridge3): making interface the new active one [ 225.443584][T10841] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 225.731706][T10858] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 225.772492][T10867] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 227.625729][T10895] __nla_validate_parse: 17 callbacks suppressed [ 227.625750][T10895] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1489'. [ 227.959563][T10925] bridge0: port 4(team0) entered disabled state [ 228.001864][T10925] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.019886][T10925] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.049459][T10935] netlink: 'syz.4.1497': attribute type 16 has an invalid length. [ 228.063060][T10935] netlink: 'syz.4.1497': attribute type 17 has an invalid length. [ 228.139801][T10934] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.155384][T10934] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.232573][T10935] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 228.845466][T10957] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1503'. [ 228.876433][T10960] tipc: Enabled bearer , priority 0 [ 228.907427][T10962] syzkaller0: entered promiscuous mode [ 228.912966][T10962] syzkaller0: entered allmulticast mode [ 228.945798][T10959] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 229.045777][T10980] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1510'. [ 229.067802][T10975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1507'. [ 229.126745][T10984] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1511'. [ 229.137808][T10959] tipc: Resetting bearer [ 229.180695][T10959] tipc: Disabling bearer [ 229.353799][T10998] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1514'. [ 229.526149][T11009] netlink: 'syz.0.1518': attribute type 1 has an invalid length. [ 229.576568][T11004] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 229.592544][T11005] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1513'. [ 229.651888][T11005] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 229.696634][T11009] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 230.114216][T11040] netlink: 'syz.3.1527': attribute type 4 has an invalid length. [ 230.118597][T11041] netlink: 'syz.2.1523': attribute type 9 has an invalid length. [ 230.141260][T11040] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1527'. [ 230.231347][T11046] netlink: 'syz.1.1528': attribute type 1 has an invalid length. [ 230.323125][T11046] bond7 (unregistering): Released all slaves [ 230.330224][T11052] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1528'. [ 230.572070][T11072] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1536'. [ 230.582789][T11072] team0: left allmulticast mode [ 230.588067][T11072] team_slave_0: left allmulticast mode [ 230.593891][T11072] team_slave_1: left allmulticast mode [ 230.601762][T11072] team0: left promiscuous mode [ 230.614671][T11072] team_slave_0: left promiscuous mode [ 230.630621][T11072] team_slave_1: left promiscuous mode [ 230.637798][T11072] bridge0: port 4(team0) entered disabled state [ 230.650276][T11072] ip6erspan0: left allmulticast mode [ 230.655831][T11072] ip6erspan0: left promiscuous mode [ 230.663895][T11072] bridge0: port 3(ip6erspan0) entered disabled state [ 230.674494][T11072] bridge_slave_1: left allmulticast mode [ 230.680846][T11072] bridge_slave_1: left promiscuous mode [ 230.687880][T11072] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.698002][T11072] bridge_slave_0: left allmulticast mode [ 230.703670][T11072] bridge_slave_0: left promiscuous mode [ 230.709553][T11072] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.824245][T11077] ip6erspan0: entered promiscuous mode [ 232.062061][T11154] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 232.294754][T11177] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 232.323353][T11164] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 232.484398][T11203] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 232.703873][T11210] __nla_validate_parse: 6 callbacks suppressed [ 232.703896][T11210] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1573'. [ 232.781826][T11218] bond0: Device is already in use. [ 232.783155][T11210] netlink: 'syz.4.1573': attribute type 1 has an invalid length. [ 232.851072][T11210] netlink: 'syz.4.1573': attribute type 1 has an invalid length. [ 232.860313][T11210] netlink: 'syz.4.1573': attribute type 2 has an invalid length. [ 232.875571][T11210] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1573'. [ 232.988714][T11227] netlink: 'syz.1.1578': attribute type 1 has an invalid length. [ 232.999757][T11227] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1578'. [ 233.084800][T11231] netlink: 'syz.3.1579': attribute type 1 has an invalid length. [ 233.111024][T11232] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1580'. [ 233.123123][T11231] netlink: 'syz.3.1579': attribute type 3 has an invalid length. [ 233.133638][T11231] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1579'. [ 233.147824][T11231] NCSI netlink: No device for ifindex 0 [ 233.268240][T11241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1583'. [ 233.327082][T11241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1583'. [ 233.370820][T11251] veth1_virt_wifi: Device is already in use. [ 233.464875][T11256] veth1_macvtap: left promiscuous mode [ 233.633388][T11268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1591'. [ 233.718569][T11277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1592'. [ 233.942102][T11287] tipc: Enabled bearer , priority 0 [ 233.964588][T11287] syzkaller0: entered promiscuous mode [ 233.981538][T11287] syzkaller0: entered allmulticast mode [ 234.080913][T11287] tipc: Resetting bearer [ 234.093501][T11296] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge_slave_0 [ 234.130185][T11285] tipc: Resetting bearer [ 234.162123][T11300] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1598'. [ 234.173010][T11285] tipc: Disabling bearer [ 234.704656][T11327] sock: sock_timestamping_bind_phc: sock not bind to device [ 235.137620][T11355] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 235.170004][T11365] chnl_net:caif_netlink_parms(): no params data found [ 235.214854][T11365] caif1: entered promiscuous mode [ 235.220273][T11365] caif1: entered allmulticast mode [ 235.246345][T11366] chnl_net:caif_netlink_parms(): no params data found [ 235.270184][T11366] caif1: entered promiscuous mode [ 235.280216][T11366] caif1: entered allmulticast mode [ 260.555750][T11380] netlink: 'syz.2.1619': attribute type 3 has an invalid length. [ 260.564203][T11380] netlink: 'syz.2.1619': attribute type 3 has an invalid length. [ 260.574240][T11380] netlink: 'syz.2.1619': attribute type 3 has an invalid length. [ 260.591418][T11380] netlink: 'syz.2.1619': attribute type 3 has an invalid length. [ 260.601880][T11380] netlink: 'syz.2.1619': attribute type 3 has an invalid length. [ 260.613439][T11380] netlink: 'syz.2.1619': attribute type 3 has an invalid length. [ 260.621731][T11380] netlink: 'syz.2.1619': attribute type 3 has an invalid length. [ 260.637922][T11380] netlink: 'syz.2.1619': attribute type 3 has an invalid length. [ 260.645942][T11380] netlink: 'syz.2.1619': attribute type 3 has an invalid length. [ 260.684823][T11380] netlink: 'syz.2.1619': attribute type 3 has an invalid length. [ 260.745682][T11398] __nla_validate_parse: 4 callbacks suppressed [ 260.745711][T11398] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1625'. [ 260.794610][T11399] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 260.805847][T11399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1624'. [ 260.818277][T11399] veth0_to_bridge: left allmulticast mode [ 260.824072][T11399] veth0_to_bridge: left promiscuous mode [ 260.851763][T11399] bridge0: port 3(veth0_to_bridge) entered disabled state [ 260.910853][T11399] bridge_slave_1: left allmulticast mode [ 260.921849][T11399] bridge_slave_1: left promiscuous mode [ 260.941786][T11399] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.988785][T11399] bridge_slave_0: left allmulticast mode [ 260.994498][T11399] bridge_slave_0: left promiscuous mode [ 261.011578][T11399] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.045973][T11399] bond0: (slave bridge0): Releasing backup interface [ 261.081983][ T1303] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 261.100031][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.218048][T11423] tipc: Enabling of bearer rejected, failed to enable media [ 261.308958][T11430] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1634'. [ 261.338837][T11432] openvswitch: netlink: VXLAN extension message has 11 unknown bytes. [ 261.552530][T11443] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 261.857002][T11463] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1647'. [ 261.872839][T11463] digital: digital_start_poll: Unknown protocol [ 261.986230][T11475] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.049344][T11469] xfrm2: entered allmulticast mode [ 262.281676][T11496] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1655'. [ 262.364825][T11493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1655'. [ 262.650913][T11520] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 262.754472][T11526] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1666'. [ 262.905403][T11541] sctp: [Deprecated]: syz.1.1670 (pid 11541) Use of int in max_burst socket option. [ 262.905403][T11541] Use struct sctp_assoc_value instead [ 263.102518][T11556] lo speed is unknown, defaulting to 1000 [ 263.110241][T11556] lo speed is unknown, defaulting to 1000 [ 263.119309][T11556] lo speed is unknown, defaulting to 1000 [ 263.143588][T11556] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 263.214048][T11556] lo speed is unknown, defaulting to 1000 [ 263.224179][T11556] lo speed is unknown, defaulting to 1000 [ 263.232640][T11556] lo speed is unknown, defaulting to 1000 [ 263.242287][T11556] lo speed is unknown, defaulting to 1000 [ 263.253680][T11556] lo speed is unknown, defaulting to 1000 [ 263.669580][T11583] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1680'. [ 263.852489][T11589] delete_channel: no stack [ 263.980943][T11597] netlink: 216 bytes leftover after parsing attributes in process `syz.0.1685'. [ 264.003791][T11597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1685'. [ 264.136098][T11605] hsr0 speed is unknown, defaulting to 1000 [ 264.144614][T11605] lo speed is unknown, defaulting to 1000 [ 264.851664][T11655] syz_tun: entered allmulticast mode [ 264.861383][T11655] syz_tun: left allmulticast mode [ 265.573606][T11710] hsr_slave_0: left promiscuous mode [ 265.580701][T11710] hsr_slave_1: left promiscuous mode [ 265.904943][T11713] bridge_slave_0: entered promiscuous mode [ 265.960769][T11713] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 266.003115][T11727] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.052580][T11727] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.136792][T11727] tipc: Resetting bearer [ 266.143163][T11727] tipc: Resetting bearer [ 266.223598][T11733] sctp: [Deprecated]: syz.1.1720 (pid 11733) Use of struct sctp_assoc_value in delayed_ack socket option. [ 266.223598][T11733] Use struct sctp_sack_info instead [ 266.301036][T11728] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.319490][T11736] sctp: [Deprecated]: syz.1.1720 (pid 11736) Use of struct sctp_assoc_value in delayed_ack socket option. [ 266.319490][T11736] Use struct sctp_sack_info instead [ 266.336042][T11728] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.884868][T11764] netlink: 'syz.1.1728': attribute type 11 has an invalid length. [ 266.899064][T11764] __nla_validate_parse: 7 callbacks suppressed [ 266.899086][T11764] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1728'. [ 266.928743][T11770] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1729'. [ 266.991864][T11772] syzkaller1: entered promiscuous mode [ 266.999512][T11772] syzkaller1: entered allmulticast mode [ 267.441652][T11802] pimreg: entered allmulticast mode [ 267.544817][T11805] validate_nla: 48 callbacks suppressed [ 267.544841][T11805] netlink: 'syz.4.1744': attribute type 3 has an invalid length. [ 267.562469][T11805] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1744'. [ 267.574037][T11805] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1744'. [ 267.590553][T11805] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1744'. [ 267.783252][T11811] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1746'. [ 267.814630][T11821] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1747'. [ 267.833380][T11811] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1746'. [ 267.934859][T11821] netem: change failed [ 268.115489][T11834] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 268.433150][T11857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1758'. [ 268.480914][T11855] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1761'. [ 268.668897][T11865] atomic_op ffff88807b826998 conn xmit_atomic 0000000000000000 [ 268.858304][T11879] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 268.943166][T11882] netlink: 'syz.0.1769': attribute type 83 has an invalid length. [ 269.196129][T11896] netlink: 'syz.1.1772': attribute type 1 has an invalid length. [ 269.407426][T11902] bond7: (slave bridge4): making interface the new active one [ 269.415885][T11902] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 269.577250][T11921] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 269.623836][T11919] : renamed from hsr0 (while UP) [ 269.765351][T11930] IPv6: sit2: Disabled Multicast RS [ 269.845331][T11930] sit2: entered allmulticast mode [ 269.949505][T11950] tipc: Enabled bearer , priority 0 [ 269.961479][T11938] syzkaller0: entered promiscuous mode [ 269.967286][T11938] syzkaller0: entered allmulticast mode [ 270.005009][T11949] hsr0 speed is unknown, defaulting to 1000 [ 270.013011][T11949] lo speed is unknown, defaulting to 1000 [ 270.112102][T11938] hsr0 speed is unknown, defaulting to 1000 [ 270.120059][T11938] lo speed is unknown, defaulting to 1000 [ 270.442152][T11950] tipc: Resetting bearer [ 270.621146][T11938] tipc: Resetting bearer [ 270.702346][T11938] tipc: Disabling bearer [ 270.766197][T11964] netlink: 'syz.1.1789': attribute type 4 has an invalid length. [ 272.006744][T12036] can: request_module (can-proto-0) failed. [ 272.240969][T12046] __nla_validate_parse: 6 callbacks suppressed [ 272.240990][T12046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1812'. [ 272.310612][T12048] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1813'. [ 272.351816][T12052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1814'. [ 272.365650][T12052] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1814'. [ 272.638123][T12068] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1819'. [ 272.981709][T12089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1823'. [ 273.083757][T12096] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1824'. [ 273.355269][T12107] syzkaller0: entered promiscuous mode [ 273.361563][T12107] syzkaller0: entered allmulticast mode [ 273.834696][T12114] netlink: 'syz.0.1831': attribute type 1 has an invalid length. [ 273.843400][T12114] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1831'. [ 273.855931][T12114] nbd: couldn't find device at index 1048576 [ 274.111290][T12127] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 275.120267][T12115] netlink: 'syz.1.1832': attribute type 4 has an invalid length. [ 275.383704][T12135] 8021q: adding VLAN 0 to HW filter on device bond4 [ 275.422102][T12135] bond0: (slave bond4): Enslaving as an active interface with an up link [ 275.468949][T12133] syzkaller1: entered promiscuous mode [ 275.476736][T12133] syzkaller1: entered allmulticast mode [ 275.593445][T12155] delete_channel: no stack [ 275.749112][T12120] infiniband syz0: set down [ 275.755722][T12120] infiniband syz0: added ipvlan1 [ 275.772264][T12120] syz0: rxe_create_cq: returned err = -12 [ 275.779432][T12120] infiniband syz0: Couldn't create ib_mad CQ [ 275.785742][T12120] infiniband syz0: Couldn't open port 1 [ 275.811473][T12120] RDS/IB: syz0: added [ 275.818428][T12120] smc: adding ib device syz0 with port count 1 [ 275.831989][T12120] smc: ib device syz0 port 1 has pnetid [ 276.125462][ T9] IPVS: starting estimator thread 0... [ 276.142126][T12184] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 276.216502][T12186] IPVS: using max 26 ests per chain, 62400 per kthread [ 276.227792][T12187] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1852'. [ 276.457721][T12200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1855'. [ 277.124207][T12238] ieee802154 phy0 wpan0: encryption failed: -22 [ 277.361778][T12251] IPVS: set_ctl: invalid protocol: 33 255.255.255.255:20002 [ 277.772701][T12270] dvmrp0: entered allmulticast mode [ 278.245978][T12296] __nla_validate_parse: 1 callbacks suppressed [ 278.245998][T12296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1887'. [ 278.602506][T12315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1892'. [ 278.751226][T12323] hsr0 speed is unknown, defaulting to 1000 [ 278.798728][T12323] lo speed is unknown, defaulting to 1000 [ 279.206517][T12348] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1901'. [ 280.186847][T12396] hsr0 speed is unknown, defaulting to 1000 [ 280.199880][T12396] lo speed is unknown, defaulting to 1000 [ 280.567904][T12407] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1917'. [ 280.623738][T12409] netlink: 'syz.4.1918': attribute type 10 has an invalid length. [ 280.653767][T12409] team0: Port device dummy0 added [ 280.663975][T12409] netlink: 'syz.4.1918': attribute type 10 has an invalid length. [ 280.695101][T12409] team0: Port device dummy0 removed [ 280.704761][T12409] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 280.739893][T12409] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1918'. [ 280.878841][T12422] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.407487][T12448] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 281.463888][T12448] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 281.485789][T12454] netlink: 'syz.2.1930': attribute type 1 has an invalid length. [ 281.498269][T12448] gretap1: entered promiscuous mode [ 281.504961][T12448] gretap1: entered allmulticast mode [ 281.508587][T12454] netlink: 'syz.2.1930': attribute type 2 has an invalid length. [ 281.531184][T12456] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1931'. [ 281.575649][T12454] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1930'. [ 281.841018][T12474] bond0: entered promiscuous mode [ 281.862132][T12474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.969825][T12474] netlink: 'syz.1.1936': attribute type 11 has an invalid length. [ 282.008825][T12474] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1936'. [ 282.213085][T12493] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1940'. [ 282.222122][T12501] netlink: 'syz.0.1943': attribute type 1 has an invalid length. [ 282.247762][T12493] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1940'. [ 282.260263][T12504] nbd: must specify a size in bytes for the device [ 282.278866][T12504] nbd: must specify a size in bytes for the device [ 282.420949][T12513] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 282.675467][T12520] syzkaller1: entered promiscuous mode [ 282.684820][T12520] syzkaller1: entered allmulticast mode [ 282.821591][T12540] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 282.932660][T12537] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.954246][T12537] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.968965][T12537] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 283.090327][T12537] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.116207][T12537] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.143418][T12537] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 283.267926][T12537] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.279277][T12537] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.315841][T12537] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 283.422359][T12537] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.448292][T12537] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.468086][T12537] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 283.522233][T12573] __nla_validate_parse: 6 callbacks suppressed [ 283.522254][T12573] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1963'. [ 283.602857][T12575] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1964'. [ 283.699357][T12579] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 283.720956][T12579] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 283.842948][ T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.872923][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 283.918282][ T13] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 283.967312][ T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.984810][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 284.006544][ T13] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 284.081266][ T61] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.092911][ T61] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 284.114731][ T61] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 284.151995][ T61] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.176412][ T61] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 284.186170][ T61] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 284.302712][T12608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1974'. [ 284.358287][T12608] dummy0: entered promiscuous mode [ 284.377784][T12608] batadv_slave_1: entered promiscuous mode [ 284.402308][T12608] batadv_slave_1: left promiscuous mode [ 284.420030][T12608] dummy0: left promiscuous mode [ 284.538257][T12619] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 284.703649][T12627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1982'. [ 284.755893][T12630] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.849626][T12631] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1983'. [ 285.319545][T12660] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1989'. [ 285.367493][T12660] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1989'. [ 285.385004][T12664] sctp: [Deprecated]: syz.0.1990 (pid 12664) Use of struct sctp_assoc_value in delayed_ack socket option. [ 285.385004][T12664] Use struct sctp_sack_info instead [ 285.402684][T12660] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1989'. [ 285.418663][T12667] IPVS: set_ctl: invalid protocol: 98 172.20.20.47:20001 [ 285.629250][T12678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1996'. [ 285.641257][T12678] netlink: 'syz.0.1996': attribute type 5 has an invalid length. [ 285.649934][T12678] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1996'. [ 285.683817][T12681] netlink: 'syz.4.1995': attribute type 12 has an invalid length. [ 286.384783][T12716] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 286.442828][T12726] nbd: nbd0 already in use [ 286.456699][T12726] IPVS: set_ctl: invalid protocol: 206 172.20.20.170:20001 [ 286.539460][T12731] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 286.907128][T12757] syz_tun: entered allmulticast mode [ 286.910395][T12760] netlink: 'syz.0.2022': attribute type 83 has an invalid length. [ 286.923115][T12760] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.954694][T12754] syz_tun: left allmulticast mode [ 287.103344][T12768] tipc: Enabling of bearer rejected, failed to enable media [ 287.133357][T12773] tipc: Enabling of bearer rejected, failed to enable media [ 287.239842][T12777] ipvlan2: entered promiscuous mode [ 287.250554][T12777] bridge0: port 1(ipvlan2) entered blocking state [ 287.269331][T12777] bridge0: port 1(ipvlan2) entered disabled state [ 287.299643][T12777] ipvlan2: entered allmulticast mode [ 287.309680][T12777] bridge0: entered allmulticast mode [ 287.339663][T12777] ipvlan2: left allmulticast mode [ 287.351587][T12777] bridge0: left allmulticast mode [ 287.471859][T12796] netlink: 'syz.1.2034': attribute type 1 has an invalid length. [ 287.489520][T12796] netlink: 'syz.1.2034': attribute type 21 has an invalid length. [ 287.700284][T12815] openvswitch: netlink: Message has 4 unknown bytes. [ 287.857200][T12803] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 287.912409][T12828] netlink: 'syz.3.2043': attribute type 1 has an invalid length. [ 287.947677][T12828] nbd: couldn't find device at index 1048576 [ 288.592573][T12878] tipc: Enabled bearer , priority 0 [ 288.609967][T12878] syzkaller0: entered promiscuous mode [ 288.624847][T12878] syzkaller0: entered allmulticast mode [ 288.660370][T12882] __nla_validate_parse: 31 callbacks suppressed [ 288.660390][T12882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2061'. [ 288.749595][T12877] tipc: Resetting bearer [ 288.790595][T12877] tipc: Disabling bearer [ 288.870356][T12890] netlink: 'syz.1.2064': attribute type 1 has an invalid length. [ 289.025289][T12900] netlink: 'syz.0.2066': attribute type 1 has an invalid length. [ 289.043693][T12897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2067'. [ 289.095859][T12900] netlink: 'syz.0.2066': attribute type 1 has an invalid length. [ 289.130403][T12900] netlink: 'syz.0.2066': attribute type 1 has an invalid length. [ 289.666725][T12935] netlink: ct family unspecified [ 289.676004][T12935] openvswitch: netlink: Actions may not be safe on all matching packets [ 289.890942][T12941] tipc: New replicast peer: 0.0.0.0 [ 289.899902][T12941] tipc: Enabled bearer , priority 10 [ 289.911796][T12941] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 290.144626][T12953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2083'. [ 290.196759][T12968] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2086'. [ 290.251967][T12969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2087'. [ 290.320308][T12961] can: request_module (can-proto-5) failed. [ 290.431195][T12977] netlink: 'syz.4.2091': attribute type 11 has an invalid length. [ 290.439612][T12977] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2091'. [ 290.704140][T13000] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2096'. [ 290.844987][T13006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2098'. [ 291.266558][ C0] ------------[ cut here ]------------ [ 291.272145][ C0] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 291.283156][ C0] WARNING: CPU: 0 PID: 5865 at net/mac80211/rate.c:403 __rate_control_send_low+0x5df/0x820 [ 291.293257][ C0] Modules linked in: [ 291.297483][ C0] CPU: 0 UID: 0 PID: 5865 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00127-g715c7a36d59f #0 PREEMPT(full) [ 291.309717][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 291.319860][ C0] RIP: 0010:__rate_control_send_low+0x5df/0x820 [ 291.326198][ C0] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 e0 71 b0 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 82 73 93 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 291.345897][ C0] RSP: 0018:ffffc90000007538 EFLAGS: 00010246 [ 291.352151][ C0] RAX: f16b177ba77f4400 RBX: 000000000000000c RCX: ffff8880328eda00 [ 291.360267][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 291.368323][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 291.376440][ C0] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff88801fbe0168 [ 291.384455][ C0] R13: 0000000000000000 R14: ffff8880554f8e40 R15: ffff8880554fb0d8 [ 291.392520][ C0] FS: 000055556e18c500(0000) GS:ffff888125c1c000(0000) knlGS:0000000000000000 [ 291.401679][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 291.408343][ C0] CR2: 00007f94966e56c0 CR3: 0000000075c18000 CR4: 00000000003526f0 [ 291.416411][ C0] Call Trace: [ 291.419736][ C0] [ 291.422643][ C0] rate_control_send_low+0x194/0x7a0 [ 291.428039][ C0] rate_control_get_rate+0x20b/0x5d0 [ 291.433395][ C0] ieee80211_beacon_get_finish+0x39a/0x6c0 [ 291.439304][ C0] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 291.445686][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 291.451153][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 291.456963][ C0] ieee80211_beacon_get_ap+0x1868/0x1f30 [ 291.462675][ C0] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 291.468762][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 291.474360][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 291.480001][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 291.485599][ C0] __ieee80211_beacon_get+0x118e/0x1880 [ 291.491248][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 291.496884][ C0] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 291.502394][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 291.508562][ C0] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 291.514176][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 291.521483][ C0] __iterate_interfaces+0x2ab/0x590 [ 291.522968][T13036] veth0_to_bridge: mtu less than device minimum [ 291.526769][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 291.526802][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 291.526843][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 291.526869][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 291.526912][ C0] mac80211_hwsim_beacon+0xbb/0x1c0 [ 291.526945][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 291.526977][ C0] __hrtimer_run_queues+0x529/0xc60 [ 291.538749][T13036] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2109'. [ 291.539373][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 291.590742][ C0] ? read_tsc+0x9/0x20 [ 291.594869][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 291.600787][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 291.605952][ C0] handle_softirqs+0x283/0x870 [ 291.610808][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 291.615630][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 291.621010][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 291.626260][ C0] __irq_exit_rcu+0xca/0x1f0 [ 291.630942][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 291.636200][ C0] irq_exit_rcu+0x9/0x30 [ 291.640547][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 291.646258][ C0] [ 291.649270][ C0] [ 291.652227][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 291.658246][ C0] RIP: 0010:lock_release+0x2b5/0x3e0 [ 291.663553][ C0] Code: 51 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 75 56 f7 c3 00 02 00 00 74 01 fb 65 48 8b 05 7b d1 02 11 <48> 3b 44 24 28 0f 85 8b 00 00 00 48 83 c4 30 5b 41 5c 41 5d 41 5e [ 291.683215][ C0] RSP: 0018:ffffc9000425f2a8 EFLAGS: 00000206 [ 291.689359][ C0] RAX: f16b177ba77f4400 RBX: 0000000000000202 RCX: f16b177ba77f4400 [ 291.697492][ C0] RDX: 0000000000000007 RSI: ffffffff8dba61b5 RDI: ffffffff8be33400 [ 291.705503][ C0] RBP: ffff8880328ee608 R08: 0000000000000000 R09: ffffffff822e598a [ 291.713546][ C0] R10: dffffc0000000000 R11: fffff94000329fe9 R12: 0000000000000007 [ 291.721615][ C0] R13: 0000000000000007 R14: ffffffff8e139fa0 R15: ffff8880328eda00 [ 291.729686][ C0] ? pfn_valid+0xba/0x490 [ 291.734174][ C0] ? pfn_valid+0xba/0x490 [ 291.738596][ C0] ? pfn_valid+0xba/0x490 [ 291.742981][ C0] pfn_valid+0x3b2/0x490 [ 291.747289][ C0] page_table_check_set+0x25/0x730 [ 291.752433][ C0] ? __page_table_check_ptes_set+0x290/0x2f0 [ 291.758472][ C0] copy_pmd_range+0x4439/0x71d0 [ 291.763365][ C0] ? stack_depot_save_flags+0x40/0x860 [ 291.768876][ C0] ? __pfx_copy_pmd_range+0x10/0x10 [ 291.774196][ C0] copy_page_range+0xc14/0x1270 [ 291.779123][ C0] ? __lock_acquire+0xab9/0xd20 [ 291.784042][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 291.789404][ C0] ? up_write+0x1c4/0x420 [ 291.793760][ C0] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 291.800594][ C0] dup_mmap+0xf57/0x1ac0 [ 291.804894][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 291.809687][ C0] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 291.815624][ C0] ? mm_init+0xcc3/0xef0 [ 291.819974][ C0] copy_mm+0x13c/0x4b0 [ 291.824092][ C0] copy_process+0x1706/0x3c00 [ 291.828876][ C0] ? copy_process+0x97f/0x3c00 [ 291.833693][ C0] ? __pfx_copy_process+0x10/0x10 [ 291.838825][ C0] kernel_clone+0x21e/0x840 [ 291.843387][ C0] ? css_rstat_updated+0x23a/0x4f0 [ 291.848624][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 291.853722][ C0] __x64_sys_clone+0x18b/0x1e0 [ 291.858542][ C0] ? count_memcg_event_mm+0x21/0x260 [ 291.863860][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 291.869236][ C0] ? do_user_addr_fault+0xc8a/0x1390 [ 291.874551][ C0] ? do_syscall_64+0xbe/0x3b0 [ 291.879314][ C0] do_syscall_64+0xfa/0x3b0 [ 291.883848][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 291.889103][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.895232][ C0] ? clear_bhb_loop+0x60/0xb0 [ 291.900008][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.905957][ C0] RIP: 0033:0x7f9495985453 [ 291.910455][ C0] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 291.930413][ C0] RSP: 002b:00007ffecbac0b58 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 291.938915][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9495985453 [ 291.946967][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 291.954971][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 291.963007][ C0] R10: 000055556e18c7d0 R11: 0000000000000246 R12: 0000000000000000 [ 291.971046][ C0] R13: 00000000000927c0 R14: 000000000004716d R15: 00007ffecbac0cf0 [ 291.979081][ C0] [ 291.982119][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 291.989441][ C0] CPU: 0 UID: 0 PID: 5865 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00127-g715c7a36d59f #0 PREEMPT(full) [ 292.001665][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 292.011735][ C0] Call Trace: [ 292.015028][ C0] [ 292.017896][ C0] dump_stack_lvl+0x99/0x250 [ 292.022538][ C0] ? __asan_memcpy+0x40/0x70 [ 292.027174][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 292.032418][ C0] ? __pfx__printk+0x10/0x10 [ 292.037431][ C0] vpanic+0x281/0x750 [ 292.041554][ C0] ? __pfx__printk+0x10/0x10 [ 292.046192][ C0] ? __pfx_vpanic+0x10/0x10 [ 292.050740][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 292.056076][ C0] panic+0xb9/0xc0 [ 292.059809][ C0] ? __pfx_panic+0x10/0x10 [ 292.064251][ C0] __warn+0x31b/0x4b0 [ 292.068247][ C0] ? __rate_control_send_low+0x5df/0x820 [ 292.073905][ C0] ? __rate_control_send_low+0x5df/0x820 [ 292.079553][ C0] report_bug+0x2be/0x4f0 [ 292.083905][ C0] ? __rate_control_send_low+0x5df/0x820 [ 292.089574][ C0] ? __rate_control_send_low+0x5df/0x820 [ 292.095248][ C0] ? __rate_control_send_low+0x5e1/0x820 [ 292.100915][ C0] handle_bug+0x84/0x160 [ 292.105182][ C0] exc_invalid_op+0x1a/0x50 [ 292.109710][ C0] asm_exc_invalid_op+0x1a/0x20 [ 292.114687][ C0] RIP: 0010:__rate_control_send_low+0x5df/0x820 [ 292.120950][ C0] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 e0 71 b0 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 82 73 93 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 292.140570][ C0] RSP: 0018:ffffc90000007538 EFLAGS: 00010246 [ 292.146661][ C0] RAX: f16b177ba77f4400 RBX: 000000000000000c RCX: ffff8880328eda00 [ 292.154654][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 292.162649][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 292.170650][ C0] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff88801fbe0168 [ 292.178679][ C0] R13: 0000000000000000 R14: ffff8880554f8e40 R15: ffff8880554fb0d8 [ 292.186679][ C0] ? __rate_control_send_low+0x5de/0x820 [ 292.192356][ C0] rate_control_send_low+0x194/0x7a0 [ 292.197680][ C0] rate_control_get_rate+0x20b/0x5d0 [ 292.202993][ C0] ieee80211_beacon_get_finish+0x39a/0x6c0 [ 292.208828][ C0] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 292.215173][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 292.220569][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 292.226307][ C0] ieee80211_beacon_get_ap+0x1868/0x1f30 [ 292.232004][ C0] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 292.238016][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 292.243579][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 292.249141][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 292.254696][ C0] __ieee80211_beacon_get+0x118e/0x1880 [ 292.260253][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 292.265821][ C0] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 292.271292][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 292.277432][ C0] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 292.282999][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 292.290245][ C0] __iterate_interfaces+0x2ab/0x590 [ 292.295481][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 292.301580][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 292.308814][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 292.314898][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 292.321964][ C0] mac80211_hwsim_beacon+0xbb/0x1c0 [ 292.327196][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 292.333070][ C0] __hrtimer_run_queues+0x529/0xc60 [ 292.338301][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 292.344034][ C0] ? read_tsc+0x9/0x20 [ 292.348123][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 292.353948][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 292.359077][ C0] handle_softirqs+0x283/0x870 [ 292.363861][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 292.368641][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 292.373945][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 292.379250][ C0] __irq_exit_rcu+0xca/0x1f0 [ 292.383880][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 292.389104][ C0] irq_exit_rcu+0x9/0x30 [ 292.393360][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 292.399014][ C0] [ 292.401990][ C0] [ 292.404933][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 292.410926][ C0] RIP: 0010:lock_release+0x2b5/0x3e0 [ 292.416229][ C0] Code: 51 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 75 56 f7 c3 00 02 00 00 74 01 fb 65 48 8b 05 7b d1 02 11 <48> 3b 44 24 28 0f 85 8b 00 00 00 48 83 c4 30 5b 41 5c 41 5d 41 5e [ 292.435841][ C0] RSP: 0018:ffffc9000425f2a8 EFLAGS: 00000206 [ 292.441925][ C0] RAX: f16b177ba77f4400 RBX: 0000000000000202 RCX: f16b177ba77f4400 [ 292.449907][ C0] RDX: 0000000000000007 RSI: ffffffff8dba61b5 RDI: ffffffff8be33400 [ 292.457890][ C0] RBP: ffff8880328ee608 R08: 0000000000000000 R09: ffffffff822e598a [ 292.465867][ C0] R10: dffffc0000000000 R11: fffff94000329fe9 R12: 0000000000000007 [ 292.473847][ C0] R13: 0000000000000007 R14: ffffffff8e139fa0 R15: ffff8880328eda00 [ 292.481838][ C0] ? pfn_valid+0xba/0x490 [ 292.486202][ C0] ? pfn_valid+0xba/0x490 [ 292.490545][ C0] ? pfn_valid+0xba/0x490 [ 292.494896][ C0] pfn_valid+0x3b2/0x490 [ 292.499160][ C0] page_table_check_set+0x25/0x730 [ 292.504291][ C0] ? __page_table_check_ptes_set+0x290/0x2f0 [ 292.510296][ C0] copy_pmd_range+0x4439/0x71d0 [ 292.515194][ C0] ? stack_depot_save_flags+0x40/0x860 [ 292.520676][ C0] ? __pfx_copy_pmd_range+0x10/0x10 [ 292.525920][ C0] copy_page_range+0xc14/0x1270 [ 292.530785][ C0] ? __lock_acquire+0xab9/0xd20 [ 292.535698][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 292.541001][ C0] ? up_write+0x1c4/0x420 [ 292.545340][ C0] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 292.552113][ C0] dup_mmap+0xf57/0x1ac0 [ 292.556390][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 292.561096][ C0] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 292.566997][ C0] ? mm_init+0xcc3/0xef0 [ 292.571256][ C0] copy_mm+0x13c/0x4b0 [ 292.575338][ C0] copy_process+0x1706/0x3c00 [ 292.580045][ C0] ? copy_process+0x97f/0x3c00 [ 292.584831][ C0] ? __pfx_copy_process+0x10/0x10 [ 292.589875][ C0] kernel_clone+0x21e/0x840 [ 292.594389][ C0] ? css_rstat_updated+0x23a/0x4f0 [ 292.599516][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 292.604569][ C0] __x64_sys_clone+0x18b/0x1e0 [ 292.609360][ C0] ? count_memcg_event_mm+0x21/0x260 [ 292.614667][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 292.619979][ C0] ? do_user_addr_fault+0xc8a/0x1390 [ 292.625292][ C0] ? do_syscall_64+0xbe/0x3b0 [ 292.629988][ C0] do_syscall_64+0xfa/0x3b0 [ 292.634508][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 292.639736][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.645907][ C0] ? clear_bhb_loop+0x60/0xb0 [ 292.650600][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.656508][ C0] RIP: 0033:0x7f9495985453 [ 292.660938][ C0] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 292.680556][ C0] RSP: 002b:00007ffecbac0b58 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 292.688982][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9495985453 [ 292.696968][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 292.704959][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 292.712942][ C0] R10: 000055556e18c7d0 R11: 0000000000000246 R12: 0000000000000000 [ 292.720928][ C0] R13: 00000000000927c0 R14: 000000000004716d R15: 00007ffecbac0cf0 [ 292.728936][ C0] [ 292.732133][ C0] Kernel Offset: disabled [ 292.736464][ C0] Rebooting in 86400 seconds..