last executing test programs: 3m10.522080852s ago: executing program 2 (id=423): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="3400000010000100"/20, @ANYRES32=r2, @ANYBLOB="688100000000000014001680100005800c0003000100008007000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000044}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r3, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0xfd}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x4001}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)=""/192, 0xc0}, {&(0x7f0000000d80)=""/255, 0xff}, {&(0x7f00000004c0)=""/88, 0x58}, {&(0x7f0000000e80)=""/4067, 0xfe3}, {&(0x7f0000000940)=""/239, 0xef}, {&(0x7f0000000440)=""/126, 0x7e}, {&(0x7f0000000080)=""/238, 0xee}], 0x7}, 0x80000003}], 0x4, 0x10100, 0x0) 3m10.259886362s ago: executing program 2 (id=428): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x24008814, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000000d0003006c6973743a736574000000000500050000000000050001000700000005000400000000000900020073797a3200000000140007800800064000000000080017"], 0x5c}}, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="54000000020601030000000000000000000000000900020073797a30000000000500010006000000050005800000000005000400000000000c00078008000600000000010d000300686173683a6d616300"], 0x54}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0xb, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x9}, @IPSET_ATTR_COMMENT={0xa, 0x1a, 'bond0\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xe000}, 0x1) r7 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@getroute={0x14, 0x1a, 0x200, 0x70bd2d, 0x25dfd9fe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8005}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x2c, r3, 0x4, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc60580002400c000400030082c137153e3719ac0180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000084000000060a010400000000000000000100000008000b40000000005c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000240001800a0001007265646972000000140002800800014000000012080002400000000e0900010073797a30"], 0xf8}}, 0x0) 3m9.865574239s ago: executing program 2 (id=433): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r2, 0x100, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x400d1}, 0x44810) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="0600000000020e3c"], 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}]}}}]}, 0x3c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x6}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x4}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001680)=ANY=[@ANYBLOB="580100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000000000003001128009000100766c616e000000002001028006000100000000001c0004800c00010032d10000ffff00000c000100ae0200009e000000700004800c00010009000000010000e29b5d2a0008000000010100000c000100f8ffffff080000000c00010006000000040000000c00010007000000010000800c00010005000000060000000c00010001000000000000000c000100910a00000d0000000c0001000e00000032000000880003800c002100060000000c0000000c00010003000000400000000c00010004000000ffffffff0c00010002000000110000000c00010001000000020000000c0001000b000000270000000c000100ffff00005f0200000c000100ffffffff030000000c00010001000000030000000c00010000000000018000000c000100090000000900000008000500", @ANYRES8=r6], 0x158}, 0x1, 0xba01}, 0x44) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) getsockopt$sock_buf(r4, 0x1, 0x1f, &(0x7f00000002c0)=""/96, &(0x7f0000000100)=0x60) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215, 0x100000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}, 0x1, 0xba01}, 0x0) 3m9.373873986s ago: executing program 2 (id=439): r0 = socket$inet6(0xa, 0x3, 0x8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4f1d, 0x1, @empty}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3, 0x2, 0x1, 0x0, 0x3, 0x3}, 0x20) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000040)={{{@in=@private, @in=@empty}}, {{@in=@initdev}, 0x0, @in6=@mcast2}}, &(0x7f0000000140)=0xe8) (async) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0xd8) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) (async) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) 3m8.449453704s ago: executing program 2 (id=451): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x1, &(0x7f0000000d40)={0xa, 0x4e24, 0x1, @mcast2, 0x9}, 0x1c) r1 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000034c0)=""/4092, 0xffc}, {&(0x7f00000007c0)=""/131, 0x83}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f00000044c0)=""/4091, 0xffb}, {&(0x7f0000000600)=""/111, 0x6f}, {&(0x7f0000000480)=""/237, 0xed}, {&(0x7f0000001c40)=""/73, 0x49}, {&(0x7f0000000440)=""/61, 0x3d}, {&(0x7f0000000180)=""/204, 0xcc}, {&(0x7f0000001dc0)=""/143, 0x8f}, {&(0x7f0000000b80)=""/4096, 0x1000}], 0xb}, 0x40016002) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029ea69801d76ab0a272a2a788bab6c95f79725074", 0xd5}], 0x1}, 0x0) r2 = accept4(r0, &(0x7f0000000080)=@tipc, &(0x7f0000000100)=0x80, 0x800) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r2) 3m8.153697754s ago: executing program 2 (id=456): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$can_j1939(0x1d, 0x2, 0x7) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) (async) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) (async) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000100)="92034724033eea403a", 0x9}}, 0xee) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) (async, rerun: 32) r6 = socket$can_j1939(0x1d, 0x2, 0x7) (async) r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$bt_BT_SECURITY(r7, 0x112, 0x4, &(0x7f00000002c0)={0x80, 0x21}, 0x2) (async) bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r5, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) (async) sendmsg$can_j1939(r6, &(0x7f0000000200)={&(0x7f0000000000)={0x1d, r5, 0x0, {0x2, 0xff, 0x1}}, 0x18, &(0x7f00000000c0)={&(0x7f0000000440)="d12274400165958ab524f6f99784e8275dbdf572a88376007c17e842a813a6b0cb034f3775b258cfec860e3720e21709ad4d78ca08cd48d1ed8144e54ee97180ffeb57f8276df038536fbe9d039377896a2783a35c73344c616b013d7be5acea9a20bbcf24f90758c60c9c8f09538392f35597288656daf965bf934fec68bfafcfa032890b646638566fe9fbbaf8587e6313ef7db9dd8f1e58c7b1f4b52f49fa134f4867d35781094559264e99d1e2529f7cda1093c464c1134f3f79d956838be88cbbc399afc536a8b3bf01596791c8730749220e54b5837c2384b49e4cf3861c75eed65bb8de61617fa9c2ed31b3f2ea9b17f02dda6686168c7f1caa631dda807c13479f254c2e6a1ee3d925da518f42af73e6d10070373de26927c195c99d3a9d3369c223d1d279798a87ad2bbbe34a46ea04aaefccbff192470fe213247765aad46a5646318233e8ffaf923949abec876fe04eb98214df09418f1849a0c05010f7fe7fe0c414561c2fac54e2200fd054a87e4e7d87d4e8dd2b803f0b3977f1d4f2b8cb6664af29cf0570ff05f31d3422624d726b02875a5a0cf6fd17d767d67b34f8032f067277894425c90030f74ecc943bbbf64c01468a59e96f838755ed20aa7ed0f9bcb10deee2ba68cde2a2470a5465af11dcfc3005b8e04a9560acf95a690abc33f3cfafd7d294afbe213751aa98eba6fffffb5479d9afb56c6549b699e0c59bd709ab6c5251d5f7e4f35f91fe43f276b806e084bd742c8413490708edc3029501ce3f90c2c4aab047bd14dc008ed798425d83bfa6af8401ba8669323de3f21e1cb0928dff7adcfcfe430ab456c66b352f829070b0af0b8fa63a1ace61c87045e3433738d602d8140170fe7d45839f82f6e1402b3e5ed8c0fa93ec13208b1e31a64c745bf6144b635614e6c56a9ffb86133751316eb5545a7185f2088b1b89bb62a456f618f8108974a1418f591e906c387b68dd79c6bf0a76eacb17099bb834c34e130ee219633df3167aab854930d5aaf22171a13ecf23277cb14279945fca164a326c190072d9a313c3c0e9d723e84b514c9661cb88c4f9b935879a116b43280945557ac8738197be05c691a9748a00981dfbabcc2b2c7b70dbec4dc1dca13befaf9343bece9315dcbc0e5110d1574b854a62147663f6a3ced989cbd6e99076a3be0269699cb5b5ad70044a2e10cd84a2c71e0c1c25401ad8c487c79d6591815eedaf548ad4e5e0367dc942489971b51b811aa1fdc46ddd9eab9cb1ae45c353c95abab5c50c047cdedd32fd24350efd663e06a206f75e87ce79919ad4f641b7966a3a311d478ea31d727a786b6a433d77845f37a811592a35f15286589e71304dd1840d261aa22b86ba1fc088e935bc9836f13963586e766b084f9e3d1496395a1bf176113ed41645b1d4a5c706cbcc9da48d7910fd89b00be93ff4e2db52efbec9d5db879588f5f007011bd5cd628f2a4fcfae6438f708edac257010796d46b1a60cdd6634f90f1db7e540b371ee7e3820b44c240963f3c2d616775ccd044a1a352235a9252218db208322b67de99072f837dc181e091afe6409e510c9e8d62f0e1a70e2140a337a6ac2caba141e9761e2aa23800ee82ee83e6a8c44de9b40f5ab43df4cae0c2af27aab2a89478820d689006a3ac7c78ae5101a15f04252bf90f33d817f03f6a29182d057050925c448071be93cacedc9bdebd442e9b14e8775af5a6210bc12ca28b336d525da9452717810e3e6e615351799daabdeb9908231f32d0684c6af835c3172ef9ac427ce8b8b89a6ca6baf5a094e3cf02f82696f2294bd86899a722af19b435d844e13cd579c429c9a910c73c007119dd40990b0a33832e912a12b0d8399316ea0e524606822484aad895c76c160317a9f7d8738b1a539b5befdad77b782bfee9b45195696b196edbd6d1fdb4e63ba948ef9a6f3d5c772004f9ab6c81fc5f5b3599aca81f42bbae69c0e8f7a0e66b784a75b4f0d47f52669f21424c5ebf68f7b5e9b29208a57c0b9424352da037b4582141abd2bded9f26907ef7d74fbea5a4926bdc6f486af005aa7bf1dcf66184a6ebc978b83b1f75ba6be228d2446862d1ddb5b6769088f5058267d9ab075c564e51be82e5dad2c2ed6f0eb63f3124997ffe1ecb7f6c1389533fee34e7efdeecc47e5db7cbe38c5bca7ed580fcdcc83c6a85a72c0e0f382cc6597e2c4a71b43219bfcf67f609fdcaa69b73cbd932ee0c899860ac629e79471964280179715d2376f82361e7e7c59995989819fa1279505f9806b4a25dc3e1e4ab248adb961f776a1caed34d7206c8c1d8346620fe3507e8f62f089d043a576d63846a2a3744535052cc6e17b270009201b951eac32f4a66af595da872efb414a725608e79b016eec4863e54455ac8d6adf655b2efb879efc00feaa2f2316b60b88100a7cd904cf6a130e94f603a11fe26eb1f2973928e30482db2fed665c1bdbb4a7517562b01372fb779b5c154b6f9d0632a88c2b20efed2ca40905e6ad97689db77648042d5f874133ab47eafeba1437f485df00cd45d2500aa0c4c554aff954db21ccb8a1c6b059a8f935904ee4dc22a9aced5a521947769049f1d9afbf9050cc71d42c098ca652168cf81c149af65df10474c888c2d233aa05aa09060064c539dca8f06486347beadb6db99ac5a7e424739f54a455fbefdebb8b74620827af90ba2317f4ed5299f3a12c08768e88786453253da6b3d5eb50264a9e6f4bb6a9780bdf0d646f46e77dcd8b2d68b0004720cdc0695af0093161b97cf6ec9a4ad7fe40a991b61c2cf5a6f180f7961605a53ed82941ceb82805dd8f8821bd88bbf1fe2c01fef0ac8a60d1e976e28cc60ef0d96c3d6cf22b710d259725b4d605b1e0590dac0870a3", 0x801}, 0x1, 0x0, 0x0, 0x44000}, 0x4044080) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x30, r9, 0x1, 0x2, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x359}]}, 0x30}, 0x1, 0x0, 0x0, 0x40008c0}, 0x50) (async, rerun: 64) r12 = socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 64) setsockopt$IPT_SO_SET_REPLACE(r12, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4018, 0x3, 0x218, 0xd0, 0x720d, 0x148, 0xd0, 0x148, 0x180, 0x240, 0x240, 0x180, 0x240, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @local, 0xffffffff, 0xff000000, 'wlan0\x00', 'veth1_macvtap\x00', {}, {}, 0x88, 0x3, 0x8}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xfffb, [0x6, 0xb2cc575b459b5b33, 0x4, 0x2]}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0x0, 0x0, 0xb507, 0x0, 0x0, 0x4]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) (async) ioctl$sock_netdev_private(r0, 0x8946, &(0x7f0000000a00)="4749c2368bb8dd2c7f17323cf53a") (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079107b00000000000500000000000000950000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (rerun: 32) 2m53.033127176s ago: executing program 32 (id=456): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$can_j1939(0x1d, 0x2, 0x7) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) (async) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) (async) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000100)="92034724033eea403a", 0x9}}, 0xee) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) (async, rerun: 32) r6 = socket$can_j1939(0x1d, 0x2, 0x7) (async) r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$bt_BT_SECURITY(r7, 0x112, 0x4, &(0x7f00000002c0)={0x80, 0x21}, 0x2) (async) bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r5, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) (async) sendmsg$can_j1939(r6, &(0x7f0000000200)={&(0x7f0000000000)={0x1d, r5, 0x0, {0x2, 0xff, 0x1}}, 0x18, &(0x7f00000000c0)={&(0x7f0000000440)="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", 0x801}, 0x1, 0x0, 0x0, 0x44000}, 0x4044080) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x30, r9, 0x1, 0x2, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x359}]}, 0x30}, 0x1, 0x0, 0x0, 0x40008c0}, 0x50) (async, rerun: 64) r12 = socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 64) setsockopt$IPT_SO_SET_REPLACE(r12, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4018, 0x3, 0x218, 0xd0, 0x720d, 0x148, 0xd0, 0x148, 0x180, 0x240, 0x240, 0x180, 0x240, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @local, 0xffffffff, 0xff000000, 'wlan0\x00', 'veth1_macvtap\x00', {}, {}, 0x88, 0x3, 0x8}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xfffb, [0x6, 0xb2cc575b459b5b33, 0x4, 0x2]}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0x0, 0x0, 0xb507, 0x0, 0x0, 0x4]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) (async) ioctl$sock_netdev_private(r0, 0x8946, &(0x7f0000000a00)="4749c2368bb8dd2c7f17323cf53a") (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079107b00000000000500000000000000950000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (rerun: 32) 54.064841586s ago: executing program 4 (id=687): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10) setsockopt$sock_int(r2, 0x1, 0xb, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10) r3 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$netlink(r3, 0x10e, 0x2, &(0x7f0000000280)=""/196, &(0x7f0000000040)=0xc4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r4, @ANYBLOB="0800050006000000140017800400050004000400060001"], 0x60}}, 0x0) 54.064773631s ago: executing program 4 (id=687): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10) setsockopt$sock_int(r2, 0x1, 0xb, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10) r3 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$netlink(r3, 0x10e, 0x2, &(0x7f0000000280)=""/196, &(0x7f0000000040)=0xc4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r4, @ANYBLOB="0800050006000000140017800400050004000400060001"], 0x60}}, 0x0) 42.39694536s ago: executing program 4 (id=687): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10) setsockopt$sock_int(r2, 0x1, 0xb, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10) r3 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$netlink(r3, 0x10e, 0x2, &(0x7f0000000280)=""/196, &(0x7f0000000040)=0xc4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r4, @ANYBLOB="0800050006000000140017800400050004000400060001"], 0x60}}, 0x0) 31.821826287s ago: executing program 4 (id=687): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10) setsockopt$sock_int(r2, 0x1, 0xb, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10) r3 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$netlink(r3, 0x10e, 0x2, &(0x7f0000000280)=""/196, &(0x7f0000000040)=0xc4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r4, @ANYBLOB="0800050006000000140017800400050004000400060001"], 0x60}}, 0x0) 22.420369935s ago: executing program 4 (id=687): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10) setsockopt$sock_int(r2, 0x1, 0xb, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10) r3 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$netlink(r3, 0x10e, 0x2, &(0x7f0000000280)=""/196, &(0x7f0000000040)=0xc4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r4, @ANYBLOB="0800050006000000140017800400050004000400060001"], 0x60}}, 0x0) 10.411348705s ago: executing program 4 (id=687): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10) setsockopt$sock_int(r2, 0x1, 0xb, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10) r3 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$netlink(r3, 0x10e, 0x2, &(0x7f0000000280)=""/196, &(0x7f0000000040)=0xc4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r4, @ANYBLOB="0800050006000000140017800400050004000400060001"], 0x60}}, 0x0) 2.217834962s ago: executing program 3 (id=1854): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000007c0)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x30, 0xcf, 0x5, 0xfffff000}, {0x6}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)={0x18, 0x24, 0x301, 0x0, 0x0, {0x1}, [@nested={0x4, 0xae}]}, 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000007110bb000000000095"], &(0x7f0000000400)='syzkaller\x00'}, 0x90) 2.089150018s ago: executing program 1 (id=1856): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0xff1a) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="df4800000000000000000c0000002c00038028000380140001800800810002000000050002000000000010000180090002007369743000000000180001801400020073697430"], 0x58}}, 0x0) getsockname$packet(r3, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000005c0)=0x14) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$LINK_DETACH(0x22, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r1, r6, 0x4, r7}, 0x10) r8 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x458, 0x98, 0x0, 0x0, 0x0, 0x0, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x6, 0x0, {[{{@ip={@broadcast, @dev, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x190}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x228}}, {{@ip={@remote, @empty, 0x0, 0x0, 'vcan0\x00', 'veth1_to_team\x00'}, 0x0, 0xc8, 0xf8, 0x0, {}, [@common=@icmp={{0x58}, {0x0, "d1a1"}}, @common=@addrtype={{0x30}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @remote}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@multicast2, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth0_macvtap\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) 2.00565405s ago: executing program 3 (id=1858): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000240)={0x0, 0x28, 0x20, 0x1, 0x401}, &(0x7f0000000280)=0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PRATE64={0xc, 0x5, 0x3494eaa61db8fa82}, @TCA_TBF_BURST={0x8, 0x6, 0xff}]}}]}, 0x58}}, 0x4000080) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r2, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000800030000000000ffffffff000000", @ANYRES32=r8, @ANYBLOB="1400238006001600040000000500130000000000"], 0x30}}, 0x0) 1.907991292s ago: executing program 1 (id=1859): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x2, 0x2}}, 0x14}}, 0x20000090) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xa, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000040000000000000000635426f29309ba72641100e6", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001811", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7"], 0x0, 0x101, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4d0}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r3, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x20, 0x2b, 0xb, 0x0, 0x0, {0x8}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}]}, 0x20}}, 0xc00) 1.788812436s ago: executing program 3 (id=1862): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000000)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) 1.228984475s ago: executing program 3 (id=1865): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$kcm(0x2, 0x2, 0x0) (async) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f00000002c0), 0x161) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x31, &(0x7f0000000640), 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'macvlan0\x00', &(0x7f00000000c0)=@ethtool_ringparam={0x10, 0x8, 0x8001, 0x0, 0x4, 0x2, 0x4, 0xfffffffe, 0xdbf6}}) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'macvlan0\x00', &(0x7f00000000c0)=@ethtool_ringparam={0x10, 0x8, 0x8001, 0x0, 0x4, 0x2, 0x4, 0xfffffffe, 0xdbf6}}) 1.192476743s ago: executing program 1 (id=1866): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@fwd={0x2, 0x0, 0x0, 0x12}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x40}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@fwd={0x2, 0x0, 0x0, 0x12}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x40}, 0x20) socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f04d0067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4098000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1fff01e3bb9ad809d5e1cace81ed0b66bce0b42a9e1b518077c20708215c2c4b4ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300000000000000", 0xd8}], 0x1}, 0x48002) (async) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f04d0067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4098000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1fff01e3bb9ad809d5e1cace81ed0b66bce0b42a9e1b518077c20708215c2c4b4ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300000000000000", 0xd8}], 0x1}, 0x48002) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000600)="ad56d3d122b8912f9190c2190000000000", 0x11) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, 0x0, 0x4000800) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x78, r4, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x64, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4c}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "a34951bc2473fb9de5bb04150bfbe00e87e9f218c911a0ed96585baa8dafc5abb81a9be2"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r7 = socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'gretap0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r8}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@ipv6_newroute={0x44, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff}, [@RTA_OIF={0x8, 0x4, r9}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x4, 0x0, 0x4, 0x0, 0x80, 0x30, 0xb9}}}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@ipv6_newroute={0x44, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff}, [@RTA_OIF={0x8, 0x4, r9}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x4, 0x0, 0x4, 0x0, 0x80, 0x30, 0xb9}}}}}]}, 0x44}}, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.148566637s ago: executing program 5 (id=1867): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x5, @private2, 0x9}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x83, &(0x7f0000000180)={r3, 0xf9, 0x20}, &(0x7f0000000500)=0xc) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000000240)=""/21, &(0x7f0000000280)=0x15) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_setlink={0x58, 0x13, 0x10, 0x70bd2b, 0x25dfdbfb, {0x7, 0x0, 0x0, r1, 0x22040, 0x11d00}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x1}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x2}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x5e7a}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wlan1\x00'}, @IFLA_PHYS_PORT_ID={0xb, 0x22, "1e6d6d40c3ea07"}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) 941.850737ms ago: executing program 0 (id=1868): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) close(r1) bpf$LINK_DETACH(0x22, &(0x7f00000000c0), 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 941.129692ms ago: executing program 5 (id=1869): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000000)=ANY=[], 0x40}}, 0x20000000) (async) r2 = socket$netlink(0x10, 0x3, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000023c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@rights={{0x18, 0x1, 0x1, [r2, r3]}}], 0x18}}], 0x1, 0x0) (async) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f00000001c0)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x2711, @local}, 0x10) (async) connect$unix(r4, 0x0, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}]}, 0x38}}, 0x0) 856.682744ms ago: executing program 1 (id=1870): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x2, 0x2}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x10, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a300000000014000380080001400000000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001007465616d300000000000000000000000140001006970365f767469300000dc45ce160000080007"], 0xf4}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x38, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xdd91, 0x9, 0xac, 0x800, 0x2, 0xfff9, 0xfff7, 0x989]}}]}]}]}, 0x38}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000004c0)={@multicast, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @echo={0x8, 0x0, 0x0, 0xfff, 0x200}}}}}, 0x0) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r7, 0x891c, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r6, 0xc6e9f000) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r6, 0xffffe000) mmap(&(0x7f0000142000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0) setsockopt$inet_group_source_req(r6, 0x0, 0x2b, &(0x7f0000000040)={0xe, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000a, 0xc3072, 0xffffffffffffffff, 0x2fd15000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000) mmap(&(0x7f0000b93000/0x4000)=nil, 0x4000, 0x1000000, 0x20010, r3, 0x93a9e000) 698.970603ms ago: executing program 0 (id=1871): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="c4000000190001000000000000000000ac1414bb000000000000000000000000f700000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00100001"], 0xc4}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001d00010000000000fffd00000a00100001000000000000007f86beb62fecd558cfc95883c35f6e298c155453b96ccb564727e1c4f2ca2dd6b233b30c31e15af41959fcd8afc4d402a05a2a1358fd955e23a488f0f8e5b4075c4b826567bc6ccd2be79abc83137acab4d2c0248066ab1efacf6693828b77b8ec5bab7fd1b70d56a7a7bb8037e1410b92028151db10718ff42eeb6b4072cb1b5cf86e1768970c0e0de92c8d547ac9c7213e364fdeb7678fb440dad059b5d8d92fee03506e0341f5f00eac00b3c17449f09bd13f26b534a56b6cbd15416b4507bddf17ce75bf59f2c7e9eb145b8394047c610b40"], 0x1c}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00') r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x63, 0xb5, &(0x7f00000002c0)="b6aaa48d0c5f32dea77c1434eda013fd7da2d2e6a240e129f9574792fb8a8b7d5e6b84a5ca7a1af05af39fabd715b9c324866c508300faf847eecccfe2723d4461c3e2367e8080318289838f1f6389ed8ab18a3975ebed066acaa9b95da5317add3405", &(0x7f0000000440)=""/181, 0x5, 0x0, 0x5b, 0x65, &(0x7f0000000500)="ce4db858f03114df209bc6326c65293f343729b9dd5163027aa4bf037099e7af3559515e45ad4be7da035944826f27ea60428d26c31d5ebd9ca6409cef3f98795dcd50b054055277f6f3cbc88c8794bfa5985fde67aaaa73dfe4fb", &(0x7f0000000580)="9cbc0e4b63d400b5ef38e8ec850bf8227a2147e82e9cf243a508e9af36fa89308ce3d2a00d8aa7f6f5e728b469dc47b15556627f6706f39a62c0ed47577f3428debdc8ea429dddde754d736d2c1efba2e540e148d127bc3acaeb6358c6e5e8753351927243", 0x4, 0x0, 0xff}, 0x50) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) 641.302943ms ago: executing program 3 (id=1872): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x14, 0x18, 0x229, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) writev(r0, &(0x7f0000001d40)=[{&(0x7f0000001c40)="d32b9a62bd7e977dcbb7c5c7454304399ed17019dacda3ee244c201b05ac96e39fe006e95b923f9ca761ce2d35b87e6b02e530b23c315827b990d2df0932737e8c30525f55ee22330ca5fb1eade17985b3aff728aa61e4305c7ed6b0bc78c0bf8f1c156a59436fc028a8c4bf95e62f807b069c0bd3f96893307976ac1bc0e02ff352c7457fc6abe387f0e5d93c39c2eca41177d649f5faa79c50e8ed67ecb5dca708630054d9e62d8d508dfa85f323298bdea3512b3ad4ef433958304ac507b72586143928e07b7fbd784cf0eb1b3d9f6d9cd064df", 0xd5}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x91}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmmsg$inet(r0, &(0x7f00000005c0)=[{{&(0x7f0000000440)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001880)=[{&(0x7f0000000480)="36a66e06db1238b9b0b764130f4f013c6666d59a141f97016c07387ffd6397889731223b84dc6e322a68671524f1395c8f062a0b7f434106e0182cd44c17ec27abb0b7af6ab80100f032cd590b4cc65baaadd458450a75d67452a7b87473ba2944217553c8bad146276bde1ab89c88020152021cb4d3c21bb4555b7310c26cf2e33bf2df00ff88c6c4e3fab3f8ec5afa829de361e35aa8aeea266af161bc168d", 0xa0}, {&(0x7f0000000540)="fd21f0490d0a49cfc3807e23da0dd0e86b833df2f1f25334175999c3c0883e763511fef1d5a89328dc056c6c46bd0e14cc8c7aa8b2bd09c30390c857b94096d4dc74c285507e9f0fcdeab59cecdb04d4e413f0d11d93bef3eaca4d9190e3e57c3389cb4ede04eadb18230ed2885358156e", 0x71}, {&(0x7f0000000640)="7f04538ed3ae5e7a7e5f00c5cddd070a762fb742c6935e280d68f18316b57ed1215ba657f68d724e369d16ea289c95c3d90264a6c78a35abedf785dfc2f9cfc4d0f203737cfc6edb86d0113a8606e47084adec90f6b732a15aec1a80f563081882e9a98a073464e2b61930321cdbb0ce4acaf2424c22159ea7a1784a04e2c8077a7833da5aa81ab4b2b8f5248a45c54ebe8e38b4b0512b23f045b38cacc89b25c35ff39265388188f5f524297a4a2ddc0495ac8c3d5282aa8053ee9550bd3f420204e3a41662edf2604141a78f832c20ab6e100df24f01ea36de01daa2c38067db15ebe9faa77cfc983dc481c590e6e9ade5920afd", 0xf5}, {&(0x7f0000000740)="c2e45ec182377dce45cf77e40a1f52b6ae5e6520d7ad88f47f04b1f8b5cc8967dc88fca424d4fff67720ae063b133c3482a0b7903c85e394dc170bbe90256891b453cb9c8463c7910f543cf72f1431d6e294668bbbd432897487571683ccfdaa42eda6ab4fa59de5dc8ce66b8e5a4eba388c0e5605d2d13a43ea50beaff86dc072bc433bb15f1db6ae62f7c68e630e3d49585828b5bce4c9f8ac468de6a66f755e5f8c4e6995bb9cc31135f029230b556811ba0754679ae14c2e3d0d4b02c1838947f740de4d0c48905af01f9dffbf758dbc45cd954f450506e5fe969d03bce874fe24a38aea2cdb0ad1d8016eae668ef7af4ffffc920d8d7124e5ae6a78ca570968252f050283d7db0019a96497e85f3a005a93d380295377d8f753ea778b9873bc7332ad52563ab189c8b4887e2342a7735dd919e75a507417307bf1f1b0280f87749ba42d5601279a0af589deb6f97599cfff264fb1a696fa2f551a3ee6b92a3aa9d4593fcab18dc7162bc5e2467b0a42b3738956b0141494ceacffed825b232a0f250c84a3f296e942464c2147a35d88a76bd74722f6b91308be50c40ffc34ce371b228580b4bcfc20c2895482f546709a13544e054049afa12ca85bc466418292b06b5c7f1dcbf6b94542afe5779db97a141c8e1b5613829c3c42b29d6716050749b05e57c07e3ac0593eb7b86fa06a22afe85038eb694386885399d156d3ab3bfcc897b8d0ed64b74be7eb01c04c2e929f7a32df886c888c56fce64168b22895ab5012c32b585a7c0eb6d86aecd9b56402b5d97301a9c196ba0489685a20a94dff9d994e36665f002b236ded4866d309392c8a1603e6baa5081a288f78ded35a5237a41df6750dde3a746cf495188f5b8182e23449b63ebfcbf74e49230407e7d748884c2734c39a0ac03c2205fbdabb4caaf0187f0aa1a8d36cb4b3fbf729252bcf9fd8324bf60b38d3819af1909a5af3ef540ef53b1312a38f87ffc4e3ec1ce9b9f233e2cd2f1b3086f616fdf24fd998823c97c2071bb4683eaf6f5734e0f42b733a45cab90a492ba051efe7bf6f2dbc069428506cc4c7a600ae2c16ce2db88c45a4ecfcfc9e34b0ab5fee39688eb29063627905ff2b72024da86f8a08446e70ed867a6fe25ca72a56bb5cce24f7f62bfb9618c91057f01a1173c0dfebfe58eeece2b57dd381c304686b185f0970a84992aa27c05a4b0e6aa4edc4f7b18c030e3caf61f203ff63099f0287c97939672ed260f794cf6d61c9b1000568528bc208d3d91de6d27ef348491b90f19661e101bea3d9c13f653e8cfb7064318d70755f7901f14019159732b122ae2894c6294c7b80456f2d7a4b2676ba3bc42b3a6fb433b9069bbd513ed785d6030a079660a540690648769bdc1a1e095239280275e61c262f2dac4a62018a8553cde0db4ccc739631fedec2c999efaf4d23b5f78a4f418748e44c8d8651fb82a3738769400dda4ae436ab9dcadc0b70c530bcfb3f1dede27f44fbb970b4b132200c4382588bff09dd8ef27f99eadcf32373d32c41a68a52569604d1b02fd1c9e261490ead413f25cd1ec15a09169e39c1eb0b456c70e04b7b14241196f655a5ae1125442c7d401b37ce7a905660f0e06a39f20ee4b740968b4fef4c7b17a11beddf1db68e78e246dbc6a86938f8d2b175b19ae3617e9b0dd93f213f9061f9e9b9cb0596a9a1ea9004d7fabe1db15a409a8cfcef1860f09876ba7c0bb5bf936b4f535486bbf2966703bdda7d1c3526cff90711ef6ea82e8d913b0c11a69c56400e4e13e34e20d634a539ce551dcfb53d814af705071b6b4cc87cf4eafa9d1b8aa1debd10ea7aa4507c84f75e3016d8fb478760a352f9000e2db166c6ce51d3226db77f9693c25a84a5875fb021ae64208a54ec38aeccc544d396993caa393bcbdbe3e201e8483ab2a2c35acb78b0ddfee0b08e029bf2e52b21c9bdf60ab5758d722a7abed5d0d359507b3f9714e39fc42fb75694b41904bb8b1a2b22baac1c4cae8f31e83adf4e595f9ca6df668d8a61fad8dd76a57a5a97c4af476b6da163ea117e22422df429c2cd348a2fa9344fbee06a5709a4e6514b8208d75ec8bcb3e10a13c5631eebc1e82d4628ded566c098d3a1df168f8fcbb34dd63bcec56650b6c08f69f2f12d4b074ed0a04b9da10dbb729cbf8942c721c874bf4e6687cef1636616112051829cb1bbf5f740107157564ecd192dc41d34abec3ad63536b6ecdb054f1dc04992620657a44d42e1ec5a265c95baf57cb0e889b252d1c2b1ab33b8ee6a2f39042262f743b25963d599e989ef90da6d512acf8396ee50e11c743381716819ce10763dc962cc6787d316253abd2f26badcc2b3539d4c34b04cc516bfd07339af1fb322e14a7d99c40d97a03fc082bb738ec532a4ef646e570e37576cc344e78ab7e4a027b5860951810bda25d61dc48fb30e3fa5d7f2462025fed9fecf06ae8387e401881afd982dbeb89d1d1afd22aa1a5f814d371c92a3f57682ad77f1576d8e71d5a77af53f74c69818c5685a73cb718c3a25476f0f31ad978bc6877832692b2d5826a06f7e6b17e10f8bf062062a81421a126c3801acffa3dca7aaa354d41f5a853768c6b7f26b5c85e5e3173f8b69771ff44263b5f3df382c69756f79081653e58ec381a8ef9167e9b503e56f36556f6e2b73389c5300f0248a68ada1c5e7f67b4c088d4d80f7f56f7b08d20b6cc710846b7bc89335d8a63993f23cc5b97c364759dafdfc565eb0e5a013bdabe87be5f8f678e3b943fe48627b22a383a4bbc977d4674a2fe607ec35371d5147827d9c10c2f1727c1407f6984d4f50db995f86688f2116895a04c4c309b5259a639d8b9f8ca2452053dada054bad4be55d8968b8e1e9defcf83080d87c865467fde8e9089a56c260ad152a822a448b9da0bf9a4f0759d19fb965fc556c31de81d64f7c79da2e77cd4628cac31a9fb5c62416432a48599416d613c03bb04989bae363eb0ed30ea4957d59bc1346754c0931b9b47f6ec5e3ae5395ecf49f0534f9bcd0371c5a4e12e72fbe83ca50cb1406c1b8f1202a216a78adc55847725881da65e31ba16786dec38337e4d075ca269254ff2a17dc0fc80b752233cd9529ac32426a64c0f9abacc0ae029269d40a43f7af0adddd3ca9d1478fdde7d2520cfd10d5cf8a4d0ec3b72b4c5a3b6da79f371f57f8bb66728f58fa4f2a2c31557c750bb75c13d906dc55c6d51f1b84947cefd5ba17bf6de90a3b092dea7a1ac5ce69bf7422bc0da84657350b3087ed9bc16ddf1fe18811be205f14e2b9f04f5847081a50affe4026f99ff2c4b83ffb2472e06208bb500593d8c7a58cffc5e8dd17c15fe08398906265eb370c4d956db3a1a1f64855399289c84e195b1572827ba1e8177bbdf3dac6ded4145bea20b37b17379d24e9285dbcc9cc7efe11cd0ebbb2d13f8703d3048d6222177850a200f116ac56f9c06853092e3ed12fe0bcc9b48c0ab2fbcc1f1f5940c4bbebad4f9c4204a2b548954ff3847b539c5215eb476cb97a7a4c1f790850744625478001723bffadc3f7cb4ad7559c11382341cab67679aba3e7687d26e13b228ed3f663c02392422f87eea36cb403d8ab258605bc985227d850a010b6e6cdc37f07764df53d69510d7a3e999075f2753e3df766bf0aec08ef5cbcf14b02309d731bd9523e9fa922a27ad6178e613d83f9f7897b48b14a0d44ff945adca8d8f81a7f6704119629fd1fe9493b7a7a4061e4688c2512f408099edf325dd3e84b29fc2f85989cc6063e89d7160cfb33987d8e7a583f8de559980deda162038c349613a6c9d4e8ae7078f555cb2e1c5d2179f92a388c52497ad090bae5cf3b62aec3bb2aebf3033f01953b6bb04b8de43def1751d8a1eea177fe5f8680b1a9419662835ad5e03b1280c03c333d3fa329bbedf3eba0c774cabcd913a6136cb15d335f946f07123f819c0c00a212805935aa4797b106c3f8e9d0c5849aecaf9d1760c486aeb7efd9c6db49d6e32e7d4c5fb714535cef489f013b7927dd058ba8542d1ec29978650e5f410c60e8172264da5b2bec9e480aa8bb14b4dafe8db01d6ab6045819120e10c5a01fc75bbf0144e6e3e22605f981cadfffe87241a557e3c0d1766c15f079c1d362e7287f68431cf448600cb51fd5f0e3cf218e38d55632f5d38a4246ba5463ffc5bca1c83da6f5dc53da22126cb2b20070d05978ed5b908148598647c0a640f4ea7119e5f3775904b0c71fd19c6d6fa4271811f95e8b126bb9514a02718b1d05d9152348afde6e720d15619428e49beee3bf483f0741cc064cd265448da0b88a7713d3d40f6676e09c048f752cd1c7cb8b4e08ccc131da99fa66324500a306fd8c860d1aeadf33196bfc179b99ff5b93415696f55c37cec0a5dd5cd35d61839faffe71f227dce14465654204632fdb880be5f4c9653e04a0fce9fee202082e3bfd443cc8a2f96421436229de1ecea662ec7970676b75e712aa63ea9c52efbf33310d63b0db36ccd63610b4647bb084aedc5244e471b3454c91bb7be5085d749a06729b654f64b77078cd82ccc20205ae0c09bb35231a4fced46e598a177e48dbfe8fbaa3b467d5d1e32dc1126dd29b48fe89504b43c760a52eacf6a469393476e2b1f027055abeaae947cca341fe70779ee702c5abb36aa20921bb2b6910930c67d815136d239fee8046fd9ed0e0ea325a07cdb8a34bc824a3572e7a683010c861c7b9b9184f16178811b70ae7ef457efceb0d8ecc9320ca7bee57ed7cd511dc537d89d335006089ae99c8fc9ad22c4078c2a4845fd93a14a3fad54a17a2b078940b880749be73aee7949a05a6faf2ff0082df28774011c4e6c910e1cef89582acc35c9ee5b8d59f26febfd9e4f2f0faad58ea683c838bf9f5f8a92dc98910c6ba3d3a5c07d58da0777d5ac3f0b019884fe17028156dcf6e74d0e694dad3c7a6ced4657b36680132b0fa73530ce25e47c470d15ffb9728a7475042b28c2ea6fd2f2608b98e5fbba8053a6216795a1c049771e9c57d384f92342b8e86f8a5fe36333fb0406ba08fbd7c2c3428dd1b1003dcc151036efea5e747068dbd4510d5d5a474ecc030fc5079ebc229cbe8d8d438e172c018442abbcf69d314289604f51e931f34bc6c3a062edfdd837fd217c4f49c9cbd90150207ad5c13dd569d535ca3534c96b4ead5b9d618336f021cde6d3cc69dd74a3824586d141ad99ba8acf87f850e9dc908ab597cc1fd65aae0298cd7d842b9b9d6b3787b7c82d11d3b6891a0f91e4b12441dc7f05f37fc0c5ca5111bacaf069f9a0b768a8a76605ccc1eeb16cd8caa1222798e12d19eaf05638035b41f3f3bd1f01d7aac969b96c642cb168f542721ac96c76e5eb7fcb5be6311dc824f740b7a6cd4ac4d6480206a74edf5237633d6392a34a8c75fb6f75189fd530a40ef75d45bbb6f642bd6b64ca625f70f929665056a43cf89150919fa90e059d35ef5bf308890a17e26e26792041c4fb6e9d199c67203d4a41736775527077b930596e4df6fd6dd104f9b08ec8f65232bcdb1af2bb4b5f087f459b2ae378885b7aa21053affb3fa5c2e47add8322da6ce038056f09a4f3be17fcb25c18bed2bf46b929c695d2875d56b18eae180f106e0556116efba363c2614457f6cf068a80a629da3aaec7f326beb358114ae0c1da62634b6505d0dba5d1f257b0657be1dec99acb42153333e74dbe27f7dfdf902e2787cde2189c5bda1aa55757bb833c6c3e83f905e3021c1635660297e4873d797bf89d11250fa7424cbbe44101b8d764404e7", 0x1000}, {&(0x7f0000001740)="f9a31d98454bd22451a422dfa56aab3c5ced205e9f29c22e046cbb7f64f6609d92ea17d957bba62936de89fa67ae4e8f4438a7b988f8e0ec2121e728d39716ffc29509cfa5bd6ffa263daed3b6d75080ff945a3d84c3e607a06800ed1eb41d295a9d388d8116f7bf0c5d2a2c97e236364f2ce51f571395b107658840c4999b1a551ea5b493f4bbc5800cbe149f4f08a4645754b2ee00000000e6a27c12f22cf1c1e4983af29b", 0xa6}, {&(0x7f0000001800)="0bfc57f9518d80a5554b9e5b389df21c49e443fe7fef74b67bcf77f9c023b3503ea3fb3675bccdacb00072418d5fa78ad0db243135b4d4024039247b73b1e34ad3bfe13451d57cf812219b53", 0x4c}], 0x6, &(0x7f0000001900)=[@ip_retopts={{0xa8, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0x13, [@broadcast, @local]}, @rr={0x7, 0xb, 0x6, [@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x3c}]}, @timestamp_addr={0x44, 0x3c, 0x3f, 0x1, 0x3, [{@multicast2, 0xfffffc00}, {@multicast2, 0x4}, {@rand_addr=0x64010100, 0x2}, {@multicast1, 0x5}, {@loopback, 0x8}, {@remote, 0x3}, {@multicast2, 0x6}]}, @timestamp_addr={0x44, 0x14, 0x35, 0x1, 0xa, [{@broadcast, 0x3}, {@multicast2, 0xbe}]}, @generic={0x94, 0x12, "1febc76ac6d8ce52c886e918b200be4f"}, @timestamp={0x44, 0x8, 0x53, 0x0, 0x0, [0x6]}, @timestamp_addr={0x44, 0xc, 0x64, 0x1, 0x0, [{@loopback, 0x81}]}, @ra={0x94, 0x4}, @noop, @cipso={0x86, 0x6, 0x1}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_retopts={{0x74, 0x0, 0x7, {[@cipso={0x86, 0x64, 0xffffffffffffffff, [{0x6, 0x10, "9b9dba4311df44a93597a0d2e542"}, {0x5, 0x12, "ad6a253c3b20efeb1129557ea4e76319"}, {0x5, 0xc, "54ae64fd571c671c9341"}, {0x5, 0x3, "d8"}, {0x7, 0x8, "4cf33df085d0"}, {0x1, 0x5, "c649a8"}, {0x1, 0x2}, {0x6, 0x12, "1ea055077d0073ff41aee96f47033d0d"}, {0x5, 0x4, "1832"}, {0x0, 0x8, "6cea0ef94526"}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_retopts={{0x20, 0x0, 0x7, {[@generic={0x44, 0xd, "71102307f4c78ff90fc25f"}]}}}], 0x170}}], 0x1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @initdev, @private}, &(0x7f00000002c0)=0xc) r4 = socket$inet(0xa, 0x801, 0x84) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r5, 0x10c, 0x1, &(0x7f00000018c0), &(0x7f00000079c0)=0x4) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r6 = accept4(r4, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r7, &(0x7f0000001c00)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x9c, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x40}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}]}, 0x9c}}, 0x8000080) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000000)={0x0, 0xc}, &(0x7f0000000080)=0x8) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r1, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000001d80)={0xb8, r2, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xc}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1c}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20040004}, 0x20000080) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000001a80)=0xc, 0x4) 636.517184ms ago: executing program 5 (id=1873): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f6, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x12, 0x0, 0x2, 0x0, 0xb152, 0x1, 0x1ff, 0x0, 0x5}}) ioctl$BTRFS_IOC_QGROUP_LIMIT(r3, 0x8030942b, &(0x7f0000000040)={0x60d, {0x0, 0x101, 0x9, 0x19b81428000, 0x2}}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x38018, 0x201a0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_BROADCAST={0xa, 0x2, @remote}]}, 0x48}}, 0x800) 556.536665ms ago: executing program 0 (id=1874): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001c2df6f270000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x10) r3 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r3, r2, 0x0, 0xf, &(0x7f0000000300)='netlink_extack\x00'}, 0x30) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x34000, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 532.01829ms ago: executing program 3 (id=1875): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x18, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES32=r2], 0x9c}}, 0x2040041) 469.604261ms ago: executing program 1 (id=1876): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1700000000000000090000000300000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001000"/28], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0xf, &(0x7f00000001c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f00000000c0)='GPL\x00', 0x2, 0x8b, &(0x7f0000000100)=""/139}, 0x94) (async, rerun: 64) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x38, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x11, 0x2, 0x0, 0x1, [@nested={0xc, 0x14, 0x0, 0x1, [@typed={0x8, 0x19, 0x0, 0x0, @u32=0x9}]}, @generic='V']}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async, rerun: 64) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r0, &(0x7f0000000340)="a749540fc9012da7402a56d8e9efc671bec77fa071d3724a187f14c80f233208ad07d6dd0bd73db3920300eb5fc75409a843ccb47a3fb1236db0f3f5f182448705feb4296f96249e02ac48675af12a4261b237969d7fcbed38c2f11d0496104e5cfb4ea3191bd18dc36f4f64bd84510c4c78dbab314af20127d251ed2fc51bfe00a9c2e3c793974a442ab2d5b4ddead6e90976bb05d5fa2353fadbfc959b4150b0b7db6642caf9a895871b51ebeb9d4a435701d712fda5dc5c9a1bc1b59cf9bb23e9db3afc19684500d064ea945b089087b2cba2eb4782f659d68fda73f79c18d2be3ca45c7f626127245d62299fcf3b933ef7e94c", &(0x7f0000000440)=""/182, 0x4}, 0x20) (async, rerun: 64) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002d002100000000000000000004000080080009002f"], 0x1c}], 0x1}, 0x0) (async, rerun: 32) r3 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000540)) (async) r4 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r4, 0x110, 0x5, 0x0, 0x4) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) (rerun: 32) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYBLOB="480000001300f7d100"/20, @ANYRES32=r5, @ANYBLOB="000000000000000008000d0000000000180016801400018010000200050000001e060000fcffffff0800290000000100"], 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x0) (async, rerun: 64) shutdown(r4, 0x1) (rerun: 64) 390.891301ms ago: executing program 5 (id=1877): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_OVERHEAD={0x8}, @TCA_CAKE_ATM={0x8}]}}]}, 0x44}}, 0x0) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000040)={0x30, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_ASSOCIATED={0x4}]}]}, 0x30}}, 0x4084) 294.649426ms ago: executing program 0 (id=1878): socket$nl_rdma(0x10, 0x3, 0x14) (async) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x1412, 0x2, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4005}, 0x40c1) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) (async) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000002c0)) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000f641b2ff7e0000040000000000000000e48f5d9733c4d2bd8a542294613fb03a90e61691927b0ed64f3f3b0e54e2a30991119f2afe04ab7fe1dc9166cd78647835fb708dbe90235fb1099406b20f4662e5184fc100f777bbc4bef3af8d581d762bd68247db85b8c46197ab410bd4262e20f0d77b9bab6f499ff2ca64a5bc56a0fbbb210ddb40307b3daeeaf61b7f20ab4eb2d273259407704be45ea52a95cbe2aef8516ce0cfd1934a8f7bfea37809d72cd42117553a1cb61af69c176c334639471dad43de2265640428573d", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100626174616476000014000280100001004241544d414e5f56"], 0xfd12}}, 0x0) 274.869666ms ago: executing program 1 (id=1879): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c03406910927c6b0b55b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfe79578e51bc53099e90f4580d760551b5b342f7cbdb9cd38bdb2209c676b2ac2deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f132020000002cbe7bc04b82d2789cb1b2b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c41146dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a42b359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780c70014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e506d1387b63112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece08ac772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2ef0ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a3f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099bdae7ed04935c2c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adeb988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ffa3c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe4a3ced846891180604b6dd2499d16d7d9158ffffff069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb0814040000007874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dbae3428d2129ecfce1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296c6a298c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f050000000000000026049fe86e09623524f390bf79b441b75fc790c58e273cd905deb28c13c1ed1c0d9cae846b03008cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc48f97496079654f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b4749c28eb5167e9936ed327fb237a56224e49d9ea956d1798571b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecf743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be182724d95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd0403a099f32468f1561f058960d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b656dc0e32384f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bbe3e8ef76f57a2d0e69115d33394e86e4b83c0f3c2a34635f3eee4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cd082027c641ec4355eb4acff90756d1a1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8cc3fe28bc3586844f5fecb92aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a5906002fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128ab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0afd9ae134400f70b5e6aefb7eee403502732df858a2ea033b6c91c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80ffb8f386bb79f5589829b6b0679b5d65a00000000000000e6ff00000000000000000000faff0000bab50bc8508a9644d3e7c328b0ff22035c8073f8c1f0e3da7339fc81d4ab3ef2857ef70a81d8a1628da28c942571880e22df7cabae56d5ff5e483c9c1f5a258b8f1f34cc300312f76a374a6e9b3f9dbd7f538a80b00f97e47895b3201c5126feca0888956a7d768198d9c2109ac508a47ebb99c539ef45af7d87b308117a9e321a3861bc42cf41942c31268a4020221d7b1622585094eddd83c7f4acdd7f5c23d8b730bf03118261edada8b8487a3b1b7548a4687a91f12bf70bb1df3bfe7d4b92ad6fcbf401efd6eb004cf20016ad8d1dad136dd856ffca238b39482811f9c8524bf182f1956a3d044423927df28880bbd11c06407220df8e1d1d483d947d990dc175803d765ca14a915a0040b641959ad3e776b4bb4852fea12983dc18b7404914a6137dc4a78f1e0d331c60a9019c21698cd18753491df962f496f2395563e9c3d7b1228d0e488cf7e50a29541aa757f2e2ee9ff4433d65db0de5a123d569e39dce481156cbec584c9a32a8e3b032fa003192c891d83119bc950abac9147b9fcb0acd9a207b5ceb7e8ed1d91c000000000000000000000000000000141258373281153fa27e586ea82650f070d8851ac9e7ac07b37a6479d4017b5b5af3ff4c91235df4f657d77e386a329aec4d766369c86b62b01ceb028c6fcf206883633cb143016b9f5351a45a8cb4ea110ba700000000000000883416b6eff6a793c71deb7d780c4f51d86ece127c0714144916f397d398ad2fe72b710b932c15c2369cb5d2d2f6ae420672c4a626195a891ac51825077fbc286aa3866bbf18a4a8b836ea8c90af0d5f0aff55b50bc18c27875ed2628b91224b7fa9fd10ccd7c1b1a92bac529df981a6d30100e68555553625c0e91a51000000000000000000fe030f85b294f3ea1fce314a9dcefbe3b64e83c35c5e95734786ca78315793cc0e6e776d2ec07c55cd89541ec25e074e840287011cab538d79e1569df321282071d49a4dc5fb2d7da1d05249d0e153fd04aca2", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000013000100000000000200000007000000", @ANYRES32, @ANYBLOB="000001008a20000014001a80100004800c000180080001"], 0x34}, 0x1, 0x0, 0x0, 0x54005}, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r2], 0x34}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 165.580622ms ago: executing program 5 (id=1880): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x3e, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0xd0}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x3e, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0xd0}}, 0x10) (async) 114.20158ms ago: executing program 0 (id=1881): r0 = socket(0xa, 0x3, 0x4) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x3) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x6, 0x0, &(0x7f0000000840)) 506.401µs ago: executing program 0 (id=1882): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x4a301, 0x0) r1 = socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (rerun: 32) getsockname$llc(r3, &(0x7f0000000280), &(0x7f0000000200)=0xc) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x3, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xce, 0x6, 0x8}}}}]}, 0x44}}, 0x4c080) socket(0xb, 0xa, 0x3f0b8395) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d11}) (async) socket$kcm(0x29, 0x2, 0x0) (async, rerun: 64) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x16) (async, rerun: 64) r5 = socket$inet_smc(0x2b, 0x1, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40041}, 0x24008805) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000006000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000200900020025647a31010000000900010073797a30000000000800054000000021"], 0xc4}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB='(|\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00=\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x5, &(0x7f0000000380)=@filter={'filter\x00', 0xe, 0x2, 0x0, [], 0x0, 0x0, 0x0}, 0x1c6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000000d40)={0x0, 0x7000003, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001) (async) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'gre0\x00', 0x400}) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r9) (async) socket(0x1e, 0x4, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60fb8900080000fe8000000000000000000000000000aafc020000000000000000000000000000c10a074faa17e05f"], 0x0) (async) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r10, @ANYBLOB="01002cbd7000fbdbdf25010000000c00040007000000000000000c0006000100000000000000"], 0x2c}}, 0x40) 0s ago: executing program 5 (id=1883): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000b80), r2) sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x4000014) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) getsockopt$bt_hci(r4, 0x84, 0x82, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) unshare(0x40060000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r5}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001080), r6) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f00000011c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x60, r8, 0x20, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x8}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x840) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r9, 0x0, 0x25a5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x4000884) kernel console output (not intermixed with test programs): syz.1.1078': attribute type 2 has an invalid length. [ 204.617523][ T9713] netlink: 'syz.1.1078': attribute type 12 has an invalid length. [ 204.647159][ T9713] netlink: 'syz.1.1078': attribute type 29 has an invalid length. [ 204.655770][ T9713] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1078'. [ 204.667117][ T9713] netlink: 'syz.1.1078': attribute type 1 has an invalid length. [ 204.696105][ T9713] netlink: 'syz.1.1078': attribute type 2 has an invalid length. [ 204.713078][ T9713] netlink: 39 bytes leftover after parsing attributes in process `syz.1.1078'. [ 204.732180][ T9720] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1080'. [ 204.890583][ T9655] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.907345][ T9655] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.915993][ T9655] bridge_slave_0: entered allmulticast mode [ 204.924901][ T9655] bridge_slave_0: entered promiscuous mode [ 204.938910][ T9655] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.945432][ T9729] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1081'. [ 204.946850][ T9655] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.962607][ T9655] bridge_slave_1: entered allmulticast mode [ 204.970901][ T9655] bridge_slave_1: entered promiscuous mode [ 205.047998][ T9655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.048416][ T9726] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1081'. [ 205.078150][ T9655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.156060][ T9734] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1083'. [ 205.236112][ T9655] team0: Port device team_slave_0 added [ 205.261644][ T9655] team0: Port device team_slave_1 added [ 205.343894][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 205.440791][ T9655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.465554][ T9655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.515995][ T9655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.531936][ T9742] syzkaller0 speed is unknown, defaulting to 1000 [ 205.654989][ T9655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.662103][ T9655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.694941][ T9655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.827155][ T9756] net_ratelimit: 16 callbacks suppressed [ 205.827181][ T9756] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 205.876622][ T9655] hsr_slave_0: entered promiscuous mode [ 205.904905][ T5840] Bluetooth: hci1: command tx timeout [ 205.921634][ T9655] hsr_slave_1: entered promiscuous mode [ 205.945516][ T9655] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.969040][ T9655] Cannot create hsr debugfs directory [ 206.964753][ T9655] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 206.996441][ T9655] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 207.024164][ T9655] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 207.046224][ T9794] syzkaller0 speed is unknown, defaulting to 1000 [ 207.046958][ T9655] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 207.549478][ T9655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.578507][ T9655] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.607696][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.614964][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.770064][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.777387][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.836563][ T9825] bond0: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 207.860348][ T9831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.867995][ T60] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 207.993563][ T5840] Bluetooth: hci1: command tx timeout [ 208.014633][ T1093] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 208.216634][ T9847] bridge0: entered allmulticast mode [ 208.230771][ T9848] bridge_slave_1: left allmulticast mode [ 208.237615][ T9848] bridge_slave_1: left promiscuous mode [ 208.247961][ T9848] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.278036][ T9848] bridge_slave_0: left allmulticast mode [ 208.294705][ T9848] bridge_slave_0: left promiscuous mode [ 208.303750][ T9848] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.367314][ T9848] bridge0 (unregistering): left allmulticast mode [ 208.473078][ T9853] syzkaller0 speed is unknown, defaulting to 1000 [ 208.707317][ T9655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.071090][ T9888] xt_cgroup: xt_cgroup: no path or classid specified [ 209.281063][ T9896] __nla_validate_parse: 7 callbacks suppressed [ 209.281084][ T9896] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1128'. [ 209.300261][ T9896] bridge_slave_0: default FDB implementation only supports local addresses [ 209.381159][ T9655] veth0_vlan: entered promiscuous mode [ 209.418882][ T9655] veth1_vlan: entered promiscuous mode [ 209.430090][ T9900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1129'. [ 209.473130][ T9900] syzkaller1: entered promiscuous mode [ 209.490194][ T9900] syzkaller1: entered allmulticast mode [ 209.536866][ T9655] veth0_macvtap: entered promiscuous mode [ 209.557705][ T9655] veth1_macvtap: entered promiscuous mode [ 209.610676][ T9655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.641823][ T9655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.667030][ T9655] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.688334][ T9655] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.700604][ T9655] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.710807][ T9655] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.849266][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.885456][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.022620][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.033061][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.064274][ T5848] Bluetooth: hci1: command tx timeout [ 210.284487][ T9918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1134'. [ 210.284798][ T9916] netlink: 416 bytes leftover after parsing attributes in process `syz.0.1133'. [ 210.323856][ T9916] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 210.354821][ T9919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1134'. [ 210.643444][ T9934] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1138'. [ 210.658135][ T9934] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1138'. [ 210.697909][ T9934] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 210.749474][ T9923] syzkaller0 speed is unknown, defaulting to 1000 [ 210.758186][ T9932] validate_nla: 10 callbacks suppressed [ 210.758205][ T9932] netlink: 'syz.5.1137': attribute type 9 has an invalid length. [ 210.767907][ T9937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1139'. [ 210.833832][ T9937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1139'. [ 210.929444][ T9940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1140'. [ 210.991902][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.201309][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.278654][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.519580][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.908408][ T5848] Bluetooth: hci3: command 0x0406 tx timeout [ 212.202652][ T9966] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 212.254193][ T13] bridge_slave_1: left allmulticast mode [ 212.260220][ T13] bridge_slave_1: left promiscuous mode [ 212.270568][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.298101][ T13] bridge_slave_0: left allmulticast mode [ 212.320972][ T13] bridge_slave_0: left promiscuous mode [ 212.335364][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.614285][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 212.639146][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 212.655661][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 212.667189][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 212.677028][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 212.958719][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.970307][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.981918][ T13] bond0 (unregistering): Released all slaves [ 213.531337][T10000] syzkaller0 speed is unknown, defaulting to 1000 [ 213.603834][ T9985] syzkaller0 speed is unknown, defaulting to 1000 [ 213.846304][T10021] netlink: 'syz.5.1161': attribute type 8 has an invalid length. [ 213.905607][T10021] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.912986][T10021] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.937461][T10021] bridge0: entered allmulticast mode [ 214.145032][ T13] hsr_slave_0: left promiscuous mode [ 214.152828][ T13] hsr_slave_1: left promiscuous mode [ 214.166656][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.179355][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.188074][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.201711][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.239715][ T13] veth1_macvtap: left promiscuous mode [ 214.246108][ T13] veth0_macvtap: left promiscuous mode [ 214.251966][ T13] veth1_vlan: left promiscuous mode [ 214.258142][ T13] veth0_vlan: left promiscuous mode [ 214.377822][T10041] netlink: 'syz.5.1168': attribute type 4 has an invalid length. [ 214.784086][ T5840] Bluetooth: hci1: command tx timeout [ 214.810217][ T13] team0 (unregistering): Port device team_slave_1 removed [ 214.853947][ T13] team0 (unregistering): Port device team_slave_0 removed [ 215.332090][T10038] __nla_validate_parse: 3 callbacks suppressed [ 215.332112][T10038] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1166'. [ 215.581910][T10051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1170'. [ 215.846580][T10063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1175'. [ 216.018311][ T9985] chnl_net:caif_netlink_parms(): no params data found [ 216.087400][ C0] vcan0: j1939_tp_rxtimer: 0xffff888024417400: rx timeout, send abort [ 216.588461][ C0] vcan0: j1939_tp_rxtimer: 0xffff888024415c00: rx timeout, send abort [ 216.597261][ C0] vcan0: j1939_tp_rxtimer: 0xffff888024417400: abort rx timeout. Force session deactivation [ 216.649990][T10099] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1183'. [ 216.685676][ T9985] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.692979][ T9985] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.724460][ T9985] bridge_slave_0: entered allmulticast mode [ 216.769824][ T9985] bridge_slave_0: entered promiscuous mode [ 216.796073][ T9985] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.821268][ T9985] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.852446][ T9985] bridge_slave_1: entered allmulticast mode [ 216.863696][ T5840] Bluetooth: hci1: command tx timeout [ 216.872215][ T9985] bridge_slave_1: entered promiscuous mode [ 216.984405][ T9985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.997880][ T9985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.096950][ C0] vcan0: j1939_tp_rxtimer: 0xffff888024415c00: abort rx timeout. Force session deactivation [ 217.152145][ T9985] team0: Port device team_slave_0 added [ 217.177647][ T9985] team0: Port device team_slave_1 added [ 217.214032][T10114] syzkaller0 speed is unknown, defaulting to 1000 [ 217.260238][ T9985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.273099][ T9985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.305710][ T9985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.387225][T10125] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1192'. [ 217.414135][ T9985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.421247][ T9985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.449574][ T9985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.567420][ T9985] hsr_slave_0: entered promiscuous mode [ 217.575036][ T9985] hsr_slave_1: entered promiscuous mode [ 217.581600][ T9985] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.590137][ T9985] Cannot create hsr debugfs directory [ 217.837755][T10140] block nbd3: not configured, cannot reconfigure [ 217.866950][T10145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1199'. [ 217.876349][T10147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1200'. [ 217.890121][T10145] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1199'. [ 217.930150][T10142] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 217.945404][T10145] netlink: 'syz.1.1199': attribute type 20 has an invalid length. [ 218.240967][T10161] delete_channel: no stack [ 218.384783][T10161] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1204'. [ 218.399341][T10166] FAULT_INJECTION: forcing a failure. [ 218.399341][T10166] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 218.487268][T10166] CPU: 1 UID: 0 PID: 10166 Comm: syz.0.1206 Not tainted 6.16.0-rc2-syzkaller-00200-g8d89661a36dd #0 PREEMPT(full) [ 218.487301][T10166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 218.487313][T10166] Call Trace: [ 218.487322][T10166] [ 218.487331][T10166] dump_stack_lvl+0x189/0x250 [ 218.487369][T10166] ? __pfx____ratelimit+0x10/0x10 [ 218.487401][T10166] ? __pfx_dump_stack_lvl+0x10/0x10 [ 218.487432][T10166] ? __pfx__printk+0x10/0x10 [ 218.487468][T10166] should_fail_ex+0x414/0x560 [ 218.487500][T10166] _copy_to_user+0x31/0xb0 [ 218.487523][T10166] simple_read_from_buffer+0xe1/0x170 [ 218.487549][T10166] proc_fail_nth_read+0x1df/0x250 [ 218.487578][T10166] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 218.487606][T10166] ? rw_verify_area+0x258/0x650 [ 218.487636][T10166] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 218.487662][T10166] vfs_read+0x1fd/0x980 [ 218.487698][T10166] ? __pfx___mutex_lock+0x10/0x10 [ 218.487719][T10166] ? __pfx_vfs_read+0x10/0x10 [ 218.487751][T10166] ? __fget_files+0x2a/0x420 [ 218.487777][T10166] ? __fget_files+0x3a0/0x420 [ 218.487798][T10166] ? __fget_files+0x2a/0x420 [ 218.487830][T10166] ksys_read+0x145/0x250 [ 218.487851][T10166] ? __pfx_ksys_read+0x10/0x10 [ 218.487888][T10166] ? do_syscall_64+0xbe/0x3b0 [ 218.487912][T10166] do_syscall_64+0xfa/0x3b0 [ 218.487928][T10166] ? lockdep_hardirqs_on+0x9c/0x150 [ 218.487964][T10166] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.487984][T10166] ? clear_bhb_loop+0x60/0xb0 [ 218.488009][T10166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.488027][T10166] RIP: 0033:0x7f8f1d58d33c [ 218.488046][T10166] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 218.488063][T10166] RSP: 002b:00007f8f1e4e0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 218.488084][T10166] RAX: ffffffffffffffda RBX: 00007f8f1d7b5fa0 RCX: 00007f8f1d58d33c [ 218.488099][T10166] RDX: 000000000000000f RSI: 00007f8f1e4e00a0 RDI: 0000000000000005 [ 218.488111][T10166] RBP: 00007f8f1e4e0090 R08: 0000000000000000 R09: 0000000000000000 [ 218.488123][T10166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.488135][T10166] R13: 0000000000000000 R14: 00007f8f1d7b5fa0 R15: 00007fffbe97d338 [ 218.488168][T10166] [ 218.736789][T10171] syzkaller0 speed is unknown, defaulting to 1000 [ 218.954548][ T5840] Bluetooth: hci1: command tx timeout [ 218.988205][T10188] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1209'. [ 219.463963][T10185] syzkaller0 speed is unknown, defaulting to 1000 [ 219.993370][T10210] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 220.064921][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 220.102785][ T9985] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 220.129438][ T9985] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 220.159622][ T9985] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 220.178514][ T9985] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 220.383993][ T9985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.429369][ T9985] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.463949][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.471223][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.549210][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.556507][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.025107][ T5848] Bluetooth: hci1: command tx timeout [ 221.133042][T10254] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 221.144414][T10254] __nla_validate_parse: 1 callbacks suppressed [ 221.144432][T10254] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1223'. [ 221.299560][T10264] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1225'. [ 221.324280][T10259] bond2: entered promiscuous mode [ 221.329400][T10259] bond2: entered allmulticast mode [ 221.354484][T10259] 8021q: adding VLAN 0 to HW filter on device bond2 [ 221.692150][T10280] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1230'. [ 221.704056][T10259] bond2 (unregistering): Released all slaves [ 221.819305][ T9985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.977362][T10286] netlink: 300 bytes leftover after parsing attributes in process `syz.1.1232'. [ 222.448899][T10318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1240'. [ 222.669010][ T9985] veth0_vlan: entered promiscuous mode [ 222.719440][ T9985] veth1_vlan: entered promiscuous mode [ 222.992048][ T9985] veth0_macvtap: entered promiscuous mode [ 223.006182][T10342] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1245'. [ 223.048655][ T9985] veth1_macvtap: entered promiscuous mode [ 223.108961][ T9985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.109734][ T5848] Bluetooth: hci1: command 0x0405 tx timeout [ 223.193071][ T9985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.253081][ T9985] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.283712][ T9985] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.292493][ T9985] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.327880][ T9985] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.385981][T10357] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1250'. [ 223.541933][T10360] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 223.628099][ T5929] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.652527][ T5929] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.724303][T10369] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1255'. [ 223.754787][T10369] batadv0: entered promiscuous mode [ 223.761414][T10369] team0: entered promiscuous mode [ 223.767654][T10369] team_slave_0: entered promiscuous mode [ 223.775996][T10369] team_slave_1: entered promiscuous mode [ 223.784506][T10369] hsr2: entered promiscuous mode [ 223.789671][T10369] hsr2: entered allmulticast mode [ 223.796579][T10369] batadv0: entered allmulticast mode [ 223.803974][T10369] team0: entered allmulticast mode [ 223.809289][T10369] team_slave_0: entered allmulticast mode [ 223.816493][T10369] team_slave_1: entered allmulticast mode [ 223.845364][ T5929] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.884110][ T5929] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.249431][ T36] tipc: Subscription rejected, illegal request [ 224.278277][T10395] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1263'. [ 224.365851][ T5929] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.492028][ T5929] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.635366][ T5929] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.911166][ T5929] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.085374][ T5929] bridge_slave_1: left allmulticast mode [ 225.091095][ T5929] bridge_slave_1: left promiscuous mode [ 225.097781][ T5929] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.109101][ T5929] bridge_slave_0: left allmulticast mode [ 225.115467][ T5929] bridge_slave_0: left promiscuous mode [ 225.122318][ T5929] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.424423][T10411] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1269'. [ 225.720338][ T5929] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.733053][ T5929] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.745891][ T5929] bond0 (unregistering): Released all slaves [ 225.867265][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 225.878079][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 225.889359][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 225.917396][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 225.936543][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 225.975300][T10416] syzkaller0 speed is unknown, defaulting to 1000 [ 226.080486][T10431] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 226.190233][T10434] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1273'. [ 226.221438][T10434] batadv0: entered promiscuous mode [ 226.229496][T10434] batadv0: left promiscuous mode [ 226.266747][T10420] syzkaller0 speed is unknown, defaulting to 1000 [ 226.559091][T10449] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1279'. [ 226.569644][T10449] netlink: 'syz.0.1279': attribute type 2 has an invalid length. [ 226.601308][T10452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1280'. [ 226.617463][T10453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1280'. [ 226.627566][ T5929] hsr_slave_0: left promiscuous mode [ 226.639195][T10452] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1280'. [ 226.648759][ T5929] hsr_slave_1: left promiscuous mode [ 226.656657][ T5929] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.664429][T10453] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1280'. [ 226.674309][ T5929] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.688814][ T5929] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.697879][ T5929] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.738060][ T5929] veth1_macvtap: left promiscuous mode [ 226.752160][ T5929] veth0_macvtap: left promiscuous mode [ 226.760009][ T5929] veth1_vlan: left promiscuous mode [ 226.765492][ T5929] veth0_vlan: left promiscuous mode [ 226.879413][T10463] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1281'. [ 226.904413][T10463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1281'. [ 227.299758][ T5929] team0 (unregistering): Port device team_slave_1 removed [ 227.344706][ T5929] team0 (unregistering): Port device team_slave_0 removed [ 227.788809][T10456] tap0: tun_chr_ioctl cmd 1074025676 [ 227.795879][T10456] tap0: owner set to 0 [ 227.911532][T10465] netlink: 'syz.1.1282': attribute type 10 has an invalid length. [ 227.958221][T10465] team0: Device ipvlan1 failed to register rx_handler [ 228.050429][T10470] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1283'. [ 228.063517][ T5848] Bluetooth: hci1: command tx timeout [ 228.092597][T10470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1283'. [ 228.285458][T10420] chnl_net:caif_netlink_parms(): no params data found [ 228.692741][T10420] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.710974][T10420] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.728813][T10420] bridge_slave_0: entered allmulticast mode [ 228.745249][T10420] bridge_slave_0: entered promiscuous mode [ 228.773494][T10420] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.791000][T10420] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.813746][T10420] bridge_slave_1: entered allmulticast mode [ 228.842498][T10420] bridge_slave_1: entered promiscuous mode [ 228.974490][T10420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.019587][T10420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.078951][T10499] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 229.129868][T10420] team0: Port device team_slave_0 added [ 229.160813][T10420] team0: Port device team_slave_1 added [ 229.362609][T10420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.383800][T10420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.420848][T10420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.434438][T10420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.441435][T10420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.471180][T10420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.642625][T10420] hsr_slave_0: entered promiscuous mode [ 229.672451][T10420] hsr_slave_1: entered promiscuous mode [ 229.690169][T10420] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.700856][T10420] Cannot create hsr debugfs directory [ 229.735657][T10529] syzkaller0 speed is unknown, defaulting to 1000 [ 229.806264][T10532] dvmrp1: entered allmulticast mode [ 229.919996][T10538] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 230.107299][T10535] netlink: 'syz.5.1301': attribute type 4 has an invalid length. [ 230.116258][T10523] syzkaller0 speed is unknown, defaulting to 1000 [ 230.143705][ T5848] Bluetooth: hci1: command tx timeout [ 230.529682][T10558] sit4: entered promiscuous mode [ 230.538733][T10558] sit4: entered allmulticast mode [ 230.568529][T10559] : entered promiscuous mode [ 231.078497][T10582] sctp: [Deprecated]: syz.1.1312 (pid 10582) Use of struct sctp_assoc_value in delayed_ack socket option. [ 231.078497][T10582] Use struct sctp_sack_info instead [ 231.169159][T10587] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 231.602470][T10420] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 231.643798][T10420] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 231.687091][T10420] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 231.738405][T10420] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 232.031050][T10420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.099162][T10420] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.149430][T10634] __nla_validate_parse: 3 callbacks suppressed [ 232.149451][T10634] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1327'. [ 232.176581][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.183878][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.213066][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.220332][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.232523][ T5848] Bluetooth: hci1: command tx timeout [ 232.353307][T10634] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.386263][T10634] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.418567][T10634] bond0 (unregistering): Released all slaves [ 232.548099][T10640] syzkaller0 speed is unknown, defaulting to 1000 [ 232.640699][T10420] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 232.802877][T10653] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1330'. [ 232.860638][T10654] wg1: entered promiscuous mode [ 233.168217][T10661] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 233.178761][ T5992] IPVS: starting estimator thread 0... [ 233.196851][T10420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.294074][T10666] IPVS: using max 27 ests per chain, 64800 per kthread [ 233.779171][T10686] netlink: 'syz.3.1338': attribute type 6 has an invalid length. [ 233.826268][T10686] sctp: [Deprecated]: syz.3.1338 (pid 10686) Use of int in maxseg socket option. [ 233.826268][T10686] Use struct sctp_assoc_value instead [ 233.905592][T10691] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1336'. [ 233.918093][T10420] veth0_vlan: entered promiscuous mode [ 233.982427][T10420] veth1_vlan: entered promiscuous mode [ 234.103823][T10420] veth0_macvtap: entered promiscuous mode [ 234.132485][T10420] veth1_macvtap: entered promiscuous mode [ 234.258496][T10420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.301585][T10420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.310454][ T5848] Bluetooth: hci1: command tx timeout [ 234.348948][T10420] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.361172][T10713] x_tables: arp_tables: MARK.2 target: invalid size 8 (kernel) != (user) 0 [ 234.370738][T10420] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.382769][T10420] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.392899][T10420] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.662922][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.692550][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.755683][T10727] mac80211_hwsim hwsim25 ÿ: renamed from wlan1 (while UP) [ 234.871968][ T5929] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.885186][T10735] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1353'. [ 234.927375][ T5929] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.950529][T10735] xt_TPROXY: Can be used only with -p tcp or -p udp [ 235.173821][T10748] tls_set_device_offload_rx: netdev not found [ 235.266632][T10750] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1357'. [ 235.323104][T10754] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1359'. [ 235.641642][ T1093] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.850560][ T1093] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.974717][ T1093] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.040750][ T1093] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.182686][ T1093] bridge_slave_1: left allmulticast mode [ 236.189109][ T1093] bridge_slave_1: left promiscuous mode [ 236.198367][ T1093] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.208356][ T1093] bridge_slave_0: left allmulticast mode [ 236.215575][ T1093] bridge_slave_0: left promiscuous mode [ 236.221336][ T1093] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.549436][ T1093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.561301][ T1093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.573742][ T1093] bond0 (unregistering): Released all slaves [ 236.759291][T10775] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1364'. [ 237.105664][T10793] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1368'. [ 237.157992][T10795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1370'. [ 237.293712][ T1093] hsr_slave_0: left promiscuous mode [ 237.316823][T10800] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1373'. [ 237.322516][ T1093] hsr_slave_1: left promiscuous mode [ 237.344116][ T1093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.370723][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.383429][ T1093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.401309][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.481292][ T1093] veth1_macvtap: left promiscuous mode [ 237.489846][ T1093] veth0_macvtap: left promiscuous mode [ 237.500764][ T1093] veth1_vlan: left promiscuous mode [ 237.507409][ T1093] veth0_vlan: left promiscuous mode [ 237.531869][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 237.543625][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 237.551617][T10810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1373'. [ 237.572928][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 237.589974][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 237.598334][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 238.219646][ T1093] team0 (unregistering): Port device team_slave_1 removed [ 238.270053][ T1093] team0 (unregistering): Port device team_slave_0 removed [ 238.791666][T10822] erspan0: entered promiscuous mode [ 238.809088][T10822] erspan0: entered allmulticast mode [ 238.891356][T10809] syzkaller0 speed is unknown, defaulting to 1000 [ 239.071502][T10835] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1379'. [ 239.071675][T10827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1380'. [ 239.090984][T10835] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1379'. [ 239.396972][T10846] wg2: entered promiscuous mode [ 239.414276][T10846] wg2: entered allmulticast mode [ 239.613145][T10809] chnl_net:caif_netlink_parms(): no params data found [ 239.663789][ T5840] Bluetooth: hci1: command tx timeout [ 239.834397][T10870] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1393'. [ 240.036689][T10809] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.053846][T10884] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 240.062868][T10809] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.080667][T10809] bridge_slave_0: entered allmulticast mode [ 240.095430][T10809] bridge_slave_0: entered promiscuous mode [ 240.104520][T10809] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.111809][T10809] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.119971][T10809] bridge_slave_1: entered allmulticast mode [ 240.130155][T10809] bridge_slave_1: entered promiscuous mode [ 240.148660][T10886] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1396'. [ 240.200625][T10893] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 240.240814][T10809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.271043][T10809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.346406][T10809] team0: Port device team_slave_0 added [ 240.359016][T10809] team0: Port device team_slave_1 added [ 240.417277][T10809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.433817][T10809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.448806][T10900] netlink: 'syz.5.1397': attribute type 10 has an invalid length. [ 240.473521][T10809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.507687][T10809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.518898][T10809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.549441][T10809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.652124][T10809] hsr_slave_0: entered promiscuous mode [ 240.659662][T10809] hsr_slave_1: entered promiscuous mode [ 240.667053][T10809] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 240.675383][T10809] Cannot create hsr debugfs directory [ 241.102500][T10809] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 241.113054][T10809] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 241.124255][T10809] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 241.135167][T10809] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 241.221297][T10809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.246098][T10809] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.263048][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.270266][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.287073][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.294298][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.516291][T10809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.754157][ T5840] Bluetooth: hci1: command tx timeout [ 241.778037][T10809] veth0_vlan: entered promiscuous mode [ 241.795064][T10809] veth1_vlan: entered promiscuous mode [ 241.828050][T10809] veth0_macvtap: entered promiscuous mode [ 241.839546][T10809] veth1_macvtap: entered promiscuous mode [ 241.860494][T10809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.876466][T10809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.887685][T10809] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.897502][T10809] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.908817][T10809] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.917664][T10809] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.001001][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.018076][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.049104][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.058026][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.530554][ T8395] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.752162][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 244.761899][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 244.770379][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 244.780965][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 244.790470][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 244.834618][T10918] syzkaller0 speed is unknown, defaulting to 1000 [ 244.989443][T10918] chnl_net:caif_netlink_parms(): no params data found [ 245.100969][ T8395] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.119892][T10918] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.127909][T10918] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.136520][T10918] bridge_slave_0: entered allmulticast mode [ 245.145267][T10918] bridge_slave_0: entered promiscuous mode [ 245.153485][T10918] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.160720][T10918] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.171770][T10918] bridge_slave_1: entered allmulticast mode [ 245.179729][T10918] bridge_slave_1: entered promiscuous mode [ 245.219409][T10918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.233477][T10918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.276351][T10918] team0: Port device team_slave_0 added [ 245.286609][T10918] team0: Port device team_slave_1 added [ 245.322533][T10918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.329857][T10918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.357712][T10918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.370982][T10918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.378931][T10918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.405468][T10918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.434860][ T8395] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.496457][T10918] hsr_slave_0: entered promiscuous mode [ 245.503041][T10918] hsr_slave_1: entered promiscuous mode [ 245.510712][T10918] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.520063][T10918] Cannot create hsr debugfs directory [ 245.545365][ T8395] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.768977][ T8395] bridge_slave_1: left allmulticast mode [ 245.779333][ T8395] bridge_slave_1: left promiscuous mode [ 245.785817][ T8395] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.797739][ T8395] bridge_slave_0: left allmulticast mode [ 245.804069][ T8395] bridge_slave_0: left promiscuous mode [ 245.809836][ T8395] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.177343][ T8395] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.190851][ T8395] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.202387][ T8395] bond0 (unregistering): Released all slaves [ 246.528626][ T8395] hsr_slave_0: left promiscuous mode [ 246.540448][ T8395] hsr_slave_1: left promiscuous mode [ 246.548316][ T8395] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.555849][ T8395] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.564229][ T8395] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.571994][ T8395] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.594850][ T8395] veth1_macvtap: left promiscuous mode [ 246.600449][ T8395] veth0_macvtap: left promiscuous mode [ 246.607202][ T8395] veth1_vlan: left promiscuous mode [ 246.612525][ T8395] veth0_vlan: left promiscuous mode [ 246.868182][ T5840] Bluetooth: hci1: command tx timeout [ 247.117013][ T8395] team0 (unregistering): Port device team_slave_1 removed [ 247.161520][ T8395] team0 (unregistering): Port device team_slave_0 removed [ 247.713503][T10918] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 247.728752][T10918] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 247.741032][T10918] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 247.760547][T10918] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 247.892445][T10918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.915932][T10918] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.928279][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.935498][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.952288][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.959490][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.169658][T10918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.427112][T10918] veth0_vlan: entered promiscuous mode [ 248.440766][T10918] veth1_vlan: entered promiscuous mode [ 248.475626][T10918] veth0_macvtap: entered promiscuous mode [ 248.486619][T10918] veth1_macvtap: entered promiscuous mode [ 248.507862][T10918] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.522428][T10918] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.536485][T10918] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.546767][T10918] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.555860][T10918] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.564887][T10918] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.644867][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.652761][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.696771][ T5929] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.706064][ T5929] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.943098][ T5929] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.241702][ T5929] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.256896][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 251.266534][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 251.277426][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 251.285639][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 251.296101][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 251.332634][T10943] syzkaller0 speed is unknown, defaulting to 1000 [ 251.492884][T10943] chnl_net:caif_netlink_parms(): no params data found [ 251.555594][ T5929] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.616836][ T5929] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.661000][T10943] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.669340][T10943] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.676718][T10943] bridge_slave_0: entered allmulticast mode [ 251.685016][T10943] bridge_slave_0: entered promiscuous mode [ 251.694518][T10943] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.701797][T10943] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.709211][T10943] bridge_slave_1: entered allmulticast mode [ 251.716951][T10943] bridge_slave_1: entered promiscuous mode [ 251.758686][T10943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.775068][T10943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.867453][T10943] team0: Port device team_slave_0 added [ 251.891259][T10943] team0: Port device team_slave_1 added [ 251.905366][ T5929] bridge_slave_1: left allmulticast mode [ 251.911076][ T5929] bridge_slave_1: left promiscuous mode [ 251.917782][ T5929] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.928938][ T5929] bridge_slave_0: left allmulticast mode [ 251.935648][ T5929] bridge_slave_0: left promiscuous mode [ 251.941401][ T5929] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.290841][ T5929] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.303145][ T5929] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.316163][ T5929] bond0 (unregistering): Released all slaves [ 252.367869][T10943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.376500][T10943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.405351][T10943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.420055][T10943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.428064][T10943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.454866][T10943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.597320][T10943] hsr_slave_0: entered promiscuous mode [ 252.605124][T10943] hsr_slave_1: entered promiscuous mode [ 252.611769][T10943] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 252.619926][T10943] Cannot create hsr debugfs directory [ 252.697762][ T5929] hsr_slave_0: left promiscuous mode [ 252.705307][ T5929] hsr_slave_1: left promiscuous mode [ 252.713029][ T5929] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.720706][ T5929] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.730011][ T5929] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.737725][ T5929] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.758806][ T5929] veth1_macvtap: left promiscuous mode [ 252.764556][ T5929] veth0_macvtap: left promiscuous mode [ 252.770227][ T5929] veth1_vlan: left promiscuous mode [ 252.775857][ T5929] veth0_vlan: left promiscuous mode [ 253.266488][ T5929] team0 (unregistering): Port device team_slave_1 removed [ 253.311584][ T5929] team0 (unregistering): Port device team_slave_0 removed [ 253.349422][ T5848] Bluetooth: hci1: command tx timeout [ 254.185417][T10943] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 254.197185][T10943] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 254.208215][T10943] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 254.218558][T10943] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 254.304018][T10943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.327856][T10943] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.341822][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.349094][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.368441][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.375630][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.427996][T10943] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 254.606547][T10943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.857579][T10943] veth0_vlan: entered promiscuous mode [ 254.871232][T10943] veth1_vlan: entered promiscuous mode [ 254.902852][T10943] veth0_macvtap: entered promiscuous mode [ 254.916847][T10943] veth1_macvtap: entered promiscuous mode [ 254.937685][T10943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.950417][T10943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.968906][T10943] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.977919][T10943] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.986891][T10943] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.997688][T10943] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.075093][ T5929] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.082960][ T5929] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.125495][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.137927][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.809315][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.011164][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.200279][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 258.209759][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 258.218807][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 258.229645][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 258.241715][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 258.277985][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.334115][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.352500][T10968] syzkaller0 speed is unknown, defaulting to 1000 [ 258.569207][ T13] bridge_slave_1: left allmulticast mode [ 258.575704][ T13] bridge_slave_1: left promiscuous mode [ 258.581552][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.595844][ T13] bridge_slave_0: left allmulticast mode [ 258.601640][ T13] bridge_slave_0: left promiscuous mode [ 258.608301][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.954999][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.968183][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.979265][ T13] bond0 (unregistering): Released all slaves [ 259.001035][T10968] chnl_net:caif_netlink_parms(): no params data found [ 259.141494][T10968] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.154093][T10968] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.161683][T10968] bridge_slave_0: entered allmulticast mode [ 259.170309][T10968] bridge_slave_0: entered promiscuous mode [ 259.181426][T10968] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.196053][T10968] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.204174][T10968] bridge_slave_1: entered allmulticast mode [ 259.211584][T10968] bridge_slave_1: entered promiscuous mode [ 259.275417][T10968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.288116][T10968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.351810][T10968] team0: Port device team_slave_0 added [ 259.368512][ T13] hsr_slave_0: left promiscuous mode [ 259.375164][ T13] hsr_slave_1: left promiscuous mode [ 259.381105][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.390040][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.398200][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.405786][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.428017][ T13] veth1_macvtap: left promiscuous mode [ 259.433792][ T13] veth0_macvtap: left promiscuous mode [ 259.439533][ T13] veth1_vlan: left promiscuous mode [ 259.444970][ T13] veth0_vlan: left promiscuous mode [ 259.937062][ T13] team0 (unregistering): Port device team_slave_1 removed [ 259.982094][ T13] team0 (unregistering): Port device team_slave_0 removed [ 260.305300][ T5848] Bluetooth: hci1: command tx timeout [ 260.424561][T10968] team0: Port device team_slave_1 added [ 260.501540][T10968] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.509367][T10968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.539648][T10968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.552890][T10968] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.561160][T10968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.587754][T10968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.656236][T10968] hsr_slave_0: entered promiscuous mode [ 260.662820][T10968] hsr_slave_1: entered promiscuous mode [ 260.669531][T10968] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 260.677710][T10968] Cannot create hsr debugfs directory [ 261.102977][T10968] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 261.116051][T10968] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 261.127062][T10968] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 261.138665][T10968] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 261.221245][T10968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.245949][T10968] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.259396][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.266608][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.284838][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.291981][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.519789][T10968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.759658][T10968] veth0_vlan: entered promiscuous mode [ 261.771883][T10968] veth1_vlan: entered promiscuous mode [ 261.804604][T10968] veth0_macvtap: entered promiscuous mode [ 261.814830][T10968] veth1_macvtap: entered promiscuous mode [ 261.837849][T10968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.852067][T10968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.867422][T10968] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.877930][T10968] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.887556][T10968] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.896983][T10968] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.976737][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.985844][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.021317][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.032844][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.103829][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 263.703168][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.091303][T10999] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1400'. [ 265.104540][T10996] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1401'. [ 265.300849][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.350110][T11016] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1403'. [ 265.541594][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.609019][T11021] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 265.628714][T11024] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 265.783739][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 265.805228][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 265.830304][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 265.837570][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.857613][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 265.867291][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 265.902935][T11033] netlink: 'syz.1.1410': attribute type 33 has an invalid length. [ 266.052438][T11026] syzkaller0 speed is unknown, defaulting to 1000 [ 266.080419][T11040] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 266.296023][T11052] x_tables: duplicate underflow at hook 1 [ 266.312100][ T13] bridge_slave_1: left allmulticast mode [ 266.347790][ T13] bridge_slave_1: left promiscuous mode [ 266.354758][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.449292][ T13] bridge_slave_0: left allmulticast mode [ 266.476033][ T13] bridge_slave_0: left promiscuous mode [ 266.509527][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.683013][T11074] netlink: 'syz.5.1421': attribute type 10 has an invalid length. [ 267.036817][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 267.049992][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.061320][ T13] bond0 (unregistering): Released all slaves [ 267.334801][T11083] : entered promiscuous mode [ 267.372148][T11088] x_tables: duplicate underflow at hook 4 [ 267.400647][T11026] chnl_net:caif_netlink_parms(): no params data found [ 267.657198][T11099] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1426'. [ 267.672514][ T5840] Bluetooth: hci0: command tx timeout [ 267.693512][ T13] hsr_slave_0: left promiscuous mode [ 267.704558][ T13] hsr_slave_1: left promiscuous mode [ 267.725154][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.732648][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.749813][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.758609][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.785972][ T13] veth1_macvtap: left promiscuous mode [ 267.791570][ T13] veth0_macvtap: left promiscuous mode [ 267.797505][ T13] veth1_vlan: left promiscuous mode [ 267.802869][ T13] veth0_vlan: left promiscuous mode [ 267.893853][T11107] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.1428'. [ 267.904399][ T5840] Bluetooth: hci1: command tx timeout [ 267.910403][T11107] netlink: zone id is out of range [ 267.930605][T11107] netlink: zone id is out of range [ 267.936184][T11107] netlink: zone id is out of range [ 267.941664][T11107] netlink: zone id is out of range [ 267.954055][T11107] netlink: zone id is out of range [ 267.965013][T11107] netlink: zone id is out of range [ 267.973148][T11107] netlink: zone id is out of range [ 267.984774][T11107] netlink: zone id is out of range [ 267.990176][T11107] netlink: zone id is out of range [ 268.180515][T11111] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1429'. [ 268.236280][ T5840] Bluetooth: hci5: command 0x0406 tx timeout [ 268.452768][ T13] team0 (unregistering): Port device team_slave_1 removed [ 268.501853][ T13] team0 (unregistering): Port device team_slave_0 removed [ 268.964348][T11096] bridge_slave_0: left allmulticast mode [ 268.970218][T11096] bridge_slave_0: left promiscuous mode [ 268.977000][T11096] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.000236][T11096] bridge_slave_1: left allmulticast mode [ 269.006783][T11096] bridge_slave_1: left promiscuous mode [ 269.012559][T11096] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.041110][T11096] team0: Port device team_slave_0 removed [ 269.055797][T11096] team0: Port device team_slave_1 removed [ 269.062433][T11096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.070907][T11096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.080735][T11096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.088818][T11096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.254087][T11026] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.261397][T11026] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.274129][T11026] bridge_slave_0: entered allmulticast mode [ 269.286346][T11026] bridge_slave_0: entered promiscuous mode [ 269.301152][T11026] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.317447][T11026] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.341845][T11026] bridge_slave_1: entered allmulticast mode [ 269.370503][T11026] bridge_slave_1: entered promiscuous mode [ 269.552893][T11132] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1434'. [ 269.561061][T11026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.618240][T11026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.641147][T11135] netlink: 'syz.0.1435': attribute type 1 has an invalid length. [ 269.783057][T11026] team0: Port device team_slave_0 added [ 269.805861][T11026] team0: Port device team_slave_1 added [ 269.906751][T11026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.918319][T11026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.974161][T11026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.984811][ T5848] Bluetooth: hci1: command tx timeout [ 270.005549][T11026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.029615][T11026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.071638][T11153] Driver unsupported XDP return value 0 on prog (id 399) dev N/A, expect packet loss! [ 270.107492][T11026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.171325][T11151] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1439'. [ 270.292593][T11159] af_packet: tpacket_rcv: packet too big, clamped from 65075 to 4294967272. macoff=96 [ 270.325961][T11026] hsr_slave_0: entered promiscuous mode [ 270.340582][T11026] hsr_slave_1: entered promiscuous mode [ 270.348620][T11026] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 270.356960][T11026] Cannot create hsr debugfs directory [ 271.263819][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 271.585130][T11196] netlink: 'syz.0.1453': attribute type 1 has an invalid length. [ 271.618031][T11196] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1453'. [ 271.666074][T11026] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 271.692405][T11026] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 271.717574][T11026] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 271.745628][T11026] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 271.954666][T11210] netlink: 'syz.1.1455': attribute type 2 has an invalid length. [ 271.964645][T11210] netlink: 'syz.1.1455': attribute type 1 has an invalid length. [ 272.022258][T11026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.064425][ T5848] Bluetooth: hci1: command tx timeout [ 272.090867][T11026] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.256716][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.263960][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.287132][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.294506][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.529141][T11236] x_tables: duplicate entry at hook 2 [ 272.595271][T11239] netlink: 'syz.0.1462': attribute type 64 has an invalid length. [ 272.608057][T11239] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1462'. [ 272.928345][T11253] netlink: 'syz.5.1464': attribute type 49 has an invalid length. [ 272.949473][T11257] net_ratelimit: 1 callbacks suppressed [ 272.949494][T11257] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 273.016580][T11259] netlink: 'syz.1.1466': attribute type 2 has an invalid length. [ 273.047218][T11259] netlink: 'syz.1.1466': attribute type 1 has an invalid length. [ 273.061509][T11026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.085297][T11261] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1468'. [ 273.116937][T11265] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1469'. [ 273.244673][T11270] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1470'. [ 273.571297][T11289] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1476'. [ 273.609706][T11283] syz.1.1475: vmalloc error: size 69206016, failed to allocated page array size 135168, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 273.624278][T11292] netlink: 'syz.0.1476': attribute type 33 has an invalid length. [ 273.648169][T11283] CPU: 1 UID: 0 PID: 11283 Comm: syz.1.1475 Not tainted 6.16.0-rc2-syzkaller-00200-g8d89661a36dd #0 PREEMPT(full) [ 273.648198][T11283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 273.648210][T11283] Call Trace: [ 273.648218][T11283] [ 273.648227][T11283] dump_stack_lvl+0x189/0x250 [ 273.648269][T11283] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.648300][T11283] ? __pfx__printk+0x10/0x10 [ 273.648323][T11283] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 273.648347][T11283] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 273.648372][T11283] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 273.648436][T11283] warn_alloc+0x214/0x310 [ 273.648468][T11283] ? __pfx_warn_alloc+0x10/0x10 [ 273.648501][T11283] ? __get_vm_area_node+0x28f/0x300 [ 273.648523][T11283] ? nf_tables_newset+0x132b/0x2530 [ 273.648556][T11283] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 273.648608][T11283] ? nft_hash_estimate+0x102/0x260 [ 273.648635][T11283] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 273.648664][T11283] ? rcu_is_watching+0x15/0xb0 [ 273.648697][T11283] ? nf_tables_newset+0x132b/0x2530 [ 273.648724][T11283] ? nf_tables_newset+0x132b/0x2530 [ 273.648750][T11283] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 273.648772][T11283] ? nf_tables_newset+0x132b/0x2530 [ 273.648800][T11283] ? nft_table_lookup+0x211/0x230 [ 273.648826][T11283] ? nft_set_lookup+0x128/0x150 [ 273.648856][T11283] ? nft_hash_privsize+0x5f/0xf0 [ 273.648882][T11283] nf_tables_newset+0x132b/0x2530 [ 273.648925][T11283] ? __pfx_nf_tables_newset+0x10/0x10 [ 273.648979][T11283] ? __nla_parse+0x40/0x60 [ 273.649015][T11283] nfnetlink_rcv+0x112f/0x2520 [ 273.649084][T11283] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 273.649135][T11283] ? ref_tracker_free+0x63a/0x7d0 [ 273.649198][T11283] ? __netlink_deliver_tap+0x807/0x850 [ 273.649234][T11283] ? netlink_deliver_tap+0x2e/0x1b0 [ 273.649256][T11283] ? netlink_deliver_tap+0x2e/0x1b0 [ 273.649287][T11283] netlink_unicast+0x75b/0x8d0 [ 273.649322][T11283] netlink_sendmsg+0x805/0xb30 [ 273.649358][T11283] ? __pfx_netlink_sendmsg+0x10/0x10 [ 273.649393][T11283] ? aa_sock_msg_perm+0x94/0x160 [ 273.649422][T11283] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 273.649448][T11283] ? __pfx_netlink_sendmsg+0x10/0x10 [ 273.649473][T11283] __sock_sendmsg+0x219/0x270 [ 273.649509][T11283] ____sys_sendmsg+0x505/0x830 [ 273.649541][T11283] ? __pfx_____sys_sendmsg+0x10/0x10 [ 273.649579][T11283] ? import_iovec+0x74/0xa0 [ 273.649603][T11283] ___sys_sendmsg+0x21f/0x2a0 [ 273.649632][T11283] ? __pfx____sys_sendmsg+0x10/0x10 [ 273.649699][T11283] ? __fget_files+0x2a/0x420 [ 273.649721][T11283] ? __fget_files+0x3a0/0x420 [ 273.649756][T11283] __x64_sys_sendmsg+0x19b/0x260 [ 273.649786][T11283] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 273.649825][T11283] ? rcu_is_watching+0x15/0xb0 [ 273.649863][T11283] ? do_syscall_64+0xbe/0x3b0 [ 273.649887][T11283] do_syscall_64+0xfa/0x3b0 [ 273.649905][T11283] ? lockdep_hardirqs_on+0x9c/0x150 [ 273.649934][T11283] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.649954][T11283] ? clear_bhb_loop+0x60/0xb0 [ 273.649979][T11283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.649998][T11283] RIP: 0033:0x7f0f0198e929 [ 273.650017][T11283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.650035][T11283] RSP: 002b:00007f0f027c6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 273.650057][T11283] RAX: ffffffffffffffda RBX: 00007f0f01bb5fa0 RCX: 00007f0f0198e929 [ 273.650072][T11283] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 273.650085][T11283] RBP: 00007f0f01a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 273.650097][T11283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.650109][T11283] R13: 0000000000000000 R14: 00007f0f01bb5fa0 R15: 00007ffded84f5d8 [ 273.650143][T11283] [ 273.652650][T11283] Mem-Info: [ 273.654221][T11292] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1476'. [ 273.671218][T11283] active_anon:4465 inactive_anon:0 isolated_anon:0 [ 273.671218][T11283] active_file:1249 inactive_file:39921 isolated_file:0 [ 273.671218][T11283] unevictable:768 dirty:65 writeback:0 [ 273.671218][T11283] slab_reclaimable:11350 slab_unreclaimable:109145 [ 273.671218][T11283] mapped:29167 shmem:1377 pagetables:1051 [ 273.671218][T11283] sec_pagetables:0 bounce:0 [ 273.671218][T11283] kernel_misc_reclaimable:0 [ 273.671218][T11283] free:1319390 free_pcp:11521 free_cma:0 [ 273.728623][T11294] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1478'. [ 273.735547][T11283] Node 0 active_anon:17860kB inactive_anon:0kB active_file:4996kB inactive_file:159480kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116668kB dirty:256kB writeback:0kB shmem:3972kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12136kB pagetables:4092kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 274.155271][ T5848] Bluetooth: hci1: command tx timeout [ 274.171517][T11283] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 274.238393][T11283] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 274.275547][T11283] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 274.282467][T11283] Node 0 DMA32 free:1362936kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17788kB inactive_anon:0kB active_file:4996kB inactive_file:157636kB unevictable:1536kB writepending:260kB present:3129332kB managed:2561016kB mlocked:0kB bounce:0kB free_pcp:25292kB local_pcp:6088kB free_cma:0kB [ 274.318552][T11283] lowmem_reserve[]: 0 0 1 1 1 [ 274.368348][T11283] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1844kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 274.421139][T11302] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1479'. [ 274.451495][T11304] netlink: 'syz.0.1480': attribute type 2 has an invalid length. [ 274.464812][T11304] netlink: 'syz.0.1480': attribute type 1 has an invalid length. [ 274.474238][T11283] lowmem_reserve[]: 0 0 0 0 0 [ 274.513327][T11283] Node 1 Normal free:3899468kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:20320kB local_pcp:13408kB free_cma:0kB [ 274.600961][T11026] veth0_vlan: entered promiscuous mode [ 274.609947][T11283] lowmem_reserve[]: 0 0 0 0 0 [ 274.624137][T11283] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 274.659446][T11026] veth1_vlan: entered promiscuous mode [ 274.665836][T11283] Node 0 DMA32: 463*4kB (UME) 34*8kB (M) 57*16kB (UME) 81*32kB (UME) 105*64kB (UME) 124*128kB (UM) 79*256kB (UME) 30*512kB (UME) 20*1024kB (UME) 8*2048kB (UM) 308*4096kB (UM) = 1362236kB [ 274.705784][T11283] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 274.721140][T11283] Node 1 Normal: 185*4kB (UM) 59*8kB (UME) 39*16kB (UME) 119*32kB (UME) 47*64kB (UME) 9*128kB (UME) 4*256kB (UME) 3*512kB (ME) 2*1024kB (UM) 1*2048kB (E) 948*4096kB (M) = 3899468kB [ 274.741242][T11283] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 274.752331][T11283] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 274.763101][T11283] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 274.792281][T11283] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 274.802766][T11283] 42544 total pagecache pages [ 274.808826][T11283] 0 pages in swap cache [ 274.813157][T11283] Free swap = 124996kB [ 274.818180][T11283] Total swap = 124996kB [ 274.840690][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.853670][T11283] 2097051 pages RAM [ 274.868195][T11283] 0 pages HighMem/MovableOnly [ 274.871596][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.872925][T11283] 424691 pages reserved [ 274.910903][T11026] veth0_macvtap: entered promiscuous mode [ 274.957917][T11026] veth1_macvtap: entered promiscuous mode [ 274.964546][T11283] 0 pages cma reserved [ 275.017672][T11026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.099300][T11026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.175604][T11328] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 275.177903][T11026] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.215223][T11026] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.244236][T11026] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.261983][T11026] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.459419][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.477823][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.546248][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.561864][T11336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1489'. [ 275.563434][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.668087][T11338] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1490'. [ 275.994184][T11348] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1493'. [ 276.177928][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.360583][T11361] 8021q: adding VLAN 0 to HW filter on device bond5 [ 276.426436][T11365] bond5: (slave gretap1): making interface the new active one [ 276.436332][T11365] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 276.471099][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.582728][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.769170][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.918649][ T36] bridge_slave_1: left allmulticast mode [ 276.924765][ T36] bridge_slave_1: left promiscuous mode [ 276.930560][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.942174][ T36] bridge_slave_0: left allmulticast mode [ 276.949172][ T36] bridge_slave_0: left promiscuous mode [ 276.955826][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.296578][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.308870][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.319382][ T36] bond0 (unregistering): Released all slaves [ 277.584916][ T36] hsr_slave_0: left promiscuous mode [ 277.590927][ T36] hsr_slave_1: left promiscuous mode [ 277.599495][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.607845][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.667419][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.686322][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.750029][T11375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1497'. [ 277.801003][ T36] veth1_macvtap: left promiscuous mode [ 277.823319][ T36] veth0_macvtap: left promiscuous mode [ 277.830481][ T36] veth1_vlan: left promiscuous mode [ 277.843463][ T36] veth0_vlan: left promiscuous mode [ 278.148720][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 278.171299][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 278.181563][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 278.191232][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 278.201022][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 278.599169][ T36] team0 (unregistering): Port device team_slave_1 removed [ 278.647902][ T36] team0 (unregistering): Port device team_slave_0 removed [ 279.161040][T11375] validate_nla: 3 callbacks suppressed [ 279.161062][T11375] netlink: 'syz.0.1497': attribute type 1 has an invalid length. [ 279.179264][T11375] netlink: 'syz.0.1497': attribute type 2 has an invalid length. [ 279.279787][T11385] syzkaller0 speed is unknown, defaulting to 1000 [ 279.382819][T11396] netlink: 'syz.5.1505': attribute type 2 has an invalid length. [ 279.435173][T11396] netlink: 'syz.5.1505': attribute type 1 has an invalid length. [ 279.489554][T11401] netlink: 'syz.3.1504': attribute type 1 has an invalid length. [ 279.499268][T11403] x_tables: duplicate underflow at hook 2 [ 279.750274][T11410] syz.0.1507 uses old SIOCAX25GETINFO [ 279.759462][T11415] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1510'. [ 279.986670][T11427] netlink: 'syz.5.1513': attribute type 3 has an invalid length. [ 280.098227][T11435] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1515'. [ 280.125137][T11385] chnl_net:caif_netlink_parms(): no params data found [ 280.153616][T11441] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 280.304263][ T5848] Bluetooth: hci1: command tx timeout [ 280.328189][T11451] netlink: 'syz.5.1519': attribute type 2 has an invalid length. [ 280.343087][T11451] netlink: 'syz.5.1519': attribute type 1 has an invalid length. [ 280.567077][T11464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1521'. [ 280.638390][T11464] vlan0: entered allmulticast mode [ 280.677571][T11464] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 280.695025][T11385] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.705298][T11385] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.723554][T11385] bridge_slave_0: entered allmulticast mode [ 280.731337][T11385] bridge_slave_0: entered promiscuous mode [ 280.757356][T11385] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.790380][T11385] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.815101][T11385] bridge_slave_1: entered allmulticast mode [ 280.831385][T11385] bridge_slave_1: entered promiscuous mode [ 280.955657][T11481] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1527'. [ 281.062462][T11385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.117464][T11385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.174296][T11492] netlink: 'syz.5.1530': attribute type 1 has an invalid length. [ 281.193727][T11492] netlink: 'syz.5.1530': attribute type 11 has an invalid length. [ 281.201627][T11492] netlink: 220 bytes leftover after parsing attributes in process `syz.5.1530'. [ 281.236979][T11385] team0: Port device team_slave_0 added [ 281.249360][T11385] team0: Port device team_slave_1 added [ 281.306853][T11497] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 281.414673][T11385] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.435500][T11385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.469752][T11385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.486266][T11503] ipvlan0: entered promiscuous mode [ 281.500083][T11503] ipvlan0: entered allmulticast mode [ 281.507187][T11503] veth0_vlan: entered allmulticast mode [ 281.518001][T11385] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.530275][T11385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.587308][T11385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.608726][T11508] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1537'. [ 281.682694][T11514] netlink: 288 bytes leftover after parsing attributes in process `syz.5.1538'. [ 281.870762][T11385] hsr_slave_0: entered promiscuous mode [ 281.920165][T11385] hsr_slave_1: entered promiscuous mode [ 281.938717][T11385] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 281.964605][T11385] Cannot create hsr debugfs directory [ 282.213085][T11548] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 282.227322][T11547] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1548'. [ 282.383458][ T5848] Bluetooth: hci1: command tx timeout [ 282.491490][T11558] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1552'. [ 282.553971][T11562] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1553'. [ 282.663119][T11566] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 282.806663][T11569] netlink: 576 bytes leftover after parsing attributes in process `syz.5.1556'. [ 282.858943][T11575] sch_fq: defrate 0 ignored. [ 282.890685][T11569] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 283.102899][T11385] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 283.133779][T11385] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 283.150296][T11385] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 283.172961][T11385] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 283.309986][T11385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.368055][T11385] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.400236][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.407532][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.462480][ T5929] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.470118][ T5929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.781197][ C0] Unknown status report in ack skb [ 283.792115][T11618] pim6reg1: entered promiscuous mode [ 283.797910][T11618] pim6reg1: entered allmulticast mode [ 283.829743][T11620] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1569'. [ 284.311680][T11385] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.394889][T11650] erspan0: entered allmulticast mode [ 284.474132][ T5848] Bluetooth: hci1: command tx timeout [ 284.555018][T11655] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 284.897008][T11670] dvmrp1: entered allmulticast mode [ 285.106577][T11683] dvmrp0: entered allmulticast mode [ 285.174662][T11682] dvmrp0: left allmulticast mode [ 285.366411][T11385] veth0_vlan: entered promiscuous mode [ 285.470804][T11385] veth1_vlan: entered promiscuous mode [ 285.586792][T11385] veth0_macvtap: entered promiscuous mode [ 285.606256][T11385] veth1_macvtap: entered promiscuous mode [ 285.616112][T11706] __nla_validate_parse: 6 callbacks suppressed [ 285.616133][T11706] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1594'. [ 285.637186][T11699] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1592'. [ 285.668957][T11385] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.708105][T11385] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.717789][T11709] batman_adv: batadv0: Adding interface: dummy0 [ 285.724994][T11709] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.757719][T11709] batman_adv: batadv0: Interface activated: dummy0 [ 285.779295][T11385] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.790044][T11385] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.802605][T11385] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.817333][T11385] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.862347][T11709] batadv0: mtu less than device minimum [ 285.870364][T11709] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 285.882658][T11709] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 285.894722][T11709] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 285.906725][T11709] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 285.918746][T11709] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 285.930433][T11709] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 285.941922][T11709] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 286.129116][ T8395] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.150507][ T8395] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.189922][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.189992][T11721] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 286.200626][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.329188][T11726] netlink: 576 bytes leftover after parsing attributes in process `syz.3.1600'. [ 286.379264][T11726] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 286.490095][T11727] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1600'. [ 286.514287][T11727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1600'. [ 286.545150][T11727] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1600'. [ 286.573973][T11727] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1600'. [ 286.824943][ T1155] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.939429][ T1155] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.140465][ T1155] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.372373][ T1155] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.639502][ T1155] bridge_slave_1: left allmulticast mode [ 287.645410][ T1155] bridge_slave_1: left promiscuous mode [ 287.651251][ T1155] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.663974][ T1155] bridge_slave_0: left allmulticast mode [ 287.669695][ T1155] bridge_slave_0: left promiscuous mode [ 287.676666][ T1155] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.029342][ T1155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.042371][ T1155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.056688][ T1155] bond0 (unregistering): Released all slaves [ 288.315025][ T1155] hsr_slave_0: left promiscuous mode [ 288.321148][ T1155] hsr_slave_1: left promiscuous mode [ 288.327927][ T1155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.337739][ T1155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.347189][ T1155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.355602][ T1155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.436906][T11749] tls_set_device_offload_rx: netdev not found [ 288.462562][ T1155] veth1_macvtap: left promiscuous mode [ 288.485669][ T1155] veth0_macvtap: left promiscuous mode [ 288.501704][ T1155] veth1_vlan: left promiscuous mode [ 288.511787][ T1155] veth0_vlan: left promiscuous mode [ 288.528745][T11758] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1604'. [ 288.714629][T11752] "syz.0.1604" (11752) uses obsolete ecb(arc4) skcipher [ 288.979499][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 288.990512][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 289.008542][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 289.016940][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 289.031551][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 289.329471][ T1155] team0 (unregistering): Port device team_slave_1 removed [ 289.381427][ T1155] team0 (unregistering): Port device team_slave_0 removed [ 289.868225][T11764] syzkaller0 speed is unknown, defaulting to 1000 [ 290.012500][T11770] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1608'. [ 290.115644][T11777] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1611'. [ 290.318548][T11764] chnl_net:caif_netlink_parms(): no params data found [ 290.400007][T11788] validate_nla: 7 callbacks suppressed [ 290.400028][T11788] netlink: 'syz.0.1614': attribute type 9 has an invalid length. [ 290.484569][T11794] netlink: 'syz.5.1616': attribute type 8 has an invalid length. [ 290.654594][T11800] __nla_validate_parse: 1 callbacks suppressed [ 290.654615][T11800] netlink: 576 bytes leftover after parsing attributes in process `syz.3.1617'. [ 290.686197][T11804] xt_ecn: cannot match TCP bits for non-tcp packets [ 290.732477][T11804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1619'. [ 290.768630][T11800] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 290.788804][T11804] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1619'. [ 290.802783][T11764] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.811153][T11764] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.820767][T11764] bridge_slave_0: entered allmulticast mode [ 290.830429][T11764] bridge_slave_0: entered promiscuous mode [ 290.840753][T11764] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.848156][T11764] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.856192][T11764] bridge_slave_1: entered allmulticast mode [ 290.866104][T11764] bridge_slave_1: entered promiscuous mode [ 290.874645][T11811] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1617'. [ 290.885231][T11811] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1617'. [ 290.896836][T11811] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1617'. [ 290.907095][T11811] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1617'. [ 290.992115][T11813] net_ratelimit: 12 callbacks suppressed [ 290.992135][T11813] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 291.021755][T11764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.059204][T11764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.103992][ T5848] Bluetooth: hci1: command tx timeout [ 291.162828][T11764] team0: Port device team_slave_0 added [ 291.175634][T11764] team0: Port device team_slave_1 added [ 291.228997][T11764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.243757][T11764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.285982][T11764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.299633][T11764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.307086][T11764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.334672][T11764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.347750][T11824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1626'. [ 291.361080][T11824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1626'. [ 291.422551][T11764] hsr_slave_0: entered promiscuous mode [ 291.438684][T11764] hsr_slave_1: entered promiscuous mode [ 291.448673][T11764] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 291.462614][T11764] Cannot create hsr debugfs directory [ 291.587834][T11831] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1629'. [ 291.706306][T11839] x_tables: duplicate underflow at hook 2 [ 292.028289][T11846] xt_limit: Overflow, try lower: 0/0 [ 292.114289][T11850] wg2: entered promiscuous mode [ 292.131006][T11850] wg2: entered allmulticast mode [ 292.210671][T11852] openvswitch: netlink: IP tunnel dst address not specified [ 292.353134][T11858] netlink: 'syz.5.1640': attribute type 9 has an invalid length. [ 292.361920][T11856] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 292.394394][T11858] No such timeout policy "syz0" [ 292.486074][T11862] netlink: 'syz.3.1641': attribute type 4 has an invalid length. [ 292.504951][T11865] xt_hashlimit: size too large, truncated to 1048576 [ 292.513153][T11862] netlink: zone id is out of range [ 292.520028][T11863] netlink: zone id is out of range [ 292.525652][T11862] netlink: zone id is out of range [ 292.541165][T11863] netlink: zone id is out of range [ 292.562206][T11862] netlink: zone id is out of range [ 292.577038][T11863] netlink: zone id is out of range [ 292.592104][T11862] netlink: zone id is out of range [ 292.600779][T11863] netlink: zone id is out of range [ 292.743438][T11764] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 292.776097][T11764] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 292.812745][T11764] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 292.837262][T11764] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 293.045060][T11764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.098558][T11764] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.107483][T11885] netlink: 'syz.3.1647': attribute type 1 has an invalid length. [ 293.168654][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.175889][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.183912][ T5848] Bluetooth: hci1: command tx timeout [ 293.220547][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.227818][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.381867][T11894] delete_channel: no stack [ 293.869477][T11764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.020172][T11924] gre1: entered promiscuous mode [ 294.047967][T11924] gre1: entered allmulticast mode [ 294.486574][T11950] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 294.677850][T11764] veth0_vlan: entered promiscuous mode [ 294.711867][T11764] veth1_vlan: entered promiscuous mode [ 294.760156][T11959] netlink: 'syz.1.1666': attribute type 4 has an invalid length. [ 294.774380][T11962] netlink: 'syz.0.1667': attribute type 39 has an invalid length. [ 294.849128][T11764] veth0_macvtap: entered promiscuous mode [ 294.887394][T11764] veth1_macvtap: entered promiscuous mode [ 294.950072][T11764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.978098][T11764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.027361][T11764] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.051014][T11764] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.073379][T11764] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.091028][T11764] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.263590][ T5848] Bluetooth: hci1: command tx timeout [ 295.320618][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.338343][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.391915][ T8395] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.409330][ T8395] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.514323][T11993] xt_ipcomp: unknown flags B [ 295.749002][T12001] unsupported nla_type 52263 [ 295.862022][T12007] __nla_validate_parse: 14 callbacks suppressed [ 295.862044][T12007] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1678'. [ 296.117017][ T1093] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.270134][ T1093] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.377111][ T1093] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.583737][ T1093] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.900631][ T1093] bridge_slave_1: left allmulticast mode [ 296.906755][ T1093] bridge_slave_1: left promiscuous mode [ 296.912500][ T1093] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.922108][ T1093] bridge_slave_0: left allmulticast mode [ 296.929105][ T1093] bridge_slave_0: left promiscuous mode [ 296.935360][ T1093] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.287628][ T1093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.299871][ T1093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.310338][ T1093] bond0 (unregistering): Released all slaves [ 297.534911][ T1093] hsr_slave_0: left promiscuous mode [ 297.540904][ T1093] hsr_slave_1: left promiscuous mode [ 297.547724][ T1093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.557614][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.567514][ T1093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.575172][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.598407][ T1093] veth1_macvtap: left promiscuous mode [ 297.604162][ T1093] veth0_macvtap: left promiscuous mode [ 297.609836][ T1093] veth1_vlan: left promiscuous mode [ 297.615800][ T1093] veth0_vlan: left promiscuous mode [ 297.877553][T12023] netlink: 'syz.0.1683': attribute type 10 has an invalid length. [ 298.469648][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 298.498893][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 298.518183][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 298.537588][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 298.556721][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 298.601851][ T1093] team0 (unregistering): Port device team_slave_1 removed [ 298.657706][ T1093] team0 (unregistering): Port device team_slave_0 removed [ 299.121254][T12023] team0: Device C is loopback device. Loopback devices can't be added as a team port [ 299.132586][T12023] net_ratelimit: 51 callbacks suppressed [ 299.132599][T12023] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 299.321595][T12049] syzkaller0 speed is unknown, defaulting to 1000 [ 299.444701][T12064] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 299.585983][T12070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1696'. [ 299.757149][T12071] syzkaller0: entered promiscuous mode [ 299.762711][T12071] syzkaller0: entered allmulticast mode [ 299.972250][T12049] chnl_net:caif_netlink_parms(): no params data found [ 299.993935][T12087] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1700'. [ 300.044686][T12088] netlink: 51 bytes leftover after parsing attributes in process `syz.1.1701'. [ 300.099192][T12091] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1700'. [ 300.160659][T12088] can: request_module (can-proto-0) failed. [ 300.188935][T12049] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.198653][T12049] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.209417][T12049] bridge_slave_0: entered allmulticast mode [ 300.232405][T12049] bridge_slave_0: entered promiscuous mode [ 300.344504][T12049] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.362228][T12049] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.380535][T12049] bridge_slave_1: entered allmulticast mode [ 300.405887][T12049] bridge_slave_1: entered promiscuous mode [ 300.511579][T12107] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1704'. [ 300.634108][ T5840] Bluetooth: hci1: command tx timeout [ 300.972518][T12114] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1706'. [ 302.176585][T12101] tipc: Enabling of bearer rejected, failed to enable media [ 302.216314][T12049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.250396][T12049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.433489][T12049] team0: Port device team_slave_0 added [ 302.455881][T12049] team0: Port device team_slave_1 added [ 302.599345][T12049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.623042][T12049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.662923][T12049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.688900][T12049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.704062][ T5840] Bluetooth: hci1: command tx timeout [ 302.709841][T12049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.803523][T12049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.048530][T12158] xt_bpf: check failed: parse error [ 303.160540][T12049] hsr_slave_0: entered promiscuous mode [ 303.190549][T12049] hsr_slave_1: entered promiscuous mode [ 303.200176][T12049] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 303.209088][T12049] Cannot create hsr debugfs directory [ 303.352505][T12170] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1723'. [ 303.370096][T12170] netlink: zone id is out of range [ 303.398606][T12170] netlink: zone id is out of range [ 303.413156][T12170] netlink: zone id is out of range [ 303.424594][T12170] netlink: zone id is out of range [ 303.429939][T12170] netlink: zone id is out of range [ 303.440180][T12170] netlink: zone id is out of range [ 303.445653][T12170] netlink: zone id is out of range [ 303.469108][T12170] netlink: get zone limit has 8 unknown bytes [ 303.512913][T12178] netlink: 'syz.3.1726': attribute type 10 has an invalid length. [ 303.616169][T12178] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 303.760077][T12186] gtp1: entered promiscuous mode [ 303.781527][T12186] gtp1: entered allmulticast mode [ 304.065310][T12199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1730'. [ 304.403109][T12049] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 304.545219][T12049] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 304.568114][T12049] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 304.586802][T12049] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 304.690235][T12224] netlink: 'syz.0.1736': attribute type 1 has an invalid length. [ 304.736202][T12224] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1736'. [ 304.776159][T12049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.778671][T12227] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1736'. [ 304.792856][ T5840] Bluetooth: hci1: command tx timeout [ 304.810581][T12049] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.836099][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.843448][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.887770][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.895034][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.065258][T12233] pim6reg527: entered allmulticast mode [ 305.366050][T12223] delete_channel: no stack [ 305.370947][T12250] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1743'. [ 305.398618][T12247] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1743'. [ 305.809540][T12049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.849468][T12264] team_slave_0: mtu greater than device maximum [ 306.494226][T12289] vxcan3: entered allmulticast mode [ 306.650641][T12295] netlink: 576 bytes leftover after parsing attributes in process `syz.0.1755'. [ 306.705169][T12295] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 306.719317][T12049] veth0_vlan: entered promiscuous mode [ 306.755321][T12049] veth1_vlan: entered promiscuous mode [ 306.858774][T12049] veth0_macvtap: entered promiscuous mode [ 306.863913][ T5840] Bluetooth: hci1: command tx timeout [ 306.900439][T12049] veth1_macvtap: entered promiscuous mode [ 306.910783][T12307] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1755'. [ 306.945880][T12310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1760'. [ 306.973641][T12307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1755'. [ 306.999415][T12310] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1760'. [ 307.010047][T12307] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1755'. [ 307.047877][T12307] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1755'. [ 307.057347][T12049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.057584][T12315] tunl0: entered promiscuous mode [ 307.059604][T12315] netlink: 'syz.5.1761': attribute type 3 has an invalid length. [ 307.082891][T12315] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1761'. [ 307.089591][T12316] netlink: 'syz.5.1761': attribute type 1 has an invalid length. [ 307.122590][T12049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.131352][T12316] netlink: 'syz.5.1761': attribute type 2 has an invalid length. [ 307.139985][T12316] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1761'. [ 307.151504][T12318] !€ÿ: renamed from bond_slave_0 [ 307.173211][T12049] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.183145][T12049] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.199665][T12049] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.214371][T12049] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.367690][T12320] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 307.439304][T12326] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20000 [ 307.447272][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.459738][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.599340][ T5929] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.624475][ T5929] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.740719][T12338] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1770'. [ 307.755101][T12338] openvswitch: netlink: Flow actions attr not present in new flow. [ 307.837316][T12338] netlink: 'syz.0.1770': attribute type 4 has an invalid length. [ 307.997250][T12352] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 308.192019][ T1155] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.301168][ T1155] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.401870][ T1155] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.532186][ T1155] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.840777][ T1155] bridge_slave_1: left allmulticast mode [ 308.849898][ T1155] bridge_slave_1: left promiscuous mode [ 308.856996][ T1155] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.871523][ T1155] bridge_slave_0: left allmulticast mode [ 308.877437][ T1155] bridge_slave_0: left promiscuous mode [ 308.883256][ T1155] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.246582][ T1155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.259567][ T1155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.270995][ T1155] bond0 (unregistering): Released all slaves [ 309.506897][ T1155] hsr_slave_0: left promiscuous mode [ 309.514210][ T1155] hsr_slave_1: left promiscuous mode [ 309.520181][ T1155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.530709][ T1155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.540118][ T1155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.549259][ T1155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.571258][ T1155] veth1_macvtap: left promiscuous mode [ 309.577041][ T1155] veth0_macvtap: left promiscuous mode [ 309.582693][ T1155] veth1_vlan: left promiscuous mode [ 309.589978][ T1155] veth0_vlan: left promiscuous mode [ 310.292876][T12375] xt_CT: No such helper "syz0" [ 310.604103][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 310.629769][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 310.650497][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 310.662552][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 310.671841][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 310.755062][ T1155] team0 (unregistering): Port device team_slave_1 removed [ 310.830960][ T1155] team0 (unregistering): Port device team_slave_0 removed [ 310.868573][T12390] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 311.415634][T12386] syzkaller0 speed is unknown, defaulting to 1000 [ 311.712482][T12403] __nla_validate_parse: 1 callbacks suppressed [ 311.712503][T12403] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1787'. [ 311.808662][T12413] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1789'. [ 311.940849][T12418] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1790'. [ 311.969730][T12417] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1790'. [ 312.012663][T12418] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1790'. [ 312.023620][T12417] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1790'. [ 312.023875][T12417] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1790'. [ 312.024157][T12417] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1790'. [ 312.024367][T12417] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1790'. [ 312.024593][T12417] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1790'. [ 312.094128][T12386] chnl_net:caif_netlink_parms(): no params data found [ 312.295693][T12431] netlink: 'syz.5.1793': attribute type 3 has an invalid length. [ 312.394648][T12386] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.415021][T12386] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.427745][T12386] bridge_slave_0: entered allmulticast mode [ 312.451734][T12386] bridge_slave_0: entered promiscuous mode [ 312.472756][T12386] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.481737][T12386] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.517449][T12386] bridge_slave_1: entered allmulticast mode [ 312.542688][T12386] bridge_slave_1: entered promiscuous mode [ 312.654956][T12386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.707134][T12451] netlink: 'syz.0.1798': attribute type 9 has an invalid length. [ 312.720799][T12386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.783898][ T5840] Bluetooth: hci1: command tx timeout [ 312.936668][T12467] raw_sendmsg: syz.0.1803 forgot to set AF_INET. Fix it! [ 312.995642][T12386] team0: Port device team_slave_0 added [ 313.030075][T12386] team0: Port device team_slave_1 added [ 313.168839][T12483] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 313.196551][T12386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.205128][T12386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.237667][T12386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.314380][T12386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.321410][T12386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.392187][T12386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.470221][T12494] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 313.619533][T12386] hsr_slave_0: entered promiscuous mode [ 313.635535][T12386] hsr_slave_1: entered promiscuous mode [ 313.638498][T12501] netlink: 'syz.5.1815': attribute type 58 has an invalid length. [ 313.642804][T12386] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 313.682952][T12386] Cannot create hsr debugfs directory [ 313.775276][T12519] xt_cluster: node mask cannot exceed total number of nodes [ 313.899441][T12522] ip6tnl0: entered allmulticast mode [ 313.952008][T12522] netlink: 'syz.1.1822': attribute type 10 has an invalid length. [ 314.772436][T12562] vlan1: entered allmulticast mode [ 314.779267][T12562] veth1: entered allmulticast mode [ 314.874944][ T5840] Bluetooth: hci1: command tx timeout [ 314.988770][T12386] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 315.124597][T12386] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 315.152976][T12386] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 315.168557][T12386] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 315.442518][T12386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.472973][T12600] netlink: 'syz.0.1844': attribute type 4 has an invalid length. [ 315.548540][T12386] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.599449][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.606703][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.678065][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.685384][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.822276][T12617] netlink: 'syz.0.1849': attribute type 1 has an invalid length. [ 315.837637][T12617] netlink: 'syz.0.1849': attribute type 2 has an invalid length. [ 315.965514][T12623] netlink: 'syz.3.1851': attribute type 2 has an invalid length. [ 316.195105][T12637] netlink: 'syz.5.1853': attribute type 2 has an invalid length. [ 316.325728][T12386] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.578233][T12658] tunl0: left promiscuous mode [ 316.806784][T12658] bridge0: left allmulticast mode [ 316.844786][T12658] wg1: left promiscuous mode [ 316.944095][ T5840] Bluetooth: hci1: command tx timeout [ 316.959775][T12658] ipvlan0: left promiscuous mode [ 316.965406][T12658] ipvlan0: left allmulticast mode [ 316.970474][T12658] veth0_vlan: left allmulticast mode [ 317.062356][T12658] sit4: left promiscuous mode [ 317.068930][T12658] sit4: left allmulticast mode [ 317.089658][T12672] netlink: 'syz.1.1859': attribute type 1 has an invalid length. [ 317.252526][T12679] __nla_validate_parse: 78 callbacks suppressed [ 317.252547][T12679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1864'. [ 317.528831][T12386] veth0_vlan: entered promiscuous mode [ 317.588541][T12386] veth1_vlan: entered promiscuous mode [ 317.735952][T12704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1870'. [ 317.792490][T12386] veth0_macvtap: entered promiscuous mode [ 317.826601][T12386] veth1_macvtap: entered promiscuous mode [ 317.889202][T12386] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.952833][T12386] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.988140][T12386] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.041646][T12386] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.061951][T12386] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.073443][T12386] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.255012][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.270951][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.302914][T12730] netlink: 152064 bytes leftover after parsing attributes in process `syz.1.1879'. [ 318.323425][T12730] netlink: zone id is out of range [ 318.334408][T12730] netlink: zone id is out of range [ 318.351064][T12730] netlink: zone id is out of range [ 318.368955][T12730] netlink: zone id is out of range [ 318.376073][T12730] netlink: zone id is out of range [ 318.382480][T12730] netlink: zone id is out of range [ 318.384996][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.388648][T12730] netlink: zone id is out of range [ 318.402982][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.407766][T12730] netlink: zone id is out of range [ 318.482111][T12730] netlink: zone id is out of range [ 318.500069][T12730] netlink: zone id is out of range [ 318.541406][T12386] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 318.553365][T12386] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 318.561815][T12386] CPU: 0 UID: 0 PID: 12386 Comm: syz-executor Not tainted 6.16.0-rc2-syzkaller-00200-g8d89661a36dd #0 PREEMPT(full) [ 318.574090][T12386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 318.584185][T12386] RIP: 0010:klist_remove+0x14a/0x340 [ 318.589531][T12386] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 d9 31 c7 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 ba 31 c7 f6 49 8b 44 24 58 48 89 44 24 08 [ 318.609177][T12386] RSP: 0018:ffffc900031d7840 EFLAGS: 00010202 [ 318.615284][T12386] RAX: 000000000000000b RBX: ffff88802f309e00 RCX: 0000000000000000 [ 318.623294][T12386] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 318.631302][T12386] RBP: ffffc900031d7928 R08: ffffffff8f8798c3 R09: 1ffffffff1f0f318 [ 318.639329][T12386] R10: dffffc0000000000 R11: fffffbfff1f0f319 R12: 0000000000000000 [ 318.647347][T12386] R13: 1ffff1100667238c R14: ffff888033391c60 R15: dffffc0000000000 [ 318.655349][T12386] FS: 0000000000000000(0000) GS:ffff888125c51000(0000) knlGS:0000000000000000 [ 318.664302][T12386] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 318.670991][T12386] CR2: 00002000000010c0 CR3: 00000000739e2000 CR4: 00000000003526f0 [ 318.678999][T12386] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 318.686999][T12386] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 318.694991][T12386] Call Trace: [ 318.698306][T12386] [ 318.701260][T12386] ? __pfx_klist_remove+0x10/0x10 [ 318.706324][T12386] ? __pfx_kobject_move+0x10/0x10 [ 318.711370][T12386] ? get_device_parent+0x366/0x3a0 [ 318.716504][T12386] device_move+0x193/0x700 [ 318.720943][T12386] hci_conn_del_sysfs+0xb8/0x170 [ 318.725900][T12386] hci_conn_del+0x8ff/0xcb0 [ 318.730442][T12386] hci_conn_hash_flush+0x191/0x230 [ 318.735616][T12386] hci_dev_close_sync+0xaef/0x1330 [ 318.740770][T12386] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 318.746336][T12386] ? up_write+0x1c4/0x420 [ 318.750690][T12386] hci_unregister_dev+0x21a/0x510 [ 318.755736][T12386] vhci_release+0x80/0xd0 [ 318.760121][T12386] ? __pfx_vhci_release+0x10/0x10 [ 318.765172][T12386] __fput+0x44c/0xa70 [ 318.769179][T12386] task_work_run+0x1d1/0x260 [ 318.773788][T12386] ? __pfx_task_work_run+0x10/0x10 [ 318.778918][T12386] ? kmem_cache_free+0x18f/0x400 [ 318.783866][T12386] do_exit+0x6ad/0x22e0 [ 318.788038][T12386] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 318.793422][T12386] ? __pfx_do_exit+0x10/0x10 [ 318.798032][T12386] ? _raw_spin_unlock_irq+0x23/0x50 [ 318.803254][T12386] ? lockdep_hardirqs_on+0x9c/0x150 [ 318.808525][T12386] do_group_exit+0x21c/0x2d0 [ 318.813155][T12386] __x64_sys_exit_group+0x3f/0x40 [ 318.818293][T12386] x64_sys_call+0x21ba/0x21c0 [ 318.823136][T12386] do_syscall_64+0xfa/0x3b0 [ 318.827666][T12386] ? lockdep_hardirqs_on+0x9c/0x150 [ 318.832906][T12386] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.838989][T12386] ? clear_bhb_loop+0x60/0xb0 [ 318.843723][T12386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.849629][T12386] RIP: 0033:0x7feaee98e929 [ 318.854061][T12386] Code: Unable to access opcode bytes at 0x7feaee98e8ff. [ 318.861087][T12386] RSP: 002b:00007fffc3358848 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 318.869516][T12386] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007feaee98e929 [ 318.877499][T12386] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 318.885480][T12386] RBP: 00007feaee9ee8f0 R08: 00007fffc33565e7 R09: 0000000000000003 [ 318.893469][T12386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.901458][T12386] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007fffc3358a00 [ 318.909452][T12386] [ 318.912480][T12386] Modules linked in: [ 318.917847][T12386] ---[ end trace 0000000000000000 ]--- [ 318.940859][T12386] RIP: 0010:klist_remove+0x14a/0x340 [ 318.959198][T12386] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 d9 31 c7 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 ba 31 c7 f6 49 8b 44 24 58 48 89 44 24 08 [ 318.981735][T12386] RSP: 0018:ffffc900031d7840 EFLAGS: 00010202 [ 318.989651][T12386] RAX: 000000000000000b RBX: ffff88802f309e00 RCX: 0000000000000000 [ 318.997822][T12386] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 319.005876][T12386] RBP: ffffc900031d7928 R08: ffffffff8f8798c3 R09: 1ffffffff1f0f318 [ 319.014093][T12386] R10: dffffc0000000000 R11: fffffbfff1f0f319 R12: 0000000000000000 [ 319.022111][T12386] R13: 1ffff1100667238c R14: ffff888033391c60 R15: dffffc0000000000 [ 319.030912][ T5840] Bluetooth: hci1: command tx timeout [ 319.037587][T12386] FS: 0000000000000000(0000) GS:ffff888125c51000(0000) knlGS:0000000000000000 [ 319.046758][T12386] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 319.053575][T12386] CR2: 00007f3375f80ab8 CR3: 0000000073980000 CR4: 00000000003526f0 [ 319.061592][T12386] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 319.070029][T12386] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 319.078206][T12386] Kernel panic - not syncing: Fatal exception [ 319.084562][T12386] Kernel Offset: disabled [ 319.088897][T12386] Rebooting in 86400 seconds..