last executing test programs: 1m23.637644552s ago: executing program 4 (id=932): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_KEY={0x0, 0x2, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_DREG={0x0, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_CT_DIRECTION={0x6, 0x3, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x44010}, 0x80) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x37}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={r2, 0x0, 0x2, 0x3}, &(0x7f0000000140)=0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffff7c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 1m11.619562802s ago: executing program 4 (id=932): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_KEY={0x0, 0x2, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_DREG={0x0, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_CT_DIRECTION={0x6, 0x3, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x44010}, 0x80) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x37}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={r2, 0x0, 0x2, 0x3}, &(0x7f0000000140)=0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffff7c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 58.977035322s ago: executing program 4 (id=932): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_KEY={0x0, 0x2, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_DREG={0x0, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_CT_DIRECTION={0x6, 0x3, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x44010}, 0x80) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x37}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={r2, 0x0, 0x2, 0x3}, &(0x7f0000000140)=0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffff7c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 54.461737993s ago: executing program 0 (id=2051): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000001021672404d39cd4598e32a043d34d0000000000000000000000000000000000000000005b000000"], 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="02"], 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r3, 0x2, 0x0, 0x0, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x4, 0x8, 0xf, 0x80000000, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, 0x700, 0x8000, 0xfffffff8, 0x1a1f400a}}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x84, 0x84, 0x3, [@struct={0xa, 0x8, 0x0, 0x4, 0x0, 0x96ea, [{0x5, 0x1}, {0xc, 0x3, 0x3}, {0x8, 0x3, 0xfffffff9}, {0x5, 0x0, 0x4}, {0x2, 0x0, 0xc26a}, {0xe, 0x5, 0x54}, {0xb, 0x2, 0x8}, {0x4, 0x3, 0x3}]}, @func={0x1, 0x0, 0x0, 0xc, 0x5}, @volatile={0x6, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0]}}, &(0x7f0000000200)=""/162, 0x9f, 0xa2, 0x0, 0x9, 0x10000, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0xe, 0x1, 0xe, 0x0, r0, 0x1, '\x00', r4, r5, 0x5, 0x3, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000400008000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000bf020000000000007b9af8ff00000000b609080089ffffff7baaf0ff00000000bf8700000000000007090000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004600020076004000bf980000000000007e080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000001021672404d39cd4598e32a043d34d0000000000000000000000000000000000000000005b000000"], 0x48) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="02"], 0x10) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r3, 0x2, 0x0, 0x0, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x4, 0x8, 0xf, 0x80000000, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, 0x700, 0x8000, 0xfffffff8, 0x1a1f400a}}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x84, 0x84, 0x3, [@struct={0xa, 0x8, 0x0, 0x4, 0x0, 0x96ea, [{0x5, 0x1}, {0xc, 0x3, 0x3}, {0x8, 0x3, 0xfffffff9}, {0x5, 0x0, 0x4}, {0x2, 0x0, 0xc26a}, {0xe, 0x5, 0x54}, {0xb, 0x2, 0x8}, {0x4, 0x3, 0x3}]}, @func={0x1, 0x0, 0x0, 0xc, 0x5}, @volatile={0x6, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0]}}, &(0x7f0000000200)=""/162, 0x9f, 0xa2, 0x0, 0x9, 0x10000, @value}, 0x28) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0xe, 0x1, 0xe, 0x0, r0, 0x1, '\x00', r4, r5, 0x5, 0x3, 0x1, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000400008000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000bf020000000000007b9af8ff00000000b609080089ffffff7baaf0ff00000000bf8700000000000007090000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004600020076004000bf980000000000007e080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) 54.268844614s ago: executing program 0 (id=2055): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0xfff}]}, 0x48}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8b26, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x202}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20084054}, 0x0) 53.548689579s ago: executing program 0 (id=2061): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.numa_stat\x00', 0x26e1, 0x0) r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0x0, @dev, 0x7}, 0x80, 0x0}, 0x200ce0c0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) r8 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, r7, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r8}}]}, 0x3c}}, 0x0) sendmsg$NFT_BATCH(r5, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r9, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x2c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_SET_ID={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_DESC={0x8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x54}}, 0x40004) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r11, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) sendto$inet6(r1, &(0x7f0000000080)="de18b30018fde148e80fa75d16166ffd7e53eaf4f22e39b5d5555c9ffed28e28b6d20058", 0x24, 0x20004011, &(0x7f0000000180)={0xa, 0x4e20, 0x1, @empty, 0x5}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) r12 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETDEVINFO(r12, 0x80044942, 0xfffffffffffffffe) socket(0x2b, 0x1, 0x0) 32.048246943s ago: executing program 0 (id=2061): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.numa_stat\x00', 0x26e1, 0x0) r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0x0, @dev, 0x7}, 0x80, 0x0}, 0x200ce0c0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) r8 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, r7, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r8}}]}, 0x3c}}, 0x0) sendmsg$NFT_BATCH(r5, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r9, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x2c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_SET_ID={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_DESC={0x8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x54}}, 0x40004) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r11, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) sendto$inet6(r1, &(0x7f0000000080)="de18b30018fde148e80fa75d16166ffd7e53eaf4f22e39b5d5555c9ffed28e28b6d20058", 0x24, 0x20004011, &(0x7f0000000180)={0xa, 0x4e20, 0x1, @empty, 0x5}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) r12 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETDEVINFO(r12, 0x80044942, 0xfffffffffffffffe) socket(0x2b, 0x1, 0x0) 31.589002175s ago: executing program 4 (id=932): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_KEY={0x0, 0x2, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_DREG={0x0, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_CT_DIRECTION={0x6, 0x3, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x44010}, 0x80) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x37}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={r2, 0x0, 0x2, 0x3}, &(0x7f0000000140)=0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffff7c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 29.594554944s ago: executing program 4 (id=932): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_KEY={0x0, 0x2, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_DREG={0x0, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_CT_DIRECTION={0x6, 0x3, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x44010}, 0x80) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x37}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={r2, 0x0, 0x2, 0x3}, &(0x7f0000000140)=0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffff7c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 18.571994718s ago: executing program 0 (id=2061): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.numa_stat\x00', 0x26e1, 0x0) r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0x0, @dev, 0x7}, 0x80, 0x0}, 0x200ce0c0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) r8 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, r7, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r8}}]}, 0x3c}}, 0x0) sendmsg$NFT_BATCH(r5, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r9, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x2c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_SET_ID={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_DESC={0x8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x54}}, 0x40004) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r11, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) sendto$inet6(r1, &(0x7f0000000080)="de18b30018fde148e80fa75d16166ffd7e53eaf4f22e39b5d5555c9ffed28e28b6d20058", 0x24, 0x20004011, &(0x7f0000000180)={0xa, 0x4e20, 0x1, @empty, 0x5}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) r12 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETDEVINFO(r12, 0x80044942, 0xfffffffffffffffe) socket(0x2b, 0x1, 0x0) 10.903129677s ago: executing program 4 (id=932): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_KEY={0x0, 0x2, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_DREG={0x0, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_CT_DIRECTION={0x6, 0x3, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x44010}, 0x80) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x37}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={r2, 0x0, 0x2, 0x3}, &(0x7f0000000140)=0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffff7c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 5.700123889s ago: executing program 0 (id=2061): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.numa_stat\x00', 0x26e1, 0x0) r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0x0, @dev, 0x7}, 0x80, 0x0}, 0x200ce0c0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) r8 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, r7, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r8}}]}, 0x3c}}, 0x0) sendmsg$NFT_BATCH(r5, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r9, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x2c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_SET_ID={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_DESC={0x8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x54}}, 0x40004) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r11, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) sendto$inet6(r1, &(0x7f0000000080)="de18b30018fde148e80fa75d16166ffd7e53eaf4f22e39b5d5555c9ffed28e28b6d20058", 0x24, 0x20004011, &(0x7f0000000180)={0xa, 0x4e20, 0x1, @empty, 0x5}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) r12 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETDEVINFO(r12, 0x80044942, 0xfffffffffffffffe) socket(0x2b, 0x1, 0x0) 2.587062535s ago: executing program 2 (id=2358): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000027c0)=""/4102, 0xf98}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000000140)=""/194, 0xc2}], 0x3}, 0x0) r1 = socket$inet_sctp(0x2, 0x4, 0x84) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x28, r3, 0x1, 0xfffffffe, 0x0, {}, [@NL802154_ATTR_SEC_DEVKEY={0xc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x89ed}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000001240), r2) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socket$kcm(0x10, 0x400000002, 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) (async) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000027c0)=""/4102, 0xf98}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000000140)=""/194, 0xc2}], 0x3}, 0x0) (async) socket$inet_sctp(0x2, 0x4, 0x84) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x28, r3, 0x1, 0xfffffffe, 0x0, {}, [@NL802154_ATTR_SEC_DEVKEY={0xc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x89ed}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000001240), r2) (async) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) 2.209949735s ago: executing program 2 (id=2361): r0 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r0, &(0x7f0000000500)={0x2a, 0x1}, 0xc) bind$qrtr(r0, &(0x7f0000000080)={0x2a, 0x1, 0x4001}, 0xc) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000140)=0x9) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.freeze\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f}, @TCA_CTINFO_ZONE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x4) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8422089}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x5c, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20048000}, 0x4000094) 2.028940124s ago: executing program 3 (id=2364): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000800000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x7, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0x0, 0xfff1}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0x44c, 0x0, 0x4}, "fe"}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010000100"/20, @ANYRES32, @ANYBLOB="000000000000000014001680100001800c0005000000000000000000040014"], 0x38}}, 0x0) 1.932258163s ago: executing program 1 (id=2365): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}}, 0x24}}, 0x800) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newtfilter={0x64, 0x28, 0xd27, 0x1004001, 0x0, {0x0, 0x0, 0x0, r4, {0xfff3, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x34, 0x2, [@TCA_CGROUP_ACT={0x30, 0x1, [@m_ct={0x16, 0x4, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x48c0) 934.236865ms ago: executing program 2 (id=2366): r0 = socket$netlink(0x10, 0x3, 0x15) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4affeeaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r3, @ANYRES32=r3], 0x44}}, 0x0) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000001d40)={0xe0, 0x13, 0x1, 0x0, 0x0, "", [@nested={0xcd, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="3335daa3f516884808d1f74cc705506875c4e919132781cb91c73fbad59538fb3eae1f6fb0139940dad167122f28f87b6777351aae84905a919858312f1881ff5c5e814f3aa23445ca7b70d2969b9fa7be4186cfde9e64ec271460e0c1f31a5e35f499ec84eeff602de3e0bb0f65ff585346cb6981a06e6a59b6fcd88a5e662677aa1c930a0d0945390cf60f3a373b2d72e782c79733eeac20c0d1ea931940db18e8d4008e525ee3f2423c0e27a8124b700e766a668b007b085841bdf65c2f87f8"]}]}, 0xe0}], 0x1}, 0x0) 933.317397ms ago: executing program 1 (id=2367): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x24, 0x0, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000a80)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x24, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TSID={0x5}]}, 0x24}}, 0x0) 768.031281ms ago: executing program 2 (id=2368): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @private0}, 0xb5) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r4, &(0x7f0000000380)=ANY=[@ANYRES16=r0, @ANYRES8=r0, @ANYRES32=r4, @ANYRES64=r0, @ANYRES16=0x0, @ANYRES32=r1, @ANYRES64, @ANYRES32=r0], 0x18c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r5, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES8=r1, @ANYBLOB="01f2188fd7fe13ae8ade31f59954f3000300075f8b2d00"/36, @ANYRES32=r3, @ANYBLOB="18005080050002000000000009000a00e59e75e84c000000"], 0x34}}, 0x0) 767.318844ms ago: executing program 1 (id=2369): syz_emit_ethernet(0xad, &(0x7f0000000900)={@local, @broadcast, @void, {@generic={0x8863, "821b744f8f3d944136f6a01af15292223eadb065a8dd884d977081ae66c26ab5bb17de88b8f02b85b02ef3528a008b4e2ac7f26fd062240b823daf3d1299cee02a9e1e79e1243215ffee2edeb9366f837fe40519d3fe86e5b38d61aff1586ef5f5a58db21818e91055409b14695715634aa6b023421c2411cb463dbd47d222f31be25cde4632c110b5997f99d78453da8d104c808415d29bfb96b49c00ad91"}}}, 0x0) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = socket(0xb, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000080)) (async) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) connect$unix(r4, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="070000000000000000000200000008002500000000000c00990001"], 0x28}}, 0x0) unshare(0x600) (async) r5 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r5, 0x29, 0x7, &(0x7f0000000040)=0xeffe, 0x4) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r1], 0x30}}, 0x0) write$ppp(r0, &(0x7f0000000240)="96cf7e5459d40bc3afdcf4d2a292f50db6f39829f7a85564524bc7e8015e298fcfc6128cdad443bb533c7ee9555044faf8ce590be923a0d06a6b29e3a047df7f58ef6ecd975e7075eb85cce83a4938526e8e88e4c758b6c0556b652a4842ff22e328e05e362326b591cc98a68fd238ca5e3ec55023adaa72dda02e54f272fc44398d9cf08c9f3409b8238efd93b7c85f9a4e155ef4e1838b529f3c03ad0c3342326c40df3db8d2fb8e9b937718fffba5e4b18c5ba6c45044eb20fc2a69bfd20db6cc5e760c362e654e81a51a5d1ad435f6cf741d875c424e1e36d6a0c56b3d78", 0xe0) 699.946441ms ago: executing program 3 (id=2370): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="600000000206010200000000000000000000040014000780050014000700000008001240120500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e6574000000000500050002000000050004"], 0x60}}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000001e00010026bd7000fddbdf2507000000", @ANYRES32=0x0, @ANYBLOB="0000000008000d0001000000060005"], 0x2c}}, 0x0) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x38, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x2}, 0x300048c0) 648.006957ms ago: executing program 1 (id=2371): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="18001c35e292b4d100000000000000000000000000008500000050000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b00000009500263aea05fffa91b7cac671d753c8f524c62dcf313214cfd0432035335e85854ffbb643"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xb}, {0x8}}}, 0x24}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) r6 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r6, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000000)="6adb0f817ca4e02a1a711dd0772754", 0xf}], 0x1, 0x0, 0x0, 0x900}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000001f00)=""/4062, &(0x7f00000004c0)=0x744) 516.083643ms ago: executing program 3 (id=2372): syz_emit_ethernet(0x2a, &(0x7f00000003c0)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x14, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000080)={r1, @in={{0x2, 0x4e24, @rand_addr=0x64010102}}, 0x32b, 0x6}, &(0x7f0000000140)=0x90) 428.801135ms ago: executing program 2 (id=2373): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x7e2438dd}]}}]}, 0x40}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000000000800000000000e000000"], 0x14}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r6 = syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_SE(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r6, 0x800, 0x70bd26, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000000) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000007c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="e7ffffff72007945af7d0000fedbdf2507000000", @ANYRES32=r7, @ANYBLOB="000001000100000000000100000000000000010000000000000001000000000000000100000000000000010001000000"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x890) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 64) sendmsg$DEVLINK_CMD_TRAP_GET(r9, 0x0, 0x4000) sendmsg$nl_route(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=@ipv6_deladdr={0x20, 0x15, 0x200, 0x70bd27, 0x25dfdbfd, {0xa, 0x18, 0x20, 0xfd}, [@IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4006}, 0x4004) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000600)={r0}) r11 = socket$unix(0x1, 0x5, 0x0) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RATE_SET(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=ANY=[], 0x34}}, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r13, @ANYBLOB="7477b7f9b18dfa0792dd56f73acb6d84c65d78c6f01bd7f209276aaf6021f6c80300639f1aaaeccb20ef295191f598fc48ad7ffd9675ae4d548e92"], 0x1c}}, 0x4004) (async) syz_genetlink_get_family_id$tipc(0x0, r9) sendmsg$NL80211_CMD_START_AP(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="20010000", @ANYRES16=r10, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r13, @ANYBLOB="47000e00800000000802110000000802110000015050505050500000000000000000000064000000000602020202020204060000000000000602000025030034003c040106b80400080026006c09000008000c006400000008000d0000000000a2000f00019c"], 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x0) (async) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="14220000", @ANYRES16=r10, @ANYBLOB="000227bd7000fbdbdf2559000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004445}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5400000010000100000000008000000000000000a88f05bb1392423c66201442a880ac1b6a75a6b05ac6348471bfde0b386d3654a3b4de49ec9bd6122c14e98b697f611ca84a5dec500744820c64901e285346a836bacfdd98bac2a46a4c22cc14fca14821189c967762a7ab54765e1faa98a4987f33067bc8680116441f625bf5f654149a14f4f953ee38d16c190593928ef1f359259dbb86af1805cfa48879a250f0fe6069", @ANYRES32=0x0, @ANYBLOB="00000000003f00002c0012800b00010067726574617000001c00028006000e000000000006000e000200000006000300fbff000008000a00", @ANYRES32=r7, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x40005}, 0x0) 384.561392ms ago: executing program 3 (id=2374): socket$kcm(0x10, 0x2, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f00000002c0)=0x10) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) (async) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) r1 = socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600180003600e1209000a0000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0800089e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970100040000", 0xd8}], 0x1}, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600180003600e1209000a0000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0800089e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970100040000", 0xd8}], 0x1}, 0x0) 282.946292ms ago: executing program 1 (id=2375): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}}, 0x1c}}, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r1, @ANYRES32=r1, @ANYBLOB="c0420000000000001400128009000100766574680000000004000280080220000100000030210d25f32fad185d63510b274503e62ff2e68ef042892d0662a604129db80fe3bb05c6cf40de66ac6866d2f09dfea20c1cbcc8966a21353a137a1379223db34a196bf38466fb999a61e638c6d1e012138319f3339b41a7191884d23e17968eb7f920239f6f0f288d72df94b2066949c4e26278ef9c989ea709fcb942115886b258e4bb22a5259b377aa4ec2019d4d99f4c5b19d26be1a38d0b62137d31a573c41b495ab11447592c77aa7fd86b5cce73fe478c76814fc59a71b74fafc231a20bb033"], 0x3c}}, 0x0) 200.037131ms ago: executing program 3 (id=2376): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000001b00), r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x54, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x9ffffd}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x2}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000002f00020026bd7000fcdbdf250400000014000d800d0034006e6574007964657673696d000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000d}, 0x440d0) 129.925643ms ago: executing program 2 (id=2377): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x7c, 0x2c, 0xd2b, 0x70bd27, 0x25dedbfb, {0x0, 0x0, 0x0, r3, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x50, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0xfd, 0x1, 0x3, 0x1, 0x4, 0x2, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x6783, 0x2, 0x4, 0x10}, {0x0, 0x53, 0xa9, 0x5}]}}, @TCA_U32_LINK={0x8}]}}]}, 0x7c}}, 0x24040084) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x37}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @match={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_NAME={0xa, 0x1, 'quota\x00'}]}}}]}], {0x14, 0x10}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000780)={'ip6_vti0\x00', {0x2, 0x0, @loopback}}) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f0000000e00)={{}, "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"}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000840)="e40f9dd60bd112e16bde0c1e42c59defa3a6", &(0x7f0000000a00)="f273e351abc259cd32d041815d6dc955b31b83b81623587c68d967573834506f9fac618e5b360ed6f477cee5b10046389937021eda0ffa953380ed72b0c77d16738bef6a2bcae0b61a9e07c9fa42c6af579cf988fb60f07f2a44ee7068f2de893e37bb3c3f7b11518d9562e889baec06c48150947a950b1aa08d7b258643e8420cabe626384e7e6d87b60571b0835dcf441e788331605289025d4b1bced1757f4a28b881aa476f4a76558acd16411d557993e8", 0x800, r4}, 0x38) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'gretap0\x00', &(0x7f0000000500)={'gre0\x00', 0x0, 0x20, 0x1c8a7ce10bc40bf2, 0x10000, 0x7, {{0x1f, 0x4, 0x0, 0x3a, 0x7c, 0x65, 0x0, 0xe, 0x2f, 0x0, @remote, @loopback, {[@rr={0x7, 0xb, 0xa, [@multicast2, @local]}, @generic={0x88, 0x11, "c8913b0bd75d8066722b52ac82eefd"}, @timestamp_addr={0x44, 0x24, 0x76, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@rand_addr=0x64010102, 0x9}, {@private=0xa010100, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xff}]}, @ssrr={0x89, 0x1f, 0xd, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @remote, @loopback, @empty, @remote]}, @generic={0x88, 0x5, "05a670"}, @noop]}}}}}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000005c0)={0x6, 0x0}, 0x8) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r11}, 0x10) connect$inet(r4, &(0x7f0000000880)={0x2, 0x4e24, @multicast2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xb, 0x5, &(0x7f0000000040)=@raw=[@ldst={0x1, 0x2, 0x2, 0x8, 0x7, 0x40}, @jmp={0x5, 0x1, 0x7, 0x3, 0x5, 0x50, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x83a0, 0x0, 0x0, 0x0, 0x7}, @generic={0x5, 0x4, 0xf, 0x3, 0x6d}], &(0x7f0000000100)='syzkaller\x00', 0xd, 0xe7, &(0x7f0000000340)=""/231, 0x0, 0x40, '\x00', r7, @fallback=0x2, r8, 0x8, &(0x7f0000000280)={0x7, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0x7, 0xfffffff4, 0x7f}, 0x10, r9, r11, 0x6, &(0x7f0000000600)=[r4, r4], &(0x7f0000000640)=[{0x1, 0x5, 0x10, 0x1}, {0x5, 0x4, 0x4, 0xa}, {0x41, 0x2, 0xc, 0x2}, {0x4, 0x4, 0x10, 0x2}, {0x0, 0x1, 0x3, 0x1}, {0x5, 0x5, 0x1, 0x6}], 0x10, 0x3, @void, @value}, 0x94) r12 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d00)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESHEX], 0x24}}, 0x0) recvmmsg$unix(r12, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000008c0)=""/200, 0xc8}, {&(0x7f0000000640)=""/249, 0xf9}, {&(0x7f0000004480)=""/4098, 0x1002}, {&(0x7f0000000740)=""/27, 0x1b}, {&(0x7f00000007c0)=""/109, 0x6d}, {&(0x7f00000001c0)=""/104, 0x68}, {&(0x7f0000000300)=""/25, 0x19}, {&(0x7f0000000ac0)=""/116, 0x74}, {&(0x7f0000000d40)=""/139, 0x7f}], 0x9, 0x0, 0x3e}}], 0x1, 0x10000, 0x0) write(r12, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f000100feffffff0000000001"], 0x114}], 0x1}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWSET={0x84, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x88}, @NFTA_SET_DESC={0x38, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x34, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7, 0x84}}}, 0xac}, 0x1, 0x0, 0x0, 0x4404c810}, 0x0) 81.7329ms ago: executing program 1 (id=2378): r0 = socket$inet(0x2, 0x3, 0x1) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r2, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8840}, 0x8000) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000280)={'NETMAP\x00'}, &(0x7f00000002c0)=0x1e) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000feffffff1c0000000a0004007770616e300000000800010000000000080003"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) 0s ago: executing program 3 (id=2379): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x9) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000000)={'broute\x00', 0x0, 0x0, 0x0, [0x10000, 0x7fffffff, 0xde, 0x1, 0x6, 0x9]}, &(0x7f0000000080)=0x78) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r3, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r4, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x1c, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r7, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmmsg$inet(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20008000) kernel console output (not intermixed with test programs): : batadv0: Interface deactivated: batadv_slave_0 [ 239.948083][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.968351][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.985684][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.048676][ T36] veth1_macvtap: left promiscuous mode [ 240.056222][ T5842] Bluetooth: hci3: command tx timeout [ 240.062305][ T36] veth0_macvtap: left promiscuous mode [ 240.078366][ T36] veth1_vlan: left promiscuous mode [ 240.089569][ T36] veth0_vlan: left promiscuous mode [ 240.360905][T11880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1555'. [ 240.375353][T11881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1555'. [ 240.779611][ T36] team0 (unregistering): Port device team_slave_1 removed [ 240.828296][ T36] team0 (unregistering): Port device team_slave_0 removed [ 241.483174][T11774] chnl_net:caif_netlink_parms(): no params data found [ 241.517955][T11900] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1556'. [ 241.921917][T11942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1566'. [ 241.949638][T11939] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1564'. [ 241.989169][T11946] x_tables: duplicate underflow at hook 2 [ 242.000121][T11934] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 242.021516][T11774] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.046214][T11774] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.073012][T11774] bridge_slave_0: entered allmulticast mode [ 242.082087][T11951] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1568'. [ 242.093208][T11774] bridge_slave_0: entered promiscuous mode [ 242.121178][T11774] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.133659][T11774] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.146062][ T5842] Bluetooth: hci3: command tx timeout [ 242.146635][T11774] bridge_slave_1: entered allmulticast mode [ 242.176024][T11774] bridge_slave_1: entered promiscuous mode [ 242.222350][T11959] Bluetooth: MGMT ver 1.23 [ 242.437603][T11774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.478603][T11774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.534136][T11979] Bluetooth: MGMT ver 1.23 [ 242.732312][T11774] team0: Port device team_slave_0 added [ 242.784117][T11774] team0: Port device team_slave_1 added [ 242.973030][T11774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.993422][T11774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.051731][T11774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.071316][T11774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.093834][T11774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.107430][T12017] netlink: 'syz.3.1582': attribute type 10 has an invalid length. [ 243.140282][T11774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.180876][T12017] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.197959][T12017] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.206674][T12017] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.214936][T12017] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.229602][T12017] geneve0: entered promiscuous mode [ 243.235583][T12017] team0: Port device geneve0 added [ 243.370257][T12027] sock: sock_timestamping_bind_phc: sock not bind to device [ 243.482228][T11774] hsr_slave_0: entered promiscuous mode [ 243.510787][T11774] hsr_slave_1: entered promiscuous mode [ 243.527188][T11774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 243.545730][T11774] Cannot create hsr debugfs directory [ 243.851912][T12057] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 243.910258][T12061] netlink: 'syz.2.1593': attribute type 75 has an invalid length. [ 243.947094][T12061] siw: device registration error -23 [ 244.029150][T12072] __nla_validate_parse: 4 callbacks suppressed [ 244.029173][T12072] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1593'. [ 244.216737][ T5842] Bluetooth: hci3: command tx timeout [ 244.297203][T12082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1597'. [ 244.704616][T12109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1605'. [ 244.755710][T12109] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 244.995251][T12119] netlink: 'syz.2.1609': attribute type 75 has an invalid length. [ 245.011523][T11774] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 245.022694][T12119] siw: device registration error -23 [ 245.042333][T12124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1610'. [ 245.062852][T11774] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 245.094403][T12129] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1609'. [ 245.113522][T11774] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 245.126725][T12128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1611'. [ 245.129459][T12131] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1612'. [ 245.162379][T11774] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 245.484401][T12150] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 245.502596][T12150] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.522896][T11774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.594420][T11774] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.714487][ T6066] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.721752][ T6066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.773685][ T6066] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.780959][ T6066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.832956][T12171] IPVS: Error connecting to the multicast addr [ 245.869706][T12172] netlink: 'syz.0.1621': attribute type 3 has an invalid length. [ 245.917340][T12172] netlink: 'syz.0.1621': attribute type 1 has an invalid length. [ 246.122804][T12184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1624'. [ 246.144804][T12185] netlink: 'syz.2.1623': attribute type 4 has an invalid length. [ 246.180484][T12185] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.297765][ T5842] Bluetooth: hci3: command tx timeout [ 246.425775][T12195] netlink: 'syz.0.1625': attribute type 75 has an invalid length. [ 246.446800][T12195] siw: device registration error -23 [ 246.463937][T11774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.518863][T12201] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1625'. [ 246.603095][T12206] netlink: 'syz.1.1628': attribute type 3 has an invalid length. [ 246.802280][T12213] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1630'. [ 246.822031][T12213] netlink: zone id is out of range [ 246.880523][T12213] netlink: get zone limit has 8 unknown bytes [ 247.027253][T12225] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 247.335277][T11774] veth0_vlan: entered promiscuous mode [ 247.352983][ T11] block nbd0: Possible stuck request ffff888024bce000: control (read@0,4096B). Runtime 150 seconds [ 247.405657][T11774] veth1_vlan: entered promiscuous mode [ 247.438490][T11774] veth0_macvtap: entered promiscuous mode [ 247.455491][T11774] veth1_macvtap: entered promiscuous mode [ 247.489346][T12239] set match dimension is over the limit! [ 247.552422][T11774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.585206][T11774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.609532][T11774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.663979][T11774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.687191][T11774] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.701911][T11774] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.712377][T11774] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.744724][T11774] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.056440][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.109987][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.138897][T12270] netlink: 'syz.0.1642': attribute type 75 has an invalid length. [ 248.169663][T12270] siw: device registration error -23 [ 248.204332][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.246649][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.308202][T12282] x_tables: unsorted underflow at hook 3 [ 248.441794][T12287] netlink: 'syz.3.1645': attribute type 1 has an invalid length. [ 248.467469][T12285] lo: entered promiscuous mode [ 248.495030][T12285] lo: entered allmulticast mode [ 248.552499][T12285] tunl0: entered promiscuous mode [ 248.577514][T12285] tunl0: entered allmulticast mode [ 248.589067][T12285] gre0: entered promiscuous mode [ 248.602775][T12285] gre0: entered allmulticast mode [ 248.609199][T12285] gretap0: entered promiscuous mode [ 248.614618][T12285] gretap0: entered allmulticast mode [ 248.622125][T12285] erspan0: entered promiscuous mode [ 248.628274][T12285] erspan0: entered allmulticast mode [ 248.635687][T12285] ip_vti0: entered promiscuous mode [ 248.641567][T12285] ip_vti0: entered allmulticast mode [ 248.648221][T12285] ip6_vti0: entered promiscuous mode [ 248.653701][T12285] ip6_vti0: entered allmulticast mode [ 248.660611][T12285] sit0: entered promiscuous mode [ 248.665814][T12285] sit0: entered allmulticast mode [ 248.673144][T12285] ip6tnl0: entered promiscuous mode [ 248.691863][T12285] ip6tnl0: entered allmulticast mode [ 248.699117][T12285] ip6gre0: entered promiscuous mode [ 248.704595][T12285] ip6gre0: entered allmulticast mode [ 248.711172][T12285] syz_tun: entered promiscuous mode [ 248.716564][T12285] syz_tun: entered allmulticast mode [ 248.722541][T12285] ip6gretap0: entered promiscuous mode [ 248.728207][T12285] ip6gretap0: entered allmulticast mode [ 248.734347][T12285] bridge0: entered promiscuous mode [ 248.740141][T12285] bridge0: entered allmulticast mode [ 248.746735][T12285] : entered promiscuous mode [ 248.751566][T12285] : entered allmulticast mode [ 248.757286][T12285] team0: entered promiscuous mode [ 248.762376][T12285] team0: entered allmulticast mode [ 248.769350][T12285] dummy0: entered promiscuous mode [ 248.774827][T12285] dummy0: entered allmulticast mode [ 248.781053][T12285] nlmon0: entered promiscuous mode [ 248.786406][T12285] nlmon0: entered allmulticast mode [ 248.795441][T12285] caif0: entered promiscuous mode [ 248.800692][T12285] caif0: entered allmulticast mode [ 248.806113][T12285] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 249.046644][T12310] __nla_validate_parse: 4 callbacks suppressed [ 249.046665][T12310] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1651'. [ 249.142814][T12313] xt_TPROXY: Can be used only with -p tcp or -p udp [ 249.177280][T12313] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1651'. [ 249.233768][ T6066] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.383193][ T6066] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.593538][ T6066] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.710484][ T6066] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.910048][ T6066] bridge_slave_1: left allmulticast mode [ 249.915776][ T6066] bridge_slave_1: left promiscuous mode [ 249.922392][ T6066] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.933334][ T6066] bridge_slave_0: left allmulticast mode [ 249.939686][ T6066] bridge_slave_0: left promiscuous mode [ 249.945473][ T6066] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.448572][T12351] netlink: 'syz.1.1657': attribute type 75 has an invalid length. [ 250.477969][T12351] siw: device registration error -23 [ 250.480931][T12350] sctp: [Deprecated]: syz.3.1658 (pid 12350) Use of int in max_burst socket option. [ 250.480931][T12350] Use struct sctp_assoc_value instead [ 250.505391][T12353] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1659'. [ 250.564561][T12356] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1657'. [ 250.623246][T12362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1660'. [ 250.671802][ T6066] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.687459][ T6066] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.699201][ T6066] bond0 (unregistering): Released all slaves [ 250.715572][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 250.727370][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 250.743348][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 250.768933][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 250.788123][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 250.962978][T12371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1661'. [ 251.024022][T12368] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1662'. [ 251.051390][T12368] netlink: 'syz.0.1662': attribute type 2 has an invalid length. [ 251.070182][T12368] netlink: 'syz.0.1662': attribute type 1 has an invalid length. [ 251.081101][T12368] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1662'. [ 251.147660][T12377] netem: change failed [ 251.204221][T12387] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1666'. [ 251.251276][T12382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1665'. [ 251.782739][T12420] netlink: 'syz.2.1674': attribute type 75 has an invalid length. [ 251.895476][T12364] lo speed is unknown, defaulting to 1000 [ 251.922676][T12420] siw: device registration error -23 [ 252.691856][ T6066] hsr_slave_0: left promiscuous mode [ 252.712435][ T6066] hsr_slave_1: left promiscuous mode [ 252.719369][ T6066] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.728258][ T6066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.739352][ T6066] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.747148][ T6066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.793359][ T6066] veth1_macvtap: left promiscuous mode [ 252.801967][ T6066] veth0_macvtap: left promiscuous mode [ 252.807912][ T6066] veth1_vlan: left promiscuous mode [ 252.814930][ T6066] veth0_vlan: left promiscuous mode [ 252.858638][ T5842] Bluetooth: hci3: command tx timeout [ 253.293950][ T6066] team0 (unregistering): Port device team_slave_1 removed [ 253.334422][ T6066] team0 (unregistering): Port device team_slave_0 removed [ 253.700101][T12460] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 253.966376][T12364] chnl_net:caif_netlink_parms(): no params data found [ 254.104460][T12493] netlink: 'syz.0.1690': attribute type 75 has an invalid length. [ 254.156612][T12493] siw: device registration error -23 [ 254.264341][T12505] __nla_validate_parse: 7 callbacks suppressed [ 254.264362][T12505] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1690'. [ 254.339158][T12507] netlink: 'syz.3.1691': attribute type 32 has an invalid length. [ 254.517523][T12511] lo: left allmulticast mode [ 254.553055][T12511] tunl0: left allmulticast mode [ 254.570734][T12511] gre0: left allmulticast mode [ 254.609545][T12511] gretap0: left allmulticast mode [ 254.626751][T12520] netlink: 252 bytes leftover after parsing attributes in process `syz.0.1695'. [ 254.639920][T12511] erspan0: left allmulticast mode [ 254.663908][T12511] ip_vti0: left allmulticast mode [ 254.712847][T12364] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.728727][T12364] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.744130][T12364] bridge_slave_0: entered allmulticast mode [ 254.782542][T12364] bridge_slave_0: entered promiscuous mode [ 254.937505][ T5842] Bluetooth: hci3: command tx timeout [ 254.969171][T12364] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.003163][T12364] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.024682][T12364] bridge_slave_1: entered allmulticast mode [ 255.049802][T12364] bridge_slave_1: entered promiscuous mode [ 255.075068][T12529] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1696'. [ 255.084367][T12529] netlink: 'syz.3.1696': attribute type 7 has an invalid length. [ 255.109503][T12529] netlink: 'syz.3.1696': attribute type 8 has an invalid length. [ 255.126560][T12529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1696'. [ 255.268432][T12364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.387612][T12364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.423258][T12545] tipc: Enabling of bearer rejected, failed to enable media [ 255.568246][T12550] syzkaller0: entered promiscuous mode [ 255.573876][T12550] syzkaller0: entered allmulticast mode [ 255.619568][T12563] netlink: 'syz.0.1705': attribute type 75 has an invalid length. [ 255.628690][T12563] siw: device registration error -23 [ 255.664652][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.671080][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.700311][T12571] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1705'. [ 255.917093][T12577] openvswitch: netlink: VXLAN extension message has 12 unknown bytes. [ 256.919723][T12364] team0: Port device team_slave_0 added [ 256.942417][T12364] team0: Port device team_slave_1 added [ 257.016408][ T5842] Bluetooth: hci3: command tx timeout [ 257.142143][T12364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.154335][T12594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1710'. [ 257.171410][T12364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.259127][T12364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.304778][T12364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.340041][T12364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.445972][T12364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.534818][T12609] netlink: 212364 bytes leftover after parsing attributes in process `syz.3.1716'. [ 257.584513][T12609] openvswitch: netlink: Message has 5 unknown bytes. [ 257.725385][T12618] netlink: 'syz.0.1718': attribute type 28 has an invalid length. [ 257.742912][T12618] IPv6: NLM_F_CREATE should be specified when creating new route [ 257.768892][T12364] hsr_slave_0: entered promiscuous mode [ 257.783054][T12629] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1720'. [ 257.793857][T12364] hsr_slave_1: entered promiscuous mode [ 257.808253][T12364] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 257.816397][T12364] Cannot create hsr debugfs directory [ 257.975348][T12637] tipc: Enabling of bearer rejected, failed to enable media [ 258.190539][T12647] netlink: 'syz.2.1724': attribute type 10 has an invalid length. [ 258.340093][T12647] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 258.378178][T12647] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 258.659328][T12669] ip6t_REJECT: ECHOREPLY is not supported [ 258.679848][T12664] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1730'. [ 258.699886][T12670] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1731'. [ 259.096268][ T5842] Bluetooth: hci3: command tx timeout [ 259.472562][T12721] netlink: 'syz.0.1745': attribute type 2 has an invalid length. [ 259.478662][T12364] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 259.571131][T12364] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 259.632830][T12364] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 259.672779][T12364] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 259.722778][T12731] vlan2: entered promiscuous mode [ 260.230418][T12364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.351595][T12364] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.381382][T12764] openvswitch: netlink: Message has -1 unknown bytes. [ 260.400729][ T3057] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.407972][ T3057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.480793][ T3057] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.488011][ T3057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.704749][T12364] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 260.861017][T12791] __nla_validate_parse: 1 callbacks suppressed [ 260.861039][T12791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1761'. [ 260.912700][T12794] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1762'. [ 260.922254][T12794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1762'. [ 260.979590][T12794] geneve0: left promiscuous mode [ 261.008529][T12794] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.031818][T12794] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.070685][T12794] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.090544][T12794] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.111561][T12794] team0: Port device geneve0 removed [ 261.193792][T12809] ip6tnl1: entered promiscuous mode [ 261.228521][T12809] ip6tnl1: entered allmulticast mode [ 261.348302][T12821] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1767'. [ 261.490066][T12828] netlink: 'syz.1.1770': attribute type 4 has an invalid length. [ 261.648413][T12364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.722015][T12842] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1773'. [ 261.965069][T12855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1774'. [ 261.984737][T12855] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 262.552340][ T6046] udevd[6046]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 262.749601][T12897] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1778'. [ 262.872972][T12364] veth0_vlan: entered promiscuous mode [ 262.929884][T12364] veth1_vlan: entered promiscuous mode [ 263.035343][T12364] veth0_macvtap: entered promiscuous mode [ 263.052300][T12911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1782'. [ 263.070349][T12364] veth1_macvtap: entered promiscuous mode [ 263.085394][T12911] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1782'. [ 263.165741][T12364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.179418][T12364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.197841][T12364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.213157][T12915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1783'. [ 263.267533][T12364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.284565][T12920] netlink: 'syz.3.1784': attribute type 1 has an invalid length. [ 263.302095][T12920] netlink: 'syz.3.1784': attribute type 4 has an invalid length. [ 263.330010][T12364] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.355975][T12364] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.380680][T12364] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.392754][T12364] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.464482][T12932] xt_CONNSECMARK: invalid mode: 0 [ 263.499826][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 263.686060][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.745701][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.873110][ T3057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.900044][ T3057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.964964][T12949] pimreg: entered allmulticast mode [ 264.043722][T12957] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 264.051129][T12957] IPv6: NLM_F_CREATE should be set when creating new route [ 264.135983][T12957] unknown channel width for channel at 909000KHz? [ 264.142462][T12957] unknown channel width for channel at 909000KHz? [ 264.317278][T12971] netlink: ct family unspecified [ 264.331850][T12971] openvswitch: netlink: Actions may not be safe on all matching packets [ 265.279641][ T63] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.345391][ T63] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.683945][T13001] netlink: 'syz.1.1805': attribute type 9 has an invalid length. [ 265.840928][ T63] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.942968][T13018] netlink: 'syz.0.1810': attribute type 1 has an invalid length. [ 266.021414][ T63] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.125172][T13018] 8021q: adding VLAN 0 to HW filter on device bond4 [ 266.154711][T13025] veth1: entered promiscuous mode [ 266.198812][T13025] bond4: (slave veth1): Enslaving as an active interface with a down link [ 266.226933][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 266.236433][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 266.245413][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 266.259379][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 266.273336][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 266.359086][T13034] __nla_validate_parse: 9 callbacks suppressed [ 266.359109][T13034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1813'. [ 266.430273][T13034] Bluetooth: MGMT ver 1.23 [ 266.441776][T13037] netlink: 'syz.1.1815': attribute type 9 has an invalid length. [ 266.629540][T13039] gre1: entered promiscuous mode [ 266.634545][T13039] gre1: entered allmulticast mode [ 266.783128][T13054] netlink: 'syz.3.1821': attribute type 1 has an invalid length. [ 266.793201][ T63] bridge_slave_1: left allmulticast mode [ 266.820359][ T63] bridge_slave_1: left promiscuous mode [ 266.828031][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.841441][ T63] bridge_slave_0: left allmulticast mode [ 266.860245][ T63] bridge_slave_0: left promiscuous mode [ 266.871735][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.201223][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 267.212881][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.223424][ T63] bond0 (unregistering): Released all slaves [ 267.304729][T13055] bond0: (slave gretap1): making interface the new active one [ 267.328195][T13055] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 267.361979][T13072] sctp: [Deprecated]: syz.1.1825 (pid 13072) Use of struct sctp_assoc_value in delayed_ack socket option. [ 267.361979][T13072] Use struct sctp_sack_info instead [ 267.371873][T13030] lo speed is unknown, defaulting to 1000 [ 267.403530][T13064] : entered promiscuous mode [ 267.466468][T13075] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 267.495740][T13075] sock: sock_timestamping_bind_phc: sock not bind to device [ 267.841837][T13089] netlink: 'syz.2.1828': attribute type 12 has an invalid length. [ 267.854912][T13089] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1828'. [ 267.995733][T13092] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1829'. [ 268.014083][T13092] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 268.062787][T13095] siw: device registration error -23 [ 268.083164][T13092] team0: Refused to change device type [ 268.139614][T13099] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1830'. [ 268.164339][T13101] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1832'. [ 268.213061][T13101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1832'. [ 268.258736][T13101] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1832'. [ 268.296683][ T5842] Bluetooth: hci3: command tx timeout [ 268.522030][T13108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1833'. [ 268.598795][ T63] hsr_slave_0: left promiscuous mode [ 268.614089][ T63] hsr_slave_1: left promiscuous mode [ 268.631751][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.648540][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.661741][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.673270][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.762932][ T63] veth1_macvtap: left promiscuous mode [ 268.776646][ T63] veth0_macvtap: left promiscuous mode [ 268.782349][ T63] veth1_vlan: left promiscuous mode [ 268.797636][ T63] veth0_vlan: left promiscuous mode [ 268.822240][T13128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1840'. [ 268.836331][T13128] netlink: 'syz.0.1840': attribute type 5 has an invalid length. [ 268.845539][T13128] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1840'. [ 269.028863][T13133] xt_CT: No such helper "snmp_trap" [ 269.289744][ T63] team0 (unregistering): Port device team_slave_1 removed [ 269.329204][ T63] team0 (unregistering): Port device team_slave_0 removed [ 269.729204][T13030] chnl_net:caif_netlink_parms(): no params data found [ 269.886646][T13142] openvswitch: netlink: Message has 5 unknown bytes. [ 270.030731][T13149] netlink: 'syz.1.1845': attribute type 1 has an invalid length. [ 270.191127][T13030] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.209750][T13030] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.214514][T13161] x_tables: duplicate underflow at hook 1 [ 270.230142][T13030] bridge_slave_0: entered allmulticast mode [ 270.262659][T13030] bridge_slave_0: entered promiscuous mode [ 270.295823][T13167] veth1_macvtap: left promiscuous mode [ 270.301941][T13167] macsec0: entered allmulticast mode [ 270.338642][T13168] veth1_macvtap: entered promiscuous mode [ 270.348057][T13168] veth1_macvtap: entered allmulticast mode [ 270.370134][T13168] macsec0: left allmulticast mode [ 270.375215][T13168] veth1_macvtap: left allmulticast mode [ 270.381254][ T5842] Bluetooth: hci3: command tx timeout [ 270.415663][T13030] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.438502][T13030] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.445798][T13030] bridge_slave_1: entered allmulticast mode [ 270.456119][T13030] bridge_slave_1: entered promiscuous mode [ 270.557356][T13030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.567822][T13172] netlink: 'syz.3.1851': attribute type 9 has an invalid length. [ 270.591029][T13030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.725564][T13030] team0: Port device team_slave_0 added [ 270.828691][T13030] team0: Port device team_slave_1 added [ 270.862600][T13188] FAULT_INJECTION: forcing a failure. [ 270.862600][T13188] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 270.878903][T13188] CPU: 1 UID: 0 PID: 13188 Comm: syz.3.1858 Not tainted 6.15.0-rc5-syzkaller-00130-g12f4ee312c95 #0 PREEMPT(full) [ 270.878944][T13188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 270.878967][T13188] Call Trace: [ 270.878979][T13188] [ 270.878987][T13188] dump_stack_lvl+0x189/0x250 [ 270.879029][T13188] ? __lock_acquire+0xaac/0xd20 [ 270.879060][T13188] ? __pfx_dump_stack_lvl+0x10/0x10 [ 270.879087][T13188] ? __pfx__printk+0x10/0x10 [ 270.879106][T13188] ? __might_fault+0xb0/0x130 [ 270.879142][T13188] should_fail_ex+0x414/0x560 [ 270.879167][T13188] _copy_from_user+0x2d/0xb0 [ 270.879195][T13188] ___sys_sendmsg+0x158/0x2a0 [ 270.879223][T13188] ? __pfx____sys_sendmsg+0x10/0x10 [ 270.879287][T13188] ? __fget_files+0x2a/0x420 [ 270.879311][T13188] ? __fget_files+0x3a0/0x420 [ 270.879346][T13188] __x64_sys_sendmsg+0x19b/0x260 [ 270.879385][T13188] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 270.879430][T13188] ? do_syscall_64+0xba/0x210 [ 270.879459][T13188] do_syscall_64+0xf6/0x210 [ 270.879483][T13188] ? clear_bhb_loop+0x45/0xa0 [ 270.879507][T13188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.879525][T13188] RIP: 0033:0x7fc4ca58e969 [ 270.879551][T13188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.879571][T13188] RSP: 002b:00007fc4cb40d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 270.879591][T13188] RAX: ffffffffffffffda RBX: 00007fc4ca7b5fa0 RCX: 00007fc4ca58e969 [ 270.879604][T13188] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 270.879615][T13188] RBP: 00007fc4cb40d090 R08: 0000000000000000 R09: 0000000000000000 [ 270.879626][T13188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.879635][T13188] R13: 0000000000000000 R14: 00007fc4ca7b5fa0 R15: 00007ffee75ee658 [ 270.879664][T13188] [ 271.172034][T13195] netlink: 'syz.3.1860': attribute type 1 has an invalid length. [ 271.199797][T13030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.207306][T13030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.235044][T13030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.292286][T13202] siw: device registration error -23 [ 271.320466][T13030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.362978][T13030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.400664][T13203] __nla_validate_parse: 8 callbacks suppressed [ 271.400685][T13203] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1861'. [ 271.482684][T13030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.863674][T13030] hsr_slave_0: entered promiscuous mode [ 271.876841][T13030] hsr_slave_1: entered promiscuous mode [ 271.883153][T13030] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 271.904613][T13030] Cannot create hsr debugfs directory [ 271.936845][T13222] openvswitch: netlink: Multiple metadata blocks provided [ 272.006822][T13225] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1865'. [ 272.142095][T13232] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1868'. [ 272.191257][T13235] FAULT_INJECTION: forcing a failure. [ 272.191257][T13235] name failslab, interval 1, probability 0, space 0, times 1 [ 272.233376][T13235] CPU: 0 UID: 0 PID: 13235 Comm: syz.3.1870 Not tainted 6.15.0-rc5-syzkaller-00130-g12f4ee312c95 #0 PREEMPT(full) [ 272.233405][T13235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 272.233417][T13235] Call Trace: [ 272.233425][T13235] [ 272.233434][T13235] dump_stack_lvl+0x189/0x250 [ 272.233471][T13235] ? __pfx_dump_stack_lvl+0x10/0x10 [ 272.233498][T13235] ? __pfx__printk+0x10/0x10 [ 272.233541][T13235] ? __pfx___might_resched+0x10/0x10 [ 272.233565][T13235] should_fail_ex+0x414/0x560 [ 272.233591][T13235] should_failslab+0xa8/0x100 [ 272.233619][T13235] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 272.233645][T13235] ? __alloc_skb+0x112/0x2d0 [ 272.233673][T13235] __alloc_skb+0x112/0x2d0 [ 272.233700][T13235] netlink_sendmsg+0x5c6/0xb30 [ 272.233731][T13235] ? __pfx_netlink_sendmsg+0x10/0x10 [ 272.233756][T13235] ? aa_sock_msg_perm+0x94/0x160 [ 272.233776][T13235] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 272.233794][T13235] ? __pfx_netlink_sendmsg+0x10/0x10 [ 272.233816][T13235] __sock_sendmsg+0x219/0x270 [ 272.233838][T13235] ____sys_sendmsg+0x505/0x830 [ 272.233868][T13235] ? __pfx_____sys_sendmsg+0x10/0x10 [ 272.233903][T13235] ? import_iovec+0x74/0xa0 [ 272.233933][T13235] ___sys_sendmsg+0x21f/0x2a0 [ 272.233960][T13235] ? __pfx____sys_sendmsg+0x10/0x10 [ 272.234030][T13235] ? __fget_files+0x2a/0x420 [ 272.234054][T13235] ? __fget_files+0x3a0/0x420 [ 272.234091][T13235] __x64_sys_sendmsg+0x19b/0x260 [ 272.234120][T13235] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 272.234165][T13235] ? do_syscall_64+0xba/0x210 [ 272.234194][T13235] do_syscall_64+0xf6/0x210 [ 272.234220][T13235] ? clear_bhb_loop+0x45/0xa0 [ 272.234245][T13235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.234264][T13235] RIP: 0033:0x7fc4ca58e969 [ 272.234282][T13235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.234299][T13235] RSP: 002b:00007fc4cb40d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 272.234321][T13235] RAX: ffffffffffffffda RBX: 00007fc4ca7b5fa0 RCX: 00007fc4ca58e969 [ 272.234336][T13235] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 272.234348][T13235] RBP: 00007fc4cb40d090 R08: 0000000000000000 R09: 0000000000000000 [ 272.234361][T13235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.234372][T13235] R13: 0000000000000000 R14: 00007fc4ca7b5fa0 R15: 00007ffee75ee658 [ 272.234403][T13235] [ 272.493988][ T5842] Bluetooth: hci3: command tx timeout [ 272.740951][T13239] netlink: 'syz.3.1872': attribute type 5 has an invalid length. [ 272.754694][T13241] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1871'. [ 272.764270][T13241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1871'. [ 272.983210][T13252] netlink: 'syz.0.1875': attribute type 75 has an invalid length. [ 273.019040][T13252] siw: device registration error -23 [ 273.081519][T13253] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1875'. [ 273.303041][T13265] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1879'. [ 273.352286][T13030] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 273.412224][T13030] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 273.427000][T13273] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1881'. [ 273.444140][T13030] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 273.457404][T13030] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 273.467850][T13273] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1881'. [ 273.646631][T13030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.682044][T13030] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.697955][T12870] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.705146][T12870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.745233][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.752493][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.801058][T13283] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1887'. [ 274.078313][T13295] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 274.225026][T13305] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 274.305792][T13312] x_tables: arp_tables: MARK.2 target: invalid size 8 (kernel) != (user) 0 [ 274.400910][T13030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.537184][ T5842] Bluetooth: hci3: command tx timeout [ 275.057999][T13030] veth0_vlan: entered promiscuous mode [ 275.090774][T13030] veth1_vlan: entered promiscuous mode [ 275.217682][T13030] veth0_macvtap: entered promiscuous mode [ 275.245354][T13358] netlink: 'syz.1.1909': attribute type 7 has an invalid length. [ 275.263979][T13030] veth1_macvtap: entered promiscuous mode [ 275.275307][T13358] netlink: 'syz.1.1909': attribute type 8 has an invalid length. [ 275.356616][T13030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.367878][T13030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.382490][T13030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.432752][T13030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.488492][T13030] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.533392][T13030] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.557305][T13367] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 275.566381][T13030] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.575136][T13030] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.820570][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.859113][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.991628][T12870] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.032858][T12870] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.324063][T13405] tipc: Started in network mode [ 276.344645][T13405] tipc: Node identity 6af528197123, cluster identity 4711 [ 276.359475][T13405] tipc: Enabled bearer , priority 0 [ 276.389169][T13399] syzkaller0: entered promiscuous mode [ 276.394743][T13399] syzkaller0: entered allmulticast mode [ 276.431252][T13399] tipc: Resetting bearer [ 276.469959][T13396] tipc: Resetting bearer [ 276.509347][T13411] __nla_validate_parse: 4 callbacks suppressed [ 276.509366][T13411] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1925'. [ 276.530311][T13396] tipc: Disabling bearer [ 276.544435][T13413] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1926'. [ 276.736581][ T3057] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.880156][ T3057] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.131539][ T3057] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.321093][ T3057] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.416425][ T11] block nbd0: Possible stuck request ffff888024bce000: control (read@0,4096B). Runtime 180 seconds [ 277.448610][ T3057] bridge_slave_1: left allmulticast mode [ 277.454304][ T3057] bridge_slave_1: left promiscuous mode [ 277.461748][ T3057] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.471849][ T3057] bridge_slave_0: left allmulticast mode [ 277.477842][ T3057] bridge_slave_0: left promiscuous mode [ 277.483595][ T3057] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.831108][T13423] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1930'. [ 277.926792][ T3057] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.940796][ T3057] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.967764][ T3057] bond0 (unregistering): Released all slaves [ 278.021426][T13423] pim6reg: entered allmulticast mode [ 278.055038][T13430] pim6reg: left allmulticast mode [ 278.262319][T13422] syzkaller0: entered promiscuous mode [ 278.269015][T13422] syzkaller0: entered allmulticast mode [ 278.370197][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 278.385184][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 278.394959][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 278.411226][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 278.420411][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 279.726380][T13442] IPVS: Error connecting to the multicast addr [ 279.935289][T13460] mac80211_hwsim hwsim11 syzkaller0: Caught tx_queue_len zero misconfig [ 280.164774][T13472] x_tables: duplicate underflow at hook 1 [ 280.359270][T13478] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1942'. [ 280.456607][ T5842] Bluetooth: hci3: command tx timeout [ 280.528566][T13483] netlink: 'syz.0.1944': attribute type 1 has an invalid length. [ 280.594598][T13445] lo speed is unknown, defaulting to 1000 [ 280.933939][T13483] 8021q: adding VLAN 0 to HW filter on device bond6 [ 280.966896][T13487] bond6: (slave ip6gretap1): making interface the new active one [ 280.997738][T13487] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 281.026341][T13487] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 281.040952][T13487] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 281.136900][ T3057] hsr_slave_0: left promiscuous mode [ 281.148604][ T3057] hsr_slave_1: left promiscuous mode [ 281.167490][ T3057] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.185704][ T3057] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.201329][ T3057] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.209462][ T3057] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.230953][ T3057] veth1_macvtap: left promiscuous mode [ 281.237283][ T3057] veth0_macvtap: left promiscuous mode [ 281.242948][ T3057] veth1_vlan: left promiscuous mode [ 281.248877][ T3057] veth0_vlan: left promiscuous mode [ 281.330881][T13521] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1953'. [ 281.761899][ T3057] team0 (unregistering): Port device team_slave_1 removed [ 281.809596][ T3057] team0 (unregistering): Port device team_slave_0 removed [ 282.047470][ T71] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 282.207359][T13504] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1948'. [ 282.435208][T13526] veth7: entered allmulticast mode [ 282.456750][T13529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1955'. [ 282.536100][ T5842] Bluetooth: hci3: command tx timeout [ 282.556933][T13535] veth9: entered allmulticast mode [ 282.669231][T13539] lo: entered promiscuous mode [ 282.692411][T13539] tunl0: entered promiscuous mode [ 282.753069][T13539] gre0: entered promiscuous mode [ 282.797259][T13539] gretap0: entered promiscuous mode [ 282.830989][T13539] erspan0: entered promiscuous mode [ 282.849384][T13539] ip_vti0: entered promiscuous mode [ 282.885261][T13539] ip6_vti0: entered promiscuous mode [ 282.929900][T13539] ip6tnl0: entered promiscuous mode [ 282.962204][T13539] ip6gre0: entered promiscuous mode [ 282.983353][T13539] ip6gretap0: entered promiscuous mode [ 283.021709][T13539] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.029625][T13539] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.059205][T13539] bridge0: entered promiscuous mode [ 283.216795][ T63] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 283.372340][T13445] chnl_net:caif_netlink_parms(): no params data found [ 283.931056][T13584] netlink: 'syz.0.1966': attribute type 1 has an invalid length. [ 283.942405][T13585] netlink: 'syz.1.1968': attribute type 21 has an invalid length. [ 283.966129][T13588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1969'. [ 284.009187][T13445] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.018394][T13445] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.025709][T13445] bridge_slave_0: entered allmulticast mode [ 284.043023][T13445] bridge_slave_0: entered promiscuous mode [ 284.052805][T13589] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1968'. [ 284.064650][T13589] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 284.085267][T13597] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.1971'. [ 284.099152][T13585] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1968'. [ 284.122129][T13445] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.129476][T13445] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.137126][T13445] bridge_slave_1: entered allmulticast mode [ 284.144933][T13445] bridge_slave_1: entered promiscuous mode [ 284.265780][T13445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.283598][T13604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1974'. [ 284.290535][T13445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.324350][T13607] veth1_macvtap: left promiscuous mode [ 284.333202][T13607] macsec0: entered promiscuous mode [ 284.387573][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 284.403160][T13607] veth1_macvtap: entered promiscuous mode [ 284.410327][T13607] macsec0: left promiscuous mode [ 284.440308][T13445] team0: Port device team_slave_0 added [ 284.464919][T13445] team0: Port device team_slave_1 added [ 284.503134][T13608] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 284.524526][T13608] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 284.544577][T13616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1978'. [ 284.554071][T13616] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1978'. [ 284.598553][T13445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.606915][T13445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.634046][ T5842] Bluetooth: hci3: command tx timeout [ 284.640143][T13445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.653818][T13445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.661668][T13445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.687965][T13445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.889496][T13445] hsr_slave_0: entered promiscuous mode [ 284.902275][T13445] hsr_slave_1: entered promiscuous mode [ 284.909761][T13445] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 284.918257][T13445] Cannot create hsr debugfs directory [ 285.267174][T13639] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 285.429615][T13648] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1989'. [ 285.521428][ T71] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 285.541955][T13656] netlink: 'syz.2.1990': attribute type 75 has an invalid length. [ 285.566020][T13656] siw: device registration error -23 [ 285.701781][T13659] C: renamed from team_slave_0 (while UP) [ 285.718474][T13659] netlink: 'syz.0.1993': attribute type 1 has an invalid length. [ 285.730611][T13659] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 285.737941][T13666] netlink: 'syz.3.1995': attribute type 15 has an invalid length. [ 285.962544][T13678] openvswitch: netlink: Multiple metadata blocks provided [ 286.031194][T13445] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 286.057934][T13445] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 286.082302][T13445] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 286.112615][T13445] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 286.134945][T13682] netlink: 'syz.2.1999': attribute type 1 has an invalid length. [ 286.264645][T13445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.290897][T13445] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.303107][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.310344][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.332005][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.339207][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.586102][T13445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.647347][ T3057] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 286.696255][ T5842] Bluetooth: hci3: command tx timeout [ 286.774573][T13697] nbd: nbd0 already in use [ 286.780391][T13696] nbd: nbd0 already in use [ 286.911014][T13702] netlink: 'syz.3.2004': attribute type 7 has an invalid length. [ 287.249914][T13701] lo speed is unknown, defaulting to 1000 [ 287.312163][T13723] netlink: 'syz.2.2008': attribute type 75 has an invalid length. [ 287.341983][T13719] siw: device registration error -23 [ 287.395891][T13445] veth0_vlan: entered promiscuous mode [ 287.406881][T13723] __nla_validate_parse: 10 callbacks suppressed [ 287.406899][T13723] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2008'. [ 287.434643][T13445] veth1_vlan: entered promiscuous mode [ 287.544240][T13445] veth0_macvtap: entered promiscuous mode [ 287.620899][T13445] veth1_macvtap: entered promiscuous mode [ 287.787966][ T71] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 287.919281][T13445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.931483][T13445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.952408][T13445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.981995][T13743] netlink: 1044 bytes leftover after parsing attributes in process `syz.3.2012'. [ 288.000625][T13445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.032269][T13445] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.046461][T13445] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.065513][T13445] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.084931][T13445] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.294174][ T3057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.324082][ T3057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.392507][T12870] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.401189][T13751] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2018'. [ 288.414605][T12870] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.721033][T13762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2022'. [ 288.746765][T13762] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2022'. [ 288.931418][ T71] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 288.979059][T13775] xt_hashlimit: size too large, truncated to 1048576 [ 289.190600][T13773] syzkaller0: entered promiscuous mode [ 289.196311][T13773] syzkaller0: entered allmulticast mode [ 290.126847][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 290.840520][ T71] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.848877][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 290.860418][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 290.876349][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 290.886751][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 290.894560][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 291.035105][ T71] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.111945][T13806] veth1_to_team: entered promiscuous mode [ 291.137866][T13812] netlink: 'syz.2.2034': attribute type 75 has an invalid length. [ 291.172062][T13812] siw: device registration error -23 [ 291.208052][ T71] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.229253][T13807] veth1_to_team: left promiscuous mode [ 291.238877][T12865] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 291.254044][T13818] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2034'. [ 291.578872][ T71] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.594531][T13832] sock: sock_timestamping_bind_phc: sock not bind to device [ 291.809811][T13839] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 291.839152][T13834] syzkaller0: entered promiscuous mode [ 291.846230][T13834] syzkaller0: entered allmulticast mode [ 291.932086][T13843] x_tables: duplicate underflow at hook 2 [ 291.958869][T13847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2046'. [ 292.378967][ T63] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 292.937778][ T5839] Bluetooth: hci3: command tx timeout [ 293.284221][T13801] lo speed is unknown, defaulting to 1000 [ 293.497708][ T6066] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 293.539944][T13861] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 293.556269][T13862] netlink: 'syz.3.2050': attribute type 75 has an invalid length. [ 293.622278][T13865] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2050'. [ 293.711794][T13852] netlink: 'syz.1.2047': attribute type 5 has an invalid length. [ 293.757675][ T71] bridge_slave_1: left allmulticast mode [ 293.763372][ T71] bridge_slave_1: left promiscuous mode [ 293.792689][ T71] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.847885][ T71] bridge_slave_0: left allmulticast mode [ 293.871678][ T71] bridge_slave_0: left promiscuous mode [ 293.890897][ T71] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.437132][ T71] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 294.448435][ T71] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 294.459386][ T71] bond0 (unregistering): Released all slaves [ 294.660322][T12865] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 294.809482][T13894] syzkaller0: entered promiscuous mode [ 294.815129][T13894] syzkaller0: entered allmulticast mode [ 295.016864][ T5839] Bluetooth: hci3: command tx timeout [ 295.085132][T13904] netlink: 'syz.2.2064': attribute type 75 has an invalid length. [ 295.107642][T13904] siw: device registration error -23 [ 295.177430][T13907] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2064'. [ 295.411624][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 295.421614][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 295.431073][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 295.434506][T13912] ip6t_srh: unknown srh match flags 536B [ 295.449371][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 295.464424][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 295.576377][ T5839] Bluetooth: hci0: command tx timeout [ 295.798511][T12865] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 296.929274][ T6066] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 297.096322][ T5839] Bluetooth: hci3: command tx timeout [ 297.585980][ T5839] Bluetooth: hci4: command tx timeout [ 297.645796][ T71] hsr_slave_0: left promiscuous mode [ 297.653758][ T71] hsr_slave_1: left promiscuous mode [ 297.671813][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.679493][ T71] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.695309][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.697703][T13937] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2071'. [ 297.703128][ T71] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.734863][T13938] netlink: 'syz.2.2072': attribute type 1 has an invalid length. [ 297.761403][ T71] veth1_macvtap: left promiscuous mode [ 297.769370][ T71] veth0_macvtap: left promiscuous mode [ 297.775201][ T71] veth1_vlan: left promiscuous mode [ 297.784332][ T71] veth0_vlan: left promiscuous mode [ 297.843028][T13940] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2073'. [ 298.066572][T12865] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 298.273100][ T71] team0 (unregistering): Port device team_slave_1 removed [ 298.318445][ T71] team0 (unregistering): Port device team_slave_0 removed [ 298.682035][T13801] chnl_net:caif_netlink_parms(): no params data found [ 298.708459][T13938] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 298.801463][T13910] lo speed is unknown, defaulting to 1000 [ 299.006967][T13957] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2076'. [ 299.115252][T13964] netlink: 'syz.2.2078': attribute type 1 has an invalid length. [ 299.176618][ T5839] Bluetooth: hci3: command tx timeout [ 299.182531][T13968] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2078'. [ 299.215492][T12865] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 299.226949][T13966] syzkaller0: entered promiscuous mode [ 299.232606][T13966] syzkaller0: entered allmulticast mode [ 299.242020][T13801] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.249827][T13801] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.257428][T13801] bridge_slave_0: entered allmulticast mode [ 299.265558][T13801] bridge_slave_0: entered promiscuous mode [ 299.424270][T13974] netlink: 'syz.3.2079': attribute type 75 has an invalid length. [ 299.510452][T13976] netlink: 'syz.2.2080': attribute type 10 has an invalid length. [ 299.656051][ T5839] Bluetooth: hci4: command tx timeout [ 300.376524][T12865] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 300.571394][T13801] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.580292][T13801] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.588437][T13801] bridge_slave_1: entered allmulticast mode [ 300.595642][T13801] bridge_slave_1: entered promiscuous mode [ 300.729118][T13801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.772215][T13801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.963248][T13801] team0: Port device team_slave_0 added [ 300.981035][T13801] team0: Port device team_slave_1 added [ 301.152928][T13801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.179646][T13801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.234185][T13801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.263369][T13801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.286119][T13801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.368864][T13801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.414307][T14013] xt_TPROXY: Can be used only with -p tcp or -p udp [ 301.496676][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 301.504830][T14019] netlink: 'syz.1.2092': attribute type 75 has an invalid length. [ 301.541362][T14012] siw: device registration error -23 [ 301.621622][T14011] syzkaller0: entered promiscuous mode [ 301.622101][T14017] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2092'. [ 301.627192][T14011] syzkaller0: entered allmulticast mode [ 301.658987][T13801] hsr_slave_0: entered promiscuous mode [ 301.675357][T13801] hsr_slave_1: entered promiscuous mode [ 301.683395][T13801] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 301.702932][T13801] Cannot create hsr debugfs directory [ 301.746080][ T5839] Bluetooth: hci4: command tx timeout [ 302.636531][T12865] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 303.061455][T14030] netem: unknown loss type 0 [ 303.066596][T14030] netem: change failed [ 303.112610][T13910] chnl_net:caif_netlink_parms(): no params data found [ 303.272019][T14039] netlink: 'syz.3.2096': attribute type 21 has an invalid length. [ 303.312873][T14039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2096'. [ 303.375099][T14045] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 303.731702][T13910] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.741484][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 303.768425][T13910] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.783978][T14066] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2103'. [ 303.788452][T13910] bridge_slave_0: entered allmulticast mode [ 303.816002][ T5839] Bluetooth: hci4: command tx timeout [ 303.840246][T13910] bridge_slave_0: entered promiscuous mode [ 303.849983][T13910] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.857615][T13910] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.864988][T13910] bridge_slave_1: entered allmulticast mode [ 303.874341][T13910] bridge_slave_1: entered promiscuous mode [ 304.004073][T14070] netlink: 'syz.1.2104': attribute type 75 has an invalid length. [ 304.013088][T14070] siw: device registration error -23 [ 304.088529][T14073] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2104'. [ 304.150767][T13910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.164502][T13910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.243326][T13910] team0: Port device team_slave_0 added [ 304.335459][T14079] syzkaller0: entered promiscuous mode [ 304.341604][T14079] syzkaller0: entered allmulticast mode [ 304.351442][T13910] team0: Port device team_slave_1 added [ 304.605353][T14089] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2107'. [ 304.626125][T14089] openvswitch: netlink: Flow key attr not present in new flow. [ 304.888306][T12865] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 305.788045][T13910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.795129][T13910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.821616][T13910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.836410][T13910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.843422][T13910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.871699][T13910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.017296][ T71] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 306.093019][T13910] hsr_slave_0: entered promiscuous mode [ 306.137006][T13910] hsr_slave_1: entered promiscuous mode [ 306.143401][T13910] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 306.161377][T13910] Cannot create hsr debugfs directory [ 306.388944][T14116] netlink: 'syz.3.2118': attribute type 2 has an invalid length. [ 306.476347][T14114] xt_CT: No such helper "pptp" [ 306.527610][T13801] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 306.661623][T13801] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 306.710378][T13801] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 306.765448][T13910] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.778106][T13910] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 306.796347][T14130] netlink: 'syz.3.2120': attribute type 2 has an invalid length. [ 306.804206][T13801] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 306.854811][T14133] syzkaller0: entered promiscuous mode [ 306.863866][T14133] syzkaller0: entered allmulticast mode [ 306.897673][T13910] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.924541][T13910] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 307.003086][T14137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2123'. [ 307.117110][ T3057] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 307.498665][ T11] block nbd0: Possible stuck request ffff888024bce000: control (read@0,4096B). Runtime 210 seconds [ 307.808981][T14145] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2125'. [ 308.246346][ T6066] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 308.394927][T13910] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.405805][T13910] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 308.429316][T14139] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 308.489858][T14146] 8021q: adding VLAN 0 to HW filter on device bond7 [ 308.530087][T14146] bond0: (slave bond7): Enslaving as an active interface with a down link [ 308.721077][T14158] netlink: 'syz.3.2129': attribute type 2 has an invalid length. [ 308.888515][T13801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.985026][T13801] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.994158][T14170] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2132'. [ 309.059849][T13910] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 309.113462][ T6066] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.120772][ T6066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.137491][T13910] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 309.152585][T13910] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 309.167914][T13910] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 309.175427][T14177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2133'. [ 309.213019][T12865] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.220294][T12865] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.283095][T14179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2133'. [ 309.325075][T13801] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 309.347777][T13801] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 309.367968][T12870] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 309.405679][T14184] syz.2.2134: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 309.450048][T14184] CPU: 0 UID: 0 PID: 14184 Comm: syz.2.2134 Not tainted 6.15.0-rc5-syzkaller-00130-g12f4ee312c95 #0 PREEMPT(full) [ 309.450079][T14184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 309.450091][T14184] Call Trace: [ 309.450100][T14184] [ 309.450108][T14184] dump_stack_lvl+0x189/0x250 [ 309.450142][T14184] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 309.450169][T14184] ? __pfx_dump_stack_lvl+0x10/0x10 [ 309.450196][T14184] ? __pfx__printk+0x10/0x10 [ 309.450215][T14184] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 309.450247][T14184] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 309.450287][T14184] warn_alloc+0x214/0x310 [ 309.450315][T14184] ? __pfx___schedule+0x10/0x10 [ 309.450339][T14184] ? __pfx_warn_alloc+0x10/0x10 [ 309.450365][T14184] ? kasan_save_track+0x4f/0x80 [ 309.450386][T14184] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 309.450408][T14184] ? xskq_create+0x56/0x170 [ 309.450431][T14184] ? __x64_sys_setsockopt+0x18b/0x220 [ 309.450453][T14184] ? do_syscall_64+0xf6/0x210 [ 309.450475][T14184] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.450506][T14184] __vmalloc_node_range_noprof+0x125/0x12c0 [ 309.450602][T14184] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 309.450629][T14184] ? xskq_create+0x56/0x170 [ 309.450653][T14184] ? __kasan_kmalloc+0x93/0xb0 [ 309.450681][T14184] vmalloc_user_noprof+0x74/0x80 [ 309.450709][T14184] ? xskq_create+0xbf/0x170 [ 309.450729][T14184] xskq_create+0xbf/0x170 [ 309.450754][T14184] xsk_init_queue+0xb0/0x110 [ 309.450779][T14184] xsk_setsockopt+0x43f/0x710 [ 309.450803][T14184] ? __pfx_xsk_setsockopt+0x10/0x10 [ 309.450834][T14184] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 309.450852][T14184] ? __pfx_xsk_setsockopt+0x10/0x10 [ 309.450870][T14184] do_sock_setsockopt+0x257/0x3e0 [ 309.450893][T14184] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 309.450911][T14184] ? __fget_files+0x2a/0x420 [ 309.450936][T14184] ? __fget_files+0x3a0/0x420 [ 309.450955][T14184] ? __fget_files+0x2a/0x420 [ 309.450982][T14184] __x64_sys_setsockopt+0x18b/0x220 [ 309.451008][T14184] do_syscall_64+0xf6/0x210 [ 309.451028][T14184] ? clear_bhb_loop+0x45/0xa0 [ 309.451053][T14184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.451068][T14184] RIP: 0033:0x7f574ff8e969 [ 309.451083][T14184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.451097][T14184] RSP: 002b:00007f5750d92038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 309.451114][T14184] RAX: ffffffffffffffda RBX: 00007f57501b5fa0 RCX: 00007f574ff8e969 [ 309.451126][T14184] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 309.451135][T14184] RBP: 00007f5750010ab1 R08: 0000000000000004 R09: 0000000000000000 [ 309.451145][T14184] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 309.451155][T14184] R13: 0000000000000000 R14: 00007f57501b5fa0 R15: 00007ffdb7f95838 [ 309.451180][T14184] [ 309.453109][T14184] Mem-Info: [ 309.514151][T13910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.551793][T14184] active_anon:4922 inactive_anon:0 isolated_anon:0 [ 309.551793][T14184] active_file:1442 inactive_file:39936 isolated_file:0 [ 309.551793][T14184] unevictable:768 dirty:81 writeback:0 [ 309.551793][T14184] slab_reclaimable:10673 slab_unreclaimable:119304 [ 309.551793][T14184] mapped:29279 shmem:1379 pagetables:762 [ 309.551793][T14184] sec_pagetables:0 bounce:0 [ 309.551793][T14184] kernel_misc_reclaimable:0 [ 309.551793][T14184] free:1319834 free_pcp:611 free_cma:0 [ 309.821205][T14184] Node 0 active_anon:19512kB inactive_anon:0kB active_file:5768kB inactive_file:159544kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117312kB dirty:324kB writeback:0kB shmem:3980kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11908kB pagetables:3284kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 309.861050][T14184] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 309.898601][T14184] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 309.912702][T14188] syzkaller0: entered promiscuous mode [ 309.932447][T14188] syzkaller0: entered allmulticast mode [ 309.938058][T14184] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 309.938112][T14184] Node 0 DMA32 free:1338484kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:19620kB inactive_anon:0kB active_file:5768kB inactive_file:159452kB unevictable:1536kB writepending:328kB present:3129332kB managed:2564140kB mlocked:0kB bounce:0kB free_pcp:2712kB local_pcp:884kB free_cma:0kB [ 309.938168][T14184] lowmem_reserve[]: 0 0 0 0 0 [ 309.938218][T14184] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 309.938270][T14184] lowmem_reserve[]: 0 0 0 0 0 [ 309.938313][T14184] Node 1 Normal free:3910596kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 309.938367][T14184] lowmem_reserve[]: 0 0 0 0 0 [ 309.938410][T14184] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB [ 309.966716][T13910] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.065182][T14184] 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 310.073127][T14184] Node 0 DMA32: 324*4kB (UM) 125*8kB (UME) 154*16kB (UME) 133*32kB (UME) 548*64kB (UME) 889*128kB (UME) 531*256kB (UME) 277*512kB (UME) 64*1024kB (UM) 10*2048kB (UM) 200*4096kB (UM) = 1340856kB [ 310.094450][T14184] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 310.106878][T14184] Node 1 Normal: 223*4kB (UE) 57*8kB (UME) 38*16kB (UME) 185*32kB (UME) 96*64kB (UME) 26*128kB (UME) 10*256kB (UME) 15*512kB (UM) 4*1024kB (UME) 2*2048kB (UE) 946*4096kB (M) = 3910596kB [ 310.126589][T14184] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 310.137202][T14184] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 310.186479][T14184] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 310.232313][T14184] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 310.264847][T14184] 42754 total pagecache pages [ 310.271016][T14184] 0 pages in swap cache [ 310.275235][T14184] Free swap = 124996kB [ 310.280613][T14184] Total swap = 124996kB [ 310.289628][T14184] 2097051 pages RAM [ 310.293477][T14184] 0 pages HighMem/MovableOnly [ 310.299155][T14184] 424358 pages reserved [ 310.303356][T14184] 0 pages cma reserved [ 310.606835][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 311.512554][ T6066] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.519774][ T6066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.573867][ T6066] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.581102][ T6066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.607813][T14205] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2139'. [ 311.663600][T13801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.707183][T12865] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 312.077954][T14221] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2144'. [ 312.264245][T14213] lo speed is unknown, defaulting to 1000 [ 312.615308][T14238] xt_connbytes: Forcing CT accounting to be enabled [ 312.642005][T14241] : entered promiscuous mode [ 312.648028][T14238] --map-set only usable from mangle table [ 312.732159][T13910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.846280][T12865] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 312.910292][T13801] veth0_vlan: entered promiscuous mode [ 313.041691][T13910] veth0_vlan: entered promiscuous mode [ 313.083809][T13801] veth1_vlan: entered promiscuous mode [ 313.107085][T14253] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2152'. [ 313.199990][T14251] syzkaller0: entered promiscuous mode [ 313.205654][T14251] syzkaller0: entered allmulticast mode [ 313.235065][T13910] veth1_vlan: entered promiscuous mode [ 313.292072][T14256] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2153'. [ 313.519265][T14263] x_tables: duplicate underflow at hook 2 [ 313.988770][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 314.543260][T14256] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 314.637604][T13910] veth0_macvtap: entered promiscuous mode [ 314.697596][T13910] veth1_macvtap: entered promiscuous mode [ 314.727432][T13801] veth0_macvtap: entered promiscuous mode [ 314.735359][T14265] netlink: 'syz.3.2157': attribute type 8 has an invalid length. [ 314.752832][T13801] veth1_macvtap: entered promiscuous mode [ 314.786856][T13910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.806600][T13910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.819340][T13910] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.850339][T13910] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.878188][T13801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.897956][T13801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.915451][T13801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.926799][T13801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.939020][T13801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.954672][T13910] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.976023][T13910] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.984776][T13910] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.995492][T13910] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.007662][T14275] tipc: Enabling of bearer rejected, failed to enable media [ 315.019898][T13801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.030988][T13801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.067876][T13801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.105120][T13801] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.122076][T13801] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.128566][ T3057] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 315.134539][T13801] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.147889][T13801] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.160313][T14286] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2162'. [ 315.347955][ T6066] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.362143][ T6066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.452332][ T6066] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.469209][ T6066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.500039][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.518791][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.583522][ T6066] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.603441][T14294] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 315.626865][ T6066] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.267368][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 316.324336][ T6066] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.455386][ T6066] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.711798][ T6066] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.779895][T14331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2174'. [ 316.954759][ T6066] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.104846][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.111336][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.145278][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 317.155045][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 317.163061][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 317.172410][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 317.181845][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 317.214223][ T6066] bridge_slave_1: left allmulticast mode [ 317.221197][ T6066] bridge_slave_1: left promiscuous mode [ 317.227522][ T6066] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.237854][ T6066] bridge_slave_0: left allmulticast mode [ 317.243523][ T6066] bridge_slave_0: left promiscuous mode [ 317.250683][ T6066] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.386508][ T63] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 317.531998][ T6066] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 317.544079][ T6066] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 317.554173][ T6066] bond0 (unregistering): Released all slaves [ 317.819261][T14351] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2179'. [ 318.316867][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 318.328808][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 318.342681][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 318.354073][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 318.361906][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 318.371914][T14334] lo speed is unknown, defaulting to 1000 [ 318.372292][T14367] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2183'. [ 318.399987][T14366] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 318.530586][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 318.612007][T14379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2187'. [ 318.623897][T14377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2186'. [ 318.951917][ T6066] hsr_slave_0: left promiscuous mode [ 318.958681][ T6066] hsr_slave_1: left promiscuous mode [ 318.964682][ T6066] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.974833][ T6066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.983972][ T6066] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 318.992053][ T6066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.015177][ T6066] veth1_macvtap: left promiscuous mode [ 319.022307][ T6066] veth0_macvtap: left promiscuous mode [ 319.030505][ T6066] veth1_vlan: left promiscuous mode [ 319.035802][ T6066] veth0_vlan: left promiscuous mode [ 319.270145][ T5839] Bluetooth: hci3: command tx timeout [ 319.397134][ T6066] team0 (unregistering): Port device team_slave_1 removed [ 319.433964][ T6066] team0 (unregistering): Port device team_slave_0 removed [ 319.666501][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 319.856520][T14334] chnl_net:caif_netlink_parms(): no params data found [ 319.956239][T14334] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.963430][T14334] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.971531][T14334] bridge_slave_0: entered allmulticast mode [ 319.979475][T14334] bridge_slave_0: entered promiscuous mode [ 319.987539][T14334] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.994675][T14334] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.002272][T14334] bridge_slave_1: entered allmulticast mode [ 320.010916][T14334] bridge_slave_1: entered promiscuous mode [ 320.044749][T14334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.057861][T14334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.100590][T14334] team0: Port device team_slave_0 added [ 320.109557][T14334] team0: Port device team_slave_1 added [ 320.226697][T14334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.233705][T14334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.358657][T14334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.388095][T14398] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2192'. [ 320.430107][T14334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.446482][T14334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.509907][T14334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.562951][T14398] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDw}z [ 320.619060][ T3057] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.634461][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 320.646977][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 320.654992][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 320.667975][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 320.676919][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 320.738034][ T3057] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.782979][T12865] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 320.962729][T14334] hsr_slave_0: entered promiscuous mode [ 320.973903][T14334] hsr_slave_1: entered promiscuous mode [ 320.982996][T14334] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 320.994427][T14334] Cannot create hsr debugfs directory [ 321.017171][ T3057] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.105241][ T3057] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.208047][T14421] netlink: 'syz.1.2197': attribute type 10 has an invalid length. [ 321.227926][T14421] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 321.335991][ T5839] Bluetooth: hci3: command tx timeout [ 321.415967][T14408] lo speed is unknown, defaulting to 1000 [ 321.741609][T14440] netlink: 'syz.3.2201': attribute type 11 has an invalid length. [ 321.898238][T14442] netlink: 'syz.3.2202': attribute type 11 has an invalid length. [ 321.898729][T14443] netlink: 'syz.3.2202': attribute type 11 has an invalid length. [ 321.917055][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 322.024527][ T3057] bridge_slave_1: left allmulticast mode [ 322.037266][ T3057] bridge_slave_1: left promiscuous mode [ 322.043177][ T3057] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.091398][ T3057] bridge_slave_0: left allmulticast mode [ 322.105031][ T3057] bridge_slave_0: left promiscuous mode [ 322.118548][ T3057] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.432255][T14452] netlink: 'syz.3.2205': attribute type 9 has an invalid length. [ 322.564983][T14455] netlink: 'syz.3.2206': attribute type 75 has an invalid length. [ 322.633661][T14456] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2206'. [ 322.684867][ T3057] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.697530][ T3057] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.711316][ T3057] bond0 (unregistering): Released all slaves [ 322.736356][T14409] lo speed is unknown, defaulting to 1000 [ 322.776146][ T5839] Bluetooth: hci4: command tx timeout [ 323.043555][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 323.065444][T14463] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2209'. [ 323.416207][ T5839] Bluetooth: hci3: command tx timeout [ 323.532439][T14480] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2214'. [ 323.754943][T14486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2216'. [ 323.760094][T14334] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 323.829381][ T6046] udevd[6046]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 323.887622][ T6046] udevd[6046]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 324.028386][ T3057] hsr_slave_0: left promiscuous mode [ 324.050289][ T3057] hsr_slave_1: left promiscuous mode [ 324.064045][ T3057] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.079430][ T3057] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.091341][ T3057] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.102156][ T3057] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.125392][ T3057] veth1_macvtap: left promiscuous mode [ 324.131208][ T3057] veth0_macvtap: left promiscuous mode [ 324.137725][ T3057] veth1_vlan: left promiscuous mode [ 324.143186][ T3057] veth0_vlan: left promiscuous mode [ 324.186160][ T63] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 324.581089][ T3057] team0 (unregistering): Port device team_slave_1 removed [ 324.621836][ T3057] team0 (unregistering): Port device team_slave_0 removed [ 324.856094][ T5839] Bluetooth: hci4: command tx timeout [ 325.010541][T14334] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 325.035679][T14498] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2218'. [ 325.057250][T14492] syzkaller1: entered promiscuous mode [ 325.063089][T14492] syzkaller1: entered allmulticast mode [ 325.148532][T14334] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 325.220457][T14334] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 325.286113][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 325.305971][T14516] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2223'. [ 325.424716][T14516] netlink: 'syz.3.2223': attribute type 7 has an invalid length. [ 325.424733][T14409] chnl_net:caif_netlink_parms(): no params data found [ 325.506560][ T5839] Bluetooth: hci3: command tx timeout [ 325.535532][T14522] xt_CT: No such helper "pptp" [ 325.819437][T14409] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.833857][T14409] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.841658][T14409] bridge_slave_0: entered allmulticast mode [ 325.857488][T14409] bridge_slave_0: entered promiscuous mode [ 325.912437][T14409] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.952009][T14409] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.981772][T14409] bridge_slave_1: entered allmulticast mode [ 325.998197][T14409] bridge_slave_1: entered promiscuous mode [ 326.024890][T14334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.073530][T14554] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 326.205327][T14334] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.253629][T14409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.268752][T14409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.310758][ T6066] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.317995][ T6066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.420560][T12865] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 326.445373][ T6066] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.452649][ T6066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.502715][T14409] team0: Port device team_slave_0 added [ 326.661210][T14409] team0: Port device team_slave_1 added [ 326.766228][T14579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2242'. [ 326.787530][T14409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.799596][T14579] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2242'. [ 326.809924][T14409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.841961][T14409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.915352][T14581] xt_CT: No such helper "pptp" [ 326.940695][ T5839] Bluetooth: hci4: command tx timeout [ 326.949231][T14409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.959703][T14409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.986836][T14409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.158118][T14409] hsr_slave_0: entered promiscuous mode [ 327.164593][T14409] hsr_slave_1: entered promiscuous mode [ 327.185118][T14409] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 327.193927][T14409] Cannot create hsr debugfs directory [ 327.274191][T14590] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2245'. [ 327.546794][T12865] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 327.733051][T14617] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2249'. [ 327.753540][T14334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.841612][T14625] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2250'. [ 327.863288][T14625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2250'. [ 327.888895][T14625] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2250'. [ 327.917718][T14625] netlink: 'syz.1.2250': attribute type 12 has an invalid length. [ 327.925643][T14625] netlink: 'syz.1.2250': attribute type 11 has an invalid length. [ 327.993093][T14334] veth0_vlan: entered promiscuous mode [ 328.048823][T14334] veth1_vlan: entered promiscuous mode [ 328.097840][T14631] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 328.113163][T14631] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 328.218229][T14334] veth0_macvtap: entered promiscuous mode [ 328.231048][T14636] netlink: 'syz.1.2255': attribute type 29 has an invalid length. [ 328.241780][T14636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2255'. [ 328.255683][T14334] veth1_macvtap: entered promiscuous mode [ 328.280762][T14637] netlink: 'syz.1.2255': attribute type 29 has an invalid length. [ 328.304070][T14637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2255'. [ 328.341500][T14636] sctp: [Deprecated]: syz.1.2255 (pid 14636) Use of struct sctp_assoc_value in delayed_ack socket option. [ 328.341500][T14636] Use struct sctp_sack_info instead [ 328.402074][T14334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.413811][T14334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.425986][T14334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 328.463285][T14334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 328.476788][T14334] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.485687][T14334] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.494926][T14334] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.505621][T14334] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.572641][T14409] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 328.592225][T14643] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2257'. [ 328.612025][T14409] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 328.624756][T14409] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 328.657181][T12870] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 328.690157][T14409] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 328.850846][T14650] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 328.980739][ T3057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.006219][ T3057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.016286][ T5839] Bluetooth: hci4: command tx timeout [ 329.088195][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.121072][T14409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.125976][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.178863][T14409] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.227729][T12865] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.234979][T12865] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.303642][T12865] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.310919][T12865] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.447964][T14665] xt_CT: No such helper "pptp" [ 329.480991][T14670] xt_connbytes: Forcing CT accounting to be enabled [ 329.703856][T14676] unsupported nla_type 52263 [ 329.776905][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 329.828918][T12870] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.854022][T14674] xt_CT: No such helper "pptp" [ 330.005523][T12870] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.162947][T12870] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.287689][T14409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.428584][T12870] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.904815][ T71] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 330.919217][T12870] bridge_slave_1: left allmulticast mode [ 330.931251][T14715] netlink: 'syz.3.2276': attribute type 11 has an invalid length. [ 330.942177][T12870] bridge_slave_1: left promiscuous mode [ 330.949534][T12870] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.961192][T12870] bridge_slave_0: left allmulticast mode [ 330.968374][T12870] bridge_slave_0: left promiscuous mode [ 330.974284][T12870] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.026492][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 331.035763][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 331.044222][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 331.053563][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 331.068155][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 331.373494][T12870] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 331.384840][T12870] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 331.395295][T12870] bond0 (unregistering): Released all slaves [ 331.876494][T14409] veth0_vlan: entered promiscuous mode [ 331.897590][T14731] tipc: Started in network mode [ 331.929355][T14731] tipc: Node identity ce8b911376bd, cluster identity 4711 [ 331.936797][T14731] tipc: Enabled bearer , priority 0 [ 332.041952][T14732] syzkaller0: entered promiscuous mode [ 332.047580][T14732] syzkaller0: entered allmulticast mode [ 332.054073][T14732] tipc: Resetting bearer [ 332.067603][T14409] veth1_vlan: entered promiscuous mode [ 332.089459][T14719] lo speed is unknown, defaulting to 1000 [ 332.124307][T14730] tipc: Resetting bearer [ 332.149292][ T71] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 332.972687][ T5919] tipc: Node number set to 3090583827 [ 333.097789][ T5842] Bluetooth: hci3: command tx timeout [ 333.267452][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 333.557437][T14730] tipc: Disabling bearer [ 333.581585][T14723] lo speed is unknown, defaulting to 1000 [ 333.717525][T14742] __nla_validate_parse: 3 callbacks suppressed [ 333.717546][T14742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2282'. [ 334.074328][T12870] hsr_slave_0: left promiscuous mode [ 334.081696][T12870] hsr_slave_1: left promiscuous mode [ 334.088656][T12870] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.096779][T12870] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.104777][T12870] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.112633][T12870] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.137251][T12870] veth1_macvtap: left promiscuous mode [ 334.142923][T12870] veth0_macvtap: left promiscuous mode [ 334.148747][T12870] veth1_vlan: left promiscuous mode [ 334.154104][T12870] veth0_vlan: left promiscuous mode [ 334.397377][ T6066] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 334.567444][T12870] team0 (unregistering): Port device team_slave_1 removed [ 334.609806][T12870] team0 (unregistering): Port device team_slave_0 removed [ 334.964905][T14409] veth0_macvtap: entered promiscuous mode [ 335.010918][T14409] veth1_macvtap: entered promiscuous mode [ 335.115262][T14758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2288'. [ 335.180948][ T5842] Bluetooth: hci3: command tx timeout [ 335.208815][T14764] netlink: 'syz.3.2289': attribute type 3 has an invalid length. [ 335.231540][T14764] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.2289'. [ 335.293657][T14762] can: request_module (can-proto-4) failed. [ 335.506296][ T71] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 335.530285][T14409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.543402][T14409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.556440][T14409] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.679833][T14409] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.734978][T14409] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.768838][T14409] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.780223][T14409] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.791299][T14409] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.824669][T14723] chnl_net:caif_netlink_parms(): no params data found [ 335.953132][T14786] netlink: 'syz.1.2294': attribute type 11 has an invalid length. [ 335.962700][T14786] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2294'. [ 336.174817][T14801] xt_CT: You must specify a L4 protocol and not use inversions on it [ 336.306759][T14801] dvmrp0: entered allmulticast mode [ 336.327581][T14723] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.334813][T14723] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.343410][T14723] bridge_slave_0: entered allmulticast mode [ 336.359753][T14723] bridge_slave_0: entered promiscuous mode [ 336.381276][T14723] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.399151][T14723] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.420239][T14723] bridge_slave_1: entered allmulticast mode [ 336.447048][T14723] bridge_slave_1: entered promiscuous mode [ 336.466374][T14808] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2300'. [ 336.550044][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.573098][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.618221][T14822] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 336.628758][T14723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.631582][T14822] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2302'. [ 336.676376][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 336.684543][T14819] netlink: 'syz.2.2302': attribute type 12 has an invalid length. [ 336.695418][T14819] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2302'. [ 336.729984][T14723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.794136][ T3057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.802411][T14723] team0: Port device team_slave_0 added [ 336.811443][ T3057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.852547][T14723] team0: Port device team_slave_1 added [ 336.880984][T14826] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2304'. [ 336.951158][T14828] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2305'. [ 336.964519][T14723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.977559][T14723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.010179][T14723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.035656][T14723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.049534][T14723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.080101][T14723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.204253][T14723] hsr_slave_0: entered promiscuous mode [ 337.211294][T14723] hsr_slave_1: entered promiscuous mode [ 337.218326][T14723] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 337.227529][T14723] Cannot create hsr debugfs directory [ 337.256456][ T5842] Bluetooth: hci3: command tx timeout [ 337.490698][ T53] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.584623][ T53] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.588055][ T11] block nbd0: Possible stuck request ffff888024bce000: control (read@0,4096B). Runtime 240 seconds [ 337.733284][ T53] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.794302][ T53] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.804797][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 337.958679][ T53] bridge_slave_1: left allmulticast mode [ 337.965441][ T53] bridge_slave_1: left promiscuous mode [ 337.972998][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.991941][ T53] bridge_slave_0: left allmulticast mode [ 337.998039][ T53] bridge_slave_0: left promiscuous mode [ 338.003757][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.316290][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 338.331463][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 338.341809][ T53] bond0 (unregistering): Released all slaves [ 338.581089][T14723] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 338.592392][T14723] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 338.603282][T14723] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 338.615497][T14723] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 338.731768][T14723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.758649][T14723] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.777567][ T3057] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.784749][ T3057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.812325][ T3057] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.819532][ T3057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.919823][ T3057] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 338.968700][ T53] hsr_slave_0: left promiscuous mode [ 339.000476][ T53] hsr_slave_1: left promiscuous mode [ 339.016849][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.029525][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.061779][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.076647][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.148060][ T53] veth1_macvtap: left promiscuous mode [ 339.155603][ T53] veth0_macvtap: left promiscuous mode [ 339.179713][ T53] veth1_vlan: left promiscuous mode [ 339.185886][ T53] veth0_vlan: left promiscuous mode [ 339.336320][ T5842] Bluetooth: hci3: command tx timeout [ 339.431376][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 339.440500][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 339.448417][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 339.456908][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 339.464601][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 339.758797][ T53] team0 (unregistering): Port device team_slave_1 removed [ 339.800801][ T53] team0 (unregistering): Port device team_slave_0 removed [ 340.057161][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 340.454816][T14723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.528511][T14864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2316'. [ 340.644273][T14723] veth0_vlan: entered promiscuous mode [ 340.692244][T14723] veth1_vlan: entered promiscuous mode [ 340.803922][T14723] veth0_macvtap: entered promiscuous mode [ 340.824976][T14723] veth1_macvtap: entered promiscuous mode [ 340.956808][T14723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.998807][T14723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.017957][T14723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.031896][T14853] lo speed is unknown, defaulting to 1000 [ 341.079321][T14723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.125412][T14723] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.147230][T14723] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.163022][T14723] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.177573][T12865] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 341.191929][T14723] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.283207][T14895] netlink: 'syz.1.2324': attribute type 4 has an invalid length. [ 341.396325][T14897] netlink: 'syz.3.2325': attribute type 32 has an invalid length. [ 341.413670][T14897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2325'. [ 341.466452][T14897] (unnamed net_device) (uninitialized): option coupled_control: invalid value (3) [ 341.582188][ T5842] Bluetooth: hci4: command tx timeout [ 341.613708][T14910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2329'. [ 341.761799][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.773696][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.948144][T14853] chnl_net:caif_netlink_parms(): no params data found [ 341.984596][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.000827][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.327804][T12865] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 342.433256][T14853] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.440949][T14853] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.459430][T14853] bridge_slave_0: entered allmulticast mode [ 342.482514][T14853] bridge_slave_0: entered promiscuous mode [ 342.602729][T14853] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.617519][T14957] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2336'. [ 342.626353][T14853] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.636051][T14853] bridge_slave_1: entered allmulticast mode [ 342.643927][T14853] bridge_slave_1: entered promiscuous mode [ 342.646457][T14957] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 342.680403][T14957] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 342.870478][T14853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.925407][ T53] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.963781][T14853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.012570][T14853] team0: Port device team_slave_0 added [ 343.022181][T14853] team0: Port device team_slave_1 added [ 343.056318][ T53] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.085590][T14853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.093312][T14853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.119511][T14853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.134992][T14853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.142281][T14853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.168722][T14853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.219592][ T53] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.252909][T14853] hsr_slave_0: entered promiscuous mode [ 343.259606][T14853] hsr_slave_1: entered promiscuous mode [ 343.265679][T14853] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 343.273387][T14853] Cannot create hsr debugfs directory [ 343.391105][T14963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2341'. [ 343.421261][ T53] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.457222][T12870] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 343.522671][T14970] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2340'. [ 343.666125][ T5842] Bluetooth: hci4: command tx timeout [ 343.770595][T14976] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2343'. [ 343.940574][ T53] bridge_slave_1: left allmulticast mode [ 343.956182][ T53] bridge_slave_1: left promiscuous mode [ 343.962240][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.014226][ T53] bridge_slave_0: left allmulticast mode [ 344.026140][ T53] bridge_slave_0: left promiscuous mode [ 344.052688][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.105595][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 344.117132][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 344.128962][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 344.138933][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 344.147983][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 344.208064][T14990] netlink: 'syz.1.2348': attribute type 10 has an invalid length. [ 344.485241][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 344.498452][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.508845][ T53] bond0 (unregistering): Released all slaves [ 344.554738][T14990] bridge0: port 1(team0) entered blocking state [ 344.566254][ T3057] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 344.576599][T14990] bridge0: port 1(team0) entered disabled state [ 345.049535][T15006] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 345.079410][T15006] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 345.130728][T15011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2352'. [ 345.453621][T15017] netlink: 'syz.1.2356': attribute type 1 has an invalid length. [ 345.478113][T14986] lo speed is unknown, defaulting to 1000 [ 345.484473][T15017] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2356'. [ 345.610006][T14853] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 345.617562][T15017] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2356'. [ 345.672226][ T3057] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 345.690911][T15027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2356'. [ 345.738579][ T5842] Bluetooth: hci4: command tx timeout [ 345.822954][T14853] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 345.911944][T14853] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 346.091291][ T53] hsr_slave_0: left promiscuous mode [ 346.105156][ T53] hsr_slave_1: left promiscuous mode [ 346.122753][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.130706][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 346.138774][T15049] openvswitch: netlink: Duplicate or invalid key (type 0). [ 346.146405][T15049] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 346.168569][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 346.180573][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 346.216080][ T5842] Bluetooth: hci3: command tx timeout [ 346.263230][ T53] veth1_macvtap: left promiscuous mode [ 346.284487][ T53] veth0_macvtap: left promiscuous mode [ 346.295556][ T53] veth1_vlan: left promiscuous mode [ 346.306213][ T53] veth0_vlan: left promiscuous mode [ 346.340015][T15058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2365'. [ 346.762047][ T53] team0 (unregistering): Port device team_slave_1 removed [ 346.807481][ T53] team0 (unregistering): Port device team_slave_0 removed [ 346.829482][T12865] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 347.179468][T14853] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 347.732467][T14986] chnl_net:caif_netlink_parms(): no params data found [ 347.817354][ T5842] Bluetooth: hci4: command tx timeout [ 347.953172][T14853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.969884][ T5899] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 348.034197][T14853] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.090020][T12865] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.097335][T12865] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.200245][T15107] netlink: 'syz.1.2378': attribute type 4 has an invalid length. [ 348.217381][ T8040] Oops: general protection fault, probably for non-canonical address 0xdffffc000000004b: 0000 [#1] SMP KASAN PTI [ 348.229325][ T8040] KASAN: null-ptr-deref in range [0x0000000000000258-0x000000000000025f] [ 348.237754][ T8040] CPU: 1 UID: 0 PID: 8040 Comm: kworker/1:8 Not tainted 6.15.0-rc5-syzkaller-00130-g12f4ee312c95 #0 PREEMPT(full) [ 348.249827][ T8040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 348.259887][ T8040] Workqueue: events l2cap_info_timeout [ 348.265369][ T8040] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 348.271276][ T8040] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 348.290893][ T8040] RSP: 0018:ffffc9001c717848 EFLAGS: 00010206 [ 348.296968][ T8040] RAX: dffffc0000000000 RBX: ffffffff8937d918 RCX: 79b7c56e38819800 [ 348.304948][ T8040] RDX: 0000000000000000 RSI: ffffffff8937d918 RDI: 000000000000004b [ 348.312927][ T8040] RBP: ffffffff8a6268d5 R08: 0000000000000001 R09: 0000000000000000 [ 348.320908][ T8040] R10: dffffc0000000000 R11: ffffffff8a626890 R12: 0000000000000000 [ 348.328883][ T8040] R13: 0000000000000258 R14: 0000000000000258 R15: 0000000000000001 [ 348.336857][ T8040] FS: 0000000000000000(0000) GS:ffff8881261cc000(0000) knlGS:0000000000000000 [ 348.345791][ T8040] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 348.352382][ T8040] CR2: 00007f6a71baafb8 CR3: 000000006106e000 CR4: 00000000003526f0 [ 348.360357][ T8040] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 348.368329][ T8040] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 348.376304][ T8040] Call Trace: [ 348.379589][ T8040] [ 348.382524][ T8040] __kasan_check_byte+0x12/0x40 [ 348.387412][ T8040] lock_acquire+0x8d/0x360 [ 348.391851][ T8040] ? lockdep_hardirqs_on+0x9c/0x150 [ 348.397055][ T8040] ? __cancel_work+0x254/0x2e0 [ 348.401826][ T8040] lock_sock_nested+0x48/0x100 [ 348.406595][ T8040] ? l2cap_sock_ready_cb+0x45/0x140 [ 348.411814][ T8040] l2cap_sock_ready_cb+0x45/0x140 [ 348.416859][ T8040] l2cap_conn_start+0x750/0xe40 [ 348.421729][ T8040] ? __pfx_l2cap_conn_start+0x10/0x10 [ 348.427125][ T8040] ? l2cap_info_timeout+0x60/0xa0 [ 348.432168][ T8040] ? __pfx___mutex_lock+0x10/0x10 [ 348.437207][ T8040] ? process_scheduled_works+0x9ec/0x17a0 [ 348.442948][ T8040] l2cap_info_timeout+0x68/0xa0 [ 348.447818][ T8040] ? process_scheduled_works+0x9ec/0x17a0 [ 348.453561][ T8040] process_scheduled_works+0xadb/0x17a0 [ 348.459135][ T8040] ? __pfx_process_scheduled_works+0x10/0x10 [ 348.465136][ T8040] worker_thread+0x8a0/0xda0 [ 348.469738][ T8040] kthread+0x70e/0x8a0 [ 348.473830][ T8040] ? __pfx_worker_thread+0x10/0x10 [ 348.478946][ T8040] ? __pfx_kthread+0x10/0x10 [ 348.483549][ T8040] ? __pfx_kthread+0x10/0x10 [ 348.488156][ T8040] ? _raw_spin_unlock_irq+0x23/0x50 [ 348.493371][ T8040] ? lockdep_hardirqs_on+0x9c/0x150 [ 348.498587][ T8040] ? __pfx_kthread+0x10/0x10 [ 348.503195][ T8040] ret_from_fork+0x4b/0x80 [ 348.507617][ T8040] ? __pfx_kthread+0x10/0x10 [ 348.512212][ T8040] ret_from_fork_asm+0x1a/0x30 [ 348.516989][ T8040] [ 348.520018][ T8040] Modules linked in: [ 348.525164][ T8040] ---[ end trace 0000000000000000 ]--- [ 348.542114][ T5842] Bluetooth: hci3: command tx timeout [ 348.548156][ T8040] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 348.554108][ T8040] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 348.556524][T15108] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2377'. [ 348.573965][ T8040] RSP: 0018:ffffc9001c717848 EFLAGS: 00010206 [ 348.589675][ T8040] RAX: dffffc0000000000 RBX: ffffffff8937d918 RCX: 79b7c56e38819800 [ 348.598106][ T8040] RDX: 0000000000000000 RSI: ffffffff8937d918 RDI: 000000000000004b [ 348.606312][ T8040] RBP: ffffffff8a6268d5 R08: 0000000000000001 R09: 0000000000000000 [ 348.614397][ T8040] R10: dffffc0000000000 R11: ffffffff8a626890 R12: 0000000000000000 [ 348.622527][ T8040] R13: 0000000000000258 R14: 0000000000000258 R15: 0000000000000001 [ 348.630664][ T8040] FS: 0000000000000000(0000) GS:ffff8881261cc000(0000) knlGS:0000000000000000 [ 348.639911][ T8040] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 348.647039][ T8040] CR2: 00007fc4cb40cf98 CR3: 000000007ce0c000 CR4: 00000000003526f0 [ 348.652909][T15110] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2379'. [ 348.664154][ T8040] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 348.664172][ T8040] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 348.682286][ T8040] Kernel panic - not syncing: Fatal exception [ 348.688689][ T8040] Kernel Offset: disabled [ 348.693031][ T8040] Rebooting in 86400 seconds..