last executing test programs: 1m17.552855377s ago: executing program 2 (id=380): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1200000007000000080000000800000000000000", @ANYRES32, @ANYBLOB="000000000000000000a11dff00000000f78c0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m4.215141156s ago: executing program 2 (id=380): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1200000007000000080000000800000000000000", @ANYRES32, @ANYBLOB="000000000000000000a11dff00000000f78c0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 49.555609624s ago: executing program 2 (id=380): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1200000007000000080000000800000000000000", @ANYRES32, @ANYBLOB="000000000000000000a11dff00000000f78c0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 37.425998006s ago: executing program 2 (id=380): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1200000007000000080000000800000000000000", @ANYRES32, @ANYBLOB="000000000000000000a11dff00000000f78c0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 22.904811775s ago: executing program 2 (id=380): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1200000007000000080000000800000000000000", @ANYRES32, @ANYBLOB="000000000000000000a11dff00000000f78c0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.327978798s ago: executing program 2 (id=380): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1200000007000000080000000800000000000000", @ANYRES32, @ANYBLOB="000000000000000000a11dff00000000f78c0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.074583115s ago: executing program 4 (id=1090): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x83}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000002b000b000000000000fdffff0700000008000300040001000c000180"], 0x28}}, 0x8000) 3.836129674s ago: executing program 4 (id=1093): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x0, 0x10, 0x0, &(0x7f0000002580)="f0b9547ee7affa9daabd309a75d387db", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x9, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071103b000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async, rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x3f}, 0x28) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}]}, 0x3c}, 0x1, 0xba01}, 0x0) 3.490349878s ago: executing program 4 (id=1096): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r3, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd0, 0x0, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASTER={0x58, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASK={0x2c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @loopback}}}]}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz0\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x10}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4040084}, 0x11) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(r3, &(0x7f0000000880)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000840)={&(0x7f0000000340)={0x20, r4, 0x4, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x6}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8081}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000043c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000c80)=r5, 0x4) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x340, 0x20a, 0x278, 0x340, 0x278, 0x3, 0x0, {[{{@ipv6={@mcast1, @private2, [], [], 'ipvlan0\x00', 'team_slave_0\x00'}, 0x0, 0x208, 0x230, 0x0, {}, [@common=@hl={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x30, 0x0, [@mcast1, @rand_addr=' \x01\x00', @dev, @remote, @loopback, @empty, @empty, @mcast1, @mcast2, @empty, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @broadcast}, @private1, @local, @mcast1]}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@mcast2, @dev, [], [], 'veth1_to_hsr\x00', 'nr0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000f80)="314a03337667286271f12e39c4634f42640a10d36b8c64fc9926b76028f443d8d23112a8f8110b3906bbe26961accb312aad87d60efc07ebd23ce31d66f1846a42df214d0b6f399f8da3e0ef756804ebf97db1e55f54e00710b97f81602ff0a5f3d0201c51a295b2000000000001000042ad47c0a218e608329691a5cff80ba3e886e81a3ff53e3dc7d644ebd9e0bfbf90607e4ed11214f77d2ff2e0e38a0aff20181a982034bb530acfc6ec343de6cf613d8ebf1ed8c5c0c5a9747b8b161d77b4aee1393359866cbe421373c4f8e375b2c06770f16a97eb6f12a8d6d6a7f09443fa91abf9c6a8509540b9cf3c353ed279698d56023938597e2c59124970257675c5", 0xfdef}], 0x1}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x2}, {0x6}]}) syz_genetlink_get_family_id$batadv(&(0x7f0000000b40), r3) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000b80)={r3}) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010025bd7000fddbdf250900000005000800030000000000508000000100debd6ee0d400000000006e8000000100000002000000020000000200000002000000020000000100ec44e6fadcc657de206ace0d9317f7bc365c5c1a57d92204f9ab5436d0d2814a4509f23ef4ed48ceeafd99d6cf6997f051ef33d647"], 0xffffffffffffff7d}, 0x1, 0x0, 0x0, 0x80}, 0x4) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x10, 0x32, 0x3, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x10003300, @in6=@private2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x80}}, 0x0) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001b40)=""/153, 0x99}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/196, 0xc4}], 0x3}, 0x6}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/188, 0xbc}, {&(0x7f0000000540)=""/227, 0xe3}, {&(0x7f0000000040)=""/48, 0x30}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000002fc0)=""/4096, 0x1000}, {&(0x7f0000000640)=""/68, 0x44}, {&(0x7f00000004c0)=""/6, 0x6}, {&(0x7f00000006c0)=""/243, 0xf3}], 0x8}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x27}], 0x5, 0x40000000, 0x0) 3.424710882s ago: executing program 3 (id=1097): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0xfe, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "217d66d38547aa140db8a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x19, 0x4e24, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0xfe, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "217d66d38547aa140db8a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x19, 0x4e24, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) (async) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x38, r3, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x34}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00'}]}, 0x38}}, 0x0) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x38, r3, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x34}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00'}]}, 0x38}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r1) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r5, 0x100, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x61}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x100}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)={0x54, r6, 0x1, 0xfffffffc, 0x0, {0x1e}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3e}, {0xc}, {0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000081}, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, r6, 0x200, 0x70bd28, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x40004) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001a0001000000000000000000802000000002fe00"], 0x1c}}, 0x0) openat$cgroup_ro(r1, &(0x7f0000000580)='rdma.current\x00', 0x0, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000580)='rdma.current\x00', 0x0, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000200)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0xfffffffc}, 0x1c) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="64f2e3512e1a549f6a7ab1c32b817f73be2b933eb6330bf45a23169493fb", @ANYRES16=r8, @ANYBLOB="00042dbd7000fedbdf25430000000c00990006000000510000000c00580047000000000000000c0058006700000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20008041) (async) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="64f2e3512e1a549f6a7ab1c32b817f73be2b933eb6330bf45a23169493fb", @ANYRES16=r8, @ANYBLOB="00042dbd7000fedbdf25430000000c00990006000000510000000c00580047000000000000000c0058006700000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20008041) 3.225942352s ago: executing program 1 (id=1099): r0 = socket(0x840000000002, 0x3, 0xfa) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000040), &(0x7f0000000100)=0x68) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) r2 = socket$inet(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200"], 0x48) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)=@o_path={0x0, r3, 0x4000, r2}, 0x18) accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x20, &(0x7f0000000180)=0xb51, 0x4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xe0}]}, &(0x7f0000000180)=0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x8848, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00000000e000030000000000000000000000000008"], 0x38}}, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004519003c006500000c0690787f000001ac14143e0000000000220000000000000000000300004e2100004e230000000400000001000000"], 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r8 = openat$cgroup_devices(r7, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r8, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw\nw'], 0xa) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r9, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) 3.051001334s ago: executing program 1 (id=1100): r0 = socket$inet(0x2, 0x3, 0x8) setsockopt$inet_tcp_int(r0, 0x6, 0x2d, &(0x7f0000000000)=0x5, 0x4) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x178, 0xe138, 0x198, 0x0, 0x198, 0x230, 0x358, 0x358, 0x230, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'nicvf0\x00', 'veth0_to_bond\x00'}, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0003000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c429955608b9952bed40ce4a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000080049", 0x4}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x5, 0x1, 0x9, 0xf, 'pptp\x00', {0xe}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 2.848463375s ago: executing program 1 (id=1102): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) (async) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=@bridge_setlink={0x44, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4, 0x5, 0x0, 0x0, [{0x8, 0x0, 0x0, 0x0, 0x123e}, {0x8, 0x6}, {0x8}]}}]}]}, 0x44}}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0x48, 0x0}}], 0x1, 0x0, 0x0) (async, rerun: 64) connect$qrtr(r7, &(0x7f0000000040)={0x2a, 0x1}, 0xc) (async, rerun: 64) writev(r7, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1000000000000173) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r6, 0x1}, 0x1c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000052000100000000008000000002032717f55c0100af150000000000005a45a90cd6b48faf22f0894e09397679c3e382a16f85bb9cfbb77f375f6571dfac944d1d345aba2c7f90237b027ee7ff4395db1ec447838b312468f7d2cbe37b1deeed541d7d3815a40f4593fbe36c09f2c921d8df639c8ce9b67aa69eaa3189f679f203259f7aeefa77536bbe1f42e37622496271c4d7a55c35afd1f898275ca04ed7c795ca465e"], 0x1c}}, 0x0) (async, rerun: 32) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (rerun: 32) r8 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r9 = socket$unix(0x1, 0x1, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xa73}}}]}, 0x38}}, 0x24000098) (async) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TTL_MASK={0x5, 0x53, 0xc}, @TCA_FLOWER_KEY_ENC_IP_TTL={0x5}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x4}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x5}, 0x94) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async, rerun: 32) r12 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r12, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001900)=ANY=[@ANYBLOB="240000001e000100000000000000000007000000", @ANYBLOB="0000000006"], 0x24}}, 0x0) (async) ioctl$TUNSETGROUP(r11, 0x400454ce, 0xffffffffffffffff) 1.582133569s ago: executing program 3 (id=1103): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4}, 0x18) sendmsg$can_j1939(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)=@getqdisc={0x40, 0x26, 0x8, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {0x1, 0x6}, {0xa}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40041}, 0x20008004) sendmsg$802154_raw(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)="ad18d4a3a6bf19be635978e863e20aa9722e5e9399", 0x15}, 0x1, 0x0, 0x0, 0x40000}, 0x20044840) 1.50080765s ago: executing program 1 (id=1104): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYRES8=r0, @ANYBLOB="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"], 0x48) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000030401f80000000000000000eb00", @ANYRES32=0x0, @ANYBLOB="a5fdad880000000008000a00", @ANYRES32, @ANYBLOB="200012800b00010067656e6576650000100002"], 0x48}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x140b, 0x200, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x20000090) 1.352087513s ago: executing program 0 (id=1106): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000340)=0x7e, 0x4) close(0x3) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x9, 0xc4d5, 0x0, 0x4, 0x7fffffff, 0x8, 0x3, 0xa879, r3}, &(0x7f0000000240)=0x20) 1.3284868s ago: executing program 3 (id=1107): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050300000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="f20d4c0ab2910eb5c3de39c0c949b0fcf99e4c1e7f97ed59c988b260aced7b0ee574b1c6242cf7c317f90b41ed019675b239a07ed0fd305351010862817c"], 0x1c}}, 0x24044080) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050300000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="f20d4c0ab2910eb5c3de39c0c949b0fcf99e4c1e7f97ed59c988b260aced7b0ee574b1c6242cf7c317f90b41ed019675b239a07ed0fd305351010862817c"], 0x1c}}, 0x24044080) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = getpid() sendmsg$nl_generic(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000740)={0x20e0, 0x1e, 0x400, 0x70bd28, 0x25dfdbfd, {0x9}, [@nested={0x18, 0xcc, 0x0, 0x1, [@typed={0xc, 0x6, 0x0, 0x0, @u64=0x1ff}, @typed={0x8, 0xa0, 0x0, 0x0, @pid=r5}]}, @nested={0x100c, 0x99, 0x0, 0x1, [@typed={0x8, 0x23, 0x0, 0x0, @u32=0x3}, @generic="f16bf4b783ca3e943aea98b899f5cc9a7e96e8b6139543510c716cb131ac2a239b8452ea106c7cd130b42b3f25597a711156778caa94283ef77c06fa300ed4c2567008c7627497ad184396fa23ebcc8a1abdeaa312f833123d1b82be9d27e051ec33ea57e2bc12007f4c04aecb6306a94f9e45e59ab25192e81ad06ad04b2b9b6d85748d43d1deba3d4c451dadc07edbc0e3fb859e83fccd9e9b42ece9fe26a3fe1c464e2e67831c4ab228c2417f0e1f9dbeaf167c811fe7616c58ba36ed34ba10e55b48477e53d37b3e651adb2ccaf7ac15d4061699ba685152eb01a51b9a82e9679814b6febeee3c9586afb81fc21a291c2aa180834bc1bc6f3cf8b5696d8d674fa178ee04db257fe440fa19cfdc81e78af8f30bf24cbd1a3bf8c2618e9a6ad91d6bc49104b74dae94f15c39cbc082f1f0c20da789beb107ae4a252a332b3eeef6bdb24dd903f342dc4bf10d7320196180c9eeb4e996f2af4744e1f41ceba8b7f6f9480aa6404cfb0c001826b50b8495fab4bdf2258eebda483c09eb031fa9e4e3edcfe53a36e3f611d8f219d5a5f5c3f7516396f144a69446479af7cf297ecaab81cc5ac13df720dbb33a52bf96838d6f0b7e8d641bd4ad45c383ccb586a1a8c84f432e596bc11be7c20f735cc1c57ee72373f6b31978b0253b13f1245c4fef9b2631b5cdf43f06a6b99e4ff428a8026e10498e98b131264b27184d2147543d4cdda6d3a6cae283753b7ad55a4e1841dc5f139633ea26ad92e92cb2edd6c1ae0da4cd986697ffa80d409d811d0075c2ff5b84b1ea5b6fa395364d3ff7b0372ed4f964085965aaa7616b89bb9a10a782c1e0bee7e4234d96c8ef4515802c118456374db9f37ed0dd4800ded7c1b7693f9fad0ddd4df74cbe67be32c551d8a609e7e4c42a6ef6bea005876263657430005b7097630e782d5ffc0b0900ee98fc65ccbeb4d72e9e5de92a406b86c359433bb54f94c58dd47a13a2995061331183b777c6ee3b9f649a20b2f48ee7d35fd640edaeeaf67feb53dceb51925b9ff72f4af3746644d46e56c4f643e9d370001d32ea21c5b4b29a93da4893a29c769827c449bd3eb011b4fbe44e0e68975b41e413ec635a27f38d2c4fdb2f716809145ffd9c24a691ea06656513acc5597de482d78314ba6653cfe852930fe5b81ba0eadd5a14118270d997052945ee6c0211d954597679e7541b2119e45921f2282778f72439cec2c309a232d6c30815f101139c7d49423f05b1980bd60a616c712b9187aa643e12959ba5e1afc4f7fd85d4c997ccf48b4de820fe6dea2bb2958ea36326be0ebe716701bb09abee197c2107f97c2fba739e6e214ea42d0c3587716c113a35fd593a05dacf8713babf056cb8a67d6b35b913ca8b3ee35dbbdf92067c44b92ebc94252c63e164b4dd6a680094bb269c570b58897b029d0c903ab8fdeecbc9b4b77b87f2a9ba6e8d82e66133f92597cfc84aa2cbe56241a7d2db1e1dfde9ac623091b392b5a81311eba3ce29ce934620101b59ab62b78aa0279de9b5ccd41dfeb4c9885b92d58f0b315fdae1c3a358eda3a2a934a1ffe32c419210b3574f2631ff491fb2369e97545f2f7b414069545637d002adeab7351c0376f6ebb3b021404ae1a9d70459a64c738b7f6de7ee90e22e15296d053e3b17fd03eeadbd039e9030fde5b392c860d973e64ca5362624077cf6a294b49883f9f00399a8328c50b37c73671d3eff97a40be3f63edbabb0e742dba73252993745458010de13c18d62305f280a892b446bbf1f4406377da029c620a29d5ac3de70bede5900fcfa87e4512f39f6e6642ddd7716fe12402a8018487d085b6cbc5d07dde41972b6b09d5dbd03ea076606143536baae7df33ed75b4d27119fe6919464a44643c6581987bb8755f0c80127aecd89fa0de9d3ffbf3fc4697c23ee6c1d22adcdd5720888ec162c54b45e2f864ef295d9ee51986a3b898c273dadde8579c7c6c73890a03e0679fcc9bb09124fcae1e15df3db6e8b3335fbb13478bf56ecb6322ba71f57c448a4f4b18502040a68810669060087115c140a185100d5acacb9fa660e741e2e4a5ed63fbaab37e76f460205f49abcce0999f6bc7918b54ad5a105785522d063561426547143d83348fb3c4305e5a8ab8e82ed7e474808f6166f1d54aee86a5d3cafe83787a458646ecc893bff60fa79294258f09d5a458b913913ff886b237b5f7e728383e32bf3d018c7e351d119331cd216d1cd75464a63d015c8c02bc1ad6c94ef725475814a4672cf0c47d7817fb6dec6dfdf6bcb9e333e0842f8fbb59cb376ba4b5b25dd5df9a0080f01cf979f57b460cf2099c1712e21cdb3f7ec3b44cc6c1a40baf255f297656a94f10724e75f169456751ec19df0f27fcb12c0b08b8ae8ff830cc74e4f621e160c0c6bc3b0b2ec469de52702e736a913161d5d4fad435c5e2aca889e6c000be976a74fdd7284822fd8eca5636c0472bdf9f1a84ade0f537ba0937e715c96492d84e53d106045852a4fc17682134b46ff2bf1c2e8463cbf7fd331da1168cf8a5569fae40e8f65b9a58acc3c3ddc5d5fcf23e332ed4a2da6b6bf0ddc59dc2f9c1d0a3e6316d462a15a19b5d57c63381698d8c16593a6964c323edb56a08ab523ef5acff7a862d732b59210ae3860bb0550280d44d20864070e00d6c5cff87cab550754392635b5fcf4c3a7c7e23a64d7852282b77f35fd14b84ad687a0d5a765db7b31ea2a13a01a942ce0a084e9563babad5b4921aca2e76c841f76456f6a7aed8cb5e6bf6fcb4e527ba6fb336c710feceb7e15f3b0c6de41fbfc15ae51d9cc830268b5c78b37cf839bd7a80d1834c7d32107488ee3eb814beae2fff52e4de6cfb0d55f347e130b05b01853d55e13c875d5a43d0159043937b052c680ea9551af062c79d3445b47d7d0d30786bd22caf064de181259ed3bf860360324ac236065c4bda001f6e423632fd7c3262f7d3515732c0ec76de989f6cb5c8e08c55f755a9dbd6911212884ca7a87e44db6f9d3779d433955e511bf693c376812a72d4440508908bdfc4abcf7ab5b1b50603290aadd7277b485b4277f77a6d3bbb3532cbad7f39beb9c0714e685c01cd103a6bc2d9ca6f29896a78f8ce8a161eacb5b2648f285dcc9d78b69c74bf0ea1578ae73bce5886a8273e68599ada184582d0d7a1fedbb16b54a6527ad6195bd87dc72a7807aeea3fa94f8520f3d8e2d9aa47d9f5cc4292c2fedfa80d8c008a39ce520cdb1e27085ebbf66138e117767a2377c29d5824067edb3464bd71dd855aeb794a868cd637c2717a1ba71a159727487c90c4198b3bb8b97db1d14e505996f281fe059566d087e114a60c4f6ad491fbd79abb9fab03d6e0cf213d9b841dfa2540b5ea14b60a5b04de0a857fc54984d1c414f3d728251c9bb9eb749357974457006fc6723837653eaa2017c0488b5f880fd4f9ae941894c17270e41354c2336f3caeb047c3d864281e93a53c1dc61a687279617fd944f5470c85c229c96dac2a6d0ac4f563757e52dde996a9d11bfe39223037b111eaea0386fda48417583bfbc05929ca1a43b4bb25f1d7183e935932e424e23b16518b69aaf8c7eefde1317f1e0294cb70e4ad9d2d56605f7374d1207600d5967c930f4b60db88e350cabd31446691554973317b4928747d33386a6888417abd0822b085ee62555484a668aa84e9c2d49e0419f77182707f6e4fac7bd0eef912eb5a286921c4f10dd4a82a73386ee805e38b19673462ac42c7ec2c937a5bb65cdc434ea0c94b8792a03db5670e731b31b8b95aab6f6971780399d2068d06bc125c4846c380e053054c7afe576b512c2c7f708f735a01dd99ec355e995692488c2e64ea86b05b4b4daa62918a05a9f335a37ea35662f32995905a981efeb10fdd85ff4542fe9d645c5b961201522cee1ee88d334545fef51ef14303712e9bf6a903d90d753c645a332a0ba3939eb70ebcaa4fdaf5e2a3b752051c9de7318281cd293d721643c9cb1f5e24dc6c17a1cf2e2d14ba4da3ba76630ba64d9e08e6656d16a4c7e7cdb3fe9dc91ba63192f049299747dc001b0f663e475e40b0847aa615776102f99f7f1e8109980e0e78abfd102b3a061eda5ab608844edba245d5b70c1c52665ddbf1e479c812d795de00e88c84aeb4b8cc60659d29c77621f7c29ca67d7172d86d40a7c1c19a9c5404929c12f2d4296b798d2fcde9de76c5e216f0d73046615ea4979d61a7d65a9f5f40a70e868979c89135cb00873f44659f09811b6ac00a5d31d796812ce4b1987ec5234804fb2dff63065dbce7bb2e21e64bdb72377d4ea5b62a1249e134a2401fded3ca7178011c18d19077f93474260d0026d7f19f96e78bb4dd80cfa146fae1f677f532a780400fea63ac2b5c5e0eac4f52d1191718413b584e8dbb47921de732b07fb0cb6ffde9a4dc3d21124e8a56752b5f7b22b176f8e2fe641f78dd6ec3194616fa14fe30400fce8205eac8840f4e4269a32a8576fa634e06d331701008d73b008f5dddaf76406f27a2327b5fd758bde0bf4534a31b11c4ea3392720b0bcaa72aaa8768e45aedc016117e066d32fda5777d1b4d4b206a8af4761441bf34ca2cd45249bda5c140da555dd469c4fb05ad7341c53a331418d87b4e3c9652d8aa4b39d4b57b79c6a34f9a1afefb3e9f3ad78f805bcebedfc61b9a37d602897312784af2c6e0a8b793b3fe8f4fde08d2686b022f5bfeb177542f4aea8abe89dff035ca56a4e5f9dab54a6deb57b035abf1d40de487ea8eed7436cf424d5da02b9a6e3b6e4c5c5e4030674fc0ceb8b0a9dddbb458be30ac5243d7f648d4a5ed315521c59f5628942ab0350380ad600ee154d66f447c2b31fa0b1f2ca6d256d025de7c7f8e6d78293160c649ad10cf89066e4441b55735ab6374ee283348641e50107255288b554fb281501c488452f675a1d01e8bbd710853796ec9ae2f7c7f19301dd0b1832a27a5d6630f4341b69784fbd63936b8a79997a5baa278257a47c5d3923222068df6a379b5f232c46e9e256540b8ab478dd8ba7e751124b752ffd13b4dda63b9b7383c0f940568beabe4a073e9a8915425853054f56bd4e9ef2d597966f18ba9149ff73264a67a2ee04d83510ba08a60f227c1713677429cf03f0adf39e8f912775d953b211e8a607f43fc070ca5b8bce20288528a5884730ed89f8da84d3c59da498df2bbc12abcfab2ed683d2365263da458f83104a4c79851f5694a1916d4bc3b2c6db74a7904d0f32f88bf8586a6bea3717ffe81814f3ea6bbc6edf50d15452f404fb20f4a81d2ca837b7fed87ea024e22a0e56f9515f3161fbbc8da3379fdc10821fb64b476a37bcd6ba9c10b36fa148ae3dd4640b361cf6ebffc558714682dda06dd5cd4f375519083c4417756a9a9186863e994a4cf6a58cc9ffb40142be8b68a84869f3b2495ed86b2cae5b0f4e792c6f40a19ba6dd0bedd484bf25f09e6d61aba53404eaeea22f6fcb8c6b5ec28b8cfadb2e31081c8e7ce8ae065f5dac8db110b51764ddb8f69d25eca44b7c15723a0d568f48cf9f25664420f6ca955a9a63c510998528be1310a8fd7993b1b41adad3da64bd936daa3233283c85b201859a3661c5c650d4443d9772e91015399af533cf997d6a50c9d9dc41dc1d2f4fee3e8cfcf403a0fd884877b46b34dc1a7631835fae3f07f142fb5410f43a07e3cfe67a4661cf514e46ae62b1d466ebbf7dc274ea2471b46d95a39eb383e73602b85412d8a67004c683da2f1a1bcccbfdba2b82f00a54901c57212d8fcdccc965c2"]}, @nested={0x10a5, 0x15, 0x0, 0x1, [@typed={0x14, 0x73, 0x0, 0x0, @ipv6=@empty}, @generic="abe05d6474bc051e2cc85068f04a9e8919c80bd2278ba8674cdb5291ebf44bc8f926ec1e07741aea73e38873627e3de953740323008c93daccab7bcc2740beffd56b7b64e1790719a66301ce363923e95feaba825f3777fe55a97fc0b70bdcb02840253b7d53c26ca2bbec3cce4ca82e189901ab8a94c9408137db26031185ef8d4d071b75a071a910", @generic="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", @typed={0x4, 0x8c}]}]}, 0x20e0}, 0x1, 0x0, 0x0, 0x801}, 0xc0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000500)={'tunl0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000500)={'tunl0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000100003002abd70000000000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000280012800900010069706970000000001800028004001900080014000900000006000f"], 0x48}, 0x1, 0x2}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000100003002abd70000000000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000280012800900010069706970000000001800028004001900080014000900000006000f"], 0x48}, 0x1, 0x2}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000680)={0x0, @in6={{0xa, 0x4e24, 0x3, @remote, 0x3}}, 0x4e, 0x6, 0x503, 0x3, 0x414d6714bf78e175, 0x80000001, 0x3}, 0x9c) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000000000007111b70000000000851000000200000085000000ae00000095000000000000009500a505000000005160b53d4aaf0ecda3e967683918fabfc90ec1e06c5f48cb9ce64e815b7b74d0c3e9365f188f6a00591b"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f00000002c0)={0x60, r1, 0x171a3015cb0e70c2, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xd}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x8004) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="539925bd7000fddbdf254c0000000e00a900666972737464657673696d0000000f0002006e657464657673696d3000002169ffeeeb000000000000000000005b5da36ec4a662c5ff36b35091fb105b09dc2ddc3b5d66934719e8cfe4966818e3a4430d80d39b42d2d9dac8f0053c38bba33a934f89009f919417dceaa2348555839263281a22af055afb523c18c9"], 0x44}, 0x1, 0x0, 0x0, 0x4800}, 0x4000040) 1.228915839s ago: executing program 4 (id=1108): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r0, 0x0, 0xb9b}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 32) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r2, 0x0, 0xb9b}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) (async, rerun: 32) r3 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) socket(0x25, 0x6, 0x9) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) (async, rerun: 64) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r3, 0x7, 0x104, 0xfffffffe}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f00000001c0)) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) (async) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r5 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r5, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[{0x3a, 0x84, 0x5, "10"}], 0x18}}], 0x2, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1.152110051s ago: executing program 0 (id=1109): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) socket$tipc(0x1e, 0x5, 0x0) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @any, 0x4}, 0xe) (async) bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @any, 0x4}, 0xe) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f00000000c0)={0x3, 0x67}, 0x2) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x1000042, 0xa, 0x3}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x5}}, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r1, 0x501, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0xffffffff, 0x3, 0x101, 0x400}}}}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4098) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r1, 0x501, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0xffffffff, 0x3, 0x101, 0x400}}}}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4098) 1.038626565s ago: executing program 3 (id=1110): recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000300)}}], 0x1, 0x10000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa01800300000186dd60000000001406"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$packet(0x11, 0x2, 0x300) sendmmsg(r1, &(0x7f000000b4c0)=[{{&(0x7f0000000000)=@caif=@dgm={0x25, 0x7, 0xf}, 0x80, &(0x7f0000003440)=[{&(0x7f0000000080)="fe0af462", 0x4}], 0x1}}], 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f00000004c0)) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c010000100013070000000000000000ac1414bb00000000000000000000000000000000000000000000ffffac14140000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff0100000000000000000000000000010000000032000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff0000000000000000000000002bbd7000000000000200000000000000000000004c00120061656769733132386c2d6117736e69000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080"], 0x13c}}, 0x40) 1.031522763s ago: executing program 1 (id=1111): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x52000, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @remote}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaeaaa080045000020000000000001"], 0x32) r2 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r2, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="b702000000000090bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b70500000d0000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989425f5d0b79f6584d0416d7c4bb9f547b328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f01000000010000006e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b98d2de10c21d3ea02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d000000200008000000000000001abc11c800000000000000000000000928ee53595a779d243a48cea769470424d20a04c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005472b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92fe8bad99ca332af00f191b66b6a6f732a91f0e2e9190e4b448da7de018c58e950767f9b320be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c52573d9308a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e495f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e4a48dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f00000021f8547d393dabe616fbbde21c90be00b5a22671395c7a69c6dd4d022ffc97ddb6aa025131652d409da1d8cfc3d219d4b1c1b7b8170d7c33d91db2b73f7ae02485a209a2474b5d0790d05c01bec623056e4d3f4d3149373a28b26a15a1fcce73d57e6eaf7e6f315fe275ebc9ef7aeca277dde01dde724f419803a2172a7833ceab38d21ca4f1dea5e1f4d8824167b21dd289dd4e6ecfba9e163bdbc48e1e758ecde05c10809c9edfa6d77c652fd742e6dad13d2a397bebe3ea8bc087d3720e2202f36c7719ae34f042e19dc08a3323a3d94098a7ec171469352bab1662c3e4d4803c565cfcce32dad628fade43a4844abb230ce608726fd87e93c405a96cf638c41510f26e9da5f316"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24) getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, &(0x7f0000000380)={'broute\x00', 0x0, 0x0, 0x0, [0x4, 0x0, 0x0, 0x0, 0x8e]}, &(0x7f0000000400)=0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r7, 0x0, 0x11203}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0xb}]}}}]}, 0x3c}}, 0x48000) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000140), 0x4) 924.246165ms ago: executing program 0 (id=1112): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), r0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x44, r1, 0x1, 0x70b92a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffe27, 0xb, 0x9}, {0x6, 0x11, 0x2}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000040}, 0x200c0850) syz_emit_ethernet(0x82, &(0x7f00000000c0)={@local, @local, @val={@void, {0x8100, 0x4, 0x1, 0x3}}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "156909", 0x48, 0x2f, 0xff, @private2, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8, 0x0, 0x0, [0x3ff, 0x0]}, {}, {}, {0xa888, 0x88be, 0x8000000, {{0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}}}}}}}}}, 0x0) 735.34168ms ago: executing program 0 (id=1113): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xe5a01e6e238456fc) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 371.073805ms ago: executing program 0 (id=1114): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x2a, 0x0, &(0x7f0000000000)) listen(r0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) accept4(r0, 0x0, 0x0, 0x800) shutdown(r0, 0x0) 367.174162ms ago: executing program 3 (id=1123): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @union]}}, &(0x7f0000000f40)=""/4089, 0x32, 0xff9, 0xa}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001840)=@newtaction={0xea8, 0x30, 0x25, 0x0, 0x0, {}, [{0xe94, 0x1, [@m_pedit={0xe90, 0x1, 0x0, 0x0, {{0xa}, {0xe64, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x3}, [{}, {}, {0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0x9}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3cf}, {0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x3}, {}, {}, {}, {0x0, 0x40, 0x4000}, {}, {0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x200}, {}, {0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7f, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0xfffffffd}, {0x0, 0xffffff01}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0xdf}, {0x0, 0xfffffff2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x2, 0xf}, {}, {}, {}, {0x0, 0x0, 0x10}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x100}, {}, {0xfffffffc, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x2a0f}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2, 0x0, 0x0, 0x4000000}], [{}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x40, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xea8}}, 0x0) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000080)={0x20, 0x5, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000006a008313"], 0x28}}, 0x0) r3 = gettid() ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000240)=0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000380)=0xc) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r7 = socket$kcm(0x29, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@broadcast, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@private}}, &(0x7f00000004c0)=0xe8) r9 = getgid() r10 = getpid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@dev}}, &(0x7f0000000600)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000640)={0x0, 0x0, 0x0}, &(0x7f0000000680)=0xc) r13 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r13, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r13, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x3, 0x7ab0715dca68fed7, 0xfffffffd, {}, {}, {}, 0x4, @canfd={{}, 0x0, 0x2, 0x0, 0x0, "b8ee0816756b62187804752330b2b55830d7228ef1593c0639bd084bba0bfd8db72f70e5b2e7f90e11cbc6ec61a03fc316d5d47970907af5fc4a27f6cf718909"}}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r14 = socket$isdn_base(0x22, 0x3, 0x0) r15 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$netlink(r2, &(0x7f0000000c00)={&(0x7f0000000100)=@proc={0x10, 0x0, 0x25dfdbfc, 0x100}, 0xc, &(0x7f0000000200)=[{&(0x7f00000007c0)={0x440, 0x1e, 0x2, 0x70bd25, 0x25dfdbfd, "", [@typed={0x8, 0xcf, 0x0, 0x0, @fd=r0}, @nested={0x2af, 0x4a, 0x0, 0x1, [@typed={0xdd, 0x0, 0x0, 0x0, @binary="8e790442a644cf253b0da6ed7504b69e428fb50ea46614a74b9d77f62318587033acf43ce9356145b52ef2668f97e5c1a91960fa82d31cb4842415a80a9864435d3628d428d270a2c8d4cba9684e55399b21f05d019421d92cd37664157bffaa7dd27d6be43d5edff1c43cca01ea34db2ee35c7185b76288786b57bca93ab39677d95f48ce365114d553e34ab6cb3a8a0bd1ffc86869c09ca3255e8d9579e497cd8d87de5b9b97302ac502f557d61b27ef73fc82c118a4c73ccef4567dae19743ba6125e82d6c91336b1470eed837ece2fcc0c2c2880a7851e"}, @nested={0x4, 0xf9}, @nested={0x4, 0x55}, @typed={0x14, 0x147, 0x0, 0x0, @ipv6=@mcast2}, @generic="0adddae1929dc57a850e4a22ccf3583843646c58170320ee9c12556ba7b139532eb4c6f3ff785df88bb961140b748c61362d8da446c79892f25efcf74394c0b27188f87151fd9a16e6de5fdf6be3e135ededf291c45c09fb6c535f8ccedcdaa9d5326422460f5561126a15a7ac5b2df636c77e766ca5457679c205938cecfa4fc974dae325deceb2d2c7713583d1cf2460b50ef02934a0001bccbfe87aab5dff6e4fbaed71ea129530bb4f67491c3da892cbcb5234397f5b28eb3929a89a8c5e4438b97cefd27901930b", @generic="958b7ea092dfe6782368b1a6a9a51dce1ee1cdd607be18b09a66b069b98842adbbe51e4206504ecc79a1ba9451d5c5f314ed49dc67abaffd5f51153c8d99a43923064c1797f6709d413aeb794e94c71e04641f043f49a57b2df5942ee94e9c358ebf0f2ee63351ad3850fc976dfbf6cf53e0be0d42f19da9111631f3112df9dc6334a673b63bf678e143c70ec06cd9e3ae89250513290037b2d10eb20b95ef41dd8040be7c7e019a3d326eb9839dc29ce84463577b7dad69d335dc5c3b6b1ef4866fcd6c7df9fef8cde866161624a75e57f9a195027de3bbd29cef555468e0d8d7adf12048"]}, @nested={0x93, 0x139, 0x0, 0x1, [@nested={0x4, 0x9c}, @nested={0x4, 0x14d}, @nested={0x4, 0x5f}, @nested={0x4, 0x5d}, @generic="1c97864b8d73abe4773d2fdf94018615ca8c1680b572301550c1d078d5bb4148c175d506eda4a37aa454ddff2fb0c93fb697a5dd152bcda8b7ac2fbd6a487d61d44a2ce4c68a5e0ca78a655cc64ac667e3aeee33241707e8899f2306c08df2e71428a24d41571c789055a4db57cd62fa80782e3f844e97", @typed={0x8, 0x7, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x22}}]}, @nested={0x71, 0x68, 0x0, 0x1, [@typed={0x8, 0xa8, 0x0, 0x0, @pid}, @generic="273b5832afb3b439e15665ef4afc92e4cf4476f5908a408de68f8793413fc5cd0842b5e036bdb3818324846ac29cba3713f9aa82e47d12aa374185e82a35d575b42b9597a6098068e8b89bb0d602a25e4e7b266006b05f52c377dea591666ac3f501ab192f"]}, @typed={0x8, 0x101, 0x0, 0x0, @pid=r3}, @generic="4ed01cf8640fe5e9e24ed41a3ea721934c1d56710b35e1afd54216456ff41146cc205dd56610664c7fb51803ec85a30ea70e3bcf154e8c7422c9cd303a7565d3622b5ab7589552e5fc01717fb4ed071ad8e26ae068f1729b1d86c446d67abe350fce29d517"]}, 0x440}, {&(0x7f0000002700)={0x20f0, 0x18, 0x10, 0x70bd26, 0x25dfdbfd, "", [@nested={0xc, 0xe8, 0x0, 0x1, [@typed={0x5, 0x81, 0x0, 0x0, @str='\x00'}]}, @generic="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", @generic="f5a81e7cb3230eb1deb3e64c3ba91d891a69542d0f12ebd8af78fdcd8853325a6ca6baef8f6156aa513c95b06e1dd6220d47a555e5e46748bc209e7478943ca98e927b114c3eefc0c467ddffe00ca44003fd1aa64577e08860feaa5e835a2e5f1a14c59baec8b5227f922b5898cb449b854ca741", @generic="badd0dca57f49fda1f3f444d2707e1058fb234e94875c77a8e0e8496c1881183a277e076ab2d5988da3eb4816720dd66532e19125adddbf14915342f52cb2f18631aa6ffefc28ca65c4852ffc31e3513ed3762d4dc", @nested={0x1008, 0x78, 0x0, 0x1, [@generic="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", @nested={0x4, 0x76}]}]}, 0x20f0}], 0x2, &(0x7f00000006c0)=[@cred={{0x1c, 0x1, 0x2, {r4, r5, 0xee01}}}, @rights={{0x38, 0x1, 0x1, [r1, r0, r2, r6, r2, r2, r1, r7, r1, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r8, r9}}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, r12}}}, @rights={{0x24, 0x1, 0x1, [r1, r0, r14, r15, r2]}}], 0xc0, 0x10}, 0x20000000) r16 = socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_buf(r16, 0x6, 0x1f, 0x0, &(0x7f0000001800)) r17 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711217000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) sendmmsg(r17, &(0x7f00000002c0), 0x40000000000009f, 0x0) 254.894905ms ago: executing program 0 (id=1115): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0xe}]}}}]}, 0x44}}, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r7, @ANYBLOB="050034008b000000180049000dac0f000dac0f000aac0f0005ac0f00027b0026e689c5e0fe7242e16d571372c5350594f5c1f4c2641658de51cd442c638572dd639d3dda1563ba653b31cbed904e04d4438533ac2b8fbbced80617a381571d"], 0x3c}}, 0x0) socket(0x10, 0x803, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r8, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r8, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0) sendto$inet(r8, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r8, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) sendmsg$NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="15b32abd7000ffdbdf250500000008000300", @ANYRES32=r7, @ANYBLOB="08c1e1e6203600f4e7aa2adc8be4667bfe3a4dd337f35cdbbaadddb8237708f9c3cdce28be"], 0x28}, 0x1, 0x0, 0x0, 0x40050}, 0x40000) connect$rose(r4, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) connect$rose(r4, &(0x7f00000000c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @null]}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) 191.974232ms ago: executing program 4 (id=1116): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket(0x2b, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYRESHEX=r1, @ANYRES16=r2, @ANYRESOCT=r0], 0x48) socket$inet_sctp(0x2, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r3 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="aeffffff", @ANYRES16=r3, @ANYBLOB="310428bd7000fffffffdffffff0018000180140002006e6574246593596dfaf07373696d30000000000000050004000000000014"], 0x34}}, 0x0) socket(0x10, 0x800, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x40305839, &(0x7f0000000540)={'\x00', @link_local={0x1, 0x80, 0xc2, 0x5}}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, 0x0, 0x40010) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x81, @mcast2, 0x5}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 154.840988ms ago: executing program 1 (id=1117): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000bc0)=@ethtool_stats}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r1, 0x0) socket$inet6(0xa, 0x1, 0x3) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x18, 0x140c, 0x400, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x800) r3 = socket(0x10, 0x803, 0x0) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4018, r0}, 0x18) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a0400eb2636037f00000000", @ANYRES32=r5, @ANYBLOB="0200000000008000800012000800010076746936740002006000"], 0xa0}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf}}) socket$nl_route(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) socket(0x10, 0x803, 0x0) (async) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000bc0)=@ethtool_stats}) (async) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r1, 0x0) (async) socket$inet6(0xa, 0x1, 0x3) (async) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x18, 0x140c, 0x400, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x800) (async) socket(0x10, 0x803, 0x0) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4018, r0}, 0x18) (async) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a0400eb2636037f00000000", @ANYRES32=r5, @ANYBLOB="0200000000008000800012000800010076746936740002006000"], 0xa0}}, 0x0) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf}}) (async) 79.505151ms ago: executing program 3 (id=1118): r0 = socket(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) (async) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) (async, rerun: 32) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2001) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x1f}, 0x1, 0x0, 0x20, 0x0, [{@multicast1}, {@dev}]}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x13, r1, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r2, 0x0, 0xd1, &(0x7f0000000480)=0x8, 0x4) 0s ago: executing program 4 (id=1119): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newtaction={0xe80, 0x30, 0x25, 0x0, 0x0, {}, [{0xe6c, 0x1, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0xffffff54, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x1}, [{}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfc}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x40000000}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x401}, {}, {0x0, 0x8001}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffc}], [{}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xdfe968e50d74430b}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe80}, 0x1, 0x0, 0x0, 0x40080}, 0x0) bind$netrom(r0, &(0x7f00000002c0)={{0x6, @rose}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010000100990400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300016802c0001802800010000000000aaaaaaaaaaaa000000000000000000000000000000000000000000000000000008001b0000000000"], 0x58}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r3, &(0x7f0000000340)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71017000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) syz_emit_ethernet(0x46, &(0x7f0000000340)={@multicast, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "1e00", 0x10, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x2, 0x0, @val=0x80}}}}}}}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="6800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000014060000400012800b00010067656e6576650000300002801400070000000000000000000000ffffac14140005000a0002000000050009"], 0x68}, 0x9}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000000)={0x6, {{0x2, 0x0, @multicast1}}}, 0x88) getsockopt$inet_buf(r7, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) socket$can_raw(0x1d, 0x3, 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$sock_buf(r10, 0x1, 0x37, 0x0, &(0x7f0000000040)) socket(0x5, 0x5, 0x1ff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r9, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x90) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001040)="2b51123ece2a8e8160687fbc0ea3d876cdfd5775db9a2cac279428848e24a7af0a681c3ed2ba61f780857fab3849451fc181182786717d4b6a10e4ae3655feac8fe35522291da5d6c343093afbae1e65d291f8cc6ca693ec78", 0x59}, {&(0x7f0000001c80)="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", 0xf87}], 0x2}, 0x10) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000001280)={0x18}, 0x1) kernel console output (not intermixed with test programs): on device team0 [ 75.996193][ T5843] Bluetooth: hci2: command tx timeout [ 76.001639][ T5843] Bluetooth: hci4: command tx timeout [ 76.020613][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.027794][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.047567][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.067479][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.074624][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.112323][ T3457] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.119509][ T3457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.136784][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.143898][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.244314][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.300883][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.308076][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.350275][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.357490][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.394522][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.523813][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.592440][ T3457] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.599659][ T3457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.649492][ T3457] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.656723][ T3457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.753101][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.843774][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.862284][ T5829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.970581][ T5834] veth0_vlan: entered promiscuous mode [ 77.051019][ T5834] veth1_vlan: entered promiscuous mode [ 77.061967][ T5840] veth0_vlan: entered promiscuous mode [ 77.079715][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.123070][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.156885][ T5840] veth1_vlan: entered promiscuous mode [ 77.181970][ T5834] veth0_macvtap: entered promiscuous mode [ 77.227508][ T5834] veth1_macvtap: entered promiscuous mode [ 77.277697][ T5840] veth0_macvtap: entered promiscuous mode [ 77.292427][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.309114][ T5840] veth1_macvtap: entered promiscuous mode [ 77.329417][ T5839] veth0_vlan: entered promiscuous mode [ 77.358507][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.378797][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.398761][ T5834] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.409090][ T5834] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.419195][ T5834] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.428016][ T5834] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.446597][ T5839] veth1_vlan: entered promiscuous mode [ 77.469625][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.501819][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.571939][ T5840] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.582281][ T5840] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.592256][ T5840] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.601900][ T5840] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.621212][ T5839] veth0_macvtap: entered promiscuous mode [ 77.653089][ T5839] veth1_macvtap: entered promiscuous mode [ 77.774087][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.814199][ T3434] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.822512][ T3457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.831496][ T5829] veth0_vlan: entered promiscuous mode [ 77.836137][ T3434] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.838791][ T3457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.863243][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.908843][ T5839] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.917856][ T5843] Bluetooth: hci1: command tx timeout [ 77.926513][ T5839] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.935578][ T5839] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.944286][ T5839] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.981829][ T5829] veth1_vlan: entered promiscuous mode [ 77.995686][ T5843] Bluetooth: hci3: command tx timeout [ 77.995696][ T5837] Bluetooth: hci0: command tx timeout [ 78.014627][ T5845] veth0_vlan: entered promiscuous mode [ 78.024935][ T3457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.030711][ T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.032857][ T3457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.041305][ T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.075418][ T5837] Bluetooth: hci4: command tx timeout [ 78.086575][ T5837] Bluetooth: hci2: command tx timeout [ 78.094623][ T5845] veth1_vlan: entered promiscuous mode [ 78.184451][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 78.229313][ T5829] veth0_macvtap: entered promiscuous mode [ 78.255642][ T5829] veth1_macvtap: entered promiscuous mode [ 78.346696][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.354534][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.431097][ T5845] veth0_macvtap: entered promiscuous mode [ 78.473494][ T5845] veth1_macvtap: entered promiscuous mode [ 78.481624][ T5952] IPv6: NLM_F_CREATE should be specified when creating new route [ 78.517440][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.529359][ T5952] netlink: 'syz.1.6': attribute type 29 has an invalid length. [ 78.552464][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.568107][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.575674][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.577116][ T5952] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.613253][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.621955][ T5952] netlink: 'syz.1.6': attribute type 29 has an invalid length. [ 78.650214][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.668744][ T5845] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.684354][ T5954] netlink: 232 bytes leftover after parsing attributes in process `syz.2.7'. [ 78.698379][ T5845] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.708437][ T5845] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.721551][ T5845] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.768191][ T5829] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.794322][ T5829] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.809763][ T5829] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.821379][ T5829] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.854352][ T5961] netlink: 'syz.1.8': attribute type 2 has an invalid length. [ 78.886531][ T5961] netlink: 'syz.1.8': attribute type 1 has an invalid length. [ 78.912054][ T5961] netlink: 244 bytes leftover after parsing attributes in process `syz.1.8'. [ 79.077489][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.107183][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.190852][ T5970] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10'. [ 79.199433][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.211310][ T5970] netlink: 9 bytes leftover after parsing attributes in process `syz.2.10'. [ 79.223514][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.243199][ T5970] gretap0: entered promiscuous mode [ 79.271717][ T5967] netlink: 5 bytes leftover after parsing attributes in process `syz.2.10'. [ 79.282629][ T3434] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.296424][ T3434] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.306029][ T5967] 0XD: renamed from gretap0 [ 79.319065][ T5967] 0XD: left promiscuous mode [ 79.323978][ T5967] 0XD: entered allmulticast mode [ 79.332456][ T5967] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 79.499110][ T3517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.540601][ T3517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.588831][ T5977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 79.831750][ T5986] netlink: 'syz.4.15': attribute type 1 has an invalid length. [ 79.875418][ T5986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15'. [ 79.901468][ T5986] netlink: 40 bytes leftover after parsing attributes in process `syz.4.15'. [ 79.996144][ T5837] Bluetooth: hci1: command tx timeout [ 80.028168][ T5994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17'. [ 80.079474][ T5837] Bluetooth: hci3: command tx timeout [ 80.080125][ T5843] Bluetooth: hci0: command tx timeout [ 80.090750][ T6002] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17'. [ 80.158040][ T5843] Bluetooth: hci2: command tx timeout [ 80.158778][ T5837] Bluetooth: hci4: command tx timeout [ 80.204189][ T5995] syzkaller0: entered promiscuous mode [ 80.245962][ T5995] syzkaller0: entered allmulticast mode [ 80.593457][ T6027] netlink: 'syz.0.26': attribute type 9 has an invalid length. [ 80.914386][ T6040] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 80.931591][ T6036] netlink: 'syz.1.28': attribute type 4 has an invalid length. [ 81.256485][ T6062] warning: `syz.2.32' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 81.280587][ T6061] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 81.386986][ T6066] nftables ruleset with unbound set [ 81.523117][ T6075] netlink: 'syz.4.39': attribute type 11 has an invalid length. [ 81.533576][ T6074] vlan2: entered allmulticast mode [ 81.556761][ T6074] gretap0: entered allmulticast mode [ 82.287135][ T6107] syz.2.49 uses obsolete (PF_INET,SOCK_PACKET) [ 82.977016][ T6135] trusted_key: syz.4.56 sent an empty control message without MSG_MORE. [ 83.103093][ T6144] tap0: tun_chr_ioctl cmd 1074025678 [ 83.109054][ T6144] tap0: group set to 0 [ 83.129999][ T6146] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.155206][ T6146] Cannot find add_set index 4 as target [ 83.161656][ T6146] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20004 [ 83.176783][ T6146] block nbd1: not configured, cannot reconfigure [ 83.310283][ T6150] Zero length message leads to an empty skb [ 83.534544][ T6160] openvswitch: netlink: IPv6 tunnel dst address is zero [ 83.672776][ T6167] netlink: 'syz.3.64': attribute type 1 has an invalid length. [ 83.702605][ T6162] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 83.785001][ T6171] netlink: 'syz.0.70': attribute type 2 has an invalid length. [ 83.802903][ T6171] __nla_validate_parse: 14 callbacks suppressed [ 83.802920][ T6171] netlink: 188 bytes leftover after parsing attributes in process `syz.0.70'. [ 83.876280][ T6162] netlink: 14 bytes leftover after parsing attributes in process `syz.3.64'. [ 84.052953][ T6162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.067546][ T6162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.080938][ T6162] bond0 (unregistering): Released all slaves [ 84.087780][ T6183] netlink: 'syz.2.72': attribute type 11 has an invalid length. [ 84.096908][ T6183] netlink: 'syz.2.72': attribute type 11 has an invalid length. [ 84.105669][ T6183] netlink: 224 bytes leftover after parsing attributes in process `syz.2.72'. [ 84.112258][ T6180] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 84.323331][ T6189] netlink: 108 bytes leftover after parsing attributes in process `syz.3.78'. [ 84.365377][ T6190] netlink: 'syz.3.78': attribute type 1 has an invalid length. [ 84.456915][ T6197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.80'. [ 84.526895][ T6196] netlink: 68 bytes leftover after parsing attributes in process `syz.2.79'. [ 84.729862][ T6208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.84'. [ 84.782040][ T6212] netlink: 'syz.4.84': attribute type 10 has an invalid length. [ 84.787924][ T6208] netlink: 4 bytes leftover after parsing attributes in process `syz.4.84'. [ 84.864036][ T6217] netlink: 'syz.0.88': attribute type 11 has an invalid length. [ 84.879582][ T6208] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.888625][ T6208] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.897480][ T6208] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.906295][ T6208] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.934960][ T6217] netlink: 64 bytes leftover after parsing attributes in process `syz.0.88'. [ 84.963018][ T6218] netlink: 'syz.0.88': attribute type 11 has an invalid length. [ 84.979223][ T6218] netlink: 64 bytes leftover after parsing attributes in process `syz.0.88'. [ 85.802628][ T6254] netlink: 'syz.0.97': attribute type 3 has an invalid length. [ 86.229174][ T6275] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 86.468045][ T6285] xt_CT: No such helper "netbios-ns" [ 86.729573][ T1209] cfg80211: failed to load regulatory.db [ 87.235069][ T6329] netem: unknown loss type 0 [ 87.251058][ T6329] netem: change failed [ 87.655578][ T6346] netlink: 'syz.1.125': attribute type 1 has an invalid length. [ 87.840759][ T6356] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 88.834599][ T6398] : entered promiscuous mode [ 89.006895][ T6407] __nla_validate_parse: 9 callbacks suppressed [ 89.006914][ T6407] netlink: 40 bytes leftover after parsing attributes in process `syz.0.147'. [ 89.360796][ T6421] netlink: 8 bytes leftover after parsing attributes in process `syz.3.153'. [ 89.598445][ T6432] netlink: 'syz.2.157': attribute type 7 has an invalid length. [ 89.652761][ T6432] x_tables: ip_tables: osf match: only valid for protocol 6 [ 89.711930][ T6438] IPVS: length: 173 != 24 [ 90.160650][ T6455] netlink: 72 bytes leftover after parsing attributes in process `syz.2.165'. [ 90.392522][ T6472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.170'. [ 90.444868][ T6472] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 90.453115][ T6472] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 90.680871][ T6488] netlink: 36 bytes leftover after parsing attributes in process `syz.0.169'. [ 90.704237][ T6489] gtp0: entered promiscuous mode [ 90.710169][ T6488] netlink: 16 bytes leftover after parsing attributes in process `syz.0.169'. [ 90.725400][ T6489] gtp0: entered allmulticast mode [ 90.742665][ T6488] netlink: 36 bytes leftover after parsing attributes in process `syz.0.169'. [ 90.802077][ T6488] netlink: 36 bytes leftover after parsing attributes in process `syz.0.169'. [ 90.867504][ T6499] netlink: 'syz.4.178': attribute type 1 has an invalid length. [ 91.127336][ T6502] syz.4.179: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 91.155380][ T6502] CPU: 0 UID: 0 PID: 6502 Comm: syz.4.179 Not tainted 6.16.0-rc3-syzkaller-00133-g42fd432fe6d3 #0 PREEMPT(full) [ 91.155405][ T6502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 91.155422][ T6502] Call Trace: [ 91.155429][ T6502] [ 91.155436][ T6502] dump_stack_lvl+0x189/0x250 [ 91.155472][ T6502] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 91.155496][ T6502] ? __pfx_dump_stack_lvl+0x10/0x10 [ 91.155520][ T6502] ? __pfx__printk+0x10/0x10 [ 91.155539][ T6502] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 91.155558][ T6502] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 91.155585][ T6502] warn_alloc+0x214/0x310 [ 91.155610][ T6502] ? __pfx_warn_alloc+0x10/0x10 [ 91.155639][ T6502] ? __get_vm_area_node+0x28f/0x300 [ 91.155657][ T6502] ? packet_set_ring+0x6f4/0x2380 [ 91.155683][ T6502] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 91.155732][ T6502] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 91.155752][ T6502] ? alloc_pages_mpol+0x3cd/0x4a0 [ 91.155773][ T6502] ? packet_set_ring+0x6f4/0x2380 [ 91.155793][ T6502] vzalloc_noprof+0xb2/0xf0 [ 91.155811][ T6502] ? packet_set_ring+0x6f4/0x2380 [ 91.155834][ T6502] packet_set_ring+0x6f4/0x2380 [ 91.155878][ T6502] ? __pfx_packet_set_ring+0x10/0x10 [ 91.155920][ T6502] ? _copy_from_user+0x94/0xb0 [ 91.155942][ T6502] packet_setsockopt+0xc5a/0x12c0 [ 91.155965][ T6502] ? __pfx_packet_setsockopt+0x10/0x10 [ 91.155981][ T6502] ? futex_wait+0x285/0x360 [ 91.156005][ T6502] ? __pfx_futex_wait+0x10/0x10 [ 91.156034][ T6502] ? aa_sk_perm+0x81e/0x950 [ 91.156059][ T6502] ? __pfx_aa_sk_perm+0x10/0x10 [ 91.156075][ T6502] ? __lock_acquire+0xab9/0xd20 [ 91.156101][ T6502] ? aa_sock_opt_perm+0x74/0x110 [ 91.156123][ T6502] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 91.156142][ T6502] ? __pfx_packet_setsockopt+0x10/0x10 [ 91.156163][ T6502] do_sock_setsockopt+0x257/0x3e0 [ 91.156187][ T6502] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 91.156210][ T6502] ? __fget_files+0x2a/0x420 [ 91.156234][ T6502] __x64_sys_setsockopt+0x18b/0x220 [ 91.156258][ T6502] do_syscall_64+0xfa/0x3b0 [ 91.156272][ T6502] ? lockdep_hardirqs_on+0x9c/0x150 [ 91.156299][ T6502] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.156315][ T6502] ? clear_bhb_loop+0x60/0xb0 [ 91.156335][ T6502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.156350][ T6502] RIP: 0033:0x7f3b8a38e929 [ 91.156371][ T6502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.156384][ T6502] RSP: 002b:00007f3b8b18d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 91.156401][ T6502] RAX: ffffffffffffffda RBX: 00007f3b8a5b5fa0 RCX: 00007f3b8a38e929 [ 91.156411][ T6502] RDX: 000000000000000d RSI: 0000000000000107 RDI: 0000000000000003 [ 91.156421][ T6502] RBP: 00007f3b8a410b39 R08: 000000000000001c R09: 0000000000000000 [ 91.156431][ T6502] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.156441][ T6502] R13: 0000000000000000 R14: 00007f3b8a5b5fa0 R15: 00007fff082e4b68 [ 91.156468][ T6502] [ 91.156480][ T6502] Mem-Info: [ 91.487195][ T6502] active_anon:6010 inactive_anon:0 isolated_anon:0 [ 91.487195][ T6502] active_file:1164 inactive_file:39824 isolated_file:0 [ 91.487195][ T6502] unevictable:768 dirty:465 writeback:0 [ 91.487195][ T6502] slab_reclaimable:9975 slab_unreclaimable:97443 [ 91.487195][ T6502] mapped:29075 shmem:1884 pagetables:1174 [ 91.487195][ T6502] sec_pagetables:0 bounce:0 [ 91.487195][ T6502] kernel_misc_reclaimable:0 [ 91.487195][ T6502] free:1336617 free_pcp:15267 free_cma:0 [ 91.542720][ T6520] unknown channel width for channel at 909000KHz? [ 91.569031][ T6520] unknown channel width for channel at 909000KHz? [ 91.579130][ T6502] Node 0 active_anon:22340kB inactive_anon:0kB active_file:4656kB inactive_file:159092kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116300kB dirty:1848kB writeback:0kB shmem:4400kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11708kB pagetables:4256kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 91.612793][ T6520] unknown channel width for channel at 909000KHz? [ 91.624170][ T6502] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:12kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 91.729443][ T6502] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 91.795819][ T6502] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 91.802255][ T6502] Node 0 DMA32 free:1425060kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23296kB inactive_anon:0kB active_file:4656kB inactive_file:157272kB unevictable:1536kB writepending:1840kB present:3129332kB managed:2561004kB mlocked:0kB bounce:0kB free_pcp:45808kB local_pcp:25748kB free_cma:0kB [ 91.859952][ T6530] IPVS: set_ctl: invalid protocol: 50 10.1.1.1:20004 [ 92.018652][ T6537] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.189'. [ 92.051324][ T6502] lowmem_reserve[]: 0 0 1 1 1 [ 92.068793][ T6502] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1820kB unevictable:0kB writepending:8kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 92.141366][ T6502] lowmem_reserve[]: 0 0 0 0 0 [ 92.147719][ T6502] Node 1 Normal free:3905820kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:12kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:17024kB local_pcp:5248kB free_cma:0kB [ 92.184208][ T3434] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.243450][ T6502] lowmem_reserve[]: 0 0 0 0 0 [ 92.278311][ T6502] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 92.320998][ T6502] Node 0 DMA32: 65*4kB (UE) 151*8kB (UE) 22*16kB (UM) 0*32kB 1*64kB (U) 3*128kB (UME) 2*256kB (UM) 3*512kB (UME) 0*1024kB 2*2048kB (ME) 342*4096kB (M) = 1409244kB [ 92.412633][ T6502] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 92.444428][ T6502] Node 1 Normal: 207*4kB (UM) 48*8kB (UME) 38*16kB (UME) 88*32kB (UME) 20*64kB (UME) 6*128kB (UME) 3*256kB (ME) 2*512kB (M) 2*1024kB (ME) 2*2048kB (UE) 950*4096kB (M) = 3905820kB [ 92.501032][ T6502] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 92.527791][ T6502] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 92.552378][ T6502] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 92.580556][ T6502] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 92.600234][ T6502] 42447 total pagecache pages [ 92.611068][ T6502] 0 pages in swap cache [ 92.644795][ T6502] Free swap = 124996kB [ 92.650230][ T6502] Total swap = 124996kB [ 92.669356][ T6502] 2097051 pages RAM [ 92.713081][ T6502] 0 pages HighMem/MovableOnly [ 92.726996][ T6502] 424694 pages reserved [ 92.760604][ T6502] 0 pages cma reserved [ 92.796069][ T6560] netlink: 24 bytes leftover after parsing attributes in process `syz.3.197'. [ 93.821967][ T6610] netlink: 'syz.0.211': attribute type 12 has an invalid length. [ 94.195512][ T6623] netlink: 'syz.1.215': attribute type 1 has an invalid length. [ 94.243606][ T6623] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 94.464399][ T6641] netlink: 'syz.2.222': attribute type 21 has an invalid length. [ 94.487460][ T6642] __nla_validate_parse: 1 callbacks suppressed [ 94.487478][ T6642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.221'. [ 94.549112][ T6641] netlink: 132 bytes leftover after parsing attributes in process `syz.2.222'. [ 94.555274][ T6642] netlink: 12 bytes leftover after parsing attributes in process `syz.0.221'. [ 94.613928][ T6639] netlink: 204 bytes leftover after parsing attributes in process `syz.1.220'. [ 94.632540][ T6639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.220'. [ 94.655640][ T6642] netlink: 'syz.0.221': attribute type 7 has an invalid length. [ 94.692926][ T6639] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 94.873129][ T6657] netlink: 'syz.1.226': attribute type 10 has an invalid length. [ 94.877200][ T6653] netlink: 'syz.4.224': attribute type 33 has an invalid length. [ 94.891205][ T6657] netlink: 40 bytes leftover after parsing attributes in process `syz.1.226'. [ 94.989495][ T6657] team0: Port device geneve0 added [ 95.117245][ T6665] netlink: 4 bytes leftover after parsing attributes in process `syz.4.230'. [ 95.126385][ T6666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.229'. [ 95.171660][ T6665] netlink: 4 bytes leftover after parsing attributes in process `syz.4.230'. [ 95.222657][ T6676] netlink: 'syz.3.231': attribute type 3 has an invalid length. [ 95.266549][ T6676] veth7: entered allmulticast mode [ 95.393863][ T6683] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.413755][ T6685] netlink: 28 bytes leftover after parsing attributes in process `syz.4.235'. [ 95.499137][ T6689] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 95.546619][ T6691] Bluetooth: MGMT ver 1.23 [ 95.634841][ T6689] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 96.029188][ T6721] netlink: 'syz.2.243': attribute type 1 has an invalid length. [ 96.150713][ T6720] team0 (unregistering): Port device team_slave_0 removed [ 96.185600][ T6720] team0 (unregistering): Port device team_slave_1 removed [ 96.601534][ T6746] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 96.632469][ T6746] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 97.594844][ T5837] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 97.595551][ T5843] Bluetooth: hci0: command 0x0c1a tx timeout [ 98.422408][ T6835] netlink: 'syz.4.270': attribute type 11 has an invalid length. [ 99.193324][ T6840] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.201239][ T6840] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.433347][ T6840] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.496822][ T6840] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.689356][ T6840] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.698594][ T6840] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.708174][ T6840] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.717460][ T6840] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.811545][ T6837] __nla_validate_parse: 11 callbacks suppressed [ 99.811566][ T6837] netlink: 88 bytes leftover after parsing attributes in process `syz.0.272'. [ 99.919752][ T6858] bridge0: port 3(batadv1) entered blocking state [ 99.964830][ T6858] bridge0: port 3(batadv1) entered disabled state [ 99.983251][ T6858] batadv1: entered allmulticast mode [ 100.008900][ T6858] batadv1: entered promiscuous mode [ 100.309306][ T6892] netlink: 64 bytes leftover after parsing attributes in process `syz.1.281'. [ 100.388986][ T153] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 100.398575][ T153] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 100.579415][ T6914] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 100.831886][ T6927] netlink: 'syz.0.291': attribute type 9 has an invalid length. [ 100.917083][ T6927] netlink: 24 bytes leftover after parsing attributes in process `syz.0.291'. [ 100.954362][ T6936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.292'. [ 100.968272][ T6931] netlink: 576 bytes leftover after parsing attributes in process `syz.0.291'. [ 100.984565][ T6935] netlink: 20 bytes leftover after parsing attributes in process `syz.3.293'. [ 101.436493][ T6957] netlink: 256 bytes leftover after parsing attributes in process `syz.0.298'. [ 101.456658][ T6957] netlink: 'syz.0.298': attribute type 9 has an invalid length. [ 101.710111][ T6980] xt_hashlimit: size too large, truncated to 1048576 [ 101.743575][ T6980] xt_hashlimit: invalid rate [ 101.773231][ T6980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.305'. [ 101.856442][ T6986] netlink: 80 bytes leftover after parsing attributes in process `syz.2.308'. [ 102.082580][ T6999] netlink: 12 bytes leftover after parsing attributes in process `syz.3.311'. [ 102.127812][ T6999] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.137281][ T6999] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.146296][ T6999] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.155224][ T6999] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.190624][ T6999] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.201471][ T6999] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.211086][ T6999] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.220661][ T6999] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.478155][ T7018] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 102.879591][ T7037] raw_sendmsg: syz.3.322 forgot to set AF_INET. Fix it! [ 103.101595][ T7048] openvswitch: netlink: Duplicate or invalid key (type 0). [ 103.112320][ T7044] pimreg: entered allmulticast mode [ 103.121265][ T7048] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 103.129344][ T7044] pimreg: left allmulticast mode [ 103.420227][ T7065] netlink: 'syz.0.331': attribute type 10 has an invalid length. [ 103.466897][ T7066] xt_addrtype: ipv6 does not support BROADCAST matching [ 103.467816][ T7065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.540036][ T7065] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 103.551377][ T7066] netlink: 'syz.2.329': attribute type 1 has an invalid length. [ 103.572899][ T7066] NCSI netlink: No device for ifindex 4101 [ 104.103822][ T7099] netlink: 'syz.4.341': attribute type 1 has an invalid length. [ 104.112739][ T7098] netlink: 'syz.4.341': attribute type 1 has an invalid length. [ 104.507292][ T7120] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 104.786716][ T7129] xt_bpf: check failed: parse error [ 104.890836][ T7132] __nla_validate_parse: 9 callbacks suppressed [ 104.890853][ T7132] netlink: 16 bytes leftover after parsing attributes in process `syz.2.353'. [ 104.898494][ T7135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.354'. [ 104.942671][ T7137] netlink: 16 bytes leftover after parsing attributes in process `syz.2.353'. [ 104.959611][ T7136] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 105.662377][ T7167] netlink: 32 bytes leftover after parsing attributes in process `syz.3.364'. [ 105.806313][ T7176] IPVS: Error joining to the multicast group [ 106.921819][ T7201] netlink: 4 bytes leftover after parsing attributes in process `syz.4.377'. [ 107.970663][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 107.981056][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 107.989209][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 107.997999][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 108.009046][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 109.008751][ T7217] chnl_net:caif_netlink_parms(): no params data found [ 109.191861][ T13] bridge_slave_1: left allmulticast mode [ 109.206397][ T13] bridge_slave_1: left promiscuous mode [ 109.219601][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.256044][ T13] bridge_slave_0: left allmulticast mode [ 109.264068][ T13] bridge_slave_0: left promiscuous mode [ 109.275475][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.002074][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.012040][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.021621][ T13] bond0 (unregistering): Released all slaves [ 110.035354][ T13] bond1 (unregistering): Released all slaves [ 110.064876][ T7273] tipc: Enabling of bearer rejected, failed to enable media [ 110.074984][ T5843] Bluetooth: hci1: command tx timeout [ 110.182075][ T7292] x_tables: duplicate underflow at hook 1 [ 110.336619][ T7217] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.355022][ T7217] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.362288][ T7217] bridge_slave_0: entered allmulticast mode [ 110.382456][ T7217] bridge_slave_0: entered promiscuous mode [ 110.494986][ T7217] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.523955][ T7217] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.551984][ T7217] bridge_slave_1: entered allmulticast mode [ 110.580298][ T7217] bridge_slave_1: entered promiscuous mode [ 110.626902][ T7309] netlink: 24 bytes leftover after parsing attributes in process `syz.1.406'. [ 110.719411][ T7315] netlink: 16 bytes leftover after parsing attributes in process `syz.0.407'. [ 110.759910][ T7314] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 110.865967][ T7217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.931500][ T7217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.089877][ T7327] vlan0: entered promiscuous mode [ 111.112063][ T7327] vlan0: entered allmulticast mode [ 111.130153][ T7327] hsr_slave_1: entered allmulticast mode [ 111.285498][ T13] hsr_slave_0: left promiscuous mode [ 111.337834][ T13] hsr_slave_1: left promiscuous mode [ 111.343735][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.426241][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.981420][ T13] team0 (unregistering): Port device team_slave_1 removed [ 112.019525][ T13] team0 (unregistering): Port device team_slave_0 removed [ 112.160902][ T5843] Bluetooth: hci1: command tx timeout [ 112.460047][ T7217] team0: Port device team_slave_0 added [ 112.519372][ T7217] team0: Port device team_slave_1 added [ 112.828832][ T7391] netlink: 20 bytes leftover after parsing attributes in process `syz.0.425'. [ 112.869894][ T7217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.885058][ T7217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.977020][ T7217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.045548][ T7403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.426'. [ 113.083524][ T7217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.098394][ T7217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.124915][ T7217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.359075][ T7419] tipc: Enabling of bearer rejected, failed to enable media [ 113.428906][ T7217] hsr_slave_0: entered promiscuous mode [ 113.452634][ T7217] hsr_slave_1: entered promiscuous mode [ 113.649845][ T7435] netlink: 12 bytes leftover after parsing attributes in process `syz.1.432'. [ 113.762114][ T7442] netlink: 'syz.0.434': attribute type 1 has an invalid length. [ 113.794053][ T7442] netlink: 224 bytes leftover after parsing attributes in process `syz.0.434'. [ 113.929310][ T7448] netlink: 12 bytes leftover after parsing attributes in process `syz.4.435'. [ 113.979047][ T7448] netlink: 'syz.4.435': attribute type 10 has an invalid length. [ 114.093407][ T7448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.137469][ T7448] team0: Port device bond0 added [ 114.223110][ T7466] netlink: 36 bytes leftover after parsing attributes in process `syz.0.440'. [ 114.235003][ T5843] Bluetooth: hci1: command tx timeout [ 114.243960][ T7466] netlink: 16 bytes leftover after parsing attributes in process `syz.0.440'. [ 114.263021][ T7466] netlink: 36 bytes leftover after parsing attributes in process `syz.0.440'. [ 114.550652][ T7481] openvswitch: netlink: Key type 272 is out of range max 32 [ 114.676349][ T7448] syz.4.435 (7448) used greatest stack depth: 18840 bytes left [ 114.725767][ T7484] FAULT_INJECTION: forcing a failure. [ 114.725767][ T7484] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 114.740617][ T7484] CPU: 1 UID: 0 PID: 7484 Comm: syz.0.444 Not tainted 6.16.0-rc3-syzkaller-00133-g42fd432fe6d3 #0 PREEMPT(full) [ 114.740640][ T7484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 114.740650][ T7484] Call Trace: [ 114.740657][ T7484] [ 114.740665][ T7484] dump_stack_lvl+0x189/0x250 [ 114.740694][ T7484] ? __pfx____ratelimit+0x10/0x10 [ 114.740719][ T7484] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.740743][ T7484] ? __pfx__printk+0x10/0x10 [ 114.740761][ T7484] ? __might_fault+0xb0/0x130 [ 114.740790][ T7484] should_fail_ex+0x414/0x560 [ 114.740816][ T7484] _copy_from_iter+0x1db/0x16f0 [ 114.740843][ T7484] ? rcu_is_watching+0x15/0xb0 [ 114.740869][ T7484] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 114.740888][ T7484] ? __pfx__copy_from_iter+0x10/0x10 [ 114.740913][ T7484] ? __build_skb_around+0x257/0x3e0 [ 114.740936][ T7484] ? netlink_sendmsg+0x642/0xb30 [ 114.740953][ T7484] ? skb_put+0x11b/0x210 [ 114.740976][ T7484] netlink_sendmsg+0x6b2/0xb30 [ 114.741004][ T7484] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.741027][ T7484] ? aa_sock_msg_perm+0x94/0x160 [ 114.741050][ T7484] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 114.741070][ T7484] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.741090][ T7484] __sock_sendmsg+0x21c/0x270 [ 114.741117][ T7484] ____sys_sendmsg+0x505/0x830 [ 114.741142][ T7484] ? __pfx_____sys_sendmsg+0x10/0x10 [ 114.741172][ T7484] ? import_iovec+0x74/0xa0 [ 114.741192][ T7484] ___sys_sendmsg+0x21f/0x2a0 [ 114.741215][ T7484] ? __pfx____sys_sendmsg+0x10/0x10 [ 114.741273][ T7484] ? __fget_files+0x2a/0x420 [ 114.741290][ T7484] ? __fget_files+0x3a0/0x420 [ 114.741318][ T7484] __x64_sys_sendmsg+0x19b/0x260 [ 114.741342][ T7484] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 114.741372][ T7484] ? __pfx_ksys_write+0x10/0x10 [ 114.741386][ T7484] ? rcu_is_watching+0x15/0xb0 [ 114.741415][ T7484] ? do_syscall_64+0xbe/0x3b0 [ 114.741440][ T7484] do_syscall_64+0xfa/0x3b0 [ 114.741454][ T7484] ? lockdep_hardirqs_on+0x9c/0x150 [ 114.741476][ T7484] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.741493][ T7484] ? clear_bhb_loop+0x60/0xb0 [ 114.741518][ T7484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.741534][ T7484] RIP: 0033:0x7f38e0b8e929 [ 114.741550][ T7484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.741563][ T7484] RSP: 002b:00007f38e1a70038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 114.741582][ T7484] RAX: ffffffffffffffda RBX: 00007f38e0db5fa0 RCX: 00007f38e0b8e929 [ 114.741594][ T7484] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000000000000003 [ 114.741605][ T7484] RBP: 00007f38e1a70090 R08: 0000000000000000 R09: 0000000000000000 [ 114.741616][ T7484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.741626][ T7484] R13: 0000000000000000 R14: 00007f38e0db5fa0 R15: 00007ffcab9f38b8 [ 114.741654][ T7484] [ 115.062056][ T7465] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.154501][ T7490] netlink: 'syz.0.446': attribute type 1 has an invalid length. [ 115.164924][ T7491] netlink: 'syz.0.446': attribute type 1 has an invalid length. [ 115.426168][ T7465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.467561][ T7465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.894809][ T7465] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.903969][ T7465] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.924793][ T7465] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.933845][ T7465] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.093183][ T7490] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 116.095045][ T7491] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 116.316455][ T5843] Bluetooth: hci1: command tx timeout [ 116.433767][ T7508] syz.3.451 (7508) used greatest stack depth: 17992 bytes left [ 116.516819][ T7516] netlink: 'syz.4.453': attribute type 1 has an invalid length. [ 116.554274][ T7505] syz.3.451 (7505) used greatest stack depth: 16184 bytes left [ 116.593468][ T7522] __nla_validate_parse: 2 callbacks suppressed [ 116.593485][ T7522] netlink: 112 bytes leftover after parsing attributes in process `syz.0.454'. [ 116.699414][ T7516] 8021q: adding VLAN 0 to HW filter on device bond2 [ 116.780128][ T7528] FAULT_INJECTION: forcing a failure. [ 116.780128][ T7528] name failslab, interval 1, probability 0, space 0, times 0 [ 116.823897][ T7528] CPU: 1 UID: 0 PID: 7528 Comm: syz.1.456 Not tainted 6.16.0-rc3-syzkaller-00133-g42fd432fe6d3 #0 PREEMPT(full) [ 116.823923][ T7528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 116.823933][ T7528] Call Trace: [ 116.823940][ T7528] [ 116.823948][ T7528] dump_stack_lvl+0x189/0x250 [ 116.823978][ T7528] ? __pfx____ratelimit+0x10/0x10 [ 116.824003][ T7528] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.824028][ T7528] ? __pfx__printk+0x10/0x10 [ 116.824053][ T7528] ? ref_tracker_alloc+0x318/0x460 [ 116.824078][ T7528] should_fail_ex+0x414/0x560 [ 116.824105][ T7528] should_failslab+0xa8/0x100 [ 116.824125][ T7528] kmem_cache_alloc_noprof+0x73/0x3c0 [ 116.824151][ T7528] ? skb_clone+0x212/0x3a0 [ 116.824177][ T7528] skb_clone+0x212/0x3a0 [ 116.824209][ T7528] __netlink_deliver_tap+0x404/0x850 [ 116.824242][ T7528] ? netlink_deliver_tap+0x2e/0x1b0 [ 116.824263][ T7528] netlink_deliver_tap+0x19c/0x1b0 [ 116.824284][ T7528] netlink_unicast+0x72f/0x8d0 [ 116.824313][ T7528] netlink_sendmsg+0x805/0xb30 [ 116.824342][ T7528] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.824365][ T7528] ? aa_sock_msg_perm+0x94/0x160 [ 116.824389][ T7528] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 116.824409][ T7528] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.824430][ T7528] __sock_sendmsg+0x21c/0x270 [ 116.824460][ T7528] ____sys_sendmsg+0x505/0x830 [ 116.824487][ T7528] ? __pfx_____sys_sendmsg+0x10/0x10 [ 116.824515][ T7528] ? import_iovec+0x74/0xa0 [ 116.824535][ T7528] ___sys_sendmsg+0x21f/0x2a0 [ 116.824557][ T7528] ? __pfx____sys_sendmsg+0x10/0x10 [ 116.824614][ T7528] ? __fget_files+0x2a/0x420 [ 116.824635][ T7528] ? __fget_files+0x3a0/0x420 [ 116.824661][ T7528] __x64_sys_sendmsg+0x19b/0x260 [ 116.824682][ T7528] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 116.824711][ T7528] ? __pfx_ksys_write+0x10/0x10 [ 116.824724][ T7528] ? rcu_is_watching+0x15/0xb0 [ 116.824753][ T7528] ? do_syscall_64+0xbe/0x3b0 [ 116.824770][ T7528] do_syscall_64+0xfa/0x3b0 [ 116.824783][ T7528] ? lockdep_hardirqs_on+0x9c/0x150 [ 116.824806][ T7528] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.824821][ T7528] ? clear_bhb_loop+0x60/0xb0 [ 116.824841][ T7528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.824857][ T7528] RIP: 0033:0x7ff41f38e929 [ 116.824872][ T7528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.824885][ T7528] RSP: 002b:00007ff4202b8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.824903][ T7528] RAX: ffffffffffffffda RBX: 00007ff41f5b5fa0 RCX: 00007ff41f38e929 [ 116.824916][ T7528] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000000000000003 [ 116.824926][ T7528] RBP: 00007ff4202b8090 R08: 0000000000000000 R09: 0000000000000000 [ 116.824936][ T7528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.824945][ T7528] R13: 0000000000000000 R14: 00007ff41f5b5fa0 R15: 00007ffd71a53c88 [ 116.824972][ T7528] [ 117.132196][ T7521] veth3: entered promiscuous mode [ 117.148726][ T7521] bond2: (slave veth3): Enslaving as an active interface with a down link [ 117.199529][ T7536] netlink: 20 bytes leftover after parsing attributes in process `syz.0.457'. [ 117.251337][ T7525] netlink: 'syz.3.455': attribute type 15 has an invalid length. [ 117.266528][ T7525] netlink: 24 bytes leftover after parsing attributes in process `syz.3.455'. [ 117.684447][ T7552] netlink: 12 bytes leftover after parsing attributes in process `syz.1.459'. [ 117.689658][ T7217] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 117.759895][ T7217] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 117.789139][ T7217] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 117.890843][ T7217] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 118.219124][ T7217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.226640][ T7573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.464'. [ 118.289692][ T7217] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.347888][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.355083][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.730983][ T7593] FAULT_INJECTION: forcing a failure. [ 118.730983][ T7593] name failslab, interval 1, probability 0, space 0, times 0 [ 118.756649][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.763796][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.782935][ T7593] CPU: 0 UID: 0 PID: 7593 Comm: syz.3.470 Not tainted 6.16.0-rc3-syzkaller-00133-g42fd432fe6d3 #0 PREEMPT(full) [ 118.782960][ T7593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 118.782970][ T7593] Call Trace: [ 118.782978][ T7593] [ 118.782986][ T7593] dump_stack_lvl+0x189/0x250 [ 118.783016][ T7593] ? __pfx____ratelimit+0x10/0x10 [ 118.783041][ T7593] ? __pfx_dump_stack_lvl+0x10/0x10 [ 118.783065][ T7593] ? __pfx__printk+0x10/0x10 [ 118.783090][ T7593] ? __pfx___might_resched+0x10/0x10 [ 118.783113][ T7593] ? fs_reclaim_acquire+0x7d/0x100 [ 118.783137][ T7593] should_fail_ex+0x414/0x560 [ 118.783162][ T7593] should_failslab+0xa8/0x100 [ 118.783183][ T7593] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 118.783200][ T7593] ? __alloc_skb+0x112/0x2d0 [ 118.783223][ T7593] __alloc_skb+0x112/0x2d0 [ 118.783245][ T7593] netlink_ack+0x146/0xa50 [ 118.783262][ T7593] ? __pfx_genl_rcv_msg+0x10/0x10 [ 118.783283][ T7593] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 118.783305][ T7593] ? __pfx_nl80211_post_doit+0x10/0x10 [ 118.783342][ T7593] netlink_rcv_skb+0x28c/0x470 [ 118.783363][ T7593] ? __pfx_genl_rcv_msg+0x10/0x10 [ 118.783392][ T7593] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 118.783428][ T7593] ? down_read+0x1ad/0x2e0 [ 118.783447][ T7593] genl_rcv+0x28/0x40 [ 118.783467][ T7593] netlink_unicast+0x75b/0x8d0 [ 118.783497][ T7593] netlink_sendmsg+0x805/0xb30 [ 118.783523][ T7593] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.783545][ T7593] ? aa_sock_msg_perm+0x94/0x160 [ 118.783568][ T7593] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 118.783588][ T7593] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.783608][ T7593] __sock_sendmsg+0x21c/0x270 [ 118.783636][ T7593] ____sys_sendmsg+0x505/0x830 [ 118.783665][ T7593] ? __pfx_____sys_sendmsg+0x10/0x10 [ 118.783694][ T7593] ? import_iovec+0x74/0xa0 [ 118.783715][ T7593] ___sys_sendmsg+0x21f/0x2a0 [ 118.783737][ T7593] ? __pfx____sys_sendmsg+0x10/0x10 [ 118.783792][ T7593] ? __fget_files+0x2a/0x420 [ 118.783810][ T7593] ? __fget_files+0x3a0/0x420 [ 118.783839][ T7593] __x64_sys_sendmsg+0x19b/0x260 [ 118.783862][ T7593] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 118.783892][ T7593] ? __pfx_ksys_write+0x10/0x10 [ 118.783905][ T7593] ? rcu_is_watching+0x15/0xb0 [ 118.783933][ T7593] ? do_syscall_64+0xbe/0x3b0 [ 118.783953][ T7593] do_syscall_64+0xfa/0x3b0 [ 118.783968][ T7593] ? lockdep_hardirqs_on+0x9c/0x150 [ 118.783990][ T7593] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.784008][ T7593] ? clear_bhb_loop+0x60/0xb0 [ 118.784029][ T7593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.784045][ T7593] RIP: 0033:0x7fcd08d8e929 [ 118.784061][ T7593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.784074][ T7593] RSP: 002b:00007fcd09b12038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.784093][ T7593] RAX: ffffffffffffffda RBX: 00007fcd08fb5fa0 RCX: 00007fcd08d8e929 [ 118.784106][ T7593] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000000000000003 [ 118.784116][ T7593] RBP: 00007fcd09b12090 R08: 0000000000000000 R09: 0000000000000000 [ 118.784126][ T7593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.784137][ T7593] R13: 0000000000000000 R14: 00007fcd08fb5fa0 R15: 00007ffcd172e828 [ 118.784170][ T7593] [ 119.828655][ T7217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.886911][ T7627] netlink: 14 bytes leftover after parsing attributes in process `syz.3.478'. [ 119.971912][ T7618] syzkaller1: entered promiscuous mode [ 119.985572][ T7618] syzkaller1: entered allmulticast mode [ 120.216266][ T7217] veth0_vlan: entered promiscuous mode [ 120.269185][ T7217] veth1_vlan: entered promiscuous mode [ 120.428087][ T7217] veth0_macvtap: entered promiscuous mode [ 120.467757][ T7217] veth1_macvtap: entered promiscuous mode [ 120.532090][ T7647] netlink: 'syz.0.484': attribute type 4 has an invalid length. [ 120.584899][ T7217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.621585][ T7651] netlink: 28 bytes leftover after parsing attributes in process `syz.4.486'. [ 120.638105][ T7217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.660898][ T7651] netlink: 'syz.4.486': attribute type 7 has an invalid length. [ 120.672094][ T7217] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.681102][ T7651] netlink: 20 bytes leftover after parsing attributes in process `syz.4.486'. [ 120.754824][ T7217] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.773983][ T7217] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.798683][ T7217] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.929768][ T7656] 8021q: VLANs not supported on lo [ 121.514211][ T3517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.565079][ T3517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.678109][ T3434] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.701595][ T3434] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.898061][ T7700] netlink: 'syz.4.493': attribute type 29 has an invalid length. [ 121.937137][ T7700] netlink: 'syz.4.493': attribute type 29 has an invalid length. [ 122.048117][ T7703] netlink: 'syz.0.497': attribute type 3 has an invalid length. [ 122.064880][ T7703] netlink: 'syz.0.497': attribute type 3 has an invalid length. [ 122.101408][ T7703] netlink: 'syz.0.497': attribute type 3 has an invalid length. [ 122.114225][ T7703] netlink: 'syz.0.497': attribute type 3 has an invalid length. [ 122.145085][ T7708] netlink: 'syz.3.498': attribute type 1 has an invalid length. [ 122.147279][ T7703] netlink: 'syz.0.497': attribute type 3 has an invalid length. [ 122.437009][ T7722] netlink: 24 bytes leftover after parsing attributes in process `syz.0.501'. [ 122.449802][ T7722] netlink: 24 bytes leftover after parsing attributes in process `syz.0.501'. [ 122.870984][ T153] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.921305][ T7695] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 122.927618][ T7736] 8021q: VLANs not supported on sit0 [ 123.031119][ T153] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.236687][ T153] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.347434][ T7748] netlink: 28 bytes leftover after parsing attributes in process `syz.4.508'. [ 123.367985][ T7748] netlink: 28 bytes leftover after parsing attributes in process `syz.4.508'. [ 123.428563][ T7753] netlink: 596 bytes leftover after parsing attributes in process `syz.1.509'. [ 123.559590][ T153] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.021105][ T7772] macvlan0: entered promiscuous mode [ 124.075497][ T7772] macvlan0: entered allmulticast mode [ 124.133440][ T153] bridge_slave_1: left allmulticast mode [ 124.154319][ T153] bridge_slave_1: left promiscuous mode [ 124.180853][ T153] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.259141][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 124.272447][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 124.285345][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 124.294108][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 124.304411][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 124.334810][ T153] bridge_slave_0: left allmulticast mode [ 124.358413][ T153] bridge_slave_0: left promiscuous mode [ 124.404629][ T153] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.927648][ T7819] netlink: 808 bytes leftover after parsing attributes in process `syz.4.523'. [ 125.082001][ T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.094366][ T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.104493][ T153] bond0 (unregistering): Released all slaves [ 125.138762][ T7810] syzkaller1: entered promiscuous mode [ 125.144281][ T7810] syzkaller1: entered allmulticast mode [ 125.451308][ T7826] IPv6: sit1: Disabled Multicast RS [ 125.465748][ T5891] IPVS: starting estimator thread 0... [ 125.560297][ T7834] IPVS: using max 30 ests per chain, 72000 per kthread [ 125.586370][ T7833] netlink: 24 bytes leftover after parsing attributes in process `syz.1.527'. [ 125.948982][ T7858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.532'. [ 125.976670][ T153] hsr_slave_0: left promiscuous mode [ 126.003780][ T153] hsr_slave_1: left promiscuous mode [ 126.016889][ T153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.028009][ T153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.046679][ T153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.063398][ T153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.155990][ T153] veth1_macvtap: left promiscuous mode [ 126.172078][ T153] veth0_macvtap: left promiscuous mode [ 126.177945][ T153] veth1_vlan: left promiscuous mode [ 126.183463][ T153] veth0_vlan: left promiscuous mode [ 126.398010][ T5837] Bluetooth: hci1: command tx timeout [ 126.839894][ T153] team0 (unregistering): Port device team_slave_1 removed [ 126.879304][ T153] team0 (unregistering): Port device team_slave_0 removed [ 127.196630][ T7855] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 127.206498][ T7863] lo: entered allmulticast mode [ 127.211917][ T7855] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 127.212465][ T7863] lo: left allmulticast mode [ 127.228220][ T7855] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 127.267961][ T7874] tipc: Enabling of bearer rejected, failed to enable media [ 127.460915][ T7887] netlink: 596 bytes leftover after parsing attributes in process `syz.4.536'. [ 127.720288][ T7785] chnl_net:caif_netlink_parms(): no params data found [ 127.786008][ T7904] netlink: 12 bytes leftover after parsing attributes in process `syz.3.541'. [ 128.076001][ T30] audit: type=1804 audit(1751427873.049:2): pid=7922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.543" name="/newroot/121/cgroup.controllers" dev="tmpfs" ino=632 res=1 errno=0 [ 128.111944][ T30] audit: type=1800 audit(1751427873.049:3): pid=7922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.543" name="cgroup.controllers" dev="tmpfs" ino=632 res=0 errno=0 [ 128.141492][ T7916] : entered promiscuous mode [ 128.261890][ T7926] mac80211_hwsim hwsim9 : renamed from wlan1 (while UP) [ 128.416259][ T7943] validate_nla: 47 callbacks suppressed [ 128.416276][ T7943] netlink: 'syz.3.548': attribute type 10 has an invalid length. [ 128.482107][ T5837] Bluetooth: hci1: command tx timeout [ 128.486383][ T7947] netlink: 'syz.3.548': attribute type 10 has an invalid length. [ 128.491652][ T7944] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 128.502825][ T7944] IPv6: NLM_F_CREATE should be set when creating new route [ 128.510108][ T7944] IPv6: NLM_F_CREATE should be set when creating new route [ 128.531944][ T7944] netlink: 60 bytes leftover after parsing attributes in process `syz.1.547'. [ 128.549520][ T7943] bridge_slave_1: left allmulticast mode [ 128.568626][ T7943] bridge_slave_1: left promiscuous mode [ 128.589542][ T7943] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.658926][ T7785] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.695623][ T7785] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.724183][ T7785] bridge_slave_0: entered allmulticast mode [ 128.749539][ T7785] bridge_slave_0: entered promiscuous mode [ 128.772846][ T7785] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.794795][ T7785] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.827721][ T7785] bridge_slave_1: entered allmulticast mode [ 128.851350][ T7785] bridge_slave_1: entered promiscuous mode [ 128.992595][ T7968] netlink: 348 bytes leftover after parsing attributes in process `syz.4.551'. [ 129.074589][ T7961] pim6reg1: entered promiscuous mode [ 129.080197][ T7961] pim6reg1: entered allmulticast mode [ 129.092021][ T7971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.552'. [ 129.122476][ T7785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.232096][ T7785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.384558][ T7986] netlink: 24 bytes leftover after parsing attributes in process `syz.3.557'. [ 129.395026][ T7984] netlink: 24 bytes leftover after parsing attributes in process `syz.3.557'. [ 129.458826][ T7785] team0: Port device team_slave_0 added [ 129.549997][ T7994] netlink: 24 bytes leftover after parsing attributes in process `syz.1.559'. [ 129.557704][ T7785] team0: Port device team_slave_1 added [ 129.732597][ T8002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.560'. [ 129.757909][ T8002] netlink: 12 bytes leftover after parsing attributes in process `syz.0.560'. [ 129.783186][ T8002] netlink: 'syz.0.560': attribute type 13 has an invalid length. [ 129.817986][ T7785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.849098][ T7785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.907063][ T7785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.979435][ T7785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.003654][ T7785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.074553][ T7785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.115513][ T8018] x_tables: unsorted underflow at hook 3 [ 130.386119][ T24] hid-generic 0005:0C45:1010.0001: item fetching failed at offset 0/1 [ 130.395924][ T8027] netlink: 'syz.1.568': attribute type 4 has an invalid length. [ 130.447062][ T24] hid-generic 0005:0C45:1010.0001: probe with driver hid-generic failed with error -22 [ 130.473724][ T8039] netlink: 'syz.1.568': attribute type 11 has an invalid length. [ 130.524174][ T8039] netlink: 'syz.1.568': attribute type 11 has an invalid length. [ 130.528124][ T7785] hsr_slave_0: entered promiscuous mode [ 130.552315][ T7785] hsr_slave_1: entered promiscuous mode [ 130.568887][ T5837] Bluetooth: hci1: command tx timeout [ 131.201467][ T8076] netlink: 'syz.4.581': attribute type 1 has an invalid length. [ 131.414527][ T8076] veth5: entered promiscuous mode [ 131.470843][ T6863] IPVS: starting estimator thread 0... [ 131.567590][ T8090] IPVS: using max 31 ests per chain, 74400 per kthread [ 131.939062][ T8105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.151958][ T7785] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 132.173677][ T7785] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 132.207023][ T7785] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 132.262257][ T7785] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 132.425824][ T7785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.530695][ T7785] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.593724][ T3434] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.600926][ T3434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.635574][ T5837] Bluetooth: hci1: command tx timeout [ 132.638721][ T8134] xt_l2tp: unknown flags: 18 [ 132.653921][ T3434] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.661150][ T3434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.665197][ T8137] __nla_validate_parse: 7 callbacks suppressed [ 132.665211][ T8137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.594'. [ 132.722031][ T8138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.594'. [ 132.737429][ T8133] tipc: Started in network mode [ 132.749881][ T8133] tipc: Node identity 82cb159f89d6, cluster identity 4711 [ 132.777304][ T8133] tipc: Enabled bearer , priority 0 [ 132.827243][ T8133] syzkaller0: entered promiscuous mode [ 132.832765][ T8133] syzkaller0: entered allmulticast mode [ 132.938446][ T8133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.593'. [ 132.962673][ T7785] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 133.012241][ T7785] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 133.124979][ T8132] tipc: Resetting bearer [ 133.165500][ T8132] tipc: Disabling bearer [ 133.440971][ T8169] netlink: 12 bytes leftover after parsing attributes in process `syz.3.602'. [ 133.449865][ T8162] netlink: 4 bytes leftover after parsing attributes in process `syz.4.601'. [ 133.449976][ T8162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.475503][ T8171] netlink: 168 bytes leftover after parsing attributes in process `syz.0.603'. [ 133.531416][ T8162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.672285][ T7785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.841746][ T7785] veth0_vlan: entered promiscuous mode [ 133.891023][ T7785] veth1_vlan: entered promiscuous mode [ 133.971625][ T7785] veth0_macvtap: entered promiscuous mode [ 134.033909][ T7785] veth1_macvtap: entered promiscuous mode [ 134.138617][ T7785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.190348][ T7785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.224901][ T8200] netlink: 'syz.3.608': attribute type 3 has an invalid length. [ 134.232940][ T8200] netlink: 666 bytes leftover after parsing attributes in process `syz.3.608'. [ 134.258454][ T8207] netlink: 'syz.4.609': attribute type 1 has an invalid length. [ 134.279869][ T8201] netlink: 'syz.3.608': attribute type 3 has an invalid length. [ 134.299337][ T8201] netlink: 666 bytes leftover after parsing attributes in process `syz.3.608'. [ 134.343306][ T7785] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.371360][ T7785] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.393939][ T8211] netlink: 52 bytes leftover after parsing attributes in process `syz.4.609'. [ 134.402082][ T7785] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.437605][ T7785] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.514068][ T8207] 8021q: adding VLAN 0 to HW filter on device bond3 [ 134.688534][ T8208] veth7: entered promiscuous mode [ 134.728731][ T8208] bond3: (slave veth7): Enslaving as an active interface with a down link [ 134.990876][ T8228] sctp: [Deprecated]: syz.0.615 (pid 8228) Use of struct sctp_assoc_value in delayed_ack socket option. [ 134.990876][ T8228] Use struct sctp_sack_info instead [ 135.009536][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.022834][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.033639][ T8228] sctp: [Deprecated]: syz.0.615 (pid 8228) Use of struct sctp_assoc_value in delayed_ack socket option. [ 135.033639][ T8228] Use struct sctp_sack_info instead [ 135.077343][ T8232] netlink: 'syz.3.617': attribute type 7 has an invalid length. [ 135.124394][ T8232] C: renamed from team_slave_0 [ 135.161199][ T8232] netlink: 'syz.3.617': attribute type 1 has an invalid length. [ 135.178131][ T8232] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 135.218677][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.248044][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.462073][ T8250] netdevsim netdevsim4: Direct firmware load for /. failed with error -2 [ 135.558738][ T8250] netdevsim netdevsim4: Falling back to sysfs fallback for: /. [ 135.791847][ T8269] netlink: 8 bytes leftover after parsing attributes in process `syz.3.625'. [ 136.111855][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.153188][ T8274] xfrm0: entered promiscuous mode [ 136.161770][ T8274] xfrm0: entered allmulticast mode [ 136.264402][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.479039][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.722602][ T8293] IPVS: persistence engine module ip_vs_pe_ not found [ 136.797605][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.943450][ T8311] bridge4: entered promiscuous mode [ 136.967040][ T8311] bridge4: entered allmulticast mode [ 137.293016][ T13] bridge_slave_1: left allmulticast mode [ 137.324347][ T13] bridge_slave_1: left promiscuous mode [ 137.375594][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.445949][ T13] bridge_slave_0: left allmulticast mode [ 137.455550][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 137.470441][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 137.479506][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 137.489566][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 137.500077][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 137.513096][ T13] bridge_slave_0: left promiscuous mode [ 137.522935][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.533216][ T8340] xt_hashlimit: size too large, truncated to 1048576 [ 138.051974][ T8363] __nla_validate_parse: 2 callbacks suppressed [ 138.051992][ T8363] netlink: 104 bytes leftover after parsing attributes in process `syz.3.644'. [ 138.327456][ T8376] delete_channel: no stack [ 138.588625][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.614429][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.633565][ T13] bond0 (unregistering): Released all slaves [ 138.722398][ T8358] netlink: 12 bytes leftover after parsing attributes in process `syz.4.643'. [ 138.837398][ T8364] netlink: 184 bytes leftover after parsing attributes in process `syz.4.643'. [ 139.162221][ T8391] netlink: 'syz.0.649': attribute type 13 has an invalid length. [ 139.223803][ T8399] netlink: 4 bytes leftover after parsing attributes in process `syz.4.651'. [ 139.327525][ T8403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.652'. [ 139.546658][ T13] hsr_slave_0: left promiscuous mode [ 139.564993][ T13] hsr_slave_1: left promiscuous mode [ 139.581320][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.594838][ T5843] Bluetooth: hci1: command tx timeout [ 139.606986][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.628663][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.654939][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.752872][ T13] veth1_macvtap: left promiscuous mode [ 139.782727][ T13] veth0_macvtap: left promiscuous mode [ 139.799286][ T13] veth1_vlan: left promiscuous mode [ 139.808529][ T13] veth0_vlan: left promiscuous mode [ 140.579552][ T8438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.656'. [ 140.775984][ T13] team0 (unregistering): Port device team_slave_1 removed [ 140.880156][ T13] team0 (unregistering): Port device team_slave_0 removed [ 141.676051][ T5843] Bluetooth: hci1: command tx timeout [ 141.759038][ T8445] xt_l2tp: wrong L2TP version: 0 [ 141.948619][ T8460] netlink: 36 bytes leftover after parsing attributes in process `syz.1.658'. [ 142.028415][ T8444] xt_CT: You must specify a L4 protocol and not use inversions on it [ 142.113136][ T8334] chnl_net:caif_netlink_parms(): no params data found [ 142.657479][ T8334] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.675783][ T8334] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.692331][ T8334] bridge_slave_0: entered allmulticast mode [ 142.701675][ T8334] bridge_slave_0: entered promiscuous mode [ 142.718563][ T8492] netlink: 288 bytes leftover after parsing attributes in process `syz.4.664'. [ 142.743106][ T8334] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.765807][ T8334] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.793026][ T8334] bridge_slave_1: entered allmulticast mode [ 142.819449][ T8334] bridge_slave_1: entered promiscuous mode [ 142.996278][ T8334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.072634][ T8334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.350905][ T8334] team0: Port device team_slave_0 added [ 143.398117][ T8334] team0: Port device team_slave_1 added [ 143.754976][ T5843] Bluetooth: hci1: command tx timeout [ 143.792214][ T8334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.792500][ T8519] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 143.804716][ T8334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.840331][ T8520] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 143.893478][ T8334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.952874][ T8334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.997021][ T8334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.067843][ T8334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.102223][ T8525] netlink: 80 bytes leftover after parsing attributes in process `syz.0.674'. [ 144.116991][ T8526] xt_SECMARK: invalid mode: 0 [ 144.311527][ T8334] hsr_slave_0: entered promiscuous mode [ 144.354995][ T8334] hsr_slave_1: entered promiscuous mode [ 144.736935][ T8542] netlink: 'syz.4.678': attribute type 1 has an invalid length. [ 144.744621][ T8542] netlink: 'syz.4.678': attribute type 10 has an invalid length. [ 144.785674][ T8542] netlink: 'syz.4.678': attribute type 4 has an invalid length. [ 144.793366][ T8542] netlink: 136 bytes leftover after parsing attributes in process `syz.4.678'. [ 144.874828][ T8546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.679'. [ 145.225377][ T8558] netlink: 'syz.4.680': attribute type 10 has an invalid length. [ 145.275998][ T8558] batman_adv: batadv0: Adding interface: team0 [ 145.286751][ T8558] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.361783][ T8558] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 145.732276][ T8334] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 145.753984][ T8334] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 145.782878][ T8334] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 145.828860][ T8334] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 145.838087][ T5843] Bluetooth: hci1: command tx timeout [ 145.971000][ T8376] Set syz1 is full, maxelem 65536 reached [ 146.059802][ T8583] netlink: 4 bytes leftover after parsing attributes in process `syz.4.687'. [ 146.123480][ T8334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.170031][ T8585] netlink: 'syz.4.687': attribute type 29 has an invalid length. [ 146.222070][ T8587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.688'. [ 146.224997][ T8583] netlink: 'syz.4.687': attribute type 29 has an invalid length. [ 146.271386][ T8334] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.284806][ T8587] netlink: 4 bytes leftover after parsing attributes in process `syz.3.688'. [ 146.327600][ T3434] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.334811][ T3434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.369569][ T8587] netlink: 'syz.3.688': attribute type 15 has an invalid length. [ 146.375920][ T8597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.690'. [ 146.449550][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.456798][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.489821][ T8601] netlink: 12 bytes leftover after parsing attributes in process `syz.1.690'. [ 146.574531][ T8334] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 146.872297][ T8597] netlink: 16 bytes leftover after parsing attributes in process `syz.1.690'. [ 147.245112][ T8646] tipc: Can't bind to reserved service type 2 [ 147.264099][ T8648] syz.4.698: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 147.303164][ T8648] CPU: 1 UID: 0 PID: 8648 Comm: syz.4.698 Not tainted 6.16.0-rc3-syzkaller-00133-g42fd432fe6d3 #0 PREEMPT(full) [ 147.303192][ T8648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 147.303203][ T8648] Call Trace: [ 147.303211][ T8648] [ 147.303220][ T8648] dump_stack_lvl+0x189/0x250 [ 147.303256][ T8648] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.303283][ T8648] ? __pfx__printk+0x10/0x10 [ 147.303303][ T8648] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 147.303323][ T8648] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 147.303345][ T8648] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 147.303368][ T8648] warn_alloc+0x214/0x310 [ 147.303388][ T8648] ? stack_depot_save_flags+0x40/0x900 [ 147.303415][ T8648] ? __pfx_warn_alloc+0x10/0x10 [ 147.303438][ T8648] ? kasan_save_track+0x4f/0x80 [ 147.303464][ T8648] ? xskq_create+0x56/0x170 [ 147.303487][ T8648] ? xsk_init_queue+0xb0/0x110 [ 147.303507][ T8648] ? xsk_setsockopt+0x43f/0x710 [ 147.303526][ T8648] ? do_sock_setsockopt+0x257/0x3e0 [ 147.303545][ T8648] ? __x64_sys_setsockopt+0x18b/0x220 [ 147.303563][ T8648] ? do_syscall_64+0xfa/0x3b0 [ 147.303577][ T8648] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.303603][ T8648] __vmalloc_node_range_noprof+0x125/0x12f0 [ 147.303655][ T8648] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 147.303677][ T8648] ? xskq_create+0x56/0x170 [ 147.303702][ T8648] ? __kasan_kmalloc+0x93/0xb0 [ 147.303723][ T8648] vmalloc_user_noprof+0xad/0xf0 [ 147.303742][ T8648] ? xskq_create+0xbf/0x170 [ 147.303766][ T8648] xskq_create+0xbf/0x170 [ 147.303793][ T8648] xsk_init_queue+0xb0/0x110 [ 147.303820][ T8648] xsk_setsockopt+0x43f/0x710 [ 147.303845][ T8648] ? __pfx_xsk_setsockopt+0x10/0x10 [ 147.303866][ T8648] ? __lock_acquire+0xab9/0xd20 [ 147.303901][ T8648] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 147.303922][ T8648] ? __pfx_xsk_setsockopt+0x10/0x10 [ 147.303946][ T8648] do_sock_setsockopt+0x257/0x3e0 [ 147.303970][ T8648] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 147.303996][ T8648] ? __fget_files+0x2a/0x420 [ 147.304025][ T8648] __x64_sys_setsockopt+0x18b/0x220 [ 147.304052][ T8648] do_syscall_64+0xfa/0x3b0 [ 147.304073][ T8648] ? lockdep_hardirqs_on+0x9c/0x150 [ 147.304097][ T8648] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.304119][ T8648] ? clear_bhb_loop+0x60/0xb0 [ 147.304142][ T8648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.304159][ T8648] RIP: 0033:0x7f3b8a38e929 [ 147.304176][ T8648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.304191][ T8648] RSP: 002b:00007f3b8b18d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 147.304210][ T8648] RAX: ffffffffffffffda RBX: 00007f3b8a5b5fa0 RCX: 00007f3b8a38e929 [ 147.304223][ T8648] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 147.304234][ T8648] RBP: 00007f3b8a410b39 R08: 0000000000000004 R09: 0000000000000000 [ 147.304244][ T8648] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.304256][ T8648] R13: 0000000000000000 R14: 00007f3b8a5b5fa0 R15: 00007fff082e4b68 [ 147.304287][ T8648] [ 147.612914][ T8648] Mem-Info: [ 147.616623][ T8648] active_anon:6066 inactive_anon:0 isolated_anon:0 [ 147.616623][ T8648] active_file:1317 inactive_file:39859 isolated_file:0 [ 147.616623][ T8648] unevictable:768 dirty:88 writeback:0 [ 147.616623][ T8648] slab_reclaimable:10154 slab_unreclaimable:99420 [ 147.616623][ T8648] mapped:29405 shmem:1514 pagetables:1235 [ 147.616623][ T8648] sec_pagetables:0 bounce:0 [ 147.616623][ T8648] kernel_misc_reclaimable:0 [ 147.616623][ T8648] free:1334151 free_pcp:14136 free_cma:0 [ 147.662821][ T8648] Node 0 active_anon:24164kB inactive_anon:0kB active_file:5268kB inactive_file:159232kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117620kB dirty:348kB writeback:0kB shmem:4520kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12684kB pagetables:4800kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 147.696899][ T8648] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 147.728567][ T8648] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 147.758191][ T8648] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 147.764437][ T8648] Node 0 DMA32 free:1413804kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24020kB inactive_anon:0kB active_file:5268kB inactive_file:157412kB unevictable:2036kB writepending:344kB present:3129332kB managed:2561004kB mlocked:500kB bounce:0kB free_pcp:39712kB local_pcp:20120kB free_cma:0kB [ 147.797889][ T8648] lowmem_reserve[]: 0 0 1 1 1 [ 147.802744][ T8648] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1820kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 147.832119][ T8648] lowmem_reserve[]: 0 0 0 0 0 [ 147.837191][ T8648] Node 1 Normal free:3907668kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:15264kB local_pcp:4032kB free_cma:0kB [ 147.868992][ T8648] lowmem_reserve[]: 0 0 0 0 0 [ 147.874124][ T8648] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 147.887042][ T8648] Node 0 DMA32: 234*4kB (UME) 57*8kB (UM) 21*16kB (UM) 187*32kB (UME) 115*64kB (UM) 186*128kB (UM) 105*256kB (UM) 33*512kB (UM) 4*1024kB (UM) 4*2048kB (UME) 322*4096kB (M) = 1413856kB [ 147.905559][ T8648] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 147.918765][ T8648] Node 1 Normal: 205*4kB (UM) 48*8kB (UME) 38*16kB (UME) 122*32kB (UME) 28*64kB (UME) 8*128kB (UME) 3*256kB (ME) 2*512kB (M) 2*1024kB (ME) 2*2048kB (UE) 950*4096kB (M) = 3907668kB [ 147.936929][ T8648] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 147.946649][ T8648] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 147.956572][ T8648] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 147.966575][ T8648] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 147.976113][ T8648] 42738 total pagecache pages [ 147.980873][ T8648] 0 pages in swap cache [ 147.986489][ T8648] Free swap = 124996kB [ 147.990745][ T8648] Total swap = 124996kB [ 147.995150][ T8648] 2097051 pages RAM [ 147.999077][ T8648] 0 pages HighMem/MovableOnly [ 148.003820][ T8648] 424694 pages reserved [ 148.008154][ T8648] 0 pages cma reserved [ 148.040116][ T8334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.276175][ T8334] veth0_vlan: entered promiscuous mode [ 148.339708][ T8334] veth1_vlan: entered promiscuous mode [ 148.385116][ T8671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.703'. [ 148.566408][ T8334] veth0_macvtap: entered promiscuous mode [ 148.620478][ T8334] veth1_macvtap: entered promiscuous mode [ 148.711312][ T8334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.766229][ T8334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.818033][ T8334] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.857357][ T8334] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.876102][ T8334] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.896960][ T8334] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.173823][ T8691] macvtap1: entered promiscuous mode [ 149.236437][ T8691] vlan0: entered promiscuous mode [ 149.258547][ T8691] macvtap1: entered allmulticast mode [ 149.279584][ T8691] vlan0: entered allmulticast mode [ 149.312504][ T8691] veth0_vlan: entered allmulticast mode [ 149.441497][ T8718] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 149.790864][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.851463][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.974846][ T3544] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.986060][ T8749] __nla_validate_parse: 2 callbacks suppressed [ 149.986078][ T8749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.718'. [ 150.015235][ T3544] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.092989][ T8754] netlink: 12 bytes leftover after parsing attributes in process `syz.4.719'. [ 150.393439][ T30] audit: type=1107 audit(1751427895.369:4): pid=8763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='g ؕ|,F]kH [ 150.393439][ T30] ֽ[XЄ' [ 150.435484][ T8766] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 150.548540][ T8775] ip6_vti0: entered allmulticast mode [ 150.566628][ T8774] IPv4: Oversized IP packet from 127.202.26.0 [ 150.583770][ T8774] netlink: 24 bytes leftover after parsing attributes in process `syz.1.728'. [ 150.675694][ T146] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.231960][ T146] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.332717][ T146] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.403424][ T146] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.519678][ T146] bridge_slave_1: left allmulticast mode [ 151.528105][ T146] bridge_slave_1: left promiscuous mode [ 151.533812][ T146] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.545502][ T146] bridge_slave_0: left allmulticast mode [ 151.551165][ T146] bridge_slave_0: left promiscuous mode [ 151.557464][ T146] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.864995][ T8797] netlink: 'syz.3.733': attribute type 1 has an invalid length. [ 151.880545][ T8797] netlink: 224 bytes leftover after parsing attributes in process `syz.3.733'. [ 152.152253][ T146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.172619][ T146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.185606][ T146] bond0 (unregistering): Released all slaves [ 152.229415][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 152.256173][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 152.263971][ T8804] syzkaller0: entered promiscuous mode [ 152.271860][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 152.281257][ T8804] syzkaller0: entered allmulticast mode [ 152.288118][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 152.302333][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 152.750757][ T8829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.740'. [ 152.789017][ T8829] netlink: 12 bytes leftover after parsing attributes in process `syz.3.740'. [ 153.107622][ T146] hsr_slave_0: left promiscuous mode [ 153.126650][ T146] hsr_slave_1: left promiscuous mode [ 153.142945][ T146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.190255][ T146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.210335][ T146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.228877][ T146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.291130][ T146] veth1_macvtap: left promiscuous mode [ 153.311117][ T146] veth0_macvtap: left promiscuous mode [ 153.320268][ T146] veth1_vlan: left promiscuous mode [ 153.334158][ T146] veth0_vlan: left promiscuous mode [ 153.971733][ T8868] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.748'. [ 153.981761][ T8868] netlink: zone id is out of range [ 153.988179][ T8868] netlink: get zone limit has 8 unknown bytes [ 154.255186][ T146] team0 (unregistering): Port device team_slave_1 removed [ 154.299959][ T146] team0 (unregistering): Port device team_slave_0 removed [ 154.405302][ T5843] Bluetooth: hci1: command tx timeout [ 155.164058][ T8808] chnl_net:caif_netlink_parms(): no params data found [ 155.306807][ T8902] netlink: 16 bytes leftover after parsing attributes in process `syz.0.756'. [ 155.376490][ T8906] netlink: 4 bytes leftover after parsing attributes in process `syz.0.756'. [ 155.799780][ T8933] netlink: 44 bytes leftover after parsing attributes in process `syz.4.763'. [ 155.812214][ T8808] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.824182][ T8808] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.832087][ T8808] bridge_slave_0: entered allmulticast mode [ 155.841379][ T8808] bridge_slave_0: entered promiscuous mode [ 155.863463][ T8808] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.879661][ T8808] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.899151][ T8808] bridge_slave_1: entered allmulticast mode [ 155.918463][ T8808] bridge_slave_1: entered promiscuous mode [ 156.000008][ T8938] netlink: 48 bytes leftover after parsing attributes in process `syz.4.764'. [ 156.001556][ T8808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.036009][ T8808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.133326][ T8808] team0: Port device team_slave_0 added [ 156.165596][ T8808] team0: Port device team_slave_1 added [ 156.357315][ T8948] netlink: 12 bytes leftover after parsing attributes in process `syz.1.767'. [ 156.370921][ T8808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.408221][ T8808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.471235][ T8808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.482322][ T5843] Bluetooth: hci1: command tx timeout [ 156.499636][ T8808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.507209][ T8808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.540541][ T8808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.648401][ T8958] netlink: 3 bytes leftover after parsing attributes in process `syz.0.771'. [ 156.668040][ T8958] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.692971][ T8958] netlink: 3 bytes leftover after parsing attributes in process `syz.0.771'. [ 156.712440][ T8958] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.854554][ T8963] netlink: 12 bytes leftover after parsing attributes in process `syz.1.773'. [ 156.887063][ T8808] hsr_slave_0: entered promiscuous mode [ 156.898721][ T8966] netlink: 24 bytes leftover after parsing attributes in process `syz.0.774'. [ 156.904985][ T8808] hsr_slave_1: entered promiscuous mode [ 157.039649][ T8971] netlink: 4 bytes leftover after parsing attributes in process `syz.1.776'. [ 157.097077][ T8973] macvlan0: left promiscuous mode [ 157.102173][ T8973] macvlan0: left allmulticast mode [ 157.116795][ T8973] netlink: 'syz.0.777': attribute type 1 has an invalid length. [ 157.136471][ T8973] netlink: 'syz.0.777': attribute type 2 has an invalid length. [ 157.971789][ T9015] openvswitch: netlink: Key type 16383 is out of range max 32 [ 158.565487][ T5843] Bluetooth: hci1: command tx timeout [ 158.912727][ T8808] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 158.977259][ T8808] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 159.050831][ T8808] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 159.113984][ T8808] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 159.593227][ T8808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.672072][ T8808] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.720619][ T3457] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.727818][ T3457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.843565][ T3517] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.850800][ T3517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.149336][ T9116] netlink: 'syz.4.812': attribute type 8 has an invalid length. [ 160.635103][ T5843] Bluetooth: hci1: command tx timeout [ 160.668667][ T8808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.952731][ T8808] veth0_vlan: entered promiscuous mode [ 161.049864][ T8808] veth1_vlan: entered promiscuous mode [ 161.118628][ T9165] __nla_validate_parse: 6 callbacks suppressed [ 161.118645][ T9165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.820'. [ 161.288121][ T8808] veth0_macvtap: entered promiscuous mode [ 161.357156][ T8808] veth1_macvtap: entered promiscuous mode [ 161.581413][ T8808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.640399][ T8808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.681033][ T8808] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.724800][ T8808] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.762709][ T8808] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.806409][ T8808] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.048581][ T9204] netlink: 'syz.3.830': attribute type 7 has an invalid length. [ 162.073948][ T3517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.113162][ T3517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.205521][ T3517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.213391][ T3517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.256843][ T9213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.366787][ T9212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.890746][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.906935][ T9239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.837'. [ 163.121474][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.283802][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.380062][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.609323][ T12] bridge_slave_1: left allmulticast mode [ 163.620589][ T12] bridge_slave_1: left promiscuous mode [ 163.626868][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.641052][ T12] bridge_slave_0: left allmulticast mode [ 163.646789][ T12] bridge_slave_0: left promiscuous mode [ 163.652567][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.884098][ T9263] delete_channel: no stack [ 164.317855][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.331876][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.348917][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 164.359282][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 164.361424][ T12] bond0 (unregistering): Released all slaves [ 164.370354][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 164.381462][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 164.391205][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 164.636087][ T9289] Driver unsupported XDP return value 0 on prog (id 182) dev N/A, expect packet loss! [ 164.781796][ T9302] xt_hashlimit: size too large, truncated to 1048576 [ 164.972910][ T9308] : renamed from bridge_slave_0 [ 165.318185][ T9323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.848'. [ 165.406076][ T9327] netlink: 'syz.0.848': attribute type 1 has an invalid length. [ 165.414229][ T9327] netlink: 224 bytes leftover after parsing attributes in process `syz.0.848'. [ 165.460697][ T9326] IPv4: Oversized IP packet from 127.202.26.0 [ 165.506424][ T9326] netlink: 24 bytes leftover after parsing attributes in process `syz.4.849'. [ 165.630430][ T9329] gre1: entered promiscuous mode [ 165.673094][ T9329] gre1: entered allmulticast mode [ 165.764526][ T9349] netlink: 24 bytes leftover after parsing attributes in process `syz.0.852'. [ 165.800901][ T9349] netlink: 24 bytes leftover after parsing attributes in process `syz.0.852'. [ 165.902254][ T12] hsr_slave_0: left promiscuous mode [ 165.927575][ T12] hsr_slave_1: left promiscuous mode [ 165.954192][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.979998][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.998773][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.006376][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.024558][ T12] veth1_macvtap: left promiscuous mode [ 166.030310][ T12] veth0_macvtap: left promiscuous mode [ 166.036293][ T12] veth1_vlan: left promiscuous mode [ 166.041601][ T12] veth0_vlan: left promiscuous mode [ 166.460479][ T12] team0 (unregistering): Port device team_slave_1 removed [ 166.484929][ T5843] Bluetooth: hci1: command tx timeout [ 166.503843][ T12] team0 (unregistering): Port device team_slave_0 removed [ 166.668371][ T9362] netlink: 44 bytes leftover after parsing attributes in process `syz.3.855'. [ 166.739749][ T9363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.855'. [ 166.885370][ T9282] chnl_net:caif_netlink_parms(): no params data found [ 167.019570][ T9367] netlink: 'syz.1.857': attribute type 11 has an invalid length. [ 167.032354][ T9367] netlink: 'syz.1.857': attribute type 11 has an invalid length. [ 167.040135][ T9358] netlink: 40 bytes leftover after parsing attributes in process `syz.3.855'. [ 167.040159][ T9358] netlink: 40 bytes leftover after parsing attributes in process `syz.3.855'. [ 167.040173][ T9358] netlink: 48 bytes leftover after parsing attributes in process `syz.3.855'. [ 167.106152][ T9367] netlink: 224 bytes leftover after parsing attributes in process `syz.1.857'. [ 167.179193][ T9373] netlink: 24 bytes leftover after parsing attributes in process `syz.3.859'. [ 167.261428][ T9374] bond0: (slave batadv0): Releasing backup interface [ 167.336547][ T9374] bridge_slave_0: left allmulticast mode [ 167.373411][ T9374] bridge_slave_0: left promiscuous mode [ 167.383342][ T9374] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.413597][ T9374] bridge_slave_1: left allmulticast mode [ 167.422393][ T9374] bridge_slave_1: left promiscuous mode [ 167.428427][ T9374] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.460783][ T9374] bond0: (slave bond_slave_0): Releasing backup interface [ 167.480298][ T9374] bond0: (slave bond_slave_1): Releasing backup interface [ 167.495129][ T9387] netlink: 20 bytes leftover after parsing attributes in process `syz.1.862'. [ 167.509827][ T9374] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.524123][ T9374] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.538225][ T9374] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.551928][ T9374] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.661257][ T9395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.864'. [ 167.857716][ T9387] netlink: 12 bytes leftover after parsing attributes in process `syz.1.862'. [ 167.987209][ T9282] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.020558][ T9282] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.038433][ T9282] bridge_slave_0: entered allmulticast mode [ 168.049507][ T9282] bridge_slave_0: entered promiscuous mode [ 168.067160][ T9282] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.074611][ T9282] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.082025][ T9282] bridge_slave_1: entered allmulticast mode [ 168.144845][ T9282] bridge_slave_1: entered promiscuous mode [ 168.459530][ T9422] team0: Device gtp1 is of different type [ 168.562868][ T5843] Bluetooth: hci1: command tx timeout [ 168.604083][ T9440] netlink: 'syz.4.874': attribute type 4 has an invalid length. [ 168.606112][ T9282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.714278][ T9282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.009305][ T9455] netlink: 'syz.0.878': attribute type 5 has an invalid length. [ 169.071927][ T9455] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 169.100598][ T9455] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 169.126194][ T9455] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 169.150531][ T9455] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 169.159444][ T9455] geneve2: entered promiscuous mode [ 169.174830][ T9455] geneve2: entered allmulticast mode [ 169.177613][ T9462] IPv4: Oversized IP packet from 127.202.26.0 [ 169.187899][ T9462] IPv4: Oversized IP packet from 127.202.26.0 [ 169.458128][ T9282] team0: Port device team_slave_0 added [ 169.510274][ T9282] team0: Port device team_slave_1 added [ 170.000483][ T9282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.028963][ T9282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.104870][ T9282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.166935][ T9282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.181935][ T9282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.242129][ T9282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.452108][ T9282] hsr_slave_0: entered promiscuous mode [ 170.483235][ T9282] hsr_slave_1: entered promiscuous mode [ 170.634949][ T5843] Bluetooth: hci1: command tx timeout [ 171.560451][ T9548] IPv4: Oversized IP packet from 127.202.26.0 [ 171.568249][ T9548] IPv4: Oversized IP packet from 127.202.26.0 [ 171.714570][ T9551] __nla_validate_parse: 13 callbacks suppressed [ 171.714588][ T9551] netlink: 40 bytes leftover after parsing attributes in process `syz.0.903'. [ 172.725193][ T5843] Bluetooth: hci1: command tx timeout [ 172.796342][ T9282] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 172.839053][ T9282] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 172.910586][ T9282] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 172.998601][ T9282] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 173.050553][ T9603] netlink: 12 bytes leftover after parsing attributes in process `syz.1.917'. [ 173.285919][ T9615] tipc: Enabling of bearer rejected, media not registered [ 173.542826][ T9631] netlink: 244 bytes leftover after parsing attributes in process `syz.0.922'. [ 173.644049][ T9636] IPv4: Oversized IP packet from 127.202.26.0 [ 173.651903][ T9636] IPv4: Oversized IP packet from 127.202.26.0 [ 173.709682][ T9282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.736317][ T9642] netlink: 'syz.3.924': attribute type 1 has an invalid length. [ 173.744008][ T9642] netlink: 224 bytes leftover after parsing attributes in process `syz.3.924'. [ 173.754217][ T9636] netlink: 24 bytes leftover after parsing attributes in process `syz.1.923'. [ 173.825268][ T9282] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.861304][ T9648] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.926'. [ 173.889499][ T3544] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.896743][ T3544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.971155][ T3544] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.978410][ T3544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.150675][ T9656] openvswitch: netlink: VXLAN extension message has 12 unknown bytes. [ 174.333151][ T9662] netlink: 16 bytes leftover after parsing attributes in process `syz.3.929'. [ 174.333276][ T9655] netlink: 184 bytes leftover after parsing attributes in process `syz.0.928'. [ 174.360291][ T9662] netlink: 6 bytes leftover after parsing attributes in process `syz.3.929'. [ 174.372840][ T9668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.932'. [ 174.415636][ T9668] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 174.609610][ T9676] netlink: 'syz.3.934': attribute type 3 has an invalid length. [ 174.626501][ T9676] netlink: 'syz.3.934': attribute type 3 has an invalid length. [ 174.844177][ T9282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.081238][ T9698] xt_limit: Overflow, try lower: 2147483649/128 [ 175.122540][ T9282] veth0_vlan: entered promiscuous mode [ 175.217138][ T9282] veth1_vlan: entered promiscuous mode [ 175.224965][ T9705] IPv4: Oversized IP packet from 127.202.26.0 [ 175.399607][ T9714] netlink: 'syz.3.944': attribute type 10 has an invalid length. [ 175.518240][ T9282] veth0_macvtap: entered promiscuous mode [ 175.561870][ T9282] veth1_macvtap: entered promiscuous mode [ 175.640824][ T9282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.703170][ T9282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.740083][ T9282] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.765114][ T9282] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.805120][ T9282] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.813880][ T9282] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.695038][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.711203][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.769489][ T3434] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.812971][ T3434] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.973962][ T9778] IPv4: Oversized IP packet from 127.202.26.0 [ 176.980621][ T9778] IPv4: Oversized IP packet from 127.202.26.0 [ 177.003053][ T9778] __nla_validate_parse: 9 callbacks suppressed [ 177.003072][ T9778] netlink: 24 bytes leftover after parsing attributes in process `syz.0.958'. [ 177.144592][ T9784] netlink: 27 bytes leftover after parsing attributes in process `syz.1.959'. [ 177.524203][ T3517] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.718719][ T3517] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.019674][ T3517] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.090774][ T3517] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.259818][ T3517] bridge_slave_1: left allmulticast mode [ 178.269545][ T3517] bridge_slave_1: left promiscuous mode [ 178.275454][ T3517] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.284577][ T3517] bridge_slave_0: left allmulticast mode [ 178.290889][ T3517] bridge_slave_0: left promiscuous mode [ 178.297616][ T3517] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.492114][ T5843] Bluetooth: hci4: link tx timeout [ 178.500039][ T5843] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 178.509715][ T5843] Bluetooth: hci4: link tx timeout [ 178.515348][ T5843] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 178.524120][ T5843] Bluetooth: hci4: link tx timeout [ 178.529423][ T5843] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 178.537720][ T5843] Bluetooth: hci4: link tx timeout [ 178.542863][ T5843] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 178.550841][ T5843] Bluetooth: hci4: link tx timeout [ 178.556667][ T5843] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 178.564973][ T5843] Bluetooth: hci4: link tx timeout [ 178.570397][ T5843] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 178.606754][ T9821] netlink: 12 bytes leftover after parsing attributes in process `syz.3.966'. [ 178.666708][ T9822] netlink: 12 bytes leftover after parsing attributes in process `syz.4.968'. [ 178.818773][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 178.844382][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 178.861195][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 178.888743][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 178.904349][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 178.978368][ T3517] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.991038][ T3517] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.001372][ T3517] bond0 (unregistering): Released all slaves [ 179.013867][ T9818] xfrm0: entered promiscuous mode [ 179.022814][ T9818] xfrm0: entered allmulticast mode [ 179.030049][ T9820] tipc: Enabling of bearer rejected, failed to enable media [ 179.436990][ T9846] netlink: 24 bytes leftover after parsing attributes in process `syz.3.973'. [ 179.658891][ T9852] netlink: 28 bytes leftover after parsing attributes in process `syz.1.974'. [ 179.803896][ T3517] hsr_slave_0: left promiscuous mode [ 179.812870][ T3517] hsr_slave_1: left promiscuous mode [ 179.831974][ T3517] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.863062][ T3517] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.887228][ T3517] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.922244][ T3517] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.011703][ T3517] veth1_macvtap: left promiscuous mode [ 180.034970][ T3517] veth0_macvtap: left promiscuous mode [ 180.041495][ T3517] veth1_vlan: left promiscuous mode [ 180.049665][ T3517] veth0_vlan: left promiscuous mode [ 180.555670][ T5843] Bluetooth: hci4: command 0x0406 tx timeout [ 180.583543][ T3517] team0 (unregistering): Port device team_slave_1 removed [ 180.651473][ T3517] team0 (unregistering): Port device team_slave_0 removed [ 180.815917][ T9882] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.979'. [ 180.954815][ T5843] Bluetooth: hci1: command tx timeout [ 182.636372][ T5843] Bluetooth: hci4: command 0x0406 tx timeout [ 183.064855][ T5837] Bluetooth: hci1: command tx timeout [ 183.195426][ T9918] IPv4: Oversized IP packet from 127.202.26.0 [ 183.202350][ T9918] IPv4: Oversized IP packet from 127.202.26.0 [ 183.210888][ T9918] netlink: 24 bytes leftover after parsing attributes in process `syz.4.988'. [ 184.215877][ T9938] netlink: 20 bytes leftover after parsing attributes in process `syz.1.991'. [ 184.228905][ T9938] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 184.235070][ T9829] chnl_net:caif_netlink_parms(): no params data found [ 184.861176][ T9965] 8021q: VLANs not supported on ipvlan1 [ 184.931707][ T9829] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.956683][ T9829] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.984304][ T9829] bridge_slave_0: entered allmulticast mode [ 185.013103][ T9982] netlink: 51 bytes leftover after parsing attributes in process `syz.0.999'. [ 185.059687][ T9829] bridge_slave_0: entered promiscuous mode [ 185.102731][ T9829] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.117315][ T5837] Bluetooth: hci1: command tx timeout [ 185.125231][ T9829] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.147583][ T9829] bridge_slave_1: entered allmulticast mode [ 185.170499][ T9989] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 185.195189][ T9829] bridge_slave_1: entered promiscuous mode [ 185.242270][ T9997] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1003'. [ 185.371167][T10000] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1004'. [ 185.416456][ T9829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.433248][ T9829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.540949][ T9829] team0: Port device team_slave_0 added [ 185.553128][ T9829] team0: Port device team_slave_1 added [ 185.742846][ T9829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.765922][ T9829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.826694][ T9829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.908392][ T9829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.955507][ T9829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.035361][T10025] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 186.046581][ T9829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.357048][ T9829] hsr_slave_0: entered promiscuous mode [ 186.363400][ T9829] hsr_slave_1: entered promiscuous mode [ 186.427763][T10045] sctp: [Deprecated]: syz.4.1016 (pid 10045) Use of int in max_burst socket option. [ 186.427763][T10045] Use struct sctp_assoc_value instead [ 186.616462][T10058] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 186.700260][T10062] tipc: Started in network mode [ 186.708946][T10062] tipc: Node identity 92587a9418fd, cluster identity 4711 [ 186.718124][T10062] tipc: Enabled bearer , priority 0 [ 186.784470][T10062] syzkaller0: entered promiscuous mode [ 186.803775][T10062] syzkaller0: entered allmulticast mode [ 186.855952][T10062] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 186.869454][T10062] netlink: 'syz.4.1019': attribute type 39 has an invalid length. [ 186.870088][T10068] IPv4: Oversized IP packet from 127.202.26.0 [ 186.884439][T10062] tipc: Resetting bearer [ 186.885158][T10068] IPv4: Oversized IP packet from 127.202.26.0 [ 186.900647][T10061] tipc: Resetting bearer [ 186.931069][T10061] tipc: Disabling bearer [ 187.005079][T10068] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1020'. [ 187.373025][ T5837] Bluetooth: hci1: command tx timeout [ 187.408888][T10081] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1021'. [ 188.068386][T10102] netlink: 'syz.1.1027': attribute type 18 has an invalid length. [ 188.135746][T10105] xt_hashlimit: size too large, truncated to 1048576 [ 188.209760][T10112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1028'. [ 188.352325][T10118] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1028'. [ 188.411871][T10118] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1028'. [ 189.049082][T10148] IPv4: Oversized IP packet from 127.202.26.0 [ 189.056037][T10148] IPv4: Oversized IP packet from 127.202.26.0 [ 189.086465][T10148] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1035'. [ 189.175669][T10153] sctp: [Deprecated]: syz.3.1038 (pid 10153) Use of int in max_burst socket option deprecated. [ 189.175669][T10153] Use struct sctp_assoc_value instead [ 189.186835][T10155] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1037'. [ 189.416748][ T9829] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 189.497703][ T9829] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 189.577244][ T9829] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 189.658802][T10167] netlink: 'syz.0.1040': attribute type 12 has an invalid length. [ 189.662845][ T9829] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 189.939719][T10176] veth1_macvtap: left promiscuous mode [ 189.947087][T10176] macsec0: entered promiscuous mode [ 189.959163][T10176] macsec0: entered allmulticast mode [ 189.999711][T10177] veth1_macvtap: entered promiscuous mode [ 190.030833][T10177] veth1_macvtap: entered allmulticast mode [ 190.045744][T10179] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1042'. [ 190.063599][T10177] macsec0: left promiscuous mode [ 190.072847][T10177] macsec0: left allmulticast mode [ 190.081671][T10177] veth1_macvtap: left allmulticast mode [ 190.088203][T10183] netlink: 580 bytes leftover after parsing attributes in process `syz.3.1044'. [ 190.112354][T10185] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1042'. [ 190.152818][T10189] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20000 [ 190.279932][ T9829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.359497][ T9829] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.397294][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.404497][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.412384][ T5931] IPVS: starting estimator thread 0... [ 190.502084][ T3517] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.509310][ T3517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.555034][T10202] IPVS: using max 33 ests per chain, 79200 per kthread [ 190.721237][ T9829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 191.005636][T10227] IPv4: Oversized IP packet from 127.202.26.0 [ 191.012249][T10227] IPv4: Oversized IP packet from 127.202.26.0 [ 191.029627][T10227] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1052'. [ 191.588607][ T9829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.745016][ T9829] veth0_vlan: entered promiscuous mode [ 191.796184][ T9829] veth1_vlan: entered promiscuous mode [ 191.964398][ T9829] veth0_macvtap: entered promiscuous mode [ 192.019512][ T9829] veth1_macvtap: entered promiscuous mode [ 192.118808][ T9829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.168208][ T9829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.201956][ T9829] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.231429][ T9829] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.251867][ T9829] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.270255][ T9829] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.692103][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.738413][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.756992][T10295] IPv4: Oversized IP packet from 127.202.26.0 [ 192.763931][T10295] IPv4: Oversized IP packet from 127.202.26.0 [ 192.832363][T10295] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1069'. [ 192.856980][T10297] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1070'. [ 192.881227][ T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.919425][ T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.952799][T10335] netlink: 'syz.3.1079': attribute type 4 has an invalid length. [ 193.977233][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.057621][T10332] __nla_validate_parse: 1 callbacks suppressed [ 194.057640][T10332] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1079'. [ 194.167037][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.331151][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.399058][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.652711][ T12] bridge_slave_1: left allmulticast mode [ 194.662161][ T12] bridge_slave_1: left promiscuous mode [ 194.668689][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.678750][ T12] bridge_slave_0: left allmulticast mode [ 194.684396][ T12] bridge_slave_0: left promiscuous mode [ 194.691165][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.393246][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 195.431291][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.487186][ T12] bond0 (unregistering): Released all slaves [ 195.522918][T10383] IPv4: Oversized IP packet from 127.202.26.0 [ 195.529553][T10383] IPv4: Oversized IP packet from 127.202.26.0 [ 195.754818][T10363] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1084'. [ 195.823930][T10369] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1084'. [ 195.835751][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 195.845475][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 195.855967][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 195.880369][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 195.892672][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 196.145371][T10396] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1088'. [ 196.197954][T10396] openvswitch: netlink: IP tunnel TTL not specified. [ 196.255212][T10403] netlink: 'syz.4.1090': attribute type 1 has an invalid length. [ 196.284073][T10403] netlink: 'syz.4.1090': attribute type 1 has an invalid length. [ 196.316783][ T5835] Bluetooth: hci3: command 0x0406 tx timeout [ 196.322865][ T5835] Bluetooth: hci2: command 0x0406 tx timeout [ 196.417083][T10411] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1088'. [ 196.888552][ T12] hsr_slave_0: left promiscuous mode [ 196.904087][T10436] openvswitch: netlink: IP tunnel dst address not specified [ 196.904189][ T12] hsr_slave_1: left promiscuous mode [ 196.936714][T10434] netlink: 'syz.3.1097': attribute type 62 has an invalid length. [ 196.936730][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.936756][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.973585][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.985380][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.020116][ T12] veth1_macvtap: left promiscuous mode [ 197.025929][ T12] veth0_macvtap: left promiscuous mode [ 197.035500][ T12] veth1_vlan: left promiscuous mode [ 197.051272][ T12] veth0_vlan: left promiscuous mode [ 197.250341][T10452] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 197.388470][T10455] IPv4: Oversized IP packet from 127.202.26.0 [ 197.395119][T10455] IPv4: Oversized IP packet from 127.202.26.0 [ 198.005650][ T5843] Bluetooth: hci1: command tx timeout [ 198.150163][ T12] team0 (unregistering): Port device team_slave_1 removed [ 198.206078][ T12] team0 (unregistering): Port device team_slave_0 removed [ 198.632389][T10477] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1103'. [ 198.719872][T10480] sctp: [Deprecated]: syz.0.1105 (pid 10480) Use of struct sctp_assoc_value in delayed_ack socket option. [ 198.719872][T10480] Use struct sctp_sack_info instead [ 198.805272][T10484] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1104'. [ 198.886861][T10484] geneve2: entered promiscuous mode [ 199.096298][T10386] chnl_net:caif_netlink_parms(): no params data found [ 199.374122][T10509] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1112'. [ 200.075166][ T5843] Bluetooth: hci1: command tx timeout [ 200.094346][T10537] bridge2: entered promiscuous mode [ 200.135511][T10537] bridge2: entered allmulticast mode [ 200.214111][T10551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1117'. [ 200.277001][T10555] ================================================================== [ 200.285111][T10555] BUG: KASAN: slab-use-after-free in rose_get_neigh+0x391/0x990 [ 200.292784][T10555] Read of size 1 at addr ffff888034af1c30 by task syz.0.1115/10555 [ 200.300687][T10555] [ 200.303011][T10555] CPU: 1 UID: 0 PID: 10555 Comm: syz.0.1115 Not tainted 6.16.0-rc3-syzkaller-00133-g42fd432fe6d3 #0 PREEMPT(full) [ 200.303026][T10555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 200.303033][T10555] Call Trace: [ 200.303038][T10555] [ 200.303044][T10555] dump_stack_lvl+0x189/0x250 [ 200.303063][T10555] ? __virt_addr_valid+0x1c8/0x5c0 [ 200.303074][T10555] ? rcu_is_watching+0x15/0xb0 [ 200.303088][T10555] ? __kasan_check_byte+0x12/0x40 [ 200.303098][T10555] ? __pfx_dump_stack_lvl+0x10/0x10 [ 200.303111][T10555] ? rcu_is_watching+0x15/0xb0 [ 200.303124][T10555] ? lock_release+0x4b/0x3e0 [ 200.303138][T10555] ? __virt_addr_valid+0x1c8/0x5c0 [ 200.303147][T10555] ? __virt_addr_valid+0x4a5/0x5c0 [ 200.303156][T10555] print_report+0xd2/0x2b0 [ 200.303169][T10555] ? rose_get_neigh+0x391/0x990 [ 200.303182][T10555] kasan_report+0x118/0x150 [ 200.303193][T10555] ? rose_get_neigh+0x391/0x990 [ 200.303208][T10555] rose_get_neigh+0x391/0x990 [ 200.303223][T10555] rose_connect+0x416/0x10a0 [ 200.303234][T10555] ? __pfx_current_check_access_socket+0x10/0x10 [ 200.303247][T10555] ? aa_sk_perm+0x81e/0x950 [ 200.303257][T10555] ? __might_fault+0xb0/0x130 [ 200.303265][T10555] ? __pfx_rose_connect+0x10/0x10 [ 200.303277][T10555] ? aa_af_perm+0x210/0x2b0 [ 200.303286][T10555] ? tomoyo_socket_connect_permission+0x164/0x290 [ 200.303302][T10555] ? bpf_lsm_socket_connect+0x9/0x20 [ 200.303316][T10555] __sys_connect+0x316/0x440 [ 200.303326][T10555] ? __pfx___sys_connect+0x10/0x10 [ 200.303338][T10555] ? rcu_is_watching+0x15/0xb0 [ 200.303356][T10555] __x64_sys_connect+0x7a/0x90 [ 200.303366][T10555] do_syscall_64+0xfa/0x3b0 [ 200.303375][T10555] ? lockdep_hardirqs_on+0x9c/0x150 [ 200.303387][T10555] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.303397][T10555] ? clear_bhb_loop+0x60/0xb0 [ 200.303407][T10555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.303416][T10555] RIP: 0033:0x7f38e0b8e929 [ 200.303431][T10555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.303440][T10555] RSP: 002b:00007f38e1a0d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 200.303454][T10555] RAX: ffffffffffffffda RBX: 00007f38e0db6240 RCX: 00007f38e0b8e929 [ 200.303462][T10555] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000009 [ 200.303468][T10555] RBP: 00007f38e0c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 200.303475][T10555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.303481][T10555] R13: 0000000000000000 R14: 00007f38e0db6240 R15: 00007ffcab9f38b8 [ 200.303491][T10555] [ 200.303495][T10555] [ 200.562879][T10555] Allocated by task 5931: [ 200.567200][T10555] kasan_save_track+0x3e/0x80 [ 200.571875][T10555] __kasan_kmalloc+0x93/0xb0 [ 200.576454][T10555] __kmalloc_noprof+0x27a/0x4f0 [ 200.581291][T10555] switchdev_deferred_enqueue+0x2d/0x240 [ 200.586912][T10555] br_switchdev_mdb_notify+0x25e/0x410 [ 200.592361][T10555] __br_mdb_notify+0x73/0x970 [ 200.597027][T10555] __br_multicast_add_group+0x84f/0xa30 [ 200.602564][T10555] br_multicast_rcv+0x3a5f/0x74b0 [ 200.607583][T10555] br_dev_xmit+0xaf7/0x1840 [ 200.612077][T10555] dev_hard_start_xmit+0x2d7/0x830 [ 200.617179][T10555] __dev_queue_xmit+0x1adf/0x3a70 [ 200.622195][T10555] ip6_finish_output2+0x11bc/0x16a0 [ 200.627385][T10555] ip6_finish_output+0x234/0x7d0 [ 200.632314][T10555] NF_HOOK+0x9e/0x380 [ 200.636291][T10555] mld_sendpack+0x800/0xd80 [ 200.640788][T10555] mld_ifc_work+0x835/0xde0 [ 200.645280][T10555] process_scheduled_works+0xae1/0x17b0 [ 200.650825][T10555] worker_thread+0x8a0/0xda0 [ 200.655413][T10555] kthread+0x70e/0x8a0 [ 200.659474][T10555] ret_from_fork+0x3fc/0x770 [ 200.664061][T10555] ret_from_fork_asm+0x1a/0x30 [ 200.668815][T10555] [ 200.671129][T10555] Freed by task 5931: [ 200.675094][T10555] kasan_save_track+0x3e/0x80 [ 200.679767][T10555] kasan_save_free_info+0x46/0x50 [ 200.684789][T10555] __kasan_slab_free+0x62/0x70 [ 200.689545][T10555] kfree+0x18e/0x440 [ 200.693437][T10555] switchdev_deferred_process+0x203/0x2b0 [ 200.699150][T10555] switchdev_deferred_process_work+0x13/0x20 [ 200.705116][T10555] process_scheduled_works+0xae1/0x17b0 [ 200.710656][T10555] worker_thread+0x8a0/0xda0 [ 200.715241][T10555] kthread+0x70e/0x8a0 [ 200.719302][T10555] ret_from_fork+0x3fc/0x770 [ 200.723889][T10555] ret_from_fork_asm+0x1a/0x30 [ 200.728643][T10555] [ 200.730955][T10555] The buggy address belongs to the object at ffff888034af1c00 [ 200.730955][T10555] which belongs to the cache kmalloc-512 of size 512 [ 200.744996][T10555] The buggy address is located 48 bytes inside of [ 200.744996][T10555] freed 512-byte region [ffff888034af1c00, ffff888034af1e00) [ 200.758694][T10555] [ 200.761007][T10555] The buggy address belongs to the physical page: [ 200.767410][T10555] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888034af3000 pfn:0x34af0 [ 200.777463][T10555] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 200.785949][T10555] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 200.794439][T10555] page_type: f5(slab) [ 200.798411][T10555] raw: 00fff00000000240 ffff88801a441c80 ffffea0001eda110 ffffea00015c0b10 [ 200.806986][T10555] raw: ffff888034af3000 000000000010000d 00000000f5000000 0000000000000000 [ 200.815561][T10555] head: 00fff00000000240 ffff88801a441c80 ffffea0001eda110 ffffea00015c0b10 [ 200.824222][T10555] head: ffff888034af3000 000000000010000d 00000000f5000000 0000000000000000 [ 200.832882][T10555] head: 00fff00000000002 ffffea0000d2bc01 00000000ffffffff 00000000ffffffff [ 200.841543][T10555] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 200.850199][T10555] page dumped because: kasan: bad access detected [ 200.856606][T10555] page_owner tracks the page as allocated [ 200.862307][T10555] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5208, tgid 5208 (udevd), ts 29860177262, free_ts 29847671572 [ 200.883056][T10555] post_alloc_hook+0x240/0x2a0 [ 200.887817][T10555] get_page_from_freelist+0x21e4/0x22c0 [ 200.893355][T10555] __alloc_frozen_pages_noprof+0x181/0x370 [ 200.899150][T10555] alloc_pages_mpol+0x232/0x4a0 [ 200.903991][T10555] allocate_slab+0x8a/0x3b0 [ 200.908489][T10555] ___slab_alloc+0xbfc/0x1480 [ 200.913154][T10555] __kmalloc_cache_noprof+0x296/0x3d0 [ 200.918510][T10555] kernfs_fop_open+0x397/0xca0 [ 200.923269][T10555] do_dentry_open+0xdf0/0x1970 [ 200.928023][T10555] vfs_open+0x3b/0x340 [ 200.932082][T10555] path_openat+0x2ee5/0x3830 [ 200.936664][T10555] do_filp_open+0x1fa/0x410 [ 200.941161][T10555] do_sys_openat2+0x121/0x1c0 [ 200.945829][T10555] __x64_sys_openat+0x138/0x170 [ 200.950673][T10555] do_syscall_64+0xfa/0x3b0 [ 200.955163][T10555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.961045][T10555] page last free pid 5214 tgid 5214 stack trace: [ 200.967354][T10555] __free_frozen_pages+0xc71/0xe70 [ 200.972458][T10555] __put_partials+0x161/0x1c0 [ 200.977125][T10555] put_cpu_partial+0x17c/0x250 [ 200.981879][T10555] __slab_free+0x2f7/0x400 [ 200.986286][T10555] qlist_free_all+0x97/0x140 [ 200.990872][T10555] kasan_quarantine_reduce+0x148/0x160 [ 200.996326][T10555] __kasan_slab_alloc+0x22/0x80 [ 201.001163][T10555] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 201.006620][T10555] getname_flags+0xb8/0x540 [ 201.011116][T10555] __x64_sys_symlink+0x5d/0x90 [ 201.015877][T10555] do_syscall_64+0xfa/0x3b0 [ 201.020368][T10555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.026252][T10555] [ 201.028566][T10555] Memory state around the buggy address: [ 201.034183][T10555] ffff888034af1b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 201.042236][T10555] ffff888034af1b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 201.050286][T10555] >ffff888034af1c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 201.058338][T10555] ^ [ 201.063955][T10555] ffff888034af1c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 201.072005][T10555] ffff888034af1d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 201.080055][T10555] ================================================================== [ 201.088282][T10555] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 201.095501][T10555] CPU: 1 UID: 0 PID: 10555 Comm: syz.0.1115 Not tainted 6.16.0-rc3-syzkaller-00133-g42fd432fe6d3 #0 PREEMPT(full) [ 201.107572][T10555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 201.117625][T10555] Call Trace: [ 201.120900][T10555] [ 201.123826][T10555] dump_stack_lvl+0x99/0x250 [ 201.128422][T10555] ? __asan_memcpy+0x40/0x70 [ 201.133007][T10555] ? __pfx_dump_stack_lvl+0x10/0x10 [ 201.138206][T10555] ? __pfx__printk+0x10/0x10 [ 201.142792][T10555] panic+0x2db/0x790 [ 201.146688][T10555] ? __pfx_panic+0x10/0x10 [ 201.151100][T10555] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 201.156991][T10555] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 201.162879][T10555] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 201.169201][T10555] ? print_memory_metadata+0x314/0x400 [ 201.174659][T10555] ? rose_get_neigh+0x391/0x990 [ 201.179511][T10555] check_panic_on_warn+0x89/0xb0 [ 201.184446][T10555] ? rose_get_neigh+0x391/0x990 [ 201.189289][T10555] end_report+0x78/0x160 [ 201.193525][T10555] kasan_report+0x129/0x150 [ 201.198024][T10555] ? rose_get_neigh+0x391/0x990 [ 201.202873][T10555] rose_get_neigh+0x391/0x990 [ 201.207550][T10555] rose_connect+0x416/0x10a0 [ 201.212136][T10555] ? __pfx_current_check_access_socket+0x10/0x10 [ 201.218456][T10555] ? aa_sk_perm+0x81e/0x950 [ 201.222953][T10555] ? __might_fault+0xb0/0x130 [ 201.227620][T10555] ? __pfx_rose_connect+0x10/0x10 [ 201.232640][T10555] ? aa_af_perm+0x210/0x2b0 [ 201.237136][T10555] ? tomoyo_socket_connect_permission+0x164/0x290 [ 201.243549][T10555] ? bpf_lsm_socket_connect+0x9/0x20 [ 201.248830][T10555] __sys_connect+0x316/0x440 [ 201.253415][T10555] ? __pfx___sys_connect+0x10/0x10 [ 201.258520][T10555] ? rcu_is_watching+0x15/0xb0 [ 201.263292][T10555] __x64_sys_connect+0x7a/0x90 [ 201.268049][T10555] do_syscall_64+0xfa/0x3b0 [ 201.272542][T10555] ? lockdep_hardirqs_on+0x9c/0x150 [ 201.277743][T10555] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.283798][T10555] ? clear_bhb_loop+0x60/0xb0 [ 201.288468][T10555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.294353][T10555] RIP: 0033:0x7f38e0b8e929 [ 201.298761][T10555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.318371][T10555] RSP: 002b:00007f38e1a0d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 201.326787][T10555] RAX: ffffffffffffffda RBX: 00007f38e0db6240 RCX: 00007f38e0b8e929 [ 201.334772][T10555] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000009 [ 201.342740][T10555] RBP: 00007f38e0c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 201.350706][T10555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.358670][T10555] R13: 0000000000000000 R14: 00007f38e0db6240 R15: 00007ffcab9f38b8 [ 201.366643][T10555] [ 201.369891][T10555] Kernel Offset: disabled [ 201.374217][T10555] Rebooting in 86400 seconds..