last executing test programs: 12.615870638s ago: executing program 3 (id=1887): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}, 0xbe58}], 0x1, 0x7ffeedc0, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r3 = socket(0x1e, 0x4, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x2c, 0x10, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@local}]}]}, 0x2c}}, 0x0) close(r3) 11.638764876s ago: executing program 3 (id=1897): socket(0x22, 0x4, 0x8c) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f00000003c0)={0x0, 0x3, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r3, 0x301, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000020e0001000100000028275582944b16ac1e9ea9a86e452a0f561b73e384de4fb8b8e4c395563efe7ca6f325282ff9fa3c6d7ed8c2bb55b44b227d7d6a3a9bd34d196583e4fe9c442a1495ff6a1629ae65872157c6f15ea1cdaedea08177983ce8e0b61f024c6972a82ed0793b61de10be749e70fbc5c480e011d922f10d4b8703a50899c1d34e6285d03f8c5b189edab26938e44fd8ab0a29f95f2cad3609f6241ec7babf"], 0x1c}}, 0x0) close(0x3) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000dc0)='veth1_to_team\x00') socket$inet_smc(0x2b, 0x1, 0x0) 10.071093506s ago: executing program 3 (id=1900): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000000c0)={r1}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x701, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xb, 0x800, 0x3, 0xd, 0x6}, 0x29}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x48020}, 0x20000840) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$qrtr(0x2a, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x2, 0x80805, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x108, r6, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0xec, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x33e}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4f1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xffffff5e}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xf536}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffff0189}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}]}, {0x4}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x45c}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfffffffc}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfffff001}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x800}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6d}]}, 0x108}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5], 0x90}}, 0x0) 9.839606618s ago: executing program 3 (id=1905): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001680)={0xe8, 0x2b, 0x1, 0x0, 0x25dfdbff, "", [@nested={0xd8, 0x0, 0x0, 0x1, [@nested={0xac, 0x126, 0x0, 0x1, [@nested={0xa6, 0x75, 0x0, 0x1, [@nested={0x4, 0x59}, @generic="33f86aa75382704bd14cb90aa2ca40cdecea98531f8fd16ed4af098087bd8a98903b9b500fb2ca7c27bcd2117b709dcab87f5af652b8594df42c59d081416d7a2c558949aa", @typed={0x14, 0xad, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x22}}, @nested={0x4, 0xec}, @typed={0x8, 0xa2, 0x0, 0x0, @ipv4=@local}, @nested={0x4, 0x92}, @nested={0x4, 0x40}, @nested={0x4, 0xa5}, @generic="88951309e9f507137b75700229a3680d239e00d868b9ec1156d3728bc7e5e0230736bb81387072efd751cf7f75"]}]}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @typed={0x14, 0x2d, 0x0, 0x0, @ipv6=@private2}]}]}, 0xe8}], 0x1}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) r2 = socket$inet6(0xa, 0x3, 0x9) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x6, &(0x7f0000000140)={0x24, {{0x29, 0x0, 0x2000000, @private2, 0x1000000}}}, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r3 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r5, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}, {0x14}}}, 0x30}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000014c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x8, [@int={0x5, 0x0, 0x0, 0x1, 0x0, 0x1e, 0x0, 0x6, 0x6}]}, {0x0, [0x0, 0x2e, 0x0, 0x5f, 0x61, 0x30]}}, &(0x7f0000000340)=""/233, 0x30, 0xe9, 0x0, 0x10, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000001500)=@base={0x12, 0xb, 0x8, 0x2}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x64, 0x30, 0xeaa3ef926154e70d, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x7}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) unshare(0x22020600) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="08000000040000000400000001"], 0x50) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r9}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0xf, &(0x7f0000002400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r9}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r7, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) pselect6(0x40, &(0x7f0000000300), &(0x7f0000000000)={0x18}, 0x0, 0x0, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r13 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r13, &(0x7f0000000000)={0x1d, r12}, 0x10) 9.719890892s ago: executing program 2 (id=1908): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000300)='devices.deny\x00', 0x2, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000000)="80fd051db9f9ba", 0x7}], 0x1, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r3, 0x29, 0x4b, 0x0, &(0x7f00000023c0)) write$cgroup_devices(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='c 122'], 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="020000000400"}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r5, 0xffffffffffffc000) 9.504389315s ago: executing program 1 (id=1912): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000038000480140001800c0001006e6f747261636b000400028020000180070001006374000014000280080001400000000a080002400000009c"], 0x8c}}, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff03c}, {0x6}]}, 0x10) 9.453571265s ago: executing program 2 (id=1913): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) (async) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x14, r1, 0x1}, 0x14}}, 0x0) 9.290415085s ago: executing program 1 (id=1916): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000000)={0x45, 0x6, 0xb, 0xc, 0x3, 0x81}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x18, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x1000, &(0x7f00000002c0)=""/4096, 0x41000, 0x2, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x3, 0x5, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000001c0)=[0x1, 0x1, 0x1, 0x1], &(0x7f0000000200)=[{0x1, 0x5, 0xd, 0x3}, {0x3, 0x1, 0x1, 0x2}, {0x5, 0x2, 0x6, 0xa}], 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='sched_switch\x00', r2}, 0x18) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010004b040000000000005f007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010062726964676500001800028005002600020000000c002e"], 0x48}}, 0x0) syz_genetlink_get_family_id$batadv(0xfffffffffffffffc, 0xffffffffffffffff) 9.16946723s ago: executing program 2 (id=1917): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0xe, &(0x7f0000003fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x7}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004b80), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, 0x0, 0x42014) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000005000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000005100)={0x0, 0x0, &(0x7f00000050c0)={&(0x7f0000005040)={0x44, r1, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "7f948adedef58fc22dbbae6631"}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xd1, 0x35}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd0c}, 0x64) 9.1660366s ago: executing program 2 (id=1918): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) close(r0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) (async) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="440000004ec6"}) (async) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r2, 0x20, 0x2000, 0x2, {}, [@NL80211_ATTR_WIPHY_TXQ_PARAMS={0x2c, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_AIFS={0x5, 0x5, 0xc}, @NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x6}, @NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x5}, @NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x1e49}, @NL80211_TXQ_ATTR_AIFS={0x5, 0x5, 0x2}]}, @NL80211_ATTR_TXQ_LIMIT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000084}, 0x2000c000) (async) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x20, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x48) 9.054608051s ago: executing program 1 (id=1921): socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001b80)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x41, &(0x7f0000000100)=r3, 0x8) setsockopt$sock_attach_bpf(r2, 0x1, 0x25, &(0x7f0000000100)=r1, 0x4) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001e40)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x0, 0x11, 0x148, 0x0, 0x10, 0x1b0, 0x2a8, 0x2a8, 0x1b0, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x98, 0xf8, 0x1c, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@rand_addr=0xfffffffc, [], 0x0, 0x0, 0x0, 0x0, 0xca25, 0xba, 0x0, 0x1f}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98, 0x2202}, {0x28}}}}, 0x2a8) r4 = socket$kcm(0x10, 0x2, 0x4) recvmmsg(r4, &(0x7f0000000500)=[{{&(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000280)=""/223, 0xdf}, {&(0x7f0000000180)=""/154, 0x9a}, {&(0x7f0000000a80)=""/4088, 0xff8}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/115, 0x73}], 0x5, &(0x7f00000004c0)=""/5, 0x5}, 0x2b1}], 0x1, 0x121, &(0x7f0000000540)={0x0, 0x3938700}) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x7, 0x0, 0x8}, {}, {0x5}, {0x7, 0x0, 0x0, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x1a}}]}, &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) socket(0x10, 0x2, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e1f, @remote}, 0x10) setsockopt$sock_linger(r8, 0x1, 0x3d, &(0x7f0000000080), 0x8) sendmmsg$sock(r8, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@mark={{0x14, 0x1, 0x3d, 0xe2d}}], 0x18}}], 0x1, 0x0) write(r8, &(0x7f0000000240)="aefc00001a0025f00385bc04fe8800008002280008020200ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f90000000000000000", 0x3a) ioctl$sock_netrom_SIOCDELRT(r5, 0x8915, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000006301230000000000950000000000000031d1878ef47885f67898146813cd24a1927842e5e23e984da6d3d35f1ab2b8d19fcb0580018daee7482c57d0a336"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r9, @ANYRES16=r4, @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r10, 0xe0, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000800)=[0x0], &(0x7f0000000840), 0x0, 0x94, &(0x7f0000000880), 0x0, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0xffffffffffffffa4, 0xc4, 0x8, 0x8, &(0x7f0000000980)}}, 0x10) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)}, 0x48004) bpf$TOKEN_CREATE(0x24, &(0x7f0000000a00), 0x8) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) r11 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_mreq(r11, 0x0, 0x23, &(0x7f0000000000)={@remote, @remote}, &(0x7f0000000080)=0x8) 8.976393856s ago: executing program 1 (id=1923): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$caif_stream(0x25, 0x1, 0x3) sendmsg$inet(r1, &(0x7f0000002080)={0x0, 0x0, 0x0}, 0x4000095) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x405, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1c}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) 8.802831344s ago: executing program 2 (id=1924): bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000709fefffffffcffffff017c0000040042801400018006000600bd0a000006000c00bd0a0000040002"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x400c800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_MASQ_REG_PROTO_MAX={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8f}, [@ldst={0x7}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) 8.795297335s ago: executing program 3 (id=1925): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=@newtaction={0x1050, 0x30, 0xeaa3ef926154e70d, 0x70bd26, 0x0, {}, [{0x103c, 0x1, [@m_ctinfo={0x1038, 0x15, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xfffffff7}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x1050}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r7, 0x1, 0x70bd2a, 0x284, {{}, {@val={0x8, 0x3, r8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20002840) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000001500)={0x98, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x12, 0xbd, [0x7, 0x7f, 0x1, 0x4a, 0x4, 0x4, 0x80]}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x4a, 0xbe, "6b1d6990b1039efbe99c1c2f17ad9483497aefa07e53b9488ce78868052f5078a1f87367aa373e6742916ca56103b3b6dc2c58753fd7668619bc5f400d0abe20da70df0ab97c"}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x6}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x3b35, 0x7}}]}, 0x98}, 0x1, 0x0, 0x0, 0x2}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r2, @ANYBLOB="00082dbd7000fddbdf256800000008000300", @ANYRES32=r9, @ANYBLOB="0c00990008000000430000003300c70008000705050300020800780703050100fc010d0104030e020f0705020001334eb723f586b43300003400b900010605050a0609060705000710047407040009010802f8010503a80306030107060180074005040702d949f9734ec8292600c70007054004c407090000010f070704b00008030206090102063400599474c5e4306b0100002e00c70040010901080301022704040108000800ff0406070402ff0207067f030400fe0108028519565515f83db800000c00c70080580bfdac94f0020e00c7c21d8bf71a0014167bba5756b0c9"], 0xfc}, 0x1, 0x0, 0x0, 0x20000091}, 0x48000) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c00afcea6f5ceb8342c08a505000000b6025e1d", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c0002800c00210009000000000000000c0022000200000000000000"], 0x4c}}, 0x0) 8.794543933s ago: executing program 1 (id=1926): r0 = socket(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0xfffffffffffffe5e, 0x2, {{0x2, [0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1000]}, [@TCA_MQPRIO_MAX_RATE64={0x4}]}}}]}, 0x8c}}, 0x20000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0xb40}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x3c, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r7}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x18, 0x1, 0x0, 0x1, [@nested={0x11, 0x10d, 0x0, 0x1, [@generic="905176c518740da397a9423603"]}]}]}, 0x3c}], 0x1}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001200)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}}}, &(0x7f0000001300)=0xe8) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001340)={0x0, 0x0, 0x0}, &(0x7f0000001380)=0xc) r10 = gettid() r11 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000bc0)=0xc) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x4f, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r12}]}, 0x1c}}, 0x0) r13 = getgid() sendmsg$netlink(r1, &(0x7f0000001440)={&(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000011c0)=[{&(0x7f0000000980)={0x2e8, 0x2d, 0x4, 0x70bd26, 0x25dfdbfd, "", [@nested={0x230, 0x6c, 0x0, 0x1, [@nested={0x4, 0x8a}, @nested={0x4, 0x102}, @generic="6d4eb1a0ed58f27fa34371eec7552aaf3b52b4be531b16c00109da4e1948a3a0c2b58a03cea174071b83c86b96df9e6d6384d127c7b93bb2ce531eabc6f72ce0dbd164a5c64301caef298c79768061103da1e52182cd40d65160d713b9c295c0ba42106448d2b72c05352c3be0c521b4c2a07273e9f27f55a20740cf265012550fb300f5e43da5edd9915edd5a61b40a7d1f6177fa8f022919150cb081b1ec7bb24c602378cbcb16a0cb056b54b8a2492c48fbf6a9223c234520f4a528e836d8a2e95cb3e10429", @generic="05d539dbbd1dee943e8c20259e5d43bd852c56bec57c1c0d74b2e5973c68141b822de080487a24b97370b75eeae03a21c1309b69fa5bcf0169d0a3473cf54ae8b9090d6063e9a862d6163b8d", @generic="bc3bb2696b73fd8979c402a6633f25c15abd4a7c01e54312ab6e9ae3ab3d6886b8e5be7116575b1057f4b54a47f26532d59179445fc6905fdf37327d1493d30b5fc0f57fe0367cda1c81627e3338ac9e03d05ead5ba8423c6058e5c65e", @nested={0x4, 0xdf}, @nested={0x4, 0xdb}, @generic="0e9aeae94773dd8bf8c28294edbdf4e41fc51af457c93ff7511ef5fbb8c0847e1257b96bba163e125193189508deec04ba5d211b234bfc0077c2d79236038cd9978da3759d2c9298e092c8ca29c51c169dc723a826289dcc385a2ae274129468230b31b2ecd6042a06bbfe3cbb197e8777b46522859ea59b79f257dde19e841ba4f6a0f3251452b057f0694452a1e7f1e382e4657c04b36c710f66fd16c4d8ff", @typed={0x8, 0x63, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x26}]}, @nested={0x8a, 0x23, 0x0, 0x1, [@typed={0x4, 0x1f}, @generic="7d4e874baa9072cf8edad47e94f439b67952e9a750fc", @typed={0x63, 0x45, 0x0, 0x0, @binary="3b6a53242c0a868ec388045aed63b9a10a085c607bdffe90af8b74a77b224ffb0a6d1f0521c0ab3b7724091548b2f609b57b56453855671db48dce6b1787c05375ceffa1c75ad0950516ca52a37e02a7b98715e1e94a8d9959dbd27f7172f0"}, @typed={0x8, 0x10d, 0x0, 0x0, @uid=r7}]}, @typed={0xc, 0x88, 0x0, 0x0, @u64=0x401}, @nested={0x8, 0x13a, 0x0, 0x1, [@nested={0x4, 0x5e}]}, @typed={0x6, 0x56, 0x0, 0x0, @str='\\\x00'}]}, 0x2e8}, {&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x2f4}, {&(0x7f0000000f80)={0x144, 0x2b, 0x100, 0x70bd29, 0x25dfdbfd, "", [@nested={0xe2, 0xe5, 0x0, 0x1, [@generic="ed9bdd6750a31ce849290f96d44cf0befa154cb1967ae1dad76887d178ff4cf0a8b7ae75782dcc6235ae26dcf38d3328abb6843ee6564e3bdd6c77de87d4f0284f58fc50bc4d2791866f0f5986dcb8b533b845a13a95779270838860498832b4a8947416130f0420ee10801ad3f002c64d5d16ce80b12e33813d9f74198d3561b3c480cf297e646b6f25a34658a108d56ddd8922dd5ade6f6a141cd05cd527cb743d89e47db92c47fd6c24e4a8f8708fd3b3f4554bf3b36b8fecc4325656f02337c093af6ffffc534d236f7a0432864eab595bfb7588b614363cac3eca77"]}, @nested={0x4, 0x116}, @nested={0x4b, 0x11a, 0x0, 0x1, [@typed={0x4, 0xf2}, @generic="4192337b45b4a070cdda5cb1ec8e2bd1d6c4286de7788282765b89736ef454d796a2add4d15f2371e4977c24b5bd26636c8d188a80a34201b02ae04bccc95f23f37844"]}]}, 0x144}, {&(0x7f0000001100)={0x94, 0x1d, 0x200, 0x70bd2c, 0x25dfdbfd, "", [@generic="e60fed174f2845ddeb8a9ff039c2ed34b5f7db8a277cef83d23ba04ef8ff6cc77465691ae42da2fd9c1f361ab9048e9f9c1afb9ebb1879d753ba3ac7d24debe0e71be65859d79e6638d40e80ae3f2cce82f2e6bdee114504dff6f0ddb648e5d594992aeece59ce96670fc420e0db2eb817b36b0184c4e8bc8dd9e0604304d3de6cb7d6d4"]}, 0x94}], 0x4, &(0x7f00000013c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r8, r9}}}, @cred={{0x1c, 0x1, 0x2, {r10, r12, r13}}}, @rights={{0x18, 0x1, 0x1, [r0, r4]}}, @rights={{0x1c, 0x1, 0x1, [r3, r1, r4]}}], 0x78, 0x2}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r14 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r14, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r14, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xc2, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb4, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x26, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @loopback, @rand_addr=0x640100fe, {[@cipso={0x86, 0x7b, 0x0, [{0x0, 0xc, "e256b28c590300000052"}, {0x0, 0x9, "020007651442eb"}, {0x0, 0x12, "7434954373561de539eb9d07112dee3c"}, {0x0, 0x9, "e706d30bd224f8"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0xa, "0000000000800000"}, {0x0, 0x12, "73bc23f9ffffffa30900a301c8460000"}, {0x0, 0x12, "c8f46976e79ea788f03d9d3205927e3d"}]}, @cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 8.658097674s ago: executing program 3 (id=1928): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x2, 0x25dfdbfb, {0x36}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r3, 0x1, 0x0, 0xfffbffff}, 0x14}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x2, 0x25dfdbfb, {0x36}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r3, 0x1, 0x0, 0xfffbffff}, 0x14}}, 0x0) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) 8.201223255s ago: executing program 32 (id=1928): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x2, 0x25dfdbfb, {0x36}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r3, 0x1, 0x0, 0xfffbffff}, 0x14}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x2, 0x25dfdbfb, {0x36}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r3, 0x1, 0x0, 0xfffbffff}, 0x14}}, 0x0) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x3, 0x4) (async) 8.174084237s ago: executing program 1 (id=1932): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x2}]}, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0}, 0x94) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001d80)={@ifindex, 0xffffffffffffffff, 0x36, 0x100c}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r4, @ANYBLOB="0a000600080211000000000038005080080003000dac0f0011000100cabee339084eeef109002471f40000000800070000000000050002"], 0x60}}, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000000)={0x0, 0xffffffffffffff3a, 0x4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="620ac4ff0000000071108d000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x2}]}, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8}, 0x94) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0}, 0x94) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001d80)={@ifindex, 0xffffffffffffffff, 0x36, 0x100c}, 0x20) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r4, @ANYBLOB="0a000600080211000000000038005080080003000dac0f0011000100cabee339084eeef109002471f40000000800070000000000050002"], 0x60}}, 0x0) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000000)={0x0, 0xffffffffffffff3a, 0x4}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="620ac4ff0000000071108d000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) (async) 7.966705996s ago: executing program 33 (id=1932): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x2}]}, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0}, 0x94) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001d80)={@ifindex, 0xffffffffffffffff, 0x36, 0x100c}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r4, @ANYBLOB="0a000600080211000000000038005080080003000dac0f0011000100cabee339084eeef109002471f40000000800070000000000050002"], 0x60}}, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000000)={0x0, 0xffffffffffffff3a, 0x4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="620ac4ff0000000071108d000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x2}]}, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8}, 0x94) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0}, 0x94) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001d80)={@ifindex, 0xffffffffffffffff, 0x36, 0x100c}, 0x20) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r4, @ANYBLOB="0a000600080211000000000038005080080003000dac0f0011000100cabee339084eeef109002471f40000000800070000000000050002"], 0x60}}, 0x0) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000000)={0x0, 0xffffffffffffff3a, 0x4}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="620ac4ff0000000071108d000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) (async) 7.922176503s ago: executing program 2 (id=1933): r0 = socket$inet6(0xa, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @dev, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) (async) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) (async) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2b, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1}, 0x0) (async) sendmsg$can_bcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4, 0x8, 0x20, {}, {}, {0x3, 0x1, 0x1, 0x1}, 0x1, @can={{0x1, 0x1, 0x1, 0x1}, 0x15, 0x1, 0x0, 0x0, "e6a004c9801448c7"}}, 0x48}, 0x1, 0x0, 0x0, 0xc044}, 0x8090) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000300)=0x300083, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x6, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file0\x00', 0x0, 0x8}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vcan0\x00'}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb}}]}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) connect$inet6(r1, &(0x7f0000000800)={0xa, 0x4e22, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002abd7004fcdbdf252500000008000300", @ANYRES32=r11, @ANYBLOB="0a00060050505050505000001400508005000200010000000800070000000000080035000000000004003400080026006c090000003586dbc14837c57b14c058e1073580bef111296a656a161520152b493e042c531c7395c3e17db7f57f27c254242ea403086e53e2ff17d55688b00e5fd46706c80f0280b552e5c725f7c8e998870788c80d2fc5535cd273d53d73cdda05e0e67aac951fb81c2b2eefefe1661bfbfeb02a94ff568b29cc868cd3878ca028ba8edee16de93177e014e86074d8b20f752e633817d9ff3aac97c96efbb0da386a3bdce63bf561c4303ad9cc4a56650e"], 0x50}}, 0x20000880) close(r0) 7.702575242s ago: executing program 34 (id=1933): r0 = socket$inet6(0xa, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @dev, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) (async) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) (async) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2b, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1}, 0x0) (async) sendmsg$can_bcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4, 0x8, 0x20, {}, {}, {0x3, 0x1, 0x1, 0x1}, 0x1, @can={{0x1, 0x1, 0x1, 0x1}, 0x15, 0x1, 0x0, 0x0, "e6a004c9801448c7"}}, 0x48}, 0x1, 0x0, 0x0, 0xc044}, 0x8090) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000300)=0x300083, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x6, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file0\x00', 0x0, 0x8}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vcan0\x00'}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb}}]}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) connect$inet6(r1, &(0x7f0000000800)={0xa, 0x4e22, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002abd7004fcdbdf252500000008000300", @ANYRES32=r11, @ANYBLOB="0a00060050505050505000001400508005000200010000000800070000000000080035000000000004003400080026006c090000003586dbc14837c57b14c058e1073580bef111296a656a161520152b493e042c531c7395c3e17db7f57f27c254242ea403086e53e2ff17d55688b00e5fd46706c80f0280b552e5c725f7c8e998870788c80d2fc5535cd273d53d73cdda05e0e67aac951fb81c2b2eefefe1661bfbfeb02a94ff568b29cc868cd3878ca028ba8edee16de93177e014e86074d8b20f752e633817d9ff3aac97c96efbb0da386a3bdce63bf561c4303ad9cc4a56650e"], 0x50}}, 0x20000880) close(r0) 4.622789989s ago: executing program 0 (id=1949): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_newnexthop={0x18, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x4}}, 0x18}}, 0x4000) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x9) syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f500", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0xffff, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) r2 = socket(0x26, 0x6, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000140)={r1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@getchain={0x24, 0x66, 0x400, 0x70bd26, 0xe, {0x0, 0x0, 0x0, r3, {0xffed, 0xfff2}, {0x5, 0xfff2}, {0x8, 0xfff1}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x1, 0x3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x44}}, 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.508810579s ago: executing program 0 (id=1950): r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000880)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_WOL_MODES={0x4}, @ETHTOOL_A_WOL_SOPASS={0x4}]}, 0x1c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10}}, 0xbc}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket(0x840000000002, 0x3, 0xff) bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x9, @empty, 0x5}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0xc09, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50081}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x48}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@updsa={0x148, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x5c}, {@in=@remote, 0x0, 0x33}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd, 0x1900000000000000}, {}, 0x0, 0x0, 0xa, 0x2, 0x80}, [@algo_auth_trunc={0x4c, 0x14, {{'sm3\x00'}}}, @mark={0xc, 0x15, {0x350759, 0x9}}]}, 0x148}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$sock_int(r6, 0x1, 0x12, &(0x7f0000000080), 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x25, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}}}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)={0xa4, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IFACE={0x14, 0x17, 'veth1_virt_wifi\x00'}]}, @IPSET_ATTR_ADT={0x68, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x101}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'bond0\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x2}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x2}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}]}, 0xa4}, 0x1, 0x0, 0x0, 0xc1}, 0x800) 3.483021744s ago: executing program 0 (id=1958): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x18, 0x1410, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000240)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x38, 0x2b, 0x0, @private2, @local, {[@hopopts={0x67}], {0x2100, 0x0, 0xffffffffffffff98, 0x0, @opaque="0d87aedaaa7fc9a56dc2d42b221003a116fd256378e5e186d69b1c57326a7371394d0c6bae77d286"}}}}}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@remote, 0x0, 0x2b}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 3.478733905s ago: executing program 4 (id=1959): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) socket$kcm(0x29, 0x2, 0x0) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000140001800d0001007564700822f2f26788"], 0x28}}, 0x0) 3.372163827s ago: executing program 4 (id=1960): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @broadcast, @remote}, &(0x7f0000000180)=0xc) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@volatile={0x3, 0x0, 0x0, 0x9, 0x4}, @ptr={0x5}, @func={0x5, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x0, 0x0, 0x61, 0x30]}}, &(0x7f0000000240)=""/77, 0x42, 0x4d, 0x0, 0xa}, 0x28) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000080)=@raw=[@exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu={0x4, 0x0, 0x4, 0x2, 0x3, 0xfffffffffffffffe, 0x1}], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x1d, &(0x7f0000000100)=""/29, 0x41100, 0x11, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000300)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x8, 0x400}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)=[{0x5, 0x2, 0x7, 0xb}], 0x10, 0x9}, 0x94) (async) socketpair(0x2b, 0xa, 0x5, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f00000004c0)={r6, r3}) (async) pread64(r3, &(0x7f0000000500)=""/192, 0xc0, 0x8) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r5) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r7, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x24000003) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000780)={r0, &(0x7f0000000700)="3492dd6a3d3449605b6711dbb6024dd688c7e1908240c64fa558f25389e9377d0c63562476ef08eedb4554fe46e90f2687e2671b96f055c83761ccc8dec60824881eafdbd3058a9903f6db6eba16f39b0197fa94b1a16c98c6df0b05e6e4e4456859b2ac0b3c2f12af5eb54cc76d64"}, 0x20) (async) write$bt_hci(r4, &(0x7f00000007c0)={0x1, @inquiry={{0x401, 0x5}, {'hB5', 0x80, 0x40}}}, 0x9) (async) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) write$nci(r8, &(0x7f0000000840)=@NCI_OP_CORE_INIT_RSP_V2={0x0, 0x0, 0x2, 0x1, 0x34, {0x1, 0x1000, 0x3, 0x7, 0x81, 0xd0, 0x40, 0x3, 0x61, "99c95c02cba5aea0a6094a6ece376147e4764daf2daab4d5a16c21a175637ddc955c110a2ad8be85a5c0592dc9c1dba44a8f6c982f1527de81aa65966263a973e3ffcf04fa8a1b2afb86d12a5d94fc8384b56f5ee0a0d0029758d9ebb79deff1be"}}, 0x72) r9 = accept$inet6(r4, 0x0, &(0x7f00000008c0)) ioctl$EXT4_IOC_GROUP_EXTEND(r9, 0x40086607, &(0x7f0000000900)=0x4464) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r9, 0x84, 0x4, &(0x7f0000000940)=0x7, 0x4) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000980)=0x0) ioctl$SIOCAX25DELUID(r5, 0x89e2, &(0x7f00000009c0)={0x3, @null, r10}) (async) sendmsg$nl_route(r4, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)=@ipv4_delrule={0x2c, 0x21, 0x8, 0x70bd27, 0x25dfdbfc, {0x2, 0x80, 0x10, 0xb, 0x7, 0x0, 0x0, 0x4, 0x10}, [@FRA_DST={0x8, 0x1, @local}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0xfffffffd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x40000) r11 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r11, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x30, 0x14, 0x10, 0x70bd2a, 0x25dfdbff, {0x2a, 0xff}, [@INET_DIAG_REQ_BYTECODE={0x1b, 0x1, "1604603a7e57647f9d9188fc47bc47da85adea4c7e777e"}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000dc0)={r3, 0x0, 0x64, 0x12, &(0x7f0000000c00)="f67fcf3ca7d43fbcf1619507555a1769b90fbfa86976c55bc8cd9d5e39c39ede72516d061a23996673242103b3b175b66363fd51071abbee8d78f98aad8d87f76412d6d46df5af58f9d41c14746264ebb4008827d051e810b750b988875886bd9bae2dd0", &(0x7f0000000c80)=""/18, 0x8, 0x0, 0x4f, 0x5a, &(0x7f0000000cc0)="080c1916423b3a5450c27f0c1f41ad76a21e9d34518c57625cb9a4b8b1e3cdd648083c396bd3b99d027184a19324328703d374a774b9385e177662ca3af694c0d807997dc451d25ab6e6a41e257add", &(0x7f0000000d40)="f1a8629bc638fda5e61e05c8d7d26bf5f824cac24392a8d58d64b38de4332d05ebbf32fe60c499dd3796b814253dfd24953b2ec85f96be8f45b912d4ecdb0f653487085e96a810c9365a762e6a657e85ebc8aa2dd1a458c37161", 0x6, 0x0, 0xb}, 0x50) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000e40), 0x145240, 0x0) ioctl$PPPIOCGIDLE64(r12, 0x8010743f, &(0x7f0000000e80)) (async) r13 = accept(r9, &(0x7f0000000ec0)=@ieee802154={0x24, @short}, &(0x7f0000000f40)=0x80) sendmsg$802154_raw(r13, &(0x7f00000010c0)={&(0x7f0000000f80)={0x24, @none={0x0, 0xfffe}}, 0x14, &(0x7f0000001080)={&(0x7f0000000fc0)="61f748027e29aef0e4350a2c93449c9b5773477b0f550739cbd044f9b685c6f12f644ed0f257ef5d25bf9fa6a6521e05d7c0199fc7bdf26040c53d3a5c03b2982c10819181440fc0777f8202466cef1912c21ab06ef1631e3a28c5e3ac66988e3ed97d55bde8be968d2ea4861dd87534505b06a1c75ab5a2ededff8a51c768a861faa2c5d3cc338c9af8b95458e1dfd4db8dc2bb6fc8d29b3ecd0ca5fa40499041338d33ee311ad33038145f3bc4e6c06aa120522bb145e2583a6b6b", 0xbc}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) (async) ioctl$FS_IOC_GETFSSYSFSPATH(r4, 0x80811501, &(0x7f0000001100)={0x80}) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r12, 0x4002f516, &(0x7f00000011c0)={0x92, 0x7}) 3.318968506s ago: executing program 0 (id=1961): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'dvmrp1\x00', @multicast}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'veth0_to_team\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'dvmrp1\x00', @multicast}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'veth0_to_team\x00', 0x400}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) close(r1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) 3.256052515s ago: executing program 4 (id=1962): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004040000ff0fe7ff0400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x4}}}]}]}], {0x14}}, 0x6c}}, 0x0) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async) listen(r3, 0xfffffffc) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x7, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800e7ffffffffff329903d98338914cffff9dab860018e2d6f13bd4796f918697a15bd74e544deef91dc80a5f8acb87424027fd1d0fdd748f7e6d20498e28f8ad2f3a72410b14549d17534aa58188661a5f37bb4851fd4a049cff90785edccd6a8e94ab357e93bc3bfbf2d45c23a8bd4bd9a2e1a62c9377f78932537d"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) write$cgroup_subtree(r6, 0x0, 0xfe33) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000000090101000a080003400000000e0800034000000006"], 0x24}, 0x1, 0x0, 0x0, 0x24004800}, 0x24048012) (async) pipe(&(0x7f0000000380)) (async) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x4}, 0x38) (async) clock_gettime(0x9, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140ffffffff0c0001800800014000000000050014001f00080005000500020000000500010006"], 0x6c}}, 0x0) 3.082896127s ago: executing program 4 (id=1963): connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00a8bc", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x2}]}}}}}}}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000006a00000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r4, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x44011}, 0x40) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000018c0)={'gre0\x00', &(0x7f0000001880)=@ethtool_cmd={0x43}}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) 1.338650211s ago: executing program 0 (id=1964): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r5}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd8}}, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r6, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r6, 0x8943, &(0x7f0000000000)) 1.336299136s ago: executing program 4 (id=1965): socket$l2tp6(0xa, 0x2, 0x73) (async) r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f00000003c0)="cd016eb4dde02fc7569b40e2a37f4fa73a43e862fcb80dc5b9cf74f8e999ff3c3b8ebbab95ad31e256cc7993e2838b4d16fd2e97068710757fe0f2291e3344ba10895d47a3e45d33caa79ae93304f1be6c0407ac46a05eb18fbdd1a7079a803ffce124137e6e9ffeb71b51888113893f1520e71bc76f2b5ab85cd689fd14effa044e2f585382d9ebbafab042d5a7c41b24d20032b02eb7372c09b1c8ce129c8707d26136e39bb5458c2322cc06344ec9992e", 0xb2, 0x20000040, &(0x7f0000000480)={0xa, 0x0, 0x401, @dev={0xfe, 0x80, '\x00', 0x43}, 0x6, 0x4}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0xe8, 0xffffffff, 0xffffffff, 0xe8, 0x288, 0xc8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) (async) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) syz_emit_ethernet(0x52, &(0x7f00000007c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x1c, 0x2c, 0x0, @remote, @local, {[@routing={0x0, 0x0, 0x0, 0xe}], {{0x8000, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) recvmmsg(r2, &(0x7f0000001440), 0x0, 0x10020, 0x0) (async) recvmmsg(r2, &(0x7f0000001440), 0x0, 0x10020, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r3, &(0x7f00000001c0)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x100, 0x1}, 0xe) (async) connect$bt_l2cap(r3, &(0x7f00000001c0)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x100, 0x1}, 0xe) getpeername(r3, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000002", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x88, 0x1}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000f00)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000005c0)="75e613512be654a19770bc090cc469914959de011f5a7bf4f91a4c398b4906b7db4037e4412e4822daec56626ea24a441f01c1e2de8a15af04a961b13fd9c2b85dc73224958588ade21603e50a6e446f10147b495a59bb8b9fe92e367c33c9a1f64f33eb750dfa75675fd23a3ac3ce6948aa843872bf16d2f4de10b9114a2177b52cf4ca0665e01359f0335dc1988bfe8f38740fb84ccbcc57c5958d29af3dc3884b7a275d3fce2702e651fb5c8636e21024e9ddcc8049b6dd504ba4409d36c30810a41baa70b8f807558c305aa937357b0daa79d9830c7745ce663172f92b2697e2", 0xe2}, {&(0x7f00000006c0)="006c471e00a5c7cf9cb0b86c113afa9eb388dfcf39b7cfea77bce5cf37e875509d4a49f7295e37d6cb4b12b2da57671322967a1d80305544e9471146fa52840d5df2299ef92c721d9a55084e9fde026638810eb5553d169c9862faed0d183e93df40c3ab485e77940ad7e104b02bf3711abc6f2e6fda689028c62c1079854c932d1a3b4b0a1f2a1c3123ed7c8aa796bb3e3a49ebed699ce941ae41149b", 0x9d}], 0x2}], 0x1, 0x0) 1.247110926s ago: executing program 4 (id=1966): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc5, &(0x7f0000000640)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) (async) r0 = accept4$rose(0xffffffffffffffff, &(0x7f0000000000)=@short={0xb, @dev, @null}, &(0x7f0000000080)=0x1c, 0x80000) recvmsg(r0, &(0x7f0000000600)={&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/215, 0xd7}, {&(0x7f0000000240)=""/186, 0xba}, {&(0x7f0000000300)=""/134, 0x86}, {&(0x7f00000003c0)=""/255, 0xff}], 0x4, &(0x7f0000000500)=""/230, 0xe6}, 0x12020) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="05030200157e0000140012800c0001006d616376746170000400028008000500", @ANYRES32=r3, @ANYBLOB="080004004440"], 0x44}, 0x1, 0x0, 0x0, 0x8840}, 0x48094) (async, rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)=@deltclass={0x90, 0x29, 0x10, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x9, 0x10}, {0x0, 0x8}, {0xd, 0x8}}, [@TCA_RATE={0x6, 0x5, {0xf0, 0x4}}, @TCA_RATE={0x6, 0x5, {0x5, 0x81}}, @TCA_RATE={0x6, 0x5, {0x2, 0x5}}, @tclass_kind_options=@c_cake={0x9}, @tclass_kind_options=@c_hfsc={{0x9}, {0x24, 0x2, [@TCA_HFSC_USC={0x10, 0x3, {0x7ff, 0x9, 0x3}}, @TCA_HFSC_FSC={0x10, 0x2, {0x8, 0x0, 0x2}}]}}, @tclass_kind_options=@c_cbs={0x8}, @tclass_kind_options=@c_sfq={0x8}, @TCA_RATE={0x6, 0x5, {0x66, 0x8}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40400c1}, 0x20008041) (rerun: 32) 0s ago: executing program 0 (id=1967): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x23, &(0x7f0000000500)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x78) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000080)={0x2c, r4, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x5e3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x20004000) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000040000000160a01010000000000000000010000000900010073797a30000000000900020073797a300000000014000380080002400000000008000140000000072c000000180a05000000000000000000010000000900010073797a30000000000c0005"], 0xc8}}, 0x0) (async) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd0900320003003000000060000000400c2f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001120022eb"], 0xfdef) clock_gettime(0x0, &(0x7f0000000580)) (async) r7 = socket$l2tp(0x2, 0x2, 0x73) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000740)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000700)={&(0x7f0000000280)=@getnetconf={0x14, 0x52, 0x1, 0x70bd2b, 0x25dfdbff, {}, ["", ""]}, 0x14}}, 0x4000000) (async) bind$l2tp(r7, &(0x7f0000000000), 0x10) (async) bind$l2tp(r7, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) clock_gettime(0x0, &(0x7f0000000640)) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000680)=""/79, 0x4f}, {&(0x7f00000002c0)=""/225, 0xe1}], 0x2}, 0x8}, {{&(0x7f00000003c0)=@nfc, 0x80, &(0x7f0000000480)=[{&(0x7f0000000440)=""/55, 0x37}], 0x1, &(0x7f00000004c0)=""/63, 0x3f}, 0x3}], 0x2, 0x40000000, &(0x7f0000000600)={0x0, 0x3938700}) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_timeval(r10, 0x1, 0x49, 0x0, &(0x7f00000001c0)) (async) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)={0x90, r9, 0x1, 0x170bd2b, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x8, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, 0x723a}}, {0x20, 0x2, @in6={0xa, 0x0, 0x5, @private1, 0xffffffff}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'ib', 0x3a, 'batadv_slave_0\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}]}, 0x90}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.97' (ED25519) to the list of known hosts. [ 82.687658][ T5835] cgroup: Unknown subsys name 'net' [ 82.882255][ T5835] cgroup: Unknown subsys name 'cpuset' [ 82.891799][ T5835] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.577886][ T5835] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.468209][ T5860] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.468209][ T5857] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.483815][ T5854] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.492077][ T5854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.500620][ T5857] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.508334][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.508471][ T5861] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.517311][ T5857] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.524281][ T5861] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.530392][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.537416][ T5861] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.545594][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.553611][ T5861] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.557632][ T5857] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.571895][ T5854] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.573362][ T5861] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.581960][ T5857] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.588032][ T5861] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.595984][ T5857] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.601115][ T5861] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.616242][ T5857] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.630040][ T5861] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.638227][ T5861] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.642124][ T5857] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.673478][ T5860] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.418232][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 88.430981][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 88.532355][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 88.654663][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 88.733074][ T5856] chnl_net:caif_netlink_parms(): no params data found [ 88.752370][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.761156][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.769166][ T5846] bridge_slave_0: entered allmulticast mode [ 88.776562][ T5846] bridge_slave_0: entered promiscuous mode [ 88.807263][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.815249][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.822673][ T5862] bridge_slave_0: entered allmulticast mode [ 88.830490][ T5862] bridge_slave_0: entered promiscuous mode [ 88.856877][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.864222][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.871846][ T5846] bridge_slave_1: entered allmulticast mode [ 88.880477][ T5846] bridge_slave_1: entered promiscuous mode [ 88.905014][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.912274][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.919831][ T5862] bridge_slave_1: entered allmulticast mode [ 88.927102][ T5862] bridge_slave_1: entered promiscuous mode [ 89.022208][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.029845][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.037053][ T5845] bridge_slave_0: entered allmulticast mode [ 89.044555][ T5845] bridge_slave_0: entered promiscuous mode [ 89.091552][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.099048][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.106233][ T5845] bridge_slave_1: entered allmulticast mode [ 89.114142][ T5845] bridge_slave_1: entered promiscuous mode [ 89.138917][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.156189][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.189443][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.203651][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.258638][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.305662][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.346346][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.356672][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.364226][ T5850] bridge_slave_0: entered allmulticast mode [ 89.373071][ T5850] bridge_slave_0: entered promiscuous mode [ 89.424306][ T5845] team0: Port device team_slave_0 added [ 89.434172][ T5846] team0: Port device team_slave_0 added [ 89.440856][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.449643][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.456881][ T5850] bridge_slave_1: entered allmulticast mode [ 89.464611][ T5850] bridge_slave_1: entered promiscuous mode [ 89.487578][ T5862] team0: Port device team_slave_0 added [ 89.497454][ T5862] team0: Port device team_slave_1 added [ 89.503912][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.511435][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.518871][ T5856] bridge_slave_0: entered allmulticast mode [ 89.526184][ T5856] bridge_slave_0: entered promiscuous mode [ 89.535754][ T5845] team0: Port device team_slave_1 added [ 89.560306][ T5846] team0: Port device team_slave_1 added [ 89.594234][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.601833][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.610017][ T51] Bluetooth: hci2: command tx timeout [ 89.618858][ T5856] bridge_slave_1: entered allmulticast mode [ 89.626297][ T5856] bridge_slave_1: entered promiscuous mode [ 89.663677][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.670858][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.697479][ T51] Bluetooth: hci4: command tx timeout [ 89.697964][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.703616][ T51] Bluetooth: hci3: command tx timeout [ 89.719317][ T51] Bluetooth: hci0: command tx timeout [ 89.742955][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.768010][ T5860] Bluetooth: hci1: command tx timeout [ 89.783208][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.790727][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.817476][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.853574][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.863559][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.871135][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.897178][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.912003][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.927036][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.954256][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.961339][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.987327][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.014310][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.021418][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.048359][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.086495][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.093660][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.120017][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.162184][ T5850] team0: Port device team_slave_0 added [ 90.188656][ T5845] hsr_slave_0: entered promiscuous mode [ 90.195196][ T5845] hsr_slave_1: entered promiscuous mode [ 90.233126][ T5850] team0: Port device team_slave_1 added [ 90.243100][ T5856] team0: Port device team_slave_0 added [ 90.252445][ T5856] team0: Port device team_slave_1 added [ 90.382676][ T5846] hsr_slave_0: entered promiscuous mode [ 90.390169][ T5846] hsr_slave_1: entered promiscuous mode [ 90.396356][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.404202][ T5846] Cannot create hsr debugfs directory [ 90.427594][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.435349][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.462651][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.493095][ T5862] hsr_slave_0: entered promiscuous mode [ 90.500326][ T5862] hsr_slave_1: entered promiscuous mode [ 90.506542][ T5862] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.514277][ T5862] Cannot create hsr debugfs directory [ 90.550772][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.558384][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.584808][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.596668][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.604207][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.630826][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.695966][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.703019][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.729256][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.011666][ T5850] hsr_slave_0: entered promiscuous mode [ 91.018616][ T5850] hsr_slave_1: entered promiscuous mode [ 91.024760][ T5850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.032457][ T5850] Cannot create hsr debugfs directory [ 91.058416][ T5856] hsr_slave_0: entered promiscuous mode [ 91.065039][ T5856] hsr_slave_1: entered promiscuous mode [ 91.071720][ T5856] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.079647][ T5856] Cannot create hsr debugfs directory [ 91.336336][ T5845] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.351470][ T5845] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.409797][ T5845] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.444389][ T5845] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.560159][ T5846] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.571849][ T5846] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.587178][ T5846] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.623187][ T5846] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.688492][ T5860] Bluetooth: hci2: command tx timeout [ 91.708457][ T5862] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.719093][ T5862] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.732871][ T5862] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.768745][ T5860] Bluetooth: hci0: command tx timeout [ 91.768850][ T51] Bluetooth: hci3: command tx timeout [ 91.774225][ T5857] Bluetooth: hci4: command tx timeout [ 91.790207][ T5862] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.848863][ T5857] Bluetooth: hci1: command tx timeout [ 91.851575][ T9] cfg80211: failed to load regulatory.db [ 91.946852][ T5850] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.975707][ T5850] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.009571][ T5850] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.050773][ T5850] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.092676][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.104718][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.167686][ T5856] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.183804][ T5856] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.195438][ T5856] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.211472][ T5856] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.245788][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.262417][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.284908][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.292257][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.316409][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.323578][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.359107][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.366329][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.385407][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.392585][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.484776][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.594001][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.631457][ T3017] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.638685][ T3017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.692279][ T3017] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.699515][ T3017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.765338][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.886434][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.922468][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.006380][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.029234][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.036393][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.047541][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.054761][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.092632][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.099888][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.122775][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.130001][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.242694][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.304921][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.501589][ T5845] veth0_vlan: entered promiscuous mode [ 93.521511][ T5846] veth0_vlan: entered promiscuous mode [ 93.587337][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.620242][ T5845] veth1_vlan: entered promiscuous mode [ 93.655426][ T5846] veth1_vlan: entered promiscuous mode [ 93.746305][ T5845] veth0_macvtap: entered promiscuous mode [ 93.769425][ T5857] Bluetooth: hci2: command tx timeout [ 93.803810][ T5845] veth1_macvtap: entered promiscuous mode [ 93.849209][ T5860] Bluetooth: hci4: command tx timeout [ 93.854745][ T5860] Bluetooth: hci0: command tx timeout [ 93.860491][ T5857] Bluetooth: hci3: command tx timeout [ 93.873022][ T5862] veth0_vlan: entered promiscuous mode [ 93.912875][ T5862] veth1_vlan: entered promiscuous mode [ 93.929699][ T5857] Bluetooth: hci1: command tx timeout [ 93.935189][ T5846] veth0_macvtap: entered promiscuous mode [ 93.963563][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.976712][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.995489][ T5846] veth1_macvtap: entered promiscuous mode [ 94.033468][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.043604][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.086706][ T5845] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.096270][ T5845] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.105543][ T5845] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.115401][ T5845] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.202878][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.262751][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.287112][ T5862] veth0_macvtap: entered promiscuous mode [ 94.297183][ T5850] veth0_vlan: entered promiscuous mode [ 94.308375][ T5862] veth1_macvtap: entered promiscuous mode [ 94.324617][ T5846] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.336129][ T5846] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.345520][ T5846] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.355480][ T5846] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.386758][ T5850] veth1_vlan: entered promiscuous mode [ 94.486162][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.497258][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.511855][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.574539][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.618831][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.628720][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.641625][ T5862] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.652622][ T5862] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.663951][ T5862] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.672814][ T5862] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.685413][ T3512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.694680][ T3512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.717941][ T5850] veth0_macvtap: entered promiscuous mode [ 94.757265][ T5850] veth1_macvtap: entered promiscuous mode [ 94.782307][ T5856] veth0_vlan: entered promiscuous mode [ 94.819235][ T5845] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.841267][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.854102][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.869905][ T5856] veth1_vlan: entered promiscuous mode [ 94.971909][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.013530][ T5972] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.031886][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.076794][ T5850] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.090942][ T5850] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.102459][ T5850] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.115398][ T5850] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.148250][ T5972] netlink: 'syz.1.2': attribute type 3 has an invalid length. [ 95.155897][ T5972] netlink: 'syz.1.2': attribute type 3 has an invalid length. [ 95.163902][ T5972] netlink: 'syz.1.2': attribute type 3 has an invalid length. [ 95.171945][ T5972] netlink: 'syz.1.2': attribute type 3 has an invalid length. [ 95.182961][ T5972] netlink: 'syz.1.2': attribute type 3 has an invalid length. [ 95.191389][ T5972] netlink: 'syz.1.2': attribute type 3 has an invalid length. [ 95.199411][ T5972] netlink: 'syz.1.2': attribute type 3 has an invalid length. [ 95.207026][ T5972] netlink: 'syz.1.2': attribute type 3 has an invalid length. [ 95.215849][ T5972] netlink: 'syz.1.2': attribute type 3 has an invalid length. [ 95.223539][ T5972] netlink: 'syz.1.2': attribute type 3 has an invalid length. [ 95.244538][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.260912][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.272917][ T5856] veth0_macvtap: entered promiscuous mode [ 95.305502][ T5856] veth1_macvtap: entered promiscuous mode [ 95.404703][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.418828][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.474288][ T5978] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6'. [ 95.497548][ T5978] netlink: 1172 bytes leftover after parsing attributes in process `syz.1.6'. [ 95.504709][ T3512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.516986][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.524795][ T3512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.561945][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.614088][ T5856] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.637865][ T5856] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.646656][ T5856] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.677049][ T5856] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.708786][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.744854][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.746064][ T5983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7'. [ 95.791728][ T5981] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 95.794759][ T5983] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7'. [ 95.852257][ T5857] Bluetooth: hci2: command tx timeout [ 95.928957][ T5857] Bluetooth: hci3: command tx timeout [ 95.935029][ T5857] Bluetooth: hci4: command tx timeout [ 95.940561][ T5860] Bluetooth: hci0: command tx timeout [ 96.018183][ T5857] Bluetooth: hci1: command tx timeout [ 96.083869][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.135966][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.253323][ T5990] team0: Device ipvlan1 failed to register rx_handler [ 96.323155][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.351400][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.630800][ T6005] netlink: 204 bytes leftover after parsing attributes in process `syz.0.12'. [ 96.885276][ T6013] trusted_key: syz.4.5 sent an empty control message without MSG_MORE. [ 97.166454][ T6025] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17'. [ 97.194730][ T6026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18'. [ 97.497886][ T6032] syz.0.22 uses obsolete (PF_INET,SOCK_PACKET) [ 97.613396][ T6036] veth0: entered promiscuous mode [ 97.674497][ T6043] ip6t_srh: unknown srh match flags 536B [ 97.816956][ T6037] veth0: left promiscuous mode [ 98.057946][ T6054] netlink: 165 bytes leftover after parsing attributes in process `syz.3.31'. [ 98.406486][ T6071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.34'. [ 98.491315][ T6071] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 98.748493][ T6084] delete_channel: no stack [ 98.771388][ T6086] Zero length message leads to an empty skb [ 98.800128][ T6089] delete_channel: no stack [ 98.939311][ T6092] netlink: 44 bytes leftover after parsing attributes in process `syz.0.42'. [ 99.010185][ T6098] Bluetooth: MGMT ver 1.23 [ 99.185669][ T6104] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 99.193399][ T6104] IPv6: NLM_F_CREATE should be set when creating new route [ 99.200762][ T6104] IPv6: NLM_F_CREATE should be set when creating new route [ 100.477922][ T6159] __nla_validate_parse: 8 callbacks suppressed [ 100.478019][ T6159] netlink: 92 bytes leftover after parsing attributes in process `syz.1.59'. [ 100.507865][ T5857] Bluetooth: hci4: command tx timeout [ 100.860359][ T6171] validate_nla: 49 callbacks suppressed [ 100.860381][ T6171] netlink: 'syz.2.62': attribute type 1 has an invalid length. [ 100.878592][ T6171] netlink: 224 bytes leftover after parsing attributes in process `syz.2.62'. [ 100.894881][ T6171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.62'. [ 101.098430][ T6175] netlink: 'syz.2.64': attribute type 11 has an invalid length. [ 101.159036][ T6179] netlink: 'syz.1.66': attribute type 4 has an invalid length. [ 101.185571][ T6179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.66'. [ 101.197104][ T6179] netlink: 44 bytes leftover after parsing attributes in process `syz.1.66'. [ 101.403276][ T6188] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 101.555320][ T6190] netlink: 32 bytes leftover after parsing attributes in process `syz.0.68'. [ 101.594140][ T6193] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 101.748501][ T6203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.72'. [ 101.952351][ T6215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.76'. [ 101.985177][ T6215] chnl_net:caif_netlink_parms(): no params data found [ 102.057224][ T6217] netlink: 44 bytes leftover after parsing attributes in process `syz.3.77'. [ 102.070334][ T6217] netlink: 43 bytes leftover after parsing attributes in process `syz.3.77'. [ 102.093729][ T6217] netlink: 'syz.3.77': attribute type 5 has an invalid length. [ 102.431414][ T6235] Driver unsupported XDP return value 0 on prog (id 27) dev N/A, expect packet loss! [ 102.472576][ T6237] netlink: 'syz.4.84': attribute type 5 has an invalid length. [ 102.565583][ T6245] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.843950][ T6258] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 102.903519][ T6254] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 103.852019][ T6301] netlink: 'syz.0.101': attribute type 15 has an invalid length. [ 104.050397][ T6313] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 104.094006][ T6312] netlink: 'syz.2.104': attribute type 1 has an invalid length. [ 104.714282][ T6346] warning: `syz.1.112' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 105.050267][ T6360] netlink: 'syz.3.119': attribute type 7 has an invalid length. [ 105.097917][ T6360] netlink: 'syz.3.119': attribute type 8 has an invalid length. [ 105.327285][ T6371] openvswitch: netlink: Actions may not be safe on all matching packets [ 105.763065][ T6390] netlink: 'syz.1.127': attribute type 4 has an invalid length. [ 105.919640][ T6390] validate_nla: 1 callbacks suppressed [ 105.919660][ T6390] netlink: 'syz.1.127': attribute type 4 has an invalid length. [ 105.995367][ T6400] netlink: 'syz.2.129': attribute type 4 has an invalid length. [ 106.113916][ T6400] netlink: 'syz.2.129': attribute type 4 has an invalid length. [ 106.169649][ T6400] __nla_validate_parse: 47 callbacks suppressed [ 106.169669][ T6400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.129'. [ 106.213211][ T6400] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 106.248683][ T6400] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 107.865593][ T6489] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20001 [ 108.126548][ T6496] netlink: 'syz.2.151': attribute type 4 has an invalid length. [ 108.176310][ T6498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.152'. [ 108.194418][ T6503] netlink: 'syz.2.151': attribute type 4 has an invalid length. [ 108.535995][ T6506] netlink: 16 bytes leftover after parsing attributes in process `syz.4.154'. [ 108.784052][ T6511] netlink: 16 bytes leftover after parsing attributes in process `syz.0.155'. [ 109.143628][ T6519] netlink: 'syz.2.158': attribute type 2 has an invalid length. [ 109.182215][ T6519] netlink: 'syz.2.158': attribute type 2 has an invalid length. [ 109.384185][ T6526] tipc: Started in network mode [ 109.410660][ T6526] tipc: Node identity 9245679306cb, cluster identity 4711 [ 109.443562][ T6526] tipc: Enabled bearer , priority 0 [ 109.489395][ T6532] netlink: 'syz.2.162': attribute type 1 has an invalid length. [ 109.509762][ T6532] netlink: 224 bytes leftover after parsing attributes in process `syz.2.162'. [ 109.525498][ T6526] syzkaller0: entered promiscuous mode [ 109.532697][ T6526] syzkaller0: entered allmulticast mode [ 109.583581][ T6526] tipc: Resetting bearer [ 109.640948][ T6525] tipc: Resetting bearer [ 109.754019][ T6525] tipc: Disabling bearer [ 109.801953][ T6545] netlink: 108 bytes leftover after parsing attributes in process `syz.3.167'. [ 109.845701][ T6545] netlink: 108 bytes leftover after parsing attributes in process `syz.3.167'. [ 109.899473][ T6545] netlink: 108 bytes leftover after parsing attributes in process `syz.3.167'. [ 110.043949][ T6554] sctp: [Deprecated]: syz.2.170 (pid 6554) Use of struct sctp_assoc_value in delayed_ack socket option. [ 110.043949][ T6554] Use struct sctp_sack_info instead [ 110.121681][ T6554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.170'. [ 110.139996][ T6559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.172'. [ 110.150468][ T6558] Bluetooth: MGMT ver 1.23 [ 110.152903][ T6559] netlink: 'syz.1.172': attribute type 30 has an invalid length. [ 110.179490][ T6559] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.188979][ T6559] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.198177][ T6559] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.206921][ T6559] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.230933][ T6559] netlink: 'syz.1.172': attribute type 30 has an invalid length. [ 111.073748][ T6598] xt_l2tp: invalid flags combination: c [ 111.191991][ T6600] ieee802154 phy0 wpan0: encryption failed: -22 [ 111.391466][ T6610] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 111.828829][ T6619] bond2: entered promiscuous mode [ 111.835105][ T6619] bond2: entered allmulticast mode [ 111.860260][ T6653] __nla_validate_parse: 4 callbacks suppressed [ 111.860281][ T6653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.194'. [ 111.865985][ T6619] 8021q: adding VLAN 0 to HW filter on device bond2 [ 112.330990][ T6664] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 112.387205][ T6664] netlink: 20 bytes leftover after parsing attributes in process `syz.1.200'. [ 112.476461][ T6670] netlink: 48 bytes leftover after parsing attributes in process `syz.1.200'. [ 112.940885][ T6703] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 112.989676][ T6699] netlink: 8 bytes leftover after parsing attributes in process `syz.0.209'. [ 113.589388][ T6728] syzkaller0: entered promiscuous mode [ 113.610508][ T6728] syzkaller0: entered allmulticast mode [ 113.711409][ T6730] netlink: 24 bytes leftover after parsing attributes in process `syz.1.220'. [ 114.006024][ T6743] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 114.306744][ T6757] netlink: 24 bytes leftover after parsing attributes in process `syz.3.230'. [ 114.348225][ T6759] netlink: 'syz.1.231': attribute type 1 has an invalid length. [ 114.368788][ T6759] netlink: 224 bytes leftover after parsing attributes in process `syz.1.231'. [ 114.388947][ T6759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.231'. [ 114.482354][ T6766] netlink: 188 bytes leftover after parsing attributes in process `syz.3.233'. [ 114.957520][ T6789] netlink: 'syz.4.242': attribute type 10 has an invalid length. [ 115.009210][ T6791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.240'. [ 115.029441][ T6789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.038260][ T6791] openvswitch: netlink: nsh attribute has 13 unknown bytes. [ 115.057887][ T6791] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.091865][ T6789] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 115.123784][ T6789] syz.4.242 (6789) used greatest stack depth: 19992 bytes left [ 115.185969][ T6524] IPVS: starting estimator thread 0... [ 115.288068][ T6804] IPVS: using max 23 ests per chain, 55200 per kthread [ 115.440993][ T6816] syzkaller0: entered promiscuous mode [ 115.455084][ T6816] syzkaller0: entered allmulticast mode [ 132.811974][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 160.762126][ T6839] netlink: 'syz.1.249': attribute type 10 has an invalid length. [ 160.771051][ T6841] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 160.781412][ T6839] netlink: 40 bytes leftover after parsing attributes in process `syz.1.249'. [ 160.850622][ T6839] team0: Port device geneve0 added [ 161.193372][ T6860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.253'. [ 161.445564][ T6869] xt_limit: Overflow, try lower: 2147483649/128 [ 161.607121][ T6882] netlink: 'syz.0.262': attribute type 1 has an invalid length. [ 161.640364][ T6882] netlink: 184 bytes leftover after parsing attributes in process `syz.0.262'. [ 161.667300][ T6885] netlink: 'syz.0.262': attribute type 1 has an invalid length. [ 161.682211][ T6885] netlink: 184 bytes leftover after parsing attributes in process `syz.0.262'. [ 161.758780][ T6887] netlink: 8 bytes leftover after parsing attributes in process `syz.1.263'. [ 161.776261][ T6890] ieee802154 phy0 wpan0: encryption failed: -22 [ 161.783250][ T6887] netlink: 24 bytes leftover after parsing attributes in process `syz.1.263'. [ 162.189782][ T6907] netlink: 100 bytes leftover after parsing attributes in process `syz.1.267'. [ 162.298105][ T6905] netlink: 'syz.1.267': attribute type 3 has an invalid length. [ 162.375914][ T6920] netlink: 'syz.3.270': attribute type 1 has an invalid length. [ 162.413418][ T6920] netlink: 228 bytes leftover after parsing attributes in process `syz.3.270'. [ 162.548189][ T6926] netlink: 'syz.1.272': attribute type 27 has an invalid length. [ 162.761352][ T6933] netlink: 36 bytes leftover after parsing attributes in process `syz.1.273'. [ 162.779798][ T6933] netlink: 16 bytes leftover after parsing attributes in process `syz.1.273'. [ 163.417839][ T6963] netlink: 'syz.4.279': attribute type 12 has an invalid length. [ 164.901289][ T7021] openvswitch: netlink: VXLAN extension message has 12 unknown bytes. [ 165.253703][ T7034] openvswitch: netlink: Actions may not be safe on all matching packets [ 165.661739][ T7055] netlink: 'syz.4.309': attribute type 1 has an invalid length. [ 165.665121][ T7060] netlink: zone id is out of range [ 165.723072][ T7060] netlink: del zone limit has 4 unknown bytes [ 165.723707][ T7059] netlink: zone id is out of range [ 165.754136][ T7059] netlink: del zone limit has 4 unknown bytes [ 165.811460][ T7061] gretap1: entered promiscuous mode [ 165.952045][ T7066] __nla_validate_parse: 8 callbacks suppressed [ 165.952067][ T7066] netlink: 84 bytes leftover after parsing attributes in process `syz.1.312'. [ 166.004846][ T7066] netlink: 'syz.1.312': attribute type 1 has an invalid length. [ 166.180581][ T7066] bond2: entered promiscuous mode [ 166.199072][ T7066] 8021q: adding VLAN 0 to HW filter on device bond2 [ 166.230621][ T7082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.315'. [ 166.271112][ T7083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.312'. [ 166.369922][ T7086] geneve2: entered promiscuous mode [ 166.418825][ T7086] geneve2: entered allmulticast mode [ 166.469961][ T7095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.318'. [ 166.480299][ T7095] netlink: 68 bytes leftover after parsing attributes in process `syz.4.318'. [ 166.480689][ T7077] netlink: 40 bytes leftover after parsing attributes in process `syz.0.315'. [ 166.495569][ T7095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.318'. [ 166.510084][ T7095] netlink: 68 bytes leftover after parsing attributes in process `syz.4.318'. [ 166.541203][ T7096] xfrm1: entered allmulticast mode [ 166.799672][ T7107] netlink: 14 bytes leftover after parsing attributes in process `syz.4.321'. [ 166.813832][ T7109] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.322'. [ 167.008042][ T7118] delete_channel: no stack [ 167.073172][ T7107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.186191][ T7107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.207327][ T7107] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 167.256110][ T7107] bond0 (unregistering): Released all slaves [ 167.604142][ T7151] netlink: 'syz.0.329': attribute type 1 has an invalid length. [ 168.604873][ T7199] netlink: 'syz.3.342': attribute type 1 has an invalid length. [ 169.404059][ T7233] ieee802154 phy0 wpan0: encryption failed: -22 [ 169.466934][ T7238] netlink: 'syz.4.357': attribute type 1 has an invalid length. [ 169.577194][ T7238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.692016][ T7238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.702952][ T7194] infiniband syz0: set down [ 169.731838][ T7194] infiniband syz0: added ipvlan1 [ 169.753593][ T7238] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 169.766540][ T7194] syz0: rxe_create_cq: returned err = -12 [ 169.783703][ T7194] infiniband syz0: Couldn't create ib_mad CQ [ 169.795413][ T7238] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 169.803234][ T7194] infiniband syz0: Couldn't open port 1 [ 169.925357][ T7194] RDS/IB: syz0: added [ 169.954734][ T7194] smc: adding ib device syz0 with port count 1 [ 169.976016][ T7194] smc: ib device syz0 port 1 has pnetid [ 170.022567][ T7244] veth3: entered promiscuous mode [ 170.050848][ T7244] bond0: (slave veth3): Enslaving as an active interface with a down link [ 170.113063][ T7245] vlan2: entered allmulticast mode [ 170.141275][ T7245] bond0: entered allmulticast mode [ 171.390709][ T7280] tipc: Enabling of bearer rejected, media not registered [ 171.406033][ T7279] __nla_validate_parse: 13 callbacks suppressed [ 171.406056][ T7279] netlink: 28 bytes leftover after parsing attributes in process `syz.0.371'. [ 172.384023][ T7298] netlink: 'syz.4.377': attribute type 2 has an invalid length. [ 172.937618][ T7295] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 173.305323][ T7320] netlink: 16 bytes leftover after parsing attributes in process `syz.1.385'. [ 173.333058][ T7313] 8021q: adding VLAN 0 to HW filter on device bond1 [ 173.604436][ T7326] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.677962][ T7329] x_tables: unsorted underflow at hook 2 [ 173.716365][ T7329] netlink: 'syz.1.388': attribute type 1 has an invalid length. [ 174.178597][ T5857] Bluetooth: hci0: command 0x0401 tx timeout [ 174.624117][ T7340] netlink: 4 bytes leftover after parsing attributes in process `syz.4.390'. [ 174.838794][ T7343] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 175.034744][ T7352] netlink: 'syz.3.392': attribute type 29 has an invalid length. [ 175.066147][ T7352] netlink: 'syz.3.392': attribute type 29 has an invalid length. [ 175.394427][ T7366] nft_compat: unsupported protocol 1 [ 175.881153][ T7384] netlink: 288 bytes leftover after parsing attributes in process `syz.0.402'. [ 176.402320][ T7397] syzkaller0: entered promiscuous mode [ 176.432009][ T7230] Set syz1 is full, maxelem 65536 reached [ 176.439710][ T7397] syzkaller0: entered allmulticast mode [ 176.439972][ T7403] Cannot find add_set index 3 as target [ 176.481202][ T7405] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 178.294714][ T7429] batman_adv: batadv0: Adding interface: dummy0 [ 178.312252][ T7429] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.385343][ T7429] batman_adv: batadv0: Interface activated: dummy0 [ 178.426495][ T7430] batadv0: mtu less than device minimum [ 178.450730][ T7430] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 178.463688][ T7430] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 178.476254][ T7430] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 178.488432][ T7430] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 178.500463][ T7430] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 178.512572][ T7430] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 179.352458][ T7507] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.432'. [ 179.542793][ T7517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.433'. [ 179.733842][ T7521] net_ratelimit: 13 callbacks suppressed [ 179.733864][ T7521] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 179.758206][ T7523] netlink: 'syz.1.436': attribute type 1 has an invalid length. [ 179.791101][ T7524] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 179.798474][ T7523] netlink: 'syz.1.436': attribute type 11 has an invalid length. [ 180.015670][ T7530] syz.4.438 (7530) used greatest stack depth: 19576 bytes left [ 180.190533][ T7541] netlink: 68 bytes leftover after parsing attributes in process `syz.2.443'. [ 180.221844][ T7543] netlink: 165 bytes leftover after parsing attributes in process `syz.3.444'. [ 180.326595][ T7546] netlink: 40 bytes leftover after parsing attributes in process `syz.0.446'. [ 180.358835][ T7541] 8021q: adding VLAN 0 to HW filter on device bond1 [ 180.397147][ T7550] netlink: 4 bytes leftover after parsing attributes in process `syz.4.445'. [ 180.417332][ T7541] bond0: (slave bond1): Enslaving as an active interface with an up link [ 181.276484][ T7587] can: request_module (can-proto-0) failed. [ 181.303055][ T7590] netlink: 14 bytes leftover after parsing attributes in process `syz.0.459'. [ 181.431333][ T7602] netlink: 32 bytes leftover after parsing attributes in process `syz.2.460'. [ 181.568584][ T7600] netlink: 20 bytes leftover after parsing attributes in process `syz.1.462'. [ 181.583090][ T7590] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.599870][ T7590] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.617263][ T7590] bond0 (unregistering): Released all slaves [ 181.939399][ T7616] netlink: 4 bytes leftover after parsing attributes in process `syz.3.465'. [ 182.148084][ T7624] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.161740][ T7624] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.220877][ T7624] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.257843][ T7624] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.551252][ T7634] ip6gretap0: entered promiscuous mode [ 182.994775][ T7656] tipc: Trying to set illegal importance in message [ 183.415552][ T7669] tipc: Started in network mode [ 183.443005][ T7669] tipc: Node identity 5af28cc2a4d6, cluster identity 4711 [ 183.490683][ T7669] tipc: Enabled bearer , priority 0 [ 183.525539][ T7665] tipc: Resetting bearer [ 183.614482][ T7678] bridge0: port 3(batadv1) entered blocking state [ 183.626050][ T7678] bridge0: port 3(batadv1) entered disabled state [ 183.668099][ T7678] batadv1: entered allmulticast mode [ 183.675804][ T7678] batadv1: entered promiscuous mode [ 183.780006][ T7674] syzkaller0: entered promiscuous mode [ 183.792517][ T7674] syzkaller0: entered allmulticast mode [ 184.044015][ T7657] tipc: Resetting bearer [ 184.074440][ T7657] tipc: Disabling bearer [ 184.113618][ T7484] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 184.123251][ T7484] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 184.148048][ T7693] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.156638][ T7693] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.439193][ T7716] netlink: 'syz.2.489': attribute type 1 has an invalid length. [ 184.515878][ T7722] __nla_validate_parse: 6 callbacks suppressed [ 184.515902][ T7722] netlink: 12 bytes leftover after parsing attributes in process `syz.2.489'. [ 184.608444][ T7722] netlink: 28 bytes leftover after parsing attributes in process `syz.2.489'. [ 184.770847][ T7734] netlink: 52 bytes leftover after parsing attributes in process `syz.3.494'. [ 184.857869][ T7733] netlink: 52 bytes leftover after parsing attributes in process `syz.3.494'. [ 184.968318][ T5857] Bluetooth: hci2: command tx timeout [ 185.499330][ T7764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.502'. [ 185.522462][ T7764] netlink: 244 bytes leftover after parsing attributes in process `syz.1.502'. [ 185.623619][ T7768] netlink: 4 bytes leftover after parsing attributes in process `syz.3.503'. [ 185.652671][ T7768] netlink: 12 bytes leftover after parsing attributes in process `syz.3.503'. [ 186.029090][ T7785] IPv6: NLM_F_CREATE should be specified when creating new route [ 186.151310][ T7793] Bluetooth: MGMT ver 1.23 [ 186.435554][ T7810] netlink: 'syz.3.515': attribute type 23 has an invalid length. [ 186.451171][ T7811] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 186.689167][ T7821] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.518'. [ 186.707528][ T7821] geneve3: entered promiscuous mode [ 186.714096][ T7821] geneve3: entered allmulticast mode [ 187.098896][ T7838] netlink: 12 bytes leftover after parsing attributes in process `syz.0.523'. [ 187.282571][ T7854] netlink: 'syz.2.526': attribute type 4 has an invalid length. [ 187.547537][ T7864] netlink: 'syz.3.530': attribute type 3 has an invalid length. [ 187.567824][ T978] IPVS: starting estimator thread 0... [ 187.657831][ T7866] IPVS: using max 25 ests per chain, 60000 per kthread [ 187.982109][ T7881] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 188.247872][ T5860] Bluetooth: hci2: command 0x0401 tx timeout [ 188.247945][ T5857] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 188.517571][ T7909] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.527836][ T7909] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.536686][ T7909] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.545928][ T7909] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.627522][ T7912] Cannot find del_set index 4 as target [ 188.992468][ T7929] syzkaller0: create flow: hash 3312260098 index 1 [ 189.398295][ T7919] syzkaller0: delete flow: hash 3312260098 index 1 [ 189.423003][ T7948] netlink: 'syz.1.554': attribute type 1 has an invalid length. [ 189.504010][ T7910] infiniband syz2: set active [ 189.521743][ T7910] infiniband syz2: added bond_slave_0 [ 189.536168][ T7910] syz2: rxe_create_cq: returned err = -12 [ 189.555940][ T7910] infiniband syz2: Couldn't create ib_mad CQ [ 189.568056][ T7910] infiniband syz2: Couldn't open port 1 [ 189.634012][ T7910] RDS/IB: syz2: added [ 189.643489][ T7910] smc: adding ib device syz2 with port count 1 [ 189.653063][ T7910] smc: ib device syz2 port 1 has pnetid [ 191.065965][ T7943] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 191.077142][ T7943] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 191.106230][ T7957] tap0: tun_chr_ioctl cmd 1074025678 [ 191.139303][ T7957] tap0: group set to 0 [ 191.144834][ T7959] __nla_validate_parse: 8 callbacks suppressed [ 191.144852][ T7959] netlink: 16 bytes leftover after parsing attributes in process `syz.0.557'. [ 191.314513][ T7963] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.545969][ T7968] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 191.588685][ T7969] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 191.647533][ T7969] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 191.668571][ T7969] gretap1: entered promiscuous mode [ 191.675668][ T7969] gretap1: entered allmulticast mode [ 192.205572][ T8010] sctp: [Deprecated]: syz.4.570 (pid 8010) Use of int in max_burst socket option deprecated. [ 192.205572][ T8010] Use struct sctp_assoc_value instead [ 192.885510][ T8034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.576'. [ 192.918264][ T8034] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 193.454026][ T8061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.582'. [ 194.252509][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.403671][ T8082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.588'. [ 194.499783][ T8091] netlink: 4 bytes leftover after parsing attributes in process `syz.4.590'. [ 194.530282][ T8094] netlink: 4 bytes leftover after parsing attributes in process `syz.4.590'. [ 194.534758][ T8092] netlink: 256 bytes leftover after parsing attributes in process `syz.3.591'. [ 194.603271][ T8092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.591'. [ 194.661262][ T8100] netlink: 4 bytes leftover after parsing attributes in process `syz.3.591'. [ 194.682268][ T8091] bridge_slave_1 (unregistering): left allmulticast mode [ 194.722761][ T8091] bridge_slave_1 (unregistering): left promiscuous mode [ 194.730276][ T8103] netlink: 12 bytes leftover after parsing attributes in process `syz.3.591'. [ 194.771570][ T8091] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.889147][ T8107] xt_socket: unknown flags 0x3c [ 195.143121][ T8111] netlink: 'syz.1.595': attribute type 10 has an invalid length. [ 195.154246][ T8114] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.164195][ T8114] batadv0: mtu less than device minimum [ 195.178997][ T8114] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 195.191286][ T8114] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 195.203314][ T8114] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 195.215319][ T8114] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 195.227288][ T8114] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 195.239301][ T8114] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 195.251276][ T8114] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 195.415705][ T8114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.508201][ T8111] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 195.533462][ T8116] bridge_slave_0: left allmulticast mode [ 195.543810][ T8116] bridge_slave_0: left promiscuous mode [ 195.551765][ T8116] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.575716][ T8116] bridge_slave_1: left allmulticast mode [ 195.585674][ T8116] bridge_slave_1: left promiscuous mode [ 195.594591][ T8116] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.674829][ T8116] bond0: (slave bond_slave_0): Releasing backup interface [ 195.710868][ T8116] bond0: (slave bond_slave_1): Releasing backup interface [ 195.765560][ T8116] team0: Port device team_slave_0 removed [ 195.790861][ T8116] team0: Port device team_slave_1 removed [ 195.817364][ T8116] team0: Port device geneve0 removed [ 195.836728][ T8116] bond0: (slave wlan1): Releasing backup interface [ 196.396108][ T8155] net_ratelimit: 12 callbacks suppressed [ 196.396129][ T8155] openvswitch: netlink: Unknown key attributes 2 [ 196.821151][ T8166] __nla_validate_parse: 6 callbacks suppressed [ 196.821172][ T8166] netlink: 36 bytes leftover after parsing attributes in process `syz.0.611'. [ 196.867303][ T8169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.612'. [ 196.926718][ T8169] netlink: 12 bytes leftover after parsing attributes in process `syz.4.612'. [ 197.084185][ T8183] netlink: 4 bytes leftover after parsing attributes in process `syz.4.612'. [ 197.562600][ T8204] netlink: 24 bytes leftover after parsing attributes in process `syz.4.621'. [ 198.144852][ T8206] gtp0: entered promiscuous mode [ 198.159551][ T8206] gtp0: entered allmulticast mode [ 198.304352][ T8225] netlink: 20 bytes leftover after parsing attributes in process `syz.3.624'. [ 198.377261][ T8227] xt_NFQUEUE: number of total queues is 0 [ 198.408881][ T8232] netlink: 28 bytes leftover after parsing attributes in process `syz.4.626'. [ 198.845572][ T8250] IPVS: set_ctl: invalid protocol: 1 172.20.20.170:20000 [ 198.987867][ T8258] netlink: 12 bytes leftover after parsing attributes in process `syz.1.637'. [ 199.100908][ T8258] 8021q: adding VLAN 0 to HW filter on device bond3 [ 199.121891][ T8264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.638'. [ 199.123735][ T8261] sock: sock_set_timeout: `syz.0.639' (pid 8261) tries to set negative timeout [ 199.135485][ T8264] netlink: 20 bytes leftover after parsing attributes in process `syz.2.638'. [ 199.155615][ T8262] vlan2: entered allmulticast mode [ 199.166548][ T8262] bond3: entered allmulticast mode [ 199.413961][ T8272] gtp1: entered promiscuous mode [ 199.421510][ T8272] gtp1: entered allmulticast mode [ 199.463163][ T8276] netlink: 'syz.2.640': attribute type 1 has an invalid length. [ 199.493788][ T8276] netlink: 'syz.2.640': attribute type 1 has an invalid length. [ 200.073694][ T8298] netlink: 'syz.3.649': attribute type 1 has an invalid length. [ 200.201558][ T8303] netlink: 'syz.2.650': attribute type 1 has an invalid length. [ 200.243483][ T8300] 8021q: adding VLAN 0 to HW filter on device bond4 [ 200.253260][ T8300] bond3: (slave bond4): making interface the new active one [ 200.271405][ T8300] bond3: (slave bond4): Enslaving as an active interface with an up link [ 200.295804][ T8305] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 200.306399][ T6524] IPVS: starting estimator thread 0... [ 200.405312][ T8303] 8021q: adding VLAN 0 to HW filter on device bond3 [ 200.418405][ T8309] IPVS: using max 30 ests per chain, 72000 per kthread [ 200.431456][ T8298] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 200.514457][ T8314] bond3: (slave gretap1): making interface the new active one [ 200.542924][ T8314] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 200.693041][ T8314] syz.2.650 (8314) used greatest stack depth: 17464 bytes left [ 201.031995][ T8341] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.040761][ T8341] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.079950][ T8345] netlink: 'syz.2.661': attribute type 4 has an invalid length. [ 201.322242][ T8354] openvswitch: netlink: Flow actions attr not present in new flow. [ 201.652768][ T8368] netlink: 'syz.0.667': attribute type 2 has an invalid length. [ 201.684714][ T8376] veth0: entered promiscuous mode [ 201.760131][ T8375] veth0: left promiscuous mode [ 201.869486][ T8389] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 201.895054][ T8390] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 202.208087][ T8408] __nla_validate_parse: 14 callbacks suppressed [ 202.208119][ T8408] netlink: 36 bytes leftover after parsing attributes in process `syz.3.674'. [ 202.256438][ T8411] netlink: 'syz.4.677': attribute type 39 has an invalid length. [ 202.497172][ T8416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.679'. [ 202.644758][ T8419] netlink: 52 bytes leftover after parsing attributes in process `syz.0.680'. [ 202.811342][ T8424] netlink: 240 bytes leftover after parsing attributes in process `syz.4.682'. [ 202.827939][ T8426] netlink: 'syz.3.683': attribute type 3 has an invalid length. [ 202.975262][ T8430] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 202.994548][ T8429] netlink: 32 bytes leftover after parsing attributes in process `syz.0.684'. [ 203.169050][ T8433] netlink: 24 bytes leftover after parsing attributes in process `syz.3.686'. [ 203.714236][ T8454] netlink: 'syz.3.690': attribute type 1 has an invalid length. [ 203.782324][ T8448] syz_tun: entered promiscuous mode [ 203.800261][ T8448] batadv_slave_0: entered promiscuous mode [ 203.809051][ T8448] hsr1: entered allmulticast mode [ 203.816273][ T8448] syz_tun: entered allmulticast mode [ 203.838816][ T8448] batadv_slave_0: entered allmulticast mode [ 203.845855][ T8459] xt_hashlimit: invalid rate [ 203.904050][ T8458] netlink: 'syz.1.692': attribute type 1 has an invalid length. [ 204.140766][ T8464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.461433][ T8492] netlink: 92 bytes leftover after parsing attributes in process `syz.2.700'. [ 204.905133][ T8511] netlink: 'syz.2.705': attribute type 2 has an invalid length. [ 205.026805][ T8520] netlink: 'syz.1.708': attribute type 1 has an invalid length. [ 205.365327][ T8537] sctp: [Deprecated]: syz.4.711 (pid 8537) Use of struct sctp_assoc_value in delayed_ack socket option. [ 205.365327][ T8537] Use struct sctp_sack_info instead [ 205.424596][ T8537] sctp: [Deprecated]: syz.4.711 (pid 8537) Use of struct sctp_assoc_value in delayed_ack socket option. [ 205.424596][ T8537] Use struct sctp_sack_info instead [ 205.889722][ T8560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.717'. [ 205.907278][ T8560] netlink: 4 bytes leftover after parsing attributes in process `syz.4.717'. [ 205.923748][ T8561] netlink: 12 bytes leftover after parsing attributes in process `syz.2.716'. [ 205.933001][ T8560] netlink: 'syz.4.717': attribute type 14 has an invalid length. [ 205.941561][ T8560] netlink: 'syz.4.717': attribute type 13 has an invalid length. [ 208.653734][ T8636] netlink: 'syz.3.725': attribute type 10 has an invalid length. [ 208.698337][ T8636] netlink: 40 bytes leftover after parsing attributes in process `syz.3.725'. [ 208.748425][ T8636] dummy0: entered promiscuous mode [ 208.774725][ T8636] bridge0: port 4(dummy0) entered blocking state [ 208.806691][ T8636] bridge0: port 4(dummy0) entered disabled state [ 208.862824][ T8644] netlink: 'syz.2.729': attribute type 10 has an invalid length. [ 208.890283][ T8636] dummy0: entered allmulticast mode [ 208.904084][ T8636] bridge0: port 4(dummy0) entered blocking state [ 208.910683][ T8636] bridge0: port 4(dummy0) entered forwarding state [ 208.968694][ T8644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.020291][ T8644] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 209.120935][ T8654] netlink: 'syz.3.732': attribute type 39 has an invalid length. [ 209.311708][ T8668] netlink: 24 bytes leftover after parsing attributes in process `syz.1.734'. [ 209.489384][ T8674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.738'. [ 209.516265][ T8672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.738'. [ 209.544954][ T8676] netlink: 44 bytes leftover after parsing attributes in process `syz.2.738'. [ 209.576851][ T8675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.737'. [ 209.693469][ T8674] bridge0: entered promiscuous mode [ 209.723503][ T8674] macsec1: entered promiscuous mode [ 209.975785][ T8693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.744'. [ 210.000982][ T8690] xt_hashlimit: max too large, truncated to 1048576 [ 210.266893][ T8706] netlink: 'syz.2.747': attribute type 1 has an invalid length. [ 210.461171][ T8713] netlink: 'syz.0.749': attribute type 2 has an invalid length. [ 210.469619][ T8713] netlink: 'syz.0.749': attribute type 2 has an invalid length. [ 210.555918][ T8721] netlink: 16 bytes leftover after parsing attributes in process `syz.3.752'. [ 210.597056][ T8723] netlink: 12 bytes leftover after parsing attributes in process `syz.4.753'. [ 210.634331][ T8725] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 210.670924][ T8725] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 210.783894][ T8733] netlink: 'syz.0.755': attribute type 5 has an invalid length. [ 210.838473][ T8737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.756'. [ 210.854636][ T8737] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.971797][ T8737] bridge_slave_1 (unregistering): left allmulticast mode [ 210.984004][ T8737] bridge_slave_1 (unregistering): left promiscuous mode [ 210.995195][ T8737] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.012507][ T8746] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 211.028134][ T8746] openvswitch: netlink: Duplicate key (type 0). [ 211.084980][ T8748] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 211.690421][ T5866] Bluetooth: hci0: command 0x0401 tx timeout [ 211.691129][ T5859] Bluetooth: hci1: command 0x0406 tx timeout [ 211.697365][ T5866] Bluetooth: hci2: command 0x0401 tx timeout [ 211.705392][ T5168] Bluetooth: hci3: command 0x0406 tx timeout [ 212.242993][ T8804] team0: Cannot enslave team device to itself [ 212.268847][ T8803] team0: Cannot enslave team device to itself [ 212.400722][ T8802] netlink: 'syz.0.777': attribute type 1 has an invalid length. [ 212.434368][ T8810] netlink: 'syz.2.781': attribute type 1 has an invalid length. [ 212.504870][ T8814] ieee802154 phy0 wpan0: encryption failed: -22 [ 212.550206][ T8814] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 213.353395][ T8864] netlink: 'syz.3.795': attribute type 10 has an invalid length. [ 213.480116][ T8867] netlink: 'syz.1.796': attribute type 21 has an invalid length. [ 213.688569][ T8883] mac80211_hwsim hwsim3 syzkaller0: Caught tx_queue_len zero misconfig [ 213.727404][ T8887] __nla_validate_parse: 16 callbacks suppressed [ 213.727426][ T8887] netlink: 12 bytes leftover after parsing attributes in process `syz.4.803'. [ 213.729428][ T8886] netlink: 12 bytes leftover after parsing attributes in process `syz.4.803'. [ 213.767845][ T5861] Bluetooth: hci2: command 0x0401 tx timeout [ 213.861116][ T8891] netlink: 72 bytes leftover after parsing attributes in process `syz.2.804'. [ 213.874346][ T8886] netlink: 12 bytes leftover after parsing attributes in process `syz.4.803'. [ 213.979454][ T8897] openvswitch: netlink: IP tunnel dst address not specified [ 214.494203][ T8915] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 214.726350][ T8925] netlink: 'syz.4.811': attribute type 33 has an invalid length. [ 214.770365][ T8925] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.811'. [ 214.862106][ T8929] dvmrp1: entered allmulticast mode [ 215.010703][ T8935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.815'. [ 215.025903][ T8939] netlink: 128 bytes leftover after parsing attributes in process `syz.2.814'. [ 215.610711][ T8959] netlink: 16 bytes leftover after parsing attributes in process `syz.2.824'. [ 215.721116][ T8959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.824'. [ 215.967239][ T8973] netlink: 4 bytes leftover after parsing attributes in process `syz.0.829'. [ 216.019331][ T8973] xt_ecn: cannot match TCP bits for non-tcp packets [ 216.107345][ T8979] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.116380][ T8979] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.125320][ T8979] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.134221][ T8979] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.266482][ T8985] ieee802154 phy0 wpan0: encryption failed: -22 [ 216.338207][ T7483] nci: nci_ntf_packet: unknown ntf opcode 0x206 [ 216.688855][ T9009] x_tables: unsorted entry at hook 1 [ 217.235419][ T9026] netlink: 'syz.1.840': attribute type 21 has an invalid length. [ 217.245426][ T9027] netlink: 'syz.0.841': attribute type 64 has an invalid length. [ 218.231941][ T9079] net veth1_virt_wifi .: renamed from virt_wifi0 [ 218.405672][ T9088] dvmrp1: entered allmulticast mode [ 219.127145][ T9131] team0: Device vti0 is of different type [ 219.254966][ T9136] netlink: 'syz.2.877': attribute type 2 has an invalid length. [ 219.420760][ T9145] netlink: 'syz.2.881': attribute type 4 has an invalid length. [ 219.552982][ T9156] netlink: 'syz.4.880': attribute type 1 has an invalid length. [ 219.562193][ T9156] netlink: 'syz.4.880': attribute type 3 has an invalid length. [ 219.597851][ T9156] __nla_validate_parse: 15 callbacks suppressed [ 219.597873][ T9156] netlink: 224 bytes leftover after parsing attributes in process `syz.4.880'. [ 219.659522][ T9159] netlink: 108 bytes leftover after parsing attributes in process `syz.3.884'. [ 219.692682][ T9159] netlink: 48 bytes leftover after parsing attributes in process `syz.3.884'. [ 220.039669][ T9182] netlink: 24 bytes leftover after parsing attributes in process `syz.0.889'. [ 220.390028][ T9200] netlink: 240 bytes leftover after parsing attributes in process `syz.3.895'. [ 220.416553][ T9203] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 220.744867][ T9222] xt_CT: No such helper "syz0" [ 220.853411][ T9229] netlink: 46 bytes leftover after parsing attributes in process `syz.4.902'. [ 220.938735][ C0] vcan0: j1939_tp_rxtimer: 0xffff888024ca9000: rx timeout, send abort [ 221.293204][ T9251] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.448143][ C0] vcan0: j1939_tp_rxtimer: 0xffff888024ca9000: abort rx timeout. Force session deactivation [ 221.561820][ T9262] netlink: 112 bytes leftover after parsing attributes in process `syz.0.913'. [ 221.577158][ T9262] netlink: 24 bytes leftover after parsing attributes in process `syz.0.913'. [ 221.596229][ T9262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.913'. [ 221.616254][ T9262] netlink: 12 bytes leftover after parsing attributes in process `syz.0.913'. [ 221.654035][ T9267] netlink: 'syz.3.916': attribute type 11 has an invalid length. [ 222.054973][ T9292] pim6reg527: entered allmulticast mode [ 222.481007][ T9313] netlink: 'syz.2.929': attribute type 1 has an invalid length. [ 222.511595][ T9313] bond4: entered allmulticast mode [ 223.457442][ T9355] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 223.486683][ T9353] xt_CT: No such helper "snmp" [ 223.507217][ T9362] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 223.862054][ T9369] netlink: 'syz.2.947': attribute type 1 has an invalid length. [ 224.040824][ T9369] bond5: entered promiscuous mode [ 224.046363][ T9369] 8021q: adding VLAN 0 to HW filter on device bond5 [ 224.141204][ T9383] 8021q: adding VLAN 0 to HW filter on device bond5 [ 224.148549][ T9383] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address [ 224.159380][ T9383] bond5: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 224.186201][ T9383] bond5: (slave wireguard0): making interface the new active one [ 224.200839][ T9383] wireguard0: entered promiscuous mode [ 224.236337][ T9383] bond5: (slave wireguard0): Enslaving as an active interface with an up link [ 224.774043][ T9436] netlink: 'syz.2.961': attribute type 1 has an invalid length. [ 224.819210][ T9436] __nla_validate_parse: 8 callbacks suppressed [ 224.819231][ T9436] netlink: 224 bytes leftover after parsing attributes in process `syz.2.961'. [ 225.210061][ T9449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.965'. [ 225.220480][ T9451] netlink: 16 bytes leftover after parsing attributes in process `syz.2.964'. [ 225.291071][ T9457] netlink: 'syz.0.967': attribute type 32 has an invalid length. [ 225.349362][ T9457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.967'. [ 225.388328][ T9457] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 225.842167][ T9495] netlink: 40 bytes leftover after parsing attributes in process `syz.1.977'. [ 225.855173][ T9496] netlink: 136 bytes leftover after parsing attributes in process `syz.2.978'. [ 225.961720][ T9501] netlink: 24 bytes leftover after parsing attributes in process `syz.0.979'. [ 226.141547][ T9509] netlink: 12 bytes leftover after parsing attributes in process `syz.0.982'. [ 226.147578][ T9510] netlink: 12 bytes leftover after parsing attributes in process `syz.3.983'. [ 226.184144][ T9510] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.195039][ T9510] batadv_slave_0: entered promiscuous mode [ 226.675534][ T9532] netlink: 'syz.0.990': attribute type 4 has an invalid length. [ 227.114149][ T9567] netlink: 40 bytes leftover after parsing attributes in process `syz.2.998'. [ 227.342544][ T9582] netlink: 'syz.4.1003': attribute type 11 has an invalid length. [ 227.350603][ T9582] netlink: 'syz.4.1003': attribute type 11 has an invalid length. [ 227.383525][ T9586] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.515350][ T9599] netlink: 'syz.3.1006': attribute type 4 has an invalid length. [ 228.025252][ T9618] syz_tun (unregistering): left promiscuous mode [ 228.634457][ T9648] tipc: Enabled bearer , priority 0 [ 228.647154][ T9648] syzkaller0: entered promiscuous mode [ 228.655304][ T9648] syzkaller0: entered allmulticast mode [ 228.686662][ T9651] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 228.705843][ T9648] tipc: Resetting bearer [ 228.751376][ T9646] tipc: Resetting bearer [ 228.784273][ T9646] tipc: Disabling bearer [ 228.832460][ T9661] tc_dump_action: action bad kind [ 228.977567][ T9663] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.077120][ T9663] bridge_slave_0 (unregistering): left allmulticast mode [ 229.090269][ T9663] bridge_slave_0 (unregistering): left promiscuous mode [ 229.097510][ T9663] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.128445][ T9668] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 229.137579][ T9668] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 229.146527][ T9668] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 229.155689][ T9668] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 229.165591][ T9668] geneve2: entered promiscuous mode [ 229.173827][ T9668] geneve2: entered allmulticast mode [ 229.727899][ T9698] bond5: entered promiscuous mode [ 229.733152][ T9698] bond5: entered allmulticast mode [ 229.750613][ T9698] 8021q: adding VLAN 0 to HW filter on device bond5 [ 229.893521][ T9711] __nla_validate_parse: 21 callbacks suppressed [ 229.893542][ T9711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1043'. [ 229.913845][ T9711] netem: unknown loss type 8 [ 229.918883][ T9711] netem: change failed [ 230.322246][ T9726] netlink: 'syz.2.1047': attribute type 1 has an invalid length. [ 230.401936][ T9731] dvmrp0: entered allmulticast mode [ 230.416743][ T9733] dvmrp0: left allmulticast mode [ 230.448348][ T9733] dvmrp1: left allmulticast mode [ 230.467380][ T9736] netlink: 'syz.3.1050': attribute type 23 has an invalid length. [ 230.507574][ T9738] netlink: 'syz.3.1050': attribute type 23 has an invalid length. [ 230.595993][ T9741] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 230.626502][ T9741] netlink: 'syz.2.1052': attribute type 1 has an invalid length. [ 230.688361][ T9741] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1052'. [ 230.748093][ T9741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1052'. [ 230.975273][ T9759] vlan1: entered allmulticast mode [ 230.994528][ T9759] veth0_vlan: entered allmulticast mode [ 231.278910][ T9775] No such timeout policy "syz0" [ 231.373957][ T9777] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1060'. [ 231.539569][ T9790] netlink: 'syz.2.1064': attribute type 1 has an invalid length. [ 231.808613][ T9803] ip6t_srh: unknown srh match flags 536B [ 231.838347][ T9803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1069'. [ 231.937598][ T9809] rose0: entered allmulticast mode [ 231.943889][ T9809] rose0: left allmulticast mode [ 231.954481][ T9807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1071'. [ 232.097790][ T9812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1074'. [ 232.893966][ T9855] netlink: 'syz.0.1085': attribute type 10 has an invalid length. [ 232.910948][ T9855] team0: Device ipvlan1 failed to register rx_handler [ 233.624784][ T9886] netlink: 'syz.2.1092': attribute type 10 has an invalid length. [ 233.708307][ T9886] batman_adv: batadv0: Adding interface: team0 [ 233.758728][ T9886] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 233.802560][ T9886] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 234.266072][ T9917] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1102'. [ 234.268234][ T9914] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1101'. [ 234.431962][ T9927] bridge_slave_1: left allmulticast mode [ 234.450734][ T9927] bridge_slave_1: left promiscuous mode [ 234.468808][ T9927] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.488844][ T9931] netlink: 'syz.0.1106': attribute type 10 has an invalid length. [ 234.500656][ T9927] bridge_slave_0: left allmulticast mode [ 234.506804][ T9927] bridge_slave_0: left promiscuous mode [ 234.514626][ T9927] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.545153][ T9933] netlink: 'syz.3.1108': attribute type 1 has an invalid length. [ 234.553474][ T9933] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1108'. [ 234.612085][ T9938] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 234.833395][ T9927] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 235.087495][ T9956] xt_CT: No such helper "snmp" [ 235.090293][ T9967] __nla_validate_parse: 3 callbacks suppressed [ 235.090316][ T9967] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1114'. [ 235.574685][ T9983] bond3: entered promiscuous mode [ 235.619765][ T9983] bond3: entered allmulticast mode [ 235.634734][ T9993] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 235.651637][ T9983] 8021q: adding VLAN 0 to HW filter on device bond3 [ 235.753397][T10002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1117'. [ 235.884866][T10008] netlink: 'syz.2.1124': attribute type 33 has an invalid length. [ 235.892897][T10008] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1124'. [ 235.946152][ T9983] bond3 (unregistering): Released all slaves [ 236.497598][T10035] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1132'. [ 236.521514][T10032] netlink: 'syz.2.1131': attribute type 1 has an invalid length. [ 236.748075][T10043] tipc: Started in network mode [ 236.753215][T10043] tipc: Node identity 9ab1bdd4d176, cluster identity 4711 [ 236.792694][T10043] tipc: Enabled bearer , priority 0 [ 236.799895][T10040] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1134'. [ 237.360846][ T7462] tipc: Resetting bearer [ 237.375877][T10042] tipc: Resetting bearer [ 237.608258][ T5861] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 237.619615][ T5861] Bluetooth: hci0: command 0x0401 tx timeout [ 237.801860][ T6524] tipc: Node number set to 1271381460 [ 239.003573][T10042] tipc: Disabling bearer [ 239.071382][T10104] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 239.315417][T10111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1152'. [ 239.360128][T10115] netlink: 'syz.3.1151': attribute type 1 has an invalid length. [ 239.399343][T10115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1151'. [ 239.428461][T10115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1151'. [ 239.746264][T10140] netlink: 'syz.0.1160': attribute type 1 has an invalid length. [ 239.755394][T10140] netlink: 'syz.0.1160': attribute type 2 has an invalid length. [ 239.810103][T10140] netlink: 'syz.0.1160': attribute type 1 has an invalid length. [ 239.840054][T10147] x_tables: duplicate underflow at hook 1 [ 239.855715][T10140] netlink: 'syz.0.1160': attribute type 2 has an invalid length. [ 239.957238][T10152] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.1162'. [ 240.065095][T10156] bridge5: entered promiscuous mode [ 240.076748][T10156] bridge5: entered allmulticast mode [ 240.263259][T10166] netlink: 'syz.4.1166': attribute type 10 has an invalid length. [ 240.283879][T10166] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1166'. [ 240.313895][T10166] team0: Port device geneve0 added [ 240.359659][T10172] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1167'. [ 240.492190][T10174] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1168'. [ 240.501557][T10174] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1168'. [ 240.549768][T10175] netlink: 'syz.3.1168': attribute type 1 has an invalid length. [ 240.559085][T10180] netlink: 'syz.3.1168': attribute type 1 has an invalid length. [ 240.655896][T10175] 8021q: adding VLAN 0 to HW filter on device bond6 [ 240.957093][T10198] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1176'. [ 241.192822][T10215] ip6gre1: entered allmulticast mode [ 241.332143][T10221] Cannot find set identified by id 752 to match [ 241.621669][T10240] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1190'. [ 242.120685][T10268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.562251][T10288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1206'. [ 242.583316][T10292] gtp0: entered promiscuous mode [ 242.828088][T10299] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1208'. [ 242.985896][T10309] gretap0: entered promiscuous mode [ 243.004377][T10309] vlan2: entered promiscuous mode [ 243.065233][T10312] nbd: must specify at least one socket [ 243.143965][T10315] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1211'. [ 243.302889][T10328] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1217'. [ 243.327325][T10330] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 243.365342][ T7488] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 243.404118][T10335] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 244.660552][T10386] tipc: Enabling of bearer rejected, failed to enable media [ 244.692735][T10389] netlink: 'syz.1.1235': attribute type 7 has an invalid length. [ 245.061092][T10408] xt_CT: No such helper "snmp" [ 245.097257][T10409] xt_CT: No such helper "snmp" [ 245.310435][T10431] __nla_validate_parse: 19 callbacks suppressed [ 245.310456][T10431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1248'. [ 245.693941][T10447] netlink: 'syz.3.1252': attribute type 10 has an invalid length. [ 245.711444][T10447] netlink: 576 bytes leftover after parsing attributes in process `syz.3.1252'. [ 245.745437][T10450] delete_channel: no stack [ 245.779944][T10453] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1255'. [ 245.824128][T10453] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1255'. [ 245.885090][T10455] netlink: 'syz.2.1253': attribute type 2 has an invalid length. [ 245.933112][T10455] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1253'. [ 245.976408][T10459] netlink: 'syz.2.1253': attribute type 1 has an invalid length. [ 246.021412][T10459] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1253'. [ 246.078202][T10462] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 246.293098][T10470] netlink: 'syz.2.1259': attribute type 2 has an invalid length. [ 246.484836][T10481] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1264'. [ 246.547362][T10486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1265'. [ 247.152436][T10500] netlink: 'syz.4.1268': attribute type 32 has an invalid length. [ 247.184826][T10500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1268'. [ 247.205748][T10500] (unnamed net_device) (uninitialized): option coupled_control: invalid value (149) [ 247.259307][T10507] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1270'. [ 247.384948][T10512] xt_hashlimit: size too large, truncated to 1048576 [ 247.896701][T10534] netlink: 'syz.3.1282': attribute type 1 has an invalid length. [ 248.356522][T10569] xt_l2tp: v2 sid > 0xffff: 262144 [ 248.414804][T10574] x_tables: duplicate underflow at hook 2 [ 248.622263][T10591] netlink: 'syz.0.1298': attribute type 4 has an invalid length. [ 248.671071][T10596] netlink: 'syz.0.1298': attribute type 4 has an invalid length. [ 248.716881][T10594] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 249.093810][T10619] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 250.530285][T10688] __nla_validate_parse: 12 callbacks suppressed [ 250.530306][T10688] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1327'. [ 250.608670][ T6524] hid-generic 0005:0C45:1012.0001: item fetching failed at offset 0/1 [ 250.628436][ T6524] hid-generic 0005:0C45:1012.0001: probe with driver hid-generic failed with error -22 [ 251.226234][T10722] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1336'. [ 251.241668][T10722] netlink: 50 bytes leftover after parsing attributes in process `syz.1.1336'. [ 251.255623][T10722] netlink: 50 bytes leftover after parsing attributes in process `syz.1.1336'. [ 251.284890][T10724] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1335'. [ 252.986351][T10769] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1345'. [ 253.102482][T10771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1345'. [ 253.135283][T10773] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1346'. [ 253.175175][T10773] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1346'. [ 253.226288][T10773] sch_fq: defrate 0 ignored. [ 253.623968][T10791] delete_channel: no stack [ 253.784589][T10797] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1354'. [ 253.862435][T10801] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 254.683290][T10837] netlink: 'syz.4.1367': attribute type 1 has an invalid length. [ 255.415835][T10880] xt_bpf: check failed: parse error [ 255.442010][T10879] netlink: 'syz.2.1380': attribute type 5 has an invalid length. [ 255.464942][T10879] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 255.480328][T10879] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 255.491954][T10879] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 255.505156][T10879] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 255.517553][T10879] geneve2: entered promiscuous mode [ 255.532171][T10879] geneve2: entered allmulticast mode [ 255.693064][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.741394][T10894] x_tables: duplicate entry at hook 2 [ 255.750344][T10896] openvswitch: netlink: IP tunnel dst address not specified [ 255.779957][T10898] netlink: 'syz.4.1385': attribute type 4 has an invalid length. [ 255.888126][T10901] __nla_validate_parse: 4 callbacks suppressed [ 255.888149][T10901] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1384'. [ 256.030607][T10903] 8021q: VLANs not supported on ip_vti0 [ 256.386347][ T7484] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 256.429412][T10921] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1391'. [ 257.066892][T10948] netlink: 'syz.1.1400': attribute type 1 has an invalid length. [ 257.094922][T10951] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1399'. [ 257.256031][T10958] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1402'. [ 257.389583][T10961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1403'. [ 257.419998][T10961] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1403'. [ 257.792859][T10992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1412'. [ 257.810077][T10992] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 257.853067][T10992] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.868835][T10994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1409'. [ 257.930070][T10998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1413'. [ 257.949782][T11005] netlink: 'syz.4.1411': attribute type 11 has an invalid length. [ 258.465759][T11023] team0: Device vti0 is of different type [ 258.492118][T11031] netlink: 'syz.4.1419': attribute type 11 has an invalid length. [ 258.835936][T11047] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 259.200209][T11069] x_tables: duplicate underflow at hook 2 [ 259.257001][T11071] openvswitch: netlink: Actions may not be safe on all matching packets [ 259.343324][T11073] tipc: Enabled bearer , priority 0 [ 259.472629][T11073] tipc: Disabling bearer [ 259.699268][T11098] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1436'. [ 260.135994][T11122] tc_dump_action: action bad kind [ 260.574467][ T5857] Bluetooth: hci4: command 0x0405 tx timeout [ 260.839689][T11151] IPVS: set_ctl: invalid protocol: 43 172.30.0.3:20000 [ 260.928624][T11151] __nla_validate_parse: 3 callbacks suppressed [ 260.928645][T11151] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1450'. [ 260.956760][T11157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1452'. [ 260.996746][T11151] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.033656][T11161] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1453'. [ 261.038157][T11163] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1453'. [ 261.053419][T11151] bridge0: entered allmulticast mode [ 261.835116][T11195] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 262.138064][T11210] ªªªªªª: renamed from lo [ 262.187148][T11210] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 262.410043][T11221] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1469'. [ 263.049350][T11246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1475'. [ 263.111902][T11251] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 263.133551][T11246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1475'. [ 263.235418][T11246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1475'. [ 263.295473][T11246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1475'. [ 263.306731][T11254] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1478'. [ 263.366506][T11262] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.074588][T11282] macvtap1: entered promiscuous mode [ 264.086509][T11282] vlan0: entered promiscuous mode [ 264.092797][T11282] macvtap1: entered allmulticast mode [ 264.099224][T11282] vlan0: entered allmulticast mode [ 264.104399][T11282] veth0_vlan: entered allmulticast mode [ 264.264941][T11298] netlink: 'syz.3.1493': attribute type 10 has an invalid length. [ 264.304436][T11299] netlink: 'syz.3.1493': attribute type 10 has an invalid length. [ 264.325509][T11302] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 264.528098][T11314] veth1_macvtap: left promiscuous mode [ 264.765320][T11326] netlink: 'syz.4.1502': attribute type 12 has an invalid length. [ 264.915115][T11340] netlink: 'syz.4.1502': attribute type 1 has an invalid length. [ 265.489248][T11369] RDS: rds_bind could not find a transport for ::ffff:172.20.20.27, load rds_tcp or rds_rdma? [ 265.612001][T11380] netlink: 'syz.1.1514': attribute type 4 has an invalid length. [ 265.665111][T11386] sctp: [Deprecated]: syz.3.1516 (pid 11386) Use of int in max_burst socket option deprecated. [ 265.665111][T11386] Use struct sctp_assoc_value instead [ 265.682501][T11387] sctp: [Deprecated]: syz.3.1516 (pid 11387) Use of int in max_burst socket option deprecated. [ 265.682501][T11387] Use struct sctp_assoc_value instead [ 266.593920][T11427] __nla_validate_parse: 38 callbacks suppressed [ 266.593946][T11427] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1528'. [ 266.647577][T11427] openvswitch: netlink: Flow key attr not present in new flow. [ 267.147600][T11453] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 267.194436][T11453] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1534'. [ 267.365481][T11469] netdevsim netdevsim3: Direct firmware load for /.€ failed with error -2 [ 267.378580][T11469] netdevsim netdevsim3: Falling back to sysfs fallback for: /.€ [ 267.540603][T11477] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 267.738180][T11485] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1545'. [ 267.847384][T11492] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1549'. [ 267.971279][T11499] netlink: 'syz.2.1552': attribute type 13 has an invalid length. [ 267.985008][T11501] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1551'. [ 268.005150][T11503] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1551'. [ 268.087176][T11507] ip6t_rpfilter: unknown options [ 268.095397][T11506] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1553'. [ 268.098840][T11507] netdevsim netdevsim0: Direct firmware load for ..€ failed with error -2 [ 268.119031][T11507] netdevsim netdevsim0: Falling back to sysfs fallback for: ..€ [ 268.353626][T11518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1557'. [ 268.448408][T11521] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 268.476247][T11521] netlink: 'syz.4.1559': attribute type 4 has an invalid length. [ 268.619363][T11535] netlink: 'syz.4.1561': attribute type 4 has an invalid length. [ 268.891499][T11543] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1565'. [ 268.911928][T11543] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1565'. [ 269.229555][T11553] can: request_module (can-proto-4) failed. [ 269.489814][T11569] netlink: 'syz.1.1570': attribute type 1 has an invalid length. [ 269.503239][T11573] netlink: 'syz.0.1573': attribute type 10 has an invalid length. [ 269.523863][T11573] team0: Device ipvlan1 is VLAN challenged and team device has VLAN set up [ 269.623212][T11582] netlink: 'syz.0.1573': attribute type 1 has an invalid length. [ 269.626684][T11581] netlink: 'syz.2.1574': attribute type 1 has an invalid length. [ 269.942303][T11601] openvswitch: netlink: Flow actions attr not present in new flow. [ 270.232631][T11615] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 270.558877][T11632] pim6reg1: entered promiscuous mode [ 270.570869][T11632] pim6reg1: entered allmulticast mode [ 270.762458][T11642] netlink: 'syz.1.1593': attribute type 18 has an invalid length. [ 270.769608][T11646] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 270.782344][T11647] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 270.810321][T11646] veth0: entered promiscuous mode [ 270.824867][T11643] veth0: left promiscuous mode [ 270.944200][T11654] tipc: Enabling of bearer rejected, failed to enable media [ 271.706562][T11688] __nla_validate_parse: 6 callbacks suppressed [ 271.706584][T11688] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1608'. [ 271.743569][T11691] netlink: 'syz.4.1610': attribute type 1 has an invalid length. [ 271.772508][T11691] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1610'. [ 272.193203][ T7488] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xfa [ 273.129246][T11731] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1622'. [ 273.242060][T11738] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1623'. [ 273.373651][T11748] xt_TCPMSS: Only works on TCP SYN packets [ 273.537252][T11760] netlink: 'syz.4.1630': attribute type 1 has an invalid length. [ 273.592922][T11760] 8021q: adding VLAN 0 to HW filter on device bond6 [ 273.606286][T11760] bond5: (slave bond6): making interface the new active one [ 273.615442][T11760] bond5: (slave bond6): Enslaving as an active interface with an up link [ 273.625793][T11757] xt_bpf: check failed: parse error [ 274.301701][T11776] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1634'. [ 274.330118][T11777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1635'. [ 274.470549][T11779] netlink: 'syz.2.1636': attribute type 24 has an invalid length. [ 274.699835][T11789] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1640'. [ 274.724089][T11793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1642'. [ 274.747196][T11793] netlink: 50 bytes leftover after parsing attributes in process `syz.1.1642'. [ 274.769622][T11793] netlink: 50 bytes leftover after parsing attributes in process `syz.1.1642'. [ 274.895901][T11806] netlink: 'syz.2.1645': attribute type 39 has an invalid length. [ 275.185528][T11822] hsr0 speed is unknown, defaulting to 1000 [ 275.197496][T11822] hsr0 speed is unknown, defaulting to 1000 [ 275.210110][T11824] !€ÿ: renamed from bond0 (while UP) [ 275.258990][T11822] hsr0 speed is unknown, defaulting to 1000 [ 275.289254][T11822] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 275.316768][T11822] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 275.347474][T11829] netlink: 'syz.3.1653': attribute type 10 has an invalid length. [ 275.377157][T11829] team0: Device hsr_slave_0 failed to register rx_handler [ 275.412977][T11822] hsr0 speed is unknown, defaulting to 1000 [ 275.470956][T11822] hsr0 speed is unknown, defaulting to 1000 [ 275.541943][T11835] netlink: 'syz.3.1655': attribute type 4 has an invalid length. [ 275.555105][T11822] hsr0 speed is unknown, defaulting to 1000 [ 275.574161][T11838] netlink: 'syz.3.1655': attribute type 4 has an invalid length. [ 275.584172][T11822] hsr0 speed is unknown, defaulting to 1000 [ 275.612474][T11822] hsr0 speed is unknown, defaulting to 1000 [ 275.693295][T11841] 8021q: VLANs not supported on lo [ 275.722119][T11841] team_slave_0: entered promiscuous mode [ 275.729149][T11841] team_slave_1: entered promiscuous mode [ 275.734921][T11841] geneve0: entered promiscuous mode [ 275.744239][T11841] macsec1: entered allmulticast mode [ 275.750941][T11841] team0: entered allmulticast mode [ 275.756192][T11841] team_slave_0: entered allmulticast mode [ 275.766751][T11841] team_slave_1: entered allmulticast mode [ 275.773504][T11841] geneve0: entered allmulticast mode [ 275.781418][T11841] team0: left allmulticast mode [ 275.786352][T11841] team_slave_0: left allmulticast mode [ 275.817802][T11841] team_slave_1: left allmulticast mode [ 275.823361][T11841] geneve0: left allmulticast mode [ 275.833293][T11841] team_slave_0: left promiscuous mode [ 275.838830][T11841] team_slave_1: left promiscuous mode [ 275.844424][T11841] geneve0: left promiscuous mode [ 276.241913][T11859] openvswitch: netlink: Key type 272 is out of range max 32 [ 276.694988][T11868] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.752807][T11868] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.786581][T11880] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 276.990294][T11868] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.025535][T11868] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.029558][T11894] netlink: 'syz.2.1670': attribute type 1 has an invalid length. [ 277.045860][T11896] netlink: 'syz.1.1671': attribute type 1 has an invalid length. [ 277.067414][T11896] netlink: 'syz.1.1671': attribute type 2 has an invalid length. [ 277.082047][T11894] __nla_validate_parse: 5 callbacks suppressed [ 277.082067][T11894] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1670'. [ 277.156898][T11903] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1671'. [ 277.281113][T11868] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.308091][T11868] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.514527][T11868] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.545044][T11868] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.719207][T11931] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1680'. [ 277.730103][T11932] netlink: 'syz.2.1679': attribute type 2 has an invalid length. [ 277.746994][T11932] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1679'. [ 277.764915][T11868] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.781188][T11868] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.840322][T11868] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.841202][T11934] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1681'. [ 277.854889][T11868] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.922974][T11868] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.954926][T11868] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.982942][T11868] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.991965][T11868] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.167337][T11946] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 278.456980][T11959] netlink: 'syz.2.1688': attribute type 2 has an invalid length. [ 278.630489][T11968] C: renamed from lo (while UP) [ 279.146593][T11989] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 279.169395][T11991] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1699'. [ 279.271659][T11938] hsr0 speed is unknown, defaulting to 1000 [ 279.319627][T11996] syzkaller1: entered promiscuous mode [ 279.325275][T11996] syzkaller1: entered allmulticast mode [ 279.338283][T11998] tipc: Failed to remove unknown binding: 66,1,1/0:3109206219/3109206221 [ 279.365757][T11998] tipc: Failed to remove unknown binding: 66,1,1/0:3109206219/3109206221 [ 279.389370][T11998] tipc: Failed to remove unknown binding: 66,1,1/0:3109206219/3109206221 [ 279.488416][T12001] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1703'. [ 279.566000][T12005] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1704'. [ 279.882698][T12009] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1706'. [ 280.001318][T12011] netlink: 'syz.3.1707': attribute type 11 has an invalid length. [ 280.045443][T12013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1708'. [ 280.059732][T12014] openvswitch: netlink: Flow actions attr not present in new flow. [ 280.704303][ T5925] IPVS: starting estimator thread 0... [ 280.720239][T12038] netlink: 'syz.2.1716': attribute type 33 has an invalid length. [ 280.807952][T12041] IPVS: using max 25 ests per chain, 60000 per kthread [ 281.038551][T12064] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 281.101151][T12070] netlink: 'syz.2.1726': attribute type 32 has an invalid length. [ 281.851014][ T5861] Bluetooth: hci2: command 0x0401 tx timeout [ 281.857477][ T5857] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 282.129840][T12102] __nla_validate_parse: 5 callbacks suppressed [ 282.129861][T12102] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1728'. [ 282.432212][T12110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1733'. [ 282.451937][T12110] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1733'. [ 282.464470][T12113] netlink: 'syz.2.1735': attribute type 1 has an invalid length. [ 282.492717][T12113] netlink: 'syz.2.1735': attribute type 1 has an invalid length. [ 282.566612][T12121] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 282.770462][ T43] IPVS: starting estimator thread 0... [ 282.861719][T12133] IPVS: using max 24 ests per chain, 57600 per kthread [ 283.072989][T12146] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 283.236739][T12158] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1748'. [ 283.293653][T12161] netlink: 'syz.1.1747': attribute type 1 has an invalid length. [ 283.345558][T12161] netlink: 'syz.1.1747': attribute type 3 has an invalid length. [ 283.347326][T12165] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20000 [ 283.370113][T12161] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1747'. [ 283.393518][T12165] netlink: 'syz.4.1750': attribute type 33 has an invalid length. [ 283.405675][T12165] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1750'. [ 283.538017][T12166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1747'. [ 283.603473][T12178] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 283.792466][T12184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1755'. [ 284.182246][T12208] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1763'. [ 284.203639][T12208] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1763'. [ 284.281375][T12213] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 284.295086][T12213] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.384878][T12218] batman_adv: batadv0: Interface deactivated: dummy0 [ 284.398849][T12218] batman_adv: batadv0: Removing interface: dummy0 [ 284.434073][T12218] bridge_slave_0: left allmulticast mode [ 284.442439][T12218] bridge_slave_0: left promiscuous mode [ 284.452164][T12218] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.523555][T12218] team0: Port device team_slave_0 removed [ 284.547051][T12218] team0: Port device team_slave_1 removed [ 284.561120][T12218] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.572023][T12218] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.607879][T12218] team0: Port device geneve0 removed [ 284.623186][T12225] netlink: 'syz.1.1768': attribute type 11 has an invalid length. [ 284.623369][T12218] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check. [ 284.694638][T12224] ieee802154 phy0 wpan0: encryption failed: -22 [ 284.827372][T12235] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 284.964094][T12240] netlink: 'syz.1.1772': attribute type 29 has an invalid length. [ 285.051207][T12240] netlink: 'syz.1.1772': attribute type 29 has an invalid length. [ 285.404735][T12260] netlink: 'syz.4.1779': attribute type 3 has an invalid length. [ 285.736672][T12275] validate_nla: 1 callbacks suppressed [ 285.736694][T12275] netlink: 'syz.3.1784': attribute type 1 has an invalid length. [ 285.750496][T12275] netlink: 'syz.3.1784': attribute type 1 has an invalid length. [ 285.859171][T12279] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 286.419978][T12238] hsr0 speed is unknown, defaulting to 1000 [ 286.446242][T12312] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4032 [ 286.469700][T12307] dummy0: left allmulticast mode [ 286.474962][T12307] bridge0: port 4(dummy0) entered disabled state [ 286.498199][T12307] batadv1: left allmulticast mode [ 286.503370][T12307] batadv1: left promiscuous mode [ 286.516861][T12307] bridge0: port 3(batadv1) entered disabled state [ 286.527311][T12307] bridge_slave_1: left allmulticast mode [ 286.533095][T12307] bridge_slave_1: left promiscuous mode [ 286.545617][T12307] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.650768][T12315] syzkaller1: entered promiscuous mode [ 286.656704][T12315] syzkaller1: entered allmulticast mode [ 286.832147][T12321] netlink: 'syz.3.1797': attribute type 1 has an invalid length. [ 286.842829][T12321] netlink: 'syz.3.1797': attribute type 2 has an invalid length. [ 286.932646][T12318] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.970633][T12318] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.068730][T12326] geneve3: entered promiscuous mode [ 287.080686][T12326] geneve3: entered allmulticast mode [ 287.198281][T12318] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.218281][T12318] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.284230][T12335] __nla_validate_parse: 15 callbacks suppressed [ 287.284253][T12335] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1802'. [ 287.421741][T12318] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.432732][T12318] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.673529][T12318] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.685481][T12318] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.885472][T12318] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.917727][T12318] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.966299][T12318] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.983223][T12318] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.070663][T12356] syzkaller0: create flow: hash 3312260098 index 1 [ 288.133806][T12318] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.159430][T12318] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.178831][ T7480] syzkaller0: tun_net_xmit 76 [ 288.185550][ T7480] syzkaller0: tun_net_xmit 48 [ 288.208479][ T6524] syzkaller0: tun_net_xmit 76 [ 288.242137][T12363] netlink: 'syz.2.1811': attribute type 10 has an invalid length. [ 288.304105][T12318] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.318279][ T5925] syzkaller0: tun_net_xmit 76 [ 288.326017][T12318] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.345719][T12369] netlink: 'syz.2.1811': attribute type 83 has an invalid length. [ 288.349701][T12361] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 288.358304][ T5925] syzkaller0: tun_net_xmit 76 [ 288.389650][T12363] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 288.442978][T12354] syzkaller0: delete flow: hash 3312260098 index 1 [ 288.525855][T12376] netlink: 'syz.0.1814': attribute type 10 has an invalid length. [ 288.538878][T12376] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1814'. [ 290.071658][T12376] team0: Port device geneve0 added [ 290.446863][T12396] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1820'. [ 290.683508][T12412] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1827'. [ 290.844711][T12417] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1830'. [ 290.892748][T12423] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1831'. [ 290.965468][T12423] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1831'. [ 291.136746][T12438] netlink: 'syz.2.1834': attribute type 7 has an invalid length. [ 291.308865][T12442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1836'. [ 291.347584][T12442] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1836'. [ 291.605406][T12452] delete_channel: no stack [ 291.637302][T12457] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.779338][T12479] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1847'. [ 291.857142][T12457] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.950243][T12487] bond7: entered promiscuous mode [ 291.955729][T12487] bond7: entered allmulticast mode [ 291.968444][T12487] 8021q: adding VLAN 0 to HW filter on device bond7 [ 292.133649][T12457] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.277216][T12457] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.365299][T12506] __nla_validate_parse: 3 callbacks suppressed [ 292.365319][T12506] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1853'. [ 292.768581][T12523] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1854'. [ 292.826576][T12457] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.907448][T12457] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.991490][T12457] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.097385][T12457] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.436685][T12547] batman_adv: batadv0: Adding interface: ipvlan2 [ 293.437700][T12553] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1866'. [ 293.456286][T12553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1866'. [ 293.461716][T12547] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.504597][T12547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.534324][T12547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.567537][T12547] batman_adv: batadv0: Interface activated: ipvlan2 [ 293.651411][T12566] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 293.911019][T12575] netlink: 'syz.3.1868': attribute type 4 has an invalid length. [ 293.946061][T12574] netlink: 'syz.3.1868': attribute type 4 has an invalid length. [ 294.021211][T12581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1870'. [ 294.030760][T12517] hsr0 speed is unknown, defaulting to 1000 [ 294.217054][T12588] veth1_macvtap: entered promiscuous mode [ 294.243353][T12588] macsec0: entered promiscuous mode [ 294.257915][T12588] macsec0: entered allmulticast mode [ 294.268500][T12588] veth1_macvtap: entered allmulticast mode [ 294.281588][T12591] ipt_ECN: cannot use operation on non-tcp rule [ 294.380521][T12596] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1874'. [ 294.748539][T12611] netlink: 4148 bytes leftover after parsing attributes in process `syz.4.1879'. [ 294.896702][T12615] netlink: 'syz.3.1881': attribute type 1 has an invalid length. [ 294.906252][T12617] netlink: 'syz.3.1881': attribute type 1 has an invalid length. [ 294.931726][T12617] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 294.978320][T12615] 8021q: adding VLAN 0 to HW filter on device bond9 [ 295.170483][T12630] xt_CT: No such helper "snmp" [ 295.182251][T12630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1884'. [ 295.284152][T12636] team0: Device wireguard0 is up. Set it down before adding it as a team port [ 295.377014][T12644] netlink: 'syz.3.1887': attribute type 1 has an invalid length. [ 295.493008][T12646] set match dimension is over the limit! [ 295.777411][T12660] tipc: Enabled bearer , priority 0 [ 295.824204][T12662] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1893'. [ 295.839460][T12660] syzkaller0: entered promiscuous mode [ 295.863144][T12660] syzkaller0: entered allmulticast mode [ 295.887146][T12660] tipc: Resetting bearer [ 295.909777][T12664] netlink: 'syz.4.1894': attribute type 3 has an invalid length. [ 295.922276][T12664] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1894'. [ 295.959716][T12659] tipc: Resetting bearer [ 296.802367][ T5916] tipc: Node number set to 4263808194 [ 297.711232][T12659] tipc: Disabling bearer [ 297.931381][T12698] __nla_validate_parse: 3 callbacks suppressed [ 297.931403][T12698] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1900'. [ 297.959915][T12698] netlink: 'syz.3.1900': attribute type 7 has an invalid length. [ 297.974004][T12698] netlink: 'syz.3.1900': attribute type 8 has an invalid length. [ 297.983100][T12698] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1900'. [ 298.611716][T12739] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1914'. [ 298.646682][T12739] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1914'. [ 298.680797][T12739] netlink: 'syz.0.1914': attribute type 3 has an invalid length. [ 298.827015][T12748] tipc: Enabled bearer , priority 0 [ 298.852421][T12754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1920'. [ 298.867376][T12754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1920'. [ 298.872962][T12749] syzkaller0: MTU too low for tipc bearer [ 298.917333][T12749] tipc: Disabling bearer [ 298.943297][T12751] tipc: Enabled bearer , priority 0 [ 298.955866][T12751] syzkaller0: entered promiscuous mode [ 298.989032][T12751] syzkaller0: entered allmulticast mode [ 298.994740][T12760] syz.0.1922 uses old SIOCAX25GETINFO [ 299.028153][T12751] tipc: Resetting bearer [ 299.047283][T12750] tipc: Resetting bearer [ 299.154244][T12750] tipc: Disabling bearer [ 299.422794][ T7488] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.453820][ T7488] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.482531][T12774] netlink: 'syz.4.1929': attribute type 10 has an invalid length. [ 299.510397][T12774] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1929'. [ 299.599855][T12774] dummy0: entered promiscuous mode [ 299.605763][T12774] bridge0: port 1(dummy0) entered blocking state [ 299.648040][T12774] bridge0: port 1(dummy0) entered disabled state [ 299.654648][T12774] dummy0: entered allmulticast mode [ 299.748394][ T7488] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.788210][ T7488] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.942236][ T7488] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.972571][ T7488] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.098443][ T7488] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.118927][ T7488] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.299533][T12785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1934'. [ 300.368213][T12785] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 300.368621][T12787] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1934'. [ 300.427843][T12785] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 300.519226][ T5857] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 300.534008][ T5857] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 300.542366][ T5857] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 300.563862][ T5857] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 300.573341][ T5857] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 301.014059][ T5857] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 301.024881][ T5857] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 301.033661][ T5857] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 301.046946][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 301.064062][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 301.073144][ T5860] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 301.083154][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 301.093775][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 301.103796][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 301.114863][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 301.325677][T12811] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1941'. [ 301.396083][ T7488] bond3 (unregistering): (slave gretap1): Releasing backup interface [ 301.446125][ T7488] dvmrp1 (unregistering): left allmulticast mode [ 301.695505][ T7488] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 301.707176][ T7488] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 301.718680][ T7488] bond0 (unregistering): Released all slaves [ 301.735380][ T7488] bond1 (unregistering): Released all slaves [ 301.753381][ T7488] bond2 (unregistering): Released all slaves [ 301.781277][ T7488] bond3 (unregistering): (slave bond4): Releasing backup interface [ 301.791074][ T7488] bond3 (unregistering): Released all slaves [ 301.907058][ T7488] bond4 (unregistering): Released all slaves [ 301.926023][ T7488] bond5 (unregistering): Released all slaves [ 302.058245][ T7488] bond6 (unregistering): Released all slaves [ 302.075080][ T7488] bond7 (unregistering): Released all slaves [ 302.091607][ T7488] bond8 (unregistering): Released all slaves [ 302.218718][ T7488] bond9 (unregistering): Released all slaves [ 302.478521][T12816] pimreg3: entered allmulticast mode [ 302.653459][ T5857] Bluetooth: hci0: command tx timeout [ 302.923567][T12825] netlink: 'syz.0.1946': attribute type 3 has an invalid length. [ 303.129089][ T5857] Bluetooth: hci1: command tx timeout [ 303.208570][ T5857] Bluetooth: hci4: command tx timeout [ 303.249298][T12829] __nla_validate_parse: 3 callbacks suppressed [ 303.249321][T12829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1948'. [ 303.311143][T12829] tipc: Enabling of bearer rejected, failed to enable media [ 303.503493][T12835] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 303.836775][T12848] SET target dimension over the limit! [ 303.847366][T12848] netlink: 'syz.4.1954': attribute type 6 has an invalid length. [ 304.013456][T12855] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1956'. [ 304.075994][T12804] hsr0 speed is unknown, defaulting to 1000 [ 304.123654][T12789] hsr0 speed is unknown, defaulting to 1000 [ 304.728688][ T5857] Bluetooth: hci0: command tx timeout [ 304.769310][T12875] syzkaller0: entered promiscuous mode [ 304.774865][T12875] syzkaller0: entered allmulticast mode [ 304.817444][T12802] hsr0 speed is unknown, defaulting to 1000 [ 305.212511][ T5857] Bluetooth: hci1: command tx timeout [ 305.296786][ T5857] Bluetooth: hci4: command tx timeout [ 306.603244][T12893] x_tables: duplicate entry at hook 2 [ 306.680386][ T7488] hsr_slave_0: left promiscuous mode [ 306.686879][ T7488] hsr_slave_1: left promiscuous mode [ 306.698641][ T7488] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.707031][ T7488] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.714970][ T7488] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.740228][ T7488] vlan0: left allmulticast mode [ 306.745149][ T7488] veth0_vlan: left allmulticast mode [ 306.750659][ T7488] vlan0: left promiscuous mode [ 306.756119][ T7488] veth1_macvtap: left promiscuous mode [ 306.762407][ T7488] veth0_macvtap: left promiscuous mode [ 306.769460][ T7488] veth1_vlan: left promiscuous mode [ 306.775006][ T7488] veth0_vlan: left promiscuous mode [ 306.817820][ T5857] Bluetooth: hci0: command tx timeout [ 307.009408][ T7479] smc: removing ib device syz0 [ 307.290399][ T5857] Bluetooth: hci1: command tx timeout [ 307.334092][ T7488] team0 (unregistering): Port device team_slave_1 removed [ 307.368960][ T5857] Bluetooth: hci4: command tx timeout [ 307.383606][ T7488] team0 (unregistering): Port device team_slave_0 removed [ 307.888338][T12804] chnl_net:caif_netlink_parms(): no params data found [ 307.922388][ T9] ================================================================== [ 307.930535][ T9] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x6e/0x190 [ 307.939373][ T9] Read of size 8 at addr ffff88807996c2e8 by task kworker/0:0/9 [ 307.947118][ T9] [ 307.949484][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted 6.16.0-rc6-syzkaller-00124-g96e056ffba91 #0 PREEMPT(full) [ 307.949506][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 307.949517][ T9] Workqueue: events smc_ib_port_event_work [ 307.949558][ T9] Call Trace: [ 307.949565][ T9] [ 307.949572][ T9] dump_stack_lvl+0x189/0x250 [ 307.949593][ T9] ? rcu_is_watching+0x15/0xb0 [ 307.949610][ T9] ? __kasan_check_byte+0x12/0x40 [ 307.949633][ T9] ? __pfx_dump_stack_lvl+0x10/0x10 [ 307.949650][ T9] ? rcu_is_watching+0x15/0xb0 [ 307.949667][ T9] ? lock_release+0x4b/0x3e0 [ 307.949684][ T9] ? __virt_addr_valid+0x1c8/0x5c0 [ 307.949706][ T9] ? __virt_addr_valid+0x4a5/0x5c0 [ 307.949727][ T9] print_report+0xca/0x230 [ 307.949740][ T9] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 307.949765][ T9] kasan_report+0x118/0x150 [ 307.949788][ T9] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 307.949816][ T9] __ethtool_get_link_ksettings+0x6e/0x190 [ 307.949842][ T9] ib_get_eth_speed+0x15e/0x7b0 [ 307.949858][ T9] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 307.949877][ T9] ? do_raw_spin_unlock+0x122/0x240 [ 307.949908][ T9] rxe_query_port+0x93/0x3b0 [ 307.949931][ T9] ib_query_port+0x170/0x830 [ 307.949949][ T9] smc_ib_port_event_work+0x15a/0x940 [ 307.949982][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 307.950005][ T9] ? process_scheduled_works+0x9ef/0x17b0 [ 307.950021][ T9] ? process_scheduled_works+0x9ef/0x17b0 [ 307.950039][ T9] process_scheduled_works+0xae1/0x17b0 [ 307.950067][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 307.950091][ T9] worker_thread+0x8a0/0xda0 [ 307.950119][ T9] kthread+0x70e/0x8a0 [ 307.950141][ T9] ? __pfx_worker_thread+0x10/0x10 [ 307.950158][ T9] ? __pfx_kthread+0x10/0x10 [ 307.950179][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 307.950201][ T9] ? lockdep_hardirqs_on+0x9c/0x150 [ 307.950216][ T9] ? __pfx_kthread+0x10/0x10 [ 307.950236][ T9] ret_from_fork+0x3fc/0x770 [ 307.950253][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 307.950271][ T9] ? __switch_to_asm+0x39/0x70 [ 307.950290][ T9] ? __switch_to_asm+0x33/0x70 [ 307.950308][ T9] ? __pfx_kthread+0x10/0x10 [ 307.950329][ T9] ret_from_fork_asm+0x1a/0x30 [ 307.950355][ T9] [ 307.950360][ T9] [ 308.175646][ T9] Allocated by task 5846: [ 308.180439][ T9] kasan_save_track+0x3e/0x80 [ 308.185154][ T9] __kasan_kmalloc+0x93/0xb0 [ 308.189764][ T9] __kvmalloc_node_noprof+0x30d/0x5f0 [ 308.195184][ T9] alloc_netdev_mqs+0xa6/0x11e0 [ 308.200048][ T9] rtnl_create_link+0x31f/0xd10 [ 308.204910][ T9] rtnl_newlink_create+0x25c/0xb00 [ 308.210047][ T9] rtnl_newlink+0x16d6/0x1c70 [ 308.214743][ T9] rtnetlink_rcv_msg+0x7cf/0xb70 [ 308.219697][ T9] netlink_rcv_skb+0x208/0x470 [ 308.224484][ T9] netlink_unicast+0x75c/0x8e0 [ 308.229260][ T9] netlink_sendmsg+0x805/0xb30 [ 308.234046][ T9] __sock_sendmsg+0x21c/0x270 [ 308.238754][ T9] __sys_sendto+0x3bd/0x520 [ 308.243276][ T9] __x64_sys_sendto+0xde/0x100 [ 308.248062][ T9] do_syscall_64+0xfa/0x3b0 [ 308.252608][ T9] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.258517][ T9] [ 308.260848][ T9] Freed by task 7488: [ 308.264836][ T9] kasan_save_track+0x3e/0x80 [ 308.269527][ T9] kasan_save_free_info+0x46/0x50 [ 308.274567][ T9] __kasan_slab_free+0x62/0x70 [ 308.279348][ T9] kfree+0x18e/0x440 [ 308.283259][ T9] device_release+0x99/0x1c0 [ 308.287872][ T9] kobject_put+0x22b/0x480 [ 308.292301][ T9] netdev_run_todo+0xd2e/0xea0 [ 308.297084][ T9] default_device_exit_batch+0x81e/0x890 [ 308.302738][ T9] ops_undo_list+0x525/0x990 [ 308.307350][ T9] cleanup_net+0x4c5/0x800 [ 308.311821][ T9] process_scheduled_works+0xae1/0x17b0 [ 308.317383][ T9] worker_thread+0x8a0/0xda0 [ 308.322089][ T9] kthread+0x70e/0x8a0 [ 308.326193][ T9] ret_from_fork+0x3fc/0x770 [ 308.330888][ T9] ret_from_fork_asm+0x1a/0x30 [ 308.335680][ T9] [ 308.338018][ T9] The buggy address belongs to the object at ffff88807996c000 [ 308.338018][ T9] which belongs to the cache kmalloc-cg-4k of size 4096 [ 308.352446][ T9] The buggy address is located 744 bytes inside of [ 308.352446][ T9] freed 4096-byte region [ffff88807996c000, ffff88807996d000) [ 308.366349][ T9] [ 308.368686][ T9] The buggy address belongs to the physical page: [ 308.375115][ T9] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79968 [ 308.383981][ T9] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 308.392491][ T9] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 308.400083][ T9] page_type: f5(slab) [ 308.404096][ T9] raw: 00fff00000000040 ffff88801a44b500 dead000000000122 0000000000000000 [ 308.412699][ T9] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 308.421311][ T9] head: 00fff00000000040 ffff88801a44b500 dead000000000122 0000000000000000 [ 308.430001][ T9] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 308.438706][ T9] head: 00fff00000000003 ffffea0001e65a01 00000000ffffffff 00000000ffffffff [ 308.447400][ T9] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 308.456087][ T9] page dumped because: kasan: bad access detected [ 308.462523][ T9] page_owner tracks the page as allocated [ 308.468248][ T9] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5862, tgid 5862 (syz-executor), ts 90759589101, free_ts 90672833557 [ 308.489754][ T9] post_alloc_hook+0x240/0x2a0 [ 308.494556][ T9] get_page_from_freelist+0x21e4/0x22c0 [ 308.500225][ T9] __alloc_frozen_pages_noprof+0x181/0x370 [ 308.506080][ T9] alloc_pages_mpol+0x232/0x4a0 [ 308.511054][ T9] allocate_slab+0x8a/0x3b0 [ 308.515607][ T9] ___slab_alloc+0xbfc/0x1480 [ 308.520315][ T9] __kmalloc_node_track_caller_noprof+0x2f8/0x4e0 [ 308.526761][ T9] kmemdup_noprof+0x2b/0x70 [ 308.531283][ T9] __addrconf_sysctl_register+0x9c/0x530 [ 308.537026][ T9] addrconf_sysctl_register+0x168/0x1c0 [ 308.542600][ T9] ipv6_add_dev+0xd46/0x1370 [ 308.547215][ T9] addrconf_notify+0x794/0x1010 [ 308.552088][ T9] notifier_call_chain+0x1b3/0x3e0 [ 308.557236][ T9] register_netdevice+0x1608/0x1ae0 [ 308.562459][ T9] register_vlan_dev+0x3cb/0x800 [ 308.567611][ T9] vlan_newlink+0x4b2/0x610 [ 308.572295][ T9] page last free pid 5862 tgid 5862 stack trace: [ 308.578675][ T9] __free_frozen_pages+0xc71/0xe70 [ 308.583965][ T9] __slab_free+0x326/0x400 [ 308.588415][ T9] qlist_free_all+0x97/0x140 [ 308.593029][ T9] kasan_quarantine_reduce+0x148/0x160 [ 308.598510][ T9] __kasan_slab_alloc+0x22/0x80 [ 308.603383][ T9] __kmalloc_cache_noprof+0x1be/0x3d0 [ 308.608898][ T9] __ipv6_dev_mc_inc+0x420/0xaf0 [ 308.613918][ T9] ipv6_add_dev+0xe63/0x1370 [ 308.618529][ T9] addrconf_notify+0x794/0x1010 [ 308.623409][ T9] notifier_call_chain+0x1b3/0x3e0 [ 308.628540][ T9] register_netdevice+0x1608/0x1ae0 [ 308.633752][ T9] veth_newlink+0x5cc/0xa50 [ 308.638272][ T9] rtnl_newlink_create+0x310/0xb00 [ 308.643408][ T9] rtnl_newlink+0x16d6/0x1c70 [ 308.648101][ T9] rtnetlink_rcv_msg+0x7cf/0xb70 [ 308.653139][ T9] netlink_rcv_skb+0x208/0x470 [ 308.657927][ T9] [ 308.660260][ T9] Memory state around the buggy address: [ 308.665929][ T9] ffff88807996c180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 308.674091][ T9] ffff88807996c200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 308.682167][ T9] >ffff88807996c280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 308.690239][ T9] ^ [ 308.697730][ T9] ffff88807996c300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 308.705808][ T9] ffff88807996c380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 308.713878][ T9] ================================================================== [ 308.887907][ T5857] Bluetooth: hci0: command tx timeout [ 309.005390][ T9] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 309.012663][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted 6.16.0-rc6-syzkaller-00124-g96e056ffba91 #0 PREEMPT(full) [ 309.024519][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 309.034620][ T9] Workqueue: events smc_ib_port_event_work [ 309.040507][ T9] Call Trace: [ 309.043815][ T9] [ 309.046773][ T9] dump_stack_lvl+0x99/0x250 [ 309.051417][ T9] ? __asan_memcpy+0x40/0x70 [ 309.056051][ T9] ? __pfx_dump_stack_lvl+0x10/0x10 [ 309.061288][ T9] ? __pfx__printk+0x10/0x10 [ 309.065910][ T9] panic+0x2db/0x790 [ 309.069832][ T9] ? __pfx_panic+0x10/0x10 [ 309.074296][ T9] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 309.080217][ T9] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 309.086574][ T9] ? print_memory_metadata+0x314/0x400 [ 309.092066][ T9] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 309.098074][ T9] check_panic_on_warn+0x89/0xb0 [ 309.103039][ T9] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 309.109056][ T9] end_report+0x78/0x160 [ 309.113327][ T9] kasan_report+0x129/0x150 [ 309.117860][ T9] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 309.123874][ T9] __ethtool_get_link_ksettings+0x6e/0x190 [ 309.129718][ T9] ib_get_eth_speed+0x15e/0x7b0 [ 309.134603][ T9] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 309.139996][ T9] ? do_raw_spin_unlock+0x122/0x240 [ 309.145225][ T9] rxe_query_port+0x93/0x3b0 [ 309.149840][ T9] ib_query_port+0x170/0x830 [ 309.154454][ T9] smc_ib_port_event_work+0x15a/0x940 [ 309.159858][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 309.165085][ T9] ? process_scheduled_works+0x9ef/0x17b0 [ 309.170822][ T9] ? process_scheduled_works+0x9ef/0x17b0 [ 309.176558][ T9] process_scheduled_works+0xae1/0x17b0 [ 309.182135][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 309.188140][ T9] worker_thread+0x8a0/0xda0 [ 309.192759][ T9] kthread+0x70e/0x8a0 [ 309.196857][ T9] ? __pfx_worker_thread+0x10/0x10 [ 309.202011][ T9] ? __pfx_kthread+0x10/0x10 [ 309.206620][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 309.211876][ T9] ? lockdep_hardirqs_on+0x9c/0x150 [ 309.217116][ T9] ? __pfx_kthread+0x10/0x10 [ 309.221756][ T9] ret_from_fork+0x3fc/0x770 [ 309.226387][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 309.231539][ T9] ? __switch_to_asm+0x39/0x70 [ 309.236328][ T9] ? __switch_to_asm+0x33/0x70 [ 309.241114][ T9] ? __pfx_kthread+0x10/0x10 [ 309.245730][ T9] ret_from_fork_asm+0x1a/0x30 [ 309.250531][ T9] [ 309.253909][ T9] Kernel Offset: disabled [ 309.258265][ T9] Rebooting in 86400 seconds..