last executing test programs: 6.743466766s ago: executing program 2 (id=2815): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r0, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @restrict]}}, 0x0, 0x32}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x1f2f, 0xf, 0x3253, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18030000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r3}, 0x10) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f0000000a0000000d0085a168d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r5) write(r5, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000008, 0x2172, 0xffffffffffffffff, 0xc157c000) 6.52642285s ago: executing program 2 (id=2818): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[], 0x32600) recvfrom$x25(r1, &(0x7f0000000440)=""/87, 0x57, 0x12100, &(0x7f00000003c0), 0x12) (async) openat$cgroup_freezer_state(r1, &(0x7f00000004c0), 0x2, 0x0) (async) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/156, 0x9c}], 0x1}, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r2) sendmsg$NFC_CMD_DEP_LINK_UP(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x2c, r3, 0x1, 0x70bd29, 0x7, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40810}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001840)={0xffffffffffffffff, 0x0, 0x0, 0x39ca8789921a5cd7}, 0x20) (async) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}}, 0x2004c840) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r8 = socket(0x1f, 0xa, 0x0) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000540)={0x0, 0x101}, 0x8) connect$inet(r8, &(0x7f0000000500)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="180000007600010000000000000000000300000000e9"], 0x18}}, 0x0) recvmmsg(r8, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0x201}, 0x18}}, 0x0) 6.283735893s ago: executing program 2 (id=2822): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f0000000300)={&(0x7f00000002c0)="a504d469756550e1a544c890870200000000000000bb8c4cc814e0fea807", 0x1e}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000780)) r4 = socket(0x2a, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x28, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=@newlink={0x28, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_CARRIER={0x5, 0x21, 0xf4}]}, 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x60, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x42, 0x1, 0x0, 0x0, {{0xb}, {0x38, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x28}}, 0x0) 6.072146263s ago: executing program 2 (id=2828): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, r1, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x3c}, 0x1, 0x0, 0x0, 0x45}, 0x4004841) recvmmsg(r0, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000240)=""/100, 0x64}, {&(0x7f00000002c0)=""/213, 0xd5}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f0000000540)=""/216, 0xd8}, {&(0x7f0000000180)}, {&(0x7f0000000640)=""/230, 0xe6}, {&(0x7f0000000740)=""/235, 0xeb}, {&(0x7f0000000840)=""/115, 0x73}, {&(0x7f00000008c0)=""/166, 0xa6}, {&(0x7f0000000980)=""/4096, 0x1000}], 0xa, &(0x7f0000001a40)=""/237, 0xed}}, {{&(0x7f0000001b40), 0x80, &(0x7f0000001f40)=[{&(0x7f0000001bc0)=""/147, 0x93}, {&(0x7f00000004c0)=""/22, 0x16}, {&(0x7f0000001c80)=""/203, 0xcb}, {&(0x7f0000001d80)=""/41, 0x29}, {&(0x7f0000001dc0)=""/54, 0x36}, {&(0x7f0000001e00)=""/130, 0x82}, {&(0x7f0000001ec0)=""/72, 0x48}], 0x7, &(0x7f0000001fc0)=""/4096, 0x1000}, 0x3}], 0x2, 0x1, &(0x7f0000003040)={0x77359400}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r3, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000300000014000400", @ANYRES16=r3], 0x58}, 0x1, 0x0, 0x0, 0xc014}, 0x0) close(r0) 5.793777753s ago: executing program 2 (id=2832): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x43}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 5.657856405s ago: executing program 2 (id=2836): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8000}}, 0x0, 0x0, 0x2f, 0x0, "ea1405f7ed3afb477e97815317dd90b0a9f242cdedf08f407b4090210f80a0719e68fabccef0ed7facb62bf4b908fe0781eb04f51226b4e01641b245e500000000000000000000004600"}, 0xd8) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@base={0x16, 0x0, 0xb161, 0x2}, 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000004000900041122000b00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f00000000c0), 0x2, r2}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, &(0x7f0000000000)=""/56, &(0x7f00000001c0), &(0x7f00000000c0), 0x1, r2}, 0x38) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r3, 0x0, &(0x7f0000001780)=""/4096}, 0x20) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0xffffff9e, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x18000000, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x4, 0x6, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x480}}}]}]}]}]}], {0x14, 0x10}}, 0xe4}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1886c301}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xb0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x1}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x9}}]}}}]}, 0x64}}, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f0000000240)="800000800000210ee7decd7a0000", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r9, 0x1, 0xd8, 0x6, @broadcast}, 0x14) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0xfffffffffffffff8, 0x80000000, 0x2}) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000206010800000000000000000000000011000300686173683a69702c6d61726b00000000050001000700000005000500020000000900020073"], 0x58}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) 1.5577239s ago: executing program 4 (id=2896): r0 = socket(0x840000000002, 0x3, 0x100) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f00000003c0)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x18, 0x1409, 0x400, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x54) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000130a0100020073797a00000900010091797b3000000000080003400000000a14000000110001000000000000f6ffffff00000a356442e01bd8711548ea6de2ea7cf977e8c2b51a9d8578e322f4fcb33798862afe50c7b21aa2196ffa35decd26cee379cb20522695458c1aad838e373e2e886b39e80b0e2d766fda09e33520808ff0ffb5bb358fb8a8d3ada8605ad8478c98218a2b498b73a32aa5e972a665de8d57"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004d00)={&(0x7f0000004640)={{0x14}, [@NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14}}, 0x5c}}, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000040)=0x5, 0x1) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, 0x0, &(0x7f0000000300)) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) 1.492344183s ago: executing program 4 (id=2898): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x4c, r3, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x40}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x4c}}, 0x5) (async) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r1, 0x501, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004005}, 0x8000) 1.283693609s ago: executing program 4 (id=2901): unshare(0x8000000) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_to_bond\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x15, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x18}]}, &(0x7f0000000100)='syzkaller\x00'}, 0x80) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bond_slave_0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r3) read(r2, &(0x7f0000000080)=""/177, 0xb1) syz_emit_ethernet(0x32, &(0x7f00000002c0)=ANY=[@ANYBLOB="38aaaaaaaaaaaabbbbbbc93898bbbbbb0800450000240000000200119078000000000000000000000000001090780200000000000000b1d8f600cef594736836e48af1d44986dc9c93a7c2068ad292397d8aefe9f149b70d9f1b8a5238af"], 0x0) syz_emit_ethernet(0x32, &(0x7f0000000140)={@local, @random="e43f6642531e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x4, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x1, 0x1, 0x1, 0x0, 0x0, @void}, "def48de5"}}}}}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x8014) 1.092942828s ago: executing program 1 (id=2905): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x70bd2b, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}]}}}]}, 0x38}}, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000200)="7800000018002507b9409b14ffff00000200be040205e8056402040c5c0009003f0020030a0000000d0085a168d0bf46d32345653600648d27000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160008000a00000000e000e218bcddf66ed538f252325000", 0x78, 0x2400c090, 0x0, 0x0) 973.452741ms ago: executing program 0 (id=2906): r0 = socket(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpu.idle\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x970b) (async) connect$ax25(r0, &(0x7f0000000100)={{0x3, @null, 0x7}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8}}]}, 0x38}}, 0x0) 973.284628ms ago: executing program 1 (id=2907): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000040)=0x13, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002780)=ANY=[@ANYBLOB="4c0000001000010025bd7000fddbdf2500000000", @ANYRES32=r2, @ANYBLOB="18080400430001002c0012801100010062726964676500006c6176650000000014000580060002"], 0x4c}, 0x1, 0x0, 0x0, 0x38f54add4fcfee77}, 0x4000000) 949.361423ms ago: executing program 3 (id=2908): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1200000004000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ebffffffffffffff0000000000000000000000000000000000007eab0000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x1d, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0xa3, &(0x7f00000002c0)=""/163, 0x41100, 0x10, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x0, 0x0, 0x6a5c, 0x6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)=[r1, r1, r1, r1, 0xffffffffffffffff, r1, r1, r1, r1, r1], 0x0, 0x10, 0x9}, 0x94) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x25, 0x14}, 0x14) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)={@fallback=r0, 0xffffffffffffffff, 0x7, 0x2001, r2, @value=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x15, 0xc, &(0x7f0000000100)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0xb}, 0x90) 873.160414ms ago: executing program 0 (id=2909): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000500)=@nat={'nat\x00', 0x670, 0x5, 0x4b0, 0x338, 0x338, 0xffffffff, 0x290, 0x0, 0x418, 0x418, 0xffffffff, 0x418, 0x418, 0x5, 0x0, {[{{@uncond, 0x0, 0x198, 0x1e0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xf, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@rateest={{0x68}, {'wlan1\x00', 'ip6tnl0\x00', 0x12, 0x2, 0x9, 0x2004, 0x5, 0x3, {0xc35}, {0x1ff}}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x12, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@rand_addr=' \x01\x00', @port=0x4e21, @icmp_id=0x68}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xa, 0x4, "ed481ca2c99b76ccda2879f6a12da5725ea2669d62d23b45710a851be124"}}}, {{@ip={@local, @remote, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @local, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x2, @ipv4=@broadcast, @ipv4=@empty, @gre_key=0x3, @icmp_id=0x64}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x510) recvmmsg(r0, 0x0, 0x0, 0x40000000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x58, r6, 0x4, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xfffffffd, 0x69}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x7}, @chandef_params, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x8}, @NL80211_ATTR_DURATION={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x4a44}]}, 0x58}, 0x1, 0x0, 0x0, 0x4048005}, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r8, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r5, 0x0, 0x2d, 0x0, @val=@perf_event={0xa}}, 0x18) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=@ipv6_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x5, 0x18, {0x4e21, 0x4e23}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000003}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}, 0x1, 0x0, 0x0, 0x8090}, 0x0) 817.849736ms ago: executing program 1 (id=2910): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3a8, 0xffffffff, 0x218, 0x0, 0x310, 0xffffffff, 0xffffffff, 0x310, 0x310, 0x310, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x108, 0x148, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0x12}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x9, 0xccc, 0x8, 0x5, 0x0, 0x1, 0x40, 0x8]}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x2, 0x4, 0x5, 0x1], 0x1, 0x2}, {0x2, [0x0, 0x7, 0x0, 0x0, 0x0, 0x1]}}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0x23}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0xd, 0xf, [0x2f, 0x3e, 0x25, 0x23, 0x25, 0x2e, 0xb, 0x21, 0x12, 0xf, 0x1c, 0x8, 0x16, 0x37, 0x3b, 0x3a], 0x1, 0x9040, 0xff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408) 816.439891ms ago: executing program 3 (id=2911): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) recvmsg$can_raw(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/24, 0x18}], 0x1}, 0x100) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r4], 0x50}, 0x1, 0xba01}, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 765.847581ms ago: executing program 0 (id=2912): r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@set2={{0x28}, {{0x0, 0x40}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f00000000c0)=0x800, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) write$tun(r3, &(0x7f0000000400)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14}, @x25={0x2, 0x2, 0x0, "5d1131846429864fd168cd48a8f352411dd59da00749aeabf79572"}}, 0x2c) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x34, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xd, 0x9}, {0xe, 0x9}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x404c0c0) 743.947094ms ago: executing program 1 (id=2913): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0x2f, 0x0, &(0x7f0000000040)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x48, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5}, {0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}}, 0xc000) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r3, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r3, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="15b26f226e2966667482d50903b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5d07d691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6bea1764fbde5500fa30c5f2459cff4d7f123ab94cfd5762d586ec7a28abc2f8c9e608f8f964b96ecb0883d60d444f317834a3d734cb304051a60d1a084a84da8f9a23a1b9d4951c0a81985c63ae193f40e9deb358b2f08553324fd6086be9e70e5061568abefebcda50e70f4dab2e4dc0cf6d85aced044d7005326922886194895267165f7f592036ebe11dcf1cad98f5cda766eaea90fb4cb5e793525126c7594f8599055192d63a81d3cd26aadd50983f1c3f1d4655c1b5f59e80f733e3abc4792b760729fd26298ef15141cf76cc4", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000100)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) r9 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1c, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="1808000000000000000000000000001f851000000600000018100000", @ANYRES32=r9, @ANYBLOB="00000000000000000f8000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$int_in(r10, 0x5421, &(0x7f0000000100)=0x9) connect$inet(r10, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r10) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r5, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x58, r6, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008001) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)={0x2, 0xe, 0x0, 0x0, 0x47, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x0, 0x13, 0x3, 0x0, 0x0, 0x70bd2a, 0x3502}, @sadb_x_sec_ctx={0x1d, 0x18, 0x8, 0x8, 0xda, "6f6d90c461d047469da7dd96484a4c8fa35b10fea6406bdaa25ff6c8f16f6b476dac42482c764ed763f167c29b9132b250f95d2a9ade226bf21d580ef4e201fb935452b7d21d33bce37800068d2147c910a1d665a9b1e3135f625f6ff648d7ebef65640861e47c8ad1c90536b24f1211668679b15596f6d68922a315f1f586c2f11882480c1e2baebbf46242285aa6a457da1fc5e4a42fad4e9505564717681c6e2e22466b048fcf5687d9d4d03634d2d9fbdaf35174e4e660332071c2099645c5ba40a8ada87b9d1cc691f1b6850fddedc66bdbf4c324ed6e03"}, @sadb_key={0x8, 0x9, 0x188, 0x0, "0f29f64002c7a5c1b905d6f3e7f447cbb8406165b927ee3fa6659e11232f0fde46db13fe92c29b7f03fac300ecdf284399"}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e21}, @sadb_ident={0x2, 0xa, 0x3, 0x0, 0x1}, @sadb_spirange={0x2, 0x10, 0x4d6, 0x4d6}, @sadb_key={0x19, 0x8, 0x5c8, 0x0, "6ce54e509701c31af667a4253b45e84836a3e0c7d51b4f7768c0717e0cc1a3d0c473e8d6f3b0740cea7a1b12c7db1251b4919f28fd4e5c9d023bdee1de6603e030ff6c5cc6af4beb5d46a496836a742cf66a00d4242c083b9c8212c43cd78bebfd936c2757301bb567cc0558b6384f8bac36ffb80e3270919bc830077aa6b9d633c18af6b85fd088da75bc3357061768e4a743c4ab8b67728dc36aa7dc907f48c4626833edbc38cbbfaa1edc9bb5ae83ef28f73e6a28776cac"}]}, 0x238}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) r12 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r1) sendmsg$NLBL_MGMT_C_LISTDEF(r5, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0xc00400}, 0xc, &(0x7f0000000540)={&(0x7f0000001300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="00012dbd7000ffdbdf250600000008000700e000000106000bf227000000070001002125000008000700ac1e01018f8216000fc099137098b8c5ed5961316a1ef91aee4c6eec53fc4eb42fa46307db9c0b0dfa7d2d8a10fed34a67bc000027c1b38466ee1f57b5c76741971d61124b0000bac95951462bd4718e175e8a176ce0420d81332380fef6dacc9e4b25c08f6afd7a73101853da8e29063ae91b3e09b6549978856607804922d3f258e9ecb39d89a0e5c4a09c8cd3f915d93b437b17c63cfba18d24"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4000) r13 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) 573.603803ms ago: executing program 3 (id=2914): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x6c, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x10, 0x20, 0x78c, 0xfffffffa, {{0x16, 0x4, 0x3, 0x13, 0x58, 0x66, 0x0, 0x0, 0x29, 0x0, @empty, @multicast2, {[@rr={0x7, 0x1b, 0xf9, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @multicast1, @multicast2, @loopback, @empty]}, @lsrr={0x83, 0x1b, 0x5c, [@local, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @broadcast, @remote]}, @noop, @noop, @ssrr={0x89, 0xb, 0x4f, [@empty, @loopback]}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@gettclass={0x24, 0x2a, 0x800, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x8, 0x2}, {0xffe0, 0xfff3}, {0xe, 0xf}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4) 573.15815ms ago: executing program 1 (id=2915): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f0000000040), 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000680)={0xc24f, 0xc, 0x200, 0x8}, &(0x7f00000006c0)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x83, &(0x7f0000000080), 0x8) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000000c0)={0x80}) 525.240768ms ago: executing program 1 (id=2916): r0 = socket(0x15, 0x5, 0xfffffffb) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0xd, 0x8004, 0x3, 0x80000001}, 0x10) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x11c, r2, 0x10, 0x70bd2d, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x400}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8ccb}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x800}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x1010}, 0x44006004) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f00000002c0)={{0x2c, @broadcast, 0x4e22, 0x1, 'wlc\x00', 0x4, 0x40, 0x2c}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x4e21, 0x10003, 0x2c, 0x13}}, 0x44) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f00000003c0)={'ip_vti0\x00', 0x0, 0x700, 0x80, 0x10000, 0x400, {{0x35, 0x4, 0x2, 0x1, 0xd4, 0x68, 0x0, 0x65, 0x4, 0x0, @rand_addr=0x64010101, @private=0xa010101, {[@timestamp={0x44, 0x24, 0xe3, 0x0, 0xd, [0x0, 0x9, 0x7f, 0x7, 0xf, 0x6, 0xfc73, 0x8f]}, @ssrr={0x89, 0x7, 0x2d, [@dev={0xac, 0x14, 0x14, 0x3c}]}, @rr={0x7, 0x17, 0xd9, [@multicast2, @dev={0xac, 0x14, 0x14, 0x29}, @loopback, @loopback, @rand_addr=0x64010102]}, @generic={0x86, 0x10, "5be6fcaa2d79b8c1ef3b0989806d"}, @timestamp_prespec={0x44, 0x24, 0xc0, 0x3, 0x6, [{@multicast1, 0x5}, {@broadcast, 0x2}, {@rand_addr=0x64010100, 0xe}, {@rand_addr=0x64010102, 0x7f}]}, @noop, @timestamp_prespec={0x44, 0xc, 0x6b, 0x3, 0xa, [{@empty, 0x4}]}, @timestamp_addr={0x44, 0x14, 0x65, 0x1, 0x8, [{@loopback, 0xfffffffb}, {@broadcast, 0x400}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x24, 0x68, 0x3, 0x9, [{@multicast2, 0x5}, {@loopback, 0x5}, {@local, 0x8}, {@private=0xa010102, 0x60}]}]}}}}}) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000540)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000005c0)={@multicast2, @loopback, 0x0}, &(0x7f0000000600)=0xc) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000640)=0x0, &(0x7f0000000680)=0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'erspan0\x00', 0x0, 0x0, 0x700, 0x100, 0xf911, {{0xf, 0x4, 0x0, 0x3, 0x3c, 0x68, 0x0, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @local, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x1b, 0x7c, [@multicast1, @broadcast, @multicast1, @multicast2, @remote, @multicast2]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}]}}}}}) getpeername$packet(r0, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000007c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000880)={'ip_vti0\x00', &(0x7f0000000800)={'sit0\x00', 0x0, 0x80, 0x1, 0x3, 0xbc4a, {{0x10, 0x4, 0x2, 0x1a, 0x40, 0x68, 0x0, 0x7a, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @broadcast, {[@timestamp_prespec={0x44, 0x2c, 0x1f, 0x3, 0x4, [{@empty, 0x1}, {@empty, 0x1}, {@multicast2, 0x5}, {@private=0xa010100, 0x9}, {@broadcast, 0x3}]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0x58, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a00)={0x1, 0x58, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000a40)={0x0, @broadcast, @multicast1}, &(0x7f0000000a80)=0xc) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000cc0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000ac0)={0x188, r3, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_DEBUG_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_DEBUG_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r15 = syz_genetlink_get_family_id$team(&(0x7f0000000d40), r0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001000)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000d80)={0x23c, r15, 0x200, 0x70bd25, 0x25dfdbfd, {}, [{{0x8, 0x1, r11}, {0x158, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0xffff, 0x1, 0x80, 0x7f}, {0x6aa7, 0x3, 0x5, 0x7}, {0xdf93, 0x2, 0x6, 0x4}, {0x61d5, 0x5, 0xe, 0x1}, {0x100, 0x5, 0x81, 0x2}, {0x81, 0x6, 0x5, 0x10001}, {0xff, 0x2, 0xa}]}}}]}}, {{0x8, 0x1, r14}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x30b0ede1}}}]}}, {{0x8, 0x1, r6}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}]}, 0x23c}, 0x1, 0x0, 0x0, 0x40}, 0x1) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000001040)) readv(r1, &(0x7f0000001400)=[{&(0x7f0000001140)=""/236, 0xec}, {&(0x7f0000001240)=""/64, 0x40}, {&(0x7f0000001280)=""/136, 0x88}, {&(0x7f0000001340)=""/156, 0x9c}], 0x4) bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f00000014c0)={0x5, 0x20, [0x9, 0x7f, 0x7fffffffffffffff, 0x6], &(0x7f0000001480)=[0x0, 0x0, 0x0, 0x0]}) r16 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r16, 0x29, 0x1b, &(0x7f0000001500), &(0x7f0000001540)=0x14) 488.682626ms ago: executing program 0 (id=2917): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000fc0)={&(0x7f0000001340)=@hci={0x1f, 0x200, 0x31}, 0x80, &(0x7f0000000000)=[{&(0x7f0000001040)="b8b2cc1e00c1dba49dbb66ca892f", 0xe}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xb) sendmsg$NFNL_MSG_CTHELPER_DEL(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa2210040}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x2, 0x9, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x4}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x47135c4143ce78f9}, 0x80c0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r3, 0x89e3, &(0x7f0000000000)={0x70, 0x0, 0xc, 0xc, 0x0, 0xf9e78fc95245f17b}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$IPSET_CMD_TYPE(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0xd, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x2c}}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r2) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x3c, r5, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xe}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MON={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4084}, 0x10000000) 389.779775ms ago: executing program 3 (id=2918): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000100900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x18, 0x1418, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)) pwritev(r4, &(0x7f0000000040)=[{&(0x7f00000000c0)="80fd01000040", 0x6}], 0x1, 0x0, 0x4) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000004000000140001800d0001007564703a7379b390b3"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40004) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000010000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03030000000000000000020000000c00024000000000000000020900010073797a30"], 0x54}}, 0x2000c001) vmsplice(r0, &(0x7f0000000480)=[{&(0x7f0000000100)="30df3a0c70d5e39c171e", 0xa}, {&(0x7f00000002c0)="bdb838b4482459465f802225ef3e3e62e8ed0eff3f04cd29272386fa17ba665e9be9aae8048408d13bc015360466b97c54be8ceadaaf88a760b41e9df8ce790535ccda68c4709e6f5682fbe64c23ea77bdd51c59a0df2217c76d0a9acd7bc3079ea48a7fe3d78c13bd563479e34e6f7fa44c5d4fd92010b448350f77d9fa784b6a07c289f44e9734cea387550943131b62093f2ed61054be9836186d2632ae4a9a9e8d1dd843b95b1c8c401277266a4711727e6578c712eea8961cbf3f1a3cec4caad56ad4c32811943514edd512f776fe94953ee7", 0xd5}, {&(0x7f00000001c0)="1644c7fbc0f3e45f40a787db555c4d9173898f9fc88f7a4e5f8499d3c11eb3b9c1ba33b634bec0", 0x27}, {&(0x7f0000000440)="0af8a43fd995b1e49486625260216f1c4485c555d501cfebb7", 0x19}], 0x4, 0xa) 371.54947ms ago: executing program 0 (id=2919): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b4"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r0, r0, 0x2e}, 0x20) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000100)={'caif0\x00', @ifru_hwaddr=@remote}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vcan0\x00'}) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x14, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x119}]}, 0x14}], 0x1, 0x0, 0x0, 0x84}, 0x300) r3 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r3, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) close(r3) 370.133442ms ago: executing program 4 (id=2920): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, &(0x7f0000000000)=0x6e, 0x80800) accept4$unix(r1, &(0x7f0000000100), &(0x7f0000000180)=0x6e, 0x80000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r2, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x5, 0x1d}}}}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0xfc06}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x5}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x2a}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x4a}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x6d}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x20}]}, 0x88}, 0x1, 0x0, 0x0, 0x44088}, 0x8000) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) 217.859097ms ago: executing program 4 (id=2921): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002fc0)=ANY=[@ANYBLOB="200000002e00090027bd7000000000000400000004001d000800098004"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (fail_nth: 23) 199.507374ms ago: executing program 3 (id=2922): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r1, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="30000000000000001001000a00000000"], 0x10}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="a12336926298ad917a6539a48bf38a7d01902279d4cac18ed709aaf6ad472d83731a2983b308c24c9e8d957569711ade5caafb723c31e02850d3f9187e0a5981739b03daf27d9da8a6d443c0191ef6069b9c0cefd1655a7a050700b1b608fd9bca372e346a8b4cca9439f89a93dc6a3b3891f7fb21fdf384ce8408dce92ce04e", @ANYBLOB="8a77f616c4f4db1741c99b1f9337900a7c497e04000000000000003c79c21fb15685a19697428c", @ANYRES32=r2, @ANYRESOCT=r0, @ANYBLOB="04001d80"], 0x20}, 0x1, 0x0, 0x0, 0x20000094}, 0x80) 68.242635ms ago: executing program 0 (id=2923): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000540)={'team_slave_1\x00', &(0x7f0000000440)=@ethtool_dump={0x7f, 0x9, 0x81}}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x130, r2, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x64608ed5, 0x36}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x94, 0x3, 0x0, 0x1, [{0x6c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x68, 0x1, "cb29ec3f14e9e08b4672bee1eefbfd694b82c04db336769eb9bb660b4b963a49d7fe33d9ae1ed2d1c80e29511b148d41d72b68262625fb02212a6aee6cd55f7dd1b75cad67fb8ff9d186886a15b47171793c5d072b995314473c023e55aac8bb993f1790"}}, {0x18, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x11, 0x2, "ad8b05150acd4c58c2d076176d"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x2}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x3}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x40, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xb, 0x2, "2189485da4a2d3"}}, {0x2c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x26, 0x2, "5f3648349493a80b75ba580a3226c8d440c56f24996c52936fd1e0d20d502cee5279"}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xe3}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x3}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}]}, 0x130}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000580)={0x80, r2, 0xb97534d5fe9704cf, 0x4, 0x200, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x3ff}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x602}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x43, 0xbe, "4ac0cc004796a83373e3035e956dd131a0f9634d30f85bc8db0984473d5704fe358322e98a095bbe7ff9a0205eaa029867aed7a349dbecb5b65855a06e3d6a"}]}, 0x80}, 0x1, 0x0, 0x0, 0x80c1}, 0x0) 1.894017ms ago: executing program 3 (id=2924): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1100}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x62, 0x1ff}}]}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@fallback=r0, 0x2, 0x1, 0x7fff, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0]}, 0x40) 0s ago: executing program 4 (id=2925): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$kcm(0xa, 0x922000000003, 0x11) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe46a}, 0x94) socket$packet(0x11, 0x3, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b7040000000000008500000033"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{r0}, &(0x7f0000000a40), &(0x7f0000000a80)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x2, &(0x7f0000000600)=[{@none}, {@none}]}) kernel console output (not intermixed with test programs): hugepages_surp=0 hugepages_size=1048576kB [ 125.151277][ T8077] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 125.161697][ T8077] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 125.171344][ T8077] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 125.180901][ T8077] 43863 total pagecache pages [ 125.186744][ T8077] 0 pages in swap cache [ 125.190902][ T8077] Free swap = 124996kB [ 125.200638][ T8077] Total swap = 124996kB [ 125.205306][ T8077] 2097051 pages RAM [ 125.209411][ T8077] 0 pages HighMem/MovableOnly [ 125.233633][ T8077] 424119 pages reserved [ 125.237798][ T8077] 0 pages cma reserved [ 125.310371][ T8111] netlink: 12 bytes leftover after parsing attributes in process `syz.2.625'. [ 125.407823][ T8111] macvlan2: entered promiscuous mode [ 125.413159][ T8111] macvlan2: entered allmulticast mode [ 125.422000][ T8120] netlink: 'syz.4.628': attribute type 13 has an invalid length. [ 125.435380][ T8111] bond2: (slave macvlan2): Opening slave failed [ 125.446306][ T8120] netlink: 'syz.4.628': attribute type 17 has an invalid length. [ 125.589977][ T8120] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 125.629240][ T8119] netlink: 24 bytes leftover after parsing attributes in process `syz.3.627'. [ 125.836031][ T8142] netlink: 52 bytes leftover after parsing attributes in process `syz.1.633'. [ 125.985006][ T8155] netlink: 'syz.1.636': attribute type 13 has an invalid length. [ 126.003934][ T8155] netlink: 'syz.1.636': attribute type 58 has an invalid length. [ 126.013753][ T8155] netlink: 152 bytes leftover after parsing attributes in process `syz.1.636'. [ 126.159844][ T8165] netlink: 176 bytes leftover after parsing attributes in process `syz.3.640'. [ 126.182667][ T8165] netlink: 32 bytes leftover after parsing attributes in process `syz.3.640'. [ 126.275707][ T8165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.640'. [ 126.286212][ T8165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.640'. [ 126.366601][ T3587] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.373289][ T8165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.640'. [ 126.395638][ T3587] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.419167][ T3587] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.442958][ T3587] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.460266][ T8176] block nbd0: not configured, cannot reconfigure [ 126.479185][ T8172] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 126.589063][ T8184] syzkaller1: entered promiscuous mode [ 126.620921][ T8184] syzkaller1: entered allmulticast mode [ 126.890437][ T8204] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 127.158780][ T8227] xt_hashlimit: max too large, truncated to 1048576 [ 127.190058][ T8227] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 127.381638][ T8238] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 127.382418][ T8240] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 127.991849][ T8280] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 128.217596][ T8306] netlink: 'syz.4.688': attribute type 7 has an invalid length. [ 128.746641][ T8325] syzkaller0: entered promiscuous mode [ 128.762831][ T8325] syzkaller0: entered allmulticast mode [ 128.867695][ T8343] batadv0: entered promiscuous mode [ 128.884709][ T8343] team0: entered promiscuous mode [ 128.889763][ T8343] team_slave_0: entered promiscuous mode [ 128.906122][ T8343] team_slave_1: entered promiscuous mode [ 128.912739][ T8343] geneve0: entered promiscuous mode [ 128.922982][ T8343] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 129.101793][ T8354] can: request_module (can-proto-0) failed. [ 129.760310][ T8389] tunl0: entered promiscuous mode [ 129.771223][ T8389] netlink: 'syz.3.713': attribute type 3 has an invalid length. [ 130.000045][ T8409] __nla_validate_parse: 19 callbacks suppressed [ 130.000062][ T8409] netlink: 96 bytes leftover after parsing attributes in process `syz.1.717'. [ 130.029950][ T8412] netlink: 4 bytes leftover after parsing attributes in process `syz.4.714'. [ 130.060572][ T8409] vlan2: entered allmulticast mode [ 130.060754][ T8414] x_tables: duplicate underflow at hook 2 [ 130.085653][ T8409] gretap0: entered allmulticast mode [ 130.368579][ T8440] atomic_op ffff8880243e5198 conn xmit_atomic 0000000000000000 [ 130.521555][ T8447] netlink: 'syz.4.726': attribute type 13 has an invalid length. [ 130.549740][ T8447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.726'. [ 130.679659][ T8461] x_tables: unsorted underflow at hook 2 [ 130.813886][ T8472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.735'. [ 130.822884][ T8470] netlink: 'syz.1.734': attribute type 12 has an invalid length. [ 130.973710][ T8489] netlink: 12 bytes leftover after parsing attributes in process `syz.3.739'. [ 131.110336][ T8501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.743'. [ 131.308551][ T8514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.748'. [ 131.328622][ T8514] unsupported nlmsg_type 40 [ 131.371389][ T8519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.746'. [ 131.376244][ T8520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.747'. [ 131.382924][ T8522] netlink: 'syz.2.749': attribute type 3 has an invalid length. [ 131.404510][ T8523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.746'. [ 131.537607][ T8522] netlink: 'syz.2.749': attribute type 58 has an invalid length. [ 131.772785][ T8540] team0: Device vti0 is of different type [ 131.953017][ T8557] ip6gre2: entered promiscuous mode [ 131.958403][ T8557] ip6gre2: entered allmulticast mode [ 132.224734][ T8565] erspan0: entered promiscuous mode [ 132.243883][ T8565] vlan2: entered promiscuous mode [ 132.708356][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.714749][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.954356][ T8585] netlink: 'syz.4.766': attribute type 4 has an invalid length. [ 132.973858][ T8587] netlink: 'syz.4.766': attribute type 4 has an invalid length. [ 133.209028][ T8597] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 133.225699][ T8597] bond3 (unregistering): Released all slaves [ 133.254496][ T8594] tipc: Started in network mode [ 133.259469][ T8594] tipc: Node identity 4aab8d1c85c3, cluster identity 4711 [ 133.285147][ T8594] tipc: Enabled bearer , priority 0 [ 133.293755][ T8592] netlink: 'syz.0.769': attribute type 1 has an invalid length. [ 133.367321][ T8600] sctp: [Deprecated]: syz.1.771 (pid 8600) Use of struct sctp_assoc_value in delayed_ack socket option. [ 133.367321][ T8600] Use struct sctp_sack_info instead [ 133.526897][ T8590] tipc: Resetting bearer [ 134.365215][ T5894] tipc: Node number set to 3479735580 [ 134.452417][ T8590] tipc: Disabling bearer [ 134.488939][ T3587] smc: removing ib device syz2 [ 134.549448][ T10] syz2: Port: 1 Link DOWN [ 134.917382][ T8655] netlink: 'syz.1.789': attribute type 30 has an invalid length. [ 135.020221][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.071392][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.116647][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.150355][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.267758][ T8673] syzkaller0: entered promiscuous mode [ 135.273256][ T8673] syzkaller0: entered allmulticast mode [ 135.463963][ T8691] __nla_validate_parse: 9 callbacks suppressed [ 135.463980][ T8691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.799'. [ 135.523486][ T8691] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 135.590426][ T8696] netlink: 12 bytes leftover after parsing attributes in process `syz.2.802'. [ 135.758788][ T8702] netlink: 24 bytes leftover after parsing attributes in process `syz.0.804'. [ 135.785037][ T8700] tipc: Enabled bearer , priority 0 [ 135.796370][ T8709] netlink: 3 bytes leftover after parsing attributes in process `syz.4.805'. [ 135.873187][ T8700] syzkaller0: entered promiscuous mode [ 135.880546][ T8700] syzkaller0: entered allmulticast mode [ 135.883734][ T8712] netlink: 'syz.2.807': attribute type 1 has an invalid length. [ 136.142199][ T8712] bond3: entered promiscuous mode [ 136.166991][ T8712] bond3: entered allmulticast mode [ 136.198844][ T8712] 8021q: adding VLAN 0 to HW filter on device bond3 [ 136.266707][ T8715] macvlan2: entered promiscuous mode [ 136.283834][ T8715] macvlan2: entered allmulticast mode [ 136.304386][ T8715] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 136.398666][ T8728] tipc: Resetting bearer [ 136.479155][ T8698] tipc: Resetting bearer [ 136.527255][ T8698] tipc: Disabling bearer [ 136.536747][ T8743] netlink: 'syz.3.812': attribute type 4 has an invalid length. [ 136.546397][ T8743] netlink: 17 bytes leftover after parsing attributes in process `syz.3.812'. [ 136.576635][ T8743] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20003 [ 136.668269][ T8749] openvswitch: netlink: Duplicate key (type 1). [ 136.872253][ T8770] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.820'. [ 137.017028][ T8783] netlink: 36 bytes leftover after parsing attributes in process `syz.2.822'. [ 137.066681][ T8783] netlink: 12 bytes leftover after parsing attributes in process `syz.2.822'. [ 137.110389][ T8784] dvmrp0: entered allmulticast mode [ 137.147228][ T8790] netlink: 92 bytes leftover after parsing attributes in process `syz.3.826'. [ 137.328753][ T8807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.831'. [ 138.038084][ T5894] IPVS: starting estimator thread 0... [ 138.183712][ T8824] IPVS: using max 31 ests per chain, 74400 per kthread [ 138.203437][ T8832] Bluetooth: MGMT ver 1.23 [ 138.208312][ T8832] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 138.253182][ T8834] xfrm1: entered allmulticast mode [ 138.457214][ T8851] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 138.568412][ T8857] netlink: 'syz.3.843': attribute type 29 has an invalid length. [ 138.610029][ T8862] netlink: 'syz.3.843': attribute type 29 has an invalid length. [ 138.889073][ T8879] tipc: Enabled bearer , priority 0 [ 138.946910][ T8878] tipc: Disabling bearer [ 139.323108][ T8913] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 139.411779][ T8922] Bluetooth: MGMT ver 1.23 [ 139.499387][ T8924] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 139.770259][ T8947] netlink: 'syz.3.873': attribute type 2 has an invalid length. [ 139.849035][ T8956] netlink: 'syz.4.874': attribute type 11 has an invalid length. [ 140.137058][ T8978] syzkaller0: entered promiscuous mode [ 140.146884][ T8978] syzkaller0: entered allmulticast mode [ 140.154262][ T8977] tipc: Enabled bearer , priority 0 [ 140.203014][ T8977] tipc: Resetting bearer [ 140.223640][ T8977] tipc: Disabling bearer [ 140.232344][ T8989] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.456330][ T9003] bond0: (slave bond_slave_1): Releasing backup interface [ 140.464500][ T8943] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 140.613472][ T9017] __nla_validate_parse: 17 callbacks suppressed [ 140.613488][ T9017] netlink: 5 bytes leftover after parsing attributes in process `syz.4.894'. [ 140.641576][ T9017] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 140.672921][ T9017] 0ªî{X¹¦: entered allmulticast mode [ 140.696471][ T9017] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 141.021069][ T9043] netlink: 64 bytes leftover after parsing attributes in process `syz.3.903'. [ 141.121232][ T9049] bond2: option min_links: invalid value (18446744073709551614) [ 141.130186][ T9049] bond2: option min_links: allowed values 0 - 2147483647 [ 141.139785][ T9049] bond2 (unregistering): Released all slaves [ 141.372653][ T9072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.909'. [ 141.383161][ T9074] netlink: 'syz.1.911': attribute type 6 has an invalid length. [ 141.550572][ T9083] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.675974][ T5835] Bluetooth: hci4: command 0x0405 tx timeout [ 141.743785][ T52] Bluetooth: hci0: command 0x080f tx timeout [ 141.798013][ T9104] netlink: 28 bytes leftover after parsing attributes in process `syz.3.923'. [ 141.826704][ T9107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.922'. [ 141.839177][ T9106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.922'. [ 142.035324][ T9119] tipc: Enabled bearer , priority 0 [ 142.056887][ T9119] syzkaller0: entered promiscuous mode [ 142.066429][ T9119] syzkaller0: entered allmulticast mode [ 142.108100][ T9119] tipc: Resetting bearer [ 142.122746][ T9118] tipc: Resetting bearer [ 142.142417][ T9118] tipc: Disabling bearer [ 142.256978][ T9128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.929'. [ 142.285302][ T9133] bridge0: port 4(batadv1) entered blocking state [ 142.292331][ T9133] bridge0: port 4(batadv1) entered disabled state [ 142.299675][ T9133] batadv1: entered allmulticast mode [ 142.302549][ T9136] netlink: 'syz.3.931': attribute type 1 has an invalid length. [ 142.311496][ T9133] batadv1: entered promiscuous mode [ 142.322517][ T9136] netlink: 16 bytes leftover after parsing attributes in process `syz.3.931'. [ 142.503336][ T9146] netlink: 'syz.2.934': attribute type 1 has an invalid length. [ 142.556881][ T10] hid-generic 0005:0007:5505.0002: item fetching failed at offset 4/5 [ 142.570218][ T10] hid-generic 0005:0007:5505.0002: probe with driver hid-generic failed with error -22 [ 142.648354][ T9151] bond5: (slave vxcan7): The slave device specified does not support setting the MAC address [ 142.680151][ T9151] bond5: (slave vxcan7): Error -95 calling set_mac_address [ 142.749327][ T9146] bond5: (slave bridge3): Enslaving as an active interface with a down link [ 142.774683][ T1089] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 142.784319][ T1089] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 142.811118][ T9157] bond5: (slave gretap1): making interface the new active one [ 142.831057][ T9157] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 143.158969][ T9188] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 143.338362][ T9203] xt_CT: You must specify a L4 protocol and not use inversions on it [ 143.422360][ T9203] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 143.442215][ T9210] netlink: 4 bytes leftover after parsing attributes in process `syz.3.953'. [ 143.541658][ T9210] smc: removing net device vcan0 with user defined pnetid SYZ1 [ 143.736728][ T9228] netlink: 16 bytes leftover after parsing attributes in process `syz.2.960'. [ 143.742505][ T9230] netlink: 'syz.3.961': attribute type 5 has an invalid length. [ 143.762610][ T9230] geneve2: entered promiscuous mode [ 143.772734][ T9230] geneve2: entered allmulticast mode [ 143.815414][ T1109] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 143.844825][ T1109] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 143.874615][ T1109] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 143.897530][ T1109] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 143.958450][ T9240] veth9: entered promiscuous mode [ 144.235622][ T9271] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20001 [ 144.526967][ T9288] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 144.896811][ T9326] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 145.117085][ T9336] tipc: Enabling of bearer rejected, failed to enable media [ 145.210653][ T9338] netlink: 'syz.3.993': attribute type 7 has an invalid length. [ 145.224102][ T9338] netlink: 'syz.3.993': attribute type 8 has an invalid length. [ 145.409155][ T9353] tc_dump_action: action bad kind [ 145.549487][ T9356] bridge0: port 3(batadv1) entered blocking state [ 145.579138][ T9356] bridge0: port 3(batadv1) entered disabled state [ 145.607786][ T9356] batadv1: entered allmulticast mode [ 145.628203][ T9356] batadv1: entered promiscuous mode [ 145.720800][ T9373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.724301][ T9374] netlink: 'syz.0.1005': attribute type 11 has an invalid length. [ 145.917677][ T9385] netlink: 'syz.4.1009': attribute type 1 has an invalid length. [ 145.936810][ T9384] __nla_validate_parse: 14 callbacks suppressed [ 145.936831][ T9384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1009'. [ 145.988097][ T9390] vlan3: entered promiscuous mode [ 145.994516][ T9390] vlan3: entered allmulticast mode [ 145.999649][ T9390] hsr_slave_1: entered allmulticast mode [ 146.046263][ T36] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 146.055576][ T36] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 146.109072][ T9396] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.201170][ T9406] netlink: 'syz.0.1015': attribute type 3 has an invalid length. [ 146.386741][ T9416] Bluetooth: MGMT ver 1.23 [ 146.647085][ T9428] tipc: Enabled bearer , priority 0 [ 146.664676][ T9428] syzkaller0: entered promiscuous mode [ 146.675388][ T9428] syzkaller0: entered allmulticast mode [ 146.787199][ T9435] tipc: Resetting bearer [ 146.802936][ T9426] tipc: Resetting bearer [ 146.834473][ T9426] tipc: Disabling bearer [ 146.855616][ T9439] tipc: Enabled bearer , priority 0 [ 146.862904][ T9439] syzkaller0: entered promiscuous mode [ 146.869442][ T9439] syzkaller0: entered allmulticast mode [ 146.889063][ T9439] tipc: Resetting bearer [ 146.918600][ T9439] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1024'. [ 146.951298][ T9439] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1024'. [ 146.971018][ T9438] tipc: Resetting bearer [ 146.995948][ T9438] tipc: Disabling bearer [ 147.089741][ T9449] bond2: entered promiscuous mode [ 147.117130][ T9449] bond2: entered allmulticast mode [ 147.122918][ T9449] 8021q: adding VLAN 0 to HW filter on device bond2 [ 147.157446][ T9449] netlink: 14544 bytes leftover after parsing attributes in process `syz.4.1028'. [ 147.178002][ T9456] IPVS: Unknown mcast interface: vcan0 [ 147.199738][ T9456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1029'. [ 147.300113][ T9466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1032'. [ 147.334083][ T9466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1032'. [ 147.396386][ T9470] netlink: 'syz.1.1030': attribute type 16 has an invalid length. [ 147.416371][ T9470] netlink: 'syz.1.1030': attribute type 17 has an invalid length. [ 147.515332][ T9470] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 147.547550][ T9479] IPv6: NLM_F_CREATE should be specified when creating new route [ 147.571970][ T9484] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1038'. [ 147.651776][ T9488] netlink: 'syz.3.1041': attribute type 1 has an invalid length. [ 147.674468][ T9488] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.702724][ T9490] netlink: 'syz.4.1042': attribute type 13 has an invalid length. [ 147.731352][ T9490] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 147.759359][ T9494] netlink: 'syz.3.1043': attribute type 12 has an invalid length. [ 147.803980][ T9494] bond0: option primary_reselect: invalid value (255) [ 147.812589][ T9494] bond0 (unregistering): Released all slaves [ 147.841033][ T9497] netlink: 'syz.0.1044': attribute type 10 has an invalid length. [ 147.851855][ T9497] netlink: 'syz.0.1044': attribute type 1 has an invalid length. [ 147.907468][ T9500] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 147.982487][ T9509] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1046'. [ 148.025151][ T9497] netlink: 'syz.0.1044': attribute type 10 has an invalid length. [ 148.061131][ T9511] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 148.180276][ T9519] netlink: 'syz.3.1049': attribute type 4 has an invalid length. [ 148.218061][ T9519] netlink: 'syz.3.1049': attribute type 4 has an invalid length. [ 148.350871][ T5894] IPVS: starting estimator thread 0... [ 148.384303][ T9531] syzkaller0: entered promiscuous mode [ 148.392006][ T9531] syzkaller0: entered allmulticast mode [ 148.467559][ T9532] IPVS: using max 26 ests per chain, 62400 per kthread [ 148.490818][ T30] audit: type=1800 audit(1762813553.372:3): pid=9520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1050" name="memory.events" dev="tmpfs" ino=1060 res=0 errno=0 [ 148.638012][ T9549] syzkaller0: entered promiscuous mode [ 148.646730][ T9549] syzkaller0: entered allmulticast mode [ 148.667155][ T9554] syzkaller0: entered promiscuous mode [ 148.672650][ T9554] syzkaller0: entered allmulticast mode [ 148.683088][ T9555] tipc: Enabled bearer , priority 0 [ 148.810634][ T9556] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 148.823561][ T9556] syzkaller0: entered promiscuous mode [ 148.829327][ T9556] syzkaller0: entered allmulticast mode [ 148.861908][ T9555] tipc: Resetting bearer [ 148.881540][ T9553] tipc: Resetting bearer [ 148.926354][ T9553] tipc: Disabling bearer [ 149.252808][ T9573] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1068'. [ 149.320091][ T9577] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.372408][ T9577] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.562412][ T9593] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 149.613900][ T9597] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.063739][ T52] Bluetooth: hci0: command tx timeout [ 150.139498][ T9628] team0: Port device team_slave_0 removed [ 150.601595][ T9663] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 151.204300][ T9716] __nla_validate_parse: 8 callbacks suppressed [ 151.204316][ T9716] netlink: 1804 bytes leftover after parsing attributes in process `syz.0.1106'. [ 151.247973][ T9716] netlink: 3272 bytes leftover after parsing attributes in process `syz.0.1106'. [ 151.262892][ T9727] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1109'. [ 151.336044][ T9732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1112'. [ 152.294582][ T9782] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma? [ 152.373095][ T9792] pimreg: left allmulticast mode [ 152.446631][ T9796] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.467543][ T9796] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.499709][ T9796] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.518156][ T9796] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.596092][ T9802] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 152.605935][ T9802] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 152.614652][ T9802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1129'. [ 152.948706][ T9827] veth1_macvtap: left promiscuous mode [ 152.984333][ T9834] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1136'. [ 153.404512][ T9868] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1146'. [ 153.504607][ T9870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1148'. [ 153.519195][ T9870] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1148'. [ 153.921119][ T9903] validate_nla: 4 callbacks suppressed [ 153.921135][ T9903] netlink: 'syz.4.1156': attribute type 4 has an invalid length. [ 153.980877][ T9905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1158'. [ 154.050522][ T9910] netlink: 'syz.2.1160': attribute type 7 has an invalid length. [ 154.060323][ T9910] netlink: 'syz.2.1160': attribute type 8 has an invalid length. [ 154.102834][ T9912] netlink: 'syz.1.1161': attribute type 1 has an invalid length. [ 154.479638][ T9946] ieee802154 phy0 wpan0: encryption failed: -22 [ 154.496685][ T9949] ieee802154 phy0 wpan0: encryption failed: -22 [ 154.614934][ T9958] nbd: illegal input index 2958377 [ 154.839818][ T9972] nbd: must specify a device to reconfigure [ 154.855148][ T9972] nbd: must specify a device to reconfigure [ 155.116714][ T9990] xt_CT: You must specify a L4 protocol and not use inversions on it [ 155.207122][ T9999] netlink: 'syz.3.1183': attribute type 1 has an invalid length. [ 155.319620][T10005] bond0: Caught tx_queue_len zero misconfig [ 155.375346][T10009] netlink: 'syz.4.1185': attribute type 2 has an invalid length. [ 155.571703][T10006] veth3: entered promiscuous mode [ 155.637351][T10018] bond6: invalid ARP target 0.0.0.0 specified for addition [ 155.649348][T10018] bond6: option arp_ip_target: invalid value (0) [ 155.660717][T10018] bond6 (unregistering): Released all slaves [ 155.681883][T10053] xt_TCPMSS: Only works on TCP SYN packets [ 155.714641][T10051] netlink: 'syz.3.1191': attribute type 1 has an invalid length. [ 155.780748][T10018] bond6: invalid ARP target 0.0.0.0 specified for addition [ 155.788316][T10018] bond6: option arp_ip_target: invalid value (0) [ 155.806484][T10018] bond6 (unregistering): Released all slaves [ 155.868471][T10063] veth5: entered promiscuous mode [ 155.879779][T10063] bond1: (slave veth5): Enslaving as a backup interface with a down link [ 155.967241][T10018] bond6: invalid ARP target 0.0.0.0 specified for addition [ 155.976026][T10018] bond6: option arp_ip_target: invalid value (0) [ 155.986141][T10018] bond6 (unregistering): Released all slaves [ 156.043176][T10051] 8021q: adding VLAN 0 to HW filter on device bond1 [ 156.125285][T10018] bond6: invalid ARP target 0.0.0.0 specified for addition [ 156.133275][T10018] bond6: option arp_ip_target: invalid value (0) [ 156.146155][T10018] bond6 (unregistering): Released all slaves [ 156.296514][T10018] bond6: invalid ARP target 0.0.0.0 specified for addition [ 156.298523][T10093] __nla_validate_parse: 8 callbacks suppressed [ 156.298536][T10093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1198'. [ 156.308794][T10018] bond6: option arp_ip_target: invalid value (0) [ 156.330149][T10018] bond6 (unregistering): Released all slaves [ 156.425385][T10105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1201'. [ 156.450551][T10098] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1199'. [ 156.482237][T10108] ieee802154 phy0 wpan0: encryption failed: -90 [ 156.533249][T10111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1203'. [ 156.567086][T10111] netlink: 'syz.0.1203': attribute type 1 has an invalid length. [ 156.575548][T10111] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.662564][T10121] netlink: 'syz.0.1203': attribute type 10 has an invalid length. [ 156.720999][T10126] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1208'. [ 156.890643][T10137] tipc: Enabling of bearer rejected, failed to enable media [ 157.091456][T10155] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1216'. [ 157.206525][T10161] netlink: 'syz.4.1218': attribute type 11 has an invalid length. [ 157.214950][T10161] netlink: 'syz.4.1218': attribute type 11 has an invalid length. [ 157.225116][T10161] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1218'. [ 158.123084][T10243] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 158.146014][T10243] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.721212][T10273] tipc: Enabled bearer , priority 0 [ 158.806199][T10033] tipc: Resetting bearer [ 158.813855][T10282] tipc: Enabled bearer , priority 2 [ 158.820664][T10271] tipc: Resetting bearer [ 159.924044][ T5894] tipc: Node number set to 2599702699 [ 159.977605][T10271] tipc: Disabling bearer [ 159.988508][T10294] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 159.999987][T10294] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 160.009504][T10294] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 160.104352][T10314] netlink: 'syz.4.1257': attribute type 8 has an invalid length. [ 160.146136][T10313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1256'. [ 160.202311][T10313] netlink: 'syz.2.1256': attribute type 1 has an invalid length. [ 160.239541][T10313] netlink: 'syz.2.1256': attribute type 2 has an invalid length. [ 160.311237][T10331] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1261'. [ 160.411746][T10341] sctp: [Deprecated]: syz.3.1263 (pid 10341) Use of struct sctp_assoc_value in delayed_ack socket option. [ 160.411746][T10341] Use struct sctp_sack_info instead [ 160.766420][T10367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1274'. [ 161.049995][T10394] IPVS: set_ctl: invalid protocol: 22 10.1.1.1:20002 [ 161.135531][T10401] netlink: 'syz.2.1281': attribute type 2 has an invalid length. [ 161.329147][T10419] IPVS: set_ctl: invalid protocol: 47 10.1.1.0:20003 [ 161.398352][T10422] __nla_validate_parse: 3 callbacks suppressed [ 161.398369][T10422] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1287'. [ 161.449525][T10422] 8021q: adding VLAN 0 to HW filter on device bond6 [ 161.481239][T10422] 8021q: adding VLAN 0 to HW filter on device bond6 [ 161.488611][T10422] bond6: (slave vxcan7): The slave device specified does not support setting the MAC address [ 161.500154][T10422] bond6: (slave vxcan7): Error -95 calling set_mac_address [ 161.566087][T10431] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 161.735945][T10441] ip6tnl0: Caught tx_queue_len zero misconfig [ 162.046341][T10466] netlink: 'syz.2.1299': attribute type 39 has an invalid length. [ 162.084759][T10469] netlink: 'syz.1.1301': attribute type 1 has an invalid length. [ 162.092547][T10469] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1301'. [ 162.101862][T10469] netlink: 'syz.1.1301': attribute type 1 has an invalid length. [ 162.999295][T10474] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1302'. [ 163.066417][T10475] delete_channel: no stack [ 163.423006][T10514] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1313'. [ 163.489478][T10521] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1317'. [ 163.501348][T10521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1317'. [ 163.733289][T10536] ieee802154 phy0 wpan0: encryption failed: -22 [ 163.865070][T10548] tipc: Can't bind to reserved service type 0 [ 163.873979][T10548] netlink: 'syz.4.1320': attribute type 1 has an invalid length. [ 163.912292][T10551] bond7: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 163.929374][T10551] bond7 (unregistering): Released all slaves [ 164.024809][T10558] tipc: Enabled bearer , priority 0 [ 164.170796][T10568] delete_channel: no stack [ 164.278751][T10571] delete_channel: no stack [ 164.289301][T10574] syzkaller1: entered promiscuous mode [ 164.301733][T10574] syzkaller1: entered allmulticast mode [ 164.347915][T10574] lo: Caught tx_queue_len zero misconfig [ 164.363109][T10574] netlink: 340 bytes leftover after parsing attributes in process `syz.4.1334'. [ 164.410149][T10581] sctp: [Deprecated]: syz.3.1337 (pid 10581) Use of int in maxseg socket option. [ 164.410149][T10581] Use struct sctp_assoc_value instead [ 164.881794][T10590] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 164.938264][ T24] hid-generic 0005:0007:5507.0003: hidraw0: BLUETOOTH HID v0.08 Device [syz0] on aa:aa:aa:aa:aa:aa [ 164.944356][T10611] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1348'. [ 164.961186][T10611] netlink: 212232 bytes leftover after parsing attributes in process `syz.4.1348'. [ 165.062219][T10626] netlink: 404 bytes leftover after parsing attributes in process `syz.4.1354'. [ 165.074574][T10624] netlink: 'syz.1.1353': attribute type 142 has an invalid length. [ 165.165108][ T9] tipc: Node number set to 3230385372 [ 165.446357][T10647] tipc: Resetting bearer [ 165.551801][T10655] 8021q: adding VLAN 0 to HW filter on device bond7 [ 165.584427][T10659] vlan3: entered allmulticast mode [ 165.589682][T10659] bond7: entered allmulticast mode [ 165.677301][T10664] netlink: 'syz.4.1363': attribute type 2 has an invalid length. [ 165.832099][T10683] netlink: 'syz.2.1366': attribute type 1 has an invalid length. [ 165.843335][T10683] netlink: 'syz.2.1366': attribute type 2 has an invalid length. [ 165.851536][T10682] netlink: 'syz.2.1366': attribute type 1 has an invalid length. [ 165.859800][T10682] netlink: 'syz.2.1366': attribute type 2 has an invalid length. [ 166.218562][T10710] IPVS: Unknown mcast interface: netpci0 [ 166.734133][T10739] IPVS: length: 61 != 2504 [ 166.740174][T10738] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 166.946237][T10747] netlink: 'syz.4.1388': attribute type 83 has an invalid length. [ 167.101109][T10751] __nla_validate_parse: 6 callbacks suppressed [ 167.101124][T10751] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1390'. [ 167.536567][T10779] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1399'. [ 167.583237][T10770] syzkaller0: entered promiscuous mode [ 167.599989][T10770] syzkaller0: entered allmulticast mode [ 167.607593][T10785] netlink: 'syz.3.1400': attribute type 13 has an invalid length. [ 167.622753][T10785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1400'. [ 167.767962][T10799] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 168.676199][T10797] 8021q: adding VLAN 0 to HW filter on device bond8 [ 169.356181][T10857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1421'. [ 169.528657][T10875] pim6reg1: entered promiscuous mode [ 169.534140][T10875] pim6reg1: entered allmulticast mode [ 169.542519][T10877] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1427'. [ 169.553544][T10877] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 169.571661][T10877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1427'. [ 169.607812][T10882] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1427'. [ 169.619672][T10882] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 169.758035][T10894] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1430'. [ 169.768983][T10897] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1430'. [ 169.783442][T10898] netlink: 'syz.0.1431': attribute type 12 has an invalid length. [ 169.824238][ T52] Bluetooth: hci0: command tx timeout [ 170.019013][T10916] pim6reg: entered allmulticast mode [ 170.066484][T10918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1437'. [ 170.445961][T10948] 8021q: VLANs not supported on ip_vti0 [ 170.496115][T10953] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 170.552877][T10956] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20002 [ 170.759567][T10964] netlink: 'syz.0.1450': attribute type 11 has an invalid length. [ 170.796878][T10971] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 170.911050][T10979] nbd: device at index 2 is going down [ 171.047727][T10991] nbd: couldn't find device at index 2 [ 171.337801][T11012] netlink: 'syz.4.1462': attribute type 23 has an invalid length. [ 171.366757][T11009] netlink: 'syz.2.1461': attribute type 5 has an invalid length. [ 171.402876][T11009] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 171.527266][T11018] : renamed from hsr0 (while UP) [ 171.619273][T11023] syzkaller1: entered promiscuous mode [ 171.634138][T11023] syzkaller1: entered allmulticast mode [ 171.792254][T11041] xt_policy: too many policy elements [ 171.807265][T11041] xt_policy: too many policy elements [ 171.819957][T11037] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 172.105357][T11071] __nla_validate_parse: 9 callbacks suppressed [ 172.105373][T11071] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1476'. [ 172.294924][T11080] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1479'. [ 172.379284][T11084] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1480'. [ 172.590264][T11099] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1483'. [ 172.651465][T11099] vlan4: entered allmulticast mode [ 172.692536][T11099] gretap0: entered allmulticast mode [ 172.914689][T11117] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1487'. [ 172.926592][T11121] netlink: 'syz.3.1489': attribute type 21 has an invalid length. [ 172.945857][T11121] netlink: 'syz.3.1489': attribute type 22 has an invalid length. [ 172.961882][T11121] netlink: 'syz.3.1489': attribute type 23 has an invalid length. [ 172.990283][T11121] netlink: 'syz.3.1489': attribute type 25 has an invalid length. [ 172.999952][T11121] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1489'. [ 173.193858][T11145] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20000 [ 173.312218][T11152] tipc: Enabled bearer , priority 10 [ 173.410524][T11158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1501'. [ 173.421772][T11155] netlink: 'syz.2.1499': attribute type 1 has an invalid length. [ 173.443034][T11158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1501'. [ 173.465787][T11165] netlink: 'syz.3.1502': attribute type 2 has an invalid length. [ 173.503272][T11161] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1503'. [ 173.518539][T11165] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1502'. [ 173.523009][T11166] bond9: (slave geneve2): making interface the new active one [ 173.538118][T11166] bond9: (slave geneve2): Enslaving as an active interface with an up link [ 173.552692][ T36] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 173.614926][T11172] netlink: 'syz.1.1505': attribute type 1 has an invalid length. [ 173.617176][ T36] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 173.639603][ T36] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 173.649500][ T37] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 173.714618][T11174] syzkaller0: entered allmulticast mode [ 173.735974][T11172] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 173.758865][T11189] SET target dimension over the limit! [ 173.776508][T11189] SET target dimension over the limit! [ 173.782113][T11189] SET target dimension over the limit! [ 173.788480][T11173] veth5: entered promiscuous mode [ 173.788732][T11189] SET target dimension over the limit! [ 173.799744][T11189] SET target dimension over the limit! [ 173.805796][T11189] SET target dimension over the limit! [ 173.811512][T11189] SET target dimension over the limit! [ 173.817293][T11189] SET target dimension over the limit! [ 173.823729][ T52] Bluetooth: hci0: command tx timeout [ 173.835672][T11178] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 173.851215][T11189] SET target dimension over the limit! [ 173.871310][T11189] SET target dimension over the limit! [ 174.919192][T11193] syzkaller0: entered promiscuous mode [ 174.924932][T11193] syzkaller0: entered allmulticast mode [ 174.951421][T11205] gretap0: entered promiscuous mode [ 176.517978][T11304] pim6reg1: entered promiscuous mode [ 176.524734][T11304] pim6reg1: entered allmulticast mode [ 176.849639][T11337] 8021q: adding VLAN 0 to HW filter on device bond2 [ 176.859363][T11340] netlink: 'syz.1.1551': attribute type 3 has an invalid length. [ 177.019589][T11356] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 177.038256][T11361] sctp: [Deprecated]: syz.3.1557 (pid 11361) Use of struct sctp_assoc_value in delayed_ack socket option. [ 177.038256][T11361] Use struct sctp_sack_info instead [ 177.074722][T11356] netlink: 'syz.0.1554': attribute type 10 has an invalid length. [ 177.091220][T11356] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 177.098609][T11356] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 177.111675][T11356] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 177.250791][T11352] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 177.297287][T11384] __nla_validate_parse: 44 callbacks suppressed [ 177.297303][T11384] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1564'. [ 177.411367][T11391] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.422012][T11389] netlink: 'syz.3.1565': attribute type 1 has an invalid length. [ 177.520390][T11395] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1567'. [ 177.788678][T10042] tipc: Subscription rejected, illegal request [ 177.798637][T11416] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1575'. [ 177.870499][T11418] tipc: Enabled bearer , priority 0 [ 177.890958][T11422] sctp: [Deprecated]: syz.2.1578 (pid 11422) Use of int in maxseg socket option. [ 177.890958][T11422] Use struct sctp_assoc_value instead [ 177.906191][T11418] syzkaller0: entered promiscuous mode [ 177.906212][T11418] syzkaller0: entered allmulticast mode [ 177.910690][T11418] tipc: Resetting bearer [ 177.951833][T11417] tipc: Resetting bearer [ 177.973134][T11417] tipc: Disabling bearer [ 178.064696][T11431] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1579'. [ 178.096903][T11431] openvswitch: netlink: IP tunnel dst address not specified [ 178.120598][T11437] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1583'. [ 178.149080][T11437] netlink: 15 bytes leftover after parsing attributes in process `syz.1.1583'. [ 178.170133][T11437] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1583'. [ 178.187153][T11437] netlink: 15 bytes leftover after parsing attributes in process `syz.1.1583'. [ 178.199300][T11439] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1584'. [ 178.224392][T11437] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1583'. [ 178.499466][T11466] raw_sendmsg: syz.0.1590 forgot to set AF_INET. Fix it! [ 178.672562][T11474] bridge3: entered promiscuous mode [ 178.678317][T11474] bridge3: entered allmulticast mode [ 178.692440][T11474] veth0_to_hsr: entered promiscuous mode [ 178.909250][T11482] syzkaller0: entered promiscuous mode [ 178.915247][T11482] syzkaller0: entered allmulticast mode [ 178.957286][T11482] tipc: Enabled bearer , priority 0 [ 178.966338][T11481] tipc: Resetting bearer [ 180.253023][T11481] tipc: Disabling bearer [ 180.413944][T11533] º: renamed from veth1_vlan (while UP) [ 180.446292][T11530] 0: reclassify loop, rule prio 0, protocol 800 [ 180.719061][T11552] xt_nat: multiple ranges no longer supported [ 181.245623][T11599] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.362956][T11601] netlink: 'syz.2.1638': attribute type 2 has an invalid length. [ 181.421408][T11607] tipc: Enabled bearer , priority 0 [ 181.432414][T11608] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 181.515923][T11609] tipc: Disabling bearer [ 181.845927][T11640] v: renamed from veth1_vlan (while UP) [ 181.999779][T11648] batadv_slave_0: entered promiscuous mode [ 182.017192][T11648] batman_adv: batadv0: Adding interface: macsec2 [ 182.024459][T11648] batman_adv: batadv0: The MTU of interface macsec2 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 182.052519][T11648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.064331][T11648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.075254][T11648] batman_adv: batadv0: Interface activated: macsec2 [ 182.361368][T11672] 8021q: VLANs not supported on ip_vti0 [ 182.466571][T11679] bridge0: port 3(team0) entered disabled state [ 182.481208][T11679] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.491902][T11679] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.850079][T11713] bond7 (unregistering): Released all slaves [ 182.947100][T11719] syzkaller0: entered promiscuous mode [ 182.963858][T11719] syzkaller0: entered allmulticast mode [ 182.977122][T11721] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 183.146248][T11738] __nla_validate_parse: 48 callbacks suppressed [ 183.146264][T11738] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1676'. [ 183.192029][T11738] nbd: illegal input index -8454144 [ 183.199079][T11738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1676'. [ 183.329876][T11746] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1678'. [ 183.351241][T11748] netlink: 'syz.2.1679': attribute type 1 has an invalid length. [ 183.381567][T11748] bond10: entered promiscuous mode [ 183.388676][T11748] bond10: entered allmulticast mode [ 183.395275][T11748] 8021q: adding VLAN 0 to HW filter on device bond10 [ 183.411825][T11752] netlink: 'syz.3.1680': attribute type 1 has an invalid length. [ 183.434881][T11748] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1679'. [ 183.451050][T11752] bond3: entered promiscuous mode [ 183.456289][T11752] bond3: entered allmulticast mode [ 183.461639][T11752] 8021q: adding VLAN 0 to HW filter on device bond3 [ 183.474470][T11754] macvlan2: entered promiscuous mode [ 183.479754][T11754] macvlan2: entered allmulticast mode [ 183.487797][T11754] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 183.512582][T11748] macvlan2: entered promiscuous mode [ 183.518015][T11748] macvlan2: entered allmulticast mode [ 183.525232][T11748] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 183.751421][T11760] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1683'. [ 183.835480][T11774] netlink: 'syz.2.1686': attribute type 1 has an invalid length. [ 183.936036][T11778] sctp: [Deprecated]: syz.2.1688 (pid 11778) Use of struct sctp_assoc_value in delayed_ack socket option. [ 183.936036][T11778] Use struct sctp_sack_info instead [ 184.174364][T11793] syzkaller1: entered promiscuous mode [ 184.179871][T11793] syzkaller1: entered allmulticast mode [ 184.659060][T11825] 8021q: adding VLAN 0 to HW filter on device bond4 [ 184.734297][T11825] vlan3: entered allmulticast mode [ 184.746819][T11825] bond4: entered allmulticast mode [ 185.275298][T11856] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1709'. [ 185.285551][T11856] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1709'. [ 185.294573][T11856] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1709'. [ 185.343980][T11858] syzkaller0: entered promiscuous mode [ 185.349537][T11858] syzkaller0: entered allmulticast mode [ 185.435234][T11860] netlink: 'syz.4.1711': attribute type 1 has an invalid length. [ 185.471497][T11860] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 185.737522][T11883] netlink: 'syz.3.1715': attribute type 10 has an invalid length. [ 185.760314][T11883] team0: Port device dummy0 added [ 185.780467][T11885] Unsupported ieee802154 address type: 0 [ 185.814538][T11885] team_slave_1: entered promiscuous mode [ 185.838243][T11885] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 185.976764][T11908] delete_channel: no stack [ 186.116378][T11914] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1724'. [ 186.198363][T10023] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x75 [ 186.765863][T11947] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1733'. [ 186.794575][T11947] bond7 (unregistering): Released all slaves [ 187.226910][T11978] --map-set only usable from mangle table [ 187.591752][T12004] delete_channel: no stack [ 187.697517][T12012] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 187.816502][T12016] netlink: 'syz.3.1755': attribute type 5 has an invalid length. [ 187.921677][ T9] hid-generic 0005:0007:5505.0004: item fetching failed at offset 4/5 [ 187.941068][ T9] hid-generic 0005:0007:5505.0004: probe with driver hid-generic failed with error -22 [ 188.266179][T12033] __nla_validate_parse: 4 callbacks suppressed [ 188.266195][T12033] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1762'. [ 188.282591][T12033] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1762'. [ 188.375355][T12035] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1763'. [ 188.485307][T12040] netlink: 'syz.4.1763': attribute type 9 has an invalid length. [ 189.039524][T12026] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 189.154260][T12048] netlink: 'syz.0.1766': attribute type 3 has an invalid length. [ 189.182768][T12050] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1767'. [ 189.223304][T12050] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1767'. [ 189.631812][T12093] netlink: 'syz.0.1778': attribute type 1 has an invalid length. [ 189.650215][T12093] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1778'. [ 189.671648][T12093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1778'. [ 189.738314][T12095] openvswitch: netlink: Missing key (keys=40, expected=100) [ 189.865663][T12101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1780'. [ 190.027361][T12110] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1783'. [ 190.312710][T12130] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1791'. [ 190.498339][T12130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.512815][T12130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.526717][T12130] bond0 (unregistering): Released all slaves [ 190.931958][T12176] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 191.240034][T12189] netlink: 'syz.0.1809': attribute type 1 has an invalid length. [ 191.655463][T12229] syzkaller0: entered promiscuous mode [ 191.660970][T12229] syzkaller0: entered allmulticast mode [ 191.679104][T12217] netlink: 'syz.0.1819': attribute type 1 has an invalid length. [ 191.688001][T12217] nbd: error processing sock list [ 191.693436][T12217] block nbd0: shutting down sockets [ 191.911725][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.920154][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.937092][T12242] netlink: 'syz.2.1826': attribute type 5 has an invalid length. [ 192.000831][T12250] team0: Port device dummy0 removed [ 192.024793][T12250] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 192.064821][ T5835] Bluetooth: hci4: command 0x0405 tx timeout [ 192.184391][T12256] netlink: 'syz.2.1831': attribute type 1 has an invalid length. [ 192.209507][T12250] team0: No ports can be present during mode change [ 192.881556][T12296] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 192.947055][ T5835] Bluetooth: hci0: command tx timeout [ 193.040251][T12305] bridge0: port 5(batadv2) entered blocking state [ 193.058431][T12305] bridge0: port 5(batadv2) entered disabled state [ 193.077320][T12305] batadv2: entered allmulticast mode [ 193.088208][T12305] batadv2: entered promiscuous mode [ 193.212647][T12316] netlink: 'syz.3.1844': attribute type 10 has an invalid length. [ 193.239441][T12316] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 193.320263][T12323] tipc: Enabled bearer , priority 0 [ 193.328042][T12323] syzkaller0: entered promiscuous mode [ 193.333520][T12323] syzkaller0: entered allmulticast mode [ 193.342955][T12323] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 193.363473][T12323] tipc: Resetting bearer [ 193.438647][T12328] netlink: 'syz.3.1848': attribute type 30 has an invalid length. [ 193.464625][T12322] tipc: Resetting bearer [ 193.498966][T12322] tipc: Disabling bearer [ 193.543674][ T1097] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 193.552946][ T1097] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 193.568535][T12331] __nla_validate_parse: 16 callbacks suppressed [ 193.568549][T12331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1849'. [ 193.584557][T12333] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 193.592514][T12334] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 193.607040][T12333] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1850'. [ 193.844182][T12350] bond5: option min_links: invalid value (18446744073709551614) [ 193.851850][T12350] bond5: option min_links: allowed values 0 - 2147483647 [ 193.861772][T12350] bond5 (unregistering): Released all slaves [ 193.891764][T12353] pim6reg: entered allmulticast mode [ 193.907471][T12354] pim6reg: left allmulticast mode [ 193.978080][T12358] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1857'. [ 194.004603][T12358] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1857'. [ 194.152495][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.167209][ T5835] Bluetooth: hci4: command 0x0405 tx timeout [ 194.490530][T12394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1867'. [ 194.682921][T12404] TCP: TCP_TX_DELAY enabled [ 194.752378][T12417] sctp: [Deprecated]: syz.3.1873 (pid 12417) Use of struct sctp_assoc_value in delayed_ack socket option. [ 194.752378][T12417] Use struct sctp_sack_info instead [ 194.876897][T12417] sctp: [Deprecated]: syz.3.1873 (pid 12417) Use of struct sctp_assoc_value in delayed_ack socket option. [ 194.876897][T12417] Use struct sctp_sack_info instead [ 194.991178][T12437] netlink: 'syz.1.1880': attribute type 1 has an invalid length. [ 195.040090][T12437] 8021q: adding VLAN 0 to HW filter on device bond7 [ 195.101637][T12441] bond7: (slave veth5): Enslaving as an active interface with a down link [ 195.144183][T12437] veth7: entered promiscuous mode [ 195.153499][T12437] bond7: (slave veth7): Enslaving as an active interface with a down link [ 195.165606][T12440] syzkaller0: entered promiscuous mode [ 195.171405][T12440] syzkaller0: entered allmulticast mode [ 195.187393][T12441] vlan1: entered allmulticast mode [ 195.194843][T12440] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1882'. [ 195.206204][T12441] bond7: entered allmulticast mode [ 195.212757][T12441] bond7: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 195.738345][T12492] nftables ruleset with unbound chain [ 195.912072][T12501] netdevsim netdevsim1: Direct firmware load for lookup_extent_enter failed with error -2 [ 195.962037][T12501] netdevsim netdevsim1: Falling back to sysfs fallback for: lookup_extent_enter [ 196.155637][T12518] sch_tbf: peakrate 5 is lower than or equals to rate 8 ! [ 196.227861][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 196.238871][ T5152] Bluetooth: hci3: command 0x0406 tx timeout [ 196.245217][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 196.417238][T12540] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1911'. [ 196.435618][T12540] netem: invalid attributes len -24 [ 196.440921][T12540] netem: change failed [ 196.461170][T12542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1913'. [ 196.478714][T12540] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 196.485682][T12547] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1912'. [ 196.629529][T12553] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1915'. [ 196.646381][T12556] netlink: 'syz.3.1916': attribute type 1 has an invalid length. [ 196.729406][T12563] netlink: 'syz.2.1918': attribute type 1 has an invalid length. [ 196.737311][T12563] netlink: 'syz.2.1918': attribute type 4 has an invalid length. [ 196.746485][T12563] netlink: 'syz.2.1918': attribute type 1 has an invalid length. [ 196.754677][T12563] netlink: 'syz.2.1918': attribute type 4 has an invalid length. [ 196.791528][T12561] bond5: (slave geneve3): making interface the new active one [ 196.800496][T12561] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 196.813958][T10042] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 20004 - 0 [ 196.865054][T10042] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0 [ 196.883111][T10042] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0 [ 196.899509][T12565] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 196.913737][ T917] IPVS: starting estimator thread 0... [ 196.919589][ T37] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0 [ 197.010782][T12572] dvmrp0: entered allmulticast mode [ 197.025760][T12574] IPVS: using max 26 ests per chain, 62400 per kthread [ 197.856007][T12633] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 198.855374][T12707] __nla_validate_parse: 7 callbacks suppressed [ 198.855391][T12707] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1985'. [ 198.930371][T12711] pim6reg: entered allmulticast mode [ 198.970012][T12713] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1988'. [ 199.007409][T12719] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1987'. [ 199.101551][T12721] netlink: 'syz.0.1992': attribute type 23 has an invalid length. [ 199.134403][T12725] Cannot find add_set index 2 as target [ 199.163178][T12728] xt_TCPMSS: Only works on TCP SYN packets [ 199.466081][T12744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2001'. [ 199.486219][T12744] bridge3: entered promiscuous mode [ 199.492637][T12744] bridge3: entered allmulticast mode [ 199.518533][T12744] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2001'. [ 199.560472][T12744] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2001'. [ 199.753811][T12769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2007'. [ 199.768640][T12769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2007'. [ 199.980020][T12788] macvtap1: entered promiscuous mode [ 200.002486][T12788] vlan0: entered promiscuous mode [ 200.020607][T12788] macvtap1: entered allmulticast mode [ 200.032303][T12788] vlan0: entered allmulticast mode [ 200.042781][T12797] netlink: 596 bytes leftover after parsing attributes in process `syz.3.2015'. [ 200.052277][T12788] veth0_vlan: entered allmulticast mode [ 200.095201][T12794] macvtap2: entered promiscuous mode [ 200.115614][T12794] macvtap2: entered allmulticast mode [ 200.125996][T12795] netlink: 'syz.3.2015': attribute type 29 has an invalid length. [ 200.155762][T12806] sctp: [Deprecated]: syz.2.2017 (pid 12806) Use of int in max_burst socket option deprecated. [ 200.155762][T12806] Use struct sctp_assoc_value instead [ 200.246916][T12792] syzkaller0: entered promiscuous mode [ 200.271336][T12792] syzkaller0: entered allmulticast mode [ 200.353763][T12823] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2017'. [ 201.383177][T12898] vlan6: entered allmulticast mode [ 201.388507][T12898] bridge_slave_0: entered allmulticast mode [ 201.609096][T12915] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 201.622556][T12915] bond4 (unregistering): Released all slaves [ 201.968947][T12935] geneve2: entered promiscuous mode [ 201.999976][T12935] geneve2: entered allmulticast mode [ 202.041557][T10038] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 202.093717][T10038] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 202.125023][T10038] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 202.168110][T10038] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 202.377752][T12970] syz_tun: entered promiscuous mode [ 202.479865][T12978] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 202.946747][T13015] netlink: 'syz.2.2061': attribute type 1 has an invalid length. [ 202.988266][T13015] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 203.767383][T13054] bond3 (unregistering): Released all slaves [ 203.902351][T13074] __nla_validate_parse: 18 callbacks suppressed [ 203.902368][T13074] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2076'. [ 203.990571][T13083] netlink: 'syz.4.2076': attribute type 1 has an invalid length. [ 204.024139][T13074] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2076'. [ 204.024241][T13088] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2080'. [ 204.059690][T13074] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.072180][T13074] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.083185][T13074] bond0 (unregistering): Released all slaves [ 204.265837][T13098] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2081'. [ 204.440777][T13110] tipc: Enabled bearer , priority 2 [ 204.525726][T13112] tipc: Enabled bearer , priority 0 [ 204.534081][T13112] syzkaller0: entered promiscuous mode [ 204.539689][T13112] syzkaller0: entered allmulticast mode [ 204.563486][T13112] batadv_slave_0: entered allmulticast mode [ 204.597200][T13111] tipc: Resetting bearer [ 204.656067][T13111] tipc: Disabling bearer [ 204.853761][T13118] vlan4: entered promiscuous mode [ 204.867222][T13118] vlan4: entered allmulticast mode [ 204.880037][T13118] hsr_slave_1: entered allmulticast mode [ 204.894804][T13122] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2089'. [ 205.091380][T13126] can: request_module (can-proto-0) failed. [ 205.169509][T13140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2094'. [ 205.182639][T13140] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2094'. [ 205.211617][T13143] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2095'. [ 205.213955][T13140] af_packet: tpacket_rcv: packet too big, clamped from 1628 to 712. macoff=96 [ 205.244572][T13140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2094'. [ 205.253779][T13140] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2094'. [ 205.556079][ T9] tipc: Node number set to 3801895303 [ 206.001675][T13194] openvswitch: netlink: Key type 234 is out of range max 32 [ 206.005839][ T30] audit: type=1800 audit(1762813610.892:4): pid=13168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2104" name="memory.events" dev="tmpfs" ino=2188 res=0 errno=0 [ 206.067761][T13194] 8021q: VLANs not supported on ip6gre0 [ 206.268847][T13216] netlink: 'syz.1.2119': attribute type 1 has an invalid length. [ 206.351019][T13216] 8021q: adding VLAN 0 to HW filter on device bond8 [ 206.371865][T13228] openvswitch: netlink: IP tunnel dst address not specified [ 206.453489][T13233] veth0_to_bond: entered allmulticast mode [ 206.490973][T13235] netlink: 'syz.2.2127': attribute type 16 has an invalid length. [ 206.637729][T13242] netlink: 'syz.0.2132': attribute type 2 has an invalid length. [ 206.655879][T13242] netlink: 'syz.0.2132': attribute type 1 has an invalid length. [ 206.669237][T13242] netlink: 'syz.0.2132': attribute type 1 has an invalid length. [ 206.678162][T13242] netlink: 'syz.0.2132': attribute type 12 has an invalid length. [ 206.793869][T13257] netlink: 'syz.4.2135': attribute type 29 has an invalid length. [ 206.814921][T13257] netlink: 'syz.4.2135': attribute type 29 has an invalid length. [ 207.089678][T13278] netlink: 'syz.2.2141': attribute type 1 has an invalid length. [ 207.224496][T13285] openvswitch: netlink: Message has 592 unknown bytes. [ 207.231402][T13285] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.416391][ T917] hid-generic 0005:0007:5505.0005: item fetching failed at offset 4/5 [ 207.427237][ T917] hid-generic 0005:0007:5505.0005: probe with driver hid-generic failed with error -22 [ 207.439626][T13307] netlink: 'syz.0.2151': attribute type 5 has an invalid length. [ 207.465370][T13293] IPVS: sh: FWM 3 0x00000003 - no destination available [ 207.674270][T13319] syzkaller1: entered promiscuous mode [ 207.679779][T13319] syzkaller1: entered allmulticast mode [ 207.825902][T13323] bond4: invalid ARP target 0.0.0.0 specified for addition [ 207.847531][T13323] bond4: option arp_ip_target: invalid value (0) [ 207.855275][ T3587] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 207.856478][T13332] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 207.873530][T13341] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 207.884025][T13323] bond4 (unregistering): Released all slaves [ 208.121092][T13352] syzkaller1: entered promiscuous mode [ 208.133926][T13352] syzkaller1: entered allmulticast mode [ 208.391053][T13372] tipc: Enabled bearer , priority 0 [ 208.436834][T13372] syzkaller0: entered promiscuous mode [ 208.450077][T13372] syzkaller0: entered allmulticast mode [ 208.494810][T13379] syzkaller0: entered promiscuous mode [ 208.500304][T13379] syzkaller0: entered allmulticast mode [ 208.552714][T13372] tipc: Resetting bearer [ 208.567163][T13371] tipc: Resetting bearer [ 208.606978][T13371] tipc: Disabling bearer [ 208.751338][T13392] bond3: (slave 30ªî{X¹¦): Device is not bonding slave [ 208.759754][T13392] bond3: option active_slave: invalid value (30ªî{X¹¦) [ 208.769245][T13392] bond3 (unregistering): Released all slaves [ 208.910375][T13405] tipc: Enabled bearer , priority 0 [ 208.920448][T13405] __nla_validate_parse: 85 callbacks suppressed [ 208.920462][T13405] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2184'. [ 208.936947][T13405] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 208.961260][T13405] tipc: Resetting bearer [ 208.986618][T13404] tipc: Disabling bearer [ 209.039676][T13409] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2186'. [ 209.109427][T13414] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2187'. [ 209.110156][T13415] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2187'. [ 209.199529][T13417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2188'. [ 209.466039][T13443] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2196'. [ 209.509582][T13446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2198'. [ 209.545165][T13446] xt_TPROXY: Can be used only with -p tcp or -p udp [ 209.816594][T13470] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2206'. [ 209.870394][T13472] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2207'. [ 209.896323][T13472] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 209.948518][T13477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2210'. [ 210.510243][T13521] openvswitch: netlink: nsh attr 0 has unexpected len 2181 expected 0 [ 210.528481][T13521] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.569093][T13521] 0ªî{X¹¦: left allmulticast mode [ 210.646192][T13521] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.651534][T13532] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.653969][T13521] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.676346][T13521] team_slave_1: left promiscuous mode [ 210.753129][T13521] veth0_to_hsr: left promiscuous mode [ 210.780267][T13521] tipc: Resetting bearer [ 210.834375][T13521] macsec1: left allmulticast mode [ 210.840059][T13521] geneve2: left promiscuous mode [ 210.845115][T13521] geneve2: left allmulticast mode [ 210.857142][T13521] xfrm1: left allmulticast mode [ 210.862510][T13521] bond2: left promiscuous mode [ 210.867781][T13521] bond2: left allmulticast mode [ 210.875247][T13521] bridge3: left promiscuous mode [ 210.880182][T13521] bridge3: left allmulticast mode [ 210.891575][T10049] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.912117][T10049] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.921825][T10049] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 210.954047][T10049] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.962927][T10049] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.995098][T10049] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 211.011891][T10049] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.036083][T10049] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.056652][T10049] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 211.066217][T10049] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.083746][T10049] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.117882][T10049] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 211.360651][T13569] erspan0: entered promiscuous mode [ 211.463856][T13580] validate_nla: 3 callbacks suppressed [ 211.463873][T13580] netlink: 'syz.1.2244': attribute type 4 has an invalid length. [ 211.658592][T13590] netlink: 'syz.4.2248': attribute type 2 has an invalid length. [ 211.882053][T13604] syzkaller0: entered promiscuous mode [ 211.893859][T13604] syzkaller0: entered allmulticast mode [ 211.956306][T13604] tipc: Enabled bearer , priority 0 [ 211.976651][T13600] tipc: Resetting bearer [ 212.024986][T13600] tipc: Disabling bearer [ 213.076476][T13668] tipc: Enabled bearer , priority 0 [ 213.103333][T13668] syzkaller0: entered promiscuous mode [ 213.137758][T13668] syzkaller0: entered allmulticast mode [ 213.209958][T13680] IPVS: sh: FWM 3 0x00000003 - no destination available [ 213.250153][T13679] tipc: Resetting bearer [ 213.257780][T13683] ip6gretap0: mtu less than device minimum [ 213.264576][T13684] ip6gretap0: mtu less than device minimum [ 213.270763][T13666] tipc: Resetting bearer [ 213.305249][T13666] tipc: Disabling bearer [ 213.932377][ T5835] Bluetooth: hci4: link tx timeout [ 213.938239][ T5835] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 213.946989][T13733] syzkaller0: entered promiscuous mode [ 213.947619][ T5846] Bluetooth: hci4: link tx timeout [ 213.955910][T13733] syzkaller0: entered allmulticast mode [ 213.957934][ T5846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 213.982316][T13737] netlink: 'syz.2.2288': attribute type 1 has an invalid length. [ 214.146115][T13744] __nla_validate_parse: 19 callbacks suppressed [ 214.146132][T13744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2290'. [ 214.367294][T13754] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2292'. [ 214.403968][T13754] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2292'. [ 214.448113][T13754] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2292'. [ 214.639856][T13762] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 215.256072][T13793] netlink: 'syz.2.2302': attribute type 1 has an invalid length. [ 215.506847][T13814] sctp: [Deprecated]: syz.1.2307 (pid 13814) Use of struct sctp_assoc_value in delayed_ack socket option. [ 215.506847][T13814] Use struct sctp_sack_info instead [ 215.614786][T13821] delete_channel: no stack [ 215.658147][T13816] tipc: New replicast peer: 255.255.255.255 [ 215.672889][T13816] tipc: Enabled bearer , priority 10 [ 215.800527][ T5846] Bluetooth: hci4: link tx timeout [ 215.806538][ T5846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 215.814316][ T5846] Bluetooth: hci4: link tx timeout [ 215.819492][ T5846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 215.827417][ T5846] Bluetooth: hci4: link tx timeout [ 215.832591][ T5846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 215.993956][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 216.190235][T13854] netlink: 808 bytes leftover after parsing attributes in process `syz.0.2316'. [ 216.210496][T13857] xt_HMARK: proto mask must be zero with L3 mode [ 216.218276][T13854] tipc: Enabled bearer , priority 0 [ 216.291108][T13854] syzkaller0: entered promiscuous mode [ 216.296817][T13854] syzkaller0: entered allmulticast mode [ 216.302897][T13854] tipc: Resetting bearer [ 216.310556][T13860] netlink: 'syz.1.2321': attribute type 29 has an invalid length. [ 216.319977][T13863] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2321'. [ 216.541554][T13873] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2323'. [ 216.703184][T13883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2327'. [ 216.753197][T13886] tipc: Enabled bearer , priority 0 [ 216.761334][T13886] syzkaller0: entered promiscuous mode [ 216.767397][T13886] syzkaller0: entered allmulticast mode [ 216.802426][T13886] tipc: Resetting bearer [ 216.813197][T13885] tipc: Resetting bearer [ 216.828702][T13885] tipc: Disabling bearer [ 216.935937][T13845] tipc: Resetting bearer [ 216.970968][T13899] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2332'. [ 216.983203][T13900] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2331'. [ 218.223307][T13845] tipc: Disabling bearer [ 218.392874][T13936] bond6 (unregistering): Released all slaves [ 218.689720][T13962] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 218.820438][T13975] netlink: 'syz.4.2350': attribute type 1 has an invalid length. [ 218.845903][T13975] netlink: 'syz.4.2350': attribute type 11 has an invalid length. [ 218.860699][T13977] netlink: 'syz.0.2351': attribute type 4 has an invalid length. [ 218.880905][T13979] netlink: 'syz.4.2350': attribute type 3 has an invalid length. [ 218.917611][T13981] netlink: 'syz.3.2352': attribute type 10 has an invalid length. [ 218.984697][T13986] tipc: Enabling of bearer rejected, failed to enable media [ 219.039844][T13991] batadv1: left allmulticast mode [ 219.064256][T13991] batadv1: left promiscuous mode [ 219.076721][T13991] bridge0: port 3(batadv1) entered disabled state [ 219.112410][T13991] bridge_slave_1: left allmulticast mode [ 219.118850][T13991] bridge_slave_1: left promiscuous mode [ 219.124990][T13991] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.137516][T13991] bridge_slave_0: left allmulticast mode [ 219.143330][T13991] bridge_slave_0: left promiscuous mode [ 219.153376][T13991] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.281413][T14012] __nla_validate_parse: 8 callbacks suppressed [ 219.281431][T14012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2360'. [ 219.368112][T14012] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2360'. [ 219.395769][T14014] syzkaller1: entered promiscuous mode [ 219.417241][T14014] syzkaller1: entered allmulticast mode [ 219.466867][T14018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2363'. [ 219.487996][T14018] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2363'. [ 219.507370][T14028] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2365'. [ 219.569371][T14019] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2363'. [ 219.626173][T14033] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2367'. [ 219.718596][T14045] netlink: 'syz.2.2371': attribute type 10 has an invalid length. [ 219.723394][T14044] tipc: Enabled bearer , priority 10 [ 219.760943][T14045] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.769562][T14045] bridge_slave_1: left allmulticast mode [ 219.775949][T14045] bridge_slave_1: left promiscuous mode [ 219.782243][T14045] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.784769][T14051] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2369'. [ 220.231225][T14086] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2380'. [ 220.360390][T14089] 8021q: adding VLAN 0 to HW filter on device bond4 [ 220.372367][T14089] bond0: (slave bond4): Enslaving as an active interface with an up link [ 220.416002][T14092] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2383'. [ 220.477283][T14096] pim6reg527: entered allmulticast mode [ 220.809889][T14129] netlink: 'syz.0.2396': attribute type 22 has an invalid length. [ 220.936993][T14129] netlink: 'syz.0.2396': attribute type 22 has an invalid length. [ 221.249744][T14158] netlink: 'syz.1.2405': attribute type 23 has an invalid length. [ 221.400446][T14154] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 221.432671][T14171] netlink: 'syz.4.2408': attribute type 11 has an invalid length. [ 221.450185][T14171] netlink: 'syz.4.2408': attribute type 1 has an invalid length. [ 222.788441][T14275] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.830451][T14280] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 222.837725][T14280] IPv6: NLM_F_CREATE should be set when creating new route [ 223.342186][T14310] skbuff: bad partial csum: csum=65535/127 headroom=178 headlen=65664 [ 223.415336][T14307] xt_CT: No such helper "syz1" [ 223.649952][T14325] veth5: entered promiscuous mode [ 223.678872][T14325] veth5: entered allmulticast mode [ 223.749730][T14337] ieee802154 phy0 wpan0: encryption failed: -22 [ 223.983234][T14322] netdevsim netdevsim4 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 224.312436][T14357] validate_nla: 3 callbacks suppressed [ 224.312454][T14357] netlink: 'syz.0.2468': attribute type 21 has an invalid length. [ 224.328594][T14355] __nla_validate_parse: 28 callbacks suppressed [ 224.328610][T14355] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2469'. [ 224.336202][T14357] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2468'. [ 224.500546][T14366] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2472'. [ 224.694149][T14386] IPVS: sh: FWM 3 0x00000003 - no destination available [ 224.788226][T14391] netlink: 'syz.2.2480': attribute type 1 has an invalid length. [ 224.840666][T14391] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2480'. [ 225.081479][T14415] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2487'. [ 225.105811][T14415] netlink: 'syz.4.2487': attribute type 30 has an invalid length. [ 225.115661][T14415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2487'. [ 225.283369][T14433] netlink: 'syz.0.2493': attribute type 11 has an invalid length. [ 225.312911][T14438] netlink: 'syz.4.2495': attribute type 23 has an invalid length. [ 225.346172][T14436] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 225.371501][T14436] netlink: 666 bytes leftover after parsing attributes in process `syz.1.2494'. [ 225.410838][T14445] netlink: 'syz.0.2496': attribute type 1 has an invalid length. [ 225.580479][T14449] bond5: (slave geneve3): making interface the new active one [ 225.589635][T14449] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 225.657579][T14465] netlink: 'syz.3.2499': attribute type 10 has an invalid length. [ 225.668908][ T1097] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 20004 - 0 [ 225.681627][T14465] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 225.694200][T14465] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 225.731907][T14468] netlink: 'syz.2.2501': attribute type 64 has an invalid length. [ 225.739933][T14468] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2501'. [ 225.759706][ T1097] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 20004 - 0 [ 225.769985][ T1097] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 20004 - 0 [ 225.801449][ T1097] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 20004 - 0 [ 225.882578][T14483] tipc: Failed to remove unknown binding: 66,1,1/3230385372:1837806945/1837806947 [ 225.892549][T14483] tipc: Failed to remove unknown binding: 66,1,1/3230385372:1837806945/1837806947 [ 226.513871][T14529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2518'. [ 226.535336][T14529] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2518'. [ 226.802913][T14557] netlink: 'syz.2.2526': attribute type 23 has an invalid length. [ 227.015990][T14577] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.055438][T14577] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 227.223319][T14588] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 228.032345][T14644] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.062766][T14644] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.227872][T14644] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.241278][T14644] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.312544][T14664] bond6: option arp_all_targets: invalid value (18446744073709551613) [ 228.326089][T14664] bond6 (unregistering): Released all slaves [ 228.482900][T14644] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.508477][T14644] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.866491][T14644] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.897904][T14644] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.045478][ T37] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.089268][ T37] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.153019][T10040] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.166853][T10040] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.216385][ T37] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.233779][ T37] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.256778][ T37] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.274464][ T37] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.608722][T14748] tap0: tun_chr_ioctl cmd 1074025677 [ 229.623218][T14748] tap0: linktype set to 65534 [ 229.831686][T14762] netlink: 'syz.4.2586': attribute type 2 has an invalid length. [ 229.851303][T14765] __nla_validate_parse: 12 callbacks suppressed [ 229.851320][T14765] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2587'. [ 229.929015][T14770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2586'. [ 229.986814][T14770] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 230.181447][T14788] sctp: [Deprecated]: syz.4.2591 (pid 14788) Use of struct sctp_assoc_value in delayed_ack socket option. [ 230.181447][T14788] Use struct sctp_sack_info instead [ 230.211782][T14776] netlink: zone id is out of range [ 230.218392][T14783] 8021q: adding VLAN 0 to HW filter on device bond9 [ 230.229484][T14776] netlink: zone id is out of range [ 230.246885][T14776] netlink: zone id is out of range [ 230.275910][T14776] netlink: zone id is out of range [ 230.282681][T14776] netlink: zone id is out of range [ 230.291202][T14791] tipc: Enabling of bearer rejected, failed to enable media [ 230.302309][T14793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2591'. [ 230.350232][T14776] netlink: zone id is out of range [ 230.368900][T14791] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 230.384798][T14776] netlink: zone id is out of range [ 230.394531][T14776] netlink: zone id is out of range [ 230.401320][T14791] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 230.414145][T14791] gretap2: entered promiscuous mode [ 230.419353][T14791] gretap2: entered allmulticast mode [ 230.425589][T14776] netlink: zone id is out of range [ 230.866540][T14817] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2601'. [ 230.932816][T14822] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2603'. [ 231.190444][T14841] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2607'. [ 231.250727][T14849] sch_tbf: burst 4398 is lower than device lo mtu (17233) ! [ 231.252234][T14846] netlink: 'syz.2.2609': attribute type 2 has an invalid length. [ 231.493184][T14863] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 231.504544][T14859] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2615'. [ 231.734121][T14872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2618'. [ 232.052217][T14886] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2622'. [ 232.635999][T14905] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 232.656487][T14905] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 232.664410][T14905] gretap3: entered promiscuous mode [ 232.669619][T14905] gretap3: entered allmulticast mode [ 232.752016][T14912] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2632'. [ 233.050804][T14931] sctp: [Deprecated]: syz.3.2640 (pid 14931) Use of struct sctp_assoc_value in delayed_ack socket option. [ 233.050804][T14931] Use struct sctp_sack_info instead [ 233.072245][T14925] veth0_macvtap: left promiscuous mode [ 233.211839][T14943] netlink: 'syz.3.2642': attribute type 1 has an invalid length. [ 233.382525][T14956] sctp: [Deprecated]: syz.3.2646 (pid 14956) Use of int in maxseg socket option. [ 233.382525][T14956] Use struct sctp_assoc_value instead [ 233.732503][T14982] syzkaller0: entered promiscuous mode [ 233.741652][T14984] netlink: 'syz.0.2653': attribute type 1 has an invalid length. [ 233.749705][T14982] syzkaller0: entered allmulticast mode [ 233.945991][T14997] syzkaller0: entered promiscuous mode [ 233.951495][T14997] syzkaller0: entered allmulticast mode [ 234.363023][T15035] net_ratelimit: 18 callbacks suppressed [ 234.363040][T15035] IPVS: sh: FWM 3 0x00000003 - no destination available [ 234.416682][T15041] bond0: Error: Cannot enslave bond to itself. [ 234.498236][T15047] tipc: New replicast peer: 255.255.255.255 [ 234.514190][T15047] tipc: Enabled bearer , priority 10 [ 234.530466][T15048] tipc: Enabling of bearer rejected, already enabled [ 234.624718][T15055] syz_tun: entered allmulticast mode [ 234.787941][T15072] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 235.273255][T15107] tunl0: left promiscuous mode [ 235.317901][T15107] bond0: (slave bond_slave_0): Releasing backup interface [ 235.380845][T15107] bond0: (slave bond_slave_1): Releasing backup interface [ 235.416737][T15107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.425997][T15107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.446533][T15107] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 235.489353][T15109] C: renamed from team_slave_0 (while UP) [ 235.498874][T15109] netlink: 'syz.2.2689': attribute type 1 has an invalid length. [ 235.516571][T15109] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 235.669947][T15127] IPv6: sit2: Disabled Multicast RS [ 235.709587][T15128] __nla_validate_parse: 12 callbacks suppressed [ 235.709604][T15128] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2693'. [ 235.810035][T15137] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2694'. [ 235.862325][T15144] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2696'. [ 235.919171][T15144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2696'. [ 235.924092][T15146] FAULT_INJECTION: forcing a failure. [ 235.924092][T15146] name failslab, interval 1, probability 0, space 0, times 1 [ 235.929185][T15144] netlink: 'syz.2.2696': attribute type 5 has an invalid length. [ 235.940957][T15146] CPU: 1 UID: 0 PID: 15146 Comm: syz.0.2699 Not tainted syzkaller #0 PREEMPT(full) [ 235.940979][T15146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 235.940989][T15146] Call Trace: [ 235.940997][T15146] [ 235.941004][T15146] dump_stack_lvl+0x189/0x250 [ 235.941032][T15146] ? __pfx____ratelimit+0x10/0x10 [ 235.941054][T15146] ? __pfx_dump_stack_lvl+0x10/0x10 [ 235.941076][T15146] ? __pfx__printk+0x10/0x10 [ 235.941099][T15146] ? __pfx___might_resched+0x10/0x10 [ 235.941121][T15146] should_fail_ex+0x414/0x560 [ 235.941150][T15146] should_failslab+0xa8/0x100 [ 235.941170][T15146] __kmalloc_node_track_caller_noprof+0xcd/0x800 [ 235.941193][T15146] ? kasprintf+0xd4/0x120 [ 235.941219][T15146] kvasprintf+0xdc/0x190 [ 235.941243][T15146] ? __pfx_kvasprintf+0x10/0x10 [ 235.941260][T15146] ? do_raw_spin_lock+0x121/0x290 [ 235.941296][T15146] kasprintf+0xd4/0x120 [ 235.941316][T15146] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 235.941341][T15146] ? __pfx_kasprintf+0x10/0x10 [ 235.941359][T15146] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 235.941401][T15146] ieee80211_alloc_led_names+0xa4/0x2b0 [ 235.941424][T15146] ieee80211_alloc_hw_nm+0x18f2/0x1f60 [ 235.941454][T15146] mac80211_hwsim_new_radio+0x1eb/0x5220 [ 235.941492][T15146] ? stack_depot_save_flags+0x40/0x860 [ 235.941515][T15146] ? netlink_deliver_tap+0x19c/0x1b0 [ 235.941529][T15146] ? netlink_unicast+0x7a1/0x9e0 [ 235.941549][T15146] ? netlink_sendmsg+0x805/0xb30 [ 235.941563][T15146] ? __sock_sendmsg+0x21c/0x270 [ 235.941588][T15146] ? kasan_save_track+0x4f/0x80 [ 235.941608][T15146] ? kasan_save_track+0x3e/0x80 [ 235.941631][T15146] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 235.941656][T15146] ? __nla_validate_parse+0x2400/0x2d40 [ 235.941674][T15146] ? __x64_sys_sendmsg+0x19b/0x260 [ 235.941699][T15146] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 235.941729][T15146] ? __pfx___nla_validate_parse+0x10/0x10 [ 235.941761][T15146] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 235.941791][T15146] ? rcu_is_watching+0x15/0xb0 [ 235.941813][T15146] ? __nla_parse+0x40/0x60 [ 235.941835][T15146] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 235.941864][T15146] genl_family_rcv_msg_doit+0x215/0x300 [ 235.941892][T15146] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 235.941925][T15146] ? bpf_lsm_capable+0x9/0x20 [ 235.941944][T15146] ? security_capable+0x7e/0x2e0 [ 235.941972][T15146] genl_rcv_msg+0x60e/0x790 [ 235.941998][T15146] ? __pfx_genl_rcv_msg+0x10/0x10 [ 235.942017][T15146] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 235.942042][T15146] ? __asan_memcpy+0x40/0x70 [ 235.942062][T15146] ? __pfx_ref_tracker_free+0x10/0x10 [ 235.942085][T15146] netlink_rcv_skb+0x208/0x470 [ 235.942100][T15146] ? __lock_acquire+0xab9/0xd20 [ 235.942115][T15146] ? __pfx_genl_rcv_msg+0x10/0x10 [ 235.942137][T15146] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 235.942179][T15146] ? down_read+0x1ad/0x2e0 [ 235.942198][T15146] genl_rcv+0x28/0x40 [ 235.942215][T15146] netlink_unicast+0x82f/0x9e0 [ 235.942246][T15146] ? __pfx_netlink_unicast+0x10/0x10 [ 235.942271][T15146] ? netlink_sendmsg+0x642/0xb30 [ 235.942285][T15146] ? skb_put+0x11b/0x210 [ 235.942305][T15146] netlink_sendmsg+0x805/0xb30 [ 235.942331][T15146] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.942351][T15146] ? aa_sock_msg_perm+0xf1/0x1d0 [ 235.942379][T15146] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 235.942395][T15146] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.942412][T15146] __sock_sendmsg+0x21c/0x270 [ 235.942437][T15146] ____sys_sendmsg+0x505/0x830 [ 235.942461][T15146] ? __pfx_____sys_sendmsg+0x10/0x10 [ 235.942488][T15146] ? import_iovec+0x74/0xa0 [ 235.942511][T15146] ___sys_sendmsg+0x21f/0x2a0 [ 235.942532][T15146] ? __pfx____sys_sendmsg+0x10/0x10 [ 235.942586][T15146] ? __fget_files+0x2a/0x420 [ 235.942602][T15146] ? __fget_files+0x3a0/0x420 [ 235.942628][T15146] __x64_sys_sendmsg+0x19b/0x260 [ 235.942649][T15146] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 235.942677][T15146] ? __pfx_ksys_write+0x10/0x10 [ 235.942702][T15146] ? do_syscall_64+0xbe/0xfa0 [ 235.942729][T15146] do_syscall_64+0xfa/0xfa0 [ 235.942749][T15146] ? lockdep_hardirqs_on+0x9c/0x150 [ 235.942770][T15146] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.942787][T15146] ? clear_bhb_loop+0x60/0xb0 [ 235.942807][T15146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.942824][T15146] RIP: 0033:0x7f86c378f6c9 [ 235.942846][T15146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.942860][T15146] RSP: 002b:00007f86c455b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 235.942884][T15146] RAX: ffffffffffffffda RBX: 00007f86c39e5fa0 RCX: 00007f86c378f6c9 [ 235.942897][T15146] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 235.942908][T15146] RBP: 00007f86c455b090 R08: 0000000000000000 R09: 0000000000000000 [ 235.942918][T15146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 235.942928][T15146] R13: 00007f86c39e6038 R14: 00007f86c39e5fa0 R15: 00007ffd01537fe8 [ 235.942958][T15146] [ 236.439762][T15144] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2696'. [ 236.467145][T15144] geneve3: entered promiscuous mode [ 236.472456][T15144] geneve3: entered allmulticast mode [ 236.516832][T10042] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 256 - 0 [ 236.528158][T10042] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 256 - 0 [ 236.557664][T10042] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 256 - 0 [ 236.645423][T10042] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 256 - 0 [ 236.690868][T15166] syzkaller0: entered promiscuous mode [ 236.706236][T15166] syzkaller0: entered allmulticast mode [ 236.743876][T15166] tipc: Enabled bearer , priority 0 [ 236.767964][T15166] netlink: 'syz.0.2704': attribute type 10 has an invalid length. [ 236.804165][T15164] tipc: Resetting bearer [ 236.872216][T15164] tipc: Disabling bearer [ 236.885891][T15184] FAULT_INJECTION: forcing a failure. [ 236.885891][T15184] name failslab, interval 1, probability 0, space 0, times 0 [ 236.905976][T15184] CPU: 0 UID: 0 PID: 15184 Comm: syz.3.2711 Not tainted syzkaller #0 PREEMPT(full) [ 236.905999][T15184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 236.906009][T15184] Call Trace: [ 236.906016][T15184] [ 236.906023][T15184] dump_stack_lvl+0x189/0x250 [ 236.906058][T15184] ? __pfx____ratelimit+0x10/0x10 [ 236.906079][T15184] ? __pfx_dump_stack_lvl+0x10/0x10 [ 236.906100][T15184] ? __pfx__printk+0x10/0x10 [ 236.906122][T15184] ? __pfx___might_resched+0x10/0x10 [ 236.906145][T15184] should_fail_ex+0x414/0x560 [ 236.906175][T15184] should_failslab+0xa8/0x100 [ 236.906195][T15184] __kmalloc_node_track_caller_noprof+0xcd/0x800 [ 236.906218][T15184] ? kasprintf+0xd4/0x120 [ 236.906245][T15184] kvasprintf+0xdc/0x190 [ 236.906269][T15184] ? __pfx_kvasprintf+0x10/0x10 [ 236.906287][T15184] ? do_raw_spin_lock+0x121/0x290 [ 236.906321][T15184] kasprintf+0xd4/0x120 [ 236.906341][T15184] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 236.906365][T15184] ? __pfx_kasprintf+0x10/0x10 [ 236.906383][T15184] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 236.906416][T15184] ieee80211_alloc_led_names+0x141/0x2b0 [ 236.906440][T15184] ieee80211_alloc_hw_nm+0x18f2/0x1f60 [ 236.906469][T15184] mac80211_hwsim_new_radio+0x1eb/0x5220 [ 236.906507][T15184] ? stack_depot_save_flags+0x40/0x860 [ 236.906529][T15184] ? netlink_deliver_tap+0x19c/0x1b0 [ 236.906545][T15184] ? netlink_unicast+0x7a1/0x9e0 [ 236.906564][T15184] ? netlink_sendmsg+0x805/0xb30 [ 236.906579][T15184] ? __sock_sendmsg+0x21c/0x270 [ 236.906604][T15184] ? kasan_save_track+0x4f/0x80 [ 236.906624][T15184] ? kasan_save_track+0x3e/0x80 [ 236.906642][T15184] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 236.906666][T15184] ? __nla_validate_parse+0x2400/0x2d40 [ 236.906683][T15184] ? __x64_sys_sendmsg+0x19b/0x260 [ 236.906709][T15184] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 236.906739][T15184] ? __pfx___nla_validate_parse+0x10/0x10 [ 236.906771][T15184] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 236.906801][T15184] ? rcu_is_watching+0x15/0xb0 [ 236.906824][T15184] ? __nla_parse+0x40/0x60 [ 236.906846][T15184] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 236.906874][T15184] genl_family_rcv_msg_doit+0x215/0x300 [ 236.906902][T15184] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 236.906929][T15184] ? bpf_lsm_capable+0x9/0x20 [ 236.906945][T15184] ? security_capable+0x7e/0x2e0 [ 236.906967][T15184] genl_rcv_msg+0x60e/0x790 [ 236.906989][T15184] ? __pfx_genl_rcv_msg+0x10/0x10 [ 236.907004][T15184] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 236.907025][T15184] ? __asan_memcpy+0x40/0x70 [ 236.907050][T15184] ? __pfx_ref_tracker_free+0x10/0x10 [ 236.907070][T15184] netlink_rcv_skb+0x208/0x470 [ 236.907082][T15184] ? __lock_acquire+0xab9/0xd20 [ 236.907096][T15184] ? __pfx_genl_rcv_msg+0x10/0x10 [ 236.907112][T15184] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 236.907152][T15184] ? down_read+0x1ad/0x2e0 [ 236.907171][T15184] genl_rcv+0x28/0x40 [ 236.907187][T15184] netlink_unicast+0x82f/0x9e0 [ 236.907218][T15184] ? __pfx_netlink_unicast+0x10/0x10 [ 236.907242][T15184] ? netlink_sendmsg+0x642/0xb30 [ 236.907257][T15184] ? skb_put+0x11b/0x210 [ 236.907278][T15184] netlink_sendmsg+0x805/0xb30 [ 236.907302][T15184] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.907320][T15184] ? aa_sock_msg_perm+0xf1/0x1d0 [ 236.907345][T15184] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 236.907362][T15184] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.907380][T15184] __sock_sendmsg+0x21c/0x270 [ 236.907405][T15184] ____sys_sendmsg+0x505/0x830 [ 236.907430][T15184] ? __pfx_____sys_sendmsg+0x10/0x10 [ 236.907457][T15184] ? import_iovec+0x74/0xa0 [ 236.907481][T15184] ___sys_sendmsg+0x21f/0x2a0 [ 236.907503][T15184] ? __pfx____sys_sendmsg+0x10/0x10 [ 236.907558][T15184] ? __fget_files+0x2a/0x420 [ 236.907573][T15184] ? __fget_files+0x3a0/0x420 [ 236.907599][T15184] __x64_sys_sendmsg+0x19b/0x260 [ 236.907620][T15184] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 236.907647][T15184] ? __pfx_ksys_write+0x10/0x10 [ 236.907673][T15184] ? do_syscall_64+0xbe/0xfa0 [ 236.907699][T15184] do_syscall_64+0xfa/0xfa0 [ 236.907719][T15184] ? lockdep_hardirqs_on+0x9c/0x150 [ 236.907741][T15184] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.907759][T15184] ? clear_bhb_loop+0x60/0xb0 [ 236.907778][T15184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.907794][T15184] RIP: 0033:0x7eff1df8f6c9 [ 236.907809][T15184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.907823][T15184] RSP: 002b:00007eff1ed43038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 236.907841][T15184] RAX: ffffffffffffffda RBX: 00007eff1e1e5fa0 RCX: 00007eff1df8f6c9 [ 236.907854][T15184] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 236.907865][T15184] RBP: 00007eff1ed43090 R08: 0000000000000000 R09: 0000000000000000 [ 236.907875][T15184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 236.907885][T15184] R13: 00007eff1e1e6038 R14: 00007eff1e1e5fa0 R15: 00007ffe00b94c28 [ 236.907917][T15184] [ 236.910973][T15185] netlink: 'syz.1.2712': attribute type 83 has an invalid length. [ 236.955167][T15187] tipc: Enabled bearer , priority 0 [ 237.144976][T15197] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2717'. [ 237.168446][T15195] netlink: 404 bytes leftover after parsing attributes in process `syz.3.2716'. [ 237.171311][T15198] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2716'. [ 237.224504][T15197] netlink: 'syz.1.2717': attribute type 14 has an invalid length. [ 237.533949][T15197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2717'. [ 237.641270][T15215] netlink: 'syz.3.2720': attribute type 10 has an invalid length. [ 238.200869][T15186] tipc: Disabling bearer [ 238.344459][T15197] netlink: 'syz.1.2717': attribute type 14 has an invalid length. [ 238.359759][T15197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2717'. [ 238.604976][T15263] netlink: 'syz.1.2736': attribute type 58 has an invalid length. [ 238.756819][T15271] openvswitch: netlink: IP tunnel dst address not specified [ 239.062775][T15301] netlink: 'syz.4.2747': attribute type 1 has an invalid length. [ 239.089670][T15301] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 239.215271][T15319] netlink: 'syz.0.2751': attribute type 10 has an invalid length. [ 239.935521][T15381] Cannot find add_set index 0 as target [ 239.969044][T15386] 8021q: VLANs not supported on ip6tnl0 [ 240.342929][T15417] FAULT_INJECTION: forcing a failure. [ 240.342929][T15417] name failslab, interval 1, probability 0, space 0, times 0 [ 240.360339][T15417] CPU: 0 UID: 0 PID: 15417 Comm: syz.2.2778 Not tainted syzkaller #0 PREEMPT(full) [ 240.360363][T15417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 240.360374][T15417] Call Trace: [ 240.360381][T15417] [ 240.360389][T15417] dump_stack_lvl+0x189/0x250 [ 240.360416][T15417] ? __pfx____ratelimit+0x10/0x10 [ 240.360439][T15417] ? __pfx_dump_stack_lvl+0x10/0x10 [ 240.360461][T15417] ? __pfx__printk+0x10/0x10 [ 240.360482][T15417] ? __pfx___might_resched+0x10/0x10 [ 240.360502][T15417] ? fs_reclaim_acquire+0x7d/0x100 [ 240.360532][T15417] should_fail_ex+0x414/0x560 [ 240.360562][T15417] should_failslab+0xa8/0x100 [ 240.360581][T15417] __kmalloc_cache_noprof+0x6f/0x6f0 [ 240.360604][T15417] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 240.360624][T15417] ? device_create+0x12f/0x2f0 [ 240.360652][T15417] device_create+0x12f/0x2f0 [ 240.360676][T15417] ? timer_init_key+0x171/0x2d0 [ 240.360701][T15417] ? __pfx_device_create+0x10/0x10 [ 240.360722][T15417] ? ieee80211_alloc_hw_nm+0x18fa/0x1f60 [ 240.360750][T15417] mac80211_hwsim_new_radio+0x41b/0x5220 [ 240.360790][T15417] ? netlink_deliver_tap+0x19c/0x1b0 [ 240.360806][T15417] ? netlink_unicast+0x7a1/0x9e0 [ 240.360824][T15417] ? netlink_sendmsg+0x805/0xb30 [ 240.360839][T15417] ? __sock_sendmsg+0x21c/0x270 [ 240.360863][T15417] ? kasan_save_track+0x4f/0x80 [ 240.360881][T15417] ? kasan_save_track+0x3e/0x80 [ 240.360903][T15417] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 240.360928][T15417] ? __nla_validate_parse+0x2400/0x2d40 [ 240.360946][T15417] ? __x64_sys_sendmsg+0x19b/0x260 [ 240.360980][T15417] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 240.361011][T15417] ? __pfx___nla_validate_parse+0x10/0x10 [ 240.361040][T15417] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 240.361071][T15417] ? rcu_is_watching+0x15/0xb0 [ 240.361093][T15417] ? __nla_parse+0x40/0x60 [ 240.361114][T15417] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 240.361144][T15417] genl_family_rcv_msg_doit+0x215/0x300 [ 240.361172][T15417] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 240.361204][T15417] ? bpf_lsm_capable+0x9/0x20 [ 240.361222][T15417] ? security_capable+0x7e/0x2e0 [ 240.361251][T15417] genl_rcv_msg+0x60e/0x790 [ 240.361276][T15417] ? __pfx_genl_rcv_msg+0x10/0x10 [ 240.361294][T15417] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 240.361319][T15417] ? __asan_memcpy+0x40/0x70 [ 240.361338][T15417] ? __pfx_ref_tracker_free+0x10/0x10 [ 240.361361][T15417] netlink_rcv_skb+0x208/0x470 [ 240.361375][T15417] ? __lock_acquire+0xab9/0xd20 [ 240.361391][T15417] ? __pfx_genl_rcv_msg+0x10/0x10 [ 240.361410][T15417] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 240.361454][T15417] ? down_read+0x1ad/0x2e0 [ 240.361471][T15417] genl_rcv+0x28/0x40 [ 240.361488][T15417] netlink_unicast+0x82f/0x9e0 [ 240.361520][T15417] ? __pfx_netlink_unicast+0x10/0x10 [ 240.361544][T15417] ? netlink_sendmsg+0x642/0xb30 [ 240.361559][T15417] ? skb_put+0x11b/0x210 [ 240.361580][T15417] netlink_sendmsg+0x805/0xb30 [ 240.361607][T15417] ? __pfx_netlink_sendmsg+0x10/0x10 [ 240.361628][T15417] ? aa_sock_msg_perm+0xf1/0x1d0 [ 240.361653][T15417] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 240.361669][T15417] ? __pfx_netlink_sendmsg+0x10/0x10 [ 240.361687][T15417] __sock_sendmsg+0x21c/0x270 [ 240.361712][T15417] ____sys_sendmsg+0x505/0x830 [ 240.361737][T15417] ? __pfx_____sys_sendmsg+0x10/0x10 [ 240.361766][T15417] ? import_iovec+0x74/0xa0 [ 240.361791][T15417] ___sys_sendmsg+0x21f/0x2a0 [ 240.361813][T15417] ? __pfx____sys_sendmsg+0x10/0x10 [ 240.361872][T15417] ? __fget_files+0x2a/0x420 [ 240.361888][T15417] ? __fget_files+0x3a0/0x420 [ 240.361916][T15417] __x64_sys_sendmsg+0x19b/0x260 [ 240.361938][T15417] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 240.361974][T15417] ? __pfx_ksys_write+0x10/0x10 [ 240.362002][T15417] ? do_syscall_64+0xbe/0xfa0 [ 240.362029][T15417] do_syscall_64+0xfa/0xfa0 [ 240.362049][T15417] ? lockdep_hardirqs_on+0x9c/0x150 [ 240.362072][T15417] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.362089][T15417] ? clear_bhb_loop+0x60/0xb0 [ 240.362110][T15417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.362127][T15417] RIP: 0033:0x7f61e858f6c9 [ 240.362143][T15417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.362157][T15417] RSP: 002b:00007f61e93c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 240.362176][T15417] RAX: ffffffffffffffda RBX: 00007f61e87e5fa0 RCX: 00007f61e858f6c9 [ 240.362189][T15417] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 240.362201][T15417] RBP: 00007f61e93c2090 R08: 0000000000000000 R09: 0000000000000000 [ 240.362211][T15417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 240.362222][T15417] R13: 00007f61e87e6038 R14: 00007f61e87e5fa0 R15: 00007fffb1e7ab98 [ 240.362255][T15417] [ 240.766050][T15428] IPVS: sh: FWM 3 0x00000003 - no destination available [ 240.860629][T15430] __nla_validate_parse: 121 callbacks suppressed [ 240.860645][T15430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2781'. [ 240.877687][T15430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2781'. [ 240.893205][T15430] gtp1: entered promiscuous mode [ 240.920508][T15430] gtp1: entered allmulticast mode [ 240.960855][T15434] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2784'. [ 240.989471][T15432] syzkaller0: entered promiscuous mode [ 240.995521][T15432] syzkaller0: entered allmulticast mode [ 241.019836][T15439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2781'. [ 241.021184][T15430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2781'. [ 241.142975][T15444] validate_nla: 36 callbacks suppressed [ 241.142992][T15444] netlink: 'syz.4.2785': attribute type 14 has an invalid length. [ 241.367190][T15466] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 241.801220][T15483] net veth1_virt_wifi .: renamed from virt_wifi0 [ 242.059295][T15494] IPv6: sit2: Disabled Multicast RS [ 242.069772][T15499] IPVS: sh: FWM 3 0x00000003 - no destination available [ 242.073322][T15494] sit2: entered allmulticast mode [ 242.092447][T15500] netlink: 'syz.0.2797': attribute type 4 has an invalid length. [ 242.101596][T15501] netlink: 'syz.0.2797': attribute type 4 has an invalid length. [ 242.370215][T15522] netlink: 'syz.0.2801': attribute type 10 has an invalid length. [ 242.378641][T15522] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2801'. [ 242.690852][T15545] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2806'. [ 242.716974][T15545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2806'. [ 242.726205][T15545] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2806'. [ 243.027292][T15575] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 243.139159][T15586] IPVS: sh: FWM 3 0x00000003 - no destination available [ 243.289981][T15592] bridge0: port 1(ipvlan2) entered blocking state [ 243.297114][T15592] bridge0: port 1(ipvlan2) entered disabled state [ 243.303770][T15593] netlink: 'syz.2.2815': attribute type 5 has an invalid length. [ 243.314729][T15592] ipvlan2: entered allmulticast mode [ 243.320153][T15592] bridge0: entered allmulticast mode [ 243.328903][T15592] ipvlan2: left allmulticast mode [ 243.334799][T15592] bridge0: left allmulticast mode [ 243.499621][T15610] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 243.727835][T15616] rdma_op ffff888027b099f0 conn xmit_rdma 0000000000000000 [ 243.737657][T15618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2822'. [ 243.908994][T15636] IPVS: sh: FWM 3 0x00000003 - no destination available [ 243.968753][T15640] bridge7: entered promiscuous mode [ 243.975432][T15638] netlink: 'syz.2.2828': attribute type 11 has an invalid length. [ 244.003729][T15640] bridge7: entered allmulticast mode [ 244.172645][T15653] syzkaller0: entered promiscuous mode [ 244.178230][T15653] syzkaller0: entered allmulticast mode [ 245.315097][T15699] xt_ecn: cannot match TCP bits for non-tcp packets [ 245.540128][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 245.549435][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 245.569728][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 245.580649][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 245.595915][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 245.776120][T15715] bridge_slave_0: default FDB implementation only supports local addresses [ 245.961225][T15717] __nla_validate_parse: 7 callbacks suppressed [ 245.961240][T15717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2854'. [ 246.174545][T15734] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2859'. [ 246.214814][T15737] netlink: 348 bytes leftover after parsing attributes in process `syz.3.2860'. [ 246.245783][T15734] syzkaller0: entered promiscuous mode [ 246.251274][T15734] syzkaller0: entered allmulticast mode [ 246.470423][T15704] chnl_net:caif_netlink_parms(): no params data found [ 246.516095][T15756] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 246.675703][T15765] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2868'. [ 246.772207][T15737] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2860'. [ 246.824506][T15704] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.857443][T15704] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.869691][T15704] bridge_slave_0: entered allmulticast mode [ 246.879296][T15704] bridge_slave_0: entered promiscuous mode [ 246.894213][T15704] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.901494][T15704] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.911473][T15704] bridge_slave_1: entered allmulticast mode [ 246.922524][T15704] bridge_slave_1: entered promiscuous mode [ 246.942899][T15777] delete_channel: no stack [ 247.019753][T15786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2874'. [ 247.065176][T15704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.087268][T15704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.169597][T15794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2879'. [ 247.189280][T15704] team0: Port device team_slave_0 added [ 247.198383][T15704] team0: Port device team_slave_1 added [ 247.296890][T15704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.305613][T15704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 247.349808][T15704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.401677][T15704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.424031][T15704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 247.492927][T15704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.645152][T15704] hsr_slave_0: entered promiscuous mode [ 247.651737][T15704] hsr_slave_1: entered promiscuous mode [ 247.662493][T15704] debugfs: 'hsr0' already exists in 'hsr' [ 247.668554][T15704] Cannot create hsr debugfs directory [ 247.673969][ T5835] Bluetooth: hci3: command tx timeout [ 247.802366][T15835] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 247.809719][T15835] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 247.995870][T15840] syzkaller1: entered promiscuous mode [ 248.013682][T15840] syzkaller1: entered allmulticast mode [ 248.191891][T15704] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.210640][T15704] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 248.222409][T15704] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 248.320800][T15704] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.324334][T15858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2895'. [ 248.340130][T15704] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 248.355171][T15704] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 248.415595][T15862] tipc: Enabling of bearer rejected, already enabled [ 248.428671][T15862] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 248.436298][T15862] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 248.445605][T15862] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 248.527856][T15704] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.543646][T15704] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 248.555856][T15704] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 248.573123][T15862] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 248.590576][T15873] tipc: Resetting bearer [ 248.679250][T15704] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.692863][T15704] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 248.706440][T15704] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 248.727880][T15879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2903'. [ 248.816138][T15884] netlink: 'syz.3.2904': attribute type 1 has an invalid length. [ 248.882433][T15884] bond6: (slave gretap2): making interface the new active one [ 248.890752][T15884] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 248.961138][T15704] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 248.973299][T15704] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 248.993468][T15892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2907'. [ 249.019683][T15704] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 249.067868][T15704] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 249.134263][T15901] x_tables: duplicate underflow at hook 2 [ 249.181699][T15909] Cannot find set identified by id 0 to match [ 249.241561][T15909] syzkaller1: entered promiscuous mode [ 249.249345][T15909] syzkaller1: entered allmulticast mode [ 249.487977][T15704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.514475][T15704] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.537044][ T3587] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.544217][ T3587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.577002][ T3587] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.584161][ T3587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.627111][T15929] caif0: mtu less than device minimum [ 249.723492][T15932] FAULT_INJECTION: forcing a failure. [ 249.723492][T15932] name failslab, interval 1, probability 0, space 0, times 0 [ 249.740602][T15932] CPU: 1 UID: 0 PID: 15932 Comm: syz.4.2921 Not tainted syzkaller #0 PREEMPT(full) [ 249.740626][T15932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 249.740648][T15932] Call Trace: [ 249.740656][T15932] [ 249.740664][T15932] dump_stack_lvl+0x189/0x250 [ 249.740691][T15932] ? __pfx____ratelimit+0x10/0x10 [ 249.740714][T15932] ? __pfx_dump_stack_lvl+0x10/0x10 [ 249.740736][T15932] ? __pfx__printk+0x10/0x10 [ 249.740756][T15932] ? __pfx___might_resched+0x10/0x10 [ 249.740774][T15932] ? fs_reclaim_acquire+0x7d/0x100 [ 249.740803][T15932] should_fail_ex+0x414/0x560 [ 249.740833][T15932] should_failslab+0xa8/0x100 [ 249.740860][T15932] kmem_cache_alloc_noprof+0x74/0x6e0 [ 249.740882][T15932] ? __asan_memcpy+0x40/0x70 [ 249.740900][T15932] ? __kernfs_new_node+0xd7/0x7e0 [ 249.740926][T15932] __kernfs_new_node+0xd7/0x7e0 [ 249.740945][T15932] ? __lock_acquire+0xab9/0xd20 [ 249.740970][T15932] ? __pfx___kernfs_new_node+0x10/0x10 [ 249.740992][T15932] ? kernfs_root+0x1c/0x230 [ 249.741018][T15932] ? kernfs_root+0x1c/0x230 [ 249.741038][T15932] ? kernfs_root+0x1c/0x230 [ 249.741062][T15932] kernfs_new_node+0x102/0x210 [ 249.741089][T15932] kernfs_create_link+0xa7/0x200 [ 249.741109][T15932] sysfs_do_create_link_sd+0x83/0x110 [ 249.741131][T15932] device_add_class_symlinks+0x1cf/0x240 [ 249.741156][T15932] device_add+0x475/0xb50 [ 249.741179][T15932] device_create+0x25b/0x2f0 [ 249.741203][T15932] ? timer_init_key+0x171/0x2d0 [ 249.741228][T15932] ? __pfx_device_create+0x10/0x10 [ 249.741250][T15932] ? ieee80211_alloc_hw_nm+0x18fa/0x1f60 [ 249.741280][T15932] mac80211_hwsim_new_radio+0x41b/0x5220 [ 249.741311][T15932] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 249.741335][T15932] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.741366][T15932] ? kasan_save_track+0x4f/0x80 [ 249.741386][T15932] ? kasan_save_track+0x3e/0x80 [ 249.741409][T15932] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 249.741435][T15932] ? __nla_validate_parse+0x2400/0x2d40 [ 249.741452][T15932] ? __x64_sys_sendmsg+0x19b/0x260 [ 249.741481][T15932] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 249.741511][T15932] ? __pfx___nla_validate_parse+0x10/0x10 [ 249.741544][T15932] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 249.741580][T15932] ? rcu_is_watching+0x15/0xb0 [ 249.741601][T15932] ? __nla_parse+0x40/0x60 [ 249.741623][T15932] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 249.741653][T15932] genl_family_rcv_msg_doit+0x215/0x300 [ 249.741681][T15932] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 249.741716][T15932] ? bpf_lsm_capable+0x9/0x20 [ 249.741735][T15932] ? security_capable+0x7e/0x2e0 [ 249.741763][T15932] genl_rcv_msg+0x60e/0x790 [ 249.741790][T15932] ? __pfx_genl_rcv_msg+0x10/0x10 [ 249.741809][T15932] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 249.741854][T15932] netlink_rcv_skb+0x208/0x470 [ 249.741869][T15932] ? __lock_acquire+0xab9/0xd20 [ 249.741886][T15932] ? __pfx_genl_rcv_msg+0x10/0x10 [ 249.741908][T15932] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 249.741951][T15932] ? down_read+0x1ad/0x2e0 [ 249.741970][T15932] genl_rcv+0x28/0x40 [ 249.741987][T15932] netlink_unicast+0x82f/0x9e0 [ 249.742017][T15932] ? __pfx_netlink_unicast+0x10/0x10 [ 249.742043][T15932] ? netlink_sendmsg+0x642/0xb30 [ 249.742058][T15932] ? skb_put+0x11b/0x210 [ 249.742079][T15932] netlink_sendmsg+0x805/0xb30 [ 249.742105][T15932] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.742125][T15932] ? aa_sock_msg_perm+0xf1/0x1d0 [ 249.742151][T15932] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 249.742167][T15932] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.742185][T15932] __sock_sendmsg+0x21c/0x270 [ 249.742211][T15932] ____sys_sendmsg+0x505/0x830 [ 249.742234][T15932] ? __pfx_____sys_sendmsg+0x10/0x10 [ 249.742260][T15932] ? import_iovec+0x74/0xa0 [ 249.742286][T15932] ___sys_sendmsg+0x21f/0x2a0 [ 249.742308][T15932] ? __pfx____sys_sendmsg+0x10/0x10 [ 249.742360][T15932] ? __fget_files+0x2a/0x420 [ 249.742377][T15932] ? __fget_files+0x3a0/0x420 [ 249.742405][T15932] __x64_sys_sendmsg+0x19b/0x260 [ 249.742426][T15932] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 249.742455][T15932] ? __pfx_ksys_write+0x10/0x10 [ 249.742481][T15932] ? do_syscall_64+0xbe/0xfa0 [ 249.742509][T15932] do_syscall_64+0xfa/0xfa0 [ 249.742530][T15932] ? lockdep_hardirqs_on+0x9c/0x150 [ 249.742552][T15932] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.742568][T15932] ? clear_bhb_loop+0x60/0xb0 [ 249.742589][T15932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.742606][T15932] RIP: 0033:0x7f4adf38f6c9 [ 249.742622][T15932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.742635][T15932] RSP: 002b:00007f4ae01b5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 249.742653][T15932] RAX: ffffffffffffffda RBX: 00007f4adf5e5fa0 RCX: 00007f4adf38f6c9 [ 249.742664][T15932] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 249.742675][T15932] RBP: 00007f4ae01b5090 R08: 0000000000000000 R09: 0000000000000000 [ 249.742685][T15932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 249.742695][T15932] R13: 00007f4adf5e6038 R14: 00007f4adf5e5fa0 R15: 00007ffe41514bc8 [ 249.742726][T15932] [ 249.755451][ T5835] Bluetooth: hci3: command tx timeout [ 249.975586][T15938] ------------[ cut here ]------------ [ 250.085357][T15940] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 250.089299][T15938] WARNING: CPU: 1 PID: 15938 at net/mac80211/rate.c:53 rate_control_rate_init+0x64a/0x6e0 [ 250.089334][T15938] Modules linked in: [ 250.175445][T15704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.180722][T15938] CPU: 1 UID: 0 PID: 15938 Comm: syz.0.2923 Not tainted syzkaller #0 PREEMPT(full) [ 250.180747][T15938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 250.180760][T15938] RIP: 0010:rate_control_rate_init+0x64a/0x6e0 [ 250.180786][T15938] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 58 18 8c 00 cc e8 42 da 02 f7 90 0f 0b 90 eb e1 e8 37 da 02 f7 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 90 00 00 00 [ 250.242049][T15704] veth0_vlan: entered promiscuous mode [ 250.245501][T15938] RSP: 0018:ffffc90003f8ef60 EFLAGS: 00010287 [ 250.328178][T15704] veth1_vlan: entered promiscuous mode [ 250.329546][T15938] [ 250.369014][T15938] RAX: ffffffff8abd2c59 RBX: ffff88805a370000 RCX: 0000000000080000 [ 250.377078][T15938] RDX: ffffc90004952000 RSI: 0000000000000413 RDI: 0000000000000414 [ 250.384333][T15704] veth0_macvtap: entered promiscuous mode [ 250.385208][T15938] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8abd2773 [ 250.399023][T15938] R10: dffffc0000000000 R11: ffffed100b46e031 R12: 1ffff1100b46e00a [ 250.399290][T15704] veth1_macvtap: entered promiscuous mode [ 250.407181][T15938] R13: ffff888078128e80 R14: 0000000000000001 R15: ffffffff8abd2773 [ 250.420803][T15938] FS: 00007f86c455b6c0(0000) GS:ffff88812623b000(0000) knlGS:0000000000000000 [ 250.429807][T15938] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 250.436454][T15938] CR2: 0000200000001080 CR3: 0000000032664000 CR4: 00000000003526f0 [ 250.444527][T15938] Call Trace: [ 250.447804][T15938] [ 250.450739][T15938] rate_control_rate_init_all_links+0x109/0x1a0 [ 250.457521][T15938] sta_apply_auth_flags+0x1c2/0x400 [ 250.462740][T15938] sta_apply_parameters+0xe27/0x1570 [ 250.468525][T15938] ieee80211_add_station+0x424/0x6a0 [ 250.473911][T15938] rdev_add_station+0x108/0x290 [ 250.478788][T15938] nl80211_new_station+0x1755/0x1b70 [ 250.480888][T15704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.484189][T15938] ? __pfx_nl80211_new_station+0x10/0x10 [ 250.496988][T15938] ? netdev_run_todo+0xe1d/0xea0 [ 250.501964][T15938] ? nl80211_pre_doit+0x4f1/0x930 [ 250.506612][T15704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.507059][T15938] genl_family_rcv_msg_doit+0x215/0x300 [ 250.519774][T15938] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 250.525700][T10049] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.525937][T15938] ? bpf_lsm_capable+0x9/0x20 [ 250.536288][T10049] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.539271][T15938] ? security_capable+0x7e/0x2e0 [ 250.539310][T15938] genl_rcv_msg+0x60e/0x790 [ 250.558024][T15938] ? __pfx_genl_rcv_msg+0x10/0x10 [ 250.563066][T15938] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 250.568547][T15938] ? __pfx_nl80211_new_station+0x10/0x10 [ 250.574263][T15938] ? __pfx_nl80211_post_doit+0x10/0x10 [ 250.579731][T15938] ? __asan_memcpy+0x40/0x70 [ 250.584409][T15938] ? __pfx_ref_tracker_free+0x10/0x10 [ 250.589794][T15938] netlink_rcv_skb+0x208/0x470 [ 250.594624][T15938] ? __lock_acquire+0xab9/0xd20 [ 250.599485][T15938] ? __pfx_genl_rcv_msg+0x10/0x10 [ 250.604563][T15938] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 250.609849][T15938] ? down_read+0x1ad/0x2e0 [ 250.614323][T15938] genl_rcv+0x28/0x40 [ 250.618307][T15938] netlink_unicast+0x82f/0x9e0 [ 250.623068][T15938] ? __pfx_netlink_unicast+0x10/0x10 [ 250.628414][T15938] ? netlink_sendmsg+0x642/0xb30 [ 250.633335][T15938] ? skb_put+0x11b/0x210 [ 250.637617][T15938] netlink_sendmsg+0x805/0xb30 [ 250.642381][T15938] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.647719][T15938] ? aa_sock_msg_perm+0xf1/0x1d0 [ 250.652668][T15938] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 250.658233][T15938] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.663506][T15938] __sock_sendmsg+0x21c/0x270 [ 250.668218][T15938] ____sys_sendmsg+0x505/0x830 [ 250.672972][T15938] ? __pfx_____sys_sendmsg+0x10/0x10 [ 250.678293][T15938] ? import_iovec+0x74/0xa0 [ 250.682811][T15938] ___sys_sendmsg+0x21f/0x2a0 [ 250.687527][T15938] ? __pfx____sys_sendmsg+0x10/0x10 [ 250.692728][T15938] ? __fget_files+0x2a/0x420 [ 250.697327][T15938] ? __fget_files+0x3a0/0x420 [ 250.701996][T15938] __x64_sys_sendmsg+0x19b/0x260 [ 250.707186][T15938] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 250.712667][T15938] ? do_syscall_64+0xbe/0xfa0 [ 250.717494][T15938] do_syscall_64+0xfa/0xfa0 [ 250.722087][T15938] ? lockdep_hardirqs_on+0x9c/0x150 [ 250.727336][T15938] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.733385][T15938] ? clear_bhb_loop+0x60/0xb0 [ 250.738109][T15938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.744044][T15938] RIP: 0033:0x7f86c378f6c9 [ 250.748462][T15938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.768397][T15938] RSP: 002b:00007f86c455b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 250.776857][T15938] RAX: ffffffffffffffda RBX: 00007f86c39e5fa0 RCX: 00007f86c378f6c9 [ 250.785018][T15938] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005 [ 250.792992][T15938] RBP: 00007f86c3811f91 R08: 0000000000000000 R09: 0000000000000000 [ 250.801021][T15938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.809037][T15938] R13: 00007f86c39e6038 R14: 00007f86c39e5fa0 R15: 00007ffd01537fe8 [ 250.817062][T15938] [ 250.820087][T15938] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 250.827346][T15938] CPU: 1 UID: 0 PID: 15938 Comm: syz.0.2923 Not tainted syzkaller #0 PREEMPT(full) [ 250.836688][T15938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 250.846720][T15938] Call Trace: [ 250.849982][T15938] [ 250.852898][T15938] dump_stack_lvl+0x99/0x250 [ 250.857483][T15938] ? __asan_memcpy+0x40/0x70 [ 250.862061][T15938] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.867240][T15938] ? __pfx__printk+0x10/0x10 [ 250.871826][T15938] vpanic+0x237/0x6d0 [ 250.875795][T15938] ? __pfx_vpanic+0x10/0x10 [ 250.880303][T15938] panic+0xb9/0xc0 [ 250.884016][T15938] ? __pfx_panic+0x10/0x10 [ 250.888428][T15938] __warn+0x31b/0x4b0 [ 250.892395][T15938] ? rate_control_rate_init+0x64a/0x6e0 [ 250.897920][T15938] ? rate_control_rate_init+0x64a/0x6e0 [ 250.903445][T15938] report_bug+0x2be/0x4f0 [ 250.907763][T15938] ? rate_control_rate_init+0x64a/0x6e0 [ 250.913288][T15938] ? rate_control_rate_init+0x64a/0x6e0 [ 250.918812][T15938] ? rate_control_rate_init+0x64c/0x6e0 [ 250.924340][T15938] handle_bug+0x84/0x160 [ 250.928567][T15938] exc_invalid_op+0x1a/0x50 [ 250.933050][T15938] asm_exc_invalid_op+0x1a/0x20 [ 250.937883][T15938] RIP: 0010:rate_control_rate_init+0x64a/0x6e0 [ 250.944019][T15938] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 58 18 8c 00 cc e8 42 da 02 f7 90 0f 0b 90 eb e1 e8 37 da 02 f7 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 90 00 00 00 [ 250.963609][T15938] RSP: 0018:ffffc90003f8ef60 EFLAGS: 00010287 [ 250.969666][T15938] RAX: ffffffff8abd2c59 RBX: ffff88805a370000 RCX: 0000000000080000 [ 250.977621][T15938] RDX: ffffc90004952000 RSI: 0000000000000413 RDI: 0000000000000414 [ 250.985580][T15938] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8abd2773 [ 250.993533][T15938] R10: dffffc0000000000 R11: ffffed100b46e031 R12: 1ffff1100b46e00a [ 251.001488][T15938] R13: ffff888078128e80 R14: 0000000000000001 R15: ffffffff8abd2773 [ 251.009441][T15938] ? rate_control_rate_init+0x163/0x6e0 [ 251.014973][T15938] ? rate_control_rate_init+0x163/0x6e0 [ 251.020503][T15938] ? rate_control_rate_init+0x649/0x6e0 [ 251.026042][T15938] rate_control_rate_init_all_links+0x109/0x1a0 [ 251.032271][T15938] sta_apply_auth_flags+0x1c2/0x400 [ 251.037457][T15938] sta_apply_parameters+0xe27/0x1570 [ 251.042737][T15938] ieee80211_add_station+0x424/0x6a0 [ 251.048009][T15938] rdev_add_station+0x108/0x290 [ 251.052849][T15938] nl80211_new_station+0x1755/0x1b70 [ 251.058131][T15938] ? __pfx_nl80211_new_station+0x10/0x10 [ 251.063748][T15938] ? netdev_run_todo+0xe1d/0xea0 [ 251.068689][T15938] ? nl80211_pre_doit+0x4f1/0x930 [ 251.073709][T15938] genl_family_rcv_msg_doit+0x215/0x300 [ 251.079259][T15938] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 251.085319][T15938] ? bpf_lsm_capable+0x9/0x20 [ 251.089987][T15938] ? security_capable+0x7e/0x2e0 [ 251.094915][T15938] genl_rcv_msg+0x60e/0x790 [ 251.099407][T15938] ? __pfx_genl_rcv_msg+0x10/0x10 [ 251.104414][T15938] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 251.109768][T15938] ? __pfx_nl80211_new_station+0x10/0x10 [ 251.115383][T15938] ? __pfx_nl80211_post_doit+0x10/0x10 [ 251.120824][T15938] ? __asan_memcpy+0x40/0x70 [ 251.125408][T15938] ? __pfx_ref_tracker_free+0x10/0x10 [ 251.130772][T15938] netlink_rcv_skb+0x208/0x470 [ 251.135517][T15938] ? __lock_acquire+0xab9/0xd20 [ 251.140351][T15938] ? __pfx_genl_rcv_msg+0x10/0x10 [ 251.145363][T15938] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 251.150650][T15938] ? down_read+0x1ad/0x2e0 [ 251.155048][T15938] genl_rcv+0x28/0x40 [ 251.159012][T15938] netlink_unicast+0x82f/0x9e0 [ 251.163767][T15938] ? __pfx_netlink_unicast+0x10/0x10 [ 251.169037][T15938] ? netlink_sendmsg+0x642/0xb30 [ 251.173959][T15938] ? skb_put+0x11b/0x210 [ 251.178195][T15938] netlink_sendmsg+0x805/0xb30 [ 251.182950][T15938] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.188220][T15938] ? aa_sock_msg_perm+0xf1/0x1d0 [ 251.193147][T15938] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 251.198414][T15938] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.203680][T15938] __sock_sendmsg+0x21c/0x270 [ 251.208345][T15938] ____sys_sendmsg+0x505/0x830 [ 251.213095][T15938] ? __pfx_____sys_sendmsg+0x10/0x10 [ 251.218370][T15938] ? import_iovec+0x74/0xa0 [ 251.222864][T15938] ___sys_sendmsg+0x21f/0x2a0 [ 251.227526][T15938] ? __pfx____sys_sendmsg+0x10/0x10 [ 251.232736][T15938] ? __fget_files+0x2a/0x420 [ 251.237310][T15938] ? __fget_files+0x3a0/0x420 [ 251.241980][T15938] __x64_sys_sendmsg+0x19b/0x260 [ 251.246910][T15938] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 251.252367][T15938] ? do_syscall_64+0xbe/0xfa0 [ 251.257034][T15938] do_syscall_64+0xfa/0xfa0 [ 251.261522][T15938] ? lockdep_hardirqs_on+0x9c/0x150 [ 251.266705][T15938] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.272753][T15938] ? clear_bhb_loop+0x60/0xb0 [ 251.277414][T15938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.283287][T15938] RIP: 0033:0x7f86c378f6c9 [ 251.287684][T15938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.307278][T15938] RSP: 002b:00007f86c455b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 251.315687][T15938] RAX: ffffffffffffffda RBX: 00007f86c39e5fa0 RCX: 00007f86c378f6c9 [ 251.323646][T15938] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005 [ 251.331612][T15938] RBP: 00007f86c3811f91 R08: 0000000000000000 R09: 0000000000000000 [ 251.339568][T15938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 251.347527][T15938] R13: 00007f86c39e6038 R14: 00007f86c39e5fa0 R15: 00007ffd01537fe8 [ 251.355501][T15938] [ 251.358779][T15938] Kernel Offset: disabled [ 251.363083][T15938] Rebooting in 86400 seconds..