last executing test programs: 42.526706541s ago: executing program 1 (id=2091): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x40, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x40}}, 0x8044) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)={0x3c, 0x0, 0x222, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x13, 0x28}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44800}, 0x4000000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r3, 0x84, 0x84, &(0x7f0000002140)=""/4092, &(0x7f0000001080)=0xffc) r4 = socket$inet(0x2, 0x3, 0x4) r5 = socket(0x10, 0x3, 0x0) r6 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000480)={'erspan0\x00'}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0xff}}}}]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f00000003c0)) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x38, r9, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x38}}, 0x8000) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r8) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x4) sendto$packet(r5, &(0x7f0000000540)="ae6de1f51d277f29c794fe22ce2ff0aeef1bac0a3852f7898a09c2b4989bce0b8e1d0af9428854dc21c0559da62c8a0d95c82505a0e501d2dbff23fd21bc81c40fe856584be31aea3050d5420d829e0390d1ff32197c40", 0x57, 0x4000, &(0x7f0000000640)={0x11, 0x8, r10, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14) getpeername$packet(r5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000006c0)=0x14) sendmsg$ETHTOOL_MSG_DEBUG_GET(r5, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x190, r9, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x4}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x8808}, 0x40810) 33.949950799s ago: executing program 1 (id=2091): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x40, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x40}}, 0x8044) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)={0x3c, 0x0, 0x222, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x13, 0x28}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44800}, 0x4000000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r3, 0x84, 0x84, &(0x7f0000002140)=""/4092, &(0x7f0000001080)=0xffc) r4 = socket$inet(0x2, 0x3, 0x4) r5 = socket(0x10, 0x3, 0x0) r6 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000480)={'erspan0\x00'}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0xff}}}}]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f00000003c0)) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x38, r9, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x38}}, 0x8000) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r8) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x4) sendto$packet(r5, &(0x7f0000000540)="ae6de1f51d277f29c794fe22ce2ff0aeef1bac0a3852f7898a09c2b4989bce0b8e1d0af9428854dc21c0559da62c8a0d95c82505a0e501d2dbff23fd21bc81c40fe856584be31aea3050d5420d829e0390d1ff32197c40", 0x57, 0x4000, &(0x7f0000000640)={0x11, 0x8, r10, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14) getpeername$packet(r5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000006c0)=0x14) sendmsg$ETHTOOL_MSG_DEBUG_GET(r5, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x190, r9, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x4}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x8808}, 0x40810) 25.69909582s ago: executing program 1 (id=2091): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x40, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x40}}, 0x8044) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)={0x3c, 0x0, 0x222, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x13, 0x28}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44800}, 0x4000000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r3, 0x84, 0x84, &(0x7f0000002140)=""/4092, &(0x7f0000001080)=0xffc) r4 = socket$inet(0x2, 0x3, 0x4) r5 = socket(0x10, 0x3, 0x0) r6 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000480)={'erspan0\x00'}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0xff}}}}]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f00000003c0)) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x38, r9, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x38}}, 0x8000) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r8) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x4) sendto$packet(r5, &(0x7f0000000540)="ae6de1f51d277f29c794fe22ce2ff0aeef1bac0a3852f7898a09c2b4989bce0b8e1d0af9428854dc21c0559da62c8a0d95c82505a0e501d2dbff23fd21bc81c40fe856584be31aea3050d5420d829e0390d1ff32197c40", 0x57, 0x4000, &(0x7f0000000640)={0x11, 0x8, r10, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14) getpeername$packet(r5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000006c0)=0x14) sendmsg$ETHTOOL_MSG_DEBUG_GET(r5, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x190, r9, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x4}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x8808}, 0x40810) 16.802093705s ago: executing program 1 (id=2091): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x40, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x40}}, 0x8044) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)={0x3c, 0x0, 0x222, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x13, 0x28}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44800}, 0x4000000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r3, 0x84, 0x84, &(0x7f0000002140)=""/4092, &(0x7f0000001080)=0xffc) r4 = socket$inet(0x2, 0x3, 0x4) r5 = socket(0x10, 0x3, 0x0) r6 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000480)={'erspan0\x00'}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0xff}}}}]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f00000003c0)) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x38, r9, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x38}}, 0x8000) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r8) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x4) sendto$packet(r5, &(0x7f0000000540)="ae6de1f51d277f29c794fe22ce2ff0aeef1bac0a3852f7898a09c2b4989bce0b8e1d0af9428854dc21c0559da62c8a0d95c82505a0e501d2dbff23fd21bc81c40fe856584be31aea3050d5420d829e0390d1ff32197c40", 0x57, 0x4000, &(0x7f0000000640)={0x11, 0x8, r10, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14) getpeername$packet(r5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000006c0)=0x14) sendmsg$ETHTOOL_MSG_DEBUG_GET(r5, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x190, r9, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x4}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x8808}, 0x40810) 7.864323349s ago: executing program 1 (id=2091): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x40, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x40}}, 0x8044) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)={0x3c, 0x0, 0x222, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x13, 0x28}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44800}, 0x4000000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r3, 0x84, 0x84, &(0x7f0000002140)=""/4092, &(0x7f0000001080)=0xffc) r4 = socket$inet(0x2, 0x3, 0x4) r5 = socket(0x10, 0x3, 0x0) r6 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000480)={'erspan0\x00'}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0xff}}}}]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f00000003c0)) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x38, r9, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x38}}, 0x8000) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r8) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x4) sendto$packet(r5, &(0x7f0000000540)="ae6de1f51d277f29c794fe22ce2ff0aeef1bac0a3852f7898a09c2b4989bce0b8e1d0af9428854dc21c0559da62c8a0d95c82505a0e501d2dbff23fd21bc81c40fe856584be31aea3050d5420d829e0390d1ff32197c40", 0x57, 0x4000, &(0x7f0000000640)={0x11, 0x8, r10, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14) getpeername$packet(r5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000006c0)=0x14) sendmsg$ETHTOOL_MSG_DEBUG_GET(r5, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x190, r9, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x4}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x8808}, 0x40810) 3.509689565s ago: executing program 4 (id=2635): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000040)) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'vlan0\x00', 0x10}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'erspan0\x00', 0x200}) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0xf, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x6}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x20}, @IPSET_ATTR_COMMENT={0xc, 0x1a, 'erspan0\x00'}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xff}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000001}, 0x800) sendmsg$nl_route(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x480}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=@ipv4_getaddr={0x54, 0x16, 0x20, 0x70bd2d, 0x25dfdbfe, {0x2, 0x78, 0x8, 0xc8, r4}, [@IFA_LABEL={0x14, 0x3, 'veth1_vlan\x00'}, @IFA_LABEL={0x14, 0x3, 'ip6tnl0\x00'}, @IFA_LABEL={0x14, 0x3, 'veth1_to_batadv\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x94) r5 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000500)={'wlan1\x00'}) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000540)="30882e3b80f6662e6bd3b647da49172886f8126c41a4d833866c63fc1b53286f0e", 0x21}, {&(0x7f0000000580)="b3f871c9a2852c2bc4e1949d803b40c9dfe064b9efca8504a68829648c44e84c5a18521e257c6b740e29a93fb022af0db21801a2f070c590dcc21f4a58a9ab9c7c9238fbd915932d9fbe270af5ddedfc0c88a246883ac807d47f57d241eb8efced1862d5c9517cd78ff835959397461ddab7f7fc8be05cecb696b168e5", 0x7d}], 0x2) r6 = socket(0x4, 0x800, 0x3) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r2) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000c80)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000700)={0x534, r7, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x3, 0x28}}}}, [@NL80211_ATTR_BSS_SELECT={0x24, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x9}}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x1ff}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x8c, 0xfa, "cdc0177164d9c41eea9e6478fbcf8983d9e6679f09536970c3a15ac01fec31014ed61414989347a0eedad20b68db4d2e8acf999ae4bc4dcb5ea416acb1bc7da3906b4940df7160425dd64d212b71c261e9759131feb07ee82cdf85d8f54892b04c41b0bcee0f0169a6fcec8c579e44d88f4fee541ffa3fc6bbe7ba6f5e66cc30ed850d5b74a27c65"}, @NL80211_ATTR_FILS_ERP_RRK={0xce, 0xfc, "0fd1c56cfc879e7d97df8f5083803bfd0afc51a0217e265dcf251db957b0faa8c72b000a589ce900725b345e3e12ba1398eb747064b35c25f52fd9202c0f068fceb2b0d3e427d605768ca05c9eaededb2da2824357142f1cbdd7f5020850e5339bb41c7c5e1e83d294135e7437c7a2a178695e8086c4afcae6f3a023a64c91d6f5512ca5f39ddec8d6df71130e7276ce4d3d7c4aaf0a25357f2d52583fdafb5fb510e1b38f04df1e97ed29183e5f505128a847ddedbf174f305bf407e3c7cf61ca30bb910e3ab0a4023c"}, @NL80211_ATTR_FILS_ERP_REALM={0xda, 0xfa, "0d3ff322716a4791dd1ea654e97ab5e3449e38ee8838f7b717d5e8fece2d78e69a31f0f124b8a59bd2cebff17d4e06a483a7e7e481983cd18f33fb0f53c854d93d0426f926486246fc3036e5eb951e83d7b7baf5c758e472c910d29c5749eff2add997fef822307a96a2f9d26baa2765b1745705c4681bffdb5e79d6166de89bdb4cd6839176893d298134529fd10bc6ffd5d6d672ddceaacb25fb5ebd9b32b13c71c4d64f4c0fce40f4ed4817cb16613852dfd7b07f7f0a9a9951bd5a0230bf3b5f63d6f893214694e2be158df2a68586f3690d48d6"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xf, 0xf9, "4584d7b59167b4251f2f5f"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xf, 0xf9, "38b84200a0b9005d30a63d"}, @NL80211_ATTR_FILS_ERP_RRK={0xe3, 0xfc, "ea98f1d302721475c2ecdb69f51b75545ae7265bc27abeb102a1bf01140967e6e493744d0320cb3f5706b0bb093709c61525008a8c0974f3673072d69d2e0b84481312312461099d14ec0949317e39173a267ab72b25f8e02f280fbcbde1deb13324f86ab2b668e5db700cbe29afe733cb3d298652171c6f40528ab442ca10f4959efa6561380b97653a4a5cfd7338f86da0b9d20a2ff4201db9d1b8d3dbcf16c25075f755993b9dd0e9de530eb844f9dc3c7b1d73384d812a75532b5bd2dfaf4dadc2448b0ca4753973ba7ecd6192ff72eb3348fdcf9898d3343f5cc36ccd"}, @NL80211_ATTR_FILS_ERP_RRK={0x25, 0xfc, "77f2d4c6e45725b13f78208bd20dc6d3a8f1c4720a9c3988d45314a117c3866469"}, @NL80211_ATTR_FILS_ERP_RRK={0x83, 0xfc, "06317e4631163de571e13aeb543400e9dc6ceac391d632d565e7b03ddf55f9ffdb10681df6c6460451e33e632c801fef1a5988316e5c02ee49a358a54e5b37569d6d90d5b503a5206cd5050cd9196a29effc5547562e49ec2272b6d6ffd57cf93773c422506b1380a3a96e7fbbc46edbeca1958265bb2f4d3ef7b3ef3eff43"}, @NL80211_ATTR_FILS_ERP_RRK={0x9f, 0xfc, "7d837bfd9e0a9acb60499e24524c75fd939ae01b6d75f051549ebd4df25ea7cd7c453d50390b04ada285369cfeabf2d3743a733fa3b2e3242447bfd683379124a5b387ada60c80d4b349d0ecb6fc6e4b486fc4bf860cc1190787df2ece32cca9fee0aa9def21bef9c14215c0e3f1b59150a85d13e27732b96052b4059e368c6681ee7305e37465dd7505bc8237f1b9a595ed36789328cfcd12498e"}], @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x10, 0x0, 0x1, 0x0, {0x0, 0x5, 0x0, 0x4}, 0x0, 0x5, 0xf9}}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_BSS_SELECT={0x38, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x400}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xf, 0xc8}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x2}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x2, 0x2}}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0xe}]}]}, 0x534}, 0x1, 0x0, 0x0, 0x4}, 0x8000) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000cc0)={0x4, 0xfffd, 0x0, 0x89f, 0x1, 0x3ff, 0x3, 0xfffffffb, 0x0}, &(0x7f0000000d00)=0x20) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000d40)=@assoc_value={r9, 0x4}, 0x8) sendmsg$DEVLINK_CMD_SB_GET(r3, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x38, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x84) recvmsg(r5, &(0x7f0000001080)={&(0x7f0000000e80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000001040)=[{&(0x7f0000000f00)=""/21, 0x15}, {&(0x7f0000000f40)=""/254, 0xfe}], 0x2}, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f00000010c0), 0x400880, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000001100)={'hsr0\x00'}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x84006800}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x38, 0x1403, 0x500, 0x70bd27, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048014}, 0x800) r10 = socket(0xb, 0x3, 0x8) sendmsg$NFT_BATCH(r2, &(0x7f0000001b00)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001280)={{0x14}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x3}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_NEWTABLE={0x1c8, 0x0, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xb8, 0x6, "3006619c40512b92f4639bc9aa0cc9ba5143feca21d33d40f0cb4f5b75620c51275ce5290c04b8b6f6e7f88928be452a5ca842b826aefd781ba1ed70596a03c85aeceaa2af21c2f95b760eeee8dbdd7c7fd99303163724486eea4c350ebc598e764739f1aa7178585a51ff8e3553f4f4ddf33581ee27ad3eba0b08d33b7a379e7a5648a88ba5903302702c5efde44b716aab0437859387c98e904f193b4e31c3e5a69bc122921f0e91db32820605217317cde727"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xcf, 0x6, "a59e48f962611e1f418a60dab2f169e71508ada1462153832339d71dcc9b6ecd9dbc653a9c202a59c092fb7a26d5387d01d2f1bf83ae4f1cf11c9835d43b658efd242bf6810aa83a82951ad2fdb7db7d310768a706681a1d7426aea734902fe3e36f5e84d3ca04c8c7a1797b0182c1f1c7ca9e6e64a0c42e44698f2d5951087b5047aacfc20b3ca9b2cd276a6e9115da5921031fccdb15f84b38c4cc1c88b6a6a737828952b3d546ab87e5a750bee2fbb43868df378a402e6d3c192087f7783f4953252ef4ec7a4e4ec2bc"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELRULE={0x4c, 0x8, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x19}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x88}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWRULE={0x2a4, 0x6, 0xa, 0x600, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_RULE_USERDATA={0xa3, 0x7, 0x1, 0x0, "a3be14400d690949d206075e1db778734e4d7c7f36aa291dee99438336fc36b76f2e50dfbcb82fcf401bed8ee2fcdb16048d110f8e9cac99215d4898cd1651510b2866696e4e2e9227e3f55b9d16932106d531c19440af00840c5bf3129d45f31f52fd62f4b0a3042ecdda1e1f14c26d0c010c0d5406011d998fda7a10bb6fb78c9e5e47a6db84dcf6ae09933383e794eb1698a39866afa2be29f74ed964f1"}, @NFTA_RULE_USERDATA={0xd4, 0x7, 0x1, 0x0, "a3235a454c69e2380851d607cbab584daa07af6c47de220a2469b2ebec4fcd548e5f63b28f11225ae9340785d74ba9e548325955905a2e4cd0ab6eb93bac7d1b3fb5b4171b867546debf5894d77cdfddf434367e7312d95bf1d32b58fd0a4027e6e70028371868ea9c3497c1efcaf0a7ff3639dea8fdbf706d582faac93daadc48721650fb62a277869792211fb9c6d2c0dc70873c41120636b333d12880dc2b5911d4bd7d73f28ea94ccc31fd9ee770211f52aa9245778e322b56da1096509264daf60617032d943360c51d0ad9e026"}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0x42, 0x7, 0x1, 0x0, "20396ea6234a5b4ecec177ec77c14568a11ee9ae5972813533f88b3218695210e58ffb6ba642272162612d71cc1df3908252ff842d9002201d24cd920a10"}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x84}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0xc}]}, @NFTA_RULE_USERDATA={0x9e, 0x7, 0x1, 0x0, "a7859d20c18bb0e5c1419502d8f2d8d007ed9e594446989c646720d5520a6b37a38234585c7faeca74cc285fcc40e7861d2819b7ac24df399661d8b6b81f62ab131c321a3c09dc3c93a58070ad94bfbb0e8c9db9fc71c39f70a2ad361de4bd2760d5d45980e7d1c04c0be0720b08f0baf3265a09affcf0018179d359474079af52743a894dff644ca28e15fcc7910ff5f92799c217f117aa3fff"}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELFLOWTABLE={0xe0, 0x18, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_FLOWTABLE_HOOK={0xcc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'batadv0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'vlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}]}]}]}, @NFT_MSG_NEWRULE={0xa8, 0x6, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0x5f, 0x7, 0x1, 0x0, "7f74357d7b4e6a014e505470a3a699ca9b5511457ab769e3d2f9a37308b1891adf73b973e5f8f48ba84f9d8433d35f17602b37b99082e79b95287cfd4f8a88f3f28c00b092576296cac89fb77745cba528880cecc26b8405570efa"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELFLOWTABLE={0x44, 0x18, 0xa, 0x100, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_FLOWTABLE_HOOK={0x24, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELTABLE={0x114, 0x2, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xd2, 0x6, "b8acc88e84bf51f3a9def317efe7409ee6c7818f50ff65930877cc8b94a6a1b3e5451c370c812aac1d1c0d35682f6b5f20af598f945aa9ca70829452a149e0741152fb23ba253390093592e1850b4e6b386176f3fefbe9f77b2cb5c41c6207810d6f3413e6eb6d069dfe4bf8454068a9dd2b2a54ef275a90e191e645f62af3c7feeb9ef1c2e27c6f275ce1686c7136f8d2806dc6eb4a39254e0c887b7ca85a01aa09e2fa3066cf9c07f8bdaba508011aa15f345b6382556079043a604c98bd986c8b47458ae97392837aadbb45ca"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSET={0x34, 0xb, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x39}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x810}}, 0x4008041) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000001b80), r10) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000001c80)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x4000a000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x48, r11, 0x22590ad0daa595f6, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xf}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x84) r12 = syz_init_net_socket$ax25(0x3, 0x3, 0x196) accept4$ax25(r12, 0x0, &(0x7f0000001cc0), 0xc1800) 2.514715431s ago: executing program 4 (id=2647): syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @random="1b7aa3cfb27d", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, r0, 0x0, 0x2, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f00000002c0)={@local, @multicast, @val={@val={0x88a8, 0x4, 0x1, 0x2}, {0x8100, 0x7, 0x0, 0x2}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x66, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010104, @local}, {{0x0, 0x0, r0, 0x41424344, 0x0, 0x6, 0xb, 0x0, 0x8000, 0x0, 0x0, {[@mss={0x2, 0x4, 0x499}, @md5sig={0x1d, 0x12, "910000000000006f00"}]}}}}}}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wg0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000000c0)=0x40, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000280)=0x20, 0x4) bind$xdp(r2, &(0x7f00000001c0)={0x2c, 0x0, r3}, 0x2a) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000080)=0x200820, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1202, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x2000140d) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="80fd", @ANYRES64=r5], 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x3, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xce}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.180191799s ago: executing program 2 (id=2649): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = socket(0x1e, 0x4, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000980)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000000206010100000000000000000000000005000100070000000900020073797a30000000000c00078008001240000000000500050002000000050004000000000010000300686173683a6970"], 0x54}}, 0x0) ioctl$sock_bt_hci(r3, 0x800448d2, 0x0) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) ppoll(&(0x7f0000000240)=[{r1, 0x8}], 0x1, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000004c0)={@in6={{0xa, 0x4e21, 0xf, @mcast1, 0x6}}, 0x0, 0x0, 0x38, 0x0, "1df93ee8b24aa814b2100809b618f4ecce9a39c737b7248980546c67c865bb35c500a02e84e18eab00992aecfd9a289977a57f825ac336508237f003741bb38aa896feeeda271c048e30e6b963be1d06"}, 0xd8) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1b000000", @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bind$bt_hci(r0, &(0x7f00000001c0)={0x1f, 0x0, 0x2}, 0x6) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) sendmmsg$inet6(r1, &(0x7f0000000940)=[{{&(0x7f0000000280)={0xa, 0x4e22, 0x7, @private2, 0x7}, 0x1c, &(0x7f00000009c0)=[{&(0x7f00000005c0)="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", 0xff}, {&(0x7f00000006c0)="41dad66846fb9beef92e4b5a4c92feffe7c7cd94b92b227ad5a4eab7404f53c5c2797f4f24936177882c43f5bd90dbd7791fd8cdefacf5805c14ba6d8578c102e126e4007bd421acd84ba360956b0ead971c9a", 0x53}, {&(0x7f0000000740)="261a9ee8ac43c3689aaf6b13d3baa8172fe7f332e1bcaa049a00a4b8e723c20245db37babf00962a81ac8fae6ffb", 0x2e}, {&(0x7f0000000780)="48d7b8f0b79ec9f756f804621a2fb887e8cea32161d7e79feb8ce73150dfd27cf87776ecf26fb29ba7cc86922fe6e70fc9e2b2c5b0d4676a58fac7ceb88eeb23e94a39f9e0e540efde92e3b7a60ed6992380e367465b2a08ff3b3e3b5cdbbfb1450f832fd3f3e621b25b4c3e60c05616ead429095834d093430ce2be23e598e2ff972d5ad33e77872facde1867f4beb6", 0x90}, {&(0x7f0000000840)="a514e3f62a3505e286e83b13f7440959bfa076f3f6829cbee50bf27a826dbe114f4d315c81bdf92009120c4f3feba9421cbd9e96cc956da37c8450dc048a8cb07b9460f67606e7dee1a7538dacc74ee09bc7", 0x52}], 0x5, &(0x7f0000000e80)=[@rthdrdstopts={{0x20, 0x29, 0x37, {0x4b, 0x0, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x1}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x8}}, @dstopts_2292={{0x1050, 0x29, 0x4, {0x32, 0x206, '\x00', [@calipso={0x7, 0x28, {0x1, 0x8, 0x9, 0x5, [0x5e2a, 0x7c34, 0x100000000, 0x9]}}, @ra={0x5, 0x2, 0x6712}, @enc_lim={0x4, 0x1, 0x69}, @generic={0x1, 0x1000, "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"}, @padn={0x1, 0x1, [0x0]}]}}}, @tclass={{0x14, 0x29, 0x43, 0xffffffff}}, @hoplimit_2292={{0x14}}, @hopopts={{0x60, 0x29, 0x36, {0x62, 0x8, '\x00', [@jumbo={0xc2, 0x4, 0x1}, @ra={0x5, 0x2, 0xffff}, @calipso={0x7, 0x38, {0x1, 0xc, 0x1e, 0x3, [0x5, 0x5, 0x7ff, 0xf, 0xabf2, 0x8]}}]}}}], 0x1118}}], 0x1, 0x4000044) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000050000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000180)=ANY=[], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-neon\x00'}, 0x58) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000400000008000080000000", @ANYRES16, @ANYBLOB='\x00'/12], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r7, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 1.960793185s ago: executing program 2 (id=2651): socket$kcm(0xa, 0x2, 0x73) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000040850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x27, 0x0, 0x120, 0x0, 0x0, 0xd50, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x50) 1.851907821s ago: executing program 4 (id=2652): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r1, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x7685061471ba37f8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000004}, 0x800) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_LBT_MODE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4014}, 0x84081) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000380), r0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r6, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0xe, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x24004001) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x442000, 0x0) write$tun(r7, &(0x7f0000000500)={@val={0x0, 0x88ca}, @val={0x2, 0x0, 0x2, 0x855, 0x9, 0x7e4}, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @remote, @val={@void, {0x8100, 0x3, 0x1, 0x4}}, {@generic={0xe2a, "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"}}}}, 0x1020) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)={0x70, r1, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x70}, 0x1, 0x0, 0x0, 0x40800}, 0x44001) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001680), r0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r9, &(0x7f0000001780)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x34, r8, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001800), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000002fc0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002f80)={&(0x7f0000001840)={0x1728, r10, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x4f}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x1bc, 0x33, @data_frame={@msdu=@type00={{0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0xb}, @device_a, @broadcast, @initial, {0x1, 0x93a}, "", @void, @value=@ver_80211n={0x0, 0x8, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}}, @a_msdu=[{@device_a, @broadcast, 0x91, "7c0fdaa87f6b26354a8977ec5bac12d6206add5794dcdbc94ccdb7f2cb16480574bda3f5d895559b52aee79943ac286016e4fed4b4890c10c3eae2f2b9fa5f118cc1cbeefbfc3260dcff9eeb93786506721c1ecf9b57162a6b6eea4400c4b208c707721a9fae66d95fab00fe9864d2d6b60c4fa92b7f1378e0037d8815525510b1f8bf4f5c24069d36c4717afa70638391"}, {@device_a, @broadcast, 0xeb, "b6a1a51881d27823bc33872ef6312a8b64aef2632eea7b51a4bf2654f796bae5a13a604fb0a9cdbdc28123cefbca585a427e47809f8818b883e91f6d636d35bf24b86bf19c71092b72f48eabd588585471f7fb90ce91b027c9fc22602f5a412f5cfc539ed15b410fe485b279227bdcb178f0ef79d88a5fee21a5a66e9e5278dc18c078f4bbe64c90891faf81718565cde8be44f69e393c7ecd024252362d120f4da1215ecc2eddaf29673ffa738487e8a3c7c470606fac96c0b2eb06978fdab3e846f90c2634a7b5f70dfe55156d58cf2abcea463e5b909961f9b1890ddcdccbd892b6385ffa51c4b49d89"}]}}, @NL80211_ATTR_FRAME={0x153e, 0x33, @data_frame={@a_msdu=@type11={{0x0, 0x2, 0x5, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x4}, @broadcast, @device_a, @random="859efacdb3f5", {0x9, 0xff5}, @device_a, @void, @value=@ver_80211n={0x0, 0x8, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}}, @a_msdu=[{@broadcast, @broadcast, 0xf1, "4bc04219a2f2681d156cb4bc741b74c872c9c8e14dd5d2c3bed65fab871961a7169cc76366fe960b915dba17e8da4143695ee27046a76fb9c6dc504b9e0608da94e238404fcad173318c2e45757def2bdb9c3d48df1485aebfbbd7c63e8fb3be149a5e0ba0111fe7d3736f8c66efffd4a5717cf084d4c1e6a0fa90eedbbfe0b04f0c4efecc4074702677653129acc0dd9b7c3284486f283dc1c5ae17fa00e932d071f882e0ba8b1877dcadaa4933987789a1390972d89ed6b7557ee57231662a419ed1a3a67a25cb8287bca3d5147f9a32f19a6231c322ea79e9ff6c93785edef81d4f11db2e3325e28f26b71729ac7e9c"}, {@device_a, @broadcast, 0xf2, "794ca66ce753a423ef5c7281511488331d3975b1fa99418c0671f4c948576cf7021a16d4bc10e07ab8ab8de443c251b159632c39b486973dba07bf976e3f8623311e39888ee5a24d8833a698485ec2eb67950dbd720a304041692a458c05fd114bf4422c56869fb7fc37ab7a24560062fda51c22280d8563481eafb00c68361306ae92a9fcc8e1d7e7fa6474022d174ed1e446cf54d11e38bc334e21688f0eb1c527ea49f341e2a29db057730792726915ceab601727f312c162278c5745136ad93b99e861137731f2dd6d28db758740dbe129ed8291f4bfd287880dcdaf52d0e264c6f50b438b79dc440b936146f8f2750d"}, {@broadcast, @broadcast, 0x7b, "bf58ea1e51f7c7d33b327bf8fc7f8642e696c5dab5d1b707ec2bd5b349c41e7cb6a694d17ba3d83cd1a62163fe020918d415199d00ac69caaf1f2b866b010fe273370e0b470cf00477c9bb49f9c709aa6b2904dd78aeb10bc12bebec7e4bfa9f13098722bbaaa44554c8e57b7feb98c1328d296d5e2ef7662f6061"}, {@broadcast, @device_b, 0x14, "806e00735c722bd226bc7b7bceb026e70a5ebb77"}, {@broadcast, @device_a, 0x1000, "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"}, {@device_a, @device_b, 0x58, "c29debfbdff6e7e4bc90a65f9d482dcc4ec83256bfa641b25a68aaa005c539d0ffb3683d316c953c10213155ebbfb9ce31b76e7ffc8b8e0ed9b76f2dc0810bd80e673239da94abc689aa7e10cd76c9abeeae1dafbe8b8aa4"}, {@broadcast, @device_b, 0xfe, "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"}, {@broadcast, @device_b, 0xd3, "197847a67fffb2b713a91c5fe6ef8352021649cdccfffac4d48aa63d05ab4fa7dd0d730bea9245fe0416260dbf78dd018ca2485fcdea68ec20a0e465d07686f6f354240ad84e9875bbb691901e563a61dbf08f3b6225c3db7ac9765478ac2ecfbec30d8b2731daa43bb95072f7124e1463db3a186e6f7c4bc9795ea848c4710b3fe1ddf9bcf85b839887db9446dc04552f4d872489b2768cc491c4381300fb8f6cef9097bfd1f25a301bfe9c89b502e129063b7430ba57909c8a3223a972aee8e9bb6bb20efe25ff73235a0ad17e536dd6115d"}]}}]}, 0x1728}}, 0x4001) sendmsg$IEEE802154_LLSEC_GETPARAMS(r9, &(0x7f00000030c0)={&(0x7f0000003000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003080)={&(0x7f0000003040)={0x20, r5, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000891}, 0x20040055) r11 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000003140), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000003240)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003200)={&(0x7f0000003180)={0x5c, r11, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44040}, 0x4c080) r12 = syz_genetlink_get_family_id$nbd(&(0x7f00000032c0), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000033c0)={&(0x7f0000003280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003380)={&(0x7f0000003300)={0x5c, r12, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x5c}}, 0x4) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000003440)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000003480)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r13, &(0x7f0000003580)={&(0x7f0000003400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000003540)={&(0x7f00000034c0)={0x60, r8, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0xff}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008841}, 0x885) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000003700)={&(0x7f00000035c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000036c0)={&(0x7f0000003600)={0xa4, 0x0, 0x1, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xb, 0x1, 'amanda\x00'}}, @CTA_TUPLE_MASTER={0x3c, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xaa}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) 1.796530102s ago: executing program 3 (id=2653): socket$inet6(0xa, 0x2, 0x0) (async) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'virt_wifi0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'virt_wifi0\x00'}) socket(0x2, 0x6, 0x7fff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f00000001c0)=ANY=[], 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) (async) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r2, &(0x7f00000000c0)="832a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x52cc) listen(r3, 0x9) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r5, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e24, @private=0xa010100}, 0x10) (async) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e24, @private=0xa010100}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.718590762s ago: executing program 2 (id=2654): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021501700001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000024170380300000802c000180250001007bb0c03ce8ed22d039cce454fd98ae614b08a9"], 0x17d4}, 0x1, 0xfff5}, 0x0) 1.510257652s ago: executing program 3 (id=2655): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b0000000000009d3c52370a62ed7e810000000000008000000000000042c21d2681f591d6225b77da04000d08d53d9273d98776825bea189aeb462afa52e5", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r2, 0x0, 0x0}, 0x20) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x1}], 0x1, 0x0, 0x0, 0x4088f}, 0x40000000) connect$tipc(r0, &(0x7f0000000000), 0x10) 1.404733411s ago: executing program 0 (id=2656): sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0xd, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xb3, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011809ed61b77d9f16a96c594a1835eb265ba7f20e413597129961ed189d63c3391c4854d66a1452ed6b21900c796c4fb58a76f04811e8a7bda7af3bdb21fcab2d6ca22909ed50d079f0b710000004d0012803b6f2811032d68bea0612044f47c2842b277eb4bc53070416c6050e46d2e0d055c97c9e7f9bf0bafe4af56eba9024644942e3645a3e6db0d1191744909497df00da42d17"], 0xb4}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x707, 0x8, 0x3, 0x8, {{0xb, 0x4, 0x2, 0x0, 0x2c, 0x64, 0x0, 0x2, 0x2f, 0x0, @local, @loopback, {[@cipso={0x86, 0x15, 0x0, [{0x5, 0x6, "d6714680"}, {0x7, 0x9, "dcbeaa690f57a3"}]}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x200, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r0, {0x4, 0xffff}, {0x0, 0x6}, {0x4, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000010) 1.403934512s ago: executing program 2 (id=2657): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x400, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x48000) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x800) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r2, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000080) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEV(r6, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r2, 0x20, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x40) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x4c, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40080}, 0x804) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r7, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x74, r8, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x34}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x80) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000780), r0) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000800), r5) sendmsg$NLBL_MGMT_C_LISTDEF(r6, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r9, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) sendmsg$NLBL_MGMT_C_LISTALL(r1, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x54, r9, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x404c001}, 0x4804) r10 = socket$inet(0x2, 0x0, 0x6) setsockopt$EBT_SO_SET_COUNTERS(r10, 0x0, 0x81, &(0x7f0000000a80)={'broute\x00', 0x0, 0x0, 0x0, [0x2, 0x10000, 0x3, 0x7, 0x6, 0xf6], 0x7, &(0x7f0000000a40)=[{}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}]}, 0xe8) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000b80), r7) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000c00), r7) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0x84, r11, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x84}}, 0x4000) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000dc0), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x28, r12, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_EXTENDED_ADDR={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x24000042) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, r11, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x80}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x40804) r13 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001000)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$bt_BT_SECURITY(r13, 0x112, 0x4, &(0x7f0000001040)={0xff, 0x10}, 0x2) 1.364655368s ago: executing program 0 (id=2658): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0xff}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e20, @remote}]}, &(0x7f0000000240)=0x10) recvfrom$inet6(r0, 0x0, 0x0, 0x10002, &(0x7f0000000040)={0xa, 0x4e23, 0x101, @remote, 0x1}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYRES32], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.262559746s ago: executing program 4 (id=2659): r0 = socket$netlink(0x10, 0x3, 0x14) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@handle=@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000}, 0x4050) r2 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000140)) ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f0000003dc0)={{}, {0xd29}, 0x80, 0x0, 0x0, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000a80)='./file0\x00', &(0x7f00000039c0)="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", 0x1f9, 0x0, &(0x7f0000003bc0)={0x2, 0x105, {0x1, 0xc, 0x53, "4f529410127405e3639dc3b2fa4998b9197e232886e75348c7325a9d1a2989e4a1e955f3b8752fec64f7c8d42b2ffe8f1d4c3123e8d64454df1654e816500c0ced6dd252a5f449d0544ece6665f0defc014f6b", 0xa5, "bde17d55c591b9352ddcdaa1cb1ce9318fe287f3dd1880ce002bace9b165b026f8a244b2cc86c3fba801defb4b685c60a11dc12b71fa22e14d29b0f5722c4e51e091a736029690fc637b243cd81416121a155678b22477787e8315709b03b3ef18e60aaf898f4a046bdb3de980569c8abae68a2060f4f1df3fae247ef09d77f7209bbb80d28aebaed04a0da852aab5e44f47554913f0d38b009032447cf2025c01286b27ba"}, 0xb3, "f05923a958b5eb4a36c67b2a0f7aff89abf1acdb030f2485bff5027bc5b911afbf50ed1b7751eb34c3e9be64fabeba92b00307fcea5360515c9c5a8964e955ee08b8c1c427373aabc93e8d18ac82f2cbd291b2c40092857cfe4340d030a1f09b62f217de875cbf4c34c2b07cc3d791bfddbef765b38a796d155ef5b96064fced4d8854fd6dace4d831b5b66fe2ddb7c7962412a9bdd66cb4f2c5ef02816427da04ea6459cc1ca989b07919bd90d7ea3b048981"}, 0x1c4}) recvmmsg$unix(r2, &(0x7f0000003840)=[{{&(0x7f0000000200), 0x6e, &(0x7f0000000540)=[{&(0x7f0000000180)=""/17, 0x11}, {&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000000300)=""/233, 0xe9}, {&(0x7f0000000280)=""/18, 0x12}, {&(0x7f0000000400)=""/51, 0x33}, {&(0x7f0000000440)=""/199, 0xc7}], 0x6}}, {{&(0x7f00000005c0), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000640)=""/204, 0xcc}, {&(0x7f0000000740)=""/205, 0xcd}, {&(0x7f0000000840)=""/17, 0x11}], 0x3, &(0x7f00000008c0)}}, {{&(0x7f0000000900)=@abs, 0x6e, &(0x7f0000000f40)=[{&(0x7f0000000980)=""/213, 0xd5}, {&(0x7f0000000a80)}, {&(0x7f0000000ac0)=""/139, 0x8b}, {&(0x7f0000000b80)=""/213, 0xd5}, {&(0x7f0000000c80)=""/157, 0x9d}, {&(0x7f0000000d40)=""/210, 0xd2}, {&(0x7f0000000e40)=""/214, 0xd6}], 0x7, &(0x7f0000000fc0)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000001040), 0x6e, &(0x7f0000001100)=[{&(0x7f00000010c0)=""/4, 0x4}], 0x1, &(0x7f0000001140)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000001180), 0x6e, &(0x7f0000003740)=[{&(0x7f0000002240)=""/149, 0x95}, {&(0x7f0000002300)=""/155, 0x9b}, {&(0x7f00000023c0)=""/241, 0xf1}, {&(0x7f00000024c0)=""/237, 0xed}, {&(0x7f00000025c0)=""/107, 0x6b}, {&(0x7f0000002640)=""/89, 0x59}, {&(0x7f00000026c0)=""/4096, 0x1000}, {&(0x7f00000036c0)=""/88, 0x58}], 0x8, &(0x7f00000037c0)=[@cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}], 0x5, 0x2, &(0x7f0000003980)) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000001c0)={0x10, 0x1403, 0x1}, 0x10}}, 0x0) sendfile(r2, r3, 0x0, 0x3) 1.128675962s ago: executing program 0 (id=2660): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000004480), 0x10) connect$inet6(r0, &(0x7f0000004980)={0xa, 0x4e23, 0x6, @private0, 0x7fff}, 0x1c) sendmmsg$inet(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="4974a438ee40f7209c1a1d2f0ff64db78197cd7afe0cd974affd045420748d4aecd2a8f0dddef36b078a0e9298b64231a479793c61bd2412e02a39e7c0c0", 0x3e}, {&(0x7f0000000040)="46d1547b11e0ae3b3eeaece30d7b4e7534873d74ecb93e607f20879667bda0d0c7e27ff1bb79ce51665c44b501997a0bff1b75c4ba1afc54f54b2c716fa6fdd25b15f36810a5366532b4dbad4ecb4cd4bb23c8de71e668647b6f2e25a91ff630173bb704aa9457c63834b3d42bb4dfe70134b31ccf75765f4227b316023183c802e5d3ba0f065317cae4fc751553c891554ab8864960272292f273478af64fe2f192c6c4e0705ed22081a9a881c4b904c83e86ddde1e28d7b40cf4b6fe660dfdabf73a236fe7fb1e9a0febe56e85c24ee16cf75b9e7a9742dfee5e207aba468abd5ee8", 0xe3}, {&(0x7f0000000140)="f307dd8c9e8a6c35501b82cb758766c45cedc4435e17b38ebe8ad21198e62a9f275b041027cb8968e8d8f34df8d74a3dd4248574438dc680c91ce4c4d8ff557a982aa0735cca0009003db6b45579d7445fb9d10dba1d82f52a8f2a04645fd3993470a273f672aa2534df59f9327b1d5e8389aedc1bf7b896d866bf36db56bc7def771b81d0dbf0cb34245dedba209a3623b576128a1055a137e068cedef0e7a42d9154d03f36f29226fcc9ff2465711ac3587c67262cbdf697037f3a9188a1c387e449", 0xc3}, {&(0x7f0000000240)="2d0ec343e8c503240454b7fc559ed12355501150d7f8197ccde39b4917860dc95f52c2c86c454559ea2aeffef58d8c9f07ccf625de2cd4bb7db1c253cdaefeef531c22849034b752bfffcc95ff538e6cfd0b114150f31daaab44943499ac5c45ae98acf1af7f0ed6eccc7943f4231c60c7c7b25d7d2c3c38ce6ad9ee41b4833adb7e0260ea5ec2e4d9c92a952ff594d1584af6d3e5a792336d424ceac864a57160b39aa40967652184e5795fa98a", 0xae}, {&(0x7f0000000300)="8d097ab1ae74445bcc9ac1739abf2873060b0dedfcabc70ffade6e97a2173899909cfc06ddde759968888a11bbc78ba9cfad36fc", 0x34}], 0x5, &(0x7f00000003c0)=[@ip_retopts={{0x50, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0x74, 0x1, 0xe, [{@broadcast, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x1be}]}, @lsrr={0x83, 0x1f, 0xeb, [@multicast2, @empty, @rand_addr=0x64010101, @private=0xa010102, @remote, @loopback, @multicast2]}, @timestamp={0x44, 0xc, 0x5, 0x0, 0x4, [0xfffffff9, 0xdd7c]}, @noop]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x86}}, @ip_retopts={{0x58, 0x0, 0x7, {[@timestamp={0x44, 0x24, 0x38, 0x0, 0x3, [0x3, 0x6, 0x8, 0x3, 0x7, 0x5, 0xffff, 0x1]}, @rr={0x7, 0x7, 0xea, [@multicast1]}, @noop, @timestamp={0x44, 0x8, 0xc9, 0x0, 0x3, [0xf]}, @cipso={0x86, 0xd, 0x3, [{0x7, 0x7, '-&{Y\x00'}]}, @generic={0x44, 0x4, "ab41"}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}], 0xd8}}, {{&(0x7f00000004c0)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000500)="a93c22efd1c5fc0042a8257ee2f36d18419ace52b05c56b6baf9215997ccd84981d35fd73a603d66323f539c96d3f3ecd411cfbe7b443886938e302fd22850cc0ccf708a89029ed4805e8143842553eb8f02489cc939c164e4dc119102bb19c79e0e16a0e0627bfc8c1fd597aeb00190a221e0e4c4d2a671702397bf21091ec1978ad3dd8601", 0x86}, {&(0x7f00000005c0)="a3891c2a60ef2397a9e6e7da1a7bfdec7a1a278be8cb51604206e7d399539fe0631c33d04e57c2ad6e83029d2f438da9ade6e0a1de801057dcaff5bf9e30048b76ba7a67db90291a17a699f37625c2e17562d05bb13a7d0b18e9b66cbc05db3c8cfec9bc896b29f1ad11eeecc4773a5b3aef35a18c321d86d27ae32904e2552a5b1e32d4b9f10404ab9c0c4e94aad6c96c3d547476c5c562376db4fa438fc4f907e3e9be3d3e39fd1c77683ea081c14cab9efd26cb8a287add8b816def8894532e4fa4c99251c3d317dd5d8634caaecf5ecd18e59c5dec7c2bfe4f79a8af5bcd6c", 0xe1}, {&(0x7f00000006c0)="c947c2974b45127e73fb86e08642b218f15fde8007a2f2a12d07b118f019a517367e16cb62ddfa259e038f5e09a6dd942624bd47d6856688a5c83459076a4b30fee5a38698558b71e88145e3", 0x4c}, {&(0x7f0000000740)="fd6d5e51a5c83231429d84a3cceb67c9d3a58072e0b5281f8c72bb4ba95ecaffbb5d6476cc192bbcf0ec0ee8e0b262797956c16b331bf3698d3db9cdae58d63f571fe417e58604fad88e433522464e4116ab1818a79c654558b0de95bcd714fbd3aab7e6260d6b5cdf517552a29b755f21f476cb6dc8b00c0e293b878e2917100f3a963e593c892d0a8c2f426d", 0x8d}], 0x4, &(0x7f0000000840)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xff}}], 0x18}}, {{&(0x7f0000000880)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000c00)=[{&(0x7f00000008c0)="ae2383350c56f4", 0x7}, {&(0x7f0000000900)="53b49e864a7eafabd05e6a54", 0xc}, {&(0x7f0000000940)="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", 0xfd}, {&(0x7f0000000a40)="25d11817d6f3fe79f23b94577138d7843a2e5f11e50d5f6220f47c26d9643248a4103458117bd1330dc06f06c98fede97f1f2bd6a2c39a739bc77243e1bbf732c760d48ddebee0ecf64fa5d719768ee536", 0x51}, {&(0x7f0000000ac0)="cff7afb6a9e974c594a86bd3e29cdd7e0815784e230c9b27e5e009c2bf5107317adaaeb94d243c24a695100f1b8368c8d1a51989aca09f4302ce470aec48e82eba03c574af8427c1bd73588913ed018759b79bcb3fadbfe9d849d2f995", 0x5d}, {&(0x7f0000000b40)="251c771e979fd45fc9d6760dd83bd99fec2989974be1edf5092b7fe527d2c7a59ed7c10c5a82e1b3d0eacc4af37e92490ef064020435b7e9d1cc9ed976b31940ace3051cb537a105b079df49cbf6321d2b12f9e2a8b820fc99eef46a459c9c86df86ff0da22dc322818849e7bfd16cb84d6f3b69ee5037eab3037301c42ebb7939eccffb26bcca334a171548dc981b2bccaa71bdf6d0d3c937be6b03", 0x9c}], 0x6}}], 0x3, 0x95) 1.047850731s ago: executing program 4 (id=2661): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) sendfile(r3, r4, 0x0, 0x0) (async) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0) (async) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000003900)={r2, r2, 0x11, 0x5, &(0x7f00000036c0)="3722c57657", 0xf, 0x0, 0x7fff, 0x8, 0x2, 0x2, 0x10000000, 'syz1\x00'}) (async) ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 1.043517811s ago: executing program 0 (id=2662): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003bc0)=ANY=[@ANYBLOB="180000001600f1fff8ffffffffff00000a000003"], 0x18}}, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x9) syz_emit_ethernet(0x56, &(0x7f0000000040)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x20, 0x6, 0x0, @local, @local, {[], {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@mp_fclose={0x1e, 0xc, 0xa85, 0x0, 0x2}]}}}}}}}}, 0x0) 816.621697ms ago: executing program 0 (id=2663): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000080)={0x11}, 0x8) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x200, 0x4) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000000)=0x810, 0x4) r1 = socket(0x1d, 0x2, 0x6) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)='q', 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x68}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = socket(0x23, 0x5, 0x0) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000000)={'netdevsim0\x00', 0xa78}) recvmsg$can_raw(r3, &(0x7f0000000600)={&(0x7f0000000180)=@tipc, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/97, 0x61}, {&(0x7f00000003c0)=""/190, 0xbe}, {&(0x7f0000000480)=""/69, 0x45}], 0x3, &(0x7f0000000500)=""/254, 0xfe}, 0x200) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x6a, 0x5, 0x20000000, 0x3) sendmmsg$inet6(r0, &(0x7f00000027c0)=[{{&(0x7f00000002c0)={0xa, 0x4e20, 0x0, @mcast2, 0x41}, 0x1c, &(0x7f0000001180)=[{&(0x7f0000000a40)="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", 0x201}], 0x1}}], 0x1, 0x0) 816.276579ms ago: executing program 2 (id=2664): socket$kcm(0xa, 0x2, 0x73) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000040850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x27, 0x0, 0x120, 0x0, 0x0, 0xd50, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1010000}, 0x50) 785.56882ms ago: executing program 4 (id=2665): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="ad56b6c5820fae9d6dcd3292ea54c7beef915d56e290c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="e4e32dd2b6967335", 0x8}], 0x1, &(0x7f0000000740)=ANY=[@ANYBLOB="300000000000000017e2ffff010000001800000045f43a7ce45002bdb85e47ab3e39597e422ffab456dd963a00000000180000000000000017010000040000000602000000400000180000000000000017010000030000000100"], 0x60}], 0x1, 0x8001) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="13000000100000000200"/20, @ANYRES32, @ANYBLOB="85c3ea07a645b02300000000000084bda74500002637e65f6f03dd35b0ec8ab38da630f764a9c6ee3c73b47258aeafcb0d704069221ae902cdd0077be09498f4147a604ed5f49f0b62b7c0331ee52c66f17c310dbd0cc31661d97f7fd72fb22d17c410ccf5b652456e1fdd711070aadda33a2ad162d9264f2fcf27e43b3b09", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e23, @broadcast}}, 0x8, 0x0, 0x7ff, 0xcc6f, 0x7e457ccb186f3c04, 0x101, 0x5}, 0x9c) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, 0x0, &(0x7f0000000280)) r4 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r4, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x4000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x9, &(0x7f0000000000)=0xff, 0x4) getsockopt$inet_tcp_int(r5, 0x6, 0x9, 0x0, &(0x7f00000002c0)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @typedef={0x1}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x2e]}}, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) socket$inet_dccp(0x2, 0x6, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x1e, &(0x7f0000000000), 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000080), 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r2, 0xc038943b, &(0x7f0000000340)={0x5d067fa2, 0x0, '\x00', 0x0, &(0x7f0000000300)}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000052000100000000006fe810d50242d2a00c0005"], 0x20}}, 0x0) recvmmsg(r1, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000001c0)=""/156, 0x9c}], 0x1}}], 0x1, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000040)='N', 0x1, 0x0, 0x0, 0x0) 725.610707ms ago: executing program 0 (id=2666): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000007bc0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000009240)={0x0, 0x0, &(0x7f0000009200)={&(0x7f0000000040)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f149010980000202000000270a"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac0c}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}]}, 0x40}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ssse3\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$802154_raw(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)="80b80e9a54dbb24982a7a96c740b292640e3daff66fe6c00de214846ba9bb25bc85c31ad42fcbfb981db708c67b6a0d60244df880add23625a64f142afff845f46ead0e5da466f2611b624ff2532ad902e3b65da3ee1b1a2e720c1011e22de1d055ab66b6fb3ec3c7fb542e7fbd5aa8b345b4b5ea82987b934c769ddfcf3e1a1", 0x80}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r6, 0x6, 0x15, 0x0, &(0x7f0000000100)) r7 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x380000, @local, 0x9}, 0x1c) sendmmsg$alg(r7, &(0x7f0000000240)=[{0x20000000, 0xff00, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0xd8}], 0x1, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r9}, 0x10) r10 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="1219efc69aba5ff69b37cbed9990d9c93255b838800de635485128815b0e2a76dd9a7ed9cbafe747c97bc23372fb662aeaf020c7adb3fdea1cf1f4803dc771ae9143285691df48b44d3567cb812333afb3a15a8c4a71c098773c38362e695e4ffff9735dfd8936660378fe5deeec7c514cc37e70eb95bb64bca3e2a72658fda83465a26ae0fe8f796bf887c0622be54018b5bd7dd4fd88705ad046786bba50678ee3f4e1c253de7fa1a3ff1b2580d852fdd5bfc07b6510dfaac9816130a0577b28beb504daa67f5f8576b2ccd03b9ee20c99b61001c7f33a9e6f220318a0e3990c848791c54f8f74d095a8081fb8deb50d9e", 0xf2}, {0xfffffffffffffffc}, {&(0x7f0000000440)="c5cef38ee1c1fc6fa86832573fc99978f100666481c1839efe645a93e977b2fcf64ce20f45c4403fb8a3c59dcdc138ee6122cdeff7206237d94652f5daa60e8980dfb0bbf3900ff1531706d2cd65ca1d60bbfe22d64d0e751f84fbd33dba4dcd13cf0465558e63f947b8f20cfc2578f36e784fed472c6cba5860fa010c9ea2eaddea1c8e97f12e259b0e397a69", 0x8d}, {&(0x7f0000000500)="ef02d3c70b711e6b1fd1ad40d9a44ba48a16d3e540a65c9e2952f7f631f5f2f952d79ced1af5d49bc2901af785721312dec41f0ac4c9fa8de5e7de971d445ac4048fbaa07fccfdfd54071e3a29f81c78b0b0ff8d803bf31aaee2f1bad4854b19512a506799f42f754028bb4d668475069ef161cc1bbb1a542684f7416e28370ad1f8", 0x82}], 0x4, &(0x7f00000005c0)=[{0xa0, 0x10b, 0x1345, "3317b23233d776faa8113ce25e8b07be1feb96b5193e635d3a79ce82420a284dd61395b224e607da9d486735abd780d572504b4fe071a2751818975a38224efb430c545200883873c26ef81944684a9bf2fee6682d2b9c702a8d0a0cad3bbfa0d1495557e397f3dfd3cdbc86eab459ad50019357590f8b2f00271d8aad9fe1f75305d3e3ccfc62f903"}, {0x78, 0x84, 0x3, "d90b52cbac8341a2b58a718e0fd31c8354239bbb0477f40ea97a1657c27df9b0454cdaa9664f83b200be80a77162c6d7caa531baa9891b288796e3a937bfefab203332639f6f8ed20dbc732170c9d254459703241d9c0fba62f4a841f07cf29b946d51"}, {0x28, 0x3a, 0xff, "5ba9075eeaee4e5c6cd2bd550c62550353501540712d0a"}], 0x140}, 0x20000011) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x13, r8, 0x0) r11 = socket$inet6(0xa, 0x1, 0x200) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x8}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f0000000700)={0x0}, &(0x7f0000000740)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r11, 0x84, 0xe, &(0x7f0000000780)={r12, 0x4, 0x9, 0x2, 0x6, 0x8, 0x54fc, 0x80000000, {r13, @in6={{0xa, 0x4e21, 0x8, @private1, 0x400}}, 0x81, 0x233, 0x7, 0xa3, 0x8}}, &(0x7f0000000840)=0xb0) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r14, &(0x7f0000000040), 0xfea0) 648.771723ms ago: executing program 2 (id=2667): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x66, 0x7f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000580), 0x7, r4}, 0x38) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@ipv6_newroute={0x38, 0x18, 0x309, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0x8}}]}, 0x38}}, 0x10000) 517.799843ms ago: executing program 3 (id=2668): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000002600)={{0x14}, [@NFT_MSG_NEWTABLE={0xfffffffffffffe4c, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}}, @NFT_MSG_DELFLOWTABLE={0x64, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14, 0x10}}, 0xc0}}, 0x0) 301.444012ms ago: executing program 3 (id=2669): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ab553fec94248c41be49dc21508ea9f86532e27d04000000288a", 0x58) (async) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001640)="553e12df315719c9cddfbe1f03774b1d", 0x10}], 0x1}], 0x1, 0x840) recvmsg(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/108, 0x6c}], 0x1}, 0x10001) 191.491839ms ago: executing program 3 (id=2670): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f0000001900)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, 0x1, 0xfffffffffffffffc, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) socket$inet6(0x10, 0xa, 0x3) (async) r1 = socket$inet6(0x10, 0xa, 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414000800080004"], 0x2c}}, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 135.588719ms ago: executing program 3 (id=2671): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800110001000000", 0x24) 0s ago: executing program 1 (id=2091): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x40, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x40}}, 0x8044) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)={0x3c, 0x0, 0x222, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x13, 0x28}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44800}, 0x4000000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r3, 0x84, 0x84, &(0x7f0000002140)=""/4092, &(0x7f0000001080)=0xffc) r4 = socket$inet(0x2, 0x3, 0x4) r5 = socket(0x10, 0x3, 0x0) r6 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000480)={'erspan0\x00'}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0xff}}}}]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f00000003c0)) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x38, r9, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x38}}, 0x8000) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r8) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x4) sendto$packet(r5, &(0x7f0000000540)="ae6de1f51d277f29c794fe22ce2ff0aeef1bac0a3852f7898a09c2b4989bce0b8e1d0af9428854dc21c0559da62c8a0d95c82505a0e501d2dbff23fd21bc81c40fe856584be31aea3050d5420d829e0390d1ff32197c40", 0x57, 0x4000, &(0x7f0000000640)={0x11, 0x8, r10, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14) getpeername$packet(r5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000006c0)=0x14) sendmsg$ETHTOOL_MSG_DEBUG_GET(r5, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x190, r9, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x4}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x8808}, 0x40810) kernel console output (not intermixed with test programs): aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 222.295496][ T9596] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 222.944822][ T9623] sctp: [Deprecated]: syz.0.1011 (pid 9623) Use of int in max_burst socket option. [ 222.944822][ T9623] Use struct sctp_assoc_value instead [ 222.966151][ T9625] gre1: entered promiscuous mode [ 222.971168][ T9625] gre1: entered allmulticast mode [ 223.404656][ T9659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1023'. [ 223.714229][ T9679] __nla_validate_parse: 2 callbacks suppressed [ 223.714250][ T9679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1027'. [ 223.865508][ T9685] No such timeout policy "syz0" [ 224.139199][ T9700] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_1, syncid = 0, id = 0 [ 224.404599][ T9718] netlink: 'syz.0.1037': attribute type 1 has an invalid length. [ 224.464693][ T9718] 8021q: adding VLAN 0 to HW filter on device bond1 [ 224.492556][ T9718] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1037'. [ 224.550599][ T9724] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1040'. [ 224.592726][ T9732] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1040'. [ 224.653330][ T9739] SET target dimension over the limit! [ 224.793492][ T9745] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1045'. [ 224.862785][ T9747] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1046'. [ 224.866150][ T9745] 0·: renamed from hsr0 (while UP) [ 224.904510][ T9745] 0·: entered promiscuous mode [ 224.909873][ T9745] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 225.430161][ T9781] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1057'. [ 225.450473][ T9781] 0·: renamed from hsr0 (while UP) [ 225.459788][ T9781] 0·: entered promiscuous mode [ 225.468356][ T9781] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 226.136778][ T9821] dccp_invalid_packet: P.Data Offset(0) too small [ 226.536025][ T9842] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 226.544626][ T9842] team0: Device ipvlan2 is already an upper device of the team interface [ 226.584768][ T9850] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1083'. [ 226.665838][ T9846] nbd: must specify a device to reconfigure [ 227.028569][ T9872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1089'. [ 227.048189][ T9873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1089'. [ 227.585859][ T9904] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 228.936578][ T9979] netlink: 'syz.2.1122': attribute type 1 has an invalid length. [ 228.973008][ T9984] netlink: 'syz.2.1122': attribute type 1 has an invalid length. [ 229.062908][ T9994] __nla_validate_parse: 1 callbacks suppressed [ 229.062929][ T9994] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1125'. [ 229.123326][ T9994] netlink: 'syz.4.1125': attribute type 30 has an invalid length. [ 229.160652][ T9994] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1125'. [ 229.550471][T10019] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1131'. [ 229.694669][ T5832] Bluetooth: hci2: command 0x0405 tx timeout [ 229.741952][T10032] can: request_module (can-proto-0) failed. [ 229.790851][T10037] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 229.791868][T10038] IPVS: stopping master sync thread 10037 ... [ 229.913761][T10049] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1140'. [ 230.019671][T10051] netlink: 'syz.2.1142': attribute type 18 has an invalid length. [ 230.050636][T10051] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.059976][T10051] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.068869][T10051] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.077896][T10051] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.190379][T10057] delete_channel: no stack [ 230.726075][T10094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1155'. [ 230.738515][T10094] openvswitch: netlink: Multiple metadata blocks provided [ 231.258346][T10122] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1164'. [ 231.800972][T10158] team_slave_0: entered promiscuous mode [ 231.807177][T10158] team_slave_1: entered promiscuous mode [ 231.855293][T10158] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 231.885479][T10164] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 232.057684][T10176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1182'. [ 232.095307][T10179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1182'. [ 232.120127][T10178] IPv6: sit1: Disabled Multicast RS [ 232.377344][T10195] netlink: 'syz.3.1187': attribute type 1 has an invalid length. [ 232.431627][T10196] syzkaller1: entered promiscuous mode [ 232.437626][T10196] syzkaller1: entered allmulticast mode [ 232.624776][T10205] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1192'. [ 232.635277][T10205] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 232.967362][T10220] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 233.120554][T10220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1196'. [ 233.652420][T10244] unsupported nlmsg_type 40 [ 234.058625][T10266] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 234.169630][T10271] netlink: 'syz.0.1217': attribute type 13 has an invalid length. [ 234.435999][T10286] __nla_validate_parse: 3 callbacks suppressed [ 234.436022][T10286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1221'. [ 234.523358][T10289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1224'. [ 234.574863][T10296] openvswitch: netlink: VXLAN extension 0 has unexpected len 3 expected 0 [ 234.814735][T10310] tipc: MTU too low for tipc bearer [ 235.007449][T10324] x_tables: unsorted underflow at hook 1 [ 235.177923][T10336] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1235'. [ 235.188064][T10330] netlink: 'syz.0.1239': attribute type 2 has an invalid length. [ 235.200715][T10330] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1239'. [ 235.447144][T10346] netlink: 'syz.3.1243': attribute type 1 has an invalid length. [ 235.517352][T10349] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1244'. [ 236.098957][T10384] netlink: 'syz.0.1255': attribute type 1 has an invalid length. [ 236.143976][T10381] netlink: 'syz.1.1254': attribute type 2 has an invalid length. [ 236.154665][T10381] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1254'. [ 236.203534][T10384] 8021q: adding VLAN 0 to HW filter on device bond2 [ 236.498497][T10402] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1259'. [ 236.528994][T10407] netlink: 'syz.0.1261': attribute type 1 has an invalid length. [ 236.543533][T10407] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1261'. [ 236.809661][T10421] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1266'. [ 236.853071][T10421] netlink: 'syz.0.1266': attribute type 1 has an invalid length. [ 236.892758][T10421] netlink: 'syz.0.1266': attribute type 1 has an invalid length. [ 236.922695][T10421] netlink: 'syz.0.1266': attribute type 2 has an invalid length. [ 236.942234][T10428] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1265'. [ 237.016983][T10430] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 237.462881][T10448] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 237.549142][T10450] openvswitch: netlink: IP tunnel dst address not specified [ 238.502714][T10519] sock: sock_timestamping_bind_phc: sock not bind to device [ 238.650920][T10526] IPv6: sit2: Disabled Multicast RS [ 238.679806][T10526] sit2: entered allmulticast mode [ 239.386160][T10567] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 239.597025][T10574] netlink: 'syz.0.1314': attribute type 11 has an invalid length. [ 239.597913][T10579] netlink: 'syz.1.1313': attribute type 10 has an invalid length. [ 239.618536][T10578] __nla_validate_parse: 10 callbacks suppressed [ 239.618559][T10578] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1316'. [ 239.654680][T10583] netlink: 'syz.1.1313': attribute type 10 has an invalid length. [ 239.716959][T10578] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1316'. [ 239.748491][T10578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1316'. [ 240.126213][T10605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1323'. [ 240.160983][T10607] xt_socket: unknown flags 0x2 [ 240.360052][T10617] netlink: 'syz.0.1328': attribute type 1 has an invalid length. [ 240.379914][T10619] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1329'. [ 240.379921][T10617] netlink: 'syz.0.1328': attribute type 1 has an invalid length. [ 240.379944][T10617] netlink: 'syz.0.1328': attribute type 1 has an invalid length. [ 240.379960][T10617] netlink: 'syz.0.1328': attribute type 2 has an invalid length. [ 240.411333][T10622] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1328'. [ 240.435022][T10617] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1328'. [ 240.477374][T10629] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.729069][T10634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1334'. [ 241.042866][T10650] netlink: 'syz.1.1339': attribute type 2 has an invalid length. [ 241.151962][T10662] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1343'. [ 241.193693][T10665] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1343'. [ 241.289028][T10668] tap0: tun_chr_ioctl cmd 1074025675 [ 241.294588][T10668] tap0: persist disabled [ 241.725047][T10692] netlink: 'syz.4.1354': attribute type 1 has an invalid length. [ 242.190189][T10711] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 242.387703][T10721] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 242.400332][T10721] bond0: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 242.410936][T10721] bond0: (slave ipvlan3): Error -95 calling set_mac_address [ 242.472349][T10726] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 242.504362][T10726] bond0: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 242.595758][T10726] bond0: (slave ipvlan3): Error -95 calling set_mac_address [ 243.208116][T10761] netlink: get zone limit has 8 unknown bytes [ 245.287240][T10847] xt_hashlimit: overflow, rate too high: 0 [ 245.420735][T10845] batman_adv: batadv0: Adding interface: ip6gretap1 [ 245.454105][T10845] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.494646][T10845] batman_adv: batadv0: Interface activated: ip6gretap1 [ 245.508173][T10851] __nla_validate_parse: 26 callbacks suppressed [ 245.508194][T10851] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1405'. [ 245.822383][T10858] netlink: 'syz.4.1408': attribute type 1 has an invalid length. [ 245.844468][T10858] netlink: 'syz.4.1408': attribute type 1 has an invalid length. [ 246.020489][T10844] syz.2.1403 (10844) used greatest stack depth: 17104 bytes left [ 246.029058][T10876] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.221806][T10890] vxcan1: tx drop: invalid da for name 0x0000000000000001 [ 246.347086][T10898] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1420'. [ 246.364665][T10898] netlink: 'syz.0.1420': attribute type 5 has an invalid length. [ 246.399636][T10899] netlink: 'syz.0.1420': attribute type 5 has an invalid length. [ 246.484805][T10905] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1422'. [ 246.720661][T10914] netlink: 'syz.2.1426': attribute type 1 has an invalid length. [ 246.753895][T10914] netlink: 'syz.2.1426': attribute type 1 has an invalid length. [ 246.945135][T10929] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1432'. [ 246.973795][T10930] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1432'. [ 247.002245][T10929] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1432'. [ 247.040037][T10929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1432'. [ 247.055285][T10929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1432'. [ 247.078762][T10940] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1436'. [ 247.089080][T10940] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 247.255054][T10948] netlink: 5472 bytes leftover after parsing attributes in process `syz.1.1439'. [ 247.265280][T10946] netlink: 'syz.2.1438': attribute type 10 has an invalid length. [ 247.281520][T10948] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 247.330531][T10955] netlink: 'syz.2.1438': attribute type 10 has an invalid length. [ 247.346873][T10955] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 247.923197][T10979] IPVS: set_ctl: invalid protocol: 41 172.20.20.28:20004 [ 248.400615][T11007] netlink: 'syz.2.1455': attribute type 1 has an invalid length. [ 249.817452][T11074] tipc: Started in network mode [ 249.822399][T11074] tipc: Node identity , cluster identity 4711 [ 249.830478][T11074] tipc: Failed to obtain node identity [ 249.836591][T11074] tipc: Enabling of bearer rejected, failed to enable media [ 249.849533][T11074] Cannot find set identified by id 0 to match [ 250.526834][T11122] __nla_validate_parse: 6 callbacks suppressed [ 250.526856][T11122] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1489'. [ 250.707240][T11133] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1495'. [ 250.751282][T11136] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 2, id = 0 [ 250.802207][T11138] batadv1: entered allmulticast mode [ 250.850624][T11144] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1494'. [ 250.881977][T11144] xt_hashlimit: invalid interval [ 251.105258][T11144] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 251.135370][T11151] netlink: 'syz.3.1498': attribute type 10 has an invalid length. [ 251.669487][T11173] syzkaller1: entered promiscuous mode [ 251.676633][T11173] syzkaller1: entered allmulticast mode [ 251.809144][T11183] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1507'. [ 251.988280][T11196] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1509'. [ 252.030685][T11196] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 252.136206][T11206] No such timeout policy "syz0" [ 252.414463][T11217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1519'. [ 252.423406][T11217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1519'. [ 252.459037][T11217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1519'. [ 252.489918][ T25] hid-generic 0005:07C0:0058.0001: item fetching failed at offset 0/1 [ 252.514767][ T25] hid-generic 0005:07C0:0058.0001: probe with driver hid-generic failed with error -22 [ 252.682959][T11229] xt_connbytes: Forcing CT accounting to be enabled [ 252.724464][T11229] --map-set only usable from mangle table [ 252.822331][T11243] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1526'. [ 252.922423][T11253] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1530'. [ 253.126056][T11268] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 253.186107][T11269] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 253.268757][T11272] bridge_slave_0: entered allmulticast mode [ 253.458436][T11272] raw_sendmsg: syz.1.1532 forgot to set AF_INET. Fix it! [ 253.741653][T11297] x_tables: duplicate underflow at hook 2 [ 253.930222][T11313] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 254.250272][T11329] netlink: 'syz.3.1553': attribute type 1 has an invalid length. [ 255.409215][T11400] netlink: 'syz.0.1577': attribute type 1 has an invalid length. [ 255.418348][T11400] netlink: 'syz.0.1577': attribute type 4 has an invalid length. [ 255.611127][T11400] tipc: Enabling of bearer rejected, failed to enable media [ 255.671589][T11410] __nla_validate_parse: 11 callbacks suppressed [ 255.671611][T11410] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1578'. [ 255.720818][T11419] netlink: 'syz.0.1581': attribute type 1 has an invalid length. [ 255.730553][T11419] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1581'. [ 257.553070][T11430] netlink: 'syz.4.1584': attribute type 29 has an invalid length. [ 257.582849][T11431] netlink: 'syz.4.1584': attribute type 29 has an invalid length. [ 257.809440][T11442] IPv6: sit2: Disabled Multicast RS [ 257.877644][T11445] sctp: [Deprecated]: syz.2.1590 (pid 11445) Use of struct sctp_assoc_value in delayed_ack socket option. [ 257.877644][T11445] Use struct sctp_sack_info instead [ 257.985109][T11452] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 258.414555][T11480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1602'. [ 258.441045][T11481] xt_l2tp: v2 tid > 0xffff: 150994944 [ 258.453049][T11481] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1601'. [ 258.482946][T11481] netlink: zone id is out of range [ 258.498620][T11481] netlink: zone id is out of range [ 258.516325][T11481] netlink: zone id is out of range [ 258.521519][T11481] netlink: zone id is out of range [ 258.531085][T11485] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1604'. [ 258.566060][T11481] netlink: zone id is out of range [ 258.571366][T11481] netlink: zone id is out of range [ 258.644530][T11481] netlink: get zone limit has 8 unknown bytes [ 259.001475][T11504] netlink: 'syz.4.1610': attribute type 3 has an invalid length. [ 259.021196][T11504] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1610'. [ 259.068505][T11515] sctp: [Deprecated]: syz.0.1613 (pid 11515) Use of struct sctp_assoc_value in delayed_ack socket option. [ 259.068505][T11515] Use struct sctp_sack_info instead [ 259.231094][T11517] netlink: 'syz.1.1615': attribute type 1 has an invalid length. [ 259.291204][T11524] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1618'. [ 259.306245][T11517] 8021q: adding VLAN 0 to HW filter on device bond2 [ 259.405445][T11525] 8021q: adding VLAN 0 to HW filter on device bond3 [ 259.508937][T11525] bond2: (slave bond3): Enslaving as an active interface with a down link [ 259.524346][T11522] netlink: 'syz.2.1616': attribute type 3 has an invalid length. [ 259.548214][T11522] netlink: 766 bytes leftover after parsing attributes in process `syz.2.1616'. [ 259.739875][T11517] 8021q: adding VLAN 0 to HW filter on device bond4 [ 259.765515][T11517] bond2: (slave bond4): Enslaving as an active interface with a down link [ 259.804966][T11542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1621'. [ 259.917230][T11549] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1623'. [ 260.537408][T11576] NCSI netlink: No device for ifindex 0 [ 260.563612][T11576] netlink: 'syz.2.1635': attribute type 2 has an invalid length. [ 260.687859][T11588] __nla_validate_parse: 4 callbacks suppressed [ 260.687882][T11588] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1637'. [ 260.809279][T11596] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1639'. [ 261.000030][T11603] xt_ipcomp: unknown flags B [ 261.160842][T11607] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1646'. [ 261.282188][T11606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1645'. [ 261.304243][T11606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1645'. [ 261.719659][T11645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1658'. [ 261.819510][T11648] netdevsim netdevsim4: Direct firmware load for  failed with error -2 [ 261.840739][T11648] netdevsim netdevsim4: Falling back to sysfs fallback for:  [ 261.873655][T11650] sctp: [Deprecated]: syz.3.1660 (pid 11650) Use of struct sctp_assoc_value in delayed_ack socket option. [ 261.873655][T11650] Use struct sctp_sack_info instead [ 262.082265][T11660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1663'. [ 262.126048][T11664] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1662'. [ 262.201204][T11665] batadv0: entered promiscuous mode [ 262.296436][T11665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.711472][T11687] netlink: 'syz.1.1672': attribute type 11 has an invalid length. [ 263.178351][T11714] netlink: zone id is out of range [ 263.183587][T11714] netlink: zone id is out of range [ 263.189836][T11714] netlink: del zone limit has 8 unknown bytes [ 263.279165][T11716] ip6t_srh: unknown srh invflags 5F00 [ 263.299385][T11701] team0 (unregistering): Port device team_slave_0 removed [ 263.329394][T11701] team0 (unregistering): Port device team_slave_1 removed [ 263.539317][T11724] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1684'. [ 263.571250][T11726] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 263.709665][T11732] netlink: 'syz.2.1687': attribute type 10 has an invalid length. [ 263.722833][T11732] batadv0: left promiscuous mode [ 263.743899][T11732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.763514][T11732] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 263.904789][T11742] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 263.968958][T11744] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1690'. [ 264.100436][T11749] netlink: 'syz.4.1692': attribute type 16 has an invalid length. [ 264.115299][T11753] netlink: 'syz.2.1694': attribute type 3 has an invalid length. [ 264.132745][T11749] netlink: 'syz.4.1692': attribute type 17 has an invalid length. [ 264.168550][T11749] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.175857][T11749] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.606563][T11774] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 264.655252][T11774] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 264.670924][T11774] gretap1: entered promiscuous mode [ 264.700895][T11774] gretap1: entered allmulticast mode [ 264.731278][T11787] netlink: 'syz.4.1707': attribute type 7 has an invalid length. [ 264.985140][T11799] netlink: 'syz.1.1711': attribute type 4 has an invalid length. [ 265.031901][T11799] geneve2: entered promiscuous mode [ 265.074291][T11799] geneve2: entered allmulticast mode [ 265.264497][T11814] netlink: 'syz.2.1717': attribute type 10 has an invalid length. [ 265.336675][T11810] netdevsim netdevsim3: Direct firmware load for  failed with error -2 [ 265.351363][T11810] netdevsim netdevsim3: Falling back to sysfs fallback for:  [ 265.801195][T11848] IPVS: Unknown mcast interface: vxcan1 [ 265.814805][T11846] @ÿ: renamed from veth0_vlan (while UP) [ 266.041619][T11862] __nla_validate_parse: 3 callbacks suppressed [ 266.041639][T11862] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1729'. [ 266.123881][T11866] netlink: 'syz.0.1730': attribute type 21 has an invalid length. [ 266.164307][T11866] IPv6: NLM_F_CREATE should be specified when creating new route [ 266.195803][T11866] netlink: 'syz.0.1730': attribute type 1 has an invalid length. [ 266.237128][T11866] 8021q: adding VLAN 0 to HW filter on device bond3 [ 266.295321][T11876] bond3: (slave gretap2): making interface the new active one [ 266.344521][T11878] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1734'. [ 266.356560][T11876] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 267.051639][T11912] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1746'. [ 267.092704][T11916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1748'. [ 267.145660][T11916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1748'. [ 267.185022][T11916] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1748'. [ 267.278282][T11932] tipc: Started in network mode [ 267.283440][T11932] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 267.291363][T11932] tipc: Enabled bearer , priority 10 [ 267.564950][T11927] netlink: 'syz.2.1747': attribute type 11 has an invalid length. [ 267.686396][T11951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1757'. [ 268.304281][ T8] tipc: Node number set to 10005162 [ 268.366450][T11994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1770'. [ 268.431266][T11994] netlink: 'syz.0.1770': attribute type 29 has an invalid length. [ 268.467875][T11994] netlink: 4104 bytes leftover after parsing attributes in process `syz.0.1770'. [ 268.502046][T11994] netlink: 'syz.0.1770': attribute type 29 has an invalid length. [ 268.647663][T12003] sctp: [Deprecated]: syz.1.1773 (pid 12003) Use of int in maxseg socket option. [ 268.647663][T12003] Use struct sctp_assoc_value instead [ 268.742822][T12006] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1773'. [ 268.823297][T12003] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 269.432385][T12016] ip6t_srh: unknown srh match flags 4001 [ 270.254372][T12065] IPv6: syztnl0: Disabled Multicast RS [ 270.628501][T12043] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 270.985594][T12095] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.175676][T12109] netlink: 'syz.2.1808': attribute type 1 has an invalid length. [ 271.228788][T12109] __nla_validate_parse: 12 callbacks suppressed [ 271.228814][T12109] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1808'. [ 271.259494][T12112] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1810'. [ 271.336044][T12115] team_slave_0: entered promiscuous mode [ 271.341804][T12115] team_slave_1: entered promiscuous mode [ 271.379489][T12115] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 271.679201][T12131] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1817'. [ 271.876029][T12138] netlink: 'syz.0.1819': attribute type 12 has an invalid length. [ 271.916919][T12138] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 272.610905][T12186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1831'. [ 272.792675][T12188] syzkaller0: entered promiscuous mode [ 272.798755][T12188] syzkaller0: entered allmulticast mode [ 272.888076][T12206] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1836'. [ 272.938858][T12199] netlink: 'syz.0.1836': attribute type 10 has an invalid length. [ 274.712369][T12199] bond0: (slave 70·): The slave device specified does not support setting the MAC address [ 274.728444][T12199] 0·: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 274.741415][T12199] bond0: (slave 70·): Error -22 calling dev_set_mtu [ 275.183183][T12240] netlink: 'syz.2.1847': attribute type 21 has an invalid length. [ 275.197988][T12240] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1847'. [ 275.252217][T12242] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1849'. [ 275.394811][T12248] netlink: 'syz.2.1852': attribute type 3 has an invalid length. [ 275.417422][T12248] delete_channel: no stack [ 275.440652][T12251] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1854'. [ 275.729333][T12268] SET target dimension over the limit! [ 275.755740][T12271] netlink: 'syz.1.1855': attribute type 10 has an invalid length. [ 275.858694][T12271] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.872868][T12271] bond0: (slave team0): Enslaving as an active interface with an up link [ 276.030937][T12285] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1862'. [ 276.086033][T12287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1863'. [ 276.456983][T12310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1872'. [ 276.671013][T12323] x_tables: unsorted underflow at hook 4 [ 276.824673][T12332] netlink: 1072 bytes leftover after parsing attributes in process `syz.0.1878'. [ 276.875145][T12338] sch_fq: defrate 0 ignored. [ 276.911351][T12340] sctp: [Deprecated]: syz.3.1881 (pid 12340) Use of struct sctp_assoc_value in delayed_ack socket option. [ 276.911351][T12340] Use struct sctp_sack_info instead [ 276.953370][T12343] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1880'. [ 276.957392][T12330] netlink: 'syz.1.1876': attribute type 11 has an invalid length. [ 276.982690][T12340] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1881'. [ 277.012816][T12343] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1880'. [ 277.202688][T12356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1886'. [ 277.266326][T12356] netlink: 'syz.3.1886': attribute type 1 has an invalid length. [ 277.352496][T12356] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1886'. [ 277.634228][T12387] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1891'. [ 277.643270][T12387] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1891'. [ 277.800323][T12399] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1893'. [ 278.483254][T12427] netlink: 'syz.1.1904': attribute type 8 has an invalid length. [ 278.566912][ T5832] Bluetooth: hci2: command 0x0405 tx timeout [ 279.027284][T12459] xt_time: unknown flags 0x4 [ 279.277208][T12479] netlink: 'syz.4.1923': attribute type 3 has an invalid length. [ 279.303688][T12479] netlink: 'syz.4.1923': attribute type 3 has an invalid length. [ 279.532176][T12493] pimreg3: entered allmulticast mode [ 279.545492][T12495] netem: change failed [ 279.911293][T12518] netlink: 'syz.4.1935': attribute type 21 has an invalid length. [ 280.137495][T12531] netlink: 'syz.4.1938': attribute type 11 has an invalid length. [ 280.256400][T12538] netlink: 'syz.2.1941': attribute type 3 has an invalid length. [ 280.256506][T12540] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 280.287307][T12538] netlink: 'syz.2.1941': attribute type 3 has an invalid length. [ 280.332851][T12538] netlink: 'syz.2.1941': attribute type 4 has an invalid length. [ 281.170887][T12592] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 281.744526][T12621] __nla_validate_parse: 19 callbacks suppressed [ 281.744550][T12621] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1966'. [ 281.818784][T12621] netlink: 'syz.3.1966': attribute type 1 has an invalid length. [ 281.830227][T12621] netlink: 'syz.3.1966': attribute type 2 has an invalid length. [ 281.839258][T12621] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1966'. [ 282.363300][T12651] netlink: 'syz.0.1976': attribute type 8 has an invalid length. [ 282.381773][T12647] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 282.539693][T12659] tipc: Started in network mode [ 282.554370][T12659] tipc: Node identity 6ae0f12f81fe, cluster identity 4711 [ 282.561855][T12659] tipc: Enabled bearer , priority 0 [ 282.735146][T12683] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1983'. [ 282.840761][T12660] syzkaller0: entered promiscuous mode [ 282.862771][T12660] syzkaller0: entered allmulticast mode [ 282.871760][T12660] tipc: Resetting bearer [ 282.953811][T12687] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1984'. [ 282.984230][T12687] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1984'. [ 282.999684][T12660] tipc: Resetting bearer [ 283.564292][ T5886] tipc: Node number set to 3944673583 [ 284.898076][T12660] tipc: Disabling bearer [ 286.896875][T12713] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 287.125225][T12727] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 287.205067][T12734] netlink: 'syz.2.2001': attribute type 1 has an invalid length. [ 287.622359][T12761] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2009'. [ 287.632068][T12761] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2009'. [ 287.645383][T12760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2008'. [ 287.658388][T12759] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2010'. [ 287.670259][T12761] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2009'. [ 287.805550][T12768] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2011'. [ 287.879047][T12771] No such timeout policy "syz0" [ 288.006025][T12777] veth0_vlan: left promiscuous mode [ 288.022866][T12777] veth0_vlan: entered promiscuous mode [ 288.307899][T12796] netlink: 'syz.4.2019': attribute type 2 has an invalid length. [ 288.318230][T12796] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2019'. [ 288.497482][T12800] netlink: 'syz.4.2020': attribute type 10 has an invalid length. [ 288.532178][T12800] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.532870][T12805] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2022'. [ 288.585514][T12800] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.592728][T12800] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.642053][T12800] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 288.668982][T12810] lo: left promiscuous mode [ 288.674629][T12810] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 288.860503][T12823] Cannot find del_set index 4 as target [ 289.142459][T12827] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2029'. [ 289.631325][T12840] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 289.829088][ T2955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.858740][ T2955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.981967][T12857] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 289.989320][T12857] IPv6: NLM_F_CREATE should be set when creating new route [ 290.202719][T12866] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2039'. [ 290.238588][ T8] IPVS: starting estimator thread 0... [ 290.341393][T12868] IPVS: using max 18 ests per chain, 43200 per kthread [ 290.417565][T12876] IPVS: length: 106 != 24 [ 290.468274][T12878] No such timeout policy "syz0" [ 290.491266][T12881] sctp: [Deprecated]: syz.2.2043 (pid 12881) Use of struct sctp_assoc_value in delayed_ack socket option. [ 290.491266][T12881] Use struct sctp_sack_info instead [ 290.876157][T12895] netlink: 'syz.1.2050': attribute type 3 has an invalid length. [ 291.057327][T12899] netlink: 'syz.4.2051': attribute type 10 has an invalid length. [ 291.100160][T12899] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.758684][T12926] netlink: 'syz.0.2060': attribute type 9 has an invalid length. [ 292.313423][T12967] No such timeout policy "syz0" [ 292.506142][T12974] netlink: 'syz.0.2076': attribute type 1 has an invalid length. [ 292.628751][T12982] netlink: 'syz.1.2078': attribute type 3 has an invalid length. [ 292.792431][T12992] netlink: 'syz.0.2079': attribute type 1 has an invalid length. [ 292.825100][T12996] __nla_validate_parse: 6 callbacks suppressed [ 292.825123][T12996] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2081'. [ 292.844338][T12997] netlink: 'syz.0.2079': attribute type 1 has an invalid length. [ 292.865070][T13000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2082'. [ 293.266475][T13024] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.275640][T13024] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.284715][T13024] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.293569][T13024] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.309263][T13024] netlink: 'syz.0.2090': attribute type 3 has an invalid length. [ 293.533212][ T2923] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.747819][ T2923] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.941242][T13046] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2095'. [ 293.953266][T13048] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2097'. [ 293.982906][ T2923] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.117392][ T2923] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.148540][T13048] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2097'. [ 294.185762][T13056] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2098'. [ 294.258505][T13060] netlink: 'syz.3.2099': attribute type 13 has an invalid length. [ 294.274815][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 294.287096][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 294.295469][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 294.306116][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 294.331443][ T5832] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 294.345175][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 294.413097][ T2923] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 294.467844][T13070] Dead loop on virtual device ipvlan1, fix it urgently! [ 294.548247][ T2923] batman_adv: batadv0: Removing interface: ip6gretap1 [ 294.747696][ T2923] dvmrp0 (unregistering): left allmulticast mode [ 294.943274][T13081] netlink: 312 bytes leftover after parsing attributes in process `syz.2.2105'. [ 295.229844][T13070] syz.4.2101 (13070) used greatest stack depth: 7384 bytes left [ 295.250047][ T2923] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 295.262681][ T2923] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 295.280752][ T2923] bond0 (unregistering): (slave team0): Releasing backup interface [ 295.292293][ T2923] bond0 (unregistering): Released all slaves [ 295.303806][ T2923] bond1 (unregistering): Released all slaves [ 295.434887][ T2923] bond2 (unregistering): (slave bond3): Releasing active interface [ 295.446987][ T2923] bond2 (unregistering): (slave bond4): Releasing active interface [ 295.460063][ T2923] bond2 (unregistering): Released all slaves [ 295.585189][ T2923] bond3 (unregistering): Released all slaves [ 295.728304][ T2923] bond4 (unregistering): Released all slaves [ 295.744253][ T2923] bond5 (unregistering): Released all slaves [ 296.238858][T13062] chnl_net:caif_netlink_parms(): no params data found [ 296.404233][ T5832] Bluetooth: hci4: command tx timeout [ 296.514616][T13109] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 296.778543][T13062] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.786281][T13062] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.793707][T13062] bridge_slave_0: entered allmulticast mode [ 296.818135][T13062] bridge_slave_0: entered promiscuous mode [ 296.843772][T13062] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.860938][T13062] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.888304][T13062] bridge_slave_1: entered allmulticast mode [ 296.912694][T13062] bridge_slave_1: entered promiscuous mode [ 297.006406][T13125] netlink: 'syz.0.2119': attribute type 7 has an invalid length. [ 297.016022][T13125] netlink: 15 bytes leftover after parsing attributes in process `syz.0.2119'. [ 297.041162][T13125] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2119'. [ 297.056565][T13125] netlink: 872 bytes leftover after parsing attributes in process `syz.0.2119'. [ 297.148526][T13128] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 297.226144][T13125] netlink: 'syz.0.2119': attribute type 7 has an invalid length. [ 297.237113][T13125] netlink: 'syz.0.2119': attribute type 7 has an invalid length. [ 297.250796][T13062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.261935][T13131] netlink: 'syz.4.2117': attribute type 3 has an invalid length. [ 297.302768][T13062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.356095][ T2923] hsr_slave_0: left promiscuous mode [ 297.386690][ T2923] 0·: left promiscuous mode [ 297.403926][ T2923] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.415799][ T2923] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.426718][ T2923] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.434660][ T2923] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.473072][ T2923] veth1_vlan: left promiscuous mode [ 297.488751][ T2923] @ÿ: left promiscuous mode [ 297.606759][ T2923] pimreg3 (unregistering): left allmulticast mode [ 298.028047][ T2923] team0 (unregistering): Port device team_slave_1 removed [ 298.081189][ T2923] team0 (unregistering): Port device team_slave_0 removed [ 298.484563][ T5832] Bluetooth: hci4: command tx timeout [ 298.510174][T13141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.524432][T13141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.542900][T13141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.555403][T13141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.563682][T13141] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 298.571340][T13141] batman_adv: batadv0: Removing interface: ip6gretap1 [ 298.607756][T13153] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 298.710090][T13062] team0: Port device team_slave_0 added [ 298.749993][T13062] team0: Port device team_slave_1 added [ 298.778479][T13154] __nla_validate_parse: 131 callbacks suppressed [ 298.778505][T13154] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2125'. [ 298.778962][T13159] validate_nla: 63 callbacks suppressed [ 298.778979][T13159] netlink: 'syz.4.2126': attribute type 2 has an invalid length. [ 298.843604][T13159] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2126'. [ 298.929867][T13062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.944658][T13062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.992887][T13062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.019126][T13062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.036549][T13062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.098665][T13062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.267547][T13062] hsr_slave_0: entered promiscuous mode [ 299.276537][T13062] hsr_slave_1: entered promiscuous mode [ 299.294757][T13183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2133'. [ 299.331319][T13183] veth1_to_bridge: entered promiscuous mode [ 299.404537][T13185] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 299.852131][T13202] netlink: 300 bytes leftover after parsing attributes in process `syz.0.2142'. [ 300.032074][T13062] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 300.060865][T13062] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 300.081458][T13210] tc_dump_action: action bad kind [ 300.093239][T13062] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 300.106210][T13062] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 300.328428][T13062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.348106][T13218] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2148'. [ 300.368132][T13062] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.503698][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.510943][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.564218][ T5832] Bluetooth: hci4: command tx timeout [ 300.571051][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.578246][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.858080][T13243] netlink: 'syz.2.2154': attribute type 1 has an invalid length. [ 300.988659][T13062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.022315][T13253] xt_hashlimit: size too large, truncated to 1048576 [ 301.058236][T13254] netlink: 'syz.4.2156': attribute type 1 has an invalid length. [ 301.066722][T13254] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2156'. [ 301.068330][T13062] veth0_vlan: entered promiscuous mode [ 301.098351][T13062] veth1_vlan: entered promiscuous mode [ 301.117943][T13250] netlink: 'syz.4.2156': attribute type 1 has an invalid length. [ 301.144425][T13250] nbd: couldn't find a device at index 20 [ 301.235519][T13062] veth0_macvtap: entered promiscuous mode [ 301.275688][T13062] veth1_macvtap: entered promiscuous mode [ 301.325776][T13062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.337925][T13262] Bluetooth: MGMT ver 1.23 [ 301.358607][T13062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.380336][T13062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.402153][T13062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.422501][T13062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.446661][T13062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.469768][T13062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.507714][T13062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.517738][T13267] FAULT_INJECTION: forcing a failure. [ 301.517738][T13267] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 301.540511][T13062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.541664][T13267] CPU: 1 UID: 0 PID: 13267 Comm: syz.4.2161 Not tainted 6.13.0-rc3-syzkaller-00154-g30b981796b94 #0 [ 301.561161][T13267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 301.569744][T13062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.571228][T13267] Call Trace: [ 301.571241][T13267] [ 301.571253][T13267] dump_stack_lvl+0x241/0x360 [ 301.592634][T13267] ? __pfx_dump_stack_lvl+0x10/0x10 [ 301.597893][T13267] ? __pfx__printk+0x10/0x10 [ 301.602538][T13267] ? __pfx_lock_release+0x10/0x10 [ 301.604383][T13062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.607605][T13267] should_fail_ex+0x3b0/0x4e0 [ 301.622236][T13267] _copy_from_user+0x2f/0xc0 [ 301.626896][T13267] __sys_bpf+0x1a4/0x810 [ 301.631193][T13267] ? __pfx___sys_bpf+0x10/0x10 [ 301.636009][T13267] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 301.640148][T13062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.642014][T13267] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 301.658824][T13267] ? do_syscall_64+0x100/0x230 [ 301.663646][T13267] __x64_sys_bpf+0x7c/0x90 [ 301.668106][T13267] do_syscall_64+0xf3/0x230 [ 301.672655][T13267] ? clear_bhb_loop+0x35/0x90 [ 301.673262][T13062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.677343][T13267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.677381][T13267] RIP: 0033:0x7f1b39d85d29 [ 301.677402][T13267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.677423][T13267] RSP: 002b:00007f1b3ab43038 EFLAGS: 00000246 [ 301.698910][T13062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.717206][T13267] ORIG_RAX: 0000000000000141 [ 301.717224][T13267] RAX: ffffffffffffffda RBX: 00007f1b39f75fa0 RCX: 00007f1b39d85d29 [ 301.717242][T13267] RDX: 0000000000000050 RSI: 00000000200000c0 RDI: 000000000000000a [ 301.717256][T13267] RBP: 00007f1b3ab43090 R08: 0000000000000000 R09: 0000000000000000 [ 301.717271][T13267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.717286][T13267] R13: 0000000000000000 R14: 00007f1b39f75fa0 R15: 00007ffe5ec07438 [ 301.717319][T13267] [ 301.935497][T13062] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.955337][T13062] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.981542][T13062] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.004436][T13062] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.028073][T13275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2164'. [ 302.203634][ T9316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.226607][ T9316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.342801][T13282] netlink: 'syz.4.2167': attribute type 10 has an invalid length. [ 302.418111][T13280] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2167'. [ 302.704887][ T5832] Bluetooth: hci4: command tx timeout [ 303.267419][ T7061] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.306678][ T7061] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.339502][T13300] netlink: 'syz.4.2171': attribute type 21 has an invalid length. [ 303.392743][T13300] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2171'. [ 304.184495][T13326] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2179'. [ 304.411705][T13338] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2183'. [ 304.516380][T13343] pim6reg: entered allmulticast mode [ 304.607186][T13350] sit0: entered promiscuous mode [ 304.650945][T13350] netlink: 'syz.3.2185': attribute type 1 has an invalid length. [ 304.652535][T13351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2185'. [ 304.681821][T13351] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2185'. [ 304.698013][T13350] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2185'. [ 304.935039][T13360] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2187'. [ 305.252270][T13365] Bluetooth: MGMT ver 1.23 [ 305.529657][T13382] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2195'. [ 305.589716][T13384] ipt_REJECT: ECHOREPLY no longer supported. [ 305.940047][T13398] netlink: zone id is out of range [ 305.955874][T13398] netlink: zone id is out of range [ 305.965811][T13398] netlink: zone id is out of range [ 305.975931][T13398] netlink: zone id is out of range [ 305.981108][T13398] netlink: zone id is out of range [ 306.002225][T13398] netlink: zone id is out of range [ 306.020731][T13403] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2200'. [ 306.023079][T13398] netlink: zone id is out of range [ 306.049808][T13405] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2202'. [ 306.060100][T13398] netlink: zone id is out of range [ 306.070700][T13398] netlink: zone id is out of range [ 306.076762][T13398] netlink: zone id is out of range [ 306.082231][T13405] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2202'. [ 306.094173][T13404] netlink: 'syz.3.2201': attribute type 3 has an invalid length. [ 306.195383][T13405] netlink: 'syz.2.2202': attribute type 5 has an invalid length. [ 306.355310][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 306.372862][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 306.413859][T13415] gtp0: entered allmulticast mode [ 306.450704][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 306.476546][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 306.484987][ T5839] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 306.493578][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 306.779467][T13412] chnl_net:caif_netlink_parms(): no params data found [ 307.092829][T13412] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.101480][T13412] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.109988][T13412] bridge_slave_0: entered allmulticast mode [ 307.118190][T13412] bridge_slave_0: entered promiscuous mode [ 307.126783][T13460] netlink: 'syz.4.2216': attribute type 6 has an invalid length. [ 307.135078][T13412] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.142459][T13412] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.153555][T13412] bridge_slave_1: entered allmulticast mode [ 307.161713][T13412] bridge_slave_1: entered promiscuous mode [ 307.178616][T13461] netlink: 'syz.0.2217': attribute type 21 has an invalid length. [ 307.214254][T13412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.228133][T13412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.356650][T13412] team0: Port device team_slave_0 added [ 307.364664][T13465] veth0_to_hsr: entered promiscuous mode [ 307.405240][T13412] team0: Port device team_slave_1 added [ 307.561362][T13465] hsr_slave_0 (unregistering): left promiscuous mode [ 307.578503][T13483] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 307.613084][T13412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.628881][T13412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.681562][T13412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.706634][T13412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.715406][T13412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.795562][T13412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.981754][T13504] netlink: 'syz.0.2227': attribute type 1 has an invalid length. [ 307.993837][T13506] x_tables: duplicate underflow at hook 2 [ 307.996551][T13412] hsr_slave_0: entered promiscuous mode [ 308.044639][T13412] hsr_slave_1: entered promiscuous mode [ 308.051170][T13412] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 308.059141][T13412] Cannot create hsr debugfs directory [ 308.103590][T13512] FAULT_INJECTION: forcing a failure. [ 308.103590][T13512] name failslab, interval 1, probability 0, space 0, times 0 [ 308.142332][T13512] CPU: 1 UID: 0 PID: 13512 Comm: syz.4.2230 Not tainted 6.13.0-rc3-syzkaller-00154-g30b981796b94 #0 [ 308.153193][T13512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 308.163315][T13512] Call Trace: [ 308.166638][T13512] [ 308.169605][T13512] dump_stack_lvl+0x241/0x360 [ 308.174340][T13512] ? __pfx_dump_stack_lvl+0x10/0x10 [ 308.179585][T13512] ? __pfx__printk+0x10/0x10 [ 308.184204][T13512] ? __kmalloc_cache_node_noprof+0x47/0x3a0 [ 308.190154][T13512] ? __pfx___might_resched+0x10/0x10 [ 308.195484][T13512] should_fail_ex+0x3b0/0x4e0 [ 308.200197][T13512] should_failslab+0xac/0x100 [ 308.204893][T13512] ? page_pool_create_percpu+0x77/0xa00 [ 308.210478][T13512] __kmalloc_cache_node_noprof+0x6f/0x3a0 [ 308.216228][T13512] ? rcu_is_watching+0x15/0xb0 [ 308.221044][T13512] page_pool_create_percpu+0x77/0xa00 [ 308.226461][T13512] bpf_test_run_xdp_live+0x2e6/0x21f0 [ 308.231883][T13512] ? bpf_dispatcher_change_prog+0xd96/0xf20 [ 308.237865][T13512] ? __pfx_lock_release+0x10/0x10 [ 308.242970][T13512] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 308.248326][T13512] ? __pfx___might_resched+0x10/0x10 [ 308.253667][T13512] ? __mutex_unlock_slowpath+0x21e/0x790 [ 308.259358][T13512] ? __pfx_autoremove_wake_function+0x10/0x10 [ 308.265487][T13512] ? __mutex_unlock_slowpath+0x21e/0x790 [ 308.271192][T13512] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 308.277051][T13512] ? synchronize_rcu+0x11b/0x360 [ 308.282053][T13512] ? __pfx_synchronize_rcu+0x10/0x10 [ 308.287424][T13512] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 308.293733][T13512] ? 0xffffffffa0000d14 [ 308.297965][T13512] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 308.304005][T13512] ? _copy_from_user+0x99/0xc0 [ 308.308911][T13512] ? bpf_test_init+0x15a/0x180 [ 308.313821][T13512] ? xdp_convert_md_to_buff+0x5b/0x330 [ 308.319329][T13512] bpf_prog_test_run_xdp+0x805/0x11e0 [ 308.324758][T13512] ? __pfx_lock_release+0x10/0x10 [ 308.329843][T13512] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 308.335700][T13512] ? __fget_files+0x2a/0x410 [ 308.340352][T13512] ? __fget_files+0x2a/0x410 [ 308.345029][T13512] ? fput+0x21b/0x290 [ 308.349069][T13512] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 308.354919][T13512] bpf_prog_test_run+0x2e4/0x360 [ 308.359954][T13512] __sys_bpf+0x48d/0x810 [ 308.364240][T13512] ? __pfx___sys_bpf+0x10/0x10 [ 308.369057][T13512] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 308.375088][T13512] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 308.381470][T13512] ? do_syscall_64+0x100/0x230 [ 308.386285][T13512] __x64_sys_bpf+0x7c/0x90 [ 308.390898][T13512] do_syscall_64+0xf3/0x230 [ 308.395425][T13512] ? clear_bhb_loop+0x35/0x90 [ 308.400119][T13512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.406066][T13512] RIP: 0033:0x7f1b39d85d29 [ 308.410538][T13512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.430348][T13512] RSP: 002b:00007f1b3ab43038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 308.438800][T13512] RAX: ffffffffffffffda RBX: 00007f1b39f75fa0 RCX: 00007f1b39d85d29 [ 308.446822][T13512] RDX: 0000000000000050 RSI: 00000000200000c0 RDI: 000000000000000a [ 308.454841][T13512] RBP: 00007f1b3ab43090 R08: 0000000000000000 R09: 0000000000000000 [ 308.462861][T13512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.470888][T13512] R13: 0000000000000000 R14: 00007f1b39f75fa0 R15: 00007ffe5ec07438 [ 308.478987][T13512] [ 308.564272][ T5832] Bluetooth: hci4: command tx timeout [ 308.896117][T13412] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.026901][T13412] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.091099][T13552] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.115705][T13552] batadv_slave_0: entered allmulticast mode [ 309.246927][T13412] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.271616][T13559] FAULT_INJECTION: forcing a failure. [ 309.271616][T13559] name failslab, interval 1, probability 0, space 0, times 0 [ 309.290009][T13559] CPU: 0 UID: 0 PID: 13559 Comm: syz.4.2244 Not tainted 6.13.0-rc3-syzkaller-00154-g30b981796b94 #0 [ 309.300858][T13559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 309.310942][T13559] Call Trace: [ 309.314254][T13559] [ 309.317224][T13559] dump_stack_lvl+0x241/0x360 [ 309.321959][T13559] ? __pfx_dump_stack_lvl+0x10/0x10 [ 309.327221][T13559] ? __pfx__printk+0x10/0x10 [ 309.331856][T13559] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 309.337414][T13559] ? __pfx___might_resched+0x10/0x10 [ 309.342760][T13559] should_fail_ex+0x3b0/0x4e0 [ 309.347516][T13559] should_failslab+0xac/0x100 [ 309.352310][T13559] __kmalloc_node_noprof+0xe1/0x4d0 [ 309.357532][T13559] ? __kasan_kmalloc+0x98/0xb0 [ 309.362306][T13559] ? __kvmalloc_node_noprof+0x72/0x190 [ 309.367783][T13559] __kvmalloc_node_noprof+0x72/0x190 [ 309.373079][T13559] page_pool_create_percpu+0x2ca/0xa00 [ 309.378574][T13559] bpf_test_run_xdp_live+0x2e6/0x21f0 [ 309.383976][T13559] ? bpf_dispatcher_change_prog+0xd96/0xf20 [ 309.389898][T13559] ? __pfx_lock_release+0x10/0x10 [ 309.394943][T13559] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 309.400248][T13559] ? __pfx___might_resched+0x10/0x10 [ 309.405553][T13559] ? __mutex_unlock_slowpath+0x21e/0x790 [ 309.411213][T13559] ? __pfx_autoremove_wake_function+0x10/0x10 [ 309.417299][T13559] ? __mutex_unlock_slowpath+0x21e/0x790 [ 309.422960][T13559] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 309.428777][T13559] ? synchronize_rcu+0x11b/0x360 [ 309.433755][T13559] ? __pfx_synchronize_rcu+0x10/0x10 [ 309.439078][T13559] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 309.445355][T13559] ? 0xffffffffa0000d18 [ 309.449542][T13559] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 309.455463][T13559] ? _copy_from_user+0x99/0xc0 [ 309.460247][T13559] ? bpf_test_init+0x15a/0x180 [ 309.465019][T13559] ? xdp_convert_md_to_buff+0x5b/0x330 [ 309.470490][T13559] bpf_prog_test_run_xdp+0x805/0x11e0 [ 309.475883][T13559] ? __pfx_lock_release+0x10/0x10 [ 309.480944][T13559] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 309.486761][T13559] ? __fget_files+0x2a/0x410 [ 309.491370][T13559] ? __fget_files+0x2a/0x410 [ 309.495979][T13559] ? fput+0x21b/0x290 [ 309.499994][T13559] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 309.506513][T13559] bpf_prog_test_run+0x2e4/0x360 [ 309.511469][T13559] __sys_bpf+0x48d/0x810 [ 309.515728][T13559] ? __pfx___sys_bpf+0x10/0x10 [ 309.520516][T13559] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 309.526510][T13559] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 309.533029][T13559] ? do_syscall_64+0x100/0x230 [ 309.537826][T13559] __x64_sys_bpf+0x7c/0x90 [ 309.542265][T13559] do_syscall_64+0xf3/0x230 [ 309.546797][T13559] ? clear_bhb_loop+0x35/0x90 [ 309.551499][T13559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.557411][T13559] RIP: 0033:0x7f1b39d85d29 [ 309.561841][T13559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.581458][T13559] RSP: 002b:00007f1b3ab43038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 309.589891][T13559] RAX: ffffffffffffffda RBX: 00007f1b39f75fa0 RCX: 00007f1b39d85d29 [ 309.597875][T13559] RDX: 0000000000000050 RSI: 00000000200000c0 RDI: 000000000000000a [ 309.605954][T13559] RBP: 00007f1b3ab43090 R08: 0000000000000000 R09: 0000000000000000 [ 309.613935][T13559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.621940][T13559] R13: 0000000000000000 R14: 00007f1b39f75fa0 R15: 00007ffe5ec07438 [ 309.630022][T13559] [ 309.636698][T13559] page_pool_create_percpu() gave up with errno -12 [ 309.680658][T13564] netlink: 'syz.2.2247': attribute type 5 has an invalid length. [ 309.812889][T13412] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.871861][T13571] __nla_validate_parse: 12 callbacks suppressed [ 309.871885][T13571] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2250'. [ 309.895337][T13571] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2250'. [ 309.904852][T13571] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2250'. [ 309.995384][T13412] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 310.047252][T13412] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 310.102819][T13412] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 310.147485][T13412] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 310.391435][T13412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.438117][T13412] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.459428][ T9313] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.466683][ T9313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.497527][ T9313] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.504729][ T9313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.543154][T13412] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 310.555064][T13412] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 310.555756][T13606] FAULT_INJECTION: forcing a failure. [ 310.555756][T13606] name failslab, interval 1, probability 0, space 0, times 0 [ 310.592562][T13606] CPU: 1 UID: 0 PID: 13606 Comm: syz.4.2260 Not tainted 6.13.0-rc3-syzkaller-00154-g30b981796b94 #0 [ 310.603419][T13606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 310.613522][T13606] Call Trace: [ 310.616840][T13606] [ 310.619803][T13606] dump_stack_lvl+0x241/0x360 [ 310.624574][T13606] ? __pfx_dump_stack_lvl+0x10/0x10 [ 310.629827][T13606] ? __pfx__printk+0x10/0x10 [ 310.634478][T13606] ? __kmalloc_cache_noprof+0x48/0x390 [ 310.639981][T13606] ? __pfx___might_resched+0x10/0x10 [ 310.645316][T13606] should_fail_ex+0x3b0/0x4e0 [ 310.645726][ T5832] Bluetooth: hci4: command tx timeout [ 310.650202][T13606] should_failslab+0xac/0x100 [ 310.660300][T13606] __kmalloc_cache_noprof+0x70/0x390 [ 310.665632][T13606] ? __xdp_reg_mem_model+0x1e3/0x620 [ 310.670989][T13606] __xdp_reg_mem_model+0x1e3/0x620 [ 310.676168][T13606] ? __pfx___xdp_reg_mem_model+0x10/0x10 [ 310.681856][T13606] ? page_pool_list+0x232/0x280 [ 310.686755][T13606] ? page_pool_create_percpu+0x64a/0xa00 [ 310.692448][T13606] xdp_reg_mem_model+0x22/0x40 [ 310.697273][T13606] bpf_test_run_xdp_live+0x32f/0x21f0 [ 310.702666][T13606] ? bpf_dispatcher_change_prog+0xd96/0xf20 [ 310.708587][T13606] ? __pfx_lock_release+0x10/0x10 [ 310.713635][T13606] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 310.718946][T13606] ? __pfx___might_resched+0x10/0x10 [ 310.724248][T13606] ? __mutex_unlock_slowpath+0x21e/0x790 [ 310.729902][T13606] ? __pfx_autoremove_wake_function+0x10/0x10 [ 310.735995][T13606] ? __mutex_unlock_slowpath+0x21e/0x790 [ 310.741655][T13606] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 310.747562][T13606] ? synchronize_rcu+0x11b/0x360 [ 310.752522][T13606] ? __pfx_synchronize_rcu+0x10/0x10 [ 310.757846][T13606] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 310.764108][T13606] ? 0xffffffffa0000d10 [ 310.768288][T13606] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 310.774206][T13606] ? _copy_from_user+0x99/0xc0 [ 310.779077][T13606] ? bpf_test_init+0x15a/0x180 [ 310.783912][T13606] ? xdp_convert_md_to_buff+0x5b/0x330 [ 310.789422][T13606] bpf_prog_test_run_xdp+0x805/0x11e0 [ 310.794825][T13606] ? __pfx_lock_release+0x10/0x10 [ 310.799876][T13606] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 310.805698][T13606] ? __fget_files+0x2a/0x410 [ 310.810333][T13606] ? __fget_files+0x2a/0x410 [ 310.814946][T13606] ? fput+0x21b/0x290 [ 310.818957][T13606] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 310.824873][T13606] bpf_prog_test_run+0x2e4/0x360 [ 310.829831][T13606] __sys_bpf+0x48d/0x810 [ 310.834112][T13606] ? __pfx___sys_bpf+0x10/0x10 [ 310.838919][T13606] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 310.844937][T13606] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 310.851294][T13606] ? do_syscall_64+0x100/0x230 [ 310.856085][T13606] __x64_sys_bpf+0x7c/0x90 [ 310.860523][T13606] do_syscall_64+0xf3/0x230 [ 310.865049][T13606] ? clear_bhb_loop+0x35/0x90 [ 310.869752][T13606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.875664][T13606] RIP: 0033:0x7f1b39d85d29 [ 310.880100][T13606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.899724][T13606] RSP: 002b:00007f1b3ab43038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 310.908161][T13606] RAX: ffffffffffffffda RBX: 00007f1b39f75fa0 RCX: 00007f1b39d85d29 [ 310.916149][T13606] RDX: 0000000000000050 RSI: 00000000200000c0 RDI: 000000000000000a [ 310.924131][T13606] RBP: 00007f1b3ab43090 R08: 0000000000000000 R09: 0000000000000000 [ 310.932113][T13606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.940111][T13606] R13: 0000000000000000 R14: 00007f1b39f75fa0 R15: 00007ffe5ec07438 [ 310.948212][T13606] [ 311.178323][T13619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2263'. [ 311.190965][T13619] netlink: 912 bytes leftover after parsing attributes in process `syz.2.2263'. [ 311.192472][T13412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.257149][T13412] veth0_vlan: entered promiscuous mode [ 311.287258][T13412] veth1_vlan: entered promiscuous mode [ 311.352571][T13412] veth0_macvtap: entered promiscuous mode [ 311.452100][T13412] veth1_macvtap: entered promiscuous mode [ 311.508996][T13629] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2267'. [ 311.516150][T13412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.558515][T13412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.572478][T13412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.586853][T13412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.597660][T13412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.609014][T13412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.671668][T13412] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.722782][T13412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.767278][T13412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.804293][T13412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.833362][T13412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.843415][T13412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.891737][T13412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.902526][T13412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.921419][T13412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.955871][T13412] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.977134][T13412] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.998953][T13412] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.022832][T13412] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.040907][T13412] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.400923][T13670] netlink: 'syz.4.2278': attribute type 21 has an invalid length. [ 312.407035][ T9069] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.414888][T13670] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2278'. [ 312.428402][ T9069] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.482387][T13673] syz.0.2279 uses old SIOCAX25GETINFO [ 312.506025][T13670] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2278'. [ 312.518417][T13673] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2279'. [ 312.524923][ T9316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.545344][T13670] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2278'. [ 312.555482][ T9316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.734403][ T5832] Bluetooth: hci4: command tx timeout [ 313.318068][T13701] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 313.444961][T13701] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 313.452997][T13701] gretap1: entered promiscuous mode [ 313.487776][T13701] gretap1: entered allmulticast mode [ 313.701278][T13715] batadv_slave_1: entered allmulticast mode [ 313.945851][T13729] macsec0: entered promiscuous mode [ 314.485913][T13748] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.546846][T13748] batadv_slave_1: entered promiscuous mode [ 314.926073][T13770] __nla_validate_parse: 10 callbacks suppressed [ 314.926097][T13770] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2312'. [ 314.956727][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 314.977962][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 314.995122][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 315.011826][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 315.021244][T13777] netlink: 'syz.3.2313': attribute type 1 has an invalid length. [ 315.032586][ T5839] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 315.042688][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 315.618392][T13773] chnl_net:caif_netlink_parms(): no params data found [ 315.942822][T13773] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.951056][T13773] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.969357][T13773] bridge_slave_0: entered allmulticast mode [ 315.985319][T13773] bridge_slave_0: entered promiscuous mode [ 315.993229][T13773] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.022369][T13832] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2327'. [ 316.024347][T13773] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.041722][T13773] bridge_slave_1: entered allmulticast mode [ 316.048936][T13773] bridge_slave_1: entered promiscuous mode [ 316.125715][T13773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.158250][T13773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.211463][T13840] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2329'. [ 316.261281][T13773] team0: Port device team_slave_0 added [ 316.291614][T13773] team0: Port device team_slave_1 added [ 316.298930][T13845] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2329'. [ 316.382599][T13773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.393362][T13773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.498168][T13773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.579171][T13773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.594016][T13773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.636860][T13773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.673819][T13857] netlink: 'syz.0.2332': attribute type 25 has an invalid length. [ 316.695640][T13857] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2332'. [ 317.050358][T13773] hsr_slave_0: entered promiscuous mode [ 317.068382][T13773] hsr_slave_1: entered promiscuous mode [ 317.086710][T13773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 317.104173][T13773] Cannot create hsr debugfs directory [ 317.134044][ T5832] Bluetooth: hci4: command tx timeout [ 317.193245][T13892] netlink: 'syz.3.2343': attribute type 1 has an invalid length. [ 317.254217][T13889] xt_SECMARK: invalid mode: 0 [ 317.611700][T13906] netlink: 'syz.2.2348': attribute type 2 has an invalid length. [ 317.625343][T13906] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2348'. [ 317.635236][T13773] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.840147][T13773] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.879226][T13921] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2354'. [ 318.122847][T13930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2355'. [ 318.234407][T13773] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.283204][T13938] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2358'. [ 318.299601][T13943] netlink: 264 bytes leftover after parsing attributes in process `syz.3.2357'. [ 318.421463][T13773] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.843038][T13773] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 318.889770][T13773] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 318.913817][T13773] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 318.920862][T13969] netlink: 'syz.4.2367': attribute type 1 has an invalid length. [ 318.920890][T13969] netlink: 'syz.4.2367': attribute type 1 has an invalid length. [ 318.949541][T13773] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 319.151978][T13773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.192327][T13773] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.205367][ T5832] Bluetooth: hci4: command tx timeout [ 319.233772][ T7061] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.241020][ T7061] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.255764][ T9069] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.262993][ T9069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.352941][T13987] xt_CONNSECMARK: invalid mode: 0 [ 319.438175][T13987] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 319.665764][T14000] net veth1_virt_wifi : renamed from virt_wifi0 [ 319.770648][T13773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.931963][T13773] veth0_vlan: entered promiscuous mode [ 319.988030][T13773] veth1_vlan: entered promiscuous mode [ 320.081756][T13773] veth0_macvtap: entered promiscuous mode [ 320.130194][T14016] __nla_validate_parse: 8 callbacks suppressed [ 320.130217][T14016] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2382'. [ 320.134257][T13773] veth1_macvtap: entered promiscuous mode [ 320.245630][T14021] netlink: 'syz.3.2383': attribute type 1 has an invalid length. [ 320.253442][T14021] netlink: 'syz.3.2383': attribute type 1 has an invalid length. [ 320.344758][T13773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.374150][T13773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.406927][T13773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.425851][T14031] netlink: 'syz.4.2386': attribute type 13 has an invalid length. [ 320.445817][T13773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.456492][T14031] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2386'. [ 320.482279][T13773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.507717][T13773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.546953][T13773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.575439][T13773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.597510][T13773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.620693][T13773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.637186][T13773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.669722][T13773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.688796][T13773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.713045][T13773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.733218][T13773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.745812][T13773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.756986][T13773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.800596][T13773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.860708][T13773] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.880650][T13773] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.890506][T13773] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.904381][T13773] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.205598][T14052] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2393'. [ 321.287021][ T5832] Bluetooth: hci4: command tx timeout [ 321.309264][ T9316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.336956][ T9316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.513885][ T9313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.524960][ T9313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.896740][T14084] TCP: TCP_TX_DELAY enabled [ 321.922710][T14084] net_ratelimit: 47 callbacks suppressed [ 321.922759][T14084] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 322.498651][T14098] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.543040][T14097] IPv6: Can't replace route, no match found [ 322.677358][T14098] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.796393][T14098] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.866671][T14098] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.945344][T14098] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.965364][T14098] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.985203][T14098] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.999930][T14098] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.251114][T14123] vlan2: entered promiscuous mode [ 323.498688][T14132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2418'. [ 323.544424][T14132] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2418'. [ 323.605261][T14134] netlink: 'syz.2.2417': attribute type 13 has an invalid length. [ 323.614259][T14132] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2418'. [ 323.629994][T14134] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2417'. [ 323.649854][T14132] netlink: 'syz.3.2418': attribute type 6 has an invalid length. [ 323.677077][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 323.686796][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 323.696000][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 323.705669][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 323.713485][ T5839] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 323.721434][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 323.722321][T14129] infiniband syz1: set active [ 323.735383][T14129] infiniband syz1: added ipvlan1 [ 323.816520][T14134] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len [ 323.836143][T14129] RDS/IB: syz1: added [ 323.860285][T14129] smc: adding ib device syz1 with port count 1 [ 323.894083][T14129] smc: ib device syz1 port 1 has pnetid [ 324.080167][T14150] netlink: 'syz.2.2422': attribute type 10 has an invalid length. [ 324.106454][T14152] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 324.152889][T14152] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 324.225869][T14137] chnl_net:caif_netlink_parms(): no params data found [ 324.243693][T14145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2421'. [ 324.446360][T14137] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.453661][T14137] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.463620][T14137] bridge_slave_0: entered allmulticast mode [ 324.471965][T14137] bridge_slave_0: entered promiscuous mode [ 324.489679][T14137] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.504071][T14137] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.521676][T14137] bridge_slave_1: entered allmulticast mode [ 324.558371][T14137] bridge_slave_1: entered promiscuous mode [ 324.618758][T14175] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2425'. [ 324.629684][T14167] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2424'. [ 324.817343][T14137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.834725][T14137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.011595][T14137] team0: Port device team_slave_0 added [ 325.052526][T14137] team0: Port device team_slave_1 added [ 325.206394][T14137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.244245][T14137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.285401][T14137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.299891][T14137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.307045][T14137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.333373][T14137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.502769][T14137] hsr_slave_0: entered promiscuous mode [ 325.529466][T14137] hsr_slave_1: entered promiscuous mode [ 325.544982][T14137] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 325.581016][T14137] Cannot create hsr debugfs directory [ 325.785962][ T5839] Bluetooth: hci4: command tx timeout [ 326.169351][T14137] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.403277][T14137] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.616448][T14137] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.780309][T14249] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2443'. [ 326.842190][T14137] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.865979][ T8] IPVS: starting estimator thread 0... [ 326.908341][T14256] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2446'. [ 326.955259][T14254] IPVS: using max 18 ests per chain, 43200 per kthread [ 327.120098][T14137] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 327.146897][T14137] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 327.194969][T14137] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 327.210817][T14264] Can't find ip_set type has(:ip [ 327.231595][T14271] netlink: 'syz.3.2451': attribute type 7 has an invalid length. [ 327.256893][T14274] bridge0: port 3(gretap0) entered blocking state [ 327.294428][T14274] bridge0: port 3(gretap0) entered disabled state [ 327.301153][T14274] gretap0: entered allmulticast mode [ 327.307064][T14271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2451'. [ 327.324502][T14271] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2451'. [ 327.335853][T14274] gretap0: entered promiscuous mode [ 327.340446][T14271] netlink: 'syz.3.2451': attribute type 13 has an invalid length. [ 327.342708][T14274] bridge0: port 3(gretap0) entered blocking state [ 327.357139][T14274] bridge0: port 3(gretap0) entered forwarding state [ 327.368017][T14137] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 327.381981][T14275] gretap0: left allmulticast mode [ 327.388117][T14275] gretap0: left promiscuous mode [ 327.394793][T14275] bridge0: port 3(gretap0) entered disabled state [ 327.680817][T14290] netlink: 1280 bytes leftover after parsing attributes in process `syz.3.2455'. [ 327.720482][T14137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.729757][T14290] openvswitch: netlink: Flow actions attr not present in new flow. [ 327.800298][T14137] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.830548][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.837757][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.854798][ T5832] Bluetooth: hci4: command tx timeout [ 327.917054][ T9316] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.924282][ T9316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.991718][T14137] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 328.020574][T14137] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 328.023887][T14305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2461'. [ 328.059334][T14302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2459'. [ 328.088643][T14304] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2460'. [ 328.098129][T14305] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2461'. [ 328.154581][T14308] C: renamed from lo (while UP) [ 328.163373][T14308] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 328.180157][T14309] netlink: 'syz.2.2462': attribute type 7 has an invalid length. [ 328.210659][T14309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2462'. [ 328.340868][T14316] xt_CT: You must specify a L4 protocol and not use inversions on it [ 328.413912][T14137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.515019][T14137] veth0_vlan: entered promiscuous mode [ 328.550849][T14137] veth1_vlan: entered promiscuous mode [ 328.651966][T14137] veth0_macvtap: entered promiscuous mode [ 328.677546][T14137] veth1_macvtap: entered promiscuous mode [ 328.720219][T14137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.744637][T14137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.767956][T14137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.789676][T14137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.812263][T14137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.854597][T14137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.890093][T14137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.913730][T14137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.934761][T14137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.954093][T14137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.975251][T14137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 328.997213][T14137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.030206][T14137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.054603][T14137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.092650][T14137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.102847][T14137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.113730][T14137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.123674][T14137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.134461][T14137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.144484][T14137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.155067][T14137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.166632][T14137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.196651][T14137] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.206323][T14137] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.215322][T14137] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.224273][T14137] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.510938][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.544610][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.617763][ T9313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.636332][ T9313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.273678][T14399] netlink: 'syz.4.2488': attribute type 2 has an invalid length. [ 330.460518][T14402] netlink: 'syz.2.2489': attribute type 21 has an invalid length. [ 330.481577][T14406] veth0: entered promiscuous mode [ 330.495160][T14406] veth0: left promiscuous mode [ 330.697350][T14418] FAULT_INJECTION: forcing a failure. [ 330.697350][T14418] name failslab, interval 1, probability 0, space 0, times 0 [ 330.711710][T14418] CPU: 0 UID: 0 PID: 14418 Comm: syz.3.2494 Not tainted 6.13.0-rc3-syzkaller-00154-g30b981796b94 #0 [ 330.722545][T14418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 330.732621][T14418] Call Trace: [ 330.735917][T14418] [ 330.738862][T14418] dump_stack_lvl+0x241/0x360 [ 330.743577][T14418] ? __pfx_dump_stack_lvl+0x10/0x10 [ 330.748797][T14418] ? __pfx__printk+0x10/0x10 [ 330.753415][T14418] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 330.759416][T14418] ? __pfx___might_resched+0x10/0x10 [ 330.764746][T14418] should_fail_ex+0x3b0/0x4e0 [ 330.769493][T14418] should_failslab+0xac/0x100 [ 330.774208][T14418] kmem_cache_alloc_node_noprof+0x77/0x380 [ 330.780049][T14418] ? __alloc_skb+0x1c3/0x440 [ 330.784671][T14418] __alloc_skb+0x1c3/0x440 [ 330.789108][T14418] ? __pfx___alloc_skb+0x10/0x10 [ 330.794067][T14418] ? netlink_ack_tlv_len+0x6e/0x200 [ 330.799286][T14418] netlink_ack+0x145/0xa50 [ 330.803729][T14418] ? __pfx___might_resched+0x10/0x10 [ 330.809082][T14418] netlink_rcv_skb+0x262/0x430 [ 330.813867][T14418] ? __pfx_genl_rcv_msg+0x10/0x10 [ 330.818915][T14418] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 330.824268][T14418] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 330.829754][T14418] genl_rcv+0x28/0x40 [ 330.833753][T14418] netlink_unicast+0x7f6/0x990 [ 330.838547][T14418] ? __pfx_netlink_unicast+0x10/0x10 [ 330.843852][T14418] ? __virt_addr_valid+0x45f/0x530 [ 330.848983][T14418] ? __phys_addr_symbol+0x2f/0x70 [ 330.854026][T14418] ? __check_object_size+0x47a/0x730 [ 330.859484][T14418] netlink_sendmsg+0x8e4/0xcb0 [ 330.864301][T14418] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.869628][T14418] ? aa_sock_msg_perm+0x91/0x160 [ 330.874593][T14418] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.879914][T14418] __sock_sendmsg+0x221/0x270 [ 330.884623][T14418] __sys_sendto+0x363/0x4c0 [ 330.889145][T14418] ? __pfx___sys_sendto+0x10/0x10 [ 330.894180][T14418] ? __mutex_unlock_slowpath+0x21e/0x790 [ 330.899844][T14418] ? __fget_files+0x2a/0x410 [ 330.904460][T14418] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 330.910462][T14418] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 330.916823][T14418] __x64_sys_sendto+0xde/0x100 [ 330.921611][T14418] do_syscall_64+0xf3/0x230 [ 330.926146][T14418] ? clear_bhb_loop+0x35/0x90 [ 330.930841][T14418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.937190][T14418] RIP: 0033:0x7f2913787bbc [ 330.941617][T14418] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 330.961239][T14418] RSP: 002b:00007f29145f0ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 330.969688][T14418] RAX: ffffffffffffffda RBX: 00007f29145f0fc0 RCX: 00007f2913787bbc [ 330.977688][T14418] RDX: 0000000000000020 RSI: 00007f29145f1010 RDI: 0000000000000003 [ 330.985683][T14418] RBP: 0000000000000000 R08: 00007f29145f0f14 R09: 000000000000000c [ 330.993679][T14418] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 331.001662][T14418] R13: 00007f29145f0f68 R14: 00007f29145f1010 R15: 0000000000000000 [ 331.009663][T14418] [ 332.593066][T14461] __nla_validate_parse: 7 callbacks suppressed [ 332.593098][T14461] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2510'. [ 332.665375][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 332.676576][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 332.686511][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 332.696142][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 332.707109][ T5839] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 332.715002][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 333.024775][T14477] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2513'. [ 333.049318][T14477] netlink: 'syz.4.2513': attribute type 1 has an invalid length. [ 333.085661][T14485] sctp: [Deprecated]: syz.3.2514 (pid 14485) Use of int in maxseg socket option. [ 333.085661][T14485] Use struct sctp_assoc_value instead [ 333.101181][T14482] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2515'. [ 333.250393][T14465] chnl_net:caif_netlink_parms(): no params data found [ 333.503192][T14497] netlink: 'syz.3.2517': attribute type 1 has an invalid length. [ 333.630445][T14497] 8021q: adding VLAN 0 to HW filter on device bond2 [ 333.686941][T14501] bond2: (slave veth7): Enslaving as an active interface with a down link [ 333.826948][T14465] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.836217][T14517] FAULT_INJECTION: forcing a failure. [ 333.836217][T14517] name failslab, interval 1, probability 0, space 0, times 0 [ 333.851642][T14465] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.858957][T14517] CPU: 0 UID: 0 PID: 14517 Comm: syz.2.2520 Not tainted 6.13.0-rc3-syzkaller-00154-g30b981796b94 #0 [ 333.869769][T14517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 333.876463][T14465] bridge_slave_0: entered allmulticast mode [ 333.879840][T14517] Call Trace: [ 333.887450][T14465] bridge_slave_0: entered promiscuous mode [ 333.889021][T14517] [ 333.889036][T14517] dump_stack_lvl+0x241/0x360 [ 333.902531][T14517] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.907335][T14465] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.907763][T14517] ? __pfx__printk+0x10/0x10 [ 333.919620][T14517] ? ref_tracker_alloc+0x332/0x490 [ 333.924795][T14517] should_fail_ex+0x3b0/0x4e0 [ 333.929550][T14517] should_failslab+0xac/0x100 [ 333.933682][T14465] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.934255][T14517] ? skb_clone+0x20c/0x390 [ 333.934286][T14517] kmem_cache_alloc_noprof+0x70/0x380 [ 333.934324][T14517] skb_clone+0x20c/0x390 [ 333.934357][T14517] __netlink_deliver_tap+0x3cc/0x7f0 [ 333.934396][T14517] ? netlink_deliver_tap+0x2e/0x1b0 [ 333.934420][T14517] netlink_deliver_tap+0x19d/0x1b0 [ 333.934447][T14517] netlink_sendskb+0x68/0x140 [ 333.934483][T14517] netlink_unicast+0x39d/0x990 [ 333.934528][T14517] ? __pfx_netlink_unicast+0x10/0x10 [ 333.934575][T14517] netlink_rcv_skb+0x262/0x430 [ 333.934601][T14517] ? __pfx_genl_rcv_msg+0x10/0x10 [ 333.934634][T14517] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 333.934674][T14517] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 333.934723][T14517] genl_rcv+0x28/0x40 [ 333.934752][T14517] netlink_unicast+0x7f6/0x990 [ 333.934796][T14517] ? __pfx_netlink_unicast+0x10/0x10 [ 333.934830][T14517] ? __virt_addr_valid+0x45f/0x530 [ 333.934860][T14517] ? __phys_addr_symbol+0x2f/0x70 [ 333.934887][T14517] ? __check_object_size+0x47a/0x730 [ 333.934923][T14517] netlink_sendmsg+0x8e4/0xcb0 [ 333.934962][T14517] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.934992][T14517] ? aa_sock_msg_perm+0x91/0x160 [ 333.942275][T14465] bridge_slave_1: entered allmulticast mode [ 333.946467][T14517] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.946494][T14517] __sock_sendmsg+0x221/0x270 [ 333.946531][T14517] __sys_sendto+0x363/0x4c0 [ 333.946562][T14517] ? __pfx___sys_sendto+0x10/0x10 [ 333.946585][T14517] ? __mutex_unlock_slowpath+0x21e/0x790 [ 333.946635][T14517] ? __fget_files+0x2a/0x410 [ 333.946677][T14517] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 333.946716][T14517] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 333.946750][T14517] __x64_sys_sendto+0xde/0x100 [ 333.946780][T14517] do_syscall_64+0xf3/0x230 [ 333.966489][T14465] bridge_slave_1: entered promiscuous mode [ 333.966899][T14517] ? clear_bhb_loop+0x35/0x90 [ 334.120275][T14517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.126225][T14517] RIP: 0033:0x7feec2b87bbc [ 334.130681][T14517] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 334.135194][T14525] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 334.150310][T14517] RSP: 002b:00007feec38faec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 334.150344][T14517] RAX: ffffffffffffffda RBX: 00007feec38fafc0 RCX: 00007feec2b87bbc [ 334.150363][T14517] RDX: 0000000000000020 RSI: 00007feec38fb010 RDI: 0000000000000003 [ 334.150379][T14517] RBP: 0000000000000000 R08: 00007feec38faf14 R09: 000000000000000c [ 334.150394][T14517] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 334.150409][T14517] R13: 00007feec38faf68 R14: 00007feec38fb010 R15: 0000000000000000 [ 334.150445][T14517] [ 334.241810][T14465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.316999][T14465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.471534][T14465] team0: Port device team_slave_0 added [ 334.482696][T14533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2525'. [ 334.499161][T14465] team0: Port device team_slave_1 added [ 334.637369][T14465] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.646139][T14465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.688439][T14465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.780634][T14465] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.789817][T14465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.817303][ T5832] Bluetooth: hci4: command tx timeout [ 334.823894][T14465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.862011][T14558] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2533'. [ 334.873204][T14554] syzkaller1: entered promiscuous mode [ 334.886433][T14554] syzkaller1: entered allmulticast mode [ 335.043367][T14566] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2535'. [ 335.071918][T14465] hsr_slave_0: entered promiscuous mode [ 335.087011][T14465] hsr_slave_1: entered promiscuous mode [ 335.093457][T14465] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 335.102580][T14465] Cannot create hsr debugfs directory [ 335.165122][T14565] netlink: 'syz.0.2534': attribute type 6 has an invalid length. [ 335.187389][T14570] tipc: Started in network mode [ 335.192919][T14570] tipc: Node identity , cluster identity 4711 [ 335.200060][T14570] tipc: Failed to set node id, please configure manually [ 335.213480][T14570] tipc: Enabling of bearer rejected, failed to enable media [ 335.226199][T14572] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2536'. [ 335.242526][T14572] 0·: renamed from hsr_slave_1 (while UP) [ 335.265661][T14572] 0·: entered allmulticast mode [ 335.281372][T14572] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 335.480452][T14587] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2539'. [ 335.526658][T14578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2538'. [ 335.648015][T14465] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.796109][T14465] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.926336][T14465] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.965963][T14610] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 335.990398][T14611] gre3: entered promiscuous mode [ 336.014840][T14611] gre3: entered allmulticast mode [ 336.126823][T14465] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.187046][T14617] sctp: [Deprecated]: syz.0.2549 (pid 14617) Use of struct sctp_assoc_value in delayed_ack socket option. [ 336.187046][T14617] Use struct sctp_sack_info instead [ 336.439155][T14465] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 336.461068][T14465] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 336.511613][T14465] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 336.571100][T14465] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 336.777829][T14465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.827990][T14465] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.863618][ T9313] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.870871][ T9313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.884561][ T5832] Bluetooth: hci4: command tx timeout [ 336.902712][T14643] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2560'. [ 336.976941][ T9313] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.984143][ T9313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.034398][T14646] netlink: 'syz.0.2561': attribute type 4 has an invalid length. [ 337.128599][T14651] vlan3: entered promiscuous mode [ 337.637668][T14465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.730905][T14465] veth0_vlan: entered promiscuous mode [ 337.778188][T14465] veth1_vlan: entered promiscuous mode [ 337.850417][T14465] veth0_macvtap: entered promiscuous mode [ 337.896991][T14465] veth1_macvtap: entered promiscuous mode [ 337.933170][T14665] __nla_validate_parse: 2 callbacks suppressed [ 337.933192][T14665] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2565'. [ 337.995596][T14465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.024272][T14465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.034979][T14465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.049575][T14465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.065146][T14465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.094677][T14465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.104745][T14465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.115720][T14465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.126735][T14465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.137404][T14465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.147526][T14465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.158837][T14465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.170524][T14465] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 338.218928][T14465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.253498][T14465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.273100][T14465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.304121][T14465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.318459][T14465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.340540][T14465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.361139][T14675] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 338.369055][T14465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.392713][T14465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.425242][T14465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.440095][T14465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.451130][T14465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.461920][T14465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.475596][T14465] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 338.517473][T14465] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.528787][T14465] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.544626][T14465] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.568440][T14465] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.814261][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.825195][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.875019][ T9316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.904041][ T9316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.978014][ T5832] Bluetooth: hci4: command tx timeout [ 339.140889][T14689] netlink: 'syz.4.2575': attribute type 4 has an invalid length. [ 339.213231][T14692] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2576'. [ 339.217091][T14694] netlink: 'syz.4.2575': attribute type 4 has an invalid length. [ 339.225128][T14693] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2577'. [ 339.255756][T14692] netlink: 'syz.0.2576': attribute type 1 has an invalid length. [ 339.263655][T14692] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2576'. [ 339.277542][T14692] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2576'. [ 339.313515][T14689] netlink: 'syz.4.2575': attribute type 10 has an invalid length. [ 339.406671][T14689] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 339.647927][T14705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2581'. [ 339.664932][T14705] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2581'. [ 340.995251][T14736] netlink: 'syz.4.2590': attribute type 10 has an invalid length. [ 341.260804][T14743] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 341.269493][T14743] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 341.329902][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 341.340850][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 341.352628][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 341.364403][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 341.372309][ T5839] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 341.380540][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 341.476706][T14751] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2595'. [ 341.687223][T14758] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2597'. [ 341.852083][T14766] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2601'. [ 342.018632][T14746] chnl_net:caif_netlink_parms(): no params data found [ 342.185173][T14746] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.192423][T14746] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.225779][T14746] bridge_slave_0: entered allmulticast mode [ 342.250878][T14746] bridge_slave_0: entered promiscuous mode [ 342.269753][T14746] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.304294][T14746] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.311720][T14746] bridge_slave_1: entered allmulticast mode [ 342.344509][T14746] bridge_slave_1: entered promiscuous mode [ 342.413395][T14746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.426011][T14746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.469493][T14800] netlink: 'syz.3.2608': attribute type 1 has an invalid length. [ 342.474255][T14746] team0: Port device team_slave_0 added [ 342.501432][T14746] team0: Port device team_slave_1 added [ 342.621899][T14805] netlink: 'syz.3.2611': attribute type 1 has an invalid length. [ 342.632216][T14746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.639697][T14746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.678945][T14746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.693368][T14746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.701291][T14746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.731010][T14746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.743493][T14805] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 342.926441][T14746] hsr_slave_0: entered promiscuous mode [ 342.955669][T14746] hsr_slave_1: entered promiscuous mode [ 342.962604][T14746] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 342.970879][T14746] Cannot create hsr debugfs directory [ 343.115566][T14820] x_tables: duplicate underflow at hook 2 [ 343.163175][T14824] __nla_validate_parse: 3 callbacks suppressed [ 343.163197][T14824] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2616'. [ 343.382774][T14834] Unsupported ieee802154 address type: 0 [ 343.391507][T14835] Unsupported ieee802154 address type: 0 [ 343.395624][T14746] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.456951][ T5832] Bluetooth: hci4: command tx timeout [ 343.531998][T14845] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2621'. [ 343.666870][T14746] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.776342][T14856] Dead loop on virtual device ipvlan1, fix it urgently! [ 343.850865][T14856] xt_CT: You must specify a L4 protocol and not use inversions on it [ 343.862086][T14746] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.042812][T14746] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.167611][T14871] bond5: entered promiscuous mode [ 344.188272][T14871] bond5: entered allmulticast mode [ 344.207942][T14871] 8021q: adding VLAN 0 to HW filter on device bond5 [ 344.311521][T14746] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 344.347881][T14746] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 344.367997][T14882] sch_tbf: peakrate 7 is lower than or equals to rate 17337649918645906410 ! [ 344.384592][T14746] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 344.401190][T14746] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 344.436830][T14887] sock: sock_set_timeout: `syz.4.2633' (pid 14887) tries to set negative timeout [ 344.680506][T14746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.715211][T14746] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.730937][ T9069] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.738170][ T9069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.800144][T14746] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 344.829204][T14746] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 344.849044][ T9316] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.856276][ T9316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.013744][T14912] netlink: 'syz.0.2640': attribute type 8 has an invalid length. [ 345.225072][T14746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.352918][T14746] veth0_vlan: entered promiscuous mode [ 345.383552][T14746] veth1_vlan: entered promiscuous mode [ 345.452483][T14746] veth0_macvtap: entered promiscuous mode [ 345.497590][T14746] veth1_macvtap: entered promiscuous mode [ 345.525613][ T5832] Bluetooth: hci4: command tx timeout [ 345.549600][T14746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.570275][T14746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.590681][T14746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.624251][T14746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.644069][T14746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.660972][T14746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.671471][T14746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.682499][T14746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.692637][T14746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.703162][T14746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.713206][T14746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.723781][T14746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.728114][T14937] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 345.733808][T14746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.751490][T14746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.763690][T14746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.874414][T14935] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2648'. [ 345.896483][T14746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.920211][T14746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.949486][T14746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.961441][T14746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.973737][T14746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.985253][T14746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.995499][T14746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.008367][T14746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.019332][T14746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.043358][T14746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.054805][T14746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.067169][T14746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.077778][T14746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.090864][T14746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.102356][T14746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.131234][T14746] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.173048][T14746] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.204361][T14746] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.227837][T14746] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.532545][ T7061] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.593173][ T7061] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.709075][ T1108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.724303][ T1108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.352145][T15004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2665'. [ 347.439100][T15009] netlink: 'syz.2.2667': attribute type 10 has an invalid length. [ 347.538317][T15004] infiniband syz1: set down [ 347.585425][ T9065] smc: removing ib device syz1 [ 348.414327][T15009] syz_tun: entered promiscuous mode [ 348.435115][T15009] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 348.494525][ T5838] ================================================================== [ 348.502648][ T5838] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x6e/0x190 [ 348.511455][ T5838] Read of size 8 at addr ffff88805cf182e8 by task kworker/0:5/5838 [ 348.519375][ T5838] [ 348.521728][ T5838] CPU: 0 UID: 0 PID: 5838 Comm: kworker/0:5 Not tainted 6.13.0-rc3-syzkaller-00154-g30b981796b94 #0 [ 348.532522][ T5838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 348.542615][ T5838] Workqueue: infiniband ib_cache_event_task [ 348.548602][ T5838] Call Trace: [ 348.551904][ T5838] [ 348.554855][ T5838] dump_stack_lvl+0x241/0x360 [ 348.559573][ T5838] ? __pfx_dump_stack_lvl+0x10/0x10 [ 348.564811][ T5838] ? __pfx__printk+0x10/0x10 [ 348.569436][ T5838] ? _printk+0xd5/0x120 [ 348.573627][ T5838] ? __virt_addr_valid+0x183/0x530 [ 348.578773][ T5838] ? __virt_addr_valid+0x183/0x530 [ 348.583944][ T5838] print_report+0x169/0x550 [ 348.588480][ T5838] ? __virt_addr_valid+0x183/0x530 [ 348.593625][ T5838] ? __virt_addr_valid+0x183/0x530 [ 348.598772][ T5838] ? __virt_addr_valid+0x45f/0x530 [ 348.603921][ T5838] ? __phys_addr+0xba/0x170 [ 348.608463][ T5838] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 348.614923][ T5838] kasan_report+0x143/0x180 [ 348.619471][ T5838] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 348.625498][ T5838] __ethtool_get_link_ksettings+0x6e/0x190 [ 348.631345][ T5838] ib_get_eth_speed+0x160/0x800 [ 348.636241][ T5838] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 348.641654][ T5838] ? rxe_query_port+0x4f/0x260 [ 348.646472][ T5838] rxe_query_port+0x76/0x260 [ 348.651100][ T5838] ib_query_port+0x166/0x7d0 [ 348.655728][ T5838] ib_cache_update+0x1a9/0xb80 [ 348.660531][ T5838] ? __pfx_ib_cache_update+0x10/0x10 [ 348.666034][ T5838] ? __pfx_lock_acquire+0x10/0x10 [ 348.671091][ T5838] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 348.677113][ T5838] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 348.683480][ T5838] ib_cache_event_task+0xf3/0x1e0 [ 348.688556][ T5838] ? process_scheduled_works+0x976/0x1840 [ 348.694309][ T5838] process_scheduled_works+0xa66/0x1840 [ 348.699902][ T5838] ? __pfx_process_scheduled_works+0x10/0x10 [ 348.705921][ T5838] ? assign_work+0x364/0x3d0 [ 348.710550][ T5838] worker_thread+0x870/0xd30 [ 348.715179][ T5838] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 348.721116][ T5838] ? __kthread_parkme+0x169/0x1d0 [ 348.726176][ T5838] ? __pfx_worker_thread+0x10/0x10 [ 348.731320][ T5838] kthread+0x2f0/0x390 [ 348.735423][ T5838] ? __pfx_worker_thread+0x10/0x10 [ 348.740578][ T5838] ? __pfx_kthread+0x10/0x10 [ 348.745206][ T5838] ret_from_fork+0x4b/0x80 [ 348.749651][ T5838] ? __pfx_kthread+0x10/0x10 [ 348.754280][ T5838] ret_from_fork_asm+0x1a/0x30 [ 348.759087][ T5838] [ 348.762124][ T5838] [ 348.764469][ T5838] Allocated by task 5829: [ 348.768815][ T5838] kasan_save_track+0x3f/0x80 [ 348.773523][ T5838] __kasan_kmalloc+0x98/0xb0 [ 348.778142][ T5838] __kmalloc_node_noprof+0x290/0x4d0 [ 348.783458][ T5838] __kvmalloc_node_noprof+0x72/0x190 [ 348.788869][ T5838] alloc_netdev_mqs+0xa4/0x1080 [ 348.793933][ T5838] rtnl_create_link+0x2f9/0xc20 [ 348.798819][ T5838] rtnl_newlink_create+0x210/0xa40 [ 348.803975][ T5838] rtnl_newlink+0x1c7e/0x2210 [ 348.808701][ T5838] rtnetlink_rcv_msg+0x791/0xcf0 [ 348.813669][ T5838] netlink_rcv_skb+0x1e3/0x430 [ 348.818491][ T5838] netlink_unicast+0x7f6/0x990 [ 348.823297][ T5838] netlink_sendmsg+0x8e4/0xcb0 [ 348.828093][ T5838] __sock_sendmsg+0x221/0x270 [ 348.832819][ T5838] __sys_sendto+0x363/0x4c0 [ 348.837363][ T5838] __x64_sys_sendto+0xde/0x100 [ 348.842169][ T5838] do_syscall_64+0xf3/0x230 [ 348.846718][ T5838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.852654][ T5838] [ 348.854997][ T5838] Freed by task 15004: [ 348.859085][ T5838] kasan_save_track+0x3f/0x80 [ 348.863795][ T5838] kasan_save_free_info+0x40/0x50 [ 348.868862][ T5838] __kasan_slab_free+0x59/0x70 [ 348.873659][ T5838] kfree+0x196/0x430 [ 348.877591][ T5838] device_release+0x99/0x1c0 [ 348.882219][ T5838] kobject_put+0x22f/0x480 [ 348.886683][ T5838] netdev_run_todo+0xe79/0x1000 [ 348.891653][ T5838] rtnl_dellink+0x760/0x8d0 [ 348.896633][ T5838] rtnetlink_rcv_msg+0x791/0xcf0 [ 348.901619][ T5838] netlink_rcv_skb+0x1e3/0x430 [ 348.906510][ T5838] netlink_unicast+0x7f6/0x990 [ 348.911315][ T5838] netlink_sendmsg+0x8e4/0xcb0 [ 348.916111][ T5838] __sock_sendmsg+0x221/0x270 [ 348.920824][ T5838] ____sys_sendmsg+0x52a/0x7e0 [ 348.925621][ T5838] __sys_sendmsg+0x269/0x350 [ 348.930254][ T5838] do_syscall_64+0xf3/0x230 [ 348.934803][ T5838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.940749][ T5838] [ 348.943096][ T5838] The buggy address belongs to the object at ffff88805cf18000 [ 348.943096][ T5838] which belongs to the cache kmalloc-cg-4k of size 4096 [ 348.957454][ T5838] The buggy address is located 744 bytes inside of [ 348.957454][ T5838] freed 4096-byte region [ffff88805cf18000, ffff88805cf19000) [ 348.971387][ T5838] [ 348.973742][ T5838] The buggy address belongs to the physical page: [ 348.980185][ T5838] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5cf18 [ 348.988981][ T5838] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 348.997515][ T5838] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 349.005115][ T5838] page_type: f5(slab) [ 349.009124][ T5838] raw: 00fff00000000040 ffff88801ac4f500 dead000000000122 0000000000000000 [ 349.017746][ T5838] raw: 0000000000000000 0000000000040004 00000001f5000000 0000000000000000 [ 349.026382][ T5838] head: 00fff00000000040 ffff88801ac4f500 dead000000000122 0000000000000000 [ 349.035094][ T5838] head: 0000000000000000 0000000000040004 00000001f5000000 0000000000000000 [ 349.043806][ T5838] head: 00fff00000000003 ffffea000173c601 ffffffffffffffff 0000000000000000 [ 349.052516][ T5838] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 349.061221][ T5838] page dumped because: kasan: bad access detected [ 349.067674][ T5838] page_owner tracks the page as allocated [ 349.073414][ T5838] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5829, tgid 5829 (syz-executor), ts 82614138211, free_ts 25560962119 [ 349.096581][ T5838] post_alloc_hook+0x1f3/0x230 [ 349.101409][ T5838] get_page_from_freelist+0x365c/0x37a0 [ 349.106991][ T5838] __alloc_pages_noprof+0x292/0x710 [ 349.112224][ T5838] alloc_pages_mpol_noprof+0x3e8/0x680 [ 349.117725][ T5838] alloc_slab_page+0x6a/0x110 [ 349.122434][ T5838] allocate_slab+0x5a/0x2b0 [ 349.126969][ T5838] ___slab_alloc+0xc27/0x14a0 [ 349.131683][ T5838] __slab_alloc+0x58/0xa0 [ 349.136052][ T5838] __kmalloc_node_noprof+0x2ee/0x4d0 [ 349.141381][ T5838] __kvmalloc_node_noprof+0x72/0x190 [ 349.146704][ T5838] alloc_netdev_mqs+0xa4/0x1080 [ 349.151596][ T5838] rtnl_create_link+0x2f9/0xc20 [ 349.156485][ T5838] rtnl_newlink_create+0x210/0xa40 [ 349.161635][ T5838] rtnl_newlink+0x1c7e/0x2210 [ 349.166368][ T5838] rtnetlink_rcv_msg+0x791/0xcf0 [ 349.171343][ T5838] netlink_rcv_skb+0x1e3/0x430 [ 349.176144][ T5838] page last free pid 1 tgid 1 stack trace: [ 349.181970][ T5838] free_unref_page+0xd3f/0x1010 [ 349.186897][ T5838] free_contig_range+0x14c/0x430 [ 349.191863][ T5838] destroy_args+0x92/0x910 [ 349.196311][ T5838] debug_vm_pgtable+0x4be/0x550 [ 349.201195][ T5838] do_one_initcall+0x248/0x870 [ 349.205996][ T5838] do_initcall_level+0x157/0x210 [ 349.210977][ T5838] do_initcalls+0x3f/0x80 [ 349.215344][ T5838] kernel_init_freeable+0x435/0x5d0 [ 349.220580][ T5838] kernel_init+0x1d/0x2b0 [ 349.224937][ T5838] ret_from_fork+0x4b/0x80 [ 349.229382][ T5838] ret_from_fork_asm+0x1a/0x30 [ 349.234169][ T5838] [ 349.236520][ T5838] Memory state around the buggy address: [ 349.242176][ T5838] ffff88805cf18180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 349.250260][ T5838] ffff88805cf18200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 349.258345][ T5838] >ffff88805cf18280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 349.266441][ T5838] ^ [ 349.273919][ T5838] ffff88805cf18300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 349.282107][ T5838] ffff88805cf18380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 349.290197][ T5838] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 349.373896][T15024] syz-executor: vmalloc error: size 4194304, failed to allocated page array size 8192, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null) [ 349.395040][ T5838] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 349.417570][ T5838] CPU: 0 UID: 0 PID: 5838 Comm: kworker/0:5 Not tainted 6.13.0-rc3-syzkaller-00154-g30b981796b94 #0 [ 349.428345][ T5838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 349.438415][ T5838] Workqueue: infiniband ib_cache_event_task [ 349.444379][ T5838] Call Trace: [ 349.447683][ T5838] [ 349.450624][ T5838] dump_stack_lvl+0x241/0x360 [ 349.455354][ T5838] ? __pfx_dump_stack_lvl+0x10/0x10 [ 349.460569][ T5838] ? __pfx__printk+0x10/0x10 [ 349.465174][ T5838] ? preempt_schedule+0xe1/0xf0 [ 349.470042][ T5838] ? vscnprintf+0x5d/0x90 [ 349.474386][ T5838] panic+0x349/0x880 [ 349.478303][ T5838] ? check_panic_on_warn+0x21/0xb0 [ 349.483424][ T5838] ? __pfx_panic+0x10/0x10 [ 349.487859][ T5838] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 349.493868][ T5838] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 349.500207][ T5838] ? print_report+0x502/0x550 [ 349.504897][ T5838] check_panic_on_warn+0x86/0xb0 [ 349.509845][ T5838] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 349.515927][ T5838] end_report+0x77/0x160 [ 349.520178][ T5838] kasan_report+0x154/0x180 [ 349.524703][ T5838] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 349.530701][ T5838] __ethtool_get_link_ksettings+0x6e/0x190 [ 349.536521][ T5838] ib_get_eth_speed+0x160/0x800 [ 349.541383][ T5838] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 349.546780][ T5838] ? rxe_query_port+0x4f/0x260 [ 349.551563][ T5838] rxe_query_port+0x76/0x260 [ 349.556169][ T5838] ib_query_port+0x166/0x7d0 [ 349.561202][ T5838] ib_cache_update+0x1a9/0xb80 [ 349.565978][ T5838] ? __pfx_ib_cache_update+0x10/0x10 [ 349.571296][ T5838] ? __pfx_lock_acquire+0x10/0x10 [ 349.576441][ T5838] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 349.582459][ T5838] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 349.588802][ T5838] ib_cache_event_task+0xf3/0x1e0 [ 349.593849][ T5838] ? process_scheduled_works+0x976/0x1840 [ 349.599579][ T5838] process_scheduled_works+0xa66/0x1840 [ 349.605149][ T5838] ? __pfx_process_scheduled_works+0x10/0x10 [ 349.611142][ T5838] ? assign_work+0x364/0x3d0 [ 349.615740][ T5838] worker_thread+0x870/0xd30 [ 349.620355][ T5838] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 349.626260][ T5838] ? __kthread_parkme+0x169/0x1d0 [ 349.631295][ T5838] ? __pfx_worker_thread+0x10/0x10 [ 349.636415][ T5838] kthread+0x2f0/0x390 [ 349.640492][ T5838] ? __pfx_worker_thread+0x10/0x10 [ 349.645622][ T5838] ? __pfx_kthread+0x10/0x10 [ 349.650225][ T5838] ret_from_fork+0x4b/0x80 [ 349.654653][ T5838] ? __pfx_kthread+0x10/0x10 [ 349.659263][ T5838] ret_from_fork_asm+0x1a/0x30 [ 349.664043][ T5838] [ 349.667208][ T5838] Kernel Offset: disabled [ 349.671540][ T5838] Rebooting in 86400 seconds..