last executing test programs: 1m11.767659827s ago: executing program 4 (id=335): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) unshare(0x20000400) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x2, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r2, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}}, 0x10) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x2000000000000280, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40800}, 0x94) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_FIOSETOWN(r5, 0x8901, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r6, 0x81b21000) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x2, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="850000001b000000040000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x40, &(0x7f0000000040)={'raw\x00', 0x0, [0x7, 0x4, 0xfffffffa, 0x1000, 0x3]}, &(0x7f00000000c0)=0x54) 1m0.540583456s ago: executing program 4 (id=335): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) unshare(0x20000400) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x2, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r2, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}}, 0x10) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x2000000000000280, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40800}, 0x94) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_FIOSETOWN(r5, 0x8901, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r6, 0x81b21000) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x2, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="850000001b000000040000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x40, &(0x7f0000000040)={'raw\x00', 0x0, [0x7, 0x4, 0xfffffffa, 0x1000, 0x3]}, &(0x7f00000000c0)=0x54) 46.716404991s ago: executing program 4 (id=335): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) unshare(0x20000400) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x2, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r2, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}}, 0x10) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x2000000000000280, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40800}, 0x94) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_FIOSETOWN(r5, 0x8901, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r6, 0x81b21000) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x2, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="850000001b000000040000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x40, &(0x7f0000000040)={'raw\x00', 0x0, [0x7, 0x4, 0xfffffffa, 0x1000, 0x3]}, &(0x7f00000000c0)=0x54) 32.63896325s ago: executing program 4 (id=335): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) unshare(0x20000400) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x2, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r2, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}}, 0x10) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x2000000000000280, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40800}, 0x94) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_FIOSETOWN(r5, 0x8901, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r6, 0x81b21000) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x2, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="850000001b000000040000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x40, &(0x7f0000000040)={'raw\x00', 0x0, [0x7, 0x4, 0xfffffffa, 0x1000, 0x3]}, &(0x7f00000000c0)=0x54) 17.942093372s ago: executing program 4 (id=335): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) unshare(0x20000400) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x2, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r2, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}}, 0x10) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x2000000000000280, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40800}, 0x94) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_FIOSETOWN(r5, 0x8901, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r6, 0x81b21000) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x2, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="850000001b000000040000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x40, &(0x7f0000000040)={'raw\x00', 0x0, [0x7, 0x4, 0xfffffffa, 0x1000, 0x3]}, &(0x7f00000000c0)=0x54) 4.678221413s ago: executing program 4 (id=335): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) unshare(0x20000400) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x2, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r2, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}}, 0x10) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x2000000000000280, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40800}, 0x94) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_FIOSETOWN(r5, 0x8901, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r6, 0x81b21000) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x2, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="850000001b000000040000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x40, &(0x7f0000000040)={'raw\x00', 0x0, [0x7, 0x4, 0xfffffffa, 0x1000, 0x3]}, &(0x7f00000000c0)=0x54) 2.504850878s ago: executing program 1 (id=1287): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.events\x00', 0x275a, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000002c0)={0x1f, 0x804, 0x1}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x37, 0x800000, 0x8, 0x9, 0x8000}) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f0000000000)=0x2, 0xfcc0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x49, 0x800000, 0x8, 0x7, 0x8000}) write$bt_hci(r3, &(0x7f0000000080)=ANY=[], 0x6) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000010900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c0004802800018008000100666962001c00028008000140000000110800034000000005080002400000000114000000110001"], 0xdc}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r4, 0xfff) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x21, 0x4, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r8, @ANYBLOB="0a0001"], 0x48}}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r9 = socket$inet6(0xa, 0x5, 0x4) ioctl$AUTOFS_IOC_PROTOSUBVER(r9, 0x80049367, &(0x7f00000001c0)) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, 0x0, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd60000004003c0601fe8000000000000000000000000000bbfe8000000000000000000000000000aa6704040202580200fe8000000000000000000000000000bbff02000000000000000000000000000100004e22", @ANYRES32=0x41424344, @ANYRES32=r5, @ANYRES16=r6], 0x0) 2.372537102s ago: executing program 2 (id=1288): bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @loopback, @local}, &(0x7f0000000200)=0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x5460, 0x96b5376b91506d81) (async) ioctl$TUNSETOFFLOAD(r1, 0x5460, 0x96b5376b91506d81) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000), 0x8) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1c, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000002ff0100000000000000000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4, r3}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1c, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000002ff0100000000000000000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4, r3}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0x1}, &(0x7f00000002c0), &(0x7f0000000300)='%pK \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0x1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)='%pK \x00'}, 0x20) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="180000000000000000000000f5ff0000711241000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x90) close(r6) ioctl$SIOCSIFHWADDR(r6, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0003230c1100"}) (async) ioctl$SIOCSIFHWADDR(r6, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0003230c1100"}) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x13, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xffffff81, 0x0, 0x0, 0x0, 0x9}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='syzkaller\x00', 0xd, 0x1000, &(0x7f0000000700)=""/4096, 0x41100, 0x1, '\x00', r0, @fallback=0xb, r1, 0x8, &(0x7f0000000240)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x8, 0x16, 0xffff}, 0x10, r4, 0xffffffffffffffff, 0x2, &(0x7f00000003c0)=[r5, r6, r7, 0xffffffffffffffff], &(0x7f0000000580)=[{0x2, 0x4, 0x1, 0xb}, {0x1, 0x4, 0x4, 0x6}], 0x10, 0x7}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000d984c7205170093a3a", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000d984c7205170093a3a", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r10, 0x6, 0x23, 0x0, &(0x7f0000003580)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r11, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001c80)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRESHEX=r0, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r12, @ANYBLOB="0a000600080211000000000038005080080003000dac0f0011000100cabee339084eeef109002471f40000000800070000000000050002"], 0x60}}, 0x0) 2.237404557s ago: executing program 3 (id=1290): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000007c0)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x30, 0xcf, 0x5, 0xfffff000}, {0x6}]}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000000)={'vxcan1\x00', 0x47}) 2.127508013s ago: executing program 2 (id=1291): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_80211_join_ibss(&(0x7f0000000240)='wlan1\x00', &(0x7f0000000280)=@default_ibss_ssid, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'batadv0\x00', &(0x7f0000000080)=@ethtool_link_settings={0x4c, 0x80000001, 0x1, 0x5, 0x8, 0x1, 0x4, 0x7, 0xd, 0xb, [0x6, 0x3, 0x3, 0xfffffe01, 0x3, 0xfff, 0x0, 0x6]}}) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e0030000280080006001000000010"], 0x68}}, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x34, r5, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r5, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8814) r7 = socket$unix(0x1, 0x1, 0x0) accept4$unix(r7, &(0x7f0000000340), &(0x7f00000002c0)=0x6e, 0x80800) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newtaction={0x48, 0x32, 0x1, 0x80, 0x25dfdbfe, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9, 0x3}, {0xfffffffffffffd97}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="090000000000feffffff0a00000008000300", @ANYRES32=r2, @ANYBLOB="2000508014000880100001"], 0x3c}}, 0x0) socketpair(0x1e, 0x5, 0xd, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_80211_join_ibss(&(0x7f0000000240)='wlan1\x00', &(0x7f0000000280)=@default_ibss_ssid, 0x6, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'batadv0\x00', &(0x7f0000000080)=@ethtool_link_settings={0x4c, 0x80000001, 0x1, 0x5, 0x8, 0x1, 0x4, 0x7, 0xd, 0xb, [0x6, 0x3, 0x3, 0xfffffe01, 0x3, 0xfff, 0x0, 0x6]}}) (async) socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e0030000280080006001000000010"], 0x68}}, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x34, r5, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r5, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8814) (async) socket$unix(0x1, 0x1, 0x0) (async) accept4$unix(r7, &(0x7f0000000340), &(0x7f00000002c0)=0x6e, 0x80800) (async) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newtaction={0x48, 0x32, 0x1, 0x80, 0x25dfdbfe, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9, 0x3}, {0xfffffffffffffd97}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x48}}, 0x0) (async) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="090000000000feffffff0a00000008000300", @ANYRES32=r2, @ANYBLOB="2000508014000880100001"], 0x3c}}, 0x0) (async) socketpair(0x1e, 0x5, 0xd, &(0x7f0000000040)) (async) 2.034244726s ago: executing program 1 (id=1292): mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x9, 0x2, 0x3, 0x8, 0x4}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = socket(0x2d, 0x2, 0x0) recvmmsg(r2, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x40, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$packet(r3, &(0x7f0000000040)={0x10, 0x6}, 0x14) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000000010104000000000000000002000005240001801400018008000100e000000108000200000000000c0002800500010000000000240002801400018008000100e000000108000200ac1e00010c00028005000100000000000800074000000000100016"], 0x74}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@deltaction={0x234, 0x31, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x34, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x6c, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8f}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x316c}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x60, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x84c1}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x14, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1ff}}]}, @TCA_ACT_TAB={0x68, 0x1, [{0x14, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x70, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3ff}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc6}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x14, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xff}}]}]}, 0x234}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6) 1.658414381s ago: executing program 3 (id=1294): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xefffffffffffffff}]}, 0x24}}, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x8000000004) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_crypto(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)=@delrng={0x10, 0x14, 0x1, 0x70bd25, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x4004010) 1.610053609s ago: executing program 0 (id=1295): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x64, r2, 0x1, 0x0, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}], {0x14}}, 0x48}}, 0x40000) 1.533415091s ago: executing program 2 (id=1296): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x0, 0x0, 0x2000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@multicast1, 0x0, 0x6c}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4}, {}, 0x0, 0x0, 0x2, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_aead={0x4c, 0x12, {{'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x0, 0x80}}]}, 0x184}}, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) connect$llc(r1, &(0x7f0000000040)={0x1a, 0x110, 0x1, 0x17, 0x0, 0x9, @remote}, 0x10) 1.432545818s ago: executing program 0 (id=1297): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@gettaction={0x8c, 0x32, 0x9408f9ce2610ee65, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf6bc}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_gd=@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6a}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44}, 0x0) 1.43117636s ago: executing program 2 (id=1298): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSACCEPT(r0, 0x89e3) r1 = socket$inet6(0xa, 0x3, 0x7) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket(0x840000000002, 0x3, 0xff) connect$inet(r3, &(0x7f0000000540)={0x2, 0x0, @dev}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000080)=0xb) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback, 0xfffffffc}, 0x1c) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000000c0)={r0, 0x5, 0x0, 0x5}) setsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000280)={0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0xe10, 0x70bd22, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x33}, @NL80211_ATTR_MAC={0xa, 0x6, @random="c8d8bbc92a4f"}, @NL80211_ATTR_PMK={0x14, 0xfe, "443ba0a12eba56e0aaca9739613e2531"}]}, 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x20040000) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) ioctl$SIOCRSACCEPT(r0, 0x89e3) (async) socket$inet6(0xa, 0x3, 0x7) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) socket(0x840000000002, 0x3, 0xff) (async) connect$inet(r3, &(0x7f0000000540)={0x2, 0x0, @dev}, 0x10) (async) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) (async) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000080)=0xb) (async) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback, 0xfffffffc}, 0x1c) (async) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000000c0)={r0, 0x5, 0x0, 0x5}) (async) setsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000280)={0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, 0xc) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_PMKSA(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0xe10, 0x70bd22, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x33}, @NL80211_ATTR_MAC={0xa, 0x6, @random="c8d8bbc92a4f"}, @NL80211_ATTR_PMK={0x14, 0xfe, "443ba0a12eba56e0aaca9739613e2531"}]}, 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x20040000) (async) 1.221524247s ago: executing program 0 (id=1299): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x0, &(0x7f0000000000)=0x7, 0x4) (async) r1 = socket(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x0, 0xc, r2, 0x3}, 0xc) (async) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x28b1b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e1f}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) 1.001538663s ago: executing program 2 (id=1300): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0x2}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) (async) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0892f7226fb541b41fe9a226389f2aa73cd20124d8143ef23c69a2a2df58bcdce431c69016165ae07fefd0be1bff564d88cb121e8566abcd760c45f1a68b64afb28de8d01049fa308f149f000247d4b39ce078998a94da5594c6bc71bd01cfec07b2641132c2a367abd440ea76"], 0xffe) 1.000897038s ago: executing program 3 (id=1301): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000600010004000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40800) close(r0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x8, 0x0, 0x6, 0x2, {{0x28, 0x4, 0x1, 0x0, 0xa0, 0x65, 0x0, 0x6, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0xf}, {[@timestamp={0x44, 0x14, 0x9c, 0x0, 0x9, [0x9, 0x9, 0x80, 0x4]}, @noop, @timestamp_addr={0x44, 0x54, 0x87, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x28}, 0xff}, {@broadcast, 0x4}, {@loopback, 0x7eca}, {@multicast2, 0x5}, {@broadcast, 0x5}, {@empty, 0x7ff}, {@remote, 0x7fffffff}, {@remote, 0x800}, {@dev={0xac, 0x14, 0x14, 0x32}}, {@remote, 0x3}]}, @generic={0x7, 0x5, "07efdd"}, @timestamp_addr={0x44, 0x1c, 0x57, 0x1, 0x4, [{@multicast2, 0x5}, {@local}, {@private=0xa010101, 0xfffffffb}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x40, 0x10, 0xff, 0x0, {{0x1f, 0x4, 0x1, 0x1e, 0x7c, 0x0, 0x0, 0x19, 0x4, 0x0, @rand_addr=0x64010102, @local, {[@timestamp={0x44, 0x14, 0x1a, 0x0, 0x2, [0xf4, 0x9, 0x0, 0x1000]}, @timestamp_addr={0x44, 0x4c, 0x5b, 0x1, 0x4, [{@local, 0x9}, {@multicast1, 0xfffffffe}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0xfffffa38}, {@loopback, 0x5}, {@loopback}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@multicast1, 0x5}, {@multicast1, 0x80000001}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x1}]}, @lsrr={0x83, 0x7, 0xe1, [@loopback]}]}}}}}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000002200)=ANY=[@ANYBLOB="4c00000010000305000000e38eb74771b81e3baf73d7d360620000005500000000e6", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800c0001006d6163766c616e00140002800800010010000000080003000100000008000500", @ANYRES32=r8, @ANYBLOB], 0x4c}}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r9, 0x5421, &(0x7f00000000c0)=0x7) write$cgroup_int(r9, &(0x7f0000000140), 0xfffffdef) write$cgroup_subtree(r9, 0x0, 0x12) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r9, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000400)=[0x0, 0x0, 0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8d, &(0x7f0000000480)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x4e, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r11) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$kcm(r0, &(0x7f00000010c0)={&(0x7f0000000a40)=@ethernet={0x6}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000ac0)="81e3533924e9349b388e12b293743cf535778395306b58e0b43ca93808de82010d554d87d393849c093845725a6b56bb65d2e4db18b777097c511d03e1d3ab793ef748f3bb995e13b79d2484b81585e03c65db547720f7e5b23c94dbdea6953000a5d0156b4e66c6686eb8fc2e280112325d08d33e7f63b4d6f7d5b77327efa720a56a9c92983c74c6e1d3e64d45658351647da571dd259b302607ae7dbef333e5272bd7d4d489ccb918157d5b9ac7d47523d72b7d659e5d1a129a36fbb1b9e179ada745ba34499be35964153b24259bc5be87882b16c042ed0aed269a3794fd81d4", 0xe2}, {&(0x7f0000001200)="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", 0x1000}], 0x2, &(0x7f0000000bc0)=[{0x30, 0x119, 0x6b12, "71f7bf95af736db34bfa6800b58b57cc6b7c72b10feb8e33b7"}, {0x50, 0x107, 0xffff0001, "88091c01bf12c6db431f0bae45ba4269c2a2142254aafe404c67fc0c9763a3876935e66f1471bd74312ec01286c2fa357c0d3bf60488f589894e"}, {0x48, 0x10b, 0x0, "e99fbfdafec44b9be29d2c21b6d20149deb01aa0f9f04ac2c354fd2aaf04ae5dd08b60c63ec2da9fe7ed03cb3e46fdd0b6865356aac0fe"}, {0xf0, 0x119, 0x4, "cda8f20d692146bdeb812a4c270f3e6ce2bc66db008ba5e212967ad018b3c766ee5833c97fb5298a713a5e598a40b871d52c73d2acb9874960397251c21e20ad99070f3c68dff729a4543ce86bac89829ac159157a3b313c4467168fb9a7bfeb4786e83896f050c65c5ad7b87f7f6874a93346229af64dde175901ca5f27b9e37b62e50e89c7ad3a86660e3a8927f6353e98126a49c3e53cf43bc1f48265322b998aeadd6de921527cfada52f1a0908b1a7de902cd69bf1790a7d0b19e97de8626630545e98efc7a423c43042a73bae167c60ba87e0a0961a0a513"}, {0x100, 0x10d, 0xffffffff, "05917f066af375603f044c3a4f714d47764cde1c1f82b9738aee10b52bcfc0a1c5b6bd3d2bede067dd28b8811b9d7f8c65bd6a15cd8427dde67a5cf63995e8bd25e525a43b430b8cc078bee7f8501d32c14d4335dfe7f47c6f7000263fcef7fee1e18fa3dfe2a40ea02a79f9c0bec567fedffee97d9013f87c8d58afc122dd0f5180dbee4b223693d28bcf5164d7b909b91d736496de43dd12c3b9ff3543e9d86f69ea444a173359e2117f998271a642922b6679f2ea850b9c38e31fac750c5d28d6a91b2b62905cc310a7c3034f64a9b602ef678e9dec089040a6d4b56d4adb70277b350469a76aea61d8ea"}, {0x40, 0x305, 0x2, "b42d4fc4a40a68b5946a7d76cdd04a4c9d690250a818e93b50628ad2fd797d691084d30970815a295a78bd"}, {0xc8, 0x109, 0x1, "4c6276b425c9079d02b6456639622991de20e7cece068e011b56e68358ac122210d4a8eaa1dc18213ffcaad3ef041fc419817cddb7ab02c2c6abe73d54f7d4684416ffc3837fdb481c8762e10483527f0a4a108cce7fda39f334b04cc8bf21e7faab07ffe99c812abe99d11a01437af37bcdefd796b4b33e378cabeeca3338a8db3b076838e1f2e921bc026269d0e7e7674fe49e7307a65d91f899e8a649a28fec39d5d2227ca449f8df5af49f2b0510daa7e70d0660b2"}, {0x38, 0x115, 0xfffff9bd, "8ae64c46e7746bec3630b3d2b84e7417617266baac52ee9a6a430065ffea1bc79616"}, {0xf0, 0x84, 0x5e8f27f2, "eda44fe67c4bd3cf9c64b14133f9c139ffe45f86bd8392ae1f11f2fa508cea6e0731cda8ab354f709a03cfa55f68119b9d958be6bcb251705d3d92297ac81d4ae0e1645c8e6ef71a6550fee138043551429a1277f27ba7df1aae92a56f04e02b61a794ca3724e26d6940bd94d7ce3869b5fa36302dca9809eea4478c36ef128caa153f12b7e9ee4cc291bd295bb4e3530525b465765ba3edac14c84cbb1eac77d80b6ce3e17ac7ca67b0e5d0e5dff796f094ff0c521b76f7f8c97d7e385b0b65f407739a5db614fd5849797571862aeb18246cc3bc0c58842a91dd0e725dc985"}], 0x4e8}, 0x4000040) ioctl$ifreq_SIOCGIFINDEX_wireguard(r13, 0x8933, &(0x7f0000000340)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r11, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="78030000", @ANYRES16=r12, @ANYBLOB="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", @ANYRES32=r14], 0x378}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000007c0)={'erspan0\x00', &(0x7f00000006c0)={'syztnl0\x00', 0x0, 0x80, 0x700, 0x0, 0x5, {{0x34, 0x4, 0x0, 0x3, 0xd0, 0x66, 0x0, 0x3, 0x2f, 0x0, @broadcast, @broadcast, {[@ra={0x94, 0x4, 0x1}, @noop, @rr={0x7, 0x17, 0x8f, [@loopback, @broadcast, @multicast1, @initdev={0xac, 0x1e, 0x4, 0x0}, @loopback]}, @timestamp_prespec={0x44, 0x1c, 0xb8, 0x3, 0xc, [{@rand_addr=0x6c010102, 0x800}, {@multicast1}, {@multicast2}]}, @timestamp_prespec={0x44, 0x2c, 0xcf, 0x3, 0x8, [{@local, 0x1}, {@remote, 0xf}, {@private=0xa010100, 0xfffffffc}, {@empty, 0x43259178}, {@rand_addr=0x64010102, 0x6}]}, @noop, @noop, @timestamp={0x44, 0x8, 0x5d, 0x0, 0x7, [0x20]}, @rr={0x7, 0x23, 0xad, [@multicast1, @multicast2, @private=0xa010102, @rand_addr=0x64010101, @broadcast, @private=0xa010102, @empty, @multicast2]}, @lsrr={0x83, 0x2b, 0x6d, [@remote, @multicast2, @rand_addr=0x64010100, @empty, @dev={0xac, 0x14, 0x14, 0x24}, @broadcast, @rand_addr=0x64010102, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x4}, @broadcast]}]}}}}}) r16 = socket(0x10, 0x3, 0x0) r17 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r16, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c00070c00000000fcffffff07000000", @ANYRES32=r18, @ANYBLOB="410186000a00020001"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4090) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000800)={'hsr0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f00000009c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000980)={&(0x7f0000000840)={0x128, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x80}, 0x4000) 715.449688ms ago: executing program 1 (id=1302): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) unshare(0x26020480) (async) unshare(0x22020600) unshare(0x8060400) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x400400, 0x0) (async, rerun: 64) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) (async, rerun: 64) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) (rerun: 64) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x1) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000100)=""/120, 0x78}], 0x1, 0x4, 0x0) (async, rerun: 64) sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) (async, rerun: 64) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)={0x44, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x94d}]}]}, 0x44}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200"], 0x7c}}, 0x0) (async, rerun: 32) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$NFC_CMD_GET_TARGET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r5) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r5) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r7) (rerun: 32) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r7) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a00)=ANY=[], 0x28}}, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="580000000206010200000000000000000000000005000100070000000c0007800800120000f5ff00050004000000000005000500020000220900020073797a310000000011000300686173683a6e65742c6e6574"], 0x58}}, 0x0) 670.238789ms ago: executing program 0 (id=1303): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xd, 0x2, 0x4, 0x1, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x40000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x5, r4}, 0x38) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x10000, 0x6}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) 445.464918ms ago: executing program 1 (id=1304): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0xfff3, 0x10}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x44080) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x18, 0x35}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd0c}, 0x64) 445.000248ms ago: executing program 3 (id=1305): r0 = socket(0x2, 0xa, 0x0) r1 = accept4$tipc(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80800) ioctl$SIOCGETLINKNAME(r1, 0x89e0, &(0x7f0000000080)={0x4, 0x2}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000140)=[{0x87}, {0x6}]}, 0x10) 444.599215ms ago: executing program 0 (id=1306): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=','], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x880) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r2, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa6b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4805}, 0x4000) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000e807a982dc230bc4f6afb1fa108300010101020000000000a3583811af567e0000000a00800024140001800800010c000800080002408bb2b83692c843c87272d7421657f2cc0b8d74b55fc50d6b3930a8fe8cf7e55d4a620de5f556de71b48716b686ceab9e4da1816065e5b511993e0c3f3ca440fe2223ea48cc8dd1fa"], 0x44}, 0x1, 0x0, 0x0, 0x200448c1}, 0x40) 316.792612ms ago: executing program 3 (id=1307): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, 0x0, 0x0) connect$802154_dgram(r0, &(0x7f0000000000)={0x24, @none={0x0, 0x3}}, 0x14) sendmsg$802154_dgram(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f00000003c0)={&(0x7f0000000300)="37144651842416d8adc132b4d4fab0818f4d4c467f6ea387b0ec7187885a10ff7897cbda5f81d74ae7d2ddd9458f332b63e9b496dbc7393095bed9076b97b8d0f8637ec3ac1ad0fd83a06f4f918a4e4fb37b37b6863a2e123e60d0d63efbd2790905426760a6156082e00ccae304d7582ad5ffe4e6703cd618f8dbcdd173ddaa06e709aae10fc33cb87e08b5c35cd4fe460727dd7edd74da9dc882ec3d", 0x9d}, 0x1, 0x0, 0x0, 0x4000800}, 0x80800) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001000010840000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08fa1b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) (async) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001000010840000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08fa1b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="b40800000000000073119a00000000008510000002000000b7000000000000009500c200000000009500001200000000978397f6f8d449eca162e33d3cc50e3ea2bda29b6c5c0dd4ae4a5723d7bb1782d799214e20806df14107bbb18383f65bfa943f096ffd3f1a5195665bd897b554a4229f80258ac79116086d8764612511b5fbf0562c4034196f45d920ce764e50311836d630a55bd079ffb7c7bfd4d9e226"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="b40800000000000073119a00000000008510000002000000b7000000000000009500c200000000009500001200000000978397f6f8d449eca162e33d3cc50e3ea2bda29b6c5c0dd4ae4a5723d7bb1782d799214e20806df14107bbb18383f65bfa943f096ffd3f1a5195665bd897b554a4229f80258ac79116086d8764612511b5fbf0562c4034196f45d920ce764e50311836d630a55bd079ffb7c7bfd4d9e226"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70) bind$pptp(r1, &(0x7f0000001740)={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1e) recvmmsg(r2, &(0x7f00000016c0)=[{{&(0x7f00000000c0)=@hci, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000180)=""/55, 0x37}, {&(0x7f00000001c0)=""/253, 0xfd}, {&(0x7f0000001880)=""/128, 0x80}, {&(0x7f0000000640)=""/64, 0x40}, {&(0x7f0000001780)=""/95, 0x5f}], 0x5, &(0x7f00000006c0)=""/4096, 0x1000}, 0x80000000}], 0x55d, 0x20, &(0x7f0000001700)) 278.883697ms ago: executing program 0 (id=1308): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = gettid() syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x403, 0xfffffffd, 0x25dfdbfe, {0x0, 0x0, 0x74, r6, 0x19c04, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4802}, 0x0) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x9a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r9, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r10, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) r11 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRESDEC=r3], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xbf, &(0x7f000000cf3d)=""/191, 0x0, 0x24, '\x00', 0x0, @sk_msg}, 0x94) r12 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r12, r11, 0x7}, 0x10) close(r12) connect$rose(r10, &(0x7f00000000c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @null]}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x1}}}}]}, 0x40}}, 0xc0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000700)={0x38, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVKEY={0x1c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}}, 0x40) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r13) ioctl$sock_SIOCGIFINDEX_802154(r13, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r13, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x4c, r14, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r15}, @NL802154_ATTR_SEC_DEVKEY={0x30, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008005}, 0x4880) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x48, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0xc4}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xff}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x7}]}, 0x48}}, 0x801) 225.129201ms ago: executing program 1 (id=1309): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r2 = accept4(r1, 0x0, 0x0, 0x800) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x325) (async) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0xfc}}, 0x14) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) (async) close(r6) 224.217461ms ago: executing program 2 (id=1310): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x7, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{0x2, 0x1}, 0x0, 0x2, 0x0, 0x0, "895a824b22e86d12"}}, 0x48}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000003e0007012fbd7000fcdbdf25047c0000040000002000018006000600800a000014001900fe"], 0x38}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000016000107030000000000000007"], 0x14}, 0x1, 0x0, 0x0, 0xc4}, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}, 0xe, 'wlan1\x00'}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x9) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r4, 0x89f0, &(0x7f0000000000)) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) 87.669521ms ago: executing program 1 (id=1311): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x4000001c}]}}}]}, 0x44}}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000001c0)={r4, 0x1, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, 0x10) getpeername$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000140)={r5, 0x1, 0x6, @local}, 0x10) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000600)={r4, 0x1, 0x6, @remote}, 0x10) sendmsg$nl_route(r0, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003900)=@dellinkprop={0x34, 0x6d, 0x511, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r4, 0x2, 0x440c0}, [@IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004001}, 0x24000000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40d, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x484cb}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x7fff}]}}}]}, 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x4000001c}]}}}]}, 0x44}}, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'team0\x00'}) (async) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000001c0)={r4, 0x1, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, 0x10) (async) getpeername$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14) (async) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000140)={r5, 0x1, 0x6, @local}, 0x10) (async) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000600)={r4, 0x1, 0x6, @remote}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003900)=@dellinkprop={0x34, 0x6d, 0x511, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r4, 0x2, 0x440c0}, [@IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004001}, 0x24000000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40d, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x484cb}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x7fff}]}}}]}, 0x3c}}, 0x0) (async) 0s ago: executing program 3 (id=1312): syz_emit_ethernet(0xbe, &(0x7f0000000600)=ANY=[@ANYRESDEC, @ANYBLOB="26d1ecb50e3d5106096fa0f3ed567787a0fa6e75a1d7bd509fa4b166e4d2d04db6", @ANYRES8=0xffffffffffffffff, @ANYRES8], 0x0) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'veth0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000001100), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r4, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x20000085) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000010000000000000000000000791204000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000009000000000000000000ca2f397a6cc100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'lo\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78dbe52163448412ba8", 0xa}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYRES16=r0, @ANYRES32=r11, @ANYRESOCT=r4], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xe8, 0x4) socket$inet_sctp(0x2, 0x5, 0x84) syz_80211_join_ibss(&(0x7f0000000540)='wlan1\x00', &(0x7f0000000580)=@default_ibss_ssid, 0x6, 0x0) kernel console output (not intermixed with test programs): tdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.620259][ T5834] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.631245][ T5834] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.640297][ T5834] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.656545][ T5837] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.670978][ T5837] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.679875][ T5837] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.689792][ T5837] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.866655][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.882587][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.023056][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.047829][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.081879][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.091803][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.237344][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.245208][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.259852][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.292983][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.415953][ T1085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.446693][ T1085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.550899][ T1085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.560472][ T1085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.597898][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.640647][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.711315][ T5836] Bluetooth: hci0: command tx timeout [ 88.808026][ T5960] syz.0.8 uses obsolete (PF_INET,SOCK_PACKET) [ 88.875487][ T5836] Bluetooth: hci2: command tx timeout [ 88.883819][ T5836] Bluetooth: hci1: command tx timeout [ 89.108138][ T5845] Bluetooth: hci3: command tx timeout [ 89.113617][ T5845] Bluetooth: hci4: command tx timeout [ 89.434099][ T5996] netlink: 'syz.2.14': attribute type 10 has an invalid length. [ 89.744877][ T5996] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.754172][ T6010] netlink: 10 bytes leftover after parsing attributes in process `syz.1.19'. [ 89.774767][ T5996] bond0: (slave team0): Enslaving as an active interface with an up link [ 89.789596][ T6012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16'. [ 89.803060][ T6012] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 89.890338][ T6012] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 90.021834][ T6019] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 90.126521][ T6020] veth0: entered promiscuous mode [ 90.148220][ T6023] netlink: 'syz.1.22': attribute type 1 has an invalid length. [ 90.158780][ T6013] pim6reg1: entered promiscuous mode [ 90.176571][ T6013] pim6reg1: entered allmulticast mode [ 90.179860][ T6020] Cannot find set identified by id 0 to match [ 90.294207][ T6022] veth0: left promiscuous mode [ 90.366095][ T6029] netlink: 'syz.2.24': attribute type 1 has an invalid length. [ 90.538766][ T6032] netlink: 248 bytes leftover after parsing attributes in process `syz.1.26'. [ 90.573641][ T6037] x_tables: duplicate underflow at hook 1 [ 90.846871][ T6037] bond0: entered promiscuous mode [ 90.875404][ T6037] bond_slave_0: entered promiscuous mode [ 90.896507][ T6037] bond_slave_1: entered promiscuous mode [ 90.922062][ T6037] team0: entered promiscuous mode [ 90.954309][ T6037] team_slave_0: entered promiscuous mode [ 90.967642][ T6037] team_slave_1: entered promiscuous mode [ 91.019228][ T6045] !: renamed from dummy0 (while UP) [ 91.447632][ T6066] netlink: 4 bytes leftover after parsing attributes in process `syz.2.33'. [ 93.115200][ T6134] netlink: 16 bytes leftover after parsing attributes in process `syz.4.46'. [ 93.426538][ T6149] Zero length message leads to an empty skb [ 93.517706][ T6152] netlink: 'syz.3.52': attribute type 4 has an invalid length. [ 93.710781][ T6158] netlink: 8 bytes leftover after parsing attributes in process `syz.4.54'. [ 93.822693][ T6162] netlink: 2716 bytes leftover after parsing attributes in process `syz.0.56'. [ 93.855867][ T6162] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 94.029741][ T6172] netlink: 'syz.4.58': attribute type 8 has an invalid length. [ 94.256218][ T6172] netlink: 12 bytes leftover after parsing attributes in process `syz.4.58'. [ 94.379536][ T6177] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.448982][ T6183] bridge0: port 3(gretap0) entered blocking state [ 94.455695][ T6183] bridge0: port 3(gretap0) entered disabled state [ 94.506025][ T6183] gretap0: entered allmulticast mode [ 94.526387][ T6183] gretap0: entered promiscuous mode [ 94.535022][ T6183] bridge0: port 3(gretap0) entered blocking state [ 94.541951][ T6183] bridge0: port 3(gretap0) entered forwarding state [ 94.606943][ T6177] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.828635][ T6177] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.978258][ T6209] pimreg: entered allmulticast mode [ 95.061343][ T6222] netlink: 'syz.2.66': attribute type 10 has an invalid length. [ 95.156976][ T6177] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.225354][ T6228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.68'. [ 95.255630][ T6222] bond0: left promiscuous mode [ 95.268464][ T6222] bond_slave_0: left promiscuous mode [ 95.293514][ T6222] bond_slave_1: left promiscuous mode [ 95.325057][ T6222] team0: left promiscuous mode [ 95.346675][ T6222] team_slave_0: left promiscuous mode [ 95.374536][ T6222] team_slave_1: left promiscuous mode [ 95.401626][ T6222] team0: Device bond0 is already an upper device of the team interface [ 95.453127][ T6223] ip6tnl1: entered promiscuous mode [ 95.469820][ T6223] ip6tnl1: entered allmulticast mode [ 95.601017][ T6224] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.742633][ T6240] netlink: 'syz.2.71': attribute type 1 has an invalid length. [ 95.778245][ T6242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.72'. [ 95.814442][ T6224] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.979404][ T6177] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.029160][ T6177] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.078748][ T6177] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.165624][ T6224] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.280079][ T6177] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.447890][ T6224] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.570755][ T6224] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.590987][ T6224] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.610242][ T6224] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.660295][ T6224] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.700984][ T6261] netlink: 16 bytes leftover after parsing attributes in process `syz.1.74'. [ 97.091248][ T6285] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.119951][ T6286] netlink: 56 bytes leftover after parsing attributes in process `syz.2.83'. [ 97.234572][ T6291] netlink: 20 bytes leftover after parsing attributes in process `syz.0.84'. [ 97.280524][ T6295] netlink: 40 bytes leftover after parsing attributes in process `syz.4.85'. [ 97.491396][ T6306] netlink: 132 bytes leftover after parsing attributes in process `syz.2.88'. [ 97.767100][ T6325] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.95'. [ 97.883173][ T6328] openvswitch: netlink: Missing key (keys=40, expected=100) [ 97.893660][ T6333] netlink: 36 bytes leftover after parsing attributes in process `syz.4.96'. [ 97.905514][ T6332] netlink: 20 bytes leftover after parsing attributes in process `syz.2.92'. [ 98.244389][ T6347] netlink: 'syz.1.100': attribute type 2 has an invalid length. [ 98.852724][ T6382] netlink: 'syz.0.112': attribute type 21 has an invalid length. [ 98.868862][ T6382] IPv6: NLM_F_CREATE should be specified when creating new route [ 98.877155][ T6382] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 98.878017][ T6378] erspan0: entered promiscuous mode [ 98.884896][ T6382] IPv6: NLM_F_CREATE should be set when creating new route [ 98.897940][ T6382] IPv6: NLM_F_CREATE should be set when creating new route [ 98.905320][ T6382] IPv6: NLM_F_CREATE should be set when creating new route [ 98.931969][ T6378] vlan2: entered promiscuous mode [ 99.060938][ T6387] tipc: Enabling of bearer rejected, failed to enable media [ 99.134477][ T6373] syz.2.109 (6373) used greatest stack depth: 17144 bytes left [ 99.196516][ T6395] netlink: 'syz.4.117': attribute type 1 has an invalid length. [ 99.204352][ T6395] netlink: 'syz.4.117': attribute type 1 has an invalid length. [ 99.883236][ T6436] team0: Device gtp0 is of different type [ 100.261659][ T6452] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.300522][ T6452] netlink: 'syz.0.131': attribute type 12 has an invalid length. [ 100.316394][ T6452] __nla_validate_parse: 7 callbacks suppressed [ 100.316413][ T6452] netlink: 132 bytes leftover after parsing attributes in process `syz.0.131'. [ 100.521144][ T6459] netlink: 'syz.1.133': attribute type 1 has an invalid length. [ 100.530586][ T6460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.134'. [ 100.564875][ T6464] netlink: 80 bytes leftover after parsing attributes in process `syz.0.136'. [ 100.588484][ T6464] netlink: 104 bytes leftover after parsing attributes in process `syz.0.136'. [ 100.669619][ T6459] bond2: entered promiscuous mode [ 100.686429][ T6459] 8021q: adding VLAN 0 to HW filter on device bond2 [ 100.791056][ T6478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.137'. [ 100.814857][ T6466] 8021q: adding VLAN 0 to HW filter on device bond2 [ 100.824425][ T6466] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 100.857670][ T6466] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 100.932874][ T6466] bond2: (slave wireguard0): making interface the new active one [ 100.985338][ T6466] wireguard0: entered promiscuous mode [ 101.008653][ T6466] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 101.057607][ T6469] netlink: 20 bytes leftover after parsing attributes in process `syz.4.137'. [ 101.129862][ T6490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.141'. [ 101.547849][ T6508] netlink: 28 bytes leftover after parsing attributes in process `syz.1.148'. [ 101.587564][ T6507] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 101.759231][ T6520] bridge_slave_0: left allmulticast mode [ 101.794918][ T6520] bridge_slave_0: left promiscuous mode [ 101.810316][ T6520] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.905649][ T6520] bridge_slave_1: left allmulticast mode [ 101.915443][ T6520] bridge_slave_1: left promiscuous mode [ 101.924830][ T6520] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.973622][ T6520] bond0: (slave bond_slave_0): Releasing backup interface [ 102.017074][ T6520] bond0: (slave bond_slave_1): Releasing backup interface [ 102.044759][ T6520] team0: Port device team_slave_0 removed [ 102.060734][ T6520] team0: Port device team_slave_1 removed [ 102.068050][ T6520] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.075645][ T6520] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.093681][ T6520] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.101691][ T6520] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.466031][ T6550] netlink: 300 bytes leftover after parsing attributes in process `syz.2.157'. [ 102.509778][ T6548] netlink: 'syz.1.156': attribute type 1 has an invalid length. [ 102.543538][ T6548] netlink: 224 bytes leftover after parsing attributes in process `syz.1.156'. [ 102.575338][ T6548] netlink: 'syz.1.156': attribute type 1 has an invalid length. [ 102.677873][ T6559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.142831][ T6580] delete_channel: no stack [ 103.427674][ T6596] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 103.701263][ T6607] dvmrp1: entered allmulticast mode [ 104.033635][ T6624] syzkaller1: entered promiscuous mode [ 104.063821][ T6624] syzkaller1: entered allmulticast mode [ 104.080984][ T6631] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 104.610560][ T6657] policy can only be matched on NF_INET_PRE_ROUTING [ 104.610587][ T6657] unable to load match [ 104.680378][ T6665] netlink: 'syz.1.193': attribute type 11 has an invalid length. [ 104.796705][ T6663] team0: Device gtp0 is of different type [ 105.330897][ T6696] bridge0: port 1(gretap0) entered blocking state [ 105.349710][ T6696] bridge0: port 1(gretap0) entered disabled state [ 105.367853][ T6696] gretap0: entered allmulticast mode [ 105.396708][ T6696] gretap0: entered promiscuous mode [ 105.410715][ T6703] netlink: 'syz.0.204': attribute type 1 has an invalid length. [ 105.413151][ T6696] bridge0: port 1(gretap0) entered blocking state [ 105.425238][ T6696] bridge0: port 1(gretap0) entered forwarding state [ 105.436301][ T6703] netlink: 'syz.0.204': attribute type 2 has an invalid length. [ 105.488043][ T6708] vxcan1 speed is unknown, defaulting to 1000 [ 105.530209][ T6708] vxcan1 speed is unknown, defaulting to 1000 [ 105.569532][ T6708] vxcan1 speed is unknown, defaulting to 1000 [ 105.719668][ T6713] sctp: [Deprecated]: syz.3.208 (pid 6713) Use of int in maxseg socket option. [ 105.719668][ T6713] Use struct sctp_assoc_value instead [ 105.894530][ T6718] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.903909][ T6718] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.573936][ T6753] warning: `syz.2.218' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 106.654554][ T977] vxcan1 speed is unknown, defaulting to 1000 [ 106.668707][ T6708] infiniband syz2: set active [ 106.689920][ T6708] infiniband syz2: added vxcan1 [ 106.727808][ T6708] syz2: rxe_create_cq: returned err = -12 [ 106.771257][ T6708] infiniband syz2: Couldn't create ib_mad CQ [ 106.806264][ T6708] infiniband syz2: Couldn't open port 1 [ 106.943913][ T6708] RDS/IB: syz2: added [ 106.968024][ T6708] smc: adding ib device syz2 with port count 1 [ 106.997862][ T6708] smc: ib device syz2 port 1 has pnetid SYZ2 (user defined) [ 107.018450][ T6770] __nla_validate_parse: 44 callbacks suppressed [ 107.018470][ T6770] netlink: 12 bytes leftover after parsing attributes in process `syz.3.223'. [ 107.025572][ T5893] vxcan1 speed is unknown, defaulting to 1000 [ 107.062718][ T6774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.224'. [ 107.068645][ T6708] vxcan1 speed is unknown, defaulting to 1000 [ 107.275756][ T6788] netlink: 'syz.3.228': attribute type 2 has an invalid length. [ 107.344953][ T6788] netlink: 1184 bytes leftover after parsing attributes in process `syz.3.228'. [ 107.395512][ T6792] netlink: 'syz.2.230': attribute type 1 has an invalid length. [ 107.559337][ T6796] netlink: 'syz.3.232': attribute type 10 has an invalid length. [ 107.582942][ T6796] team0: Device veth1_macvtap failed to register rx_handler [ 107.713122][ T6800] netlink: 20 bytes leftover after parsing attributes in process `syz.1.234'. [ 107.757071][ T6802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.235'. [ 107.772702][ T6802] netlink: 'syz.3.235': attribute type 5 has an invalid length. [ 107.794168][ T6802] netlink: 20 bytes leftover after parsing attributes in process `syz.3.235'. [ 107.913196][ T6708] vxcan1 speed is unknown, defaulting to 1000 [ 107.935689][ T6810] netlink: 104 bytes leftover after parsing attributes in process `syz.2.237'. [ 107.956701][ T6800] netlink: 12 bytes leftover after parsing attributes in process `syz.1.234'. [ 107.969417][ T6810] xt_hashlimit: size too large, truncated to 1048576 [ 108.067832][ T6814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.237'. [ 108.606635][ T6708] vxcan1 speed is unknown, defaulting to 1000 [ 108.735370][ T6837] netlink: 'syz.2.246': attribute type 2 has an invalid length. [ 108.940519][ T6847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.248'. [ 109.356556][ T6865] netlink: 'syz.2.253': attribute type 11 has an invalid length. [ 109.479496][ T6860] bridge_slave_1: left allmulticast mode [ 109.492260][ T6860] bridge_slave_1: left promiscuous mode [ 109.498561][ T6860] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.511823][ T6860] bridge_slave_0: left allmulticast mode [ 109.519157][ T6860] bridge_slave_0: left promiscuous mode [ 109.525196][ T6860] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.611890][ T6708] vxcan1 speed is unknown, defaulting to 1000 [ 109.949240][ T6876] openvswitch: netlink: Flow actions attr not present in new flow. [ 109.950160][ T6708] vxcan1 speed is unknown, defaulting to 1000 [ 110.193008][ T6882] Bluetooth: MGMT ver 1.23 [ 110.213726][ T6865] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:90c9:96ff:fe37:dee5 error=-28 [ 110.376111][ T6887] netlink: 'syz.1.264': attribute type 13 has an invalid length. [ 110.892165][ T6865] infiniband syz!: set active [ 110.901645][ T6865] infiniband syz!: added team_slave_0 [ 110.908492][ T6865] syz!: rxe_create_cq: returned err = -12 [ 110.938682][ T6865] infiniband syz!: Couldn't create ib_mad CQ [ 110.945314][ T6865] infiniband syz!: Couldn't open port 1 [ 110.996403][ T6865] RDS/IB: syz!: added [ 111.013044][ T6865] smc: adding ib device syz! with port count 1 [ 111.050668][ T6865] smc: ib device syz! port 1 has pnetid [ 111.117836][ T6918] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.235370][ T6918] bridge_slave_1 (unregistering): left allmulticast mode [ 111.253799][ T6918] bridge_slave_1 (unregistering): left promiscuous mode [ 111.297481][ T6918] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.537731][ T6929] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 112.135310][ T6958] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 112.149922][ T6959] netlink: 'syz.3.291': attribute type 11 has an invalid length. [ 112.177367][ T6959] netlink: 'syz.3.291': attribute type 11 has an invalid length. [ 112.185159][ T6959] __nla_validate_parse: 10 callbacks suppressed [ 112.185173][ T6959] netlink: 224 bytes leftover after parsing attributes in process `syz.3.291'. [ 112.233423][ T5836] Bluetooth: hci2: command 0x0401 tx timeout [ 112.239849][ T5845] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 112.380936][ T6968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.293'. [ 112.417899][ T6968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.293'. [ 112.427925][ T6968] netlink: 32 bytes leftover after parsing attributes in process `syz.0.293'. [ 112.474544][ T6975] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 112.504354][ T5845] block nbd0: Receive control failed (result -107) [ 112.537479][ T6968] nbd0: detected capacity change from 0 to 256 [ 112.546221][ T5838] block nbd0: Dead connection, failed to find a fallback [ 112.586248][ T5838] block nbd0: shutting down sockets [ 112.592609][ T5838] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 112.607671][ T5838] Buffer I/O error on dev nbd0, logical block 0, async page read [ 112.615826][ T5838] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 112.625552][ T5838] Buffer I/O error on dev nbd0, logical block 0, async page read [ 112.634193][ T5838] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 112.645245][ T5838] Buffer I/O error on dev nbd0, logical block 0, async page read [ 112.653553][ T5838] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 112.663236][ T5838] Buffer I/O error on dev nbd0, logical block 0, async page read [ 112.672518][ T5838] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 112.682985][ T5838] Buffer I/O error on dev nbd0, logical block 0, async page read [ 112.691298][ T5838] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 112.700940][ T5838] Buffer I/O error on dev nbd0, logical block 0, async page read [ 112.756979][ T5838] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 112.780964][ T5838] Buffer I/O error on dev nbd0, logical block 0, async page read [ 112.810934][ T5838] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 112.872141][ T5838] Buffer I/O error on dev nbd0, logical block 0, async page read [ 112.927499][ T5838] ldm_validate_partition_table(): Disk read failed. [ 112.936424][ T6987] netlink: 88 bytes leftover after parsing attributes in process `syz.0.297'. [ 112.973298][ T6987] netlink: 24 bytes leftover after parsing attributes in process `syz.0.297'. [ 112.982420][ T5838] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 113.004138][ T5838] Buffer I/O error on dev nbd0, logical block 0, async page read [ 113.033977][ T6987] netlink: 24 bytes leftover after parsing attributes in process `syz.0.297'. [ 113.035783][ T5838] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 113.100222][ T5838] Buffer I/O error on dev nbd0, logical block 0, async page read [ 113.153284][ T5838] Dev nbd0: unable to read RDB block 0 [ 113.178089][ T5838] nbd0: unable to read partition table [ 113.243986][ T5838] ldm_validate_partition_table(): Disk read failed. [ 113.271637][ T5838] Dev nbd0: unable to read RDB block 0 [ 113.294599][ T5838] nbd0: unable to read partition table [ 113.568156][ T7010] netlink: 4 bytes leftover after parsing attributes in process `syz.3.302'. [ 113.783536][ T7024] nft_compat: unsupported protocol 5 [ 113.931131][ T7029] xt_cluster: node mask cannot exceed total number of nodes [ 114.210598][ T7036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.308'. [ 114.659054][ T5941] IPVS: starting estimator thread 0... [ 114.771282][ T7044] IPVS: using max 33 ests per chain, 79200 per kthread [ 115.250159][ T7067] trusted_key: syz.4.316 sent an empty control message without MSG_MORE. [ 115.333497][ T7076] netlink: 72 bytes leftover after parsing attributes in process `syz.2.318'. [ 115.556809][ T7084] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 115.578499][ T7084] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -1 [ 116.771268][ T7138] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 116.783219][ T7140] x_tables: unsorted underflow at hook 4 [ 116.826873][ T59] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.950490][ T59] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.043922][ T59] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.162119][ T59] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.202851][ T7149] IPv6: Can't replace route, no match found [ 117.220506][ T7150] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 117.600942][ T7171] __nla_validate_parse: 3 callbacks suppressed [ 117.600965][ T7171] netlink: 20 bytes leftover after parsing attributes in process `syz.1.343'. [ 117.981215][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 117.990393][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 118.000123][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 118.010533][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 118.018775][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 118.257587][ T59] gretap0: left allmulticast mode [ 118.267628][ T59] gretap0: left promiscuous mode [ 118.284812][ T59] bridge0: port 1(gretap0) entered disabled state [ 119.224863][ T59] bond0 (unregistering): Released all slaves [ 119.359844][ T7182] vxcan1 speed is unknown, defaulting to 1000 [ 119.579779][ T7222] netlink: 'syz.1.358': attribute type 304 has an invalid length. [ 119.584326][ T7224] x_tables: ip_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 119.893559][ T7228] hsr0: entered promiscuous mode [ 119.922435][ T7228] hsr0: entered allmulticast mode [ 119.965502][ T7228] hsr_slave_0: entered allmulticast mode [ 119.998499][ T7228] hsr_slave_1: entered allmulticast mode [ 120.011650][ T7229] xt_CT: No such helper "syz0" [ 120.028963][ T7242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.363'. [ 120.069295][ T5845] Bluetooth: hci2: command tx timeout [ 120.158680][ T7246] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 120.648872][ T7258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.366'. [ 120.842637][ T7263] netlink: 60 bytes leftover after parsing attributes in process `syz.1.368'. [ 121.049956][ T7274] netlink: 'syz.1.371': attribute type 1 has an invalid length. [ 121.087173][ T7274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.371'. [ 121.660718][ T59] hsr_slave_0: left promiscuous mode [ 121.704331][ T59] hsr_slave_1: left promiscuous mode [ 121.735524][ T59] veth1_macvtap: left promiscuous mode [ 121.745325][ T7302] openvswitch: netlink: EtherType 0 is less than min 600 [ 121.765036][ T59] veth0_macvtap: left promiscuous mode [ 121.771124][ T59] veth1_vlan: left promiscuous mode [ 121.776845][ T59] veth0_vlan: left promiscuous mode [ 122.160218][ T5845] Bluetooth: hci2: command tx timeout [ 122.700214][ T7300] netlink: 4 bytes leftover after parsing attributes in process `syz.3.379'. [ 122.705956][ T7304] netlink: 8 bytes leftover after parsing attributes in process `syz.3.379'. [ 122.722721][ T7310] 8021q: VLANs not supported on ip_vti0 [ 122.729298][ T7311] batadv_slave_1: entered promiscuous mode [ 122.739459][ T7302] batadv_slave_1: left promiscuous mode [ 123.295809][ T7331] vxcan1 speed is unknown, defaulting to 1000 [ 123.317749][ T7339] tipc: Can't bind to reserved service type 0 [ 123.342241][ T7182] chnl_net:caif_netlink_parms(): no params data found [ 123.497935][ T7347] netlink: 64 bytes leftover after parsing attributes in process `syz.1.390'. [ 123.808188][ T7361] Bluetooth: MGMT ver 1.23 [ 123.882238][ T7364] netlink: 4 bytes leftover after parsing attributes in process `syz.1.394'. [ 123.931953][ T7182] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.939899][ T7182] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.947210][ T7182] bridge_slave_0: entered allmulticast mode [ 123.970074][ T7182] bridge_slave_0: entered promiscuous mode [ 123.983457][ T7182] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.001857][ T7182] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.020507][ T7182] bridge_slave_1: entered allmulticast mode [ 124.035935][ T7182] bridge_slave_1: entered promiscuous mode [ 124.065759][ T7369] tipc: Started in network mode [ 124.071009][ T7369] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 124.092420][ T7369] tipc: Enabled bearer , priority 0 [ 124.228680][ T5845] Bluetooth: hci2: command tx timeout [ 124.375528][ T7379] veth1_macvtap: left promiscuous mode [ 124.474643][ T7182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.506864][ T7182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.709655][ T7396] netlink: 4 bytes leftover after parsing attributes in process `syz.3.402'. [ 124.749383][ T7182] team0: Port device team_slave_0 added [ 124.782480][ T7392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.402'. [ 124.839776][ T7182] team0: Port device team_slave_1 added [ 124.943036][ T7182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.952354][ T7182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.984681][ T7182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.999384][ T7410] netlink: 'syz.3.407': attribute type 11 has an invalid length. [ 125.008877][ T7410] netlink: 224 bytes leftover after parsing attributes in process `syz.3.407'. [ 125.047789][ T7182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.055223][ T7182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.081593][ T7182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.153549][ T7414] netlink: 32 bytes leftover after parsing attributes in process `syz.3.407'. [ 125.219032][ T5893] tipc: Node number set to 11578026 [ 125.566056][ T7182] hsr_slave_0: entered promiscuous mode [ 125.581270][ T7182] hsr_slave_1: entered promiscuous mode [ 125.600500][ T7182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 125.627479][ T7182] Cannot create hsr debugfs directory [ 125.727002][ T7435] netlink: 84 bytes leftover after parsing attributes in process `syz.1.412'. [ 126.016295][ T7450] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 126.280621][ T7453] netlink: 'syz.0.418': attribute type 12 has an invalid length. [ 126.312918][ T5845] Bluetooth: hci2: command tx timeout [ 126.679095][ T7468] netlink: 28 bytes leftover after parsing attributes in process `syz.0.423'. [ 126.699575][ T7468] netlink: 'syz.0.423': attribute type 10 has an invalid length. [ 126.795329][ T7468] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.831617][ T7468] bond0: (slave team0): Enslaving as an active interface with an up link [ 130.864668][ T7487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.430'. [ 130.874713][ T7491] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.884367][ T7494] Illegal XDP return value 4294967289 on prog (id 188) dev N/A, expect packet loss! [ 130.986625][ T7182] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 131.029034][ T7182] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 131.092498][ T7182] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 131.154366][ T7182] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 131.426752][ T7182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.504120][ T7182] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.529791][ T1085] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.533648][ T7525] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.537056][ T1085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.570367][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.577594][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.644552][ T7529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.443'. [ 131.895437][ T7540] netlink: 'syz.0.447': attribute type 1 has an invalid length. [ 132.050402][ T7549] netlink: 'syz.2.451': attribute type 1 has an invalid length. [ 132.557145][ T7182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.891406][ T7590] netlink: 256 bytes leftover after parsing attributes in process `syz.3.459'. [ 133.193494][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.201334][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.384767][ T7182] veth0_vlan: entered promiscuous mode [ 133.407254][ T7182] veth1_vlan: entered promiscuous mode [ 133.530596][ T7182] veth0_macvtap: entered promiscuous mode [ 133.572774][ T7182] veth1_macvtap: entered promiscuous mode [ 133.666909][ T7182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.694838][ T7182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.753231][ T7182] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.766559][ T7182] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.772283][ T7631] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.470'. [ 133.788933][ T7182] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.800996][ T7182] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.844129][ T7635] netlink: 348 bytes leftover after parsing attributes in process `syz.2.470'. [ 133.955593][ T7640] netlink: 128 bytes leftover after parsing attributes in process `syz.1.472'. [ 134.010579][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.043400][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.107107][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.107877][ T7643] netlink: 216 bytes leftover after parsing attributes in process `syz.1.473'. [ 134.120899][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.124920][ T7643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.473'. [ 134.142790][ T7646] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.474'. [ 134.304904][ T7650] netlink: 56 bytes leftover after parsing attributes in process `syz.1.475'. [ 134.418343][ T7655] 8021q: VLANs not supported on ipvlan0 [ 134.523736][ T7664] veth1_to_team: mtu greater than device maximum [ 134.535333][ T7664] xt_CT: You must specify a L4 protocol and not use inversions on it [ 134.622682][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.764867][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.803911][ T7670] geneve2: entered promiscuous mode [ 134.809356][ T7670] geneve2: entered allmulticast mode [ 134.894618][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.041436][ T7677] xt_bpf: check failed: parse error [ 135.049581][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.255447][ T7684] netlink: 'syz.3.487': attribute type 10 has an invalid length. [ 135.297756][ T7684] tipc: Resetting bearer [ 135.383863][ T7684] batman_adv: batadv0: Adding interface: team0 [ 135.412818][ T7690] netlink: 'syz.0.488': attribute type 10 has an invalid length. [ 135.422077][ T7684] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 135.444955][ T7684] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 135.476150][ T7690] dummy0: entered promiscuous mode [ 135.502086][ T7690] bridge0: port 4(dummy0) entered blocking state [ 135.527601][ T7690] bridge0: port 4(dummy0) entered disabled state [ 135.550553][ T7690] dummy0: entered allmulticast mode [ 135.601408][ T7690] bridge0: port 4(dummy0) entered blocking state [ 135.607998][ T7690] bridge0: port 4(dummy0) entered forwarding state [ 135.646005][ T5150] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 135.655135][ T5150] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 135.667829][ T5150] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 135.685014][ T5150] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 135.693708][ T5150] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 135.793393][ T5893] hid-generic 0005:0C45:1010.0001: item fetching failed at offset 0/1 [ 135.806204][ T5893] hid-generic 0005:0C45:1010.0001: probe with driver hid-generic failed with error -22 [ 135.864906][ T36] bridge_slave_1: left allmulticast mode [ 135.911500][ T36] bridge_slave_1: left promiscuous mode [ 135.932447][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.979849][ T36] bridge_slave_0: left allmulticast mode [ 135.999566][ T36] bridge_slave_0: left promiscuous mode [ 136.005414][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.204490][ T7722] __nla_validate_parse: 5 callbacks suppressed [ 136.204505][ T7722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.494'. [ 136.319202][ T7725] netlink: 'syz.0.494': attribute type 4 has an invalid length. [ 136.408078][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.419169][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.436814][ T36] bond0 (unregistering): Released all slaves [ 136.451876][ T7697] vxcan1 speed is unknown, defaulting to 1000 [ 136.478720][ T5836] Bluetooth: hci4: command 0x0405 tx timeout [ 136.513876][ T7718] dvmrp0: entered allmulticast mode [ 136.718278][ T7732] netlink: 16 bytes leftover after parsing attributes in process `syz.2.499'. [ 137.183298][ T7739] syzkaller0: entered promiscuous mode [ 137.189271][ T7739] syzkaller0: entered allmulticast mode [ 137.435858][ T7759] netlink: 24 bytes leftover after parsing attributes in process `syz.0.505'. [ 137.464241][ T7759] netlink: 12 bytes leftover after parsing attributes in process `syz.0.505'. [ 137.613380][ T7767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.507'. [ 137.747565][ T5836] Bluetooth: hci2: command tx timeout [ 139.276367][ T36] hsr_slave_0: left promiscuous mode [ 139.326176][ T36] hsr_slave_1: left promiscuous mode [ 139.349031][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.373852][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.402570][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.435972][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.497733][ T36] veth1_macvtap: left promiscuous mode [ 139.503649][ T36] veth0_macvtap: left promiscuous mode [ 139.519974][ T36] veth1_vlan: left promiscuous mode [ 139.530080][ T36] veth0_vlan: left promiscuous mode [ 139.838351][ T5836] Bluetooth: hci2: command tx timeout [ 140.484000][ T36] team0 (unregistering): Port device team_slave_1 removed [ 140.577111][ T36] team0 (unregistering): Port device team_slave_0 removed [ 141.529095][ T7809] netlink: 72 bytes leftover after parsing attributes in process `syz.1.517'. [ 141.862002][ T7697] chnl_net:caif_netlink_parms(): no params data found [ 141.910883][ T5836] Bluetooth: hci2: command tx timeout [ 142.190659][ T7828] netlink: 20 bytes leftover after parsing attributes in process `syz.1.522'. [ 142.340778][ T7697] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.348940][ T7697] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.357163][ T7697] bridge_slave_0: entered allmulticast mode [ 142.368284][ T7697] bridge_slave_0: entered promiscuous mode [ 142.382587][ T7697] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.409626][ T7697] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.416919][ T7697] bridge_slave_1: entered allmulticast mode [ 142.422290][ T7840] netlink: 24 bytes leftover after parsing attributes in process `syz.0.524'. [ 142.440206][ T7697] bridge_slave_1: entered promiscuous mode [ 142.655992][ T7844] IPVS: set_ctl: invalid protocol: 23 172.20.20.45:20004 [ 142.695562][ T7697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.733350][ T7697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.921227][ T7697] team0: Port device team_slave_0 added [ 142.928329][ T7853] xt_policy: output policy not valid in PREROUTING and INPUT [ 142.997924][ T7851] vlan2: entered promiscuous mode [ 143.014288][ T7857] netlink: 4 bytes leftover after parsing attributes in process `syz.1.529'. [ 143.017334][ T7851] bridge0: entered promiscuous mode [ 143.060605][ T7697] team0: Port device team_slave_1 added [ 143.285305][ T7697] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.297672][ T7866] netlink: 4 bytes leftover after parsing attributes in process `syz.0.532'. [ 143.317318][ T7697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.358207][ T7870] netlink: 4 bytes leftover after parsing attributes in process `syz.0.532'. [ 143.381765][ T7697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.400641][ T7873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.533'. [ 143.413900][ T7873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.533'. [ 143.423380][ T7873] netlink: 'syz.2.533': attribute type 15 has an invalid length. [ 143.547424][ T12] smc: removing ib device syz2 [ 143.563217][ T7697] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.582604][ T7697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.667938][ T7697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.727685][ T43] vxcan1 speed is unknown, defaulting to 1000 [ 143.758760][ T43] syz2: Port: 1 Link DOWN [ 143.997404][ T5836] Bluetooth: hci2: command tx timeout [ 144.207905][ T7884] netlink: 12 bytes leftover after parsing attributes in process `syz.2.537'. [ 144.696345][ T7893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.539'. [ 144.738374][ T7893] xt_connbytes: Forcing CT accounting to be enabled [ 144.745062][ T7893] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 144.811285][ T7783] Set syz1 is full, maxelem 65536 reached [ 146.411085][ T7697] hsr_slave_0: entered promiscuous mode [ 146.418220][ T7697] hsr_slave_1: entered promiscuous mode [ 146.424504][ T7697] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.433309][ T7697] Cannot create hsr debugfs directory [ 146.625231][ T7902] netlink: 12 bytes leftover after parsing attributes in process `syz.2.542'. [ 146.659050][ T7902] netlink: 484 bytes leftover after parsing attributes in process `syz.2.542'. [ 146.945351][ T7910] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.165468][ T7915] netlink: 44 bytes leftover after parsing attributes in process `syz.1.548'. [ 147.334613][ T7930] netlink: 24 bytes leftover after parsing attributes in process `syz.2.553'. [ 147.358010][ T7931] netlink: 32 bytes leftover after parsing attributes in process `syz.2.553'. [ 147.632781][ T7697] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 147.671637][ T7697] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 147.712029][ T7951] netlink: 'syz.0.559': attribute type 8 has an invalid length. [ 147.758038][ T7697] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 147.772770][ T7697] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 147.796188][ T7954] netlink: 248 bytes leftover after parsing attributes in process `syz.2.560'. [ 148.040640][ T7970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.565'. [ 148.161382][ T7697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.232851][ T7697] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.285244][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.292476][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.297897][ T7986] netlink: 'syz.2.567': attribute type 10 has an invalid length. [ 148.363525][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.370744][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.398881][ T7995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.569'. [ 148.416697][ T7986] veth0_vlan: entered allmulticast mode [ 148.477975][ T7986] veth0_vlan: left promiscuous mode [ 148.511276][ T7986] veth0_vlan: entered promiscuous mode [ 148.523995][ T7986] team0: Device veth0_vlan failed to register rx_handler [ 148.903412][ T8016] netlink: 'syz.0.575': attribute type 4 has an invalid length. [ 148.916458][ T8016] netlink: 17 bytes leftover after parsing attributes in process `syz.0.575'. [ 148.982928][ T8020] netlink: 'syz.1.576': attribute type 2 has an invalid length. [ 149.009505][ T8020] netlink: 24 bytes leftover after parsing attributes in process `syz.1.576'. [ 149.346175][ T7697] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.376260][ T8041] netlink: 'syz.0.581': attribute type 33 has an invalid length. [ 149.430931][ T8045] netlink: 'syz.2.582': attribute type 1 has an invalid length. [ 149.528664][ T8049] netlink: 'syz.2.582': attribute type 8 has an invalid length. [ 149.986559][ T8068] can: request_module (can-proto-3) failed. [ 150.320907][ T7697] veth0_vlan: entered promiscuous mode [ 150.358061][ T7697] veth1_vlan: entered promiscuous mode [ 150.397376][ T8097] veth0: entered promiscuous mode [ 150.432191][ T8093] veth0: left promiscuous mode [ 150.457040][ T7697] veth0_macvtap: entered promiscuous mode [ 150.475395][ T7697] veth1_macvtap: entered promiscuous mode [ 150.518095][ C1] Unknown status report in ack skb [ 150.534145][ T7697] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.574404][ T7697] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.587204][ T7697] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.597714][ T8105] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 150.611263][ T7697] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.621335][ T7697] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.641295][ T7697] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.926656][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.971870][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.661751][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.686139][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.936417][ T8162] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7 [ 153.006971][ T8168] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 153.134790][ T8172] __nla_validate_parse: 3 callbacks suppressed [ 153.134811][ T8172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.616'. [ 153.423885][ T8187] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.529165][ T5908] IPVS: starting estimator thread 0... [ 153.553075][ T8190] netlink: 4 bytes leftover after parsing attributes in process `syz.1.623'. [ 153.597619][ T8195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.623'. [ 153.657508][ T8196] IPVS: using max 35 ests per chain, 84000 per kthread [ 153.718541][ T8200] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20002 [ 153.726346][ T8202] netlink: 92 bytes leftover after parsing attributes in process `syz.3.624'. [ 153.902593][ T59] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.949853][ T8202] tipc: Enabling of bearer rejected, already enabled [ 154.039267][ T59] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.196733][ T8218] netlink: 8 bytes leftover after parsing attributes in process `syz.2.629'. [ 154.258783][ T8225] delete_channel: no stack [ 154.281676][ T59] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.433442][ T8233] netlink: 44 bytes leftover after parsing attributes in process `syz.3.631'. [ 154.583999][ T8238] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.757357][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 154.772369][ T59] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.773140][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 154.794768][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 154.803602][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 154.812146][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 154.971561][ T8247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.636'. [ 155.039916][ T8247] netlink: 16 bytes leftover after parsing attributes in process `syz.2.636'. [ 155.154923][ T59] bridge_slave_1: left allmulticast mode [ 155.173305][ T59] bridge_slave_1: left promiscuous mode [ 155.197060][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.303551][ T59] bridge_slave_0: left allmulticast mode [ 155.331977][ T59] bridge_slave_0: left promiscuous mode [ 155.351459][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.676348][ T8273] netlink: 'syz.1.641': attribute type 10 has an invalid length. [ 156.040625][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.054251][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.065445][ T59] bond0 (unregistering): Released all slaves [ 156.096014][ T8261] tipc: Enabling of bearer rejected, failed to enable media [ 156.183738][ T8281] netlink: 16 bytes leftover after parsing attributes in process `syz.0.644'. [ 156.230316][ T8273] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 156.307088][ T8286] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 156.402475][ T8289] netlink: 28 bytes leftover after parsing attributes in process `syz.1.646'. [ 156.878540][ T5845] Bluetooth: hci2: command tx timeout [ 157.271124][ T59] hsr_slave_0: left promiscuous mode [ 157.296954][ T59] hsr_slave_1: left promiscuous mode [ 157.305339][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.315053][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.325949][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.333580][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.359694][ T59] veth1_macvtap: left promiscuous mode [ 157.365227][ T59] veth0_macvtap: left promiscuous mode [ 157.372144][ T59] veth1_vlan: left promiscuous mode [ 157.378673][ T59] veth0_vlan: left promiscuous mode [ 157.860408][ T8326] xt_l2tp: invalid flags combination: c [ 157.879712][ T59] team0 (unregistering): Port device team_slave_1 removed [ 157.922035][ T59] team0 (unregistering): Port device team_slave_0 removed [ 158.285361][ T8328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.353225][ T8328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.455674][ T8242] chnl_net:caif_netlink_parms(): no params data found [ 158.736395][ T8341] __nla_validate_parse: 10 callbacks suppressed [ 158.736417][ T8341] netlink: 224 bytes leftover after parsing attributes in process `syz.3.663'. [ 158.957939][ T5845] Bluetooth: hci2: command tx timeout [ 159.149804][ T8242] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.157097][ T8242] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.180863][ T8242] bridge_slave_0: entered allmulticast mode [ 159.205168][ T8242] bridge_slave_0: entered promiscuous mode [ 159.258948][ T8358] netlink: 'syz.2.667': attribute type 6 has an invalid length. [ 159.284602][ T8242] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.295532][ T8242] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.302982][ T8360] netlink: 64 bytes leftover after parsing attributes in process `syz.1.668'. [ 159.305535][ T8242] bridge_slave_1: entered allmulticast mode [ 159.324270][ T8242] bridge_slave_1: entered promiscuous mode [ 159.470663][ T8242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.520529][ T8242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.723752][ T8372] veth0: entered promiscuous mode [ 159.762969][ T8242] team0: Port device team_slave_0 added [ 159.810200][ T8242] team0: Port device team_slave_1 added [ 159.932604][ T8371] veth0: left promiscuous mode [ 159.938318][ T8242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.954021][ T8242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.991131][ T8242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.007682][ T8242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.033445][ T8242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.098785][ T8242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.133919][ T8391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.156105][ T8387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.214873][ T8242] hsr_slave_0: entered promiscuous mode [ 160.222769][ T8242] hsr_slave_1: entered promiscuous mode [ 160.224575][ T8393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.679'. [ 160.231571][ T8242] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 160.249919][ T8242] Cannot create hsr debugfs directory [ 160.274496][ T8393] netlink: 12 bytes leftover after parsing attributes in process `syz.1.679'. [ 160.342352][ T8395] netlink: 16 bytes leftover after parsing attributes in process `syz.3.680'. [ 160.347424][ T8396] netlink: 16 bytes leftover after parsing attributes in process `syz.3.680'. [ 160.611840][ T8410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.682'. [ 161.027751][ T5845] Bluetooth: hci2: command tx timeout [ 161.104956][ T8242] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 161.165179][ T8242] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 161.193253][ T8431] gtp0: entered promiscuous mode [ 161.211339][ T8431] gtp0: entered allmulticast mode [ 161.231901][ T8242] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 161.257869][ T8242] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 161.587195][ T8454] netlink: 112 bytes leftover after parsing attributes in process `syz.1.694'. [ 161.621883][ T8242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.634960][ T8454] netlink: 20 bytes leftover after parsing attributes in process `syz.1.694'. [ 161.652190][ T8461] netlink: 4 bytes leftover after parsing attributes in process `syz.3.696'. [ 161.660634][ T8454] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 161.749834][ T8461] macvtap1: entered promiscuous mode [ 161.755245][ T8461] vlan0: entered promiscuous mode [ 161.761266][ T8461] macvtap1: entered allmulticast mode [ 161.766758][ T8461] vlan0: entered allmulticast mode [ 161.772068][ T8461] veth0_vlan: entered allmulticast mode [ 161.790344][ T8242] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.839639][ T8463] bridge0: port 1(batadv1) entered blocking state [ 161.853046][ T8463] bridge0: port 1(batadv1) entered disabled state [ 161.869542][ T8463] batadv1: entered allmulticast mode [ 161.886334][ T8463] batadv1: entered promiscuous mode [ 161.905467][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.912689][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.952113][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.959497][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.347406][ T59] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 162.357196][ T59] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 162.420653][ T8482] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.432091][ T8478] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.455982][ T8484] ip6t_REJECT: ECHOREPLY is not supported [ 162.548690][ T8478] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.595389][ T8482] dvmrp0: entered allmulticast mode [ 162.638167][ T8491] bridge2: entered promiscuous mode [ 162.643440][ T8491] bridge2: entered allmulticast mode [ 162.754840][ T8242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.107939][ T5845] Bluetooth: hci2: command tx timeout [ 163.545807][ T8242] veth0_vlan: entered promiscuous mode [ 163.589587][ T8242] veth1_vlan: entered promiscuous mode [ 163.613502][ T8532] Cannot find del_set index 4 as target [ 163.632343][ T8242] veth0_macvtap: entered promiscuous mode [ 163.652423][ T8242] veth1_macvtap: entered promiscuous mode [ 163.715503][ T8242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.773926][ T8242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.804205][ T8242] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.823386][ T8242] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.835071][ T8242] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.848917][ T8242] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.873227][ T8539] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.881078][ T8539] batman_adv: batadv0: Interface activated: team0 [ 163.893022][ T8539] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 164.056066][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.059369][ T8545] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 164.079542][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.140684][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.162631][ T8550] netlink: 'syz.3.725': attribute type 1 has an invalid length. [ 164.164083][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.171273][ T8550] __nla_validate_parse: 5 callbacks suppressed [ 164.171286][ T8550] netlink: 224 bytes leftover after parsing attributes in process `syz.3.725'. [ 164.261139][ T8552] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.538063][ T8564] netlink: 'syz.0.729': attribute type 1 has an invalid length. [ 164.567361][ T8564] netlink: 172 bytes leftover after parsing attributes in process `syz.0.729'. [ 164.770035][ T8573] netlink: 20 bytes leftover after parsing attributes in process `syz.3.732'. [ 165.140245][ T1165] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.359886][ T1165] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.655493][ T1165] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.963413][ T1165] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.400342][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 166.418136][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 166.441051][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 166.454023][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 166.463352][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 166.533680][ T8613] netlink: 12 bytes leftover after parsing attributes in process `syz.2.739'. [ 166.780477][ T8621] netlink: 52 bytes leftover after parsing attributes in process `syz.0.742'. [ 166.945416][ T1165] bridge_slave_1: left allmulticast mode [ 166.959960][ T1165] bridge_slave_1: left promiscuous mode [ 166.999299][ T1165] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.079122][ T1165] bridge_slave_0: left allmulticast mode [ 167.095729][ T1165] bridge_slave_0: left promiscuous mode [ 167.116701][ T1165] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.200363][ T8632] openvswitch: netlink: Actions may not be safe on all matching packets [ 167.549630][ T8640] can: request_module (can-proto-0) failed. [ 167.681813][ T8650] nbd: nbd0 already in use [ 167.686894][ T8650] block nbd0: NBD_DISCONNECT [ 167.712486][ T8650] block nbd0: Send disconnect failed -32 [ 168.094840][ T1165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.108170][ T1165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.125205][ T1165] bond0 (unregistering): Released all slaves [ 168.236125][ T8662] macsec1: entered promiscuous mode [ 168.491161][ T8675] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 168.547744][ T5845] Bluetooth: hci2: command tx timeout [ 168.650504][ T8675] netlink: 20 bytes leftover after parsing attributes in process `syz.0.758'. [ 169.426236][ T1165] hsr_slave_0: left promiscuous mode [ 169.446355][ T1165] hsr_slave_1: left promiscuous mode [ 169.457165][ T1165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.465281][ T8711] xt_CT: No such helper "netbios-ns" [ 169.472043][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.501128][ T1165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.522899][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.602944][ T1165] veth1_macvtap: left promiscuous mode [ 169.609647][ T1165] veth0_macvtap: left promiscuous mode [ 169.616203][ T1165] veth1_vlan: left promiscuous mode [ 169.626018][ T1165] veth0_vlan: left promiscuous mode [ 169.655472][ T8721] netlink: zone id is out of range [ 170.011880][ T8740] af_packet: tpacket_rcv: packet too big, clamped from 122 to 4294967286. macoff=82 [ 170.294134][ T1165] team0 (unregistering): Port device team_slave_1 removed [ 170.340743][ T1165] team0 (unregistering): Port device team_slave_0 removed [ 170.637440][ T5845] Bluetooth: hci2: command tx timeout [ 170.786096][ T8609] chnl_net:caif_netlink_parms(): no params data found [ 170.955470][ T8750] batman_adv: batadv0: Interface deactivated: team0 [ 170.963010][ T8750] batman_adv: batadv0: Removing interface: team0 [ 171.026039][ T8750] bridge_slave_0: left allmulticast mode [ 171.068651][ T8750] bridge_slave_0: left promiscuous mode [ 171.089250][ T8750] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.144709][ T8750] bond0: (slave bond_slave_0): Releasing backup interface [ 171.171173][ T8771] tls_set_device_offload_rx: netdev not found [ 171.194785][ T8750] bond0: (slave bond_slave_1): Releasing backup interface [ 171.225344][ T8750] team0: Port device team_slave_0 removed [ 171.239042][ T8750] team0: Port device team_slave_1 removed [ 171.245555][ T8750] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.253646][ T8750] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.263855][ T8750] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.272438][ T8750] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.326957][ T8760] team0: Mode changed to "activebackup" [ 171.346454][ T36] tipc: Resetting bearer [ 171.573343][ T8773] tipc: Enabling of bearer rejected, already enabled [ 171.598163][ T8777] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.781'. [ 171.672649][ T8779] netlink: 24 bytes leftover after parsing attributes in process `syz.1.781'. [ 171.682838][ T8786] netlink: 24 bytes leftover after parsing attributes in process `syz.0.783'. [ 171.774019][ T8780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.781'. [ 171.801706][ T8780] netlink: 12 bytes leftover after parsing attributes in process `syz.1.781'. [ 171.822892][ T8609] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.832769][ T8796] netlink: 48 bytes leftover after parsing attributes in process `syz.3.784'. [ 171.833642][ T8609] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.857552][ T8791] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 171.859195][ T8609] bridge_slave_0: entered allmulticast mode [ 171.871878][ T8792] can: request_module (can-proto-0) failed. [ 171.880720][ T8609] bridge_slave_0: entered promiscuous mode [ 171.891030][ T8609] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.903758][ T8609] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.914811][ T8609] bridge_slave_1: entered allmulticast mode [ 171.930215][ T8609] bridge_slave_1: entered promiscuous mode [ 172.072895][ T8609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.111123][ T8609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.362846][ T8609] team0: Port device team_slave_0 added [ 172.401621][ T8609] team0: Port device team_slave_1 added [ 172.529712][ T8827] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 172.551292][ T8609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.564343][ T8609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.607819][ T8609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.632719][ T8609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.652307][ T8609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.709981][ T5845] Bluetooth: hci2: command tx timeout [ 172.731536][ T8832] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 172.737368][ T8609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.990678][ T8609] hsr_slave_0: entered promiscuous mode [ 173.020485][ T8609] hsr_slave_1: entered promiscuous mode [ 173.056105][ T8609] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 173.088018][ T8609] Cannot create hsr debugfs directory [ 173.181288][ T8850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.799'. [ 173.229291][ T8850] dummy0: left allmulticast mode [ 173.235551][ T8850] bridge0: port 4(dummy0) entered disabled state [ 173.284953][ T8850] gretap0: left allmulticast mode [ 173.293054][ T8850] gretap0: left promiscuous mode [ 173.302968][ T8850] bridge0: port 3(gretap0) entered disabled state [ 173.332441][ T8850] bridge_slave_1: left allmulticast mode [ 173.338203][ T8850] bridge_slave_1: left promiscuous mode [ 173.344109][ T8850] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.365138][ T8850] bridge_slave_0: left allmulticast mode [ 173.373330][ T8850] bridge_slave_0: left promiscuous mode [ 173.380269][ T8850] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.464383][ T8861] netlink: 'syz.3.801': attribute type 1 has an invalid length. [ 173.473074][ T8861] netlink: 224 bytes leftover after parsing attributes in process `syz.3.801'. [ 173.591377][ T8864] sctp: [Deprecated]: syz.2.803 (pid 8864) Use of struct sctp_assoc_value in delayed_ack socket option. [ 173.591377][ T8864] Use struct sctp_sack_info instead [ 173.632664][ T8864] sctp: [Deprecated]: syz.2.803 (pid 8864) Use of struct sctp_assoc_value in delayed_ack socket option. [ 173.632664][ T8864] Use struct sctp_sack_info instead [ 174.317829][ T8889] netlink: 12 bytes leftover after parsing attributes in process `syz.2.808'. [ 174.340074][ T8889] netlink: 36 bytes leftover after parsing attributes in process `syz.2.808'. [ 174.471935][ T8897] netlink: 'syz.2.812': attribute type 3 has an invalid length. [ 174.570638][ T8902] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 174.578389][ T8902] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 174.788626][ T5845] Bluetooth: hci2: command tx timeout [ 174.904603][ T8917] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 174.919742][ T8609] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 174.947066][ T8609] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 174.972601][ T8609] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 175.005707][ T8609] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 175.230697][ T8941] lo speed is unknown, defaulting to 1000 [ 175.291771][ T8609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.338419][ T8941] lo speed is unknown, defaulting to 1000 [ 175.361050][ T8609] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.371761][ T8941] lo speed is unknown, defaulting to 1000 [ 175.433569][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.440836][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.481442][ T8954] x_tables: duplicate underflow at hook 1 [ 175.524778][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.532065][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.210451][ T8609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.260493][ T8941] infiniband syz0: set active [ 176.266549][ T977] lo speed is unknown, defaulting to 1000 [ 176.303703][ T8941] infiniband syz0: added lo [ 176.320094][ T8941] syz0: rxe_create_cq: returned err = -12 [ 176.336666][ T8941] infiniband syz0: Couldn't create ib_mad CQ [ 176.344982][ T8941] infiniband syz0: Couldn't open port 1 [ 176.444581][ T8941] RDS/IB: syz0: added [ 176.462613][ T8941] smc: adding ib device syz0 with port count 1 [ 176.487412][ T8941] smc: ib device syz0 port 1 has pnetid [ 176.507459][ T977] lo speed is unknown, defaulting to 1000 [ 176.514671][ T8941] lo speed is unknown, defaulting to 1000 [ 176.710544][ T9005] __nla_validate_parse: 4 callbacks suppressed [ 176.710565][ T9005] netlink: 44 bytes leftover after parsing attributes in process `syz.0.839'. [ 176.760111][ T9005] netlink: 43 bytes leftover after parsing attributes in process `syz.0.839'. [ 176.788096][ T9005] netlink: 'syz.0.839': attribute type 5 has an invalid length. [ 176.796302][ T9005] netlink: 43 bytes leftover after parsing attributes in process `syz.0.839'. [ 176.877481][ T5845] Bluetooth: hci2: command tx timeout [ 176.916375][ T9005] netlink: 4 bytes leftover after parsing attributes in process `syz.0.839'. [ 176.936458][ T9013] syz.1.840: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 176.981472][ T9007] xt_CT: No such helper "syz0" [ 176.987885][ T9013] CPU: 1 UID: 0 PID: 9013 Comm: syz.1.840 Not tainted 6.16.0-rc3-syzkaller-00121-g2def09ead4ad #0 PREEMPT(full) [ 176.987910][ T9013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 176.987928][ T9013] Call Trace: [ 176.987936][ T9013] [ 176.987944][ T9013] dump_stack_lvl+0x189/0x250 [ 176.987985][ T9013] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.988007][ T9013] ? __pfx__printk+0x10/0x10 [ 176.988026][ T9013] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 176.988044][ T9013] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 176.988065][ T9013] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 176.988085][ T9013] warn_alloc+0x214/0x310 [ 176.988106][ T9013] ? stack_depot_save_flags+0x40/0x900 [ 176.988131][ T9013] ? __pfx_warn_alloc+0x10/0x10 [ 176.988151][ T9013] ? kasan_save_track+0x4f/0x80 [ 176.988175][ T9013] ? xskq_create+0x56/0x170 [ 176.988197][ T9013] ? xsk_init_queue+0xb0/0x110 [ 176.988215][ T9013] ? xsk_setsockopt+0x43f/0x710 [ 176.988234][ T9013] ? do_sock_setsockopt+0x25a/0x3e0 [ 176.988260][ T9013] ? __x64_sys_setsockopt+0x18b/0x220 [ 176.988277][ T9013] ? do_syscall_64+0xfa/0x3b0 [ 176.988299][ T9013] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.988322][ T9013] __vmalloc_node_range_noprof+0x125/0x12f0 [ 176.988367][ T9013] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 176.988391][ T9013] ? __kasan_kmalloc+0x93/0xb0 [ 176.988411][ T9013] vmalloc_user_noprof+0xad/0xf0 [ 176.988429][ T9013] ? xskq_create+0xbf/0x170 [ 176.988453][ T9013] xskq_create+0xbf/0x170 [ 176.988476][ T9013] xsk_init_queue+0xb0/0x110 [ 176.988500][ T9013] xsk_setsockopt+0x43f/0x710 [ 176.988524][ T9013] ? __pfx_xsk_setsockopt+0x10/0x10 [ 176.988542][ T9013] ? __lock_acquire+0xab9/0xd20 [ 176.988575][ T9013] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 176.988596][ T9013] ? __pfx_xsk_setsockopt+0x10/0x10 [ 176.988616][ T9013] do_sock_setsockopt+0x25a/0x3e0 [ 176.988639][ T9013] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 176.988663][ T9013] ? __fget_files+0x2a/0x420 [ 176.988691][ T9013] __x64_sys_setsockopt+0x18b/0x220 [ 176.988717][ T9013] do_syscall_64+0xfa/0x3b0 [ 176.988740][ T9013] ? lockdep_hardirqs_on+0x9c/0x150 [ 176.988763][ T9013] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.988780][ T9013] ? clear_bhb_loop+0x60/0xb0 [ 176.988801][ T9013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.988818][ T9013] RIP: 0033:0x7f130698e929 [ 176.988841][ T9013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.988856][ T9013] RSP: 002b:00007f1307724038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 176.988875][ T9013] RAX: ffffffffffffffda RBX: 00007f1306bb5fa0 RCX: 00007f130698e929 [ 176.988887][ T9013] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 176.988898][ T9013] RBP: 00007f1306a10b39 R08: 0000000000000004 R09: 0000000000000000 [ 176.988909][ T9013] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.988920][ T9013] R13: 0000000000000000 R14: 00007f1306bb5fa0 R15: 00007ffd459722f8 [ 176.988949][ T9013] [ 176.991182][ T8609] veth0_vlan: entered promiscuous mode [ 177.039013][ T9013] Mem-Info: [ 177.144727][ T8609] veth1_vlan: entered promiscuous mode [ 177.319901][ T9013] active_anon:4822 inactive_anon:0 isolated_anon:0 [ 177.319901][ T9013] active_file:1372 inactive_file:39873 isolated_file:0 [ 177.319901][ T9013] unevictable:768 dirty:80 writeback:0 [ 177.319901][ T9013] slab_reclaimable:10626 slab_unreclaimable:103199 [ 177.319901][ T9013] mapped:29283 shmem:1371 pagetables:1084 [ 177.319901][ T9013] sec_pagetables:0 bounce:0 [ 177.319901][ T9013] kernel_misc_reclaimable:0 [ 177.319901][ T9013] free:1328771 free_pcp:15548 free_cma:0 [ 177.375635][ T9013] Node 0 active_anon:19288kB inactive_anon:0kB active_file:5488kB inactive_file:159292kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117132kB dirty:320kB writeback:0kB shmem:3948kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11728kB pagetables:4184kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 177.417873][ T9013] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 177.426373][ T8941] lo speed is unknown, defaulting to 1000 [ 177.474997][ T9013] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 177.511632][ T9013] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 177.520728][ T9013] Node 0 DMA32 free:1402328kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19444kB inactive_anon:0kB active_file:5488kB inactive_file:157456kB unevictable:1536kB writepending:320kB present:3129332kB managed:2561004kB mlocked:0kB bounce:0kB free_pcp:41572kB local_pcp:21668kB free_cma:0kB [ 177.583758][ T9013] lowmem_reserve[]: 0 0 1 1 1 [ 177.605243][ T8609] veth0_macvtap: entered promiscuous mode [ 177.640906][ T8609] veth1_macvtap: entered promiscuous mode [ 177.647583][ T9013] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1836kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 177.701805][ T9013] lowmem_reserve[]: 0 0 0 0 0 [ 177.706594][ T9013] Node 1 Normal free:3897368kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:20832kB local_pcp:7616kB free_cma:0kB [ 177.760006][ T8609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.772739][ T9013] lowmem_reserve[]: 0 0 0 0 0 [ 177.780200][ T9013] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 177.792414][ T8609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.811426][ T9013] Node 0 DMA32: 568*4kB (M) 249*8kB (UM) 93*16kB (UME) 233*32kB (UME) 67*64kB (UME) 58*128kB (UME) 22*256kB (UM) 33*512kB (UME) 7*1024kB (UM) 4*2048kB (UM) 327*4096kB (UM) = 1402200kB [ 177.875571][ T8941] lo speed is unknown, defaulting to 1000 [ 177.881044][ T8609] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.887546][ T9013] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 177.904163][ T8609] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.919962][ T8609] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.931014][ T8609] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.957351][ T9013] Node 1 Normal: 184*4kB (UME) 39*8kB (UME) 34*16kB (UME) 91*32kB (UME) 24*64kB (UME) 11*128kB (UME) 5*256kB (UME) 5*512kB (UME) 3*1024kB (UME) 0*2048kB 948*4096kB (M) = 3897368kB [ 177.999301][ T9013] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 178.023650][ T9032] netlink: 20 bytes leftover after parsing attributes in process `syz.0.846'. [ 178.047977][ T9013] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 178.097850][ T9013] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 178.125610][ T9013] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 178.146684][ T9013] 42613 total pagecache pages [ 178.154395][ T9013] 0 pages in swap cache [ 178.169068][ T9013] Free swap = 124996kB [ 178.179207][ T9013] Total swap = 124996kB [ 178.180663][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.197388][ T9013] 2097051 pages RAM [ 178.217374][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.220246][ T9013] 0 pages HighMem/MovableOnly [ 178.243012][ T9013] 424694 pages reserved [ 178.271103][ T9013] 0 pages cma reserved [ 178.311787][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.331914][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.389981][ T9043] netlink: 'syz.0.848': attribute type 1 has an invalid length. [ 178.429147][ T9043] netlink: 'syz.0.848': attribute type 3 has an invalid length. [ 178.436839][ T9043] netlink: 224 bytes leftover after parsing attributes in process `syz.0.848'. [ 178.471577][ T9043] NCSI netlink: No device for ifindex 0 [ 178.527788][ T9047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.850'. [ 178.551670][ T9047] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 178.591679][ T9047] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.629392][ T8941] lo speed is unknown, defaulting to 1000 [ 178.799342][ T9058] netlink: 4 bytes leftover after parsing attributes in process `syz.3.853'. [ 178.815656][ T9060] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.854'. [ 178.851773][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.911191][ T9067] netlink: 68 bytes leftover after parsing attributes in process `syz.0.855'. [ 179.055428][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.165704][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.188594][ T8941] lo speed is unknown, defaulting to 1000 [ 179.248753][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.471321][ T36] bridge_slave_1: left allmulticast mode [ 179.478255][ T36] bridge_slave_1: left promiscuous mode [ 179.484109][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.495322][ T36] bridge_slave_0: left allmulticast mode [ 179.501495][ T36] bridge_slave_0: left promiscuous mode [ 179.508273][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.035964][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.051945][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.070867][ T36] bond0 (unregistering): Released all slaves [ 180.112636][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 180.124323][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 180.139444][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 180.154521][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 180.162285][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 181.311178][ T9087] lo speed is unknown, defaulting to 1000 [ 182.227602][ T5845] Bluetooth: hci2: command tx timeout [ 182.380857][ T9161] __nla_validate_parse: 9 callbacks suppressed [ 182.380878][ T9161] netlink: 20 bytes leftover after parsing attributes in process `syz.0.881'. [ 182.459801][ T9164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.882'. [ 182.833186][ T9186] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 183.010264][ T9087] chnl_net:caif_netlink_parms(): no params data found [ 183.025219][ T9189] netlink: 12 bytes leftover after parsing attributes in process `syz.1.888'. [ 183.216208][ T36] hsr_slave_0: left promiscuous mode [ 183.236254][ T36] hsr_slave_1: left promiscuous mode [ 183.261664][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.292656][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.321102][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.343417][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.382311][ T36] veth1_macvtap: left promiscuous mode [ 183.407147][ T36] veth0_macvtap: left promiscuous mode [ 183.422165][ T9222] netlink: 'syz.3.894': attribute type 1 has an invalid length. [ 183.430143][ T9222] netlink: 'syz.3.894': attribute type 3 has an invalid length. [ 183.442335][ T9222] netlink: 224 bytes leftover after parsing attributes in process `syz.3.894'. [ 183.462374][ T36] veth1_vlan: left promiscuous mode [ 183.466110][ T9224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.892'. [ 183.478917][ T36] veth0_vlan: left promiscuous mode [ 183.746884][ T9215] x_tables: duplicate underflow at hook 3 [ 184.214470][ T36] team0 (unregistering): Port device team_slave_1 removed [ 184.258667][ T36] team0 (unregistering): Port device team_slave_0 removed [ 184.310861][ T5845] Bluetooth: hci2: command tx timeout [ 184.755678][ T9238] netlink: 'syz.3.897': attribute type 1 has an invalid length. [ 184.914310][ T9250] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 185.027702][ T9254] netlink: 256 bytes leftover after parsing attributes in process `syz.3.901'. [ 185.114744][ T9259] netlink: 'syz.3.903': attribute type 1 has an invalid length. [ 185.122821][ T9259] netlink: 244 bytes leftover after parsing attributes in process `syz.3.903'. [ 185.146161][ T9259] bond_slave_1: entered promiscuous mode [ 185.159132][ T9087] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.160015][ T9259] netlink: 16 bytes leftover after parsing attributes in process `syz.3.903'. [ 185.166274][ T9087] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.203487][ T9087] bridge_slave_0: entered allmulticast mode [ 185.211474][ T9087] bridge_slave_0: entered promiscuous mode [ 185.222337][ T9087] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.232741][ T9087] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.241267][ T9259] netlink: 12 bytes leftover after parsing attributes in process `syz.3.903'. [ 185.254832][ T9087] bridge_slave_1: entered allmulticast mode [ 185.275939][ T9087] bridge_slave_1: entered promiscuous mode [ 185.315096][ T9259] netlink: 16 bytes leftover after parsing attributes in process `syz.3.903'. [ 185.367985][ T9265] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 185.482611][ T9087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.580620][ T9087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.686641][ T9280] netlink: 'syz.2.910': attribute type 1 has an invalid length. [ 185.714421][ T9280] netlink: 'syz.2.910': attribute type 3 has an invalid length. [ 185.742904][ T9087] team0: Port device team_slave_0 added [ 185.764119][ T9087] team0: Port device team_slave_1 added [ 185.884599][ T9286] tipc: Started in network mode [ 185.890315][ T9286] tipc: Node identity de11462618ce, cluster identity 4711 [ 185.899031][ T9286] tipc: Enabled bearer , priority 0 [ 185.976922][ T9286] tipc: Disabling bearer [ 186.014893][ T9087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.038999][ T9087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.106375][ T9087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.130409][ T9087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.157300][ T9087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.188716][ T9087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.363309][ T9318] netlink: 'syz.2.922': attribute type 10 has an invalid length. [ 186.387571][ T5845] Bluetooth: hci2: command tx timeout [ 186.410210][ T9087] hsr_slave_0: entered promiscuous mode [ 186.423384][ T9087] hsr_slave_1: entered promiscuous mode [ 186.438310][ T9087] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 186.456224][ T9087] Cannot create hsr debugfs directory [ 186.464575][ T9318] batadv0: entered promiscuous mode [ 186.471838][ T9318] batadv0: entered allmulticast mode [ 186.478983][ T9318] bridge0: port 3(batadv0) entered blocking state [ 186.485684][ T9318] bridge0: port 3(batadv0) entered disabled state [ 186.496141][ T9318] bridge0: port 3(batadv0) entered blocking state [ 186.502744][ T9318] bridge0: port 3(batadv0) entered forwarding state [ 186.849663][ T1094] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 186.859151][ T1094] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 186.962077][ T9344] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 186.969534][ T9344] IPv6: NLM_F_CREATE should be set when creating new route [ 186.976785][ T9344] IPv6: NLM_F_CREATE should be set when creating new route [ 187.147949][ T9357] netlink: 'syz.0.934': attribute type 8 has an invalid length. [ 187.568910][ T9374] __nla_validate_parse: 4 callbacks suppressed [ 187.568930][ T9374] netlink: 24 bytes leftover after parsing attributes in process `syz.1.940'. [ 187.615265][ T9374] netlink: 32 bytes leftover after parsing attributes in process `syz.1.940'. [ 187.666255][ T9380] bond0: (slave team0): Releasing backup interface [ 187.800134][ T9380] bond0: (slave bond_slave_0): Releasing backup interface [ 187.859679][ T9380] bond0: (slave bond_slave_1): Releasing backup interface [ 187.912416][ T9392] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 187.915306][ T9380] team0: Port device team_slave_0 removed [ 187.998879][ T9380] team0: Port device team_slave_1 removed [ 188.017925][ T9380] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.037917][ T9380] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.083468][ T9380] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.092598][ T9380] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.143067][ T9397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.946'. [ 188.404476][ T9412] netlink: 4 bytes leftover after parsing attributes in process `syz.2.949'. [ 188.467946][ T5845] Bluetooth: hci2: command tx timeout [ 188.509178][ T9412] veth3: entered allmulticast mode [ 188.523696][ T9417] netlink: 146840 bytes leftover after parsing attributes in process `syz.3.951'. [ 188.635685][ T9087] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 188.713916][ T9427] netlink: 'syz.1.955': attribute type 11 has an invalid length. [ 188.724575][ T9087] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 188.744376][ T9087] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 188.754307][ T9422] netlink: 20 bytes leftover after parsing attributes in process `syz.0.952'. [ 188.766013][ T9422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.952'. [ 188.824599][ T9087] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 188.989526][ T9087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.082644][ T9087] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.131516][ T9454] netlink: 24 bytes leftover after parsing attributes in process `syz.1.959'. [ 189.136547][ T7812] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.147733][ T7812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.263205][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.270405][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.337011][ T9465] netlink: 4 bytes leftover after parsing attributes in process `syz.3.961'. [ 189.649140][ T9484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.966'. [ 189.964565][ T9501] netlink: 'syz.2.971': attribute type 1 has an invalid length. [ 189.982339][ T9498] netlink: 'syz.1.969': attribute type 2 has an invalid length. [ 189.997986][ T9496] netlink: 'syz.1.969': attribute type 2 has an invalid length. [ 190.026920][ T9501] bond2: entered promiscuous mode [ 190.046407][ T9501] 8021q: adding VLAN 0 to HW filter on device bond2 [ 190.155353][ T9515] netlink: 'syz.1.973': attribute type 58 has an invalid length. [ 190.161026][ T9503] 8021q: adding VLAN 0 to HW filter on device bond2 [ 190.171627][ T9503] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 190.182717][ T9503] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 190.199838][ T9503] bond2: (slave wireguard0): making interface the new active one [ 190.208696][ T9503] wireguard0: entered promiscuous mode [ 190.216158][ T9503] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 190.236308][ T9087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.398814][ T9512] vlan0 (unregistering): left allmulticast mode [ 190.405218][ T9512] veth0_vlan (unregistering): left allmulticast mode [ 190.514979][ T9526] x_tables: duplicate underflow at hook 1 [ 190.638174][ T9529] x_tables: duplicate underflow at hook 2 [ 190.643251][ T9526] x_tables: duplicate underflow at hook 1 [ 191.211603][ T9536] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 191.422864][ T9087] veth0_vlan: entered promiscuous mode [ 191.499347][ T9087] veth1_vlan: entered promiscuous mode [ 191.616295][ T9087] veth0_macvtap: entered promiscuous mode [ 191.696129][ T9087] veth1_macvtap: entered promiscuous mode [ 191.774587][ T9087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.811964][ T9087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.838785][ T9087] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.873118][ T9087] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.887387][ T9087] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.919982][ T9087] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.952675][ T9568] netlink: 'syz.0.990': attribute type 1 has an invalid length. [ 192.143630][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.182002][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.273681][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.319468][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.342456][ T9588] netlink: 'syz.3.998': attribute type 10 has an invalid length. [ 192.367878][ T9588] tipc: Resetting bearer [ 192.437993][ T9588] tipc: Resetting bearer [ 192.452915][ T9588] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.465546][ T9588] bond0: (slave team0): Enslaving as an active interface with an up link [ 192.970390][ T59] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.983355][ T9613] __nla_validate_parse: 11 callbacks suppressed [ 192.983376][ T9613] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1003'. [ 193.068273][ T9590] lo speed is unknown, defaulting to 1000 [ 193.318776][ T59] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.417004][ T59] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.606735][ T59] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.905257][ T59] bridge_slave_1: left allmulticast mode [ 193.913850][ T59] bridge_slave_1: left promiscuous mode [ 193.921324][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.931958][ T59] bridge_slave_0: left allmulticast mode [ 193.938364][ T59] bridge_slave_0: left promiscuous mode [ 193.944456][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.293113][ T9631] netlink: 'syz.3.1008': attribute type 4 has an invalid length. [ 194.353788][ T9634] netlink: 'syz.3.1008': attribute type 4 has an invalid length. [ 194.558395][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 194.569084][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 194.589778][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 194.617609][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 194.633919][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.640452][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.647463][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 194.729729][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.742286][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.752711][ T59] bond0 (unregistering): Released all slaves [ 195.138070][ T9644] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1011'. [ 195.598826][ T9668] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1019'. [ 195.618646][ T9668] netlink: 'syz.0.1019': attribute type 1 has an invalid length. [ 195.619174][ T9669] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1021'. [ 195.636043][ T9638] lo speed is unknown, defaulting to 1000 [ 195.813111][ T9673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1022'. [ 195.843478][ T9673] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 195.912891][ T9675] xt_l2tp: invalid flags combination: 4 [ 196.012506][ T9681] netlink: 'syz.2.1026': attribute type 1 has an invalid length. [ 196.062622][ T9681] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1026'. [ 196.075409][ T9685] bridge0: entered allmulticast mode [ 196.117706][ T9685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1028'. [ 196.160224][ T9685] netlink: zone id is out of range [ 196.175047][ T9685] netlink: zone id is out of range [ 196.186218][ T9685] netlink: zone id is out of range [ 196.202670][ T9685] netlink: zone id is out of range [ 196.257476][ T9685] netlink: zone id is out of range [ 196.287523][ T9685] netlink: zone id is out of range [ 196.292803][ T9685] netlink: zone id is out of range [ 196.377041][ T9685] netlink: zone id is out of range [ 196.423199][ T9685] netlink: zone id is out of range [ 196.439621][ T9685] netlink: zone id is out of range [ 196.707381][ T5845] Bluetooth: hci2: command tx timeout [ 196.930454][ T9717] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1038'. [ 197.068295][ T9720] IPVS: persistence engine module ip_vs_pe_À not found [ 197.314462][ T59] hsr_slave_0: left promiscuous mode [ 197.342487][ T59] hsr_slave_1: left promiscuous mode [ 197.353107][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.366106][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.380537][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.391319][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.445117][ T59] veth1_macvtap: left promiscuous mode [ 197.477543][ T59] veth0_macvtap: left promiscuous mode [ 197.499871][ T59] veth1_vlan: left promiscuous mode [ 197.515791][ T59] veth0_vlan: left promiscuous mode [ 198.797533][ T5845] Bluetooth: hci2: command tx timeout [ 198.820460][ T59] team0 (unregistering): Port device team_slave_1 removed [ 198.857047][ T59] team0 (unregistering): Port device team_slave_0 removed [ 199.215366][ T9726] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1040'. [ 199.246878][ T9702] lo speed is unknown, defaulting to 1000 [ 199.255717][ T9638] chnl_net:caif_netlink_parms(): no params data found [ 199.584412][ T9758] netlink: 'syz.1.1048': attribute type 9 has an invalid length. [ 199.784094][ T9638] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.816088][ T9638] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.824623][ T9638] bridge_slave_0: entered allmulticast mode [ 199.843555][ T9638] bridge_slave_0: entered promiscuous mode [ 199.867421][ T9638] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.897786][ T9638] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.905214][ T9638] bridge_slave_1: entered allmulticast mode [ 199.933574][ T9638] bridge_slave_1: entered promiscuous mode [ 200.086705][ T9638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.149399][ T9638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.416805][ T9638] team0: Port device team_slave_0 added [ 200.436271][ T9638] team0: Port device team_slave_1 added [ 200.559065][ T9638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.576720][ T9638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.628086][ T9638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.834206][ T9638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.857351][ T9638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.895134][ T5845] Bluetooth: hci2: command tx timeout [ 200.918365][ T9638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.960232][ T9806] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1060'. [ 201.115924][ T9638] hsr_slave_0: entered promiscuous mode [ 201.171491][ T9638] hsr_slave_1: entered promiscuous mode [ 201.195097][ T9638] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 201.207833][ T9638] Cannot create hsr debugfs directory [ 201.305409][ T9823] dvmrp0: entered allmulticast mode [ 202.257140][ T9850] netlink: 'syz.2.1071': attribute type 21 has an invalid length. [ 202.357459][ T9850] bridge: RTM_NEWNEIGH with invalid ether address [ 202.693630][ T9862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1074'. [ 202.758255][ T9860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1074'. [ 202.779803][ T9860] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1074'. [ 202.804054][ T9861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1075'. [ 202.853919][ T9862] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1074'. [ 202.897869][ T9861] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1075'. [ 202.949115][ T5845] Bluetooth: hci2: command tx timeout [ 203.496122][ T9638] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 203.546289][ T9638] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 203.619586][ T9638] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 203.686320][ T9638] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 203.797560][ T9902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1086'. [ 203.806654][ T9901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1086'. [ 204.027599][ T9638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.139355][ T9638] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.182261][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.189481][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.211712][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.218917][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.337453][ T9933] netlink: 'syz.1.1097': attribute type 13 has an invalid length. [ 204.343760][ T9935] veth0_to_team: entered promiscuous mode [ 204.356359][ T9935] veth0_to_team: entered allmulticast mode [ 204.454658][ T9939] netlink: 'syz.2.1098': attribute type 1 has an invalid length. [ 204.469658][ T9939] netlink: 'syz.2.1098': attribute type 1 has an invalid length. [ 204.482896][ T9939] netlink: 'syz.2.1098': attribute type 28 has an invalid length. [ 204.549531][ T9941] netlink: 'syz.1.1099': attribute type 1 has an invalid length. [ 204.728268][ T9953] tipc: Invalid UDP bearer configuration [ 204.728329][ T9953] tipc: Enabling of bearer rejected, failed to enable media [ 204.885629][ T9961] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 205.020874][ T9638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.199935][ T9977] __nla_validate_parse: 2 callbacks suppressed [ 205.199956][ T9977] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1107'. [ 205.202132][ T9979] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1109'. [ 205.229323][ T9981] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.1108'. [ 205.278433][ T9979] netlink: 'syz.3.1109': attribute type 62 has an invalid length. [ 205.439100][ T9986] netlink: 'syz.2.1110': attribute type 3 has an invalid length. [ 205.556195][ T9990] net_ratelimit: 5 callbacks suppressed [ 205.556219][ T9990] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 205.632877][ T9998] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1113'. [ 205.667660][ T51] Bluetooth: hci2: command tx timeout [ 205.706604][ T9997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1112'. [ 205.785799][T10001] tc_dump_action: action bad kind [ 205.965155][ T9638] veth0_vlan: entered promiscuous mode [ 206.053329][ T9638] veth1_vlan: entered promiscuous mode [ 206.078300][T10014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1118'. [ 206.100345][T10015] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1118'. [ 206.143559][T10014] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1118'. [ 206.160222][ T9638] veth0_macvtap: entered promiscuous mode [ 206.232361][T10023] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20004 [ 206.242919][ T9638] veth1_macvtap: entered promiscuous mode [ 206.294340][T10027] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1121'. [ 206.300682][ T9638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.356218][ T9638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.386688][T10029] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1121'. [ 206.405230][ T9638] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.414781][ T9638] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.428017][ T9638] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.442888][ T9638] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.652166][T10045] sctp: [Deprecated]: syz.3.1126 (pid 10045) Use of int in maxseg socket option. [ 206.652166][T10045] Use struct sctp_assoc_value instead [ 206.730633][T10049] sctp: [Deprecated]: syz.3.1126 (pid 10049) Use of int in maxseg socket option. [ 206.730633][T10049] Use struct sctp_assoc_value instead [ 206.770669][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.797600][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.878497][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.901259][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.947598][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 206.947884][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 206.966748][T10055] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 206.978744][T10053] netlink: 'syz.1.1131': attribute type 11 has an invalid length. [ 207.572615][T10083] netlink: 'syz.1.1142': attribute type 10 has an invalid length. [ 207.650323][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.741680][T10083] team0: Device ipvlan1 failed to register rx_handler [ 207.884817][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.115247][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.196882][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.366447][ T12] bridge_slave_1: left allmulticast mode [ 208.372303][ T12] bridge_slave_1: left promiscuous mode [ 208.378322][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.387667][ T12] bridge_slave_0: left allmulticast mode [ 208.393420][ T12] bridge_slave_0: left promiscuous mode [ 208.400649][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.750506][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.779353][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.805930][ T12] bond0 (unregistering): Released all slaves [ 208.859422][T10096] batadv1: entered allmulticast mode [ 208.916434][T10105] netlink: 'syz.0.1143': attribute type 11 has an invalid length. [ 208.981520][T10105] netlink: 'syz.0.1143': attribute type 11 has an invalid length. [ 209.161564][T10111] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 209.203356][ T9] lo speed is unknown, defaulting to 1000 [ 209.249491][T10110] delete_channel: no stack [ 209.345475][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 209.356749][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 209.366546][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 209.377079][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 209.386587][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 209.743412][T10131] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 209.767642][T10131] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 209.782387][T10131] netlink: 'syz.3.1152': attribute type 10 has an invalid length. [ 209.798380][T10102] lo speed is unknown, defaulting to 1000 [ 209.856557][T10131] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 210.786690][T10114] lo speed is unknown, defaulting to 1000 [ 211.009173][T10176] __nla_validate_parse: 7 callbacks suppressed [ 211.009195][T10176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1167'. [ 211.427780][ T5150] Bluetooth: hci2: command tx timeout [ 211.438505][T10181] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.471482][T10181] tipc: Failed to remove unknown binding: 66,1,1/0:1775293714/1775293716 [ 211.711047][T10185] netlink: 'syz.3.1169': attribute type 1 has an invalid length. [ 211.744812][ T12] hsr_slave_0: left promiscuous mode [ 211.789681][ T12] hsr_slave_1: left promiscuous mode [ 211.807804][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.830538][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.854170][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.863826][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.898575][ T12] veth1_macvtap: left promiscuous mode [ 211.904262][ T12] veth0_macvtap: left promiscuous mode [ 211.914986][ T12] veth1_vlan: left promiscuous mode [ 211.924972][ T12] veth0_vlan: left promiscuous mode [ 212.666175][ T12] team0 (unregistering): Port device team_slave_1 removed [ 212.706761][ T12] team0 (unregistering): Port device team_slave_0 removed [ 213.083446][T10185] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 213.104607][T10186] veth5: entered promiscuous mode [ 213.156155][T10211] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 213.189160][T10114] chnl_net:caif_netlink_parms(): no params data found [ 213.264473][T10214] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1177'. [ 213.381384][T10218] (unnamed net_device) (uninitialized): up delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 213.414739][T10218] 8021q: adding VLAN 0 to HW filter on device bond3 [ 213.509652][ T5150] Bluetooth: hci2: command tx timeout [ 213.604362][T10114] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.624522][T10114] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.648411][T10114] bridge_slave_0: entered allmulticast mode [ 213.673001][T10114] bridge_slave_0: entered promiscuous mode [ 213.711889][T10114] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.724007][T10235] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1182'. [ 213.751441][T10114] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.779746][T10114] bridge_slave_1: entered allmulticast mode [ 213.819408][T10114] bridge_slave_1: entered promiscuous mode [ 213.930112][T10246] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1183'. [ 213.960514][T10242] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 214.000027][T10250] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1185'. [ 214.013407][T10250] netlink: 'syz.3.1185': attribute type 9 has an invalid length. [ 214.025683][T10251] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1185'. [ 214.030864][T10114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.043965][T10251] netlink: 'syz.3.1185': attribute type 9 has an invalid length. [ 214.067616][T10252] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1183'. [ 214.114397][T10114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.188507][T10256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1186'. [ 214.217943][T10254] veth0: entered promiscuous mode [ 214.228633][T10262] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1188'. [ 214.266760][T10262] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1188'. [ 214.272891][T10266] netlink: 'syz.2.1189': attribute type 11 has an invalid length. [ 214.435969][T10114] team0: Port device team_slave_0 added [ 214.482144][T10114] team0: Port device team_slave_1 added [ 214.655924][T10284] unsupported nla_type 52263 [ 214.675155][T10114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.696281][T10114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.761557][T10114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.836869][T10298] Unsupported ieee802154 address type: 0 [ 214.876801][T10114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.895670][T10114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.964910][T10114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.206652][T10310] delete_channel: no stack [ 215.233022][T10312] Bluetooth: MGMT ver 1.23 [ 215.286133][T10114] hsr_slave_0: entered promiscuous mode [ 215.314616][T10114] hsr_slave_1: entered promiscuous mode [ 215.322004][T10319] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 215.351997][T10114] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.376877][T10114] Cannot create hsr debugfs directory [ 215.408888][ T30] audit: type=1107 audit(1751160584.959:2): pid=10320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 215.588079][ T5150] Bluetooth: hci2: command tx timeout [ 215.822523][T10332] vlan2: entered allmulticast mode [ 215.839793][T10332] ip6gretap0: entered allmulticast mode [ 215.959911][T10340] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 215.997383][T10340] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 216.025504][T10341] __nla_validate_parse: 41 callbacks suppressed [ 216.025527][T10341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1217'. [ 216.026086][T10345] syzkaller1: entered promiscuous mode [ 216.055607][T10345] syzkaller1: entered allmulticast mode [ 216.181187][T10351] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1218'. [ 216.221843][T10351] (unnamed net_device) (uninitialized): (slave ip6_vti0): Device is not bonding slave [ 216.257350][T10351] (unnamed net_device) (uninitialized): option active_slave: invalid value (ip6_vti0) [ 216.397567][T10358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1221'. [ 216.537826][T10364] sctp: [Deprecated]: syz.3.1224 (pid 10364) Use of int in max_burst socket option. [ 216.537826][T10364] Use struct sctp_assoc_value instead [ 216.592589][T10364] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1224'. [ 216.613023][T10364] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1224'. [ 216.704581][T10371] netlink: 'syz.1.1226': attribute type 1 has an invalid length. [ 216.718530][T10371] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1226'. [ 217.022782][T10384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1228'. [ 217.035883][T10114] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 217.064049][T10387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1229'. [ 217.124102][T10114] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 217.159049][T10114] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 217.214670][T10114] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 217.291541][T10392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1231'. [ 217.325038][T10392] vlan0: entered allmulticast mode [ 217.348990][T10392] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 217.441422][T10408] netlink: 'syz.0.1233': attribute type 1 has an invalid length. [ 217.473572][T10408] netlink: 216 bytes leftover after parsing attributes in process `syz.0.1233'. [ 217.561291][T10114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.618010][T10114] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.633723][ T7812] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.640978][ T7812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.685410][ T7812] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.692651][ T7812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.747382][ T5150] Bluetooth: hci2: command tx timeout [ 218.618938][T10114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.047871][T10484] sctp: [Deprecated]: syz.2.1252 (pid 10484) Use of struct sctp_assoc_value in delayed_ack socket option. [ 219.047871][T10484] Use struct sctp_sack_info instead [ 219.117643][T10486] sctp: [Deprecated]: syz.2.1252 (pid 10486) Use of struct sctp_assoc_value in delayed_ack socket option. [ 219.117643][T10486] Use struct sctp_sack_info instead [ 219.271032][ T59] wlan1: Trigger new scan to find an IBSS to join [ 219.433349][T10114] veth0_vlan: entered promiscuous mode [ 219.467063][T10114] veth1_vlan: entered promiscuous mode [ 219.600791][T10114] veth0_macvtap: entered promiscuous mode [ 219.621755][T10114] veth1_macvtap: entered promiscuous mode [ 219.684619][T10114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.726209][T10114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.755605][T10114] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.784958][T10114] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.804656][T10114] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.843595][T10114] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.052945][T10529] netlink: 'syz.0.1267': attribute type 1 has an invalid length. [ 220.094764][T10509] lo speed is unknown, defaulting to 1000 [ 220.240964][ T7812] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.256960][ T7812] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.356173][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.380856][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.511640][T10548] nbd: must specify a device to reconfigure [ 220.662853][T10551] openvswitch: netlink: Flow key attr not present in new flow. [ 220.963848][ T59] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.263940][ T59] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.493422][ T59] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.782616][ T59] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.913021][ T59] bridge_slave_1: left allmulticast mode [ 221.920080][ T59] bridge_slave_1: left promiscuous mode [ 221.925789][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.935357][ T59] bridge_slave_0: left allmulticast mode [ 221.941303][ T59] bridge_slave_0: left promiscuous mode [ 221.946999][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.200924][T10566] netlink: 'syz.1.1279': attribute type 7 has an invalid length. [ 222.238002][ T49] wlan1: Trigger new scan to find an IBSS to join [ 222.704647][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.735839][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.760881][ T59] bond0 (unregistering): Released all slaves [ 222.832204][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 222.841985][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 222.851864][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 222.860785][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 222.876880][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 222.928585][T10595] __nla_validate_parse: 8 callbacks suppressed [ 222.928606][T10595] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1285'. [ 222.971041][T10595] bridge0: port 1(gretap0) entered blocking state [ 222.978403][T10595] bridge0: port 1(gretap0) entered disabled state [ 222.985116][T10595] gretap0: entered allmulticast mode [ 222.992940][T10595] gretap0: entered promiscuous mode [ 222.999985][T10595] bridge0: port 1(gretap0) entered blocking state [ 223.006592][T10595] bridge0: port 1(gretap0) entered forwarding state [ 223.573485][T10620] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1291'. [ 223.701350][T10620] netlink: 'syz.2.1291': attribute type 3 has an invalid length. [ 223.718767][T10620] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1291'. [ 223.767329][T10628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1291'. [ 223.810599][T10594] lo speed is unknown, defaulting to 1000 [ 224.135658][T10643] tc_dump_action: action bad kind [ 224.160356][T10633] syzkaller1: entered promiscuous mode [ 224.165954][T10633] syzkaller1: entered allmulticast mode [ 224.443377][T10654] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 224.499999][T10654] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 224.537349][T10654] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 224.561567][T10654] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 224.586664][T10654] geneve2: entered promiscuous mode [ 224.614071][T10654] geneve2: entered allmulticast mode [ 224.656673][T10667] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1301'. [ 224.793945][T10667] bridge_slave_0: default FDB implementation only supports local addresses [ 224.947555][ T5150] Bluetooth: hci2: command tx timeout [ 225.243020][T10685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1307'. [ 225.267293][ T13] wlan1: Trigger new scan to find an IBSS to join [ 225.285722][T10696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1307'. [ 225.464714][ T59] hsr_slave_0: left promiscuous mode [ 225.484891][ T59] hsr_slave_1: left promiscuous mode [ 225.495870][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.517380][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.529230][T10712] netlink: 'syz.2.1310': attribute type 83 has an invalid length. [ 225.536924][T10700] ================================================================== [ 225.545188][T10700] BUG: KASAN: slab-use-after-free in rose_get_neigh+0x391/0x990 [ 225.552976][T10700] Read of size 1 at addr ffff88807c6f8430 by task syz.0.1308/10700 [ 225.560983][T10700] [ 225.563526][T10700] CPU: 1 UID: 0 PID: 10700 Comm: syz.0.1308 Not tainted 6.16.0-rc3-syzkaller-00121-g2def09ead4ad #0 PREEMPT(full) [ 225.563553][T10700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 225.563567][T10700] Call Trace: [ 225.563575][T10700] [ 225.563584][T10700] dump_stack_lvl+0x189/0x250 [ 225.563620][T10700] ? __virt_addr_valid+0x1c8/0x5c0 [ 225.563639][T10700] ? rcu_is_watching+0x15/0xb0 [ 225.563667][T10700] ? __kasan_check_byte+0x12/0x40 [ 225.563686][T10700] ? __pfx_dump_stack_lvl+0x10/0x10 [ 225.563712][T10700] ? rcu_is_watching+0x15/0xb0 [ 225.563736][T10700] ? lock_release+0x4b/0x3e0 [ 225.563763][T10700] ? __virt_addr_valid+0x1c8/0x5c0 [ 225.563780][T10700] ? __virt_addr_valid+0x4a5/0x5c0 [ 225.563798][T10700] print_report+0xd2/0x2b0 [ 225.563820][T10700] ? rose_get_neigh+0x391/0x990 [ 225.563843][T10700] kasan_report+0x118/0x150 [ 225.563863][T10700] ? rose_get_neigh+0x391/0x990 [ 225.563888][T10700] rose_get_neigh+0x391/0x990 [ 225.563913][T10700] rose_connect+0x416/0x10a0 [ 225.563932][T10700] ? __pfx_current_check_access_socket+0x10/0x10 [ 225.563959][T10700] ? aa_sk_perm+0x81e/0x950 [ 225.563981][T10700] ? __might_fault+0xb0/0x130 [ 225.563996][T10700] ? __pfx_rose_connect+0x10/0x10 [ 225.564016][T10700] ? aa_af_perm+0x210/0x2b0 [ 225.564034][T10700] ? tomoyo_socket_connect_permission+0x164/0x290 [ 225.564061][T10700] ? bpf_lsm_socket_connect+0x9/0x20 [ 225.564083][T10700] __sys_connect+0x313/0x440 [ 225.564105][T10700] ? __pfx___sys_connect+0x10/0x10 [ 225.564127][T10700] ? rcu_is_watching+0x15/0xb0 [ 225.564157][T10700] __x64_sys_connect+0x7a/0x90 [ 225.564176][T10700] do_syscall_64+0xfa/0x3b0 [ 225.564199][T10700] ? lockdep_hardirqs_on+0x9c/0x150 [ 225.564222][T10700] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.564248][T10700] ? clear_bhb_loop+0x60/0xb0 [ 225.564271][T10700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.564290][T10700] RIP: 0033:0x7f17f158e929 [ 225.564318][T10700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.564336][T10700] RSP: 002b:00007f17f243c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 225.564361][T10700] RAX: ffffffffffffffda RBX: 00007f17f17b6080 RCX: 00007f17f158e929 [ 225.564376][T10700] RDX: 000000000000001c RSI: 0000200000000040 RDI: 000000000000000b [ 225.564390][T10700] RBP: 00007f17f1610b39 R08: 0000000000000000 R09: 0000000000000000 [ 225.564402][T10700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.564415][T10700] R13: 0000000000000000 R14: 00007f17f17b6080 R15: 00007ffcf6529dc8 [ 225.564434][T10700] [ 225.564441][T10700] [ 225.825160][T10700] Allocated by task 10442: [ 225.829569][T10700] kasan_save_track+0x3e/0x80 [ 225.834254][T10700] __kasan_kmalloc+0x93/0xb0 [ 225.838832][T10700] __kmalloc_cache_noprof+0x230/0x3d0 [ 225.844195][T10700] rose_add_node+0x23a/0xde0 [ 225.848788][T10700] rose_rt_ioctl+0xa48/0xfb0 [ 225.853373][T10700] rose_ioctl+0x3ce/0x8b0 [ 225.857712][T10700] sock_do_ioctl+0xd9/0x300 [ 225.862222][T10700] sock_ioctl+0x576/0x790 [ 225.866571][T10700] __se_sys_ioctl+0xf9/0x170 [ 225.871175][T10700] do_syscall_64+0xfa/0x3b0 [ 225.875692][T10700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.881595][T10700] [ 225.883926][T10700] Freed by task 10611: [ 225.887990][T10700] kasan_save_track+0x3e/0x80 [ 225.892663][T10700] kasan_save_free_info+0x46/0x50 [ 225.897680][T10700] __kasan_slab_free+0x62/0x70 [ 225.902440][T10700] kfree+0x18e/0x440 [ 225.906330][T10700] rose_rt_device_down+0x66d/0x6c0 [ 225.911439][T10700] rose_device_event+0x603/0x6a0 [ 225.916453][T10700] notifier_call_chain+0x1b3/0x3e0 [ 225.921657][T10700] __dev_notify_flags+0x18d/0x2e0 [ 225.926804][T10700] netif_change_flags+0xe8/0x1a0 [ 225.931731][T10700] dev_change_flags+0x130/0x260 [ 225.936743][T10700] dev_ioctl+0x7b4/0x1150 [ 225.941061][T10700] sock_do_ioctl+0x22c/0x300 [ 225.945662][T10700] sock_ioctl+0x576/0x790 [ 225.949989][T10700] __se_sys_ioctl+0xf9/0x170 [ 225.954580][T10700] do_syscall_64+0xfa/0x3b0 [ 225.959079][T10700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.964959][T10700] [ 225.967269][T10700] The buggy address belongs to the object at ffff88807c6f8400 [ 225.967269][T10700] which belongs to the cache kmalloc-512 of size 512 [ 225.981316][T10700] The buggy address is located 48 bytes inside of [ 225.981316][T10700] freed 512-byte region [ffff88807c6f8400, ffff88807c6f8600) [ 225.995012][T10700] [ 225.997324][T10700] The buggy address belongs to the physical page: [ 226.004086][T10700] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7c6f8 [ 226.012921][T10700] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 226.021410][T10700] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 226.028940][T10700] page_type: f5(slab) [ 226.032910][T10700] raw: 00fff00000000040 ffff88801a441c80 dead000000000100 dead000000000122 [ 226.041826][T10700] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 226.050401][T10700] head: 00fff00000000040 ffff88801a441c80 dead000000000100 dead000000000122 [ 226.059061][T10700] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 226.067720][T10700] head: 00fff00000000002 ffffea0001f1be01 00000000ffffffff 00000000ffffffff [ 226.076379][T10700] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 226.085030][T10700] page dumped because: kasan: bad access detected [ 226.091440][T10700] page_owner tracks the page as allocated [ 226.097141][T10700] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x252800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_THISNODE), pid 5843, tgid 5843 (syz-executor), ts 130502630559, free_ts 130340843063 [ 226.116862][T10700] post_alloc_hook+0x240/0x2a0 [ 226.121625][T10700] get_page_from_freelist+0x21e4/0x22c0 [ 226.127169][T10700] __alloc_frozen_pages_noprof+0x181/0x370 [ 226.132981][T10700] allocate_slab+0x65/0x3b0 [ 226.137503][T10700] ___slab_alloc+0xbfc/0x1480 [ 226.142267][T10700] __kmalloc_node_noprof+0x2fd/0x4e0 [ 226.147557][T10700] allocate_slab+0x17c/0x3b0 [ 226.152151][T10700] ___slab_alloc+0xbfc/0x1480 [ 226.156820][T10700] kmem_cache_alloc_noprof+0x283/0x3c0 [ 226.162275][T10700] __send_signal_locked+0x22a/0xeb0 [ 226.167466][T10700] group_send_sig_info+0x1fd/0x260 [ 226.172588][T10700] do_bpf_send_signal+0xa9/0x1e0 [ 226.177532][T10700] irq_work_single+0xde/0x240 [ 226.182417][T10700] irq_work_run+0x155/0x2f0 [ 226.186927][T10700] __sysvec_irq_work+0xa8/0x3d0 [ 226.191784][T10700] sysvec_irq_work+0x9e/0xc0 [ 226.196372][T10700] page last free pid 5200 tgid 5200 stack trace: [ 226.202700][T10700] __free_frozen_pages+0xc71/0xe70 [ 226.207813][T10700] __slab_free+0x326/0x400 [ 226.212233][T10700] qlist_free_all+0x97/0x140 [ 226.216835][T10700] kasan_quarantine_reduce+0x148/0x160 [ 226.222298][T10700] __kasan_slab_alloc+0x22/0x80 [ 226.227149][T10700] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 226.232701][T10700] getname_flags+0xb8/0x540 [ 226.237223][T10700] __x64_sys_unlink+0x3a/0x50 [ 226.241900][T10700] do_syscall_64+0xfa/0x3b0 [ 226.246413][T10700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.252322][T10700] [ 226.254644][T10700] Memory state around the buggy address: [ 226.260284][T10700] ffff88807c6f8300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 226.268602][T10700] ffff88807c6f8380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 226.276662][T10700] >ffff88807c6f8400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 226.284717][T10700] ^ [ 226.290350][T10700] ffff88807c6f8480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 226.298491][T10700] ffff88807c6f8500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 226.306540][T10700] ================================================================== [ 226.314792][T10700] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 226.322005][T10700] CPU: 1 UID: 0 PID: 10700 Comm: syz.0.1308 Not tainted 6.16.0-rc3-syzkaller-00121-g2def09ead4ad #0 PREEMPT(full) [ 226.334088][T10700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 226.344165][T10700] Call Trace: [ 226.347459][T10700] [ 226.350400][T10700] dump_stack_lvl+0x99/0x250 [ 226.355027][T10700] ? __asan_memcpy+0x40/0x70 [ 226.359641][T10700] ? __pfx_dump_stack_lvl+0x10/0x10 [ 226.364872][T10700] ? __pfx__printk+0x10/0x10 [ 226.369747][T10700] panic+0x2db/0x790 [ 226.373671][T10700] ? __pfx_panic+0x10/0x10 [ 226.378113][T10700] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 226.384070][T10700] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 226.389978][T10700] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 226.396343][T10700] ? print_memory_metadata+0x314/0x400 [ 226.401797][T10700] ? rose_get_neigh+0x391/0x990 [ 226.406651][T10700] check_panic_on_warn+0x89/0xb0 [ 226.411586][T10700] ? rose_get_neigh+0x391/0x990 [ 226.416441][T10700] end_report+0x78/0x160 [ 226.420689][T10700] kasan_report+0x129/0x150 [ 226.425195][T10700] ? rose_get_neigh+0x391/0x990 [ 226.430044][T10700] rose_get_neigh+0x391/0x990 [ 226.434720][T10700] rose_connect+0x416/0x10a0 [ 226.439488][T10700] ? __pfx_current_check_access_socket+0x10/0x10 [ 226.445917][T10700] ? aa_sk_perm+0x81e/0x950 [ 226.450410][T10700] ? __might_fault+0xb0/0x130 [ 226.455074][T10700] ? __pfx_rose_connect+0x10/0x10 [ 226.460088][T10700] ? aa_af_perm+0x210/0x2b0 [ 226.464668][T10700] ? tomoyo_socket_connect_permission+0x164/0x290 [ 226.471075][T10700] ? bpf_lsm_socket_connect+0x9/0x20 [ 226.476356][T10700] __sys_connect+0x313/0x440 [ 226.480933][T10700] ? __pfx___sys_connect+0x10/0x10 [ 226.486030][T10700] ? rcu_is_watching+0x15/0xb0 [ 226.490812][T10700] __x64_sys_connect+0x7a/0x90 [ 226.495613][T10700] do_syscall_64+0xfa/0x3b0 [ 226.500134][T10700] ? lockdep_hardirqs_on+0x9c/0x150 [ 226.505328][T10700] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.511388][T10700] ? clear_bhb_loop+0x60/0xb0 [ 226.516065][T10700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.522041][T10700] RIP: 0033:0x7f17f158e929 [ 226.526449][T10700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.546065][T10700] RSP: 002b:00007f17f243c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 226.554751][T10700] RAX: ffffffffffffffda RBX: 00007f17f17b6080 RCX: 00007f17f158e929 [ 226.562825][T10700] RDX: 000000000000001c RSI: 0000200000000040 RDI: 000000000000000b [ 226.570791][T10700] RBP: 00007f17f1610b39 R08: 0000000000000000 R09: 0000000000000000 [ 226.578940][T10700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.586903][T10700] R13: 0000000000000000 R14: 00007f17f17b6080 R15: 00007ffcf6529dc8 [ 226.594886][T10700] [ 226.598440][T10700] Kernel Offset: disabled [ 226.602865][T10700] Rebooting in 86400 seconds..