last executing test programs: 2.13098294s ago: executing program 3 (id=2064): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x20) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'ip6tnl0\x00', 0x0, 0x2f, 0x9, 0x40, 0x7c88, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x80, 0x4, 0x8}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="1300000002"], 0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x11, r3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x61f0, 0x0) close(0x4) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x70, r5, 0x300, 0x70bd25, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}]}, 0x70}}, 0x8011) r6 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0080bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000400)={0x3, {{0xa, 0x4e21, 0x7, @mcast2}}, {{0xa, 0x4e20, 0x2, @empty}}}, 0x108) getsockopt$inet6_buf(r8, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) r9 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f0000000140)=@ethtool_rxnfc={0x2d, 0x11, 0x4, {0x6, @tcp_ip4_spec={@remote, @multicast1, 0x4e21, 0x4e22, 0x4}, {0x0, @empty, 0xa7, 0x0, [0x40, 0x56c]}, @udp_ip6_spec={@mcast1, @private2, 0x4e20, 0x4e23, 0x4}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0x0, 0x2, [0x1c00]}, 0x7, 0x7}}}) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r7, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000580)={0x14, 0x1, 0x3, 0x801, 0x0, 0x0, {0x2, 0x0, 0x40}}, 0x14}}, 0x44) socket$pptp(0x18, 0x1, 0x2) 1.639861302s ago: executing program 0 (id=2074): setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) r1 = socket$inet6(0xa, 0xa, 0x87) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @rand_addr, 0x3}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x40c, 0x2, [@TCA_BASIC_POLICE={0x408, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x62, 0x2, 0x0, 0xc, 0x2, 0x7fff, 0x0, 0xffffff70, 0x19, 0xffffffa9, 0x2, 0x7, 0x80000001, 0x7, 0x3, 0x36, 0xc, 0x6, 0x6, 0x5d0bef1f, 0x400, 0x1, 0x837, 0xffffffff, 0x9fec, 0x401, 0x68, 0x9, 0xdd64, 0x1, 0x4, 0x8001, 0xfffffffe, 0x2, 0x0, 0x200, 0xfff, 0xfffffff1, 0x7, 0x4, 0xf, 0x7, 0x7469, 0xb, 0x2, 0x200, 0xff32, 0x6, 0xca, 0x4ec1, 0x1, 0x9, 0x80, 0x0, 0x10000, 0x0, 0xb4, 0x7, 0x6, 0x0, 0x0, 0x8156b2a, 0x2, 0xd5c, 0x4, 0xa0, 0x2, 0x7, 0x4, 0x0, 0x81, 0xfe, 0x2, 0xe6b, 0x9, 0xa, 0xc8c, 0x1, 0x92a, 0x6, 0xf4e, 0x9, 0x3a0, 0x3, 0x10000, 0x7ff, 0x44, 0x1, 0x2, 0x800, 0x3, 0x8, 0x0, 0x6, 0x922e, 0x0, 0x10001, 0x3, 0xf, 0x4, 0x2, 0x2c000, 0x80, 0x5, 0x7, 0x2, 0x5, 0x0, 0x9, 0x6, 0x0, 0x3365, 0x1, 0x5, 0xffffffff, 0x1000, 0x0, 0x4, 0x4, 0x1, 0x2, 0x81, 0x111, 0x2, 0x5c20, 0x7f, 0x0, 0xe, 0xfffffffb, 0x6, 0x391, 0x0, 0x0, 0x3, 0x9, 0xc95d90e, 0xff, 0x2, 0x5, 0x7fffffff, 0xc7, 0x4, 0x7, 0x0, 0x9, 0xffffffff, 0x9, 0x1, 0x4, 0x3, 0x7, 0xfffffff9, 0x10, 0x2, 0x8, 0x2, 0x6, 0x8b4, 0x600000, 0x1, 0x6, 0x0, 0x10000, 0x0, 0x3, 0x5, 0x0, 0x1000, 0x6, 0x6, 0x0, 0x1, 0x81, 0x2, 0xffff6c4b, 0x800, 0x7, 0x5, 0x7fff, 0x8, 0xffffffff, 0x9, 0x6, 0x0, 0x40, 0x67e1, 0x80000000, 0x2, 0x603c, 0x4, 0x4, 0x0, 0xfffffff8, 0x7, 0x3, 0x10, 0x400, 0xfffffe00, 0x1, 0x3, 0x0, 0xffff, 0x4, 0x6, 0x8, 0x0, 0x400, 0x1, 0x87, 0x10, 0x2, 0x0, 0xfffffffd, 0x3, 0x7, 0x616, 0x2, 0x2, 0xd1, 0x2, 0xfffffffc, 0x8, 0xc, 0x800, 0x1, 0x4, 0xd87, 0x80000001, 0x48e0, 0x8, 0x9, 0x40, 0x400, 0x5, 0x2, 0x4e1b, 0x1, 0x1000, 0x8, 0x4, 0x3, 0x0, 0x2, 0x10000009, 0x2, 0x3, 0x10001, 0xffff, 0x4d, 0x100000d, 0x8, 0x2, 0x2, 0x8]}]}]}}]}, 0x43c}}, 0x4000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r2) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="140200008fa8c33923c43a98597d9b6d50a7c9ba1a208f8b", @ANYRES16=r3, @ANYBLOB="0100000000000000000023000000"], 0x14}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r4) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0003000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) ioctl$sock_bt_hci(r7, 0x800448d2, 0x0) sendmsg$NFT_MSG_GETCHAIN(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="14da0900040a01010000000000000000010000881561eb58e03eaa9d9bb1f74b4ae59d00"], 0x14}}, 0x4080) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r8, 0x11, 0x100000000a, &(0x7f0000000440)=0x800000001, 0x4) sendto$inet6(r8, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0x4000001, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) sendto$inet6(r8, &(0x7f0000000400)="17", 0x1, 0x40000, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000002000010000000000000000000a000080ffffffffffff0000140011"], 0x30}}, 0x0) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000640012800b0001006970366772650000540002800800150061db0a0008000100", @ANYRES32, @ANYBLOB="14000700fe8000000000000000000000000000aa08000d005fe1ffff060010004e22000008000500200c000014000600fc"], 0x94}}, 0x0) recvmmsg(r1, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)=""/24, 0x18}], 0x1}, 0x3}], 0x1, 0x1, 0x0) 1.57239941s ago: executing program 1 (id=2076): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002a80)=@newtaction={0x8c, 0x30, 0xffff, 0x8, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1000, 0x0, 0x0, 0x0, 0x4000000, {0x0, 0x1}}}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffffe}]]}, {0xfe44}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) 1.348288429s ago: executing program 1 (id=2079): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f00000000c0)={@multicast1=0xe0000300, @dev={0xac, 0x14, 0x14, 0x17}}, 0x8) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111da00000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00'}, 0x90) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendto$inet(r0, &(0x7f00000003c0)="26fb0587f15253b2efa28e46f5f1a91e03e65b849c54255e70cf3c10d53f63166e9a2189d78d923534f83135ec9b39a072fb4e51731bb7948694c9d52e9355f989469fad456a3e6ed3ab60b618f6f16619c6cf392d131f1d027b95eff250014453b09eb7b421d76e9b737d9d598942d14cc16b47df08063ff78a67eb41e4676643457420ee2a4e9eb0d278b8f11479dc534afe2c79d296120e606000c0fe3773a6a4ae2027f06fa66174368a7627ddfdbd7a2fb84a2fb4dd24a33661fc8a95b883ebe3981ce7848c4872", 0xca, 0x4094, &(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10) (async) socket$kcm(0x29, 0x5, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380100001a000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010003071c4e230005000000803a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000ae000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000feffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff000000008000000000350000020001082000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x24000002) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e20, @multicast2}}, 0x2, 0x2}, &(0x7f0000000000)=0x90) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000200)={0xa, 0x5, 0x9, 0x8, 0x8d63, 0x8, 0x4, 0xe360, r3}, &(0x7f0000000240)=0x20) 1.347357001s ago: executing program 4 (id=2080): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) (async) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000002240)=@ccm_128={{0x304}, "2570a15ee10ebf90", "96891788641473b2ce424d38bb1725a4", "11a59a53", "b2241d9f187d9ab9"}, 0x28) (async, rerun: 32) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x34, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x43eb}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) (rerun: 32) 1.305016967s ago: executing program 0 (id=2082): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="7cc2fd", 0x3}], 0x1, 0x0, 0x0, 0x40844}], 0x1, 0x4000040) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000000000007111af00000000008510000002000000850000000500000095000000000000009500a505000000005160b53d4aaf0ecda3e967683918fabfc90ec1e06c5f48cb9ce64e815b7b74d0c3e9365f188f6a00591b"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 1.25319108s ago: executing program 1 (id=2083): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001880)={{}, 0x0, 0x0}, 0x20) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000001c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x1c, &(0x7f0000003980)=[@in6={0xa, 0x4, 0x0, @private2}]}, &(0x7f0000003ac0)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x3930) recvfrom(r0, 0x0, 0x0, 0x40002042, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000050000000000000000000004000000400000000000042508da724b31"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000040)=0xb, 0x12) r5 = socket$kcm(0x29, 0x5, 0x0) sendmsg(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000580)}, {&(0x7f0000000ac0)="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", 0xfffffd6b}, {&(0x7f0000000640)="74a892e6122d0e9da29a40f6060049f3ab51554d", 0x14}], 0x3, &(0x7f00000005c0)=ANY=[], 0x158}, 0x0) sendmmsg(r5, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)='r', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000010c0)="f3", 0x1}], 0x1}}], 0x2, 0x20004841) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) 1.144115009s ago: executing program 0 (id=2084): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x52895}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x4c}}, 0x4000040) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000180)=0x3, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x3, 0x5, 0x9, 0x10, 0x1, 0x2, '\x00', r2, 0xffffffffffffffff, 0x5, 0x3, 0x3, 0xc}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0xffffffe6, 0x0, r3, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4}, 0x50) (async) sendmmsg$inet6(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="159618e972337fd36b306dddfb19aacbf70bfd13dabaa4c2745c498cc2eb4a6373ef10792019699435fcab23fe6f6d42ba3664ef0f91d85ab402ab44f54eda879631fd939c0dc9c6c8a4f1e84410ffe9a5b5a1008452c9fbc510261105bda96535ae3762f755a28d3d0be0a49f228066f573290a0f454f8823858727cce6c3aa92878062", 0x84}, {&(0x7f0000000400)}, {&(0x7f0000000440)="5ffdbc332e1a8d38ba79e57a7b471b0b822d41305712dd84bc6a26a41839f99dfad31f9d7a4ce456eb08205e10f6c197e6427087424c806c5f8832fc0053e7409e6ecb237eaf21d8ed09b5fc148a058bf68845c37ed0fe491995f6a4376e9d812e092c3a", 0x64}, {&(0x7f0000001180)="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", 0x1000}, {&(0x7f0000002180)="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", 0x1000}], 0x5, &(0x7f0000000540)=[@flowinfo={{0x14, 0x29, 0xb, 0x3}}, @hopopts={{0x110, 0x29, 0x36, {0x5c, 0x1e, '\x00', [@enc_lim={0x4, 0x1, 0x79}, @hao={0xc9, 0x10, @private2}, @hao={0xc9, 0x10, @private1}, @enc_lim={0x4, 0x1, 0x2}, @enc_lim={0x4, 0x1, 0x7}, @ra={0x5, 0x2, 0x7}, @generic={0x8, 0x7b, "2feaea4b5fe948c23cd950b6dfca56a508e2c816f10fcd58799b567fa9ddedb16900146a105e46b86672f292966896412dedaf52026ddabefeaff856ae58d16413ec157fbd1a76e1fcecce28c1d7bbf85ef4998e28dc8eef8ccca95a0a03ddc903b6dc6d56acc2fc1ee8dda5f972378e064637a5b55abcee941545"}, @generic={0x85, 0x47, "2e0ceb440f7be3a8ec9f3c9c26b30ab57445af3a3a9ffe53af85899cb4c4efd6a64da38715b1c9a9c90f19813b97e4093922ef88ab416946528dcf7b08465249cabf8c4a31256a"}]}}}], 0x128}}, {{&(0x7f0000000680)={0xa, 0x4e23, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000000940)=[{&(0x7f00000006c0)="e1dc3e626035bb78d54277dffcebca700c0d95600774748974931dc87f4bf60c8eed2b262646c341284de1056bde3b011c038a8f5a395824c96c6a817ff632a89a91a344c771c6681c8c4af647eedf3868c419665ccca8e1cfe81460f8dc5c2280319c69a3f9b0fb2e6a702722ebe2176bc43e7d2b5058caeefafa9e83", 0x7d}, {&(0x7f0000000740)="d4507a4ef05263c16d8cdd", 0xb}, {&(0x7f0000000780)="ee30d1ed25ed7072ada4b5b3a5b734d49f9a9acc2e20cfe3102383b2c721c69830795876e058c0ad5198676c429aa9f8808ce5f1b2eaea77603b3890d745f12ecb7d66c1275cebc7929d55911c8a8fb9fb4874ced455820af20d74ac98b466e7beb659f37ab5b4340c52023eff24f6ccd0b636281a722bc4a7479917d073f4309f55dd3c8247dcf326f3052638a047604f01bef0", 0x94}, {&(0x7f0000000840)="c6ad18adcd320baeb1f542b4d6f31a6956436c8bf9262f28fae4510c28e679669f642f95b3157ccd3b0299bf80977d1cd2f54a2c2fdc2cce746457cdabad21415b757e1f7f120542ebc3d8526a1ce8c98c41723707ba2606ec4288204e8d546f3b1eb044895179486083b974d565e45e4f981b28e07e70c94f2a305dbe9c78f0dd4d6ca265abfb658da603ad87e1addeea5af2206f81f0e29e5329d84d0f6e819d3c412533169da4acd54a909bce1f4197395d5a206d7d3e64665a83acf8cd12468380326bd78d40a04e9d4062154815c939fff8b8bc13980fd35df3f51a2dc069a851023c789f22497c5640d3ddde62026af4ea212c813d9efa", 0xfa}], 0x4}}, {{&(0x7f0000000980)={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}, 0x1c, &(0x7f0000000a80)=[{&(0x7f00000009c0)="adfca3cad128b8027b1560c88feffb641a257557bf189270587f79b9e475fde3f7b2d84bcb8ca40ed81898e47064630bb495b6e4e9123c47915039f752c57e90432e8cce69c0190d250441ee5f8caadee78ec760e81caf0ad0707b091e4a181a2c5625b7b5a872d6c65ea88893f47725f94499bf1c54b6c5a4d8c2af26354af084a68ee5885c9096a4dbc5b6beee16ca3bbed9682a3b1fd29933acb8aa", 0x9d}], 0x1, &(0x7f0000000ac0)=[@tclass={{0x14, 0x29, 0x43, 0x8}}], 0x18}}], 0x3, 0x10) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000010c0)={0x1a, 0x13, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xdc}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @map_fd={0x18, 0x3, 0x1, 0x0, r3}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1}, @alu={0x0, 0x1, 0x6, 0xb, 0x6, 0x6a02e6b6b0663961, 0x10}, @generic={0x18, 0xa, 0x3, 0x3560, 0x80000000}, @cb_func]}, &(0x7f0000000fc0)='GPL\x00', 0x8}, 0x94) (rerun: 32) 1.124665727s ago: executing program 4 (id=2085): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c00078018000180140002400000"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x4f, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5, 0xb, 0x1}, @IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x1}]}}}]}, 0x44}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r3}, &(0x7f00000007c0), &(0x7f0000000640)=r2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r3, 0x0, &(0x7f0000001700)=""/135}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r7, @ANYBLOB="200001"], 0x38}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="4000000010001b1d00000000ffdbdf2504000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800b000100697036746e6c0000080002800400130008000400ff0f0000"], 0x40}}, 0x0) 973.295381ms ago: executing program 2 (id=2086): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000040)=0x4, 0x4) r2 = socket(0x27, 0x6, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000fcdbdf255300000008000300", @ANYRES32=r9], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000000000000600000008000300", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x88, r4, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_PMK={0x14, 0xfe, "dfbd238293980b1baee9dbbae2229e5a"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x43}, @NL80211_ATTR_PMK={0x14, 0xfe, "28731faf73bb892456556298d7a15352"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="97a9679a1fc0"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x8}, @NL80211_ATTR_PMKID={0x14, 0x55, "4b075f8003b50fcab0b94ea4286d6f5e"}]}, 0x88}, 0x1, 0x0, 0x0, 0x8001}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000e70000000a400000001c0a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003"], 0x68}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$xdp(0x2c, 0x3, 0x0) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000040)=0x4, 0x4) (async) socket(0x27, 0x6, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r7) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000fcdbdf255300000008000300", @ANYRES32=r9], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000000000000600000008000300", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_SET_PMKSA(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x88, r4, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_PMK={0x14, 0xfe, "dfbd238293980b1baee9dbbae2229e5a"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x43}, @NL80211_ATTR_PMK={0x14, 0xfe, "28731faf73bb892456556298d7a15352"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="97a9679a1fc0"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x8}, @NL80211_ATTR_PMKID={0x14, 0x55, "4b075f8003b50fcab0b94ea4286d6f5e"}]}, 0x88}, 0x1, 0x0, 0x0, 0x8001}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000e70000000a400000001c0a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003"], 0x68}}, 0x0) (async) 916.219381ms ago: executing program 0 (id=2087): r0 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r3, @ANYRES8=r1, @ANYBLOB="d387ed9a746c"], 0x80}}, 0x0) 915.362601ms ago: executing program 4 (id=2088): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r2, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f00000008c0)="84", 0x1}, {&(0x7f0000000200)="842ff76d4b7ee57f4bb2ac9471e5d23d93caec62afefd4513a63de70ca803730c1a21de24974bf80d59d51f6acf1a4a2cde3314326ca08c5ca066d2f92633690681a1edc027b2890e83897a0386f636d8e974892742e1ccc3304c4b32585d2eb0ec2a60d32559cf44974c5495f8c239b69d5a554", 0x74}], 0x3}}], 0x1, 0x4404c880) sendto$inet6(r2, &(0x7f0000000040)="b28513", 0x3, 0x3380, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@ipv6_getaddrlabel={0x1c, 0x1e, 0x492dfc465ae32a8d, 0x0, 0x0, {0xa, 0x0, 0x38}}, 0x1c}}, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r0, &(0x7f00000000c0), 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000009c0)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc008002c0007000200060019c00364bc24eab556a705251e618218db677642109146a2378c877bddbcc1863b747ee3d5addad5eb3f3c90b561", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 886.991488ms ago: executing program 3 (id=2089): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x9, &(0x7f0000000000)=0x7fffffff, 0x4) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000080)="170000007a006bcd9e3fe3dc6e08170007000054250000824253585685ff030000644d9c357c8bee832836bc56ec6010e738ac523ae10a9beb6a3dafe940fc0486f2d362644a40a575b00d3e", 0x4c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x1fc, r2, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc64}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_NODE={0x2c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffffffc}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x400}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x666821e3}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x110, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f64}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdc01}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa85}]}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xd}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xdb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x41}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x519}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x1}, 0x4000084) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r4, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000100)="051a00000e80006558", 0x2c}], 0x2) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000140)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x8045}, 0x8001) 815.18518ms ago: executing program 2 (id=2090): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r1, 0x6, 0x1f, 0x0, &(0x7f0000000040)) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00') connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e24, 0x8, @loopback}, 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r5 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r5, 0x84, 0x1a, 0x0, &(0x7f0000001080)) accept$unix(r5, 0x0, &(0x7f0000001040)) sendto$isdn(r5, &(0x7f0000000200)={0x3, 0x7ff, "af33d08ab8c14c69e0f8a3f2e85fbe38674450d91788f9163ad732e127cd0902b476f1e564d05f78b891919c15c34908d1708d09eea43e5c7499cb0e301bfbc5249d80c3fae755b903b8582049eaf65655041d594ad1d783b41c6abfaa2cba98b767d6402fe671ec3156ff0d51446257ec9ec38020976526b484187a66c4917c02ef24fb2b434d71227aadd7ab8e7df69455237628d1131a5b5769f8e851ef63087093cab6403c388f77b74b1d8ff2f2af60a2cef4702e2cc06468891e1cbe82687c561e1113f0e94dcf410c8d7a23df94b47df859f0ef"}, 0xdf, 0x20000024, &(0x7f0000000140)={0x22, 0x2, 0x7, 0x6, 0x9}, 0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) ioctl$FICLONE(r7, 0x40049409, r7) write$tun(r7, &(0x7f0000000380)={@val={0x0, 0x6005}, @void, @llc={@snap={0x1, 0xfe, "40dc", "d672a4", 0x6000, "ed957475c87112a4181239827fabbd445091d8c911f140ae4485c2016cc61f6e20ab05f843b7e4603c268a420479503f97ba5b045ece167a7335d2f16097f34055b78fa594c1b56e68888e72b54f79600b0a99bc856c43fed2e654a4729d4465227818ea548f6668c3241be84a2aa9a2bb8430b67f24ff273def1de53edb08fc1fb98f8e9328fde025758eef739c214774096330d0543b339537ab3ef0b1bace5b8a994b6009f5a2bc35d5ed00f20108107c1e5c2030be05bf6e0cb91c02e293f51a3c95fc41b7abe1430efac34fde7efb90a3a2ca22c422ae0b09f3e429f5bc5ec11b09b547e6ef3de7655394cad58ee0e88e85adc6ea755591d2"}}}, 0x108) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="01002dbd700001dcdf2501000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x2004c000}, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000000)={@local, r9}, 0x14) write$tun(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001311ff00000000000000000000000000000000ff0200000003000000000000e9ffff004f194e20"], 0x4b) 732.328678ms ago: executing program 0 (id=2091): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000b19d8a18d48500007effffff7a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c002300fbffffffffffffff"], 0x40}}, 0x0) 731.403537ms ago: executing program 4 (id=2092): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0000009078001809c400050200000000000000000002d58838068b91000000"], 0xfd6c) 716.766193ms ago: executing program 0 (id=2093): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x4000884) r1 = socket(0x1e, 0x5, 0x0) listen(r1, 0x0) accept4$nfc_llcp(r1, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f0000000280)={0x244, r2, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x80000001, @mcast1, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x9, @local, 0x3}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK={0xac, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10000}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vcan0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_NODE={0x68, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffffffb}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xc}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "bd7388605c97ad3895e1137f042e8622b312543c7ef75dce3e0e13"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x32}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}]}]}, 0x244}, 0x1, 0x0, 0x0, 0x10000805}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000240)={0x1080}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@bridge_dellink={0x2c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x1428, 0x2}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x5, 0x0, 0x1, {0x4}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048904}, 0x4) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000580)=[@in6={0xa, 0x4e24, 0x10000, @loopback, 0x800}], 0x1c) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000140)=0x1, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x88, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x88}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="240000001200211700000000000000f706000000", @ANYRES32=0x0, @ANYBLOB="000000000000000004002b"], 0x24}}, 0x0) 679.954411ms ago: executing program 3 (id=2094): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r1}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x2}]}, 0x40}}, 0x0) 576.019489ms ago: executing program 2 (id=2095): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000000)={0x6, 'vcan0\x00', {0x4}, 0x1}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x98, r2, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xff}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x40) (async) r4 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x4e20, @private=0xa010100}, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000340)={0x234, r5, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7, 0x37}}}}, [@NL80211_ATTR_FRAME={0x172, 0x33, @data_frame={@a_msdu=@type11={{0x0, 0x2, 0x5, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {}, @device_a, @device_b, @from_mac=@device_b, {0x4, 0x326}}, @a_msdu=[{@broadcast, @broadcast, 0x39, "79f14aaaeef37f249518f5db585717ac51b774cbad5cfa0092a812369406b8e67e8c056586466b515c1c52b2110c833c6225891e47517c8a2e"}, {@device_b, @device_b, 0xfa, "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"}]}}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@cts={{}, {0x6f}}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x3c, 0x33, @mgmt_frame=@deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x70}, @device_a, @device_a, @from_mac=@device_b, {0x5, 0x7}, @value=@ver_80211n={0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, 0x37, @val={0x8c, 0x18, {0x33a, "c604e7763d47", @long="92bf5240b9478accd02e6b597684c556"}}}}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0x1}, @broadcast, @device_b}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {}, @device_b, @broadcast}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x234}, 0x1, 0x0, 0x0, 0x10}, 0x50) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x80, r5, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0x3, 0x7e}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f5ad55bd30e5bd3dfefd53ff02cb0931a9177ba4a2ac94a9"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f49ecea161ccb2f1292877204805044477e1734d401c0bbf"}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'dummy0\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x44}, 0x40488c1) (async) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20020440}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xa0, 0x2, 0x1, 0x3, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x38, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3b}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x4, 0x3]}, @CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x44}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x80}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x3b69b5d1510ec3a}]}, @CTA_TUPLE_ORIG={0x4}, @CTA_PROTOINFO={0x20, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x1c, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xf}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x47}]}}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4}, 0xc000) (async) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x4c, r5, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x3, 0xa}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r7 = gettid() (async) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000a40)=0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a80)={0xd0, 0x2a, 0x400, 0x70bd29, 0x25dfdbfb, {0x20}, [@generic="b55b57f43ada2e0d1260adb6fb78828fc1ff56a2c9b1bc51f597067e698b5d47aee69d2f9b559e301ddb7d63898f1147ffcba0e31bacd3843fb99124e68d91b85c5e60d5dd7a68d6c256dce26c2ccf73875a1eb9c09598325e19f88f035fa2e353860f3bae7982a47c7ddb6543944c201a3e9a412204f63326c00dcb454b9681a4b649b4f93808e676094318d00c2221afd83f9c08", @typed={0x8, 0x149, 0x0, 0x0, @pid=r7}, @nested={0x14, 0x61, 0x0, 0x1, [@nested={0x4, 0x115}, @nested={0x4, 0x55}, @typed={0x8, 0x46, 0x0, 0x0, @u32=0xfffffff9}]}, @typed={0x8, 0x7c, 0x0, 0x0, @pid=r8}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000}, 0x44001) (async) r9 = accept(r1, &(0x7f0000000c00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000c80)=0x80) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000d00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r10, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x180}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x40, r5, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IE={0x24, 0x2a, [@ibss={0x6, 0x2, 0xfffe}, @ht={0x2d, 0x1a, {0x8, 0x0, 0x4, 0x0, {0x4574, 0x8, 0x0, 0x10, 0x0, 0x0, 0x1, 0x3}, 0x6, 0x7, 0x4}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x401c044}, 0x8041) (async) r12 = accept(r4, &(0x7f0000000e00)=@generic, &(0x7f0000000e80)=0x80) ioctl$SIOCGETLINKNAME(r12, 0x89e0, &(0x7f0000000ec0)={0x1, 0x3}) r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000000f80), r9) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x24, r13, 0x800, 0x70bd26, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x8001}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8810) (async) r14 = syz_genetlink_get_family_id$mptcp(&(0x7f00000010c0), r4) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r9, &(0x7f00000011c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x54, r14, 0x520, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x14}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x17}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}]}]}, 0x54}}, 0x4000018) ioctl$SIOCX25CALLACCPTAPPRV(0xffffffffffffffff, 0x89e8) ioctl$F2FS_IOC_MOVE_RANGE(r9, 0xc020f509, &(0x7f0000001200)={r10, 0x6a96, 0x8, 0x7}) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), r12) sendmsg$NL80211_CMD_VENDOR(r15, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x40, r16, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x10}, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x6, 0x2f}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x6}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000004}, 0x48000) 552.728688ms ago: executing program 3 (id=2096): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB="0004000000000000000000100000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000ffffffff00"/28], 0x48) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x3aacddcfa25b9497, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44014}, 0x4004) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20800200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x3c, r1, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x46}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x90}, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), r0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r3, 0x20, 0x70bd25, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'dvmrp1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x86) socket$inet6(0xa, 0x4, 0x3) 523.498812ms ago: executing program 4 (id=2097): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x38, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x40}, @val={0x8, 0x3, r2}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}]}, 0x38}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3a005}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3a005}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) (async) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) (async) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @private=0xa010101}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x11f52}]}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @private=0xa010101}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x11f52}]}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 447.164093ms ago: executing program 2 (id=2098): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYRES64=r0], 0x7c}}, 0x20000004) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, r1, 0x10, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x400c0) (async, rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000060a0b040000000000000000020000000900020073797a32000000006c000480680001800b00010074617267657400005800028040000300cd4b6abe42030763d02899c7e9ee2bcc9b6a37b458a8056dd9a8fdffffff0d7a9d3ac869f3a86091758e5086f64579f9cd656422a633a39f030000000a000100484d41524b00000008000240000000000900010073797a30"], 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (async, rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000006910500000000000640000000000001cb600000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), 0xffffffffffffffff) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r6 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, 0xfffffffffffffffd) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (async, rerun: 32) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) (async, rerun: 32) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async, rerun: 32) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (rerun: 32) bind$802154_raw(r8, &(0x7f0000000000)={0x24, @short={0x2, 0x1}}, 0xb) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) (async) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r9}, 0x10) (async) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000006c0)={&(0x7f0000000580), 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x54, r4, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4048004}, 0x40010) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) socket$inet_mptcp(0x2, 0x1, 0x106) (async, rerun: 64) r10 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000500)={0x28, 0x0, 0x2710}, 0x10, 0x0) connect$vsock_stream(r10, &(0x7f0000000540)={0x28, 0x0, 0x0, @hyper}, 0x10) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@fallback=r2, 0xf, 0x1, 0xa, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], 0x0}, 0x40) (async, rerun: 32) r12 = bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8) (async, rerun: 32) r13 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x25, 0x11, @val=@iter={&(0x7f0000000380)=@task={0xffffffffffffffff}, 0x10}}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000840)=ANY=[@ANYRES32=r12, @ANYRES32=r2, @ANYBLOB="3000000010200000", @ANYRES32=r2, @ANYRES32=r13, @ANYBLOB="4f5fa9e82c509c1f3f3e6f39374d5a99ba2fd1814734ffafca0ec7800c85bed0f78dc6300e145e1b038b76f4f79ceb", @ANYRES64=r11], 0x20) (async, rerun: 32) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x20040081}, 0x20000050) (rerun: 32) 311.140815ms ago: executing program 3 (id=2099): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000060a0b040000000000000000020000000900020073797a32000000006c000480680001800b00010074617267657400005800028040000300cd4b6abe42030763d02899c7e9ee2bcc9b6a37b458a8056dd9a8fdffffff0d7a9d3ac869f3a86091758e5086f64579f9cd656422a633a39f030000000a000100484d41524b00000008000240000000000900010073797a30"], 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x403, 0x70bd2a, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MTU={0x8}]}, 0x3c}}, 0x440e0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000800)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cedd00", 0x10, 0x3a, 0xff, @remote={0xfe, 0xe0}, @mcast2, {[], @ndisc_ra={0x89}}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000440)={{0x2, 0x4e22, @remote}, {0x306, @local}, 0x4, {0x2, 0x4e21, @multicast2}, 'pimreg\x00'}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c003549dbb83904000000000000000000000000b1d351d77e8e0a199371a3a619b79089302e1cbe03a45310e0", @ANYRESOCT=r0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c0002800600270001000000"], 0x3c}}, 0x0) 308.921645ms ago: executing program 1 (id=2100): r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x28, 0x6, &(0x7f00000012c0)=""/4096, &(0x7f0000000080)=0x1000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043d000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 272.114713ms ago: executing program 2 (id=2101): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000610200000000000095"], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000000)={0x80000001, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0xd}}}}, 0x108) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r4}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r5}, 0x10) close(r6) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket(0x11, 0x3, 0x4000000) r9 = socket$inet(0xa, 0x801, 0x84) connect$inet(r9, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r9, 0x8) r10 = accept4(r9, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r10, 0x84, 0xa, &(0x7f00000002c0)={0x1400, 0xb88, 0x2, 0x8, 0x401, 0x6, 0x9, 0x7}, 0x20) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000880)={'ip6gretap0\x00', 0x0}) bind$packet(r8, &(0x7f0000000180)={0x11, 0x3, r11, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, 0x14) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008000}, 0x8080) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r12) sendmsg$IEEE802154_LLSEC_DEL_KEY(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000014dc8d0700eb525e90fec9d36a", @ANYRES16=r13, @ANYBLOB="01026cbd7000fedbdf252800000005002b000000000006000600020000000a0001007770616e30000000"], 0x30}, 0x1, 0x0, 0x0, 0x4002080}, 0x4000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r12, 0x0, 0x4000040) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x64fddae8}, 0x14) getsockopt$inet6_buf(r2, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000010000108020000000000000000000003", @ANYRES32=0x0, @ANYBLOB="50010000000000000c002b80080002000000000008001b0000000000"], 0x34}}, 0x0) 183.94736ms ago: executing program 4 (id=2102): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x20, 0x20, 0x4, 0x8, {{0x19, 0x4, 0x0, 0x5, 0x64, 0x64, 0x0, 0x3, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp={0x44, 0x28, 0x18, 0x0, 0x6, [0xd81b, 0x4, 0xe, 0x1d53, 0x10, 0xd, 0x1, 0xeba6, 0x40]}, @end, @end, @lsrr={0x83, 0x17, 0xf4, [@broadcast, @private=0xa010102, @multicast1, @local, @dev={0xac, 0x14, 0x14, 0x22}]}, @ra={0x94, 0x4, 0x1}, @generic={0x86, 0x8, "3554d3749ebd"}]}}}}}) socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x6f) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x6f) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000500)={0x38, r6, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'tunl0\x00'}]}, 0x38}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000500)={0x38, r6, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'tunl0\x00'}]}, 0x38}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) sendto$packet(r2, &(0x7f00000000c0)="a6bea8a120e5f8320c30ce50869c", 0xe, 0x48810, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @random="e6883490c5fc"}, 0x14) r9 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r9, 0x107, 0xb, &(0x7f0000000340), &(0x7f0000000380)=0x4) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in=@loopback, @in=@multicast1}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f0000000200)=0xe8) (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f0000000200)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, @in6=@mcast2, 0x4e24, 0x0, 0x4e21, 0x0, 0xa, 0x0, 0x80, 0xa2, r1, r10}, {0x9, 0x7fffffff, 0x8, 0x0, 0x55b, 0x5, 0x1ff, 0x257d}, {0x75, 0x6, 0x1c146b38, 0x259d891b}, 0x6, 0x6e6bb7, 0x2, 0x0, 0x6, 0x3}, {{@in6=@mcast1, 0x4d2, 0x33}, 0x0, @in=@multicast1, 0x3505, 0x2, 0x1, 0x9, 0x3, 0x200, 0x5}}, 0xe8) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r11, 0x84, 0x1f, 0x0, &(0x7f0000000100)) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x35, 0x0, &(0x7f0000000280)) 183.686234ms ago: executing program 1 (id=2103): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r0, 0x5, 0x80000001, 0x7}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x1400}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_to_team\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x4c) r3 = accept4(r2, 0x0, 0x0, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x8000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x18, 0x200000000000024c, &(0x7f00000001c0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0xd, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 91.553965ms ago: executing program 3 (id=2104): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r2, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f0000000000)=0xffffffff, 0x4) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) clock_gettime(0x0, &(0x7f0000000580)={0x0, 0x0}) recvmmsg(r4, &(0x7f00000003c0)=[{{&(0x7f0000000440)=@ethernet={0x0, @local}, 0x80, &(0x7f0000000a80)=[{&(0x7f00000004c0)=""/158, 0x9e}, {&(0x7f00000007c0)=""/220, 0xdc}, {&(0x7f00000008c0)=""/187, 0xbb}, {&(0x7f0000000980)=""/124, 0x7c}, {&(0x7f0000000200)=""/30, 0x1e}, {&(0x7f0000000a00)=""/83, 0x53}], 0x6, &(0x7f0000000b00)=""/201, 0xc9}}], 0x1, 0x42, &(0x7f0000000600)={r5, r6+10000000}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newtfilter={0xe4, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0xb8, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xc, 0x6}}, @TCA_U32_SEL={0xa4, 0x5, {0x7, 0x2, 0x9, 0x0, 0x8, 0x200, 0x9, 0x2, [{0xffff0001, 0xffff, 0x9, 0x7}, {0xe, 0x2c3, 0xb526, 0x110}, {0xc, 0x6, 0xfffff65d, 0x4000002}, {0x3, 0xc, 0x3ff, 0x6}, {0x7, 0x5b, 0x8, 0x6}, {0x4, 0x7, 0x0, 0x4}, {0x6, 0x4, 0x7, 0x4}, {0x4, 0x2, 0xffff6d1b, 0x3}, {0x3, 0x1, 0xaf, 0x401}]}}, @TCA_U32_LINK={0x8, 0x3, 0x1}]}}]}, 0xe4}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000000b06030000000000000000000600000205000100070000001c0007800c00148008000140640101010c00018008000140640101000900020073797a3100000000d3bd4cff151fa59b19ad85dd8c42c32fb97d7437b1c3e54a2f6f0499793c218445c154238a728a78869835ce1e60020e"], 0x44}, 0x1, 0x0, 0x0, 0x4844}, 0x4800) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x578, 0x1a0, 0x3f8, 0x2b8, 0x0, 0xd0, 0x518, 0x518, 0x518, 0x518, 0x518, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, [0xffffffff, 0xffffffff, 0x7f000101, 0xff000000], [0xffffff00, 0xffffffff, 0xff000000, 0xff000000], 'pimreg\x00', 'veth1_to_bridge\x00', {}, {}, 0xfd, 0xff, 0x2, 0x8}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x5, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x5}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@private=0xa010101, 0x21, 0x3b, 0x200}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x9, 0x2, 0x1, [0x8, 0xff, 0x10, 0x1, 0x2800, 0xc, 0xfffb, 0xff93, 0x7, 0x0, 0x81, 0x6, 0x0, 0x5, 0x7f, 0x200], 0x10}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x3, 0x2, 0x17c, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) r8 = socket(0x40000000015, 0x5, 0x0) connect$inet(r8, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r8, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r8, 0x1, 0x40, &(0x7f00000000c0)=0xd95, 0x4019e2060d4e3ac7) sendto$inet(r8, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f0000000d80), 0x36f, 0x20102, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000004040000000080000000000000000000", @ANYRES32=0x0, @ANYBLOB="008c00000000000014001280090001007665746800000000040002800500100004000000"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r9, 0x1) shutdown(r9, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000c40)) 72.95611ms ago: executing program 2 (id=2105): ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000040)={'veth1_to_hsr\x00', 0x7f}) 0s ago: executing program 1 (id=2106): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x8c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="850000003c000000791000000000000063000000001000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x3c, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10148}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MTU={0x8, 0x4, 0x6}]}, 0x3c}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x100000, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140ffffffff0c00018008000140c0ffffff050014000200000005000500020000000500010006"], 0x6c}}, 0x0) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) getpeername(r3, &(0x7f0000000080)=@sco={0x1f, @none}, &(0x7f0000000000)=0x80) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) accept4(r0, 0x0, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x8c}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="850000003c000000791000000000000063000000001000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x3c, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10148}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MTU={0x8, 0x4, 0x6}]}, 0x3c}}, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$inet6(0xa, 0x80003, 0x6) (async) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x100000, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140ffffffff0c00018008000140c0ffffff050014000200000005000500020000000500010006"], 0x6c}}, 0x0) (async) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) (async) getpeername(r3, &(0x7f0000000080)=@sco={0x1f, @none}, &(0x7f0000000000)=0x80) (async) kernel console output (not intermixed with test programs): e_0: entered promiscuous mode [ 73.292677][ T5862] team0: Port device team_slave_1 added [ 73.315807][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.352958][ T5876] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.360580][ T5876] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.367907][ T5876] bridge_slave_1: entered allmulticast mode [ 73.375761][ T5876] bridge_slave_1: entered promiscuous mode [ 73.405157][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.428931][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.436823][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.445142][ T5871] bridge_slave_0: entered allmulticast mode [ 73.452068][ T5871] bridge_slave_0: entered promiscuous mode [ 73.461283][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.468676][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.475956][ T5871] bridge_slave_1: entered allmulticast mode [ 73.482914][ T5871] bridge_slave_1: entered promiscuous mode [ 73.491255][ T5868] team0: Port device team_slave_0 added [ 73.501024][ T5868] team0: Port device team_slave_1 added [ 73.520244][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.527930][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.553945][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.567235][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.574409][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.600764][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.655441][ T5876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.673228][ T5866] team0: Port device team_slave_0 added [ 73.682185][ T5866] team0: Port device team_slave_1 added [ 73.713623][ T5876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.769833][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.780273][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.787294][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.813750][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.826528][ T5876] team0: Port device team_slave_0 added [ 73.844301][ T5186] Bluetooth: hci0: command tx timeout [ 73.844301][ T5873] Bluetooth: hci1: command tx timeout [ 73.870912][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.880762][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.888259][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.914184][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.925621][ T5186] Bluetooth: hci4: command tx timeout [ 73.928056][ T5873] Bluetooth: hci3: command tx timeout [ 73.936754][ T5186] Bluetooth: hci2: command tx timeout [ 73.946544][ T5876] team0: Port device team_slave_1 added [ 73.982127][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.989270][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.015926][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.070820][ T5862] hsr_slave_0: entered promiscuous mode [ 74.078609][ T5862] hsr_slave_1: entered promiscuous mode [ 74.085776][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.092725][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.118957][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.158206][ T5868] hsr_slave_0: entered promiscuous mode [ 74.165000][ T5868] hsr_slave_1: entered promiscuous mode [ 74.171007][ T5868] debugfs: 'hsr0' already exists in 'hsr' [ 74.176878][ T5868] Cannot create hsr debugfs directory [ 74.192593][ T5871] team0: Port device team_slave_0 added [ 74.199176][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.206523][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.232861][ T5876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.245727][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.252695][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.278880][ T5876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.327312][ T5871] team0: Port device team_slave_1 added [ 74.465530][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.472503][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.499002][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.533049][ T5866] hsr_slave_0: entered promiscuous mode [ 74.539429][ T5866] hsr_slave_1: entered promiscuous mode [ 74.546218][ T5866] debugfs: 'hsr0' already exists in 'hsr' [ 74.551946][ T5866] Cannot create hsr debugfs directory [ 74.563723][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.570686][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.596828][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.632417][ T5876] hsr_slave_0: entered promiscuous mode [ 74.638954][ T5876] hsr_slave_1: entered promiscuous mode [ 74.646548][ T5876] debugfs: 'hsr0' already exists in 'hsr' [ 74.652280][ T5876] Cannot create hsr debugfs directory [ 74.891703][ T5871] hsr_slave_0: entered promiscuous mode [ 74.898338][ T5871] hsr_slave_1: entered promiscuous mode [ 74.905038][ T5871] debugfs: 'hsr0' already exists in 'hsr' [ 74.910761][ T5871] Cannot create hsr debugfs directory [ 75.107041][ T5868] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.139568][ T5868] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.182915][ T5868] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.226512][ T5868] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.288012][ T5862] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.302902][ T5862] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.315986][ T5862] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.326808][ T5862] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.426520][ T5866] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.458757][ T5866] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.471037][ T5866] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.499528][ T5866] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.578398][ T5876] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.611449][ T5876] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.644399][ T5876] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.656596][ T5876] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.740741][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.757256][ T5871] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.770713][ T5871] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.782119][ T5871] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.795621][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.811852][ T5871] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.856053][ T5868] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.875123][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.910839][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.924563][ T5186] Bluetooth: hci0: command tx timeout [ 75.925221][ T5873] Bluetooth: hci1: command tx timeout [ 75.950211][ T3534] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.957461][ T3534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.967917][ T3534] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.975034][ T3534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.997934][ T3569] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.005110][ T3569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.017266][ T5873] Bluetooth: hci2: command tx timeout [ 76.017368][ T5186] Bluetooth: hci4: command tx timeout [ 76.022753][ T5873] Bluetooth: hci3: command tx timeout [ 76.068533][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.075651][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.094686][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.131375][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.138555][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.168566][ T3534] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.175740][ T3534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.268552][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.318627][ T5876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.337858][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.388497][ T3534] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.395690][ T3534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.449149][ T5876] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.491447][ T3569] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.498634][ T3569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.563713][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.570876][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.592369][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.599644][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.847604][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.892277][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.974688][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.163148][ T5866] veth0_vlan: entered promiscuous mode [ 77.188191][ T5876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.211700][ T5862] veth0_vlan: entered promiscuous mode [ 77.229418][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.252261][ T5866] veth1_vlan: entered promiscuous mode [ 77.278670][ T5868] veth0_vlan: entered promiscuous mode [ 77.301516][ T5862] veth1_vlan: entered promiscuous mode [ 77.342593][ T5868] veth1_vlan: entered promiscuous mode [ 77.377032][ T5876] veth0_vlan: entered promiscuous mode [ 77.418269][ T5866] veth0_macvtap: entered promiscuous mode [ 77.447097][ T5876] veth1_vlan: entered promiscuous mode [ 77.471171][ T5866] veth1_macvtap: entered promiscuous mode [ 77.502644][ T5862] veth0_macvtap: entered promiscuous mode [ 77.543548][ T5862] veth1_macvtap: entered promiscuous mode [ 77.572838][ T5868] veth0_macvtap: entered promiscuous mode [ 77.592837][ T5876] veth0_macvtap: entered promiscuous mode [ 77.605191][ T5868] veth1_macvtap: entered promiscuous mode [ 77.619532][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.633522][ T5876] veth1_macvtap: entered promiscuous mode [ 77.665215][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.680430][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.694447][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.714798][ T3534] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.741310][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.760597][ T3534] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.771660][ T3534] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.798855][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.808225][ T3534] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.818001][ T3534] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.828423][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.860421][ T3534] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.877682][ T3534] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.893393][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.910289][ T3534] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.921347][ T3534] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.966790][ T3534] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.998771][ T3534] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.007670][ T5873] Bluetooth: hci0: command tx timeout [ 78.013518][ T3534] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.025826][ T5873] Bluetooth: hci1: command tx timeout [ 78.042114][ T5871] veth0_vlan: entered promiscuous mode [ 78.061214][ T3534] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.085116][ T5873] Bluetooth: hci4: command tx timeout [ 78.085934][ T5882] Bluetooth: hci3: command tx timeout [ 78.096283][ T5186] Bluetooth: hci2: command tx timeout [ 78.116409][ T141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.118486][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.125056][ T141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.141051][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.150381][ T3534] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.161330][ T3534] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.174699][ T5871] veth1_vlan: entered promiscuous mode [ 78.190801][ T3534] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.267027][ T5871] veth0_macvtap: entered promiscuous mode [ 78.293391][ T5871] veth1_macvtap: entered promiscuous mode [ 78.303449][ T3534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.311589][ T3534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.333244][ T3569] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.347711][ T3569] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.363224][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.382096][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.423118][ T3500] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.433038][ T3569] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.443323][ T3569] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.445957][ T3500] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.480329][ T5868] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 78.497932][ T3500] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.507293][ T3500] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.590635][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.644757][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.711117][ T3569] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.733969][ T3569] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.794765][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.835137][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.856281][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.884988][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.022065][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.068473][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.271138][ T6004] netlink: 'syz.2.6': attribute type 1 has an invalid length. [ 79.304864][ T6005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7'. [ 79.465919][ T6007] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5'. [ 79.679584][ T6011] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8'. [ 79.820042][ T6020] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8'. [ 79.957287][ T6021] Zero length message leads to an empty skb [ 80.096651][ T5186] Bluetooth: hci1: command tx timeout [ 80.102176][ T5882] Bluetooth: hci0: command tx timeout [ 80.164547][ T5882] Bluetooth: hci2: command tx timeout [ 80.170169][ T5873] Bluetooth: hci3: command tx timeout [ 80.170711][ T5186] Bluetooth: hci4: command tx timeout [ 80.217939][ T6031] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 80.274922][ T6031] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.15'. [ 80.963264][ T6061] netlink: 48 bytes leftover after parsing attributes in process `syz.2.23'. [ 81.116636][ T6065] syzkaller0: entered promiscuous mode [ 81.122160][ T6065] syzkaller0: entered allmulticast mode [ 81.144063][ T6067] netlink: 80 bytes leftover after parsing attributes in process `syz.2.23'. [ 81.170844][ T6063] tipc: Started in network mode [ 81.213444][ T6063] tipc: Node identity 9ee150d5bb6e, cluster identity 4711 [ 81.290239][ T6063] tipc: Enabled bearer , priority 0 [ 81.297314][ T6071] netlink: 'syz.3.26': attribute type 10 has an invalid length. [ 81.337321][ T6071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.26'. [ 81.462029][ T6078] netlink: 'syz.0.27': attribute type 10 has an invalid length. [ 81.478416][ T6063] tipc: Disabling bearer [ 81.495169][ T6078] netlink: 40 bytes leftover after parsing attributes in process `syz.0.27'. [ 81.551137][ T6071] vlan2: entered promiscuous mode [ 81.577103][ T6071] bridge0: entered promiscuous mode [ 81.607470][ T6078] ipvlan1: entered promiscuous mode [ 81.623858][ T6078] ipvlan1: entered allmulticast mode [ 81.656539][ T6078] veth0_vlan: entered allmulticast mode [ 81.693398][ T6078] bridge0: port 3(ipvlan1) entered blocking state [ 81.732335][ T6078] bridge0: port 3(ipvlan1) entered disabled state [ 81.775225][ T6078] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 81.835470][ T6089] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 81.867091][ T6089] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.31'. [ 81.908997][ T6089] netlink: 'syz.3.31': attribute type 2 has an invalid length. [ 81.948031][ T6089] nbd: must specify a device to reconfigure [ 82.229105][ T6112] ip6gre0: Master is either lo or non-ether device [ 82.912991][ T6140] tipc: Enabled bearer , priority 0 [ 82.922658][ T6145] trusted_key: syz.0.46 sent an empty control message without MSG_MORE. [ 82.945167][ T6140] syzkaller0: entered promiscuous mode [ 82.950673][ T6140] syzkaller0: entered allmulticast mode [ 82.957415][ T6144] Illegal XDP return value 128607159 on prog (id 7) dev N/A, expect packet loss! [ 82.989786][ T6150] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 83.025464][ T6140] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 83.175875][ T6158] tipc: Resetting bearer [ 83.233162][ T6139] tipc: Resetting bearer [ 83.291365][ T6139] tipc: Disabling bearer [ 83.322658][ T6174] syz.3.52 uses obsolete (PF_INET,SOCK_PACKET) [ 83.837145][ T6196] netlink: 'syz.1.60': attribute type 4 has an invalid length. [ 84.355115][ T6224] __nla_validate_parse: 6 callbacks suppressed [ 84.355132][ T6224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.68'. [ 84.466411][ T6233] warning: `syz.0.71' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 84.515151][ T6233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.71'. [ 84.617772][ T6243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.74'. [ 84.656549][ T6250] openvswitch: netlink: IP tunnel dst address not specified [ 84.696348][ T6250] sock: sock_set_timeout: `syz.4.73' (pid 6250) tries to set negative timeout [ 84.760328][ T6243] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 84.907612][ T6243] netlink: 184 bytes leftover after parsing attributes in process `syz.2.74'. [ 85.053096][ T6268] netlink: 'syz.4.79': attribute type 1 has an invalid length. [ 85.096582][ T6268] netlink: 4 bytes leftover after parsing attributes in process `syz.4.79'. [ 85.271658][ T6283] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 85.340887][ T6285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.85'. [ 85.354177][ T6285] netlink: 20 bytes leftover after parsing attributes in process `syz.1.85'. [ 85.411779][ T6285] geneve2: entered promiscuous mode [ 85.417945][ T6285] geneve2: entered allmulticast mode [ 85.425181][ T6289] netlink: 'syz.2.86': attribute type 11 has an invalid length. [ 85.449619][ T6289] netlink: 224 bytes leftover after parsing attributes in process `syz.2.86'. [ 85.472756][ T6295] netlink: 2 bytes leftover after parsing attributes in process `syz.0.88'. [ 85.491284][ T6291] netlink: 'syz.4.87': attribute type 1 has an invalid length. [ 85.511378][ T6291] netlink: 224 bytes leftover after parsing attributes in process `syz.4.87'. [ 85.684747][ T6299] netlink: 'syz.2.90': attribute type 1 has an invalid length. [ 85.692345][ T6299] netlink: 'syz.2.90': attribute type 1 has an invalid length. [ 86.083299][ T6322] rdma_op ffff88807bb9a1f0 conn xmit_rdma 0000000000000000 [ 86.105827][ T6327] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.144970][ T6328] netlink: 'syz.4.99': attribute type 27 has an invalid length. [ 86.205555][ T6327] bridge_slave_1: left allmulticast mode [ 86.211242][ T6327] bridge_slave_1: left promiscuous mode [ 86.217715][ T6327] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.261128][ T6327] bridge_slave_0: left allmulticast mode [ 86.271802][ T6327] bridge_slave_0: left promiscuous mode [ 86.298051][ T6327] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.622517][ T6342] hsr_slave_1 (unregistering): left promiscuous mode [ 86.744824][ T1226] cfg80211: failed to load regulatory.db [ 86.917614][ T6373] netlink: 'syz.3.111': attribute type 10 has an invalid length. [ 86.952132][ T6373] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 86.979629][ T6373] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 87.605328][ T6406] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 87.632786][ T6406] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 87.669481][ T6406] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 87.859448][ T6429] netlink: 'syz.0.127': attribute type 21 has an invalid length. [ 88.038480][ T6442] netlink: 'syz.0.130': attribute type 1 has an invalid length. [ 88.212004][ T6457] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 89.140788][ T6509] tipc: Enabling of bearer rejected, failed to enable media [ 89.230427][ T6514] netlink: 'syz.0.148': attribute type 9 has an invalid length. [ 89.435220][ T6519] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 89.443263][ T6519] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 89.451198][ T6519] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 89.459132][ T6519] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 89.467055][ T6519] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 89.474973][ T6519] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 89.482876][ T6519] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 89.490812][ T6519] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 89.526834][ T6528] IPVS: set_ctl: invalid protocol: 8 255.255.255.255:20001 [ 89.545205][ T6528] sctp: [Deprecated]: syz.1.153 (pid 6528) Use of int in max_burst socket option. [ 89.545205][ T6528] Use struct sctp_assoc_value instead [ 89.701052][ T6535] __nla_validate_parse: 16 callbacks suppressed [ 89.701068][ T6535] netlink: 25 bytes leftover after parsing attributes in process `syz.4.155'. [ 89.773615][ T6541] netlink: 'syz.4.155': attribute type 4 has an invalid length. [ 90.961439][ T6630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.171'. [ 91.014308][ T6630] netlink: 12 bytes leftover after parsing attributes in process `syz.0.171'. [ 91.313132][ T30] audit: type=1107 audit(1756669940.655:2): pid=6647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 91.394560][ T6653] net_ratelimit: 46 callbacks suppressed [ 91.394579][ T6653] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 91.401097][ T30] audit: type=1107 audit(1756669940.715:3): pid=6647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 91.437843][ T6653] netlink: 12 bytes leftover after parsing attributes in process `syz.1.178'. [ 91.587233][ T6671] vxcan1: tx address claim with different name [ 91.627037][ T6673] netlink: 28 bytes leftover after parsing attributes in process `syz.1.178'. [ 91.647789][ T6673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.178'. [ 91.833643][ T6672] bridge: RTM_NEWNEIGH with invalid ether address [ 92.081922][ T6690] netlink: 16 bytes leftover after parsing attributes in process `syz.4.183'. [ 92.164744][ T6695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.185'. [ 92.168179][ T6696] netlink: 236 bytes leftover after parsing attributes in process `syz.1.186'. [ 92.174294][ T6695] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.277473][ T6695] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.474276][ T6704] netlink: 'syz.3.187': attribute type 29 has an invalid length. [ 92.505084][ T6704] netlink: 'syz.3.187': attribute type 29 has an invalid length. [ 92.560313][ T6704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.187'. [ 92.812378][ T6715] hsr_slave_1 (unregistering): left promiscuous mode [ 93.323860][ T6755] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.379354][ T6757] netlink: 'syz.0.202': attribute type 6 has an invalid length. [ 93.559887][ T6772] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 93.840916][ T6794] nbd: must specify at least one socket [ 94.012777][ T6799] IPVS: Error connecting to the multicast addr [ 95.097963][ T6841] __nla_validate_parse: 10 callbacks suppressed [ 95.097981][ T6841] netlink: 12 bytes leftover after parsing attributes in process `syz.1.221'. [ 95.158469][ T6845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.222'. [ 95.254375][ T6844] bridge1: entered promiscuous mode [ 95.260178][ T6844] bridge1: entered allmulticast mode [ 95.752800][ T6877] batman_adv: batadv0: Adding interface: wlan1 [ 95.795991][ T6877] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.839132][ T6877] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 95.851786][ T6885] erspan0: entered promiscuous mode [ 95.863894][ T6885] erspan0: entered allmulticast mode [ 95.936530][ T6891] netlink: 796 bytes leftover after parsing attributes in process `syz.4.236'. [ 96.064248][ T6896] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 96.180592][ T6904] Bluetooth: MGMT ver 1.23 [ 96.537260][ T6921] netlink: 'syz.2.245': attribute type 10 has an invalid length. [ 96.610353][ T6934] netlink: 12 bytes leftover after parsing attributes in process `syz.2.245'. [ 96.798182][ T6921] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 96.958832][ T6949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.250'. [ 97.067117][ T6952] tipc: Started in network mode [ 97.118303][ T6952] tipc: Node identity a6801d7cd371, cluster identity 4711 [ 97.141766][ T6952] tipc: Enabled bearer , priority 0 [ 97.162564][ T6957] syzkaller0: entered promiscuous mode [ 97.186449][ T6957] syzkaller0: entered allmulticast mode [ 97.238375][ T6952] tipc: Resetting bearer [ 97.777807][ T6951] tipc: Resetting bearer [ 97.898828][ T6951] tipc: Disabling bearer [ 98.882649][ T7031] netlink: 'syz.4.271': attribute type 2 has an invalid length. [ 98.905939][ T7031] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.271'. [ 98.944939][ T7031] nbd: must specify at least one socket [ 98.956150][ T7037] netlink: 4 bytes leftover after parsing attributes in process `syz.4.271'. [ 99.007573][ T7031] netlink: 12 bytes leftover after parsing attributes in process `syz.4.271'. [ 99.476931][ T7061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.276'. [ 99.658834][ T7072] vxlan0: entered promiscuous mode [ 99.675313][ T7072] vxlan0: entered allmulticast mode [ 99.681409][ T6565] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.701052][ T6565] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.718616][ T6565] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.740338][ T6565] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.017586][ T7084] netlink: 8 bytes leftover after parsing attributes in process `syz.4.280'. [ 100.082701][ T7084] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.146846][ T7091] C: renamed from team_slave_0 (while UP) [ 100.181087][ T7091] netlink: 'syz.3.282': attribute type 1 has an invalid length. [ 100.193832][ T7091] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 100.286689][ T7099] sctp: [Deprecated]: syz.2.284 (pid 7099) Use of int in max_burst socket option deprecated. [ 100.286689][ T7099] Use struct sctp_assoc_value instead [ 100.314121][ T7102] netlink: 12 bytes leftover after parsing attributes in process `syz.4.286'. [ 100.358643][ T7104] batadv_slave_1: entered promiscuous mode [ 100.364704][ T7104] batadv_slave_1: entered allmulticast mode [ 100.411222][ T7104] netlink: 'syz.1.285': attribute type 1 has an invalid length. [ 100.460945][ T7107] netlink: 'syz.3.287': attribute type 5 has an invalid length. [ 100.574887][ T7112] tipc: Enabled bearer , priority 0 [ 100.603561][ T7112] bond_slave_0: entered allmulticast mode [ 100.659384][ T7112] tipc: Resetting bearer [ 100.681648][ T7117] wg0 speed is unknown, defaulting to 1000 [ 100.695760][ T7109] tipc: Disabling bearer [ 100.743291][ T7117] wg0 speed is unknown, defaulting to 1000 [ 100.767387][ T7117] wg0 speed is unknown, defaulting to 1000 [ 100.845699][ T7117] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 100.899334][ T7117] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 101.009532][ T7120] delete_channel: no stack [ 101.020057][ T7117] wg0 speed is unknown, defaulting to 1000 [ 101.050690][ T7117] wg0 speed is unknown, defaulting to 1000 [ 101.096744][ T7117] wg0 speed is unknown, defaulting to 1000 [ 101.127205][ T7137] veth1_macvtap: left promiscuous mode [ 101.143076][ T7137] macsec0: entered promiscuous mode [ 101.158889][ T7137] macsec0: entered allmulticast mode [ 101.205033][ T7117] wg0 speed is unknown, defaulting to 1000 [ 101.209764][ T7144] veth1_macvtap: entered promiscuous mode [ 101.240842][ T7144] veth1_macvtap: entered allmulticast mode [ 101.276752][ T7144] macsec0: left promiscuous mode [ 101.304008][ T7144] macsec0: left allmulticast mode [ 101.323783][ T7144] veth1_macvtap: left allmulticast mode [ 101.359938][ T7117] wg0 speed is unknown, defaulting to 1000 [ 101.454181][ T7152] netlink: 'syz.0.299': attribute type 9 has an invalid length. [ 101.498712][ T7150] batman_adv: batadv0: Adding interface: wlan1 [ 101.538631][ T7150] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.576806][ T7150] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 101.802984][ T7173] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 101.822384][ T7172] netlink: 164 bytes leftover after parsing attributes in process `syz.3.305'. [ 101.896181][ T7179] netlink: 'syz.3.306': attribute type 2 has an invalid length. [ 101.903960][ T7179] netlink: 244 bytes leftover after parsing attributes in process `syz.3.306'. [ 102.078927][ T7188] netlink: 24 bytes leftover after parsing attributes in process `syz.3.309'. [ 102.467908][ T7203] netlink: 20 bytes leftover after parsing attributes in process `syz.0.315'. [ 102.538769][ T7209] netlink: 12 bytes leftover after parsing attributes in process `syz.1.317'. [ 102.759474][ T7218] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 102.766988][ T7218] IPv6: NLM_F_CREATE should be set when creating new route [ 102.792244][ T7221] netlink: 112 bytes leftover after parsing attributes in process `syz.4.320'. [ 103.157468][ T7238] netlink: 12 bytes leftover after parsing attributes in process `syz.4.325'. [ 103.170336][ T7237] netlink: 'syz.1.327': attribute type 1 has an invalid length. [ 103.179056][ T7237] netlink: 172 bytes leftover after parsing attributes in process `syz.1.327'. [ 103.192236][ T7237] netlink: 'syz.1.327': attribute type 1 has an invalid length. [ 103.449668][ T7252] netlink: 24 bytes leftover after parsing attributes in process `syz.4.329'. [ 103.781826][ T7264] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 104.066835][ T7284] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 104.356861][ T7298] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 104.793375][ T7323] ip6gre1: entered allmulticast mode [ 104.822661][ T7319] netlink: 'syz.1.346': attribute type 2 has an invalid length. [ 105.100798][ T7338] netlink: 'syz.2.352': attribute type 1 has an invalid length. [ 105.123071][ T7338] netlink: 'syz.2.352': attribute type 2 has an invalid length. [ 105.431779][ T7355] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 105.568624][ T7357] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 105.715797][ T7370] __nla_validate_parse: 6 callbacks suppressed [ 105.715824][ T7370] netlink: 44 bytes leftover after parsing attributes in process `syz.2.359'. [ 105.746647][ T7366] nbd0: detected capacity change from 0 to 127 [ 105.755305][ T7345] netlink: 20 bytes leftover after parsing attributes in process `syz.1.353'. [ 105.878933][ T7367] nbd1: detected capacity change from 0 to 127 [ 105.895773][ T7374] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 106.001913][ T5186] block nbd0: Receive control failed (result -32) [ 106.001913][ T5882] block nbd1: Receive control failed (result -104) [ 106.088721][ T7388] netlink: 20 bytes leftover after parsing attributes in process `syz.1.365'. [ 106.370774][ T7399] netlink: 8 bytes leftover after parsing attributes in process `syz.4.368'. [ 106.631767][ T7411] wg0 speed is unknown, defaulting to 1000 [ 106.838980][ T7415] ip6tnl0: entered allmulticast mode [ 106.929651][ T7422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.374'. [ 107.056913][ T7429] netlink: 24 bytes leftover after parsing attributes in process `syz.4.376'. [ 107.068183][ T7429] gre0: entered allmulticast mode [ 107.160238][ T7435] netlink: 'syz.4.379': attribute type 7 has an invalid length. [ 107.170334][ T7435] netlink: 140 bytes leftover after parsing attributes in process `syz.4.379'. [ 107.290572][ T7443] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 107.348583][ T7441] tipc: Started in network mode [ 107.353491][ T7441] tipc: Node identity ac14142f, cluster identity 4711 [ 107.376314][ T7441] tipc: New replicast peer: 0.0.0.0 [ 107.408454][ T7441] tipc: Enabled bearer , priority 10 [ 107.453852][ T7452] netlink: 'syz.3.385': attribute type 13 has an invalid length. [ 107.591673][ T7462] netlink: 596 bytes leftover after parsing attributes in process `syz.1.384'. [ 107.612509][ T7462] netlink: 12 bytes leftover after parsing attributes in process `syz.1.384'. [ 107.630381][ T7452] lo: entered promiscuous mode [ 107.635358][ T7452] lo: entered allmulticast mode [ 107.665863][ T7452] tunl0: entered promiscuous mode [ 107.677407][ T7452] tunl0: entered allmulticast mode [ 107.697763][ T7452] gre0: entered promiscuous mode [ 107.708762][ T7452] gre0: entered allmulticast mode [ 107.744129][ T7452] gretap0: entered promiscuous mode [ 107.750353][ T7452] gretap0: entered allmulticast mode [ 107.772244][ T7452] gretap0: refused to change device tx_queue_len [ 107.783137][ T7452] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 107.803527][ T7454] netlink: 'syz.1.384': attribute type 29 has an invalid length. [ 107.812733][ T7458] netlink: 'syz.1.384': attribute type 29 has an invalid length. [ 107.865400][ T7465] netlink: 32 bytes leftover after parsing attributes in process `syz.2.388'. [ 108.038420][ T7479] sctp: [Deprecated]: syz.4.391 (pid 7479) Use of struct sctp_assoc_value in delayed_ack socket option. [ 108.038420][ T7479] Use struct sctp_sack_info instead [ 108.103344][ T7479] sctp: [Deprecated]: syz.4.391 (pid 7479) Use of struct sctp_assoc_value in delayed_ack socket option. [ 108.103344][ T7479] Use struct sctp_sack_info instead [ 108.278995][ T7486] netlink: 'syz.2.393': attribute type 1 has an invalid length. [ 108.336075][ T7488] netlink: 'syz.2.393': attribute type 3 has an invalid length. [ 108.367999][ T7486] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 108.534967][ T5928] tipc: Node number set to 2886997039 [ 108.767621][ T7510] sit1: entered promiscuous mode [ 108.772614][ T7510] sit1: entered allmulticast mode [ 109.536911][ T7564] openvswitch: netlink: Key type 224 is out of range max 32 [ 109.545384][ T7564] netlink: 'syz.3.414': attribute type 16 has an invalid length. [ 109.561853][ T7564] lo: left promiscuous mode [ 109.569824][ T7564] lo: left allmulticast mode [ 109.581425][ T7564] tunl0: left promiscuous mode [ 109.586879][ T7564] tunl0: left allmulticast mode [ 109.594098][ T7564] gre0: left promiscuous mode [ 109.600074][ T7564] gre0: left allmulticast mode [ 109.639328][ T7564] gretap0: left promiscuous mode [ 109.644993][ T7564] gretap0: left allmulticast mode [ 109.663069][ T7564] erspan0: left promiscuous mode [ 109.695639][ T7564] erspan0: left allmulticast mode [ 109.779499][ T7564] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 109.902491][ T7577] wg0 speed is unknown, defaulting to 1000 [ 110.057376][ T7582] validate_nla: 2 callbacks suppressed [ 110.057393][ T7582] netlink: 'syz.3.421': attribute type 1 has an invalid length. [ 110.226963][ T7584] veth3: entered promiscuous mode [ 110.591674][ T7606] netlink: 'syz.0.427': attribute type 1 has an invalid length. [ 110.857102][ T7622] __nla_validate_parse: 12 callbacks suppressed [ 110.875615][ T7622] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.431'. [ 111.037438][ T7634] pim6reg527: entered allmulticast mode [ 111.654932][ T7661] netlink: 'syz.2.436': attribute type 13 has an invalid length. [ 111.699303][ T7661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.436'. [ 111.807072][ T7664] netlink: 348 bytes leftover after parsing attributes in process `syz.4.437'. [ 112.380941][ T7675] wg0 speed is unknown, defaulting to 1000 [ 112.387699][ T5974] wg0 speed is unknown, defaulting to 1000 [ 112.645189][ T7693] netlink: 12 bytes leftover after parsing attributes in process `syz.1.441'. [ 112.783880][ T7696] netlink: 48 bytes leftover after parsing attributes in process `syz.4.442'. [ 113.847424][ T7716] tipc: Can't bind to reserved service type 1 [ 114.108089][ T7727] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 114.142526][ T7728] netlink: 'syz.2.452': attribute type 1 has an invalid length. [ 114.192584][ T7728] netlink: 236 bytes leftover after parsing attributes in process `syz.2.452'. [ 114.489960][ T7754] netdevsim netdevsim3: Direct firmware load for /.€ failed with error -2 [ 114.499345][ T7754] netdevsim netdevsim3: Falling back to sysfs fallback for: /.€ [ 115.444612][ T7807] syzkaller0: entered promiscuous mode [ 115.450125][ T7807] syzkaller0: entered allmulticast mode [ 115.823304][ T7824] tipc: Enabled bearer , priority 0 [ 115.865445][ T7824] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 115.888320][ T7824] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 115.907938][ T7824] tipc: Resetting bearer [ 115.956904][ T7824] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 116.018839][ T7836] netlink: 20 bytes leftover after parsing attributes in process `syz.4.481'. [ 116.099283][ T7840] tipc: Resetting bearer [ 116.254429][ T7848] netlink: 44 bytes leftover after parsing attributes in process `syz.1.485'. [ 116.325032][ T7853] netlink: 36 bytes leftover after parsing attributes in process `syz.3.486'. [ 116.416753][ T7858] netlink: 'syz.4.487': attribute type 11 has an invalid length. [ 116.425063][ T7858] netlink: 224 bytes leftover after parsing attributes in process `syz.4.487'. [ 116.441401][ T7860] netlink: 'syz.4.487': attribute type 11 has an invalid length. [ 116.456844][ T7860] netlink: 224 bytes leftover after parsing attributes in process `syz.4.487'. [ 116.524257][ T7865] netlink: 16 bytes leftover after parsing attributes in process `syz.1.488'. [ 116.609565][ T7867] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.679773][ T7873] netlink: 32 bytes leftover after parsing attributes in process `syz.1.491'. [ 116.728539][ T7876] netlink: 'syz.2.490': attribute type 1 has an invalid length. [ 116.739032][ T6580] tipc: Resetting bearer [ 116.745073][ T7876] netlink: 'syz.2.490': attribute type 1 has an invalid length. [ 116.767415][ T7878] netlink: 144 bytes leftover after parsing attributes in process `syz.1.491'. [ 116.778739][ T7876] netlink: 'syz.2.490': attribute type 1 has an invalid length. [ 116.797069][ T7874] tipc: Enabling of bearer rejected, failed to enable media [ 116.810809][ T7879] netlink: 44 bytes leftover after parsing attributes in process `syz.3.492'. [ 116.815938][ T7876] netlink: 'syz.2.490': attribute type 2 has an invalid length. [ 116.839842][ T7876] netlink: 76 bytes leftover after parsing attributes in process `syz.2.490'. [ 116.860337][ T7881] tipc: Enabled bearer , priority 0 [ 116.873268][ T7881] syzkaller0: entered promiscuous mode [ 116.879620][ T7881] syzkaller0: entered allmulticast mode [ 116.903949][ T10] tipc: Node number set to 630149333 [ 116.912086][ T7884] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 117.130836][ T7880] tipc: Resetting bearer [ 117.200164][ T7880] tipc: Disabling bearer [ 117.242923][ T7896] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 117.723623][ T7924] netlink: 'syz.2.504': attribute type 1 has an invalid length. [ 117.798158][ T7931] netlink: 'syz.2.504': attribute type 4 has an invalid length. [ 117.887312][ T7937] netlink: 'syz.0.508': attribute type 1 has an invalid length. [ 117.897381][ T7937] netlink: 'syz.0.508': attribute type 1 has an invalid length. [ 117.905627][ T7937] netlink: 'syz.0.508': attribute type 2 has an invalid length. [ 117.914885][ T7924] veth3: entered promiscuous mode [ 117.948581][ T7924] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 117.986789][ T7931] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.994665][ T7938] netlink: 'syz.0.508': attribute type 1 has an invalid length. [ 118.332338][ T10] IPVS: starting estimator thread 0... [ 118.443914][ T7957] IPVS: using max 32 ests per chain, 76800 per kthread [ 118.541021][ T7965] veth1_to_batadv: mtu less than device minimum [ 118.797583][ T7870] IPVS: starting estimator thread 0... [ 118.821767][ T7988] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 118.907173][ T7987] IPVS: using max 28 ests per chain, 67200 per kthread [ 118.932205][ T7992] tipc: Enabling of bearer rejected, already enabled [ 119.000736][ T7992] sctp: [Deprecated]: syz.1.524 (pid 7992) Use of struct sctp_assoc_value in delayed_ack socket option. [ 119.000736][ T7992] Use struct sctp_sack_info instead [ 119.032286][ T8000] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 119.144749][ T8002] tipc: Enabled bearer , priority 0 [ 119.164749][ T8002] syzkaller0: entered promiscuous mode [ 119.174711][ T8002] syzkaller0: entered allmulticast mode [ 119.197244][ T8002] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 119.278299][ T8002] tipc: Resetting bearer [ 119.328822][ T8002] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.427183][ T8002] bridge_slave_1 (unregistering): left allmulticast mode [ 119.455688][ T8002] bridge_slave_1 (unregistering): left promiscuous mode [ 119.473786][ T8002] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.569724][ T8001] tipc: Resetting bearer [ 119.631210][ T8001] tipc: Disabling bearer [ 119.700619][ T8031] gretap0: entered promiscuous mode [ 119.709216][ T8031] gretap0: left promiscuous mode [ 119.796047][ T8034] tipc: Enabling of bearer rejected, already enabled [ 120.179920][ T8049] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 121.208133][ T6072] IPVS: starting estimator thread 0... [ 121.353789][ T8097] IPVS: using max 33 ests per chain, 79200 per kthread [ 121.363136][ T6580] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 121.404058][ T8105] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 121.443246][ T8113] __nla_validate_parse: 24 callbacks suppressed [ 121.443265][ T8113] netlink: 16 bytes leftover after parsing attributes in process `syz.0.560'. [ 122.125789][ T8152] netlink: 4 bytes leftover after parsing attributes in process `syz.3.570'. [ 122.833468][ T8188] netlink: 24 bytes leftover after parsing attributes in process `syz.0.580'. [ 122.890023][ T8195] netlink: 24 bytes leftover after parsing attributes in process `syz.0.580'. [ 123.028837][ T8203] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 123.078405][ T8203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.585'. [ 123.116601][ T8203] netlink: 12 bytes leftover after parsing attributes in process `syz.1.585'. [ 123.377550][ T8219] validate_nla: 5 callbacks suppressed [ 123.377567][ T8219] netlink: 'syz.4.591': attribute type 1 has an invalid length. [ 123.445356][ T8219] netlink: 216 bytes leftover after parsing attributes in process `syz.4.591'. [ 123.471604][ T8219] netlink: 'syz.4.591': attribute type 1 has an invalid length. [ 123.522170][ T8230] netlink: 32 bytes leftover after parsing attributes in process `syz.3.595'. [ 123.524675][ T8219] netlink: 216 bytes leftover after parsing attributes in process `syz.4.591'. [ 123.558929][ T8230] netlink: 20 bytes leftover after parsing attributes in process `syz.3.595'. [ 123.587997][ T8219] netlink: 'syz.4.591': attribute type 1 has an invalid length. [ 123.622428][ T8219] netlink: 'syz.4.591': attribute type 1 has an invalid length. [ 123.663980][ T8219] netlink: 'syz.4.591': attribute type 1 has an invalid length. [ 123.690366][ T8219] netlink: 'syz.4.591': attribute type 1 has an invalid length. [ 123.729020][ T8219] netlink: 'syz.4.591': attribute type 1 has an invalid length. [ 123.757657][ T8241] netlink: 'syz.0.597': attribute type 1 has an invalid length. [ 123.779181][ T8219] netlink: 'syz.4.591': attribute type 1 has an invalid length. [ 123.809852][ T8219] netlink: 'syz.4.591': attribute type 1 has an invalid length. [ 123.920436][ T8241] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.022836][ T8249] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.072375][ T8249] bond1: (slave vxcan5): The slave device specified does not support setting the MAC address [ 124.106988][ T8249] bond1: (slave vxcan5): Error -95 calling set_mac_address [ 124.240737][ T8248] veth3: entered promiscuous mode [ 124.259351][ T8248] bond1: (slave veth3): Enslaving as an active interface with a down link [ 124.316160][ T8241] vlan2: entered allmulticast mode [ 124.342725][ T8270] delete_channel: no stack [ 124.344066][ T8241] bond1: entered allmulticast mode [ 124.412756][ T8268] erspan0: entered allmulticast mode [ 124.439440][ T8271] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 124.466972][ T8267] syzkaller1: entered promiscuous mode [ 124.475976][ T8267] syzkaller1: entered allmulticast mode [ 125.523855][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 125.930272][ T8324] wg0 speed is unknown, defaulting to 1000 [ 126.117651][ T8341] tipc: Enabling of bearer rejected, already enabled [ 126.545273][ T8362] __nla_validate_parse: 75 callbacks suppressed [ 126.545291][ T8362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.629'. [ 126.620055][ T8365] team0: Device ip6gre2 is of different type [ 126.804856][ T8376] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 126.987302][ T8391] netlink: 80 bytes leftover after parsing attributes in process `syz.4.635'. [ 127.685726][ T8433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.644'. [ 127.725827][ T8422] tipc: Enabled bearer , priority 0 [ 127.746486][ T8440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.645'. [ 127.856742][ T8422] syzkaller0: entered promiscuous mode [ 127.862758][ T8422] syzkaller0: entered allmulticast mode [ 127.869681][ T8422] tipc: Resetting bearer [ 128.021596][ T6583] tipc: Resetting bearer [ 128.074018][ T8440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.645'. [ 128.156430][ T8417] tipc: Resetting bearer [ 128.187592][ T8458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.648'. [ 129.509568][ T8417] tipc: Disabling bearer [ 130.162945][ T8510] validate_nla: 62 callbacks suppressed [ 130.162964][ T8510] netlink: 'syz.2.663': attribute type 1 has an invalid length. [ 130.270397][ T8519] netlink: 244 bytes leftover after parsing attributes in process `syz.4.665'. [ 130.421095][ T8529] netlink: 20 bytes leftover after parsing attributes in process `syz.2.667'. [ 130.556911][ T8540] netlink: 'syz.2.670': attribute type 8 has an invalid length. [ 130.558889][ T8541] netlink: 12 bytes leftover after parsing attributes in process `syz.3.669'. [ 130.758732][ T8540] bridge3: entered allmulticast mode [ 131.423928][ T8565] netlink: 144 bytes leftover after parsing attributes in process `syz.4.675'. [ 131.832540][ T8586] netlink: 28 bytes leftover after parsing attributes in process `syz.4.682'. [ 132.012162][ T8599] netlink: 20 bytes leftover after parsing attributes in process `syz.4.685'. [ 132.023278][ T8599] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 132.035130][ T8596] netlink: 16 bytes leftover after parsing attributes in process `syz.1.686'. [ 132.209978][ T8606] 8021q: VLANs not supported on ip_vti0 [ 132.317600][ T8613] netlink: 32 bytes leftover after parsing attributes in process `syz.1.690'. [ 132.402816][ T8615] netlink: 24 bytes leftover after parsing attributes in process `syz.4.691'. [ 132.433209][ T8617] smc: net device bond0 applied user defined pnetid SYZ2 [ 132.462018][ T8617] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.692'. [ 132.494717][ T8617] netlink: 14 bytes leftover after parsing attributes in process `syz.0.692'. [ 132.550229][ T8621] openvswitch: netlink: IPv4 tun info is not correct [ 132.780690][ T8635] netlink: 'syz.4.697': attribute type 18 has an invalid length. [ 132.808995][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.821132][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.836199][ T8617] smc: removing net device bond0 with user defined pnetid SYZ2 [ 132.848520][ T8617] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.868624][ T8617] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.888317][ T8617] bond0 (unregistering): Released all slaves [ 133.186841][ T8640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.699'. [ 133.235459][ T8645] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 133.520037][ T8656] netlink: 152 bytes leftover after parsing attributes in process `syz.4.706'. [ 133.562695][ T8658] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 133.575741][ T8661] netlink: 1 bytes leftover after parsing attributes in process `syz.1.707'. [ 133.812384][ T6580] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.835714][ T6580] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.835757][ T8666] netlink: 'syz.3.709': attribute type 13 has an invalid length. [ 133.850853][ T6580] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.862683][ T6580] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.875397][ T8666] netlink: 'syz.3.709': attribute type 58 has an invalid length. [ 133.936739][ T8674] openvswitch: netlink: IP tunnel dst address not specified [ 134.083880][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 134.186851][ T8685] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 134.336048][ T8685] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 134.576013][ T8697] netlink: 'syz.1.717': attribute type 1 has an invalid length. [ 135.427659][ T8751] syzkaller0: create flow: hash 2539306177 index 1 [ 135.478609][ T8745] IPVS: Error joining to the multicast group [ 135.707466][ T49] syzkaller0: tun_net_xmit 76 [ 135.712900][ T49] syzkaller0: tun_net_xmit 48 [ 135.748517][ T8739] syzkaller0: delete flow: hash 2539306177 index 1 [ 136.007326][ T123] block nbd0: Possible stuck request ffff8880253e5080: control (read@0,1024B). Runtime 30 seconds [ 136.020077][ T123] block nbd0: Possible stuck request ffff8880253e5240: control (read@1024,1024B). Runtime 30 seconds [ 136.031301][ T11] block nbd1: Possible stuck request ffff88802584e000: control (read@0,1024B). Runtime 30 seconds [ 136.042288][ T11] block nbd1: Possible stuck request ffff88802584e1c0: control (read@1024,1024B). Runtime 30 seconds [ 136.058594][ T123] block nbd0: Possible stuck request ffff8880253e5400: control (read@2048,1024B). Runtime 30 seconds [ 136.069833][ T11] block nbd1: Possible stuck request ffff88802584e380: control (read@2048,1024B). Runtime 30 seconds [ 136.081168][ T123] block nbd0: Possible stuck request ffff8880253e55c0: control (read@3072,1024B). Runtime 30 seconds [ 136.095899][ T11] block nbd1: Possible stuck request ffff88802584e540: control (read@3072,1024B). Runtime 30 seconds [ 136.184827][ T8781] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 136.337984][ T7690] udevd[7690]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 137.475340][ T8797] netlink: 'syz.1.737': attribute type 4 has an invalid length. [ 137.625510][ T8803] netlink: 'syz.2.739': attribute type 2 has an invalid length. [ 137.686430][ T8803] __nla_validate_parse: 7 callbacks suppressed [ 137.686446][ T8803] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.739'. [ 137.759363][ T8803] nbd: must specify at least one socket [ 137.895902][ T8818] netlink: 'syz.1.745': attribute type 1 has an invalid length. [ 137.930581][ T8818] netlink: 12 bytes leftover after parsing attributes in process `syz.1.745'. [ 137.986934][ T8826] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 138.014346][ T8829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.746'. [ 138.051783][ T8824] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 138.320625][ T8844] netlink: 48 bytes leftover after parsing attributes in process `syz.0.749'. [ 138.329937][ T8839] netlink: 48 bytes leftover after parsing attributes in process `syz.0.749'. [ 138.628982][ T8855] netlink: 652 bytes leftover after parsing attributes in process `syz.0.753'. [ 138.678132][ T8857] netlink: 652 bytes leftover after parsing attributes in process `syz.0.753'. [ 138.829412][ T8869] netlink: 296 bytes leftover after parsing attributes in process `syz.1.758'. [ 138.880779][ T8875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.756'. [ 138.881259][ T8873] netlink: 'syz.2.759': attribute type 1 has an invalid length. [ 139.075924][ T8875] bridge_slave_1: left allmulticast mode [ 139.082512][ T8875] bridge_slave_1: left promiscuous mode [ 139.092315][ T8875] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.117974][ T8875] bridge_slave_0: left allmulticast mode [ 139.133777][ T8875] bridge_slave_0: left promiscuous mode [ 139.139575][ T8875] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.346477][ T8874] wg0 speed is unknown, defaulting to 1000 [ 139.454385][ T8869] netlink: 'syz.1.758': attribute type 13 has an invalid length. [ 139.475106][ T8869] netlink: 'syz.1.758': attribute type 17 has an invalid length. [ 139.546230][ T8869] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 139.892022][ T8915] netlink: 'syz.0.769': attribute type 10 has an invalid length. [ 140.129016][ T8932] netlink: 44 bytes leftover after parsing attributes in process `syz.4.772'. [ 140.140704][ T8915] veth0_vlan: left promiscuous mode [ 140.166676][ T8915] veth0_vlan: entered promiscuous mode [ 140.186926][ T8915] team0: Device veth0_vlan failed to register rx_handler [ 140.822619][ T8975] netlink: 'syz.0.784': attribute type 3 has an invalid length. [ 140.910877][ T8981] netlink: 'syz.2.786': attribute type 1 has an invalid length. [ 140.937294][ T8982] netlink: 'syz.3.785': attribute type 12 has an invalid length. [ 140.989788][ T8981] 8021q: adding VLAN 0 to HW filter on device bond3 [ 141.111075][ T8988] bond3: (slave geneve2): making interface the new active one [ 141.120688][ T8988] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 141.623165][ T9025] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.743330][ T9033] lo: entered allmulticast mode [ 141.827381][ T9040] bond0: (slave bond_slave_0): Releasing backup interface [ 141.842446][ T9040] bond0: (slave bond_slave_1): Releasing backup interface [ 141.889018][ T9040] team0: Port device team_slave_0 removed [ 141.912763][ T9040] team0: Port device team_slave_1 removed [ 141.921655][ T9040] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.929772][ T9040] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.941024][ T9040] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.948753][ T9040] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.968300][ T9040] batman_adv: batadv0: Removing interface: wlan1 [ 142.020772][ T9043] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 142.029647][ T9043] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 142.051115][ T9043] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 142.860758][ T9092] __nla_validate_parse: 10 callbacks suppressed [ 142.860776][ T9092] netlink: 12 bytes leftover after parsing attributes in process `syz.2.821'. [ 142.878149][ T9094] validate_nla: 4 callbacks suppressed [ 142.878165][ T9094] netlink: 'syz.3.822': attribute type 1 has an invalid length. [ 142.883344][ T9094] sctp: [Deprecated]: syz.3.822 (pid 9094) Use of struct sctp_assoc_value in delayed_ack socket option. [ 142.883344][ T9094] Use struct sctp_sack_info instead [ 142.921988][ T9094] tap0: tun_chr_ioctl cmd 1074025677 [ 142.928132][ T9094] tap0: linktype set to 65534 [ 143.031398][ T9099] netlink: 'syz.3.823': attribute type 18 has an invalid length. [ 143.102859][ T9104] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 143.737871][ T9134] tipc: Started in network mode [ 143.743486][ T9134] tipc: Node identity ac1414aa, cluster identity 4711 [ 143.779931][ T9134] tipc: Enabled bearer , priority 10 [ 143.820862][ T9138] netlink: 'syz.2.834': attribute type 10 has an invalid length. [ 144.118936][ T9151] netlink: 'syz.3.837': attribute type 10 has an invalid length. [ 144.225087][ T9156] syzkaller0: entered allmulticast mode [ 144.362354][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806f937400: rx timeout, send abort [ 144.549751][ T9178] netlink: 256 bytes leftover after parsing attributes in process `syz.4.845'. [ 144.694600][ T9182] netlink: 48 bytes leftover after parsing attributes in process `syz.0.846'. [ 144.740019][ T9184] netlink: 64 bytes leftover after parsing attributes in process `syz.0.846'. [ 144.834386][ T9193] sctp: [Deprecated]: syz.4.848 (pid 9193) Use of int in max_burst socket option deprecated. [ 144.834386][ T9193] Use struct sctp_assoc_value instead [ 144.863232][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806f936000: rx timeout, send abort [ 144.871833][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806f937400: abort rx timeout. Force session deactivation [ 144.893883][ T5949] tipc: Node number set to 2886997162 [ 144.906951][ T9195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.849'. [ 145.000352][ T9201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.850'. [ 145.038569][ T9201] netlink: 'syz.3.850': attribute type 4 has an invalid length. [ 145.173127][ T9212] netlink: 104 bytes leftover after parsing attributes in process `syz.3.854'. [ 145.323579][ T9220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.858'. [ 145.371753][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806f936000: abort rx timeout. Force session deactivation [ 145.476724][ T9227] netlink: 'syz.3.860': attribute type 1 has an invalid length. [ 145.487305][ T9227] netlink: 204 bytes leftover after parsing attributes in process `syz.3.860'. [ 145.533490][ T9234] netlink: 12 bytes leftover after parsing attributes in process `syz.0.863'. [ 145.649065][ T9243] netlink: 'syz.3.865': attribute type 5 has an invalid length. [ 145.939942][ T9256] wg0 speed is unknown, defaulting to 1000 [ 145.961383][ T9258] sctp: [Deprecated]: syz.3.870 (pid 9258) Use of int in max_burst socket option. [ 145.961383][ T9258] Use struct sctp_assoc_value instead [ 146.116093][ T9263] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 146.190424][ T9263] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.199314][ T9263] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.368241][ T9273] netlink: 'syz.2.875': attribute type 1 has an invalid length. [ 146.634334][ T9296] netlink: 'syz.3.877': attribute type 2 has an invalid length. [ 146.808654][ T9299] : entered promiscuous mode [ 147.124468][ T9323] wg0 speed is unknown, defaulting to 1000 [ 147.953845][ T9370] __nla_validate_parse: 3 callbacks suppressed [ 147.953861][ T9370] netlink: 16 bytes leftover after parsing attributes in process `syz.4.901'. [ 147.960142][ T9372] nft_compat: unsupported protocol 0 [ 148.068471][ T9376] netlink: 'syz.3.903': attribute type 10 has an invalid length. [ 148.100523][ T9367] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.219767][ T9367] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.236908][ T9367] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.301849][ T9367] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 148.345515][ T9367] bridge1: left promiscuous mode [ 148.384239][ T9367] veth3: left promiscuous mode [ 148.441497][ T9376] team0: Device veth1_macvtap failed to register rx_handler [ 148.499058][ T6580] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.538435][ T6580] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.557275][ T6580] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.576651][ T6580] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.720748][ T9413] netlink: 'syz.4.914': attribute type 16 has an invalid length. [ 148.744071][ T9413] netlink: 'syz.4.914': attribute type 17 has an invalid length. [ 148.753462][ T9413] gre0: left allmulticast mode [ 148.769401][ T9413] erspan0: left allmulticast mode [ 148.823003][ T9413] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 148.951333][ T9433] netlink: 'syz.1.920': attribute type 10 has an invalid length. [ 148.993242][ T9433] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 149.011139][ T9431] netlink: 52 bytes leftover after parsing attributes in process `syz.0.922'. [ 149.141098][ T9446] syz_tun: entered allmulticast mode [ 149.160422][ T9449] netlink: 'syz.2.926': attribute type 29 has an invalid length. [ 149.169048][ T9449] netlink: 'syz.2.926': attribute type 29 has an invalid length. [ 149.180698][ T9449] netlink: 500 bytes leftover after parsing attributes in process `syz.2.926'. [ 149.186653][ T9446] syz_tun: left allmulticast mode [ 149.443893][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 149.488094][ T9470] netlink: 32 bytes leftover after parsing attributes in process `syz.2.933'. [ 149.610081][ T9479] IPVS: stopping master sync thread 7173 ... [ 149.772401][ T9488] netlink: 36 bytes leftover after parsing attributes in process `syz.4.939'. [ 149.824596][ T9493] netlink: 168 bytes leftover after parsing attributes in process `syz.3.941'. [ 149.859681][ T9488] netlink: 4 bytes leftover after parsing attributes in process `syz.4.939'. [ 150.010240][ T9510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.944'. [ 150.026405][ T9488] hsr_slave_0 (unregistering): left promiscuous mode [ 150.043371][ T9513] netlink: 'syz.0.943': attribute type 10 has an invalid length. [ 150.069622][ T9513] batman_adv: batadv0: Adding interface: team0 [ 150.092892][ T9513] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.120169][ T9513] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 150.553854][ T9543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.955'. [ 150.796842][ T9565] netlink: 'syz.1.961': attribute type 9 has an invalid length. [ 150.819425][ T9565] netlink: 'syz.1.961': attribute type 9 has an invalid length. [ 150.844476][ T9565] bond0: option ad_select: unable to set because the bond device is up [ 150.871140][ T9565] netlink: 'syz.1.961': attribute type 1 has an invalid length. [ 150.897834][ T9571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.965'. [ 150.917555][ T9571] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 150.934606][ T9571] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.004416][ T9575] 8021q: adding VLAN 0 to HW filter on device bond2 [ 151.044781][ T9575] bond2: (slave veth7): Enslaving as an active interface with a down link [ 151.117051][ T9575] veth9: entered promiscuous mode [ 151.142396][ T9575] bond2: (slave veth9): Enslaving as an active interface with a down link [ 151.258031][ T9575] vlan0: entered allmulticast mode [ 151.281282][ T9575] bond2: entered allmulticast mode [ 151.308847][ T9575] bond2: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 151.445309][ T9600] dummy0: entered promiscuous mode [ 151.471415][ T9600] batadv_slave_1: entered promiscuous mode [ 151.933167][ T9638] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 152.917784][ T9682] veth0_macvtap: left promiscuous mode [ 152.939837][ T9682] macvtap0: entered allmulticast mode [ 152.953255][ T9682] macvtap0: refused to change device tx_queue_len [ 152.953866][ T9683] block nbd2: server does not support multiple connections per device. [ 152.980735][ T9683] block nbd2: shutting down sockets [ 153.040395][ T9689] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 153.064537][ T9689] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 153.236641][ T9698] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 153.283964][ T9702] macsec1: entered promiscuous mode [ 153.289230][ T9702] macsec1: entered allmulticast mode [ 153.324238][ T9698] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 153.424200][ T9714] __nla_validate_parse: 6 callbacks suppressed [ 153.424217][ T9714] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1000'. [ 153.470454][ T9716] tipc: Enabled bearer , priority 0 [ 153.478724][ T9716] syzkaller0: entered promiscuous mode [ 153.484359][ T9716] syzkaller0: entered allmulticast mode [ 153.526894][ T9720] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1003'. [ 153.553551][ T9716] tipc: Resetting bearer [ 153.625022][ T9713] tipc: Resetting bearer [ 153.691185][ T9732] validate_nla: 4 callbacks suppressed [ 153.691208][ T9732] netlink: 'syz.2.1003': attribute type 10 has an invalid length. [ 153.694392][ T9713] tipc: Disabling bearer [ 153.798559][ T9732] bridge0: port 2(team0) entered blocking state [ 153.814189][ T9732] bridge0: port 2(team0) entered disabled state [ 153.814695][ T9736] netlink: 18 bytes leftover after parsing attributes in process `syz.3.1004'. [ 153.821867][ T9732] team0: entered allmulticast mode [ 153.838882][ T9732] team_slave_0: entered allmulticast mode [ 153.848380][ T9732] team_slave_1: entered allmulticast mode [ 153.859311][ T9732] team0: entered promiscuous mode [ 153.866703][ T9732] team_slave_0: entered promiscuous mode [ 153.872758][ T9732] team_slave_1: entered promiscuous mode [ 153.940817][ T9738] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1005'. [ 153.985151][ T9738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1005'. [ 154.036518][ T9742] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1007'. [ 154.055435][ T9742] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1007'. [ 154.070458][ T9742] netlink: 'syz.3.1007': attribute type 5 has an invalid length. [ 154.098031][ T9742] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1007'. [ 154.119347][ T9749] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1007'. [ 154.208919][ T9755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.472614][ T9771] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 154.583171][ T9781] netlink: 'syz.3.1020': attribute type 7 has an invalid length. [ 154.607788][ T9785] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1020'. [ 154.990997][ T9812] netlink: 'syz.1.1028': attribute type 33 has an invalid length. [ 155.010300][ T9812] macvlan4: entered promiscuous mode [ 155.033988][ T9812] macvlan4: entered allmulticast mode [ 155.382967][ T9836] dvmrp0: entered allmulticast mode [ 155.548038][ T9847] netlink: 'syz.1.1038': attribute type 1 has an invalid length. [ 155.548364][ T9849] ieee802154 phy0 wpan0: encryption failed: -22 [ 155.598415][ T9855] netlink: 'syz.2.1037': attribute type 10 has an invalid length. [ 155.666562][ T9855] geneve3: entered promiscuous mode [ 155.671888][ T9855] geneve3: entered allmulticast mode [ 155.738960][ T6591] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 155.751126][ T6591] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 155.766920][ T9865] veth0_to_bridge: entered promiscuous mode [ 155.793124][ T9868] netlink: 'syz.4.1042': attribute type 1 has an invalid length. [ 155.800973][ T9868] netlink: 'syz.4.1042': attribute type 2 has an invalid length. [ 155.811743][ T6591] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 155.841040][ T9866] netlink: 'syz.0.1041': attribute type 21 has an invalid length. [ 155.863843][ T9865] netlink: 'syz.0.1041': attribute type 21 has an invalid length. [ 155.880820][ T9864] veth0_to_bridge: left promiscuous mode [ 156.018528][ T9890] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 156.064314][ T9890] openvswitch: netlink: Message has 6332 unknown bytes. [ 156.324935][ T9901] sctp: [Deprecated]: syz.1.1052 (pid 9901) Use of int in maxseg socket option. [ 156.324935][ T9901] Use struct sctp_assoc_value instead [ 156.851646][ T9935] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 157.027080][ T9945] siw: device registration error -23 [ 157.033081][ T9944] siw: device registration error -23 [ 157.213419][ T9963] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 157.275615][ T9965] netlink: zone id is out of range [ 157.280779][ T9965] netlink: zone id is out of range [ 157.290928][ T9965] netlink: zone id is out of range [ 157.308559][ T9855] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 157.328252][ T9965] netlink: zone id is out of range [ 157.347870][ T9965] netlink: zone id is out of range [ 157.358517][ T9965] netlink: zone id is out of range [ 157.367714][ T9965] netlink: zone id is out of range [ 157.476627][ T9855] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 157.613247][ T9855] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 157.748513][ T9987] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.758853][ T9987] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.773626][ T9987] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.781418][ T9987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.799336][ T9987] batman_adv: batadv0: Removing interface: wlan1 [ 157.868114][ T6591] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 157.922803][ T6591] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 157.992642][ T6583] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 158.012498][ T6583] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 158.329657][T10021] syzkaller1: entered promiscuous mode [ 158.347153][T10021] syzkaller1: entered allmulticast mode [ 158.722695][T10055] syzkaller0: entered promiscuous mode [ 158.729547][T10055] syzkaller0: entered allmulticast mode [ 158.746061][T10055] validate_nla: 4 callbacks suppressed [ 158.746076][T10055] netlink: 'syz.0.1100': attribute type 1 has an invalid length. [ 158.788029][T10055] smc: adding net device bond0 with user defined pnetid SYZ2 [ 158.821447][T10060] __nla_validate_parse: 30 callbacks suppressed [ 158.821460][T10060] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1102'. [ 158.831783][T10062] bond0: (slave bridge3): making interface the new active one [ 158.846537][T10062] bond0: (slave bridge3): Enslaving as an active interface with an up link [ 158.865812][T10056] bond0: (slave bridge4): Enslaving as an active interface with a down link [ 158.884241][ T5882] Bluetooth: hci0: command tx timeout [ 158.907331][T10060] bond3: entered promiscuous mode [ 158.912400][T10060] bond3: entered allmulticast mode [ 158.919098][T10060] 8021q: adding VLAN 0 to HW filter on device bond3 [ 159.029424][T10070] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1104'. [ 159.086890][T10072] tipc: Started in network mode [ 159.091967][T10072] tipc: Node identity 825be7a2784, cluster identity 4711 [ 159.108121][T10072] tipc: Enabled bearer , priority 0 [ 159.118185][T10072] syzkaller0: entered promiscuous mode [ 159.124616][T10072] syzkaller0: entered allmulticast mode [ 159.160776][T10072] tipc: Resetting bearer [ 159.180561][T10071] tipc: Resetting bearer [ 159.202483][T10071] tipc: Disabling bearer [ 166.085087][ T11] block nbd0: Possible stuck request ffff8880253e5080: control (read@0,1024B). Runtime 60 seconds [ 166.096228][ T123] block nbd1: Possible stuck request ffff88802584e000: control (read@0,1024B). Runtime 60 seconds [ 166.106974][ T123] block nbd1: Possible stuck request ffff88802584e1c0: control (read@1024,1024B). Runtime 60 seconds [ 166.117922][ T11] block nbd0: Possible stuck request ffff8880253e5240: control (read@1024,1024B). Runtime 60 seconds [ 166.129458][ T11] block nbd0: Possible stuck request ffff8880253e5400: control (read@2048,1024B). Runtime 60 seconds [ 166.140629][ T123] block nbd1: Possible stuck request ffff88802584e380: control (read@2048,1024B). Runtime 60 seconds [ 166.151637][ T123] block nbd1: Possible stuck request ffff88802584e540: control (read@3072,1024B). Runtime 60 seconds [ 166.162973][ T11] block nbd0: Possible stuck request ffff8880253e55c0: control (read@3072,1024B). Runtime 60 seconds [ 179.524093][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 180.326858][T10113] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1117'. [ 180.542423][T10134] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1123'. [ 180.552817][T10134] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1123'. [ 180.617941][T10137] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20002 [ 180.626579][T10137] netlink: 'syz.0.1123': attribute type 142 has an invalid length. [ 180.789895][T10142] netlink: 'syz.1.1124': attribute type 6 has an invalid length. [ 180.800963][T10142] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1124'. [ 180.841686][T10146] netlink: 'syz.3.1125': attribute type 1 has an invalid length. [ 180.857946][T10146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1125'. [ 181.127294][T10167] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1133'. [ 181.145144][T10167] netlink: 'syz.4.1133': attribute type 7 has an invalid length. [ 181.153374][T10167] netlink: 'syz.4.1133': attribute type 8 has an invalid length. [ 181.401187][T10183] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1136'. [ 181.431365][T10183] net_ratelimit: 18 callbacks suppressed [ 181.431377][T10183] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 181.721040][T10197] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1139'. [ 181.805642][T10200] wg0 speed is unknown, defaulting to 1000 [ 181.849946][T10202] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1140'. [ 182.129776][T10215] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1144'. [ 182.557125][T10233] team0: Port device team_slave_1 removed [ 182.619295][T10256] netlink: 'syz.1.1156': attribute type 1 has an invalid length. [ 182.744989][T10260] netlink: 'syz.3.1158': attribute type 1 has an invalid length. [ 182.806656][T10260] 8021q: adding VLAN 0 to HW filter on device bond4 [ 182.919887][T10268] 8021q: adding VLAN 0 to HW filter on device bond4 [ 182.934173][T10268] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 182.946896][T10268] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 183.063832][T10284] netlink: 'syz.1.1165': attribute type 1 has an invalid length. [ 183.089341][T10286] dvmrp1: entered allmulticast mode [ 183.103198][T10284] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 183.334478][T10303] tipc: Enabled bearer , priority 0 [ 183.373567][T10303] syzkaller0: entered promiscuous mode [ 183.379863][T10303] syzkaller0: entered allmulticast mode [ 183.389934][T10303] tipc: Resetting bearer [ 183.397857][T10303] tipc: Enabling of bearer rejected, already enabled [ 183.413850][T10301] tipc: Resetting bearer [ 183.444339][T10301] tipc: Disabling bearer [ 183.471463][T10311] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 183.947405][T10333] tipc: Enabled bearer , priority 0 [ 183.967720][T10332] syzkaller0: entered promiscuous mode [ 183.990972][T10332] syzkaller0: entered allmulticast mode [ 184.032645][T10336] tipc: Resetting bearer [ 184.049518][T10332] syzkaller0: left allmulticast mode [ 184.080967][T10331] tipc: Resetting bearer [ 184.120741][T10331] tipc: Disabling bearer [ 184.136481][T10338] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 184.221056][T10347] netlink: 'syz.3.1184': attribute type 7 has an invalid length. [ 184.640308][T10377] geneve2: entered promiscuous mode [ 184.650243][T10377] geneve2: entered allmulticast mode [ 184.773405][T10391] af_packet: tpacket_rcv: packet too big, clamped from 112 to 4294967272. macoff=96 [ 184.840937][T10377] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.878141][ T6565] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 184.887871][T10380] netlink: 'syz.2.1195': attribute type 4 has an invalid length. [ 184.905461][ T6565] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 184.918467][ T6565] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 185.030711][T10404] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 185.051726][T10404] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 185.235971][T10420] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 185.360269][T10427] lo: entered allmulticast mode [ 185.397071][T10427] __nla_validate_parse: 16 callbacks suppressed [ 185.397089][T10427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1210'. [ 185.581711][T10435] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1212'. [ 185.657267][T10426] lo: left allmulticast mode [ 185.676326][T10435] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1212'. [ 185.686394][T10435] validate_nla: 2 callbacks suppressed [ 185.686410][T10435] netlink: 'syz.4.1212': attribute type 20 has an invalid length. [ 185.812777][T10444] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1215'. [ 185.826959][T10444] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1215'. [ 185.897497][T10444] wg0 speed is unknown, defaulting to 1000 [ 185.924879][T10454] netlink: 'syz.3.1217': attribute type 1 has an invalid length. [ 185.932651][T10454] netlink: 'syz.3.1217': attribute type 3 has an invalid length. [ 185.942417][T10454] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1217'. [ 186.081455][T10464] veth0: entered promiscuous mode [ 186.096476][T10467] veth0: left promiscuous mode [ 186.443231][T10486] netlink: 'syz.2.1225': attribute type 5 has an invalid length. [ 186.476707][T10486] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.1225'. [ 186.486936][T10486] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 186.506997][T10486] openvswitch: netlink: Message has 6332 unknown bytes. [ 186.679946][T10377] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.711592][T10377] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 186.760006][T10504] netlink: 'syz.4.1230': attribute type 1 has an invalid length. [ 186.769581][T10504] netlink: 'syz.4.1230': attribute type 3 has an invalid length. [ 186.777807][T10504] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1230'. [ 186.787361][T10504] NCSI netlink: No device for ifindex 131080 [ 186.855823][T10377] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.867892][T10377] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 186.899723][T10510] netlink: 'syz.4.1230': attribute type 1 has an invalid length. [ 186.929941][T10510] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1230'. [ 186.981347][T10377] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.011427][T10377] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 187.250716][ T49] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 187.273318][ T49] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 187.328501][ T49] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 187.337223][ T49] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 187.375106][ T6585] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 187.400901][ T6585] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 187.440428][T10542] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1237'. [ 187.464904][ T49] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 187.483923][ T49] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 187.626586][T10549] syzkaller1: left promiscuous mode [ 187.636130][T10549] syzkaller1: left allmulticast mode [ 187.781223][T10556] wg0 speed is unknown, defaulting to 1000 [ 188.010222][T10573] pim6reg: entered allmulticast mode [ 188.065534][T10569] pim6reg: left allmulticast mode [ 188.281260][T10578] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 188.508659][T10595] netlink: 'syz.0.1253': attribute type 1 has an invalid length. [ 188.643466][T10595] gretap1: entered promiscuous mode [ 188.718445][T10607] macvlan2: entered promiscuous mode [ 188.754001][T10607] macvlan2: entered allmulticast mode [ 188.778054][T10607] bond3: entered promiscuous mode [ 188.807068][T10607] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 188.885743][T10607] bond3: left promiscuous mode [ 189.194224][T10620] wg0 speed is unknown, defaulting to 1000 [ 189.471285][T10650] netlink: 'syz.1.1266': attribute type 39 has an invalid length. [ 190.092921][T10683] team0: Port device team_slave_1 removed [ 190.270067][T10695] wg0 speed is unknown, defaulting to 1000 [ 190.455171][T10701] __nla_validate_parse: 11 callbacks suppressed [ 190.455189][T10701] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1281'. [ 190.509240][T10705] netlink: 'syz.3.1282': attribute type 12 has an invalid length. [ 190.655333][T10708] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1283'. [ 190.735664][T10708] netlink: 'syz.1.1283': attribute type 11 has an invalid length. [ 190.782459][T10725] netlink: 'syz.0.1286': attribute type 10 has an invalid length. [ 190.797191][T10723] netlink: 'syz.3.1285': attribute type 10 has an invalid length. [ 190.968377][T10723] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 191.029288][T10740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1287'. [ 191.218029][T10746] syzkaller0: entered promiscuous mode [ 191.223567][T10746] syzkaller0: entered allmulticast mode [ 191.260516][T10750] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1290'. [ 191.308747][T10746] tipc: Enabled bearer , priority 0 [ 191.350893][T10746] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1289'. [ 191.398348][T10746] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1289'. [ 191.448743][T10746] tipc: Resetting bearer [ 191.474796][T10745] tipc: Resetting bearer [ 191.547877][T10745] tipc: Disabling bearer [ 191.689675][T10777] pim6reg527: entered allmulticast mode [ 191.699115][T10777] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1297'. [ 191.769333][T10780] netlink: 808 bytes leftover after parsing attributes in process `syz.4.1298'. [ 191.785027][T10780] netlink: 'syz.4.1298': attribute type 13 has an invalid length. [ 191.803399][T10780] veth0_macvtap: left promiscuous mode [ 191.850664][T10780] macvtap0: entered allmulticast mode [ 191.890602][T10780] macvtap0: refused to change device tx_queue_len [ 192.210339][T10813] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1305'. [ 192.230894][T10806] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1305'. [ 192.256703][T10804] wg0 speed is unknown, defaulting to 1000 [ 192.344022][T10820] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 192.456081][T10825] wg0 speed is unknown, defaulting to 1000 [ 192.657117][T10839] netlink: 'syz.3.1316': attribute type 1 has an invalid length. [ 192.673244][T10839] netlink: 'syz.3.1316': attribute type 1 has an invalid length. [ 192.863388][T10846] wg0 speed is unknown, defaulting to 1000 [ 193.101674][T10857] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 193.485553][T10878] pim6reg1: entered promiscuous mode [ 193.490892][T10878] pim6reg1: entered allmulticast mode [ 193.736015][T10893] geneve2: entered promiscuous mode [ 193.741334][T10893] geneve2: entered allmulticast mode [ 193.939141][T10904] wg0 speed is unknown, defaulting to 1000 [ 194.251039][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.258040][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.411130][T10933] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20000 [ 194.801395][T10955] netlink: 'syz.0.1351': attribute type 10 has an invalid length. [ 194.880655][T10958] netlink: 'syz.2.1352': attribute type 142 has an invalid length. [ 195.071842][T10973] pim6reg: entered allmulticast mode [ 195.181662][T10977] tipc: Enabling of bearer rejected, already enabled [ 195.256380][T10986] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 195.590641][T11004] __nla_validate_parse: 17 callbacks suppressed [ 195.590658][T11004] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1366'. [ 196.009626][T11013] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1369'. [ 196.166217][ T11] block nbd0: Possible stuck request ffff8880253e5080: control (read@0,1024B). Runtime 90 seconds [ 196.181497][ T123] block nbd1: Possible stuck request ffff88802584e000: control (read@0,1024B). Runtime 90 seconds [ 196.195438][ T11] block nbd0: Possible stuck request ffff8880253e5240: control (read@1024,1024B). Runtime 90 seconds [ 196.207922][ T123] block nbd1: Possible stuck request ffff88802584e1c0: control (read@1024,1024B). Runtime 90 seconds [ 196.219643][ T11] block nbd0: Possible stuck request ffff8880253e5400: control (read@2048,1024B). Runtime 90 seconds [ 196.230885][ T123] block nbd1: Possible stuck request ffff88802584e380: control (read@2048,1024B). Runtime 90 seconds [ 196.242031][ T123] block nbd1: Possible stuck request ffff88802584e540: control (read@3072,1024B). Runtime 90 seconds [ 196.254370][ T11] block nbd0: Possible stuck request ffff8880253e55c0: control (read@3072,1024B). Runtime 90 seconds [ 196.270495][T11032] netlink: 'syz.0.1373': attribute type 11 has an invalid length. [ 196.299975][T11032] netlink: 'syz.0.1373': attribute type 11 has an invalid length. [ 196.328099][ T5865] Bluetooth: hci2: command 0x0406 tx timeout [ 196.341568][T11032] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1373'. [ 196.342206][ T5877] Bluetooth: hci1: command 0x0406 tx timeout [ 196.351185][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 196.384697][T11030] netlink: 'syz.0.1373': attribute type 11 has an invalid length. [ 196.402682][T11030] netlink: 'syz.0.1373': attribute type 11 has an invalid length. [ 196.412438][T11030] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1373'. [ 196.657018][T11049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1378'. [ 197.433377][T11086] wg0 speed is unknown, defaulting to 1000 [ 197.592093][T11103] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 197.615745][T11107] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1398'. [ 197.865361][T11120] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 197.873152][T11120] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 197.896862][T11120] tipc: Enabled bearer , priority 0 [ 197.917382][T11120] tipc: Resetting bearer [ 198.001853][T11129] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 198.017087][T11130] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 198.252692][T11145] wg0 speed is unknown, defaulting to 1000 [ 198.298287][T11149] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 198.433170][T11141] tipc: Resetting bearer [ 198.450233][T11160] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 198.504080][T11155] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1413'. [ 198.828430][T11185] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1419'. [ 198.890056][T11186] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1421'. [ 199.049211][T11201] openvswitch: netlink: Missing key (keys=40, expected=80) [ 199.049285][T11200] openvswitch: netlink: Missing key (keys=40, expected=80) [ 199.076665][T11201] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1425'. [ 199.310725][T11223] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 199.340623][T11225] only policy match revision 0 supported [ 199.340643][T11225] unable to load match [ 199.688708][T11248] tipc: Enabled bearer , priority 0 [ 199.704263][T11248] syzkaller0: entered promiscuous mode [ 199.709770][T11248] syzkaller0: entered allmulticast mode [ 199.720863][T11250] netlink: 'syz.1.1440': attribute type 21 has an invalid length. [ 199.744616][T11248] tipc: Resetting bearer [ 199.753563][T11247] tipc: Resetting bearer [ 199.783902][T11247] tipc: Disabling bearer [ 199.838737][T11258] netlink: 'syz.4.1442': attribute type 83 has an invalid length. [ 199.839067][ T30] audit: type=1804 audit(1756670049.195:4): pid=11259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1443" name="/newroot/275/memory.events" dev="tmpfs" ino=1427 res=1 errno=0 [ 199.921013][ T30] audit: type=1800 audit(1756670049.225:5): pid=11259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1443" name="memory.events" dev="tmpfs" ino=1427 res=0 errno=0 [ 200.262728][T11287] openvswitch: netlink: Key type 1807 is out of range max 32 [ 200.480156][T11305] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:20003 [ 200.498452][T11303] netlink: 'syz.0.1455': attribute type 1 has an invalid length. [ 200.498457][T11302] netlink: 'syz.0.1455': attribute type 1 has an invalid length. [ 200.528509][T11308] netlink: 'syz.2.1457': attribute type 10 has an invalid length. [ 200.578657][T11308] team0: Device ipvlan1 failed to register rx_handler [ 200.944154][T11335] netlink: 'syz.2.1463': attribute type 4 has an invalid length. [ 201.203081][T11344] dvmrp0: entered allmulticast mode [ 201.354635][T11358] tipc: Enabled bearer , priority 0 [ 201.387531][T11357] tipc: Enabling of bearer rejected, already enabled [ 201.407276][T11358] syzkaller0: entered promiscuous mode [ 201.416901][T11358] syzkaller0: entered allmulticast mode [ 201.464365][T11357] tipc: Resetting bearer [ 201.494324][T11355] tipc: Resetting bearer [ 201.519195][T11355] tipc: Disabling bearer [ 201.722978][T11384] __nla_validate_parse: 8 callbacks suppressed [ 201.722996][T11384] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1477'. [ 201.745230][T11381] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1476'. [ 201.968720][T11405] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1484'. [ 201.993327][T11408] netem: change failed [ 202.016170][T11407] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1484'. [ 202.077705][T11414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1487'. [ 202.095091][T11414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1487'. [ 202.111321][T11414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1487'. [ 202.256674][T11402] wg0 speed is unknown, defaulting to 1000 [ 202.302429][T11423] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1491'. [ 202.504234][T11435] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1494'. [ 202.613161][T11445] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1498'. [ 202.831960][T11455] netlink: 'syz.2.1500': attribute type 1 has an invalid length. [ 202.938789][T11453] tipc: Enabled bearer , priority 0 [ 202.987056][T11470] bridge5: port 1(veth0_to_bond) entered blocking state [ 203.047597][T11470] bridge5: port 1(veth0_to_bond) entered disabled state [ 203.075124][T11470] veth0_to_bond: entered allmulticast mode [ 203.097917][T11470] veth0_to_bond: entered promiscuous mode [ 203.111424][T11476] netlink: 'syz.1.1506': attribute type 12 has an invalid length. [ 203.260059][T11491] nbd: must specify at least one socket [ 203.298106][T11495] nbd: must specify at least one socket [ 203.320595][T11498] netlink: 'syz.3.1510': attribute type 1 has an invalid length. [ 203.337775][T11496] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 203.392651][T11452] tipc: Disabling bearer [ 204.011970][T11524] netlink: 'syz.0.1518': attribute type 2 has an invalid length. [ 204.321789][T11545] bond5: entered promiscuous mode [ 204.329159][T11545] 8021q: adding VLAN 0 to HW filter on device bond5 [ 205.602573][T11636] validate_nla: 1 callbacks suppressed [ 205.602591][T11636] netlink: 'syz.1.1552': attribute type 3 has an invalid length. [ 205.631760][T11637] syzkaller0: entered allmulticast mode [ 206.234285][T11686] veth1_to_batadv: mtu greater than device maximum [ 206.659017][T11710] syzkaller0: entered allmulticast mode [ 206.688632][T11710] netlink: 'syz.3.1574': attribute type 10 has an invalid length. [ 206.708580][T11710] team0: Port device dummy0 added [ 206.827871][T11721] __nla_validate_parse: 39 callbacks suppressed [ 206.827888][T11721] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1577'. [ 206.911895][T11726] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1579'. [ 206.949523][T11726] netlink: 'syz.3.1579': attribute type 1 has an invalid length. [ 207.042541][T11734] wg0 speed is unknown, defaulting to 1000 [ 207.224234][T11743] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1581'. [ 207.277898][T11758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1585'. [ 207.410085][T11764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1585'. [ 208.144602][T11799] netlink: 'syz.2.1596': attribute type 2 has an invalid length. [ 208.261186][T11803] macsec0: entered promiscuous mode [ 208.266846][T11803] macsec0: entered allmulticast mode [ 208.281083][T11805] veth1_macvtap: entered allmulticast mode [ 208.287265][T11805] macsec0: left promiscuous mode [ 208.299644][T11805] macsec0: left allmulticast mode [ 208.308178][T11805] veth1_macvtap: left allmulticast mode [ 208.376668][T11808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1599'. [ 208.731232][T11836] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1610'. [ 208.741562][T11836] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1610'. [ 208.836401][T11845] bridge5: entered promiscuous mode [ 208.841837][T11845] bridge5: entered allmulticast mode [ 208.914782][T11852] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1615'. [ 209.029957][ T920] IPVS: starting estimator thread 0... [ 209.041904][T11860] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1616'. [ 209.123906][T11861] IPVS: using max 30 ests per chain, 72000 per kthread [ 209.143245][T11860] sctp: [Deprecated]: syz.3.1616 (pid 11860) Use of int in maxseg socket option. [ 209.143245][T11860] Use struct sctp_assoc_value instead [ 209.329898][T11881] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.339414][T11881] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.348225][T11881] batman_adv: batadv0: Removing interface: team0 [ 209.480577][T11890] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 209.495673][T11890] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 209.506230][T11890] gretap2: entered promiscuous mode [ 209.511735][T11890] gretap2: entered allmulticast mode [ 209.938278][T11923] tap0: tun_chr_ioctl cmd 3288372251 [ 209.947228][T11923] tap0: tun_chr_ioctl cmd 1074025676 [ 209.958802][T11923] tap0: owner set to 0 [ 210.827057][T11979] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 211.032984][ T6072] IPVS: starting estimator thread 0... [ 211.143926][T12000] IPVS: using max 36 ests per chain, 86400 per kthread [ 211.266774][T12011] netlink: 'syz.0.1667': attribute type 1 has an invalid length. [ 211.900079][T12051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.935608][T12051] bond0: (slave rose0): Enslaving as an active interface with an up link [ 212.125895][T12069] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.220489][T12069] sctp: [Deprecated]: syz.3.1687 (pid 12069) Use of int in max_burst socket option. [ 212.220489][T12069] Use struct sctp_assoc_value instead [ 212.327774][T12085] __nla_validate_parse: 24 callbacks suppressed [ 212.327791][T12085] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1690'. [ 212.511707][T12095] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1692'. [ 212.526856][T12097] netlink: 'syz.1.1693': attribute type 8 has an invalid length. [ 212.580511][T12099] netlink: 'syz.1.1693': attribute type 8 has an invalid length. [ 212.653685][T12104] netlink: 'syz.3.1694': attribute type 8 has an invalid length. [ 212.695301][T12106] wg0 speed is unknown, defaulting to 1000 [ 212.806902][T12114] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1697'. [ 213.041991][T12127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1700'. [ 213.056994][T12129] netlink: 'syz.2.1700': attribute type 4 has an invalid length. [ 213.534685][T12158] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 214.155504][ T30] audit: type=1107 audit(1756670063.515:6): pid=12188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='£IΪºUx…G- 6‡Ï‘¢§Ô [ 214.155504][ T30] ÅxÚºÝv®°' [ 214.192967][T12191] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1716'. [ 214.412491][T12210] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1723'. [ 214.655879][T12227] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 214.710556][T12231] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1728'. [ 214.882380][T12251] netlink: 81 bytes leftover after parsing attributes in process `syz.0.1731'. [ 215.181199][T12268] wg0 speed is unknown, defaulting to 1000 [ 215.190835][T12265] IPVS: set_ctl: invalid protocol: 43 172.30.0.3:20000 [ 215.202799][T12265] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1736'. [ 215.212252][T12271] netlink: 'syz.4.1738': attribute type 3 has an invalid length. [ 215.246398][T12271] netlink: 666 bytes leftover after parsing attributes in process `syz.4.1738'. [ 215.300683][T12265] ip6_vti0: entered promiscuous mode [ 215.334786][T12265] ip6_vti0: entered allmulticast mode [ 215.481445][T12288] netlink: 'syz.0.1742': attribute type 1 has an invalid length. [ 215.753484][T12311] netlink: 'syz.4.1750': attribute type 1 has an invalid length. [ 215.778991][T12302] team0: Device ip6gre2 is of different type [ 215.830715][T12317] netlink: 'syz.4.1751': attribute type 1 has an invalid length. [ 215.841510][T12317] netlink: 'syz.4.1751': attribute type 1 has an invalid length. [ 215.976370][T12326] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 216.239195][T12343] tipc: Enabling of bearer rejected, already enabled [ 216.353143][T12352] validate_nla: 6 callbacks suppressed [ 216.353160][T12352] netlink: 'syz.4.1763': attribute type 1 has an invalid length. [ 216.948616][T12393] 8021q: adding VLAN 0 to HW filter on device bond6 [ 216.957566][T12398] netlink: 'syz.2.1779': attribute type 1 has an invalid length. [ 217.050612][T12412] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.077611][T12411] netlink: 'syz.3.1783': attribute type 1 has an invalid length. [ 217.086276][T12414] netlink: 'syz.3.1783': attribute type 1 has an invalid length. [ 217.835121][T12428] netlink: 'syz.1.1788': attribute type 11 has an invalid length. [ 218.015846][T12443] __nla_validate_parse: 78 callbacks suppressed [ 218.015864][T12443] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1793'. [ 218.084864][ T5186] block nbd2: Receive control failed (result -32) [ 218.227565][ T5949] hid-generic 0005:0458:0158.0001: item fetching failed at offset 0/1 [ 218.305104][ T5949] hid-generic 0005:0458:0158.0001: probe with driver hid-generic failed with error -22 [ 218.471092][T12482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1806'. [ 218.773909][T12498] netlink: 'syz.3.1810': attribute type 11 has an invalid length. [ 219.262040][ T5186] block nbd3: Receive control failed (result -32) [ 219.318193][T12505] syzkaller1: entered promiscuous mode [ 219.333062][T12505] syzkaller1: entered allmulticast mode [ 219.394383][T12479] nbd3: detected capacity change from 0 to 127 [ 219.503527][T12511] bond0: option mode: unable to set because the bond device has slaves [ 219.583335][T12524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1816'. [ 219.742806][T12533] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1821'. [ 219.767133][T12538] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 219.781554][T12538] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 219.854378][T12546] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1824'. [ 220.181753][T12567] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1833'. [ 220.220914][T12568] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1831'. [ 220.240678][T12564] netlink: 'syz.1.1830': attribute type 9 has an invalid length. [ 220.348427][T12579] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 220.378096][T12583] netlink: 'syz.2.1837': attribute type 12 has an invalid length. [ 220.399046][T12583] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1837'. [ 220.573031][T12595] tipc: Enabling of bearer rejected, already enabled [ 220.657548][T12603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1843'. [ 220.667822][T12601] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1842'. [ 220.728083][T12606] tipc: Enabling of bearer rejected, failed to enable media [ 220.749813][T12610] (unnamed net_device) (uninitialized): option mode: invalid value (133) [ 220.917234][T12628] pim6reg1: entered allmulticast mode [ 220.967067][T12630] tipc: Enabled bearer , priority 0 [ 220.974797][T12630] syzkaller0: entered promiscuous mode [ 220.980498][T12630] syzkaller0: entered allmulticast mode [ 221.009076][T12630] netlink: 'syz.4.1852': attribute type 11 has an invalid length. [ 221.151717][T12630] tipc: Resetting bearer [ 221.348965][T12646] netlink: 'syz.2.1858': attribute type 64 has an invalid length. [ 221.357113][T12648] netlink: 'syz.3.1859': attribute type 11 has an invalid length. [ 221.444579][T12629] tipc: Resetting bearer [ 221.478899][T12629] tipc: Disabling bearer [ 221.505198][T12650] netlink: 'syz.1.1860': attribute type 1 has an invalid length. [ 221.513092][T12650] netlink: 'syz.1.1860': attribute type 4 has an invalid length. [ 221.558121][T12650] IPv6: sit1: Disabled Multicast RS [ 221.585535][T12650] sit1: entered allmulticast mode [ 221.664205][ T6565] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.672601][ T6565] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.695723][ T6583] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.725019][ T6591] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.750632][T12660] netlink: 'syz.3.1862': attribute type 75 has an invalid length. [ 221.777082][T12660] netem: incorrect gi model size [ 221.782433][T12660] netem: change failed [ 221.811749][T12665] xfrm1: entered promiscuous mode [ 221.817650][T12665] xfrm1: entered allmulticast mode [ 222.069359][T12684] netlink: 'syz.1.1873': attribute type 13 has an invalid length. [ 222.078301][T12684] netlink: 'syz.1.1873': attribute type 58 has an invalid length. [ 222.097938][T12686] netlink: 'syz.2.1874': attribute type 4 has an invalid length. [ 222.133520][T12686] netlink: 'syz.2.1874': attribute type 4 has an invalid length. [ 222.888937][T12684] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 222.899989][T12684] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 222.917755][T12684] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 222.926579][T12684] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 222.940815][T12684] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 222.947594][T12684] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 222.962947][T12684] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 222.969964][T12684] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 223.033132][T12684] tipc: Resetting bearer [ 223.099512][T12684] tipc: Resetting bearer [ 223.339114][T12743] __nla_validate_parse: 21 callbacks suppressed [ 223.339133][T12743] netlink: 159784 bytes leftover after parsing attributes in process `syz.1.1883'. [ 223.394515][T12749] sctp: [Deprecated]: syz.3.1882 (pid 12749) Use of struct sctp_assoc_value in delayed_ack socket option. [ 223.394515][T12749] Use struct sctp_sack_info instead [ 223.464584][T12753] sctp: [Deprecated]: syz.3.1882 (pid 12753) Use of struct sctp_assoc_value in delayed_ack socket option. [ 223.464584][T12753] Use struct sctp_sack_info instead [ 223.526269][T12749] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1882'. [ 223.826843][T12783] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 223.847294][T12785] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1895'. [ 223.917515][T12792] netlink: 'syz.1.1896': attribute type 21 has an invalid length. [ 223.946714][T12785] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1895'. [ 223.985438][T12785] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.016372][T12791] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1896'. [ 224.038244][T12792] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1896'. [ 224.043808][T12800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1895'. [ 224.106393][T12803] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1899'. [ 224.167697][T12806] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1900'. [ 224.280272][T12809] gretap0: entered promiscuous mode [ 224.314533][T12809] vlan3: entered promiscuous mode [ 224.403439][T12821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1906'. [ 224.497532][T12825] netlink: 'syz.3.1907': attribute type 29 has an invalid length. [ 225.487139][T12895] openvswitch: netlink: VXLAN extension 173 out of range max 1 [ 225.692396][T12901] netlink: 'syz.3.1927': attribute type 4 has an invalid length. [ 225.801546][T12901] bond8: entered promiscuous mode [ 225.809605][T12901] bond8: entered allmulticast mode [ 225.817294][T12901] 8021q: adding VLAN 0 to HW filter on device bond8 [ 225.830283][T12912] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 225.991013][T12901] bond8 (unregistering): Released all slaves [ 226.212682][T12924] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 226.226295][T12924] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 226.252173][ T123] block nbd1: Possible stuck request ffff88802584e000: control (read@0,1024B). Runtime 120 seconds [ 226.262979][ T123] block nbd1: Possible stuck request ffff88802584e1c0: control (read@1024,1024B). Runtime 120 seconds [ 226.274520][ T123] block nbd1: Possible stuck request ffff88802584e380: control (read@2048,1024B). Runtime 120 seconds [ 226.285609][ T11] block nbd0: Possible stuck request ffff8880253e5080: control (read@0,1024B). Runtime 120 seconds [ 226.296456][ T11] block nbd0: Possible stuck request ffff8880253e5240: control (read@1024,1024B). Runtime 120 seconds [ 226.308491][ T11] block nbd0: Possible stuck request ffff8880253e5400: control (read@2048,1024B). Runtime 120 seconds [ 226.320194][ T123] block nbd1: Possible stuck request ffff88802584e540: control (read@3072,1024B). Runtime 120 seconds [ 226.331404][ T11] block nbd0: Possible stuck request ffff8880253e55c0: control (read@3072,1024B). Runtime 120 seconds [ 226.388605][T12928] gretap1: entered promiscuous mode [ 226.993518][T12969] validate_nla: 1 callbacks suppressed [ 226.993535][T12969] netlink: 'syz.0.1941': attribute type 1 has an invalid length. [ 227.480241][T13009] erspan0: entered promiscuous mode [ 227.486177][T13009] erspan0: entered allmulticast mode [ 227.868874][T13038] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 227.957179][T13043] sctp: [Deprecated]: syz.3.1958 (pid 13043) Use of int in max_burst socket option deprecated. [ 227.957179][T13043] Use struct sctp_assoc_value instead [ 227.992582][T13043] sctp: [Deprecated]: syz.3.1958 (pid 13043) Use of int in max_burst socket option deprecated. [ 227.992582][T13043] Use struct sctp_assoc_value instead [ 228.037272][T13043] sctp: [Deprecated]: syz.3.1958 (pid 13043) Use of int in max_burst socket option deprecated. [ 228.037272][T13043] Use struct sctp_assoc_value instead [ 228.084349][T13043] sctp: [Deprecated]: syz.3.1958 (pid 13043) Use of int in max_burst socket option deprecated. [ 228.084349][T13043] Use struct sctp_assoc_value instead [ 228.121497][T13043] sctp: [Deprecated]: syz.3.1958 (pid 13043) Use of int in max_burst socket option deprecated. [ 228.121497][T13043] Use struct sctp_assoc_value instead [ 228.178437][T13043] sctp: [Deprecated]: syz.3.1958 (pid 13043) Use of int in max_burst socket option deprecated. [ 228.178437][T13043] Use struct sctp_assoc_value instead [ 228.233347][T13043] sctp: [Deprecated]: syz.3.1958 (pid 13043) Use of int in max_burst socket option deprecated. [ 228.233347][T13043] Use struct sctp_assoc_value instead [ 228.297314][T13043] sctp: [Deprecated]: syz.3.1958 (pid 13043) Use of int in max_burst socket option deprecated. [ 228.297314][T13043] Use struct sctp_assoc_value instead [ 228.346869][T13043] sctp: [Deprecated]: syz.3.1958 (pid 13043) Use of int in max_burst socket option deprecated. [ 228.346869][T13043] Use struct sctp_assoc_value instead [ 228.369663][T13043] sctp: [Deprecated]: syz.3.1958 (pid 13043) Use of int in max_burst socket option deprecated. [ 228.369663][T13043] Use struct sctp_assoc_value instead [ 228.448420][T13074] netlink: 'syz.4.1965': attribute type 83 has an invalid length. [ 228.506911][T13075] team0: Device vti0 is of different type [ 228.631039][T13082] syzkaller1: entered promiscuous mode [ 228.656872][T13082] syzkaller1: entered allmulticast mode [ 228.696562][T13083] __nla_validate_parse: 16 callbacks suppressed [ 228.696578][T13083] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1968'. [ 228.740073][T13090] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1967'. [ 229.125260][T13116] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1977'. [ 229.423140][T13132] netlink: 'syz.0.1979': attribute type 11 has an invalid length. [ 229.471827][T13132] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1979'. [ 229.516098][T13132] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1979'. [ 229.535419][T13132] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1979'. [ 229.629018][T13136] netlink: 'syz.3.1981': attribute type 1 has an invalid length. [ 229.826362][T13159] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1986'. [ 230.215179][T13182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1992'. [ 230.296499][T13191] delete_channel: no stack [ 230.404436][T13198] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1995'. [ 230.495243][T13195] netlink: 388 bytes leftover after parsing attributes in process `syz.4.1994'. [ 230.604959][T13209] netlink: 'syz.0.2001': attribute type 30 has an invalid length. [ 230.626786][ T6583] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.659589][ T6583] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.680596][ T6583] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.716283][T13213] veth0: entered promiscuous mode [ 230.721575][ T6585] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.766918][T13213] veth0: left promiscuous mode [ 230.791579][T13213] netlink: 'syz.3.1998': attribute type 12 has an invalid length. [ 230.852329][T13226] can: request_module (can-proto-0) failed. [ 231.017698][T13242] netlink: 'syz.0.2008': attribute type 29 has an invalid length. [ 231.093187][T13242] netlink: 'syz.0.2008': attribute type 29 has an invalid length. [ 231.162043][T13242] unsupported nla_type 58 [ 231.412332][T13265] netlink: 'syz.3.2013': attribute type 10 has an invalid length. [ 231.431828][T13263] netlink: 'syz.2.2012': attribute type 1 has an invalid length. [ 231.819084][T13291] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 233.442656][T13406] tipc: Enabled bearer , priority 0 [ 233.472973][T13406] syzkaller0: entered promiscuous mode [ 233.490819][T13406] syzkaller0: entered allmulticast mode [ 233.536674][T13406] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 233.584667][T13406] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 233.618839][T13406] tipc: Resetting bearer [ 233.685167][T13405] tipc: Resetting bearer [ 233.712538][T13405] tipc: Disabling bearer [ 233.737611][T13421] gtp0: entered promiscuous mode [ 233.882101][T13436] __nla_validate_parse: 14 callbacks suppressed [ 233.882119][T13436] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2063'. [ 234.042183][T13454] netlink: 'syz.1.2068': attribute type 1 has an invalid length. [ 234.050820][T13454] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2068'. [ 234.096631][T13454] netlink: 'syz.1.2068': attribute type 1 has an invalid length. [ 234.124129][T13454] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2068'. [ 234.386008][T13470] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2073'. [ 234.398202][T13470] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2073'. [ 234.454691][T13478] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2076'. [ 234.484426][T13478] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2076'. [ 234.528425][T13479] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2074'. [ 234.621252][ T6591] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 234.646815][ T5949] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 234.655552][ T6591] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 234.702268][T13492] tipc: Enabling of bearer rejected, already enabled [ 234.786532][T13501] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2081'. [ 234.920866][T13497] sch_tbf: burst 88 is lower than device veth7 mtu (1514) ! [ 234.965586][ T7868] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 235.090848][T13519] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2086'. [ 235.110852][T13519] netlink: 'syz.2.2086': attribute type 3 has an invalid length. [ 235.144269][T13522] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 235.505752][T13552] netlink: 'syz.4.2097': attribute type 1 has an invalid length. [ 235.529207][T13553] netlink: 'syz.4.2097': attribute type 1 has an invalid length. [ 235.534492][ T5949] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 235.608865][T13552] 8021q: adding VLAN 0 to HW filter on device bond4 [ 235.778195][T13566] lo: entered promiscuous mode [ 235.798600][T13566] netlink: 'syz.2.2101': attribute type 2 has an invalid length. [ 235.808702][T13566] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 235.819667][T13568] xt_HMARK: spi-set and port-set can't be combined [ 235.997802][T13581] ================================================================== [ 236.005916][T13581] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400 [ 236.013819][T13581] Read of size 1 at addr ffff888024e1c770 by task syz.1.2106/13581 [ 236.021713][T13581] [ 236.024061][T13581] CPU: 0 UID: 0 PID: 13581 Comm: syz.1.2106 Not tainted syzkaller #0 PREEMPT(full) [ 236.024083][T13581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 236.024100][T13581] Call Trace: [ 236.024108][T13581] [ 236.024116][T13581] dump_stack_lvl+0x189/0x250 [ 236.024138][T13581] ? __kasan_check_byte+0x12/0x40 [ 236.024160][T13581] ? __pfx_dump_stack_lvl+0x10/0x10 [ 236.024178][T13581] ? lock_release+0x4b/0x3e0 [ 236.024203][T13581] ? __virt_addr_valid+0x4a5/0x5c0 [ 236.024224][T13581] print_report+0xca/0x240 [ 236.024239][T13581] ? xfrm_state_find+0x2cf2/0x5400 [ 236.024253][T13581] kasan_report+0x118/0x150 [ 236.024274][T13581] ? xfrm_state_find+0x2cf2/0x5400 [ 236.024293][T13581] xfrm_state_find+0x2cf2/0x5400 [ 236.024314][T13581] ? __pfx___find_rr_leaf+0x10/0x10 [ 236.024339][T13581] ? xfrm_state_find+0x1da/0x5400 [ 236.024356][T13581] ? __pfx_xfrm_state_find+0x10/0x10 [ 236.024369][T13581] ? __rt6_find_exception_rcu+0x127/0x4c0 [ 236.024393][T13581] ? __pfx___rt6_find_exception_rcu+0x10/0x10 [ 236.024418][T13581] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 236.024444][T13581] ? ip6_pol_route+0x162/0x1180 [ 236.024465][T13581] ? __pfx_ip6_pol_route+0x10/0x10 [ 236.024483][T13581] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 236.024502][T13581] ? __lock_acquire+0xab9/0xd20 [ 236.024529][T13581] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 236.024554][T13581] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 236.024573][T13581] ? xfrm_expand_policies+0x41f/0x6a0 [ 236.024591][T13581] xfrm_lookup_with_ifid+0x2a7/0x1a70 [ 236.024610][T13581] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 236.024631][T13581] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 236.024649][T13581] ? txopt_get+0x335/0x3f0 [ 236.024669][T13581] ? aa_label_sk_perm+0x4cd/0x630 [ 236.024689][T13581] ? __pfx_txopt_get+0x10/0x10 [ 236.024713][T13581] xfrm_lookup_route+0x3c/0x1c0 [ 236.024732][T13581] rawv6_sendmsg+0xdab/0x1820 [ 236.024760][T13581] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 236.024792][T13581] ? finish_task_switch+0x266/0x950 [ 236.024820][T13581] ? __pfx_aa_sk_perm+0x10/0x10 [ 236.024842][T13581] ? sock_rps_record_flow+0x19/0x410 [ 236.024862][T13581] ? inet_sendmsg+0x2f4/0x370 [ 236.024880][T13581] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 236.024899][T13581] __sock_sendmsg+0x19c/0x270 [ 236.024919][T13581] ____sys_sendmsg+0x52d/0x830 [ 236.024939][T13581] ? __pfx_____sys_sendmsg+0x10/0x10 [ 236.024961][T13581] ? import_iovec+0x74/0xa0 [ 236.024979][T13581] ___sys_sendmsg+0x21f/0x2a0 [ 236.024997][T13581] ? __pfx____sys_sendmsg+0x10/0x10 [ 236.025029][T13581] ? __fget_files+0x2a/0x420 [ 236.025049][T13581] ? __fget_files+0x3a0/0x420 [ 236.025075][T13581] __sys_sendmmsg+0x227/0x430 [ 236.025094][T13581] ? __pfx___sys_sendmmsg+0x10/0x10 [ 236.025109][T13581] ? do_futex+0x333/0x420 [ 236.025132][T13581] ? fput+0xa0/0xd0 [ 236.025155][T13581] ? __pfx___se_sys_futex+0x10/0x10 [ 236.025174][T13581] ? rcu_is_watching+0x15/0xb0 [ 236.025194][T13581] __x64_sys_sendmmsg+0xa0/0xc0 [ 236.025211][T13581] do_syscall_64+0xfa/0x3b0 [ 236.025226][T13581] ? lockdep_hardirqs_on+0x9c/0x150 [ 236.025246][T13581] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.025261][T13581] ? clear_bhb_loop+0x60/0xb0 [ 236.025279][T13581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.025295][T13581] RIP: 0033:0x7f5580f8ebe9 [ 236.025317][T13581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.025332][T13581] RSP: 002b:00007f5581d48038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 236.025354][T13581] RAX: ffffffffffffffda RBX: 00007f55811c5fa0 RCX: 00007f5580f8ebe9 [ 236.025366][T13581] RDX: 00000000000002e9 RSI: 0000200000000480 RDI: 0000000000000008 [ 236.025378][T13581] RBP: 00007f5581011e19 R08: 0000000000000000 R09: 0000000000000000 [ 236.025388][T13581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.025404][T13581] R13: 00007f55811c6038 R14: 00007f55811c5fa0 R15: 00007ffce6da5c18 [ 236.025425][T13581] [ 236.025431][T13581] [ 236.414588][T13581] Allocated by task 8798: [ 236.418897][T13581] kasan_save_track+0x3e/0x80 [ 236.423560][T13581] __kasan_slab_alloc+0x6c/0x80 [ 236.428391][T13581] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 236.433832][T13581] xfrm_state_alloc+0x24/0x2f0 [ 236.438580][T13581] __find_acq_core+0x8a7/0x1c00 [ 236.443407][T13581] xfrm_find_acq+0x78/0xa0 [ 236.447802][T13581] xfrm_alloc_userspi+0x6b3/0xc90 [ 236.452811][T13581] xfrm_user_rcv_msg+0x7a3/0xab0 [ 236.457730][T13581] netlink_rcv_skb+0x208/0x470 [ 236.462480][T13581] xfrm_netlink_rcv+0x79/0x90 [ 236.467139][T13581] netlink_unicast+0x82f/0x9e0 [ 236.471893][T13581] netlink_sendmsg+0x805/0xb30 [ 236.476636][T13581] __sock_sendmsg+0x219/0x270 [ 236.481294][T13581] ____sys_sendmsg+0x505/0x830 [ 236.486039][T13581] ___sys_sendmsg+0x21f/0x2a0 [ 236.490698][T13581] __x64_sys_sendmsg+0x19b/0x260 [ 236.495614][T13581] do_syscall_64+0xfa/0x3b0 [ 236.500097][T13581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.505970][T13581] [ 236.508279][T13581] Freed by task 5949: [ 236.512238][T13581] kasan_save_track+0x3e/0x80 [ 236.516900][T13581] kasan_save_free_info+0x46/0x50 [ 236.521906][T13581] __kasan_slab_free+0x5b/0x80 [ 236.526650][T13581] kmem_cache_free+0x18f/0x400 [ 236.531397][T13581] xfrm_state_gc_task+0x52d/0x6b0 [ 236.536402][T13581] process_scheduled_works+0xae1/0x17b0 [ 236.541930][T13581] worker_thread+0x8a0/0xda0 [ 236.546498][T13581] kthread+0x70e/0x8a0 [ 236.550548][T13581] ret_from_fork+0x3f9/0x770 [ 236.555115][T13581] ret_from_fork_asm+0x1a/0x30 [ 236.559863][T13581] [ 236.562167][T13581] The buggy address belongs to the object at ffff888024e1c440 [ 236.562167][T13581] which belongs to the cache xfrm_state of size 928 [ 236.576114][T13581] The buggy address is located 816 bytes inside of [ 236.576114][T13581] freed 928-byte region [ffff888024e1c440, ffff888024e1c7e0) [ 236.589890][T13581] [ 236.592195][T13581] The buggy address belongs to the physical page: [ 236.598599][T13581] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888024e1ddc0 pfn:0x24e1c [ 236.608647][T13581] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 236.617127][T13581] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 236.625617][T13581] page_type: f5(slab) [ 236.629583][T13581] raw: 00fff00000000240 ffff88801afd4140 ffff8880226d8708 ffffea0001bfdc10 [ 236.638146][T13581] raw: ffff888024e1ddc0 00000000000f0002 00000000f5000000 0000000000000000 [ 236.646708][T13581] head: 00fff00000000240 ffff88801afd4140 ffff8880226d8708 ffffea0001bfdc10 [ 236.655358][T13581] head: ffff888024e1ddc0 00000000000f0002 00000000f5000000 0000000000000000 [ 236.664008][T13581] head: 00fff00000000002 ffffea0000938701 00000000ffffffff 00000000ffffffff [ 236.672663][T13581] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 236.681309][T13581] page dumped because: kasan: bad access detected [ 236.687709][T13581] page_owner tracks the page as allocated [ 236.693402][T13581] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6419, tgid 6416 (syz.0.125), ts 87751155729, free_ts 87738621141 [ 236.712393][T13581] post_alloc_hook+0x240/0x2a0 [ 236.717149][T13581] get_page_from_freelist+0x21e4/0x22c0 [ 236.722675][T13581] __alloc_frozen_pages_noprof+0x181/0x370 [ 236.728458][T13581] alloc_pages_mpol+0x232/0x4a0 [ 236.733293][T13581] allocate_slab+0x8a/0x370 [ 236.737776][T13581] ___slab_alloc+0xbeb/0x1410 [ 236.742436][T13581] kmem_cache_alloc_noprof+0x283/0x3c0 [ 236.747880][T13581] xfrm_state_alloc+0x24/0x2f0 [ 236.752629][T13581] xfrm_state_find+0x37d4/0x5400 [ 236.757546][T13581] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 236.763687][T13581] xfrm_lookup_with_ifid+0x2a7/0x1a70 [ 236.769038][T13581] xfrm_lookup_route+0x3c/0x1c0 [ 236.773881][T13581] rawv6_sendmsg+0xdab/0x1820 [ 236.778543][T13581] __sock_sendmsg+0x19c/0x270 [ 236.783203][T13581] ____sys_sendmsg+0x52d/0x830 [ 236.787947][T13581] ___sys_sendmsg+0x21f/0x2a0 [ 236.792602][T13581] page last free pid 6419 tgid 6416 stack trace: [ 236.798903][T13581] __free_frozen_pages+0xbc4/0xd30 [ 236.804003][T13581] stack_depot_save_flags+0x436/0x860 [ 236.809371][T13581] kasan_save_track+0x4f/0x80 [ 236.814030][T13581] __kasan_slab_alloc+0x6c/0x80 [ 236.818865][T13581] kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 236.824748][T13581] __alloc_skb+0x112/0x2d0 [ 236.829149][T13581] pfkey_send_acquire+0x606/0x2cb0 [ 236.834246][T13581] km_query+0x119/0x210 [ 236.838381][T13581] xfrm_state_find+0x3bca/0x5400 [ 236.843296][T13581] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 236.849430][T13581] xfrm_lookup_with_ifid+0x2a7/0x1a70 [ 236.854783][T13581] xfrm_lookup_route+0x3c/0x1c0 [ 236.859639][T13581] rawv6_sendmsg+0xdab/0x1820 [ 236.864302][T13581] __sock_sendmsg+0x19c/0x270 [ 236.868960][T13581] ____sys_sendmsg+0x52d/0x830 [ 236.873703][T13581] ___sys_sendmsg+0x21f/0x2a0 [ 236.878360][T13581] [ 236.880665][T13581] Memory state around the buggy address: [ 236.886293][T13581] ffff888024e1c600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 236.894331][T13581] ffff888024e1c680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 236.902372][T13581] >ffff888024e1c700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 236.910410][T13581] ^ [ 236.918104][T13581] ffff888024e1c780: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 236.926153][T13581] ffff888024e1c800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 236.934189][T13581] ================================================================== [ 236.989760][T13581] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 236.996999][T13581] CPU: 0 UID: 0 PID: 13581 Comm: syz.1.2106 Not tainted syzkaller #0 PREEMPT(full) [ 237.006356][T13581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 237.016396][T13581] Call Trace: [ 237.019659][T13581] [ 237.022575][T13581] dump_stack_lvl+0x99/0x250 [ 237.027152][T13581] ? __asan_memcpy+0x40/0x70 [ 237.031726][T13581] ? __pfx_dump_stack_lvl+0x10/0x10 [ 237.036907][T13581] ? __pfx__printk+0x10/0x10 [ 237.041486][T13581] vpanic+0x281/0x750 [ 237.045452][T13581] ? preempt_schedule+0xae/0xc0 [ 237.050290][T13581] ? __pfx_vpanic+0x10/0x10 [ 237.054774][T13581] ? preempt_schedule_common+0x83/0xd0 [ 237.060218][T13581] ? preempt_schedule+0xae/0xc0 [ 237.065055][T13581] ? __pfx_preempt_schedule+0x10/0x10 [ 237.070414][T13581] panic+0xb9/0xc0 [ 237.074118][T13581] ? __pfx_panic+0x10/0x10 [ 237.078518][T13581] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 237.084399][T13581] ? xfrm_state_find+0x2cf2/0x5400 [ 237.089490][T13581] check_panic_on_warn+0x89/0xb0 [ 237.094414][T13581] ? xfrm_state_find+0x2cf2/0x5400 [ 237.099505][T13581] end_report+0x78/0x160 [ 237.103733][T13581] kasan_report+0x129/0x150 [ 237.108223][T13581] ? xfrm_state_find+0x2cf2/0x5400 [ 237.113317][T13581] xfrm_state_find+0x2cf2/0x5400 [ 237.118239][T13581] ? __pfx___find_rr_leaf+0x10/0x10 [ 237.123426][T13581] ? xfrm_state_find+0x1da/0x5400 [ 237.128434][T13581] ? __pfx_xfrm_state_find+0x10/0x10 [ 237.133701][T13581] ? __rt6_find_exception_rcu+0x127/0x4c0 [ 237.139408][T13581] ? __pfx___rt6_find_exception_rcu+0x10/0x10 [ 237.145473][T13581] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 237.151621][T13581] ? ip6_pol_route+0x162/0x1180 [ 237.156459][T13581] ? __pfx_ip6_pol_route+0x10/0x10 [ 237.161555][T13581] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 237.168128][T13581] ? __lock_acquire+0xab9/0xd20 [ 237.172979][T13581] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 237.178343][T13581] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 237.183709][T13581] ? xfrm_expand_policies+0x41f/0x6a0 [ 237.189081][T13581] xfrm_lookup_with_ifid+0x2a7/0x1a70 [ 237.194442][T13581] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 237.200072][T13581] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 237.205869][T13581] ? txopt_get+0x335/0x3f0 [ 237.210278][T13581] ? aa_label_sk_perm+0x4cd/0x630 [ 237.215292][T13581] ? __pfx_txopt_get+0x10/0x10 [ 237.220047][T13581] xfrm_lookup_route+0x3c/0x1c0 [ 237.224886][T13581] rawv6_sendmsg+0xdab/0x1820 [ 237.229556][T13581] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 237.234655][T13581] ? finish_task_switch+0x266/0x950 [ 237.239863][T13581] ? __pfx_aa_sk_perm+0x10/0x10 [ 237.244703][T13581] ? sock_rps_record_flow+0x19/0x410 [ 237.250015][T13581] ? inet_sendmsg+0x2f4/0x370 [ 237.254693][T13581] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 237.259976][T13581] __sock_sendmsg+0x19c/0x270 [ 237.264648][T13581] ____sys_sendmsg+0x52d/0x830 [ 237.269403][T13581] ? __pfx_____sys_sendmsg+0x10/0x10 [ 237.274687][T13581] ? import_iovec+0x74/0xa0 [ 237.279183][T13581] ___sys_sendmsg+0x21f/0x2a0 [ 237.283845][T13581] ? __pfx____sys_sendmsg+0x10/0x10 [ 237.289062][T13581] ? __fget_files+0x2a/0x420 [ 237.293640][T13581] ? __fget_files+0x3a0/0x420 [ 237.298314][T13581] __sys_sendmmsg+0x227/0x430 [ 237.302977][T13581] ? __pfx___sys_sendmmsg+0x10/0x10 [ 237.308156][T13581] ? do_futex+0x333/0x420 [ 237.312473][T13581] ? fput+0xa0/0xd0 [ 237.316268][T13581] ? __pfx___se_sys_futex+0x10/0x10 [ 237.321451][T13581] ? rcu_is_watching+0x15/0xb0 [ 237.326195][T13581] __x64_sys_sendmmsg+0xa0/0xc0 [ 237.331027][T13581] do_syscall_64+0xfa/0x3b0 [ 237.335510][T13581] ? lockdep_hardirqs_on+0x9c/0x150 [ 237.340699][T13581] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.346749][T13581] ? clear_bhb_loop+0x60/0xb0 [ 237.351412][T13581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.357287][T13581] RIP: 0033:0x7f5580f8ebe9 [ 237.361688][T13581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.381280][T13581] RSP: 002b:00007f5581d48038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 237.389681][T13581] RAX: ffffffffffffffda RBX: 00007f55811c5fa0 RCX: 00007f5580f8ebe9 [ 237.397644][T13581] RDX: 00000000000002e9 RSI: 0000200000000480 RDI: 0000000000000008 [ 237.405601][T13581] RBP: 00007f5581011e19 R08: 0000000000000000 R09: 0000000000000000 [ 237.413556][T13581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 237.421505][T13581] R13: 00007f55811c6038 R14: 00007f55811c5fa0 R15: 00007ffce6da5c18 [ 237.429478][T13581] [ 237.432747][T13581] Kernel Offset: disabled [ 237.437055][T13581] Rebooting in 86400 seconds..