last executing test programs: 1m7.42493368s ago: executing program 3 (id=1455): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c00010c000000000000000007000000", @ANYRES32, @ANYBLOB="8000a2000a000200aaaaaaaaaabb000008000f"], 0x30}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv4_getaddr={0x50, 0x16, 0x8, 0x70bd2b, 0x25dfdbff, {0x2, 0x1, 0x3, 0xfe}, [@IFA_LABEL={0x14, 0x3, 'ip_vti0\x00'}, @IFA_LABEL={0x14, 0x3, 'tunl0\x00'}, @IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}]}, 0x50}}, 0x4004091) 1m7.262178434s ago: executing program 3 (id=1458): r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, &(0x7f00000003c0)="872561c0a0f828653065c9578e00d0b8e2d0cdbfc863a3f1431174eed5e26ca119dd51e996939397788ffe5230d5f6ff81a8fd55f0dba3a76c7d61488fe781c64ba7c9d8282e94c4bc32b3820873a72e43970a3abd1061a73a5f490168172a82c5cbbc61876a4185185e1a141da3a12a48822521fc69942c5588a1550da177b3c2623dc3112833b681aaeee340bb576ffc713294e036071d", 0x98, 0x44, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x5, &(0x7f00000001c0)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4a}, [@ldst={0x4}, @call={0x85, 0x0, 0x0, 0x6}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendto(r1, &(0x7f0000000100)="25618e043d45dc5df01498f30465f2621426b46e26f2a1cdb6e941f089fb6d7d1373ca00903e5cc7d40ec3e69552b7360547c37c810524a07779affa2a41", 0x3e, 0x40080, &(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x4, @rand_addr=' \x01\x00', 0x0, 0x1}, 0x80) 53.095934381s ago: executing program 3 (id=1458): r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, &(0x7f00000003c0)="872561c0a0f828653065c9578e00d0b8e2d0cdbfc863a3f1431174eed5e26ca119dd51e996939397788ffe5230d5f6ff81a8fd55f0dba3a76c7d61488fe781c64ba7c9d8282e94c4bc32b3820873a72e43970a3abd1061a73a5f490168172a82c5cbbc61876a4185185e1a141da3a12a48822521fc69942c5588a1550da177b3c2623dc3112833b681aaeee340bb576ffc713294e036071d", 0x98, 0x44, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x5, &(0x7f00000001c0)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4a}, [@ldst={0x4}, @call={0x85, 0x0, 0x0, 0x6}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendto(r1, &(0x7f0000000100)="25618e043d45dc5df01498f30465f2621426b46e26f2a1cdb6e941f089fb6d7d1373ca00903e5cc7d40ec3e69552b7360547c37c810524a07779affa2a41", 0x3e, 0x40080, &(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x4, @rand_addr=' \x01\x00', 0x0, 0x1}, 0x80) 34.555537747s ago: executing program 3 (id=1458): r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, &(0x7f00000003c0)="872561c0a0f828653065c9578e00d0b8e2d0cdbfc863a3f1431174eed5e26ca119dd51e996939397788ffe5230d5f6ff81a8fd55f0dba3a76c7d61488fe781c64ba7c9d8282e94c4bc32b3820873a72e43970a3abd1061a73a5f490168172a82c5cbbc61876a4185185e1a141da3a12a48822521fc69942c5588a1550da177b3c2623dc3112833b681aaeee340bb576ffc713294e036071d", 0x98, 0x44, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x5, &(0x7f00000001c0)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4a}, [@ldst={0x4}, @call={0x85, 0x0, 0x0, 0x6}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendto(r1, &(0x7f0000000100)="25618e043d45dc5df01498f30465f2621426b46e26f2a1cdb6e941f089fb6d7d1373ca00903e5cc7d40ec3e69552b7360547c37c810524a07779affa2a41", 0x3e, 0x40080, &(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x4, @rand_addr=' \x01\x00', 0x0, 0x1}, 0x80) 18.024905423s ago: executing program 3 (id=1458): r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, &(0x7f00000003c0)="872561c0a0f828653065c9578e00d0b8e2d0cdbfc863a3f1431174eed5e26ca119dd51e996939397788ffe5230d5f6ff81a8fd55f0dba3a76c7d61488fe781c64ba7c9d8282e94c4bc32b3820873a72e43970a3abd1061a73a5f490168172a82c5cbbc61876a4185185e1a141da3a12a48822521fc69942c5588a1550da177b3c2623dc3112833b681aaeee340bb576ffc713294e036071d", 0x98, 0x44, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x5, &(0x7f00000001c0)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4a}, [@ldst={0x4}, @call={0x85, 0x0, 0x0, 0x6}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendto(r1, &(0x7f0000000100)="25618e043d45dc5df01498f30465f2621426b46e26f2a1cdb6e941f089fb6d7d1373ca00903e5cc7d40ec3e69552b7360547c37c810524a07779affa2a41", 0x3e, 0x40080, &(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x4, @rand_addr=' \x01\x00', 0x0, 0x1}, 0x80) 4.081938576s ago: executing program 3 (id=1458): r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, &(0x7f00000003c0)="872561c0a0f828653065c9578e00d0b8e2d0cdbfc863a3f1431174eed5e26ca119dd51e996939397788ffe5230d5f6ff81a8fd55f0dba3a76c7d61488fe781c64ba7c9d8282e94c4bc32b3820873a72e43970a3abd1061a73a5f490168172a82c5cbbc61876a4185185e1a141da3a12a48822521fc69942c5588a1550da177b3c2623dc3112833b681aaeee340bb576ffc713294e036071d", 0x98, 0x44, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x5, &(0x7f00000001c0)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4a}, [@ldst={0x4}, @call={0x85, 0x0, 0x0, 0x6}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendto(r1, &(0x7f0000000100)="25618e043d45dc5df01498f30465f2621426b46e26f2a1cdb6e941f089fb6d7d1373ca00903e5cc7d40ec3e69552b7360547c37c810524a07779affa2a41", 0x3e, 0x40080, &(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x4, @rand_addr=' \x01\x00', 0x0, 0x1}, 0x80) 2.965430105s ago: executing program 1 (id=2000): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], 0x0, 0x26, &(0x7f0000000140)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x3c, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007910a800000000005500ffff000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.700666972s ago: executing program 4 (id=2003): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x44}}, 0x0) r3 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x34, 0xfffffffe}, 0x9c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x547b31180522e14c}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast}, 0x0, @in6=@private1}}, 0xe4) connect$inet6(r3, &(0x7f00000000c0), 0x1c) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=@gettaction={0x100, 0x32, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x48, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_gd=@TCA_ACT_TAB={0x24, 0x1, [{0x14, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4c76}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x58, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1ff}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x5}]}, 0x100}}, 0x4004004) 2.438546775s ago: executing program 4 (id=2005): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, 0x0, 0x0) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@broadcast}}, {{@in=@multicast1}, 0x0, @in6=@private0}}, &(0x7f0000000040)=0xe8) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaa8aaaaaaaa48440a1ec26a08004500001c000008000001907864010100e00000010d00907800000000"], 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'wg2\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="0b041400e0ffe2ff02004788001ca13bb100000208007f604803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r3, &(0x7f0000000340)={0x1f, 0x1, 0x3}, 0x6) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000009a000000040000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan3\x00'}) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000ac0)={'wpan1\x00'}) 2.277380607s ago: executing program 2 (id=2006): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x810) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpu.stat\x00', 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpu.stat\x00', 0x0, 0x0) close(r1) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) r3 = socket(0xa, 0x3, 0x800) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r2) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x29, 0x0, 0xf7, 0x80000000, 0x4c, @private1, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x20, 0x7, 0x8000, 0x5}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x29, 0x0, 0xf7, 0x80000000, 0x4c, @private1, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x20, 0x7, 0x8000, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x2f, 0x7, 0x9, 0x6, 0x20, @ipv4={'\x00', '\xff\xff', @local}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x40, 0x8000, 0x6, 0x3}}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x5c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xc}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x10002}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004090}, 0x4025) sendmsg$nl_route_sched(r3, &(0x7f00000018c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001880)={&(0x7f0000000580)=@newchain={0x12c8, 0x64, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xc, 0x10}, {0x1, 0x8}, {0x0, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x69a}, @filter_kind_options=@f_matchall={{0xd}, {0x1284, 0x2, [@TCA_MATCHALL_ACT={0x1278, 0x2, [@m_pedit={0x138, 0x1a, 0x0, 0x0, {{0xa}, {0xbc, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0xb8, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}]}]}, {0x51, 0x6, "67ebd56c1f9010d76051d220754bddbc8d3bbeb5ca152fc18ccd65c8530f0e5f8c6091ec43ff6f895d8c63b7abb3c5fffb0da5445342283ac72c398c5e03ba30b9abe8918998b20025e91254b4"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x5}}}}, @m_ct={0x104c, 0x8, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e20}, @TCA_CT_ZONE={0x6, 0x4, 0xae}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e20}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @rand_addr=0x64010100}]}, {0x1004, 0x6, "6954a7d10c461a9e8b91b0a8bf793bfc80eacd2faa0388314bb6514fcd8e05052c245f451248900ccfdf0bb7d653b1e16233fa2db3ae8ccb84c338055e4f9f2a8237bd8e65f728afb89126f9e86c840414e33dd263fb899f7dba36d19e9e6f494ac964dc6af6871b9d33250caaa93585ac690b37b6497dbd25e3e547706c168b1b2a63240256ce445df30355d2cb8e3d669924048d5e304281962b012c0b3ec8696ee0ef9a01adadb858d60c2badfa906c0c0b4401c86be529fb4e49f81a4758d1aef78ee7e0dfbbef475ede08a06c6c785d40268c9c57d21d04bcf2a52b67baa8a57dc1857d9ecba0fcca919c1c754c1adde7c9c7c6ccc4dcc4e25a8456ff79038b107675b9fd96b9d098664c70e15204a6abc326b4928df1173a5f76dd5cdb14515cbfdd1fb039c6097a65f26c79f346bcdc8e9e6c127859bcba61df9e96e7fe7d9fe296ae19a1ff55d086889091dee3e45d805159239ee81363b1820ab8301c0894e60809416bd33a09eb805854749273bea2d8f227bb416b50fbad2397f06c3fb27b4a69b1be56d0bae3305b0cd978cf8508caf41f2dbfbe2dc6dc38ccb042b40110daf97ec05358f67dd44c8189a525fb1cad4fcbc3dc7ae5a471f300099ecb986bd6ed0c6b55b358daadafc6fa1ed0a905332c3422e3290f8a1795ff6f26a917eb0e1d26f0841d2aa605fadf7a77ef507dbbeb0326a9c32d3eb1d37405a3d53a818cbe8ac5ba6b9280b3e21988b53154d465431eb6b7dcddd079d9a93136c5bbf8689ff7350f552310721869e27ce94f34e54c83db57834d57d065f590c9162f27c9b3f6a7a00a949f4ab3a37cbbb4a0f0171bd9e1bb7f877f554c49fb328ab66ac66cf8af2f99bc232abe06381aea373fea913a8d222489d77a865e8099f2b9d1ea69fef79b4c22274f5f05f924676d662ad63535828ed61833d0858f11365eebfff3a3d8bfe6b71533613de1947f86640b6398fb7a892a951c4496cc5309016512356b69f701868f4ea779ad73a9034fb554ab324f3afac847c33be22581f4ac5b02719115e67fe156a6d366094baea44a3e5fa786af1f56b243c248e858deea7e6998bb7f7fcf58ecab64e011af193c4af8a4b3c108b58a9bfb3aeb37adbf3cb545fe0dfe16bbe670e645218e76eb4794c0721539cc48c83bd9d21287f9abd5b1841824d72215e97345b10f6db0dff7ee9577d26b826519f5492ca708cb2b15a915b193b254e5d4f0369f4ea1de4ddc1f59fae9c76af8320086991b8a77a9155e9aca00979c8a7c44f379a43c7680573dfde157b356ae01c5e5460377c44a03144378348a52145ea8c5ae69736eb6af4423918ceb22973a1feb915ae928668f6e4dcf6c358474abee70b9293f11abda583af1acd448fd34b2e598e6ed25254eb866120103091d2b24539db3b1aa8abfa07a2f305042ad5c192357151a0a5b889ec8ffb2007d2cf4a333cc676ee4748c3a492c75366424414cedb403acaa1bf0295763f96619e2623a61f658bbe1b2f369e967e1370da1d37b70556ccba662fa64bab0f63263724dc31b544a02d77666c0b5abc1e70461c6bde74a55e4a8326cb6795b323dfe0219fb0fd2e1d85da09058c7cb68708f245fad9967d5135dd7b67c168e0a3fea7a6b4b6a681504d9ab8f62e2762184e4f35ae1398442ba6c9e490b33a4816248f5f8b4686201b817b4621eee2533b411d26aabf2c0e1f329d97d1c3cd2c125a846c1f82624ac4421685020a8daf190bf5bef314cf0521bf9e2964356318cf9f66f4c94b7debc4e5a8c4f24ed9b948fd92251fbaae2aeea0f9589b34453ee170758e1be5704eb95a16f67eb37c4793c2b13493839ff1f716f4a87c1a6b32377bdf372e8c69a28adb0f9d044d589b23361e22a2676431bd9b08d0df6da7a7dc8b6eef87a4ed65fb7794aac39c46237a652b9249085633ca2e1c2f5cf58712a41b75d4d7121c85c04fee47d645a2c1d3af3899d1536fa098f989a55d656d5c97f2b759446f2bbf64cffa56b76ee2cc8d687b3b6451e7df00fafae5d147a064e449acd669f9349f2f39a648cdf83061004c862eb41e10f6bcde32c5e77d082d7889ae5c3a04a4162c04106f8d71626992b1eda46479241ae23ee36c6ebeba9728d1b3ca0e2aaf02dc89c51209324aee5e3a7f83532dabb5680985ea1939d2226e7a438cb16aa13561da0bfdaad45d03e11ae4178cd50b2ee14fb31ddb4baa3f9fdb1d601b9f1633f311c49a2c1b352876c74f1a65780ac884ed2feb23656d68dbc518c077dc329f5c664702e88260bcabf7613081bd164f06a1201e975387762b4d3465c585cedd121176dfc3ffccea78f65f8aa3a262474071fee0ed4c75493371d56c4ff0c8eb5eb418b033e3d380cd620fff1049c5e869caefa0a2627e45e2c48d476d199687fc886166f13bf3bed53a5608b4eeae92d9b26061a053bb5440f06e15dfa14c3e8c96d7485264238f266acfa935c082055bf97f7820f65216584a68926b0b0a84688ce7e98a8610c2d5681751ed967edab9a66e55c5438a6112dd89fad9e95dc746e35fa7d8fb8d1d637ba0fe3bed68c0780f61edb168006f6e7576f3a9ef1fcf70f7c4b52868fab34b959a0074ea9447e3914b38cf9f2404c7edbc0855e363dfbe2da22239fd2eb6666dea288b1607113055ced2372db1422d21857d16020bdf992d979ed2039b2b38ec81c7f96587c5e416b9e2fa2f220456482d7e070d54ed12501ef32e35e7a88f519477c3a43276866784f82deb9ba01c3c4187940dbfb1600e75b33ce885e8ab1e56d64fc35d60b608b7be6c784e97da5b0f2d2ac1646ed2c7fa36a753258f03798a4f694f41e528064c34bdcfb0cb71edc41408618ff6c5464036e703b2ef7ed385dce442ea0b7f6372c9212aeaf50c824e815b22259e145fef3c4df5a49aad990c4e18fae01aa589b93724d128f59701d7daf2dff384c4886eef5f23d1a3214c19eb7ccdf9f1fe54543363d2f01394ff6f983b23ed70c1a8a3547b1a7d723f47610f360198cbd93407bb5c0c1f8d30b9ea9b932c4b78fb4c5369b68431a26d014902421120fd2f4c3b72ea7c333af6564cad571f997ae7b8a0d5fe2f5798cb956292f601d5d9ca423b32689baeb36da8120c5406339eeccd6a7d7a8e9847a78d6cd344ba4cc652801d0d16c46eb135df742c5c1ea07f723cd87bbe2962b79e29d5a2df9d18b4e0d1a8e7832c9c68f0d8d5ca40223aa09940c6802881508e2d81dce46dce59f9b1a4f6e2995559a5a40c2af2e68acad693e0ca63f514e9c02f628af37ff9b50f4074c18f900959f58b1bbeebef65296ca17cd20bab48504f6056bb0dab84d54f8e34009fe5b13a39ed99ee74f67742528ee64ddeb974a5d57bbc414d3eaa0ea717300e68a7f58b905fc9324af883d8efbf38ebd0b6d9198308d1a81678fbecc3785d3a14c1b6f39017d404e2e161d091e4e40153dbe53f8ed09056c187eb578d1c22e1707522242f8687adc87659d184077c64752f9752152157d09d225b2773f4abafa1ab3bd0b5693d0a72d55099e5e3ea2eff10b1ef979db7976d91d3e484862c1fd2aad03db90fcba7dcb0247a2b04ffd4d72d7ac52bba9550a96e82a8c1082e38e46bb4317cba7f0970e21d7fb9f8375823db2f3df4b40ad27ab643eb80df4b9f26dc33bcb41b3e8fb5b4d46887c74abb68e2b5885d6f056b182b314a5172fdb18fdb5c13d22d346ab37f2b7baa95ce7af7a398a0b90d6366d2c7d082c1b5f1af6f09a479b257ba4d9c6f54481306f66c5c6e4c9039395c075b35d89e7e69687000a1dfdeb094e0bcaaf67c80b14be74c9948a35a24ec31bf71b0eb63cef639176536cc08c47e302891e5755c2935bf875c9af2a46366e796d3da1f25bab80f27b0814f1482cf1bf363c97dd412c048055625ecee3db6b23f5c93f64db9222f6d196b53ecd5fdea54ee7d2b5edc4d37021e020278f95e625eadee860e446d30223d62cc2e32c3cc91a4afa211959e729ba362f40be90a17425e3b3ed3c23a15447ee839e063d428373e9956b35dbdb7c75d504efb4aedf0e16f42dd89495970324e957f2e893644dfab4a55d1d392397dda112bea41640a18c871c9253d4f8cb1044cfd3e44b538665d5d92a726a28055a483e374a914e2bdbd9614639897c885fc55c8421b44e837f6b06f354ffb3b641b59022f3f074ffe582fdbcc0ef55c87224a82dd47bedab6b5f8f34de2b54417d0e9dc918480cf8d574bf41c735944282f522682f42ca9328f67a2fed4f393efee99aad22d6477226c6fb6314c700a6cd71d297d0611cb9520be649822ad238348feaad2cd6654abecd9d4b86aff2eb777403621ff70fc3ac507c00a05b0d1b551d4b4e15f9a9469c40fd72606313e1446ef43b97516049a17aed514c7bc69045520c7d18e2b6b95c9027deb4989dd9a723d8df80b0685dd9193ccf88e392e475fb96a9ad91e86ee3e2df316ea01cb2dd99e52a894b07d7b0ae5f1731d74a7b08c338af1e25f97a31c913913867241a731e830979fd7a4987281feac2ae3533168b1ee25a120a00063280ac0a83daccb3f776ce44c7371f36d83ab7651dd60442acaeb3beabb25ad7e868bb4f3d464b31175538ef94ece6bfcbb84072369c590867be25fbc5023f478580611683d63a491ce685b770e211228e8e0678d33bc93a57a674e6937d14d560c12339e6bb498ba04f77f510d9ee6915235fdfe1a868b4269e49998e717d004d42d8ac214e88246a0f947a06b8df82331d3e9f65e36944a23cd71602755513e1dec8e46f729727fb91dadcf68805a12f4514a28709bfb9c84a687466d6533cc17920165ce5b6baa2be79d6ea5b03b9de04f88a56cad7e90dd9a4ba2bc02cbb639b9b3bd32b916a8b613fec61a86c63c735496d13e399f0770e38b7580c903db401b37f59b1591c6e7d0675be6005b4ab909de62e1bb76ec6b51ae58568c3a7526b8e8c5ee8e749127f93ff11311730b012db267843a0936f4ea0ca3dbfc7bf2011f2caeebffc1f65ebe0da4a4981ab4e78d461ca3a18efda3eda762b6fc794204a4ff5cd9caeeee2857aefd33fe8736494a04e8d273857296a68bf0108af622957ea9473232a5ed78fce8b632299737a7d3028e65f4c72be17316bc179dfa57e9632069f0cb1db163a0c3933bcc761f92a61f2b7a7a62711a9bdb1414147d33e7acbc495728133bc2a6a60842982a3b9c2197b23783ad306f0d3737f30f744b651655b9e370e45dd4870f51a7562a7a8b5e817016471e477097a22a31b05fc8ba6e9e20aec8bbcc8578ee920b5e5a97a838a96123d2755b2182b975e2d44e893ddff3e02e0f85153f03e66ec5d1972066a9c65d7daf1aa82c19eb9f88b63e144424b424a92b6bf1779c89e448646f0de0bd4a0ff21d5883d4746f3e54a4fb32bfa83583b96ee0f65a983a2ad4ba5a0cfd8af6cccd2de5a9c964325a22e17d0dc20e4de94d85950ad625afcabe7c77b1b69c92131cc2c911dfc8b948da3691ef3dc93b4fe20a9695944cea14dd39b6d34850f0642694708818b20a0b6479128231d6347ae00334777889ecd8b30ab5cf79d59ad6dfd27a8d106c4f8d1012ad0e5916f3bc9ac9ca4e29b6bda2b5fb32a62f5f0cb3f087cb182b55f736b7088438571995789998b6c7551e570aaa9bc3442a04870eccaa6530730ccf5bf73f2a7239a9ae67bc9f8c9132cee15f262e622ec8b675508dac9062af7aa6a2718187c0da2a5709169447c0cc2adff6165ef2a178eaf5e25e3822ecd503020aad5c4faf1918b2e52"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_connmark={0xf0, 0x5, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x7f, 0x0, 0x8, 0x3}, 0x6}}]}, {0xa2, 0x6, "baf6bdc46cf16fe6585cb1df489fd63a93d4b4e232ccd1975bfe38a091271a6a75a44e16b9559a161f5bbc14072c530b0532c194fb90d7f0e392eb8eee922f33d2826ee76351fe2fc09d15320327b2f17cfbaf0e65dde36dfd627e7191501f4216ab693d15be5fb69cffb9e79f6e45eaa69d7352e7068d1720a74e9bedc5df89bfc131f6b9a7d4024dbb8586e4501b67627ad10070b94bb0a04b855b3951"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x3}}]}, 0x12c8}, 0x1, 0x0, 0x0, 0x4040}, 0x4008805) r7 = accept4$x25(r3, 0x0, &(0x7f0000001900), 0x800) r8 = accept4$x25(r7, &(0x7f0000001940), &(0x7f0000001980)=0x12, 0x100000) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000019c0)={0x0, 0x295c, 0x7, 0xd}, &(0x7f0000001a00)=0x10) (async) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000019c0)={0x0, 0x295c, 0x7, 0xd}, &(0x7f0000001a00)=0x10) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) listen(r9, 0x4) (async) listen(r9, 0x4) ioctl$SIOCX25SFACILITIES(r8, 0x89e3, &(0x7f0000001a40)={0x78, 0x2, 0x8, 0x5, 0x4, 0x81}) ioctl$sock_inet_SIOCSIFPFLAGS(r9, 0x8934, &(0x7f0000001a80)={'erspan0\x00', 0x8}) (async) ioctl$sock_inet_SIOCSIFPFLAGS(r9, 0x8934, &(0x7f0000001a80)={'erspan0\x00', 0x8}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001b80)={'ip6_vti0\x00', &(0x7f0000001b00)={'ip6_vti0\x00', r5, 0x2f, 0xaf, 0x9, 0x0, 0x79, @ipv4={'\x00', '\xff\xff', @multicast1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1, 0x8000, 0x4, 0x10001}}) sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f0000001e40)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001e00)={&(0x7f0000001bc0)={0x238, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}]}, 0x238}, 0x1, 0x0, 0x0, 0x20000840}, 0x4804) (async) sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f0000001e40)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001e00)={&(0x7f0000001bc0)={0x238, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}]}, 0x238}, 0x1, 0x0, 0x0, 0x20000840}, 0x4804) getsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000001e80), 0x2) r11 = socket$kcm(0x29, 0x2, 0x0) getsockopt(r11, 0x8, 0x0, &(0x7f0000001ec0)=""/4096, &(0x7f0000002ec0)=0x1000) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r12, &(0x7f0000003000)={&(0x7f0000002f00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002fc0)={&(0x7f0000002f40)={0x70, 0x0, 0xb4a60cb757ff2a89, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVICE={0x2c, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x1}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x7}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x70}, 0x1, 0x0, 0x0, 0x8050}, 0x4040001) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8983, &(0x7f0000003040)={0x1, 'gre0\x00', {}, 0x101}) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f00000034c0)={&(0x7f0000003080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003480)={&(0x7f0000003100)={0x364, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PEERS={0x340, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @local}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "532aaf21b02900f62b6f85a1a8329b250babed1e389bd9accadb1a59b874978f"}]}, {0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @broadcast}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7ff}]}, {0x6c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x401, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @local}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @remote}}]}, {0x110, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0ae7585315c37996b3f7bc638e2a246d02d96915efc76f3a958a3bed56b07b37"}, @WGPEER_A_ALLOWEDIPS={0xe8, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}]}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1c6e684a6c10fae14c7d1b001d098361fb2d9366a11e2f1d9e02c7ad978acb18"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}]}, 0x364}, 0x1, 0x0, 0x0, 0x80}, 0x180) (async) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f00000034c0)={&(0x7f0000003080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003480)={&(0x7f0000003100)={0x364, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PEERS={0x340, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @local}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "532aaf21b02900f62b6f85a1a8329b250babed1e389bd9accadb1a59b874978f"}]}, {0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @broadcast}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7ff}]}, {0x6c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x401, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @local}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @remote}}]}, {0x110, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0ae7585315c37996b3f7bc638e2a246d02d96915efc76f3a958a3bed56b07b37"}, @WGPEER_A_ALLOWEDIPS={0xe8, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}]}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1c6e684a6c10fae14c7d1b001d098361fb2d9366a11e2f1d9e02c7ad978acb18"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}]}, 0x364}, 0x1, 0x0, 0x0, 0x80}, 0x180) 2.256752639s ago: executing program 4 (id=2007): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x29, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) unshare(0x20040600) (async) unshare(0x20040600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000005580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000005580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000000)={@map=r3, r4, 0x2f, 0x4, 0x4, @void, @value}, 0x20) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100677470001400028008000100", @ANYRES32=r2, @ANYBLOB="04227061", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x48}}, 0x0) close(r2) (async) close(r2) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_USERDATA={0x5, 0x6, 0x1, 0x0, "88"}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe8}}, 0x0) 2.070369052s ago: executing program 2 (id=2009): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0xbe3) write$binfmt_misc(r2, &(0x7f0000000200)={'syz1'}, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x8, '\x00', r1, r2, 0x1, 0x3, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000780)='contention_end\x00', r3}, 0x10) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r4, 0x80047456, 0x2000ff00) 1.991297304s ago: executing program 4 (id=2010): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000700)=0x8f, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000100)=[{0x0, 0x0, 0x0}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890c, &(0x7f0000000000)={0xffffffffffffffff}) r5 = socket(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='veth0_to_team\x00', 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @loopback, 0x3ff}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f0000000440)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @dev, {[@timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0x0, [{@local}, {@loopback}, {@loopback}]}, @cipso={0x86, 0x1e, 0x0, [{0x0, 0x12, "00000000000000963d096612e35232da"}, {0x0, 0x4, "4eb8"}, {0x0, 0x2}]}, @ssrr={0x89, 0x3}]}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.983383314s ago: executing program 1 (id=2011): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x0, 0x0, &(0x7f0000000380)) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x100, 0x10000000, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20000810) (async) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000020000000000000200000008000300", @ANYRES32=r5], 0x28}}, 0x0) (async) setsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000100)=0x4, 0x4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x10}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@ipv4_newrule={0x1c, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1}}, 0x1c}}, 0x0) 1.750121292s ago: executing program 2 (id=2013): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000085000000d000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0}, 0x10) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0200180000226f00000fe67d1d8f6cb40100000018000000"], 0x0, 0x1a, 0x0, 0x2, 0x0, 0x0, @void, @value}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000092900000000000000000001850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x2f}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_IFINDEX={0x8, 0xb, r6}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040a4}, 0x24040045) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'ip6gre0\x00', 0x0, 0x29, 0x1, 0x0, 0x10001, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x8, 0x700, 0x2, 0x3}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000006c0)={'syztnl0\x00', &(0x7f0000000640)={'gretap0\x00', 0x0, 0x1, 0x7, 0x40, 0x2, {{0x16, 0x4, 0x0, 0x3f, 0x58, 0x67, 0x0, 0x9, 0x4, 0x0, @broadcast, @private=0xa010102, {[@timestamp={0x44, 0x14, 0x1b, 0x0, 0xd, [0x4, 0x8, 0x7, 0x5]}, @timestamp_addr={0x44, 0x24, 0x17, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x200}, {@remote, 0x6}, {@multicast1, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x80}]}, @timestamp_prespec={0x44, 0xc, 0x20, 0x3, 0x0, [{@empty, 0x5}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000007c0)={'ip6gre0\x00', &(0x7f0000000740)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0x5, 0x0, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x10, 0x10, 0xd6, 0x6}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000940)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)={0xcc, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x4}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4040010}, 0x10840) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x58}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="9feb010018000000000000001000000010000000020000000000000000000001"], 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x1412, 0x300, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x20, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, r10, 0x1, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$netlink(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="380000002e000100000000000000000008000000", @ANYRES32, @ANYBLOB="0b000080976b64086860300014000180991a54fc28d627d80100000000000000"], 0x38}], 0x1}, 0x0) 1.747997566s ago: executing program 0 (id=2014): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000400a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) 989.700415ms ago: executing program 4 (id=2015): r0 = socket(0x10, 0x803, 0x0) clock_gettime(0x6, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c4400000000000e0feff00850000000f00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000140)={r0}) r1 = socket(0x200000100000011, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="b80000002d000100000008000000000000000000", @ANYRES32, @ANYBLOB="0b000080976b640868603000910001"], 0xb8}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@int={0x4, 0x0, 0x0, 0x1, 0x0, 0x4e, 0x0, 0x6f, 0x1}]}, {0x0, [0x5f, 0x30, 0x30]}}, 0x0, 0x2d, 0x0, 0x3, 0x0, 0x0, @void, @value}, 0x20) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x183442, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000000c0)=0xc4030a4) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f00000002c0)) write$ppp(r4, &(0x7f00000003c0)='\x00!', 0x100000) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="0a40000009000000080000000200000000010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xf, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba000000950000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x0, 0x0, 0x0, 0xf7, 0x2000}, 0x1c) r7 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r7, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="1802010000000000000000000000000018131800", @ANYRES32=r5, @ANYBLOB="000000000000000085000000c00000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2c, 0x3b, 0x107, 0x0, 0x80000, {0x4, 0x7c}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x88G'}, @typed={0x8, 0xa, 0x0, 0x0, @u32=0xfffffffe}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000001400b59500000000000000000a000000", @ANYRES32=r3, @ANYBLOB="14000200fe8000000000000000000000000000aa140006000000000001f0ffff00000000000000001400010000000000000000000000000000000010080009003f0c0000ad9f1816d3fdecbf0de382f84b6fcd384d8aec8aab646f84d73668804d3e70ee9f2146ff45e7e64986be8ce6c78a"], 0x5c}}, 0x0) 918.539362ms ago: executing program 1 (id=2016): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000003c0)=[{&(0x7f00000000c0)="17e4", 0x2}], 0x1, 0x8) r3 = socket$inet(0x2, 0x3, 0x7f) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={r3, 0x7, 0xffffffffffffffc0, 0xffffffffffffff34}) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x3c, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x20, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x5}]}]}, 0x20}}, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r3, 0x0, 0x13, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x8000, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000140)={'veth0\x00', {0x2, 0x0, @private}}) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 875.519781ms ago: executing program 0 (id=2017): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x20, r0, 0xa09, 0x4, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40805}, 0x0) 803.422612ms ago: executing program 2 (id=2018): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="02f3ff09027c0000e4a17c45c8d260c9", 0x10}, {0x0}], 0x2}, 0x0) (async) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000010000000000000300000014000180060001"], 0x28}}, 0x0) 674.556166ms ago: executing program 0 (id=2019): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x7, 0x40, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000380), 0x6f, r1}, 0x38) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000000)={r1, &(0x7f0000000540), 0xffff800016adffff}, 0x20) r2 = socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x84}, 0x1, 0x0, 0x0, 0x20040810}, 0x40000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r3, 0x0, r2, 0x0, 0x8000f25, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x34, r4, 0x1, 0x0, 0x1, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x34}}, 0x40) 552.810226ms ago: executing program 2 (id=2020): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000013c0)={'veth1_macvtap\x00', 0x0}) r2 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r2, 0x0, 0x0, 0x2061, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f00000003c0)={0x87, 0x4, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x0, 0x4, 0x80, 0x2, [0xfff, 0x2]}}, @enc_lim={0x4, 0x1, 0x10}]}, 0x30) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x148, 0x1170, 0x1170, 0x148, 0x1170, 0x260, 0x1398, 0x1398, 0x260, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x21, 0x0, 0x0, 0x48}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@inet=@multiport={{0x50}}, @common=@unspec=@connlabel={{0x28}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, [], [], 'veth1_to_hsr\x00', 'vlan1\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x6c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2e, 0xe, {{{}, {}, @broadcast, @device_b, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4}, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16c1}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x1}]}, 0x6c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000002840)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d616373656300001800028005000900010000000c000100000000000000000008000500", @ANYRES32=r1], 0x50}}, 0x0) 543.913582ms ago: executing program 1 (id=2021): r0 = socket(0x2, 0x3, 0xff) bind$inet(r0, &(0x7f0000000080)={0x2, 0x3, @remote}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@int={0x4, 0x0, 0x0, 0x1, 0x0, 0x4e, 0x0, 0x6f, 0x1}]}, {0x0, [0x5f, 0x30, 0x30]}}, 0x0, 0x2d, 0x0, 0x3, 0x0, 0x0, @void, @value}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='bdi_dirty_ratelimit\x00', r1}, 0x10) r3 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r3, r2, 0x0, 0x1, 0xfffffffffffffffe}, 0x42) sendmmsg$inet(r0, &(0x7f0000007240)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="107f2ee8b90573738464b653", 0xc}, {&(0x7f00000001c0)="dd760343bfe5758d", 0x8}], 0x2}}], 0x1, 0x0) 410.632427ms ago: executing program 0 (id=2022): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname(r0, &(0x7f0000000440)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000140)=0xbb) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x1f, &(0x7f0000000740)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x335f, 0x0, 0x0, 0x41100, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff, @void, @value}, 0x90) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000072013204220000009500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 390.656077ms ago: executing program 0 (id=2023): r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYRESDEC=r1], 0xf0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2a8, 0xffffffff, 0x98, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x210, 0x210, 0x210, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@private, @multicast1, 0x0, 0x0, 'ip6gre0\x00', 'ip6gre0\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@private, @remote, 0x0, 0x0, 'ip6erspan0\x00', 'wlan1\x00'}, 0x0, 0xb0, 0xe0, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) 354.221284ms ago: executing program 1 (id=2024): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x4018}, 0x18) (async) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x4018}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000000c0), &(0x7f0000000180)=r1}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000180)=r1}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x721341, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x721341, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2863151a, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x5, 0x0, @void, @value, @void, @value}, 0x50) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2863151a, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0xc}, {0x0, [0x30, 0x5f, 0x5f, 0x2e, 0x5f, 0x30, 0x61, 0x2e, 0x5f, 0x30]}}, &(0x7f0000000300)=""/250, 0x24, 0xfa, 0x1, 0x82f9, 0x9a1ab64c675fd05e, @value}, 0x28) r4 = socket$netlink(0x10, 0x3, 0xa) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r4) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'ip6gre0\x00', 0x0, 0x4, 0x67, 0x5, 0x6, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x7800, 0x7800, 0x7f, 0x1000}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'ip6gre0\x00', 0x0, 0x4, 0x67, 0x5, 0x6, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x7800, 0x7800, 0x7f, 0x1000}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x29, 0x27, 0x7f, 0x86c, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, 0x1, 0x8, 0x3, 0xfffffff7}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x29, 0x27, 0x7f, 0x86c, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, 0x1, 0x8, 0x3, 0xfffffff7}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000680)={'wg2\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0xe, &(0x7f00000006c0)={@local}, &(0x7f0000000700)=0x14) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0xe, &(0x7f00000006c0)={@local, 0x0}, &(0x7f0000000700)=0x14) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000a40)={&(0x7f00000004c0), 0xc, &(0x7f0000000a00)={&(0x7f0000000740)={0x2b0, 0x0, 0x1bffc0b0d2def22b, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_STRSET_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x9c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xc}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xa}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x108, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_STRSET_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @ETHTOOL_A_STRSET_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x4}, 0x40000080) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r2, 0xffffffffffffffff}, &(0x7f0000000a80), &(0x7f0000000ac0)=r1}, 0x20) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000b40)={r6, r11}, 0xc) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000000b80), 0x4) syz_genetlink_get_family_id$nfc(&(0x7f0000000bc0), 0xffffffffffffffff) socket$nl_rdma(0x10, 0x3, 0x14) (async) socket$nl_rdma(0x10, 0x3, 0x14) r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x28, r12, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000010}, 0x8800) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x28, r12, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000010}, 0x8800) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000d40)={0x0, 0x1, 0x401, 0x8}) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r13, 0x8933, &(0x7f0000000d80)={'wpan3\x00'}) r14 = accept$phonet_pipe(r5, &(0x7f0000000dc0), &(0x7f0000000e00)=0x10) getsockopt$PNPIPE_IFINDEX(r14, 0x113, 0x2, &(0x7f0000000e40), &(0x7f0000000e80)=0x4) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000ec0)={0x0, 0xc4, 0x9, 0x5, 0x4, 0x5, 0x5, 0x6, 0x2, 0x8, 0x7, 0x7, 0x1, 0x3}, 0xe) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, &(0x7f0000000f00)={r6}) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000f40)="8463ecf63903b26e7803e609e84febe07455337f18de62e9f2457c056d985479444b49946b91c8b2e6e169e915af3ed2e4ad069ee3d63023abeaa461b74ccc62bb855b1bceacc452d3e497379cd26eeafbf396f68f5cc85bac35b63a4579803d203453f127de2fbbc9d3f2631f20bc145863713c772842013a3c4feb5ba99e92ae58a9b0ee599452f5bde93539094b40b7028fbfcb052befad8b9d15f6d07539a7ad5bd568e3777176446b52be80958d24bb15bf9d20c2afcf0b9a8fa2e2d1f37c31e7ceb71d1d35d7f900ba9f9bf42b801b1454ce91617d5c147c453fced429fb2ad488acbeda27267e36ba364ae62688", 0xf1) (async) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000f40)="8463ecf63903b26e7803e609e84febe07455337f18de62e9f2457c056d985479444b49946b91c8b2e6e169e915af3ed2e4ad069ee3d63023abeaa461b74ccc62bb855b1bceacc452d3e497379cd26eeafbf396f68f5cc85bac35b63a4579803d203453f127de2fbbc9d3f2631f20bc145863713c772842013a3c4feb5ba99e92ae58a9b0ee599452f5bde93539094b40b7028fbfcb052befad8b9d15f6d07539a7ad5bd568e3777176446b52be80958d24bb15bf9d20c2afcf0b9a8fa2e2d1f37c31e7ceb71d1d35d7f900ba9f9bf42b801b1454ce91617d5c147c453fced429fb2ad488acbeda27267e36ba364ae62688", 0xf1) 290.119132ms ago: executing program 0 (id=2025): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000040)={@dev, 0x0}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000940)=@delchain={0x950, 0x65, 0x100, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x6, 0xfff4}, {0x0, 0xf}, {0xfff1, 0xf}}, [@f_rsvp={{0x9}, {0x24, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0xc, 0xffffffff}, {0x6, 0x2, 0x2}, 0x5c, 0x7f, 0x4}}]}}, @f_rsvp={{0x9}, {0x8f0, 0x2, [@TCA_RSVP_POLICE={0x8c4, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x5, 0x5, 0x8, 0xfffffe01, {0x8, 0x1, 0x5, 0x9, 0x3, 0x202}, {0x6, 0x1, 0xff7b, 0x8000, 0x9, 0x1}, 0x1, 0x7, 0x3}}, @TCA_POLICE_RATE={0x404, 0x2, [0x10001, 0xff, 0x10001, 0x5, 0xffff, 0x200, 0x0, 0xe9, 0x7, 0xfffffff7, 0x1a59, 0x9, 0x0, 0x800, 0xad6, 0x401, 0x4, 0x400, 0x2, 0xf, 0x2, 0x81, 0x80, 0x7, 0x81, 0x1, 0xcd, 0x3, 0x3, 0xa701, 0x0, 0x48, 0x81, 0x9, 0xb, 0x1, 0xffffffff, 0x7, 0x9, 0x6702, 0x6053, 0x6, 0x6b, 0x0, 0x6, 0x7, 0x0, 0x8, 0xffffb3a6, 0x6, 0x6, 0xe0000000, 0x5, 0x9a1a, 0x2, 0x5, 0x6, 0x2, 0x5, 0xffffc451, 0x4252, 0xb913, 0x401, 0xff, 0x9, 0x3, 0xf792, 0x82, 0x3, 0x2, 0x74391f5b, 0x55, 0x2, 0x1, 0xfffffffe, 0x6, 0x9, 0x8cb4fe40, 0xf, 0x0, 0x3, 0x7, 0x4, 0x0, 0x1, 0x0, 0x55c, 0x736, 0x8000, 0x7f, 0x1, 0x2, 0x3, 0xb1, 0xb, 0x2, 0x78d, 0x1, 0x1000, 0xe1f, 0x0, 0x3ff, 0x80000001, 0x3, 0xfffffff0, 0x9, 0x2, 0x8, 0x5, 0xffffffff, 0x81, 0x453c, 0x400, 0x4, 0x4, 0x38, 0x1, 0x6, 0x1, 0x94f, 0x0, 0x38a, 0x176, 0x100, 0x8, 0x7fffffff, 0x5, 0x6e77, 0x0, 0x5, 0x31, 0x8000, 0x1b3, 0x3, 0x8, 0x0, 0x5, 0xfffffff6, 0x1, 0xb83, 0x7, 0xc3b, 0x8, 0x40, 0x4882, 0xa, 0x2, 0x8, 0x3, 0x5, 0x363, 0x9, 0xffffffff, 0x7, 0x8, 0xab4, 0x3, 0x802, 0x500, 0x39, 0x5, 0x5b2, 0x4, 0x9, 0xa6f, 0x798, 0xd8fc, 0x62c, 0x9c, 0x1, 0x2, 0xe030, 0x1, 0xf93f, 0x2, 0x1, 0x8001, 0x4, 0x6, 0xff, 0xfff, 0xa, 0x1, 0x6, 0x80000000, 0x3, 0x0, 0x7fffffff, 0x0, 0x0, 0x4, 0xb8, 0x4e89, 0x745, 0x401, 0x8, 0xe, 0x1, 0xfffff404, 0x7, 0x7, 0x7, 0x1, 0x40, 0x7, 0x3c23, 0x7fffffff, 0x8, 0xfffffc00, 0x80, 0x7, 0x5, 0x1, 0x8, 0x7, 0x42c80000, 0x7fffffff, 0x7, 0x101, 0x1, 0x3ff, 0x9, 0x1, 0x3, 0x5, 0x0, 0x6, 0xb20a, 0xdc8, 0x1, 0x80000001, 0x0, 0xfb37, 0x7fff, 0x0, 0x8b2, 0xffff7fff, 0xd, 0x2, 0xfffffff8, 0xfffffffb, 0x4, 0x3, 0x397, 0x3, 0x897, 0xc9, 0xfff, 0x2, 0xfffffffc, 0xa6a6, 0xf64, 0x664, 0x7, 0x0, 0xffffffff]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0xdee0, 0xd, 0x8001, 0x0, 0x2, 0x5, 0xffff, 0x7, 0x4ef, 0xf20, 0x4, 0x313c, 0x9, 0xc, 0x9, 0x6, 0x7, 0xe47, 0x59e, 0x8, 0x5, 0x7fff, 0x7, 0x400, 0x1, 0xfffffffd, 0x2, 0xe, 0x4, 0x0, 0x3, 0x3, 0x7, 0x4, 0x8, 0x9, 0x5, 0x0, 0x6, 0xffffffff, 0x5f9c14a0, 0x10001, 0x0, 0x1000, 0x1, 0xfffffffe, 0x7b95, 0x5, 0x1, 0x2, 0x1, 0x771e, 0x8, 0xec, 0x8001, 0x1, 0x2, 0x1000, 0x6b5, 0x3ff, 0x8, 0x10001, 0x7, 0x5, 0x2f4, 0x4, 0x1, 0x401b9cda, 0x5, 0xf61, 0x8, 0xfe000000, 0x88, 0x8, 0x1, 0x2, 0x1000, 0x1ff, 0x4, 0xd1, 0x7f, 0x3, 0x5, 0x1, 0x7, 0x10, 0x8, 0x40, 0xfb, 0xe72, 0x0, 0x8bf9, 0x3ff, 0x400, 0x9, 0x200, 0xffff, 0x100, 0x401, 0x2, 0x2, 0x4, 0x20000000, 0x6, 0xa, 0x1, 0xb19, 0xb, 0x22a73701, 0x10001, 0x401, 0x80, 0xff, 0x4, 0x6, 0x7, 0x5, 0x3, 0x8, 0x101, 0xffffff81, 0x7, 0xaf7e, 0x2, 0x0, 0xb98, 0x4, 0x227d07c6, 0xff, 0xc2ea, 0x101, 0x2, 0x4, 0x60e625a3, 0x7f1cc359, 0x4, 0x4, 0x3, 0x1, 0x1000, 0xfffff001, 0x7, 0x2, 0x10001, 0x5, 0xe, 0x6, 0x0, 0xf4aa, 0x6, 0x6, 0xf7be, 0x100, 0x5, 0xdce2, 0x2, 0xfffffffd, 0xffff, 0x8f9, 0x0, 0x415f, 0x1000, 0x1, 0x1, 0x1, 0x80d, 0xc0000000, 0x3ff, 0x0, 0x1, 0x60, 0xd749, 0x52d9, 0x1, 0x0, 0x2, 0x6, 0x4, 0x82ed, 0x5, 0x21, 0x100, 0x3, 0x3ff, 0x8, 0x6, 0x8, 0x3, 0x80, 0x1, 0x7ff, 0x6, 0x1, 0xffff, 0x100000, 0x8, 0x1, 0x3, 0x2a85, 0x800, 0x0, 0x5, 0x7fffffff, 0x3, 0x0, 0xe300, 0x5, 0x7, 0x41ba, 0x1, 0x8, 0x9, 0x6, 0x5, 0xffffffa5, 0x81, 0x1, 0x0, 0x8001, 0xffffff00, 0x45, 0x0, 0x6, 0x4, 0x7fff, 0x7fffffff, 0xed4c, 0x7, 0x0, 0x0, 0x3, 0xffffffff, 0x7, 0x7, 0x8be, 0x80, 0x4, 0x4, 0xfffffffb, 0x1, 0x400, 0x3, 0x1, 0x8, 0x6, 0xffffffff, 0x200, 0x6, 0x7, 0x4, 0x6, 0x2, 0x1, 0x5, 0x2]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x5, 0x81, 0x4, 0x6ff, {0x2, 0x2, 0x5, 0x9, 0x8, 0x7}, {0x5, 0x1, 0x5, 0x6, 0x9, 0x1ff}, 0x5, 0xf, 0x6}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x200}]}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x3ff, 0x35e, 0xfffffffc}, {0xc5, 0x0, 0x8}, 0xc, 0x55, 0x81}}, @TCA_RSVP_SRC={0x8, 0x3, @local}]}}]}, 0x950}, 0x1, 0x0, 0x0, 0x81}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000015c0)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMK(r6, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000001940)={0x1c, r4, 0x40b, 0x3, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x28004000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xcc, r4, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xfd3b}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7f}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ac}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x161c}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2d4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x272}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x800}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xba49}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}]]}, 0xcc}, 0x1, 0x0, 0x0, 0x1442148732ff9388}, 0x4095) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f000000060027000000000008000a00a8"], 0x6c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000040)={@dev}, &(0x7f0000000080)=0x14) (async) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000940)=@delchain={0x950, 0x65, 0x100, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x6, 0xfff4}, {0x0, 0xf}, {0xfff1, 0xf}}, [@f_rsvp={{0x9}, {0x24, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0xc, 0xffffffff}, {0x6, 0x2, 0x2}, 0x5c, 0x7f, 0x4}}]}}, @f_rsvp={{0x9}, {0x8f0, 0x2, [@TCA_RSVP_POLICE={0x8c4, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x5, 0x5, 0x8, 0xfffffe01, {0x8, 0x1, 0x5, 0x9, 0x3, 0x202}, {0x6, 0x1, 0xff7b, 0x8000, 0x9, 0x1}, 0x1, 0x7, 0x3}}, @TCA_POLICE_RATE={0x404, 0x2, [0x10001, 0xff, 0x10001, 0x5, 0xffff, 0x200, 0x0, 0xe9, 0x7, 0xfffffff7, 0x1a59, 0x9, 0x0, 0x800, 0xad6, 0x401, 0x4, 0x400, 0x2, 0xf, 0x2, 0x81, 0x80, 0x7, 0x81, 0x1, 0xcd, 0x3, 0x3, 0xa701, 0x0, 0x48, 0x81, 0x9, 0xb, 0x1, 0xffffffff, 0x7, 0x9, 0x6702, 0x6053, 0x6, 0x6b, 0x0, 0x6, 0x7, 0x0, 0x8, 0xffffb3a6, 0x6, 0x6, 0xe0000000, 0x5, 0x9a1a, 0x2, 0x5, 0x6, 0x2, 0x5, 0xffffc451, 0x4252, 0xb913, 0x401, 0xff, 0x9, 0x3, 0xf792, 0x82, 0x3, 0x2, 0x74391f5b, 0x55, 0x2, 0x1, 0xfffffffe, 0x6, 0x9, 0x8cb4fe40, 0xf, 0x0, 0x3, 0x7, 0x4, 0x0, 0x1, 0x0, 0x55c, 0x736, 0x8000, 0x7f, 0x1, 0x2, 0x3, 0xb1, 0xb, 0x2, 0x78d, 0x1, 0x1000, 0xe1f, 0x0, 0x3ff, 0x80000001, 0x3, 0xfffffff0, 0x9, 0x2, 0x8, 0x5, 0xffffffff, 0x81, 0x453c, 0x400, 0x4, 0x4, 0x38, 0x1, 0x6, 0x1, 0x94f, 0x0, 0x38a, 0x176, 0x100, 0x8, 0x7fffffff, 0x5, 0x6e77, 0x0, 0x5, 0x31, 0x8000, 0x1b3, 0x3, 0x8, 0x0, 0x5, 0xfffffff6, 0x1, 0xb83, 0x7, 0xc3b, 0x8, 0x40, 0x4882, 0xa, 0x2, 0x8, 0x3, 0x5, 0x363, 0x9, 0xffffffff, 0x7, 0x8, 0xab4, 0x3, 0x802, 0x500, 0x39, 0x5, 0x5b2, 0x4, 0x9, 0xa6f, 0x798, 0xd8fc, 0x62c, 0x9c, 0x1, 0x2, 0xe030, 0x1, 0xf93f, 0x2, 0x1, 0x8001, 0x4, 0x6, 0xff, 0xfff, 0xa, 0x1, 0x6, 0x80000000, 0x3, 0x0, 0x7fffffff, 0x0, 0x0, 0x4, 0xb8, 0x4e89, 0x745, 0x401, 0x8, 0xe, 0x1, 0xfffff404, 0x7, 0x7, 0x7, 0x1, 0x40, 0x7, 0x3c23, 0x7fffffff, 0x8, 0xfffffc00, 0x80, 0x7, 0x5, 0x1, 0x8, 0x7, 0x42c80000, 0x7fffffff, 0x7, 0x101, 0x1, 0x3ff, 0x9, 0x1, 0x3, 0x5, 0x0, 0x6, 0xb20a, 0xdc8, 0x1, 0x80000001, 0x0, 0xfb37, 0x7fff, 0x0, 0x8b2, 0xffff7fff, 0xd, 0x2, 0xfffffff8, 0xfffffffb, 0x4, 0x3, 0x397, 0x3, 0x897, 0xc9, 0xfff, 0x2, 0xfffffffc, 0xa6a6, 0xf64, 0x664, 0x7, 0x0, 0xffffffff]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0xdee0, 0xd, 0x8001, 0x0, 0x2, 0x5, 0xffff, 0x7, 0x4ef, 0xf20, 0x4, 0x313c, 0x9, 0xc, 0x9, 0x6, 0x7, 0xe47, 0x59e, 0x8, 0x5, 0x7fff, 0x7, 0x400, 0x1, 0xfffffffd, 0x2, 0xe, 0x4, 0x0, 0x3, 0x3, 0x7, 0x4, 0x8, 0x9, 0x5, 0x0, 0x6, 0xffffffff, 0x5f9c14a0, 0x10001, 0x0, 0x1000, 0x1, 0xfffffffe, 0x7b95, 0x5, 0x1, 0x2, 0x1, 0x771e, 0x8, 0xec, 0x8001, 0x1, 0x2, 0x1000, 0x6b5, 0x3ff, 0x8, 0x10001, 0x7, 0x5, 0x2f4, 0x4, 0x1, 0x401b9cda, 0x5, 0xf61, 0x8, 0xfe000000, 0x88, 0x8, 0x1, 0x2, 0x1000, 0x1ff, 0x4, 0xd1, 0x7f, 0x3, 0x5, 0x1, 0x7, 0x10, 0x8, 0x40, 0xfb, 0xe72, 0x0, 0x8bf9, 0x3ff, 0x400, 0x9, 0x200, 0xffff, 0x100, 0x401, 0x2, 0x2, 0x4, 0x20000000, 0x6, 0xa, 0x1, 0xb19, 0xb, 0x22a73701, 0x10001, 0x401, 0x80, 0xff, 0x4, 0x6, 0x7, 0x5, 0x3, 0x8, 0x101, 0xffffff81, 0x7, 0xaf7e, 0x2, 0x0, 0xb98, 0x4, 0x227d07c6, 0xff, 0xc2ea, 0x101, 0x2, 0x4, 0x60e625a3, 0x7f1cc359, 0x4, 0x4, 0x3, 0x1, 0x1000, 0xfffff001, 0x7, 0x2, 0x10001, 0x5, 0xe, 0x6, 0x0, 0xf4aa, 0x6, 0x6, 0xf7be, 0x100, 0x5, 0xdce2, 0x2, 0xfffffffd, 0xffff, 0x8f9, 0x0, 0x415f, 0x1000, 0x1, 0x1, 0x1, 0x80d, 0xc0000000, 0x3ff, 0x0, 0x1, 0x60, 0xd749, 0x52d9, 0x1, 0x0, 0x2, 0x6, 0x4, 0x82ed, 0x5, 0x21, 0x100, 0x3, 0x3ff, 0x8, 0x6, 0x8, 0x3, 0x80, 0x1, 0x7ff, 0x6, 0x1, 0xffff, 0x100000, 0x8, 0x1, 0x3, 0x2a85, 0x800, 0x0, 0x5, 0x7fffffff, 0x3, 0x0, 0xe300, 0x5, 0x7, 0x41ba, 0x1, 0x8, 0x9, 0x6, 0x5, 0xffffffa5, 0x81, 0x1, 0x0, 0x8001, 0xffffff00, 0x45, 0x0, 0x6, 0x4, 0x7fff, 0x7fffffff, 0xed4c, 0x7, 0x0, 0x0, 0x3, 0xffffffff, 0x7, 0x7, 0x8be, 0x80, 0x4, 0x4, 0xfffffffb, 0x1, 0x400, 0x3, 0x1, 0x8, 0x6, 0xffffffff, 0x200, 0x6, 0x7, 0x4, 0x6, 0x2, 0x1, 0x5, 0x2]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x5, 0x81, 0x4, 0x6ff, {0x2, 0x2, 0x5, 0x9, 0x8, 0x7}, {0x5, 0x1, 0x5, 0x6, 0x9, 0x1ff}, 0x5, 0xf, 0x6}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x200}]}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x3ff, 0x35e, 0xfffffffc}, {0xc5, 0x0, 0x8}, 0xc, 0x55, 0x81}}, @TCA_RSVP_SRC={0x8, 0x3, @local}]}}]}, 0x950}, 0x1, 0x0, 0x0, 0x81}, 0x80) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000015c0)={'wlan1\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_DEL_PMK(r6, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000001940)={0x1c, r4, 0x40b, 0x3, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x28004000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xcc, r4, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xfd3b}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7f}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ac}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x161c}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2d4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x272}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x800}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xba49}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}]]}, 0xcc}, 0x1, 0x0, 0x0, 0x1442148732ff9388}, 0x4095) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f000000060027000000000008000a00a8"], 0x6c}}, 0x0) (async) 238.896369ms ago: executing program 2 (id=2026): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c2000000aaaaaaaac506e3729bcc21a90000000000022ccd49c5d11d9fe0cb690a4311429d67907800000000e0000002110090785bf4693e40a8ba178c4d269c5fe4d316549c74336dc023afc048f03152a309a70e11b217a5c164817e3a0f9440c91db18f9a12ba5a42925a2e4c7cfa4394de02"], 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='memory.events\x00', 0x0, 0x0) 219.342262ms ago: executing program 4 (id=2027): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x7, 0x0, &(0x7f0000000280)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x6, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000f70700000000000000000000000000008d000000000000009500"/48], &(0x7f0000000440)='syzkaller\x00', 0x9, 0x15, &(0x7f0000000640)=""/21, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000380), 0x4) r3 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r3, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x207}}], 0x30}], 0x1, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000b00)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000fe"], 0x190) syz_emit_ethernet(0x106, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffff0180c200000386dd6000000000d03a00fe8000000000000000000000000000bbff020000000000000000000000000001"], 0x0) 0s ago: executing program 1 (id=2028): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0xd4}, 0x1, 0x0, 0x0, 0x4000000}, 0x11) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x4, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}]}, 0x1c}}, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x5) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000300012800b00010067656e6576650000200002801400070000000000000000000000000000000001080001"], 0x50}, 0x1, 0x2}, 0x0) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) kernel console output (not intermixed with test programs): [ 195.475938][ T7166] netlink: get zone limit has 8 unknown bytes [ 195.730781][ T7172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.485'. [ 195.749076][ T7051] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 195.765531][ T7172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.485'. [ 195.795776][ T7051] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 195.824748][ T7051] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 195.837162][ T7178] IPVS: set_ctl: invalid protocol: 4 224.0.0.2:20004 [ 195.865302][ T7051] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 196.130090][ T7051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.141696][ T7189] netlink: 12 bytes leftover after parsing attributes in process `syz.4.491'. [ 196.185079][ T7189] netlink: 104 bytes leftover after parsing attributes in process `syz.4.491'. [ 196.208343][ T7195] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.493'. [ 196.216754][ T7051] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.261780][ T1078] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.269054][ T1078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.390352][ T1078] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.397694][ T1078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.456133][ T7203] netlink: 'syz.1.495': attribute type 1 has an invalid length. [ 196.503876][ T7203] netlink: 'syz.1.495': attribute type 2 has an invalid length. [ 196.529419][ T7205] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.496'. [ 196.535937][ T7203] netlink: 'syz.1.495': attribute type 1 has an invalid length. [ 196.555253][ T7201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.494'. [ 196.572271][ T7205] openvswitch: netlink: Actions may not be safe on all matching packets [ 196.633178][ T5257] Bluetooth: hci3: command tx timeout [ 196.907136][ T7051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.152553][ T7051] veth0_vlan: entered promiscuous mode [ 197.170521][ T7051] veth1_vlan: entered promiscuous mode [ 197.196400][ T7222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.497'. [ 197.271390][ T7051] veth0_macvtap: entered promiscuous mode [ 197.311128][ T7051] veth1_macvtap: entered promiscuous mode [ 197.403513][ T7051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.425709][ T7051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.436640][ T7051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.448051][ T7051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.458699][ T7051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.469972][ T7051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.480561][ T7051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.493832][ T7051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.513102][ T7051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.540196][ T7051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.562676][ T7051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.573583][ T7051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.601324][ T7051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.656235][ T7051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.682765][ T7051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.699003][ T7051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.710044][ T7051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.720722][ T7051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.731374][ T7051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.741342][ T7051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.779915][ T7051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.829143][ T7051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.842333][ T7051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.872078][ T7051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.886780][ T7051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.899814][ T7246] trusted_key: syz.1.505 sent an empty control message without MSG_MORE. [ 197.911575][ T7051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.290070][ T7051] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.303238][ T7051] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.313648][ T7051] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.323711][ T7051] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.526109][ T1050] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.540633][ T1050] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.579389][ T7274] netlink: 'syz.0.510': attribute type 1 has an invalid length. [ 198.588467][ T1063] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.602484][ T7274] netlink: 'syz.0.510': attribute type 2 has an invalid length. [ 198.615614][ T1063] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.623521][ T7274] netlink: 'syz.0.510': attribute type 1 has an invalid length. [ 198.712747][ T5257] Bluetooth: hci3: command tx timeout [ 199.019125][ T7292] netlink: 'syz.2.516': attribute type 3 has an invalid length. [ 199.074824][ T7292] netlink: 'syz.2.516': attribute type 1 has an invalid length. [ 199.123799][ T7292] netlink: 'syz.2.516': attribute type 1 has an invalid length. [ 199.155240][ T7292] netlink: 'syz.2.516': attribute type 1 has an invalid length. [ 199.411514][ T7304] ip6tnl0: entered promiscuous mode [ 199.542703][ T7301] ip6tnl0: left promiscuous mode [ 199.727932][ T7321] netlink: zone id is out of range [ 199.736040][ T7321] netlink: zone id is out of range [ 199.753543][ T7321] netlink: zone id is out of range [ 199.758730][ T7321] netlink: zone id is out of range [ 199.793914][ T7321] netlink: zone id is out of range [ 199.812667][ T7321] netlink: zone id is out of range [ 199.836325][ T7321] netlink: zone id is out of range [ 199.868609][ T7321] netlink: zone id is out of range [ 199.932090][ T7321] netlink: zone id is out of range [ 199.990615][ T7321] netlink: zone id is out of range [ 200.453866][ T7345] __nla_validate_parse: 6 callbacks suppressed [ 200.453884][ T7345] netlink: 880 bytes leftover after parsing attributes in process `syz.1.533'. [ 200.482563][ T7350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.534'. [ 200.677256][ T7356] syz.2.537[7356] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 200.677432][ T7356] syz.2.537[7356] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 200.724927][ T7355] netlink: 16 bytes leftover after parsing attributes in process `syz.1.536'. [ 200.792694][ T5257] Bluetooth: hci3: command tx timeout [ 200.848991][ T7359] syzkaller1: entered promiscuous mode [ 200.854848][ T7359] syzkaller1: entered allmulticast mode [ 201.159561][ T7373] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 201.180706][ T7373] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 201.226652][ T7375] netlink: 12 bytes leftover after parsing attributes in process `syz.0.544'. [ 201.495140][ T7381] netlink: 40 bytes leftover after parsing attributes in process `syz.1.546'. [ 201.681687][ T7394] validate_nla: 1 callbacks suppressed [ 201.681709][ T7394] netlink: 'syz.4.550': attribute type 1 has an invalid length. [ 201.974822][ T7403] x_tables: duplicate entry at hook 2 [ 202.355541][ T7420] netlink: 84 bytes leftover after parsing attributes in process `syz.1.561'. [ 202.428935][ T7420] netlink: 'syz.1.561': attribute type 1 has an invalid length. [ 202.502513][ T7420] netlink: 28 bytes leftover after parsing attributes in process `syz.1.561'. [ 202.548838][ T7420] bond3: entered promiscuous mode [ 202.654925][ T7434] netlink: 'syz.0.565': attribute type 1 has an invalid length. [ 202.752329][ T7435] netlink: 28 bytes leftover after parsing attributes in process `syz.0.565'. [ 202.782975][ T7435] 8021q: adding VLAN 0 to HW filter on device bond1 [ 202.848645][ T7440] netlink: 'syz.4.566': attribute type 11 has an invalid length. [ 202.935758][ T7442] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.568'. [ 202.961521][ T7443] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.568'. [ 203.138026][ T5261] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 203.182430][ T5261] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 203.191684][ T5261] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 203.207936][ T5261] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 203.219662][ T5261] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 203.231523][ T5261] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 203.599219][ T7467] netlink: 'syz.1.574': attribute type 3 has an invalid length. [ 204.167431][ T7500] netlink: 'syz.1.585': attribute type 2 has an invalid length. [ 204.186417][ T7448] chnl_net:caif_netlink_parms(): no params data found [ 204.309219][ T7504] netlink: 'syz.1.585': attribute type 2 has an invalid length. [ 204.543340][ T7520] xt_CT: You must specify a L4 protocol and not use inversions on it [ 204.604118][ T7517] netlink: 'syz.0.588': attribute type 11 has an invalid length. [ 204.634692][ T7448] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.671971][ T7448] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.699039][ T7448] bridge_slave_0: entered allmulticast mode [ 204.711192][ T7448] bridge_slave_0: entered promiscuous mode [ 204.735094][ T7524] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 204.753175][ T7448] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.801049][ T7448] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.810065][ T7448] bridge_slave_1: entered allmulticast mode [ 204.820613][ T7448] bridge_slave_1: entered promiscuous mode [ 205.021435][ T7448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.065746][ T7538] netlink: 'syz.1.595': attribute type 4 has an invalid length. [ 205.109459][ T7544] netlink: 'syz.0.596': attribute type 1 has an invalid length. [ 205.144665][ T7448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.272467][ T5261] Bluetooth: hci4: command tx timeout [ 205.383899][ T7448] team0: Port device team_slave_0 added [ 205.486425][ T7448] team0: Port device team_slave_1 added [ 205.671218][ T7448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.697864][ T7448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.741002][ T7448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.803699][ T7561] net_ratelimit: 53 callbacks suppressed [ 205.803710][ T7561] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 205.846930][ T7448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.880543][ T7448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.975596][ T7448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.280431][ T7448] hsr_slave_0: entered promiscuous mode [ 206.300697][ T7448] hsr_slave_1: entered promiscuous mode [ 206.316438][ T7448] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.344986][ T7448] Cannot create hsr debugfs directory [ 206.371148][ T7577] IPv6: NLM_F_CREATE should be specified when creating new route [ 206.402884][ T7577] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 206.410659][ T7577] IPv6: NLM_F_CREATE should be set when creating new route [ 206.418021][ T7577] IPv6: NLM_F_CREATE should be set when creating new route [ 206.425333][ T7577] IPv6: NLM_F_CREATE should be set when creating new route [ 206.552581][ T7583] __nla_validate_parse: 6 callbacks suppressed [ 206.552602][ T7583] netlink: 12 bytes leftover after parsing attributes in process `syz.0.607'. [ 206.732386][ T7586] validate_nla: 4 callbacks suppressed [ 206.732407][ T7586] netlink: 'syz.2.608': attribute type 34 has an invalid length. [ 207.014702][ T7602] team0: Port device vlan2 added [ 207.264562][ T7448] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.328029][ T7616] netem: incorrect gi model size [ 207.341671][ T7616] netem: change failed [ 207.353706][ T5261] Bluetooth: hci4: command tx timeout [ 207.493656][ T7448] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.671347][ T7448] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.701338][ T7639] sctp: [Deprecated]: syz.1.620 (pid 7639) Use of struct sctp_assoc_value in delayed_ack socket option. [ 207.701338][ T7639] Use struct sctp_sack_info instead [ 207.733745][ T7637] netlink: 'syz.0.619': attribute type 16 has an invalid length. [ 207.745421][ T7639] netlink: 12 bytes leftover after parsing attributes in process `syz.1.620'. [ 207.969857][ T7448] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.145374][ T7657] netlink: 188 bytes leftover after parsing attributes in process `syz.0.627'. [ 208.357863][ T7448] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 208.431568][ T7448] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 208.487718][ T7448] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 208.560676][ T7448] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 208.886571][ T7686] netlink: 84 bytes leftover after parsing attributes in process `syz.1.636'. [ 208.966542][ T7448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.005323][ T7688] Bluetooth: MGMT ver 1.23 [ 209.040077][ T7448] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.103554][ T2573] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.110730][ T2573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.161816][ T2573] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.169016][ T2573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.211143][ T7690] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 209.380100][ T7448] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 209.435760][ T5261] Bluetooth: hci4: command tx timeout [ 209.718419][ T7709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.642'. [ 209.761597][ T7709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.642'. [ 210.001200][ T7448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.058661][ T7720] hsr0: VLAN not yet supported [ 210.135525][ T7448] veth0_vlan: entered promiscuous mode [ 210.174546][ T7448] veth1_vlan: entered promiscuous mode [ 210.255021][ T7448] veth0_macvtap: entered promiscuous mode [ 210.267174][ T7448] veth1_macvtap: entered promiscuous mode [ 210.307587][ T7448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.328216][ T7448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.353773][ T7448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.380029][ T7448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.393779][ T7448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.409407][ T7448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.420001][ T7448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.430603][ T7448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.440882][ T7448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.457252][ T7448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.468119][ T7448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.480552][ T7448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.490488][ T7448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.506184][ T7448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.532047][ T7448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.571297][ T7448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.585234][ T7448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.600079][ T7448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.620091][ T7448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.638435][ T7448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.649259][ T7448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.664697][ T7448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.682425][ T7448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.704535][ T7448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.720708][ T7448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.731492][ T7448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.742653][ T7448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.753260][ T7448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.764487][ T7448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.776620][ T7448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.812703][ T7733] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.821445][ T7733] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.917586][ T7448] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.938317][ T7448] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.960220][ T7448] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.002070][ T7742] Bluetooth: MGMT ver 1.23 [ 211.002080][ T7741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.651'. [ 211.019397][ T7448] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.199684][ T7749] hsr0: entered promiscuous mode [ 211.226780][ T7749] macsec1: entered allmulticast mode [ 211.246933][ T7749] hsr0: entered allmulticast mode [ 211.258537][ T7749] hsr_slave_0: entered allmulticast mode [ 211.269082][ T7749] hsr_slave_1: entered allmulticast mode [ 211.283776][ T7749] hsr0: left allmulticast mode [ 211.288616][ T7749] hsr_slave_0: left allmulticast mode [ 211.311541][ T7749] hsr_slave_1: left allmulticast mode [ 211.382164][ T7750] netlink: 23 bytes leftover after parsing attributes in process `syz.0.653'. [ 211.438880][ T7755] netlink: 20 bytes leftover after parsing attributes in process `syz.2.652'. [ 211.513593][ T5261] Bluetooth: hci4: command tx timeout [ 211.677922][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.723919][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.821214][ T1050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.860701][ T1050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.911131][ T7772] netlink: 28 bytes leftover after parsing attributes in process `syz.2.660'. [ 211.943325][ T7775] netlink: 28 bytes leftover after parsing attributes in process `syz.2.660'. [ 211.962817][ T7776] IPv6: sit2: Disabled Multicast RS [ 211.998044][ T7777] netlink: 'syz.4.662': attribute type 1 has an invalid length. [ 212.125482][ T7777] 8021q: adding VLAN 0 to HW filter on device bond2 [ 212.200947][ T7777] bond0: (slave bond2): Enslaving as an active interface with an up link [ 212.528981][ T7799] netlink: 32 bytes leftover after parsing attributes in process `syz.4.670'. [ 212.861581][ T7817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.891217][ T7819] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 213.343164][ T7841] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 0 [ 213.345223][ T7838] IPVS: stopping backup sync thread 7841 ... [ 213.526022][ T7843] ieee802154 phy0 wpan0: encryption failed: -22 [ 213.588157][ T7847] netlink: 'syz.2.685': attribute type 11 has an invalid length. [ 213.800345][ T7858] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 213.919347][ T7858] macsec0: entered promiscuous mode [ 213.971218][ T7858] macsec0: left promiscuous mode [ 213.979659][ T7868] netlink: 12 bytes leftover after parsing attributes in process `syz.1.690'. [ 214.872025][ T5261] Bluetooth: hci4: command tx timeout [ 228.662147][ T7884] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 228.669461][ T7884] IPv6: NLM_F_CREATE should be set when creating new route [ 228.676818][ T7884] IPv6: NLM_F_CREATE should be set when creating new route [ 228.723901][ T7886] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 228.740168][ T7881] netlink: 'syz.3.697': attribute type 6 has an invalid length. [ 228.785223][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 228.888063][ T7894] netlink: 'syz.1.700': attribute type 1 has an invalid length. [ 228.947271][ T7895] netlink: 'syz.1.700': attribute type 2 has an invalid length. [ 228.984726][ T7898] netlink: 24 bytes leftover after parsing attributes in process `syz.2.701'. [ 229.122338][ T7908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.703'. [ 229.152829][ T7908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.703'. [ 229.486122][ T7927] netlink: 24 bytes leftover after parsing attributes in process `syz.0.708'. [ 229.595485][ T7931] netlink: 24 bytes leftover after parsing attributes in process `syz.3.709'. [ 229.668399][ T7937] netlink: 'syz.2.711': attribute type 11 has an invalid length. [ 230.133775][ T7954] netlink: 'syz.2.717': attribute type 10 has an invalid length. [ 230.293655][ T7961] TCP: TCP_TX_DELAY enabled [ 230.528776][ T7972] netlink: set zone limit has 8 unknown bytes [ 230.557756][ T7972] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.726'. [ 230.585003][ T7972] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.726'. [ 230.600460][ T7977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.725'. [ 230.627708][ T7977] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.637745][ T7977] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.647157][ T7977] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.656083][ T7977] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.727458][ T7978] netlink: 4 bytes leftover after parsing attributes in process `syz.0.724'. [ 230.731252][ T7977] vxlan0: entered promiscuous mode [ 230.755450][ T7965] netlink: 12 bytes leftover after parsing attributes in process `syz.2.722'. [ 230.793665][ T7973] bridge1: entered promiscuous mode [ 230.808139][ T7973] bridge1: entered allmulticast mode [ 230.828747][ T7975] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 230.831000][ T7980] sctp: [Deprecated]: syz.4.727 (pid 7980) Use of struct sctp_assoc_value in delayed_ack socket option. [ 230.831000][ T7980] Use struct sctp_sack_info instead [ 231.231598][ T8002] netlink: 'syz.0.733': attribute type 1 has an invalid length. [ 231.283081][ T8002] netlink: 'syz.0.733': attribute type 2 has an invalid length. [ 231.420220][ T8012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.654070][ T8072] xt_policy: too many policy elements [ 232.677675][ T8073] xt_policy: too many policy elements [ 232.730553][ T8075] netlink: 'syz.3.755': attribute type 9 has an invalid length. [ 233.559252][ T8119] nê1®NuëöÉÑ30: renamed from lo (while UP) [ 233.625178][ T8119] nê1®NuëöÉÑ30: entered allmulticast mode [ 233.673048][ T8120] syzkaller1: entered promiscuous mode [ 233.700219][ T8120] syzkaller1: entered allmulticast mode [ 233.793405][ T8132] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 233.858355][ T8136] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 234.515449][ T8162] x_tables: duplicate underflow at hook 3 [ 235.236015][ T8189] bridge: RTM_DELNEIGH with unconfigured vlan 2 on bridge_slave_0 [ 235.569611][ T8208] __nla_validate_parse: 13 callbacks suppressed [ 235.569631][ T8208] netlink: 43 bytes leftover after parsing attributes in process `syz.3.795'. [ 236.213320][ T8228] IPVS: set_ctl: invalid protocol: 137 172.20.20.10:20001 [ 236.234353][ T8229] netlink: 'syz.0.801': attribute type 7 has an invalid length. [ 236.253310][ T8229] netlink: 244 bytes leftover after parsing attributes in process `syz.0.801'. [ 236.336640][ T8228] netlink: zone id is out of range [ 236.342938][ T8228] netlink: zone id is out of range [ 236.349145][ T8228] netlink: zone id is out of range [ 236.356030][ T8228] netlink: zone id is out of range [ 236.361271][ T8228] netlink: zone id is out of range [ 236.385726][ T8228] netlink: zone id is out of range [ 236.414591][ T8228] netlink: zone id is out of range [ 236.440637][ T8228] netlink: zone id is out of range [ 236.478022][ T8233] netlink: 'syz.3.802': attribute type 1 has an invalid length. [ 236.704443][ T8243] netlink: 40 bytes leftover after parsing attributes in process `syz.2.803'. [ 236.965830][ T8260] netlink: 'syz.0.811': attribute type 8 has an invalid length. [ 237.270657][ T8277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.814'. [ 237.326021][ T8277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.814'. [ 237.423858][ T8277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.814'. [ 237.499825][ T8277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.814'. [ 237.521038][ T8277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.814'. [ 237.657389][ T8294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.819'. [ 237.962846][ T8300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.820'. [ 239.587104][ T8328] netlink: 'syz.2.826': attribute type 3 has an invalid length. [ 239.886380][ T8340] xt_TPROXY: Can be used only with -p tcp or -p udp [ 240.043938][ T8349] xt_CT: You must specify a L4 protocol and not use inversions on it [ 240.745376][ T8367] net_ratelimit: 13 callbacks suppressed [ 240.745399][ T8367] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 240.800681][ T8388] bridge0: port 3(gretap0) entered blocking state [ 240.843784][ T8388] bridge0: port 3(gretap0) entered disabled state [ 240.850658][ T8388] gretap0: entered allmulticast mode [ 240.880762][ T8367] __nla_validate_parse: 6 callbacks suppressed [ 240.880791][ T8367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.838'. [ 240.900567][ T8388] gretap0: entered promiscuous mode [ 240.928591][ T8388] bridge0: port 3(gretap0) entered blocking state [ 240.935703][ T8388] bridge0: port 3(gretap0) entered forwarding state [ 241.002600][ T8367] netlink: 12 bytes leftover after parsing attributes in process `syz.0.838'. [ 241.285095][ T8404] team0: entered promiscuous mode [ 241.305986][ T8404] team_slave_0: entered promiscuous mode [ 241.329139][ T8404] team_slave_1: entered promiscuous mode [ 241.382142][ T8406] netlink: 28 bytes leftover after parsing attributes in process `syz.3.849'. [ 241.629710][ T8413] netlink: 64 bytes leftover after parsing attributes in process `syz.1.853'. [ 241.993787][ T8400] team0: left promiscuous mode [ 241.998892][ T8400] team_slave_0: left promiscuous mode [ 242.017322][ T8400] team_slave_1: left promiscuous mode [ 242.333363][ T8431] netlink: 48 bytes leftover after parsing attributes in process `syz.0.857'. [ 242.362826][ T8431] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 242.442585][ T8433] netlink: 28 bytes leftover after parsing attributes in process `syz.1.859'. [ 242.801173][ T8445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.862'. [ 242.845473][ T8438] batadv_slave_1: entered promiscuous mode [ 242.939602][ T8446] netlink: 'syz.1.863': attribute type 1 has an invalid length. [ 243.022265][ T8445] bond_slave_0: entered promiscuous mode [ 243.028452][ T8445] bond_slave_1: entered promiscuous mode [ 243.095229][ T8445] vlan2: entered promiscuous mode [ 243.110903][ T8445] bond0: entered promiscuous mode [ 243.128733][ T8445] bond0: left promiscuous mode [ 243.138879][ T8445] bond_slave_0: left promiscuous mode [ 243.144539][ T8445] bond_slave_1: left promiscuous mode [ 243.154550][ T8456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.865'. [ 243.180322][ T8457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.865'. [ 243.231447][ T8437] batadv_slave_1: left promiscuous mode [ 243.485803][ T8463] netlink: 72 bytes leftover after parsing attributes in process `syz.3.868'. [ 244.573748][ T8504] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.874832][ T8520] netlink: 'syz.2.884': attribute type 1 has an invalid length. [ 245.315390][ T8541] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 245.346062][ T8545] ax25_connect(): syz.0.891 uses autobind, please contact jreuter@yaina.de [ 245.396191][ T8541] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 245.422348][ T8541] gretap1: entered promiscuous mode [ 245.428171][ T8541] gretap1: entered allmulticast mode [ 245.836471][ T8565] netlink: 'syz.3.899': attribute type 11 has an invalid length. [ 246.207146][ T8589] __nla_validate_parse: 5 callbacks suppressed [ 246.207167][ T8589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.903'. [ 246.567510][ T8594] netlink: 232 bytes leftover after parsing attributes in process `syz.0.904'. [ 246.866394][ T8615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.910'. [ 246.916728][ T8615] netlink: 12 bytes leftover after parsing attributes in process `syz.0.910'. [ 247.072611][ T8625] netlink: 12 bytes leftover after parsing attributes in process `syz.3.915'. [ 247.146807][ T8631] tap0: tun_chr_ioctl cmd 2147767521 [ 247.250616][ T8638] netlink: 16 bytes leftover after parsing attributes in process `syz.1.918'. [ 247.278586][ T8639] netlink: 16 bytes leftover after parsing attributes in process `syz.2.919'. [ 247.296179][ T8639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.919'. [ 247.580586][ T8649] veth0: entered promiscuous mode [ 247.791322][ T8648] veth0: left promiscuous mode [ 247.884721][ T8665] Dead loop on virtual device ip6_vti0, fix it urgently! [ 248.008142][ T8668] netlink: 'syz.2.928': attribute type 9 has an invalid length. [ 248.052349][ T8668] netlink: 'syz.2.928': attribute type 9 has an invalid length. [ 248.102734][ T8668] netlink: 'syz.2.928': attribute type 9 has an invalid length. [ 248.152624][ T8668] netlink: 'syz.2.928': attribute type 9 has an invalid length. [ 248.178176][ T8668] netlink: 'syz.2.928': attribute type 9 has an invalid length. [ 248.201149][ T8678] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.207730][ T8668] netlink: 'syz.2.928': attribute type 9 has an invalid length. [ 248.211010][ T8678] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.227199][ T8678] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.236647][ T8668] netlink: 'syz.2.928': attribute type 9 has an invalid length. [ 248.236647][ T8678] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.261019][ T8676] netlink: 'syz.0.931': attribute type 11 has an invalid length. [ 248.284563][ T8668] netlink: 'syz.2.928': attribute type 9 has an invalid length. [ 248.322576][ T8668] netlink: 'syz.2.928': attribute type 9 has an invalid length. [ 248.370596][ T8668] netlink: 'syz.2.928': attribute type 9 has an invalid length. [ 248.646420][ T8695] xt_connbytes: Forcing CT accounting to be enabled [ 248.662627][ T8695] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 248.692537][ T8695] xt_bpf: check failed: parse error [ 248.777702][ T8701] netlink: 92 bytes leftover after parsing attributes in process `syz.3.938'. [ 248.783730][ T8703] netlink: 24 bytes leftover after parsing attributes in process `syz.4.939'. [ 250.679800][ T8782] raw_sendmsg: syz.2.965 forgot to set AF_INET. Fix it! [ 250.703471][ T8786] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 251.284380][ T8818] x_tables: duplicate underflow at hook 1 [ 251.716819][ T8839] __nla_validate_parse: 9 callbacks suppressed [ 251.716840][ T8839] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.983'. [ 251.716881][ T5335] IPVS: starting estimator thread 0... [ 251.740536][ T8838] tipc: Started in network mode [ 251.745976][ T8838] tipc: Node identity ac1414aa, cluster identity 4711 [ 251.755904][ T8838] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 251.765925][ T8838] tipc: Enabled bearer , priority 10 [ 251.774103][ T8838] IPv6: NLM_F_CREATE should be specified when creating new route [ 251.787916][ T8838] netlink: 36 bytes leftover after parsing attributes in process `syz.3.985'. [ 251.809388][ T8839] netlink: 24 bytes leftover after parsing attributes in process `syz.1.983'. [ 251.843439][ T8840] IPVS: using max 18 ests per chain, 43200 per kthread [ 251.894435][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 252.032002][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 252.155388][ T8845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.987'. [ 252.172180][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 252.203624][ T8852] netlink: 28 bytes leftover after parsing attributes in process `syz.0.988'. [ 252.221647][ T8852] netlink: 28 bytes leftover after parsing attributes in process `syz.0.988'. [ 252.238072][ T8847] netlink: 116 bytes leftover after parsing attributes in process `syz.3.989'. [ 252.312955][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 252.451996][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 252.530200][ T8864] team0: Device hsr_slave_0 failed to register rx_handler [ 252.539202][ T8868] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.994'. [ 252.592261][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 252.732269][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 252.865150][ T8881] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1000'. [ 252.873401][ T5335] tipc: Node number set to 2886997162 [ 252.918344][ T8886] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1003'. [ 253.012129][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 253.074164][ T8893] validate_nla: 65 callbacks suppressed [ 253.074184][ T8893] netlink: 'syz.2.1005': attribute type 8 has an invalid length. [ 253.282272][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 253.812454][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 254.000982][ T8930] netlink: 'syz.3.1017': attribute type 10 has an invalid length. [ 254.409400][ T8947] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 254.816438][ T8969] netlink: 'syz.1.1028': attribute type 30 has an invalid length. [ 254.874211][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 254.935879][ T8979] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 254.992891][ T8974] netlink: 'syz.1.1028': attribute type 30 has an invalid length. [ 255.911981][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 256.134379][ T9031] netlink: 'syz.4.1046': attribute type 1 has an invalid length. [ 256.156913][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.164313][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.171409][ T9031] netlink: 'syz.4.1046': attribute type 1 has an invalid length. [ 256.801193][ T9067] __nla_validate_parse: 16 callbacks suppressed [ 256.801217][ T9067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1056'. [ 256.818896][ T9064] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1057'. [ 256.857651][ T9067] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1056'. [ 256.870178][ T9064] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 256.952021][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 256.987781][ T9077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1061'. [ 257.310993][ T9095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1065'. [ 257.533784][ T9108] netlink: 'syz.3.1066': attribute type 3 has an invalid length. [ 257.567544][ T9108] netlink: 101216 bytes leftover after parsing attributes in process `syz.3.1066'. [ 257.991885][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 258.556623][ T9140] tls_set_device_offload: netdev not found [ 258.576229][ T9144] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1070'. [ 258.599016][ T9143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1070'. [ 258.659812][ T9146] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 258.834903][ T9152] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1075'. [ 259.032083][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 259.149427][ T9167] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 259.190736][ T9167] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 259.257403][ T9171] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1082'. [ 259.651674][ T9181] SET target dimension over the limit! [ 259.748634][ T9187] ax25_connect(): syz.1.1090 uses autobind, please contact jreuter@yaina.de [ 260.071946][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 260.737003][ T9227] netlink: 'syz.3.1105': attribute type 1 has an invalid length. [ 260.836273][ T9227] bond2: entered promiscuous mode [ 260.869681][ T9232] bond2: entered allmulticast mode [ 260.917684][ T9232] 8021q: adding VLAN 0 to HW filter on device bond2 [ 261.096417][ T9225] geneve2: entered promiscuous mode [ 261.111966][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 261.117021][ T9225] geneve2: entered allmulticast mode [ 261.959186][ T9269] netlink: 'syz.0.1117': attribute type 5 has an invalid length. [ 262.022982][ T9265] __nla_validate_parse: 6 callbacks suppressed [ 262.023018][ T9265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1118'. [ 262.047348][ T9265] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1118'. [ 262.151991][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 262.225760][ T9275] ebt_among: dst integrity fail: 101 [ 262.659855][ T9302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1127'. [ 263.086171][ T9329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1132'. [ 263.164560][ T9335] netlink: 'syz.1.1135': attribute type 16 has an invalid length. [ 263.190437][ T9335] netlink: 'syz.1.1135': attribute type 3 has an invalid length. [ 263.199157][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 263.242951][ T9335] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1135'. [ 263.256721][ T9344] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1136'. [ 263.463805][ T9353] --map-set only usable from mangle table [ 263.489901][ T9357] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 263.619740][ T9364] xt_cluster: node mask cannot exceed total number of nodes [ 263.628437][ T9362] veth0: entered promiscuous mode [ 263.651671][ T9362] ipvlan0: entered promiscuous mode [ 263.737895][ T9359] ipvlan0: left promiscuous mode [ 263.773282][ T9359] veth0: left promiscuous mode [ 264.034336][ T9383] netlink: ct family unspecified [ 264.073384][ T9383] openvswitch: netlink: Actions may not be safe on all matching packets [ 264.143824][ T9387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1149'. [ 264.231879][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 264.300086][ T9400] ebt_among: dst integrity fail: 101 [ 264.575989][ T9412] netlink: 'syz.0.1156': attribute type 9 has an invalid length. [ 264.584823][ T9412] netlink: 134660 bytes leftover after parsing attributes in process `syz.0.1156'. [ 264.754743][ T9422] x_tables: duplicate underflow at hook 1 [ 264.798868][ T9425] netlink: 'syz.2.1160': attribute type 1 has an invalid length. [ 264.819031][ T9425] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1160'. [ 265.086463][ T9429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1161'. [ 265.272040][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 265.436034][ T9445] netlink: 'syz.2.1164': attribute type 1 has an invalid length. [ 265.510601][ T9448] nbd: must specify a device to reconfigure [ 265.727676][ T9459] x_tables: unsorted underflow at hook 4 [ 265.750474][ T9462] IPv6: sit4: Disabled Multicast RS [ 265.937297][ T9474] veth1: entered promiscuous mode [ 265.945391][ T9474] veth1: left promiscuous mode [ 266.029568][ T9480] netlink: 'syz.3.1176': attribute type 10 has an invalid length. [ 266.053136][ T9480] netlink: 'syz.3.1176': attribute type 10 has an invalid length. [ 266.073986][ T9480] netlink: 'syz.3.1176': attribute type 10 has an invalid length. [ 266.099162][ T9480] netlink: 'syz.3.1176': attribute type 10 has an invalid length. [ 266.120482][ T9480] netlink: 'syz.3.1176': attribute type 10 has an invalid length. [ 266.147905][ T9480] netlink: 'syz.3.1176': attribute type 10 has an invalid length. [ 266.189321][ T9480] netlink: 'syz.3.1176': attribute type 10 has an invalid length. [ 266.234001][ T9480] netlink: 'syz.3.1176': attribute type 10 has an invalid length. [ 266.273260][ T9480] netlink: 'syz.3.1176': attribute type 10 has an invalid length. [ 266.311910][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 266.335354][ T9480] netlink: 'syz.3.1176': attribute type 10 has an invalid length. [ 266.477845][ T9499] bridge0: entered promiscuous mode [ 266.503728][ T9499] macvlan2: entered allmulticast mode [ 266.511060][ T9499] bridge0: entered allmulticast mode [ 266.757931][ T9515] 8021q: VLANs not supported on hsr0 [ 267.351861][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 267.489549][ T9552] __nla_validate_parse: 42 callbacks suppressed [ 267.489571][ T9552] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1194'. [ 267.523998][ T9552] bridge0: port 4(dummy0) entered blocking state [ 267.577738][ T9552] bridge0: port 4(dummy0) entered disabled state [ 267.608387][ T9555] nbd: must specify a device to reconfigure [ 267.626613][ T9552] dummy0: entered allmulticast mode [ 267.654111][ T9552] dummy0: entered promiscuous mode [ 267.660286][ T9552] bridge0: port 4(dummy0) entered blocking state [ 267.667012][ T9552] bridge0: port 4(dummy0) entered forwarding state [ 267.697162][ T9563] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1196'. [ 268.195423][ T9575] xt_CT: No such helper "netbios-ns" [ 268.392032][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 268.526001][ T9596] openvswitch: netlink: IP tunnel attribute has 2 unknown bytes. [ 269.175665][ T9622] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1216'. [ 269.276489][ T9626] xt_l2tp: v2 doesn't support IP mode [ 269.351538][ T9626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1217'. [ 269.432031][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 269.511002][ T9632] netlink: 616 bytes leftover after parsing attributes in process `syz.4.1220'. [ 269.545639][ T9640] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 269.572983][ T9640] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 269.597048][ T9640] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 269.624824][ T9640] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 269.662440][ T9640] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 269.695920][ T9640] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 269.713128][ T9645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1224'. [ 269.724302][ T9645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1224'. [ 269.735473][ T9640] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 269.749085][ T9640] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 269.789004][ T9640] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 270.007025][ T9658] ax25_connect(): syz.4.1228 uses autobind, please contact jreuter@yaina.de [ 270.072739][ T9663] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1227'. [ 270.385603][ T29] audit: type=1107 audit(1726594973.976:3): pid=9673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='O' [ 271.255884][ T9697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1240'. [ 271.296646][ T9699] ipt_ECN: cannot use operation on non-tcp rule [ 271.471071][ T9707] validate_nla: 25 callbacks suppressed [ 271.471093][ T9707] netlink: 'syz.3.1242': attribute type 1 has an invalid length. [ 271.486170][ T9708] netlink: 23 bytes leftover after parsing attributes in process `syz.0.1238'. [ 271.831292][ T9724] netlink: 'syz.3.1245': attribute type 11 has an invalid length. [ 272.070648][ T9733] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 272.328918][ T9748] netlink: 'syz.2.1253': attribute type 11 has an invalid length. [ 272.343024][ T9748] netlink: 'syz.2.1253': attribute type 11 has an invalid length. [ 272.518320][ T9760] netlink: 'syz.4.1258': attribute type 4 has an invalid length. [ 272.534252][ T9761] netlink: 'syz.4.1258': attribute type 4 has an invalid length. [ 272.928120][ T9778] __nla_validate_parse: 8 callbacks suppressed [ 272.928139][ T9778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1263'. [ 273.017970][ T9783] xfrm1: entered allmulticast mode [ 273.507338][ T9804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1270'. [ 274.477435][ T9847] "syz.0.1285" (9847) uses obsolete ecb(arc4) skcipher [ 274.487458][ T9858] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1287'. [ 274.545848][ T9856] xt_CT: No such helper "pptp" [ 274.632084][ C1] net_ratelimit: 61 callbacks suppressed [ 274.632105][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 275.672147][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 276.714330][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 277.359620][ T9892] tipc: Started in network mode [ 277.367999][ T9892] tipc: Node identity , cluster identity 4711 [ 277.705954][ T9916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1304'. [ 277.723114][ T9919] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 277.728295][ T9912] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1303'. [ 277.753415][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 277.784522][ T9918] netlink: 134716 bytes leftover after parsing attributes in process `syz.0.1305'. [ 277.784800][ T9913] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1303'. [ 277.825424][ T9918] openvswitch: netlink: Message has 5 unknown bytes. [ 277.998021][ T9935] netlink: 'syz.3.1309': attribute type 11 has an invalid length. [ 278.085108][ T9939] netlink: 191416 bytes leftover after parsing attributes in process `syz.2.1310'. [ 278.130040][ T9939] netlink: zone id is out of range [ 278.158752][ T9939] netlink: zone id is out of range [ 278.269914][ T9951] netlink: 'syz.0.1312': attribute type 10 has an invalid length. [ 278.344102][ T9958] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1313'. [ 278.375199][ T9956] sctp: [Deprecated]: syz.1.1315 (pid 9956) Use of struct sctp_assoc_value in delayed_ack socket option. [ 278.375199][ T9956] Use struct sctp_sack_info instead [ 278.377641][ T9962] xt_hashlimit: Unknown mode mask 115, kernel too old? [ 278.415430][ T9950] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1313'. [ 278.452984][ T9956] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1315'. [ 278.532650][ T9963] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1315'. [ 278.571387][ T9963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1315'. [ 278.610682][ T9958] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.1313'. [ 278.619494][ T9963] dummy0: entered promiscuous mode [ 278.636546][ T9958] openvswitch: netlink: Actions may not be safe on all matching packets [ 278.679554][ T9956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1315'. [ 278.717357][ T5257] Bluetooth: hci6: command 0x0406 tx timeout [ 278.719283][ T5261] Bluetooth: hci2: command 0x0406 tx timeout [ 278.724187][ T5247] Bluetooth: hci5: command 0x0406 tx timeout [ 278.730502][ T5261] Bluetooth: hci1: command 0x0406 tx timeout [ 278.759457][ T9976] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1319'. [ 278.792152][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 278.866003][ T9978] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 278.888524][ T9981] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1323'. [ 279.191605][ T9994] dummy0: entered promiscuous mode [ 279.485191][T10012] team0: entered promiscuous mode [ 279.490444][T10012] team_slave_0: entered promiscuous mode [ 279.499954][T10012] team_slave_1: entered promiscuous mode [ 279.507659][T10012] vlan2: entered promiscuous mode [ 279.522167][T10012] vlan0: entered promiscuous mode [ 279.543997][T10012] team_slave_0: entered allmulticast mode [ 279.585244][T10012] team0: Port device team_slave_0 removed [ 279.616350][T10011] team0: left promiscuous mode [ 279.632812][T10011] team_slave_1: left promiscuous mode [ 279.659346][T10011] vlan2: left promiscuous mode [ 279.672981][T10011] vlan0: left promiscuous mode [ 279.727812][T10018] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 279.832246][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 279.971675][T10031] netlink: 'syz.4.1341': attribute type 21 has an invalid length. [ 279.980218][T10031] netlink: 'syz.4.1341': attribute type 4 has an invalid length. [ 279.991349][T10031] netlink: 'syz.4.1341': attribute type 5 has an invalid length. [ 280.112017][T10037] netlink: 'syz.1.1343': attribute type 1 has an invalid length. [ 280.125908][T10037] netlink: 'syz.1.1343': attribute type 2 has an invalid length. [ 280.144435][T10037] netlink: 'syz.1.1343': attribute type 1 has an invalid length. [ 280.786707][ T2543] tipc: Subscription rejected, illegal request [ 280.871970][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 281.738554][T10121] x_tables: duplicate underflow at hook 4 [ 281.800160][T10123] netlink: 'syz.4.1368': attribute type 3 has an invalid length. [ 281.810811][T10123] netlink: 'syz.4.1368': attribute type 2 has an invalid length. [ 281.911982][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 282.141501][T10131] netlink: 'syz.2.1372': attribute type 1 has an invalid length. [ 282.952107][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 283.510874][T10191] __nla_validate_parse: 23 callbacks suppressed [ 283.510906][T10191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1391'. [ 283.629360][T10198] IPVS: length: 142 != 8 [ 283.641298][T10194] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1392'. [ 283.656209][T10196] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1393'. [ 283.660417][T10198] Cannot find add_set index 0 as target [ 283.683592][T10196] netlink: 'syz.0.1393': attribute type 10 has an invalid length. [ 283.700220][T10196] bond0: (slave netdevsim0): no link monitoring support [ 283.714464][T10196] bond0: (slave netdevsim0): MII and ETHTOOL support not available for slave, and arp_interval/arp_ip_target module parameters not specified, thus bonding will not detect link failures! see bonding.txt for details [ 283.738698][T10196] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 283.967724][T10211] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1398'. [ 283.992004][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 284.073320][T10215] ip6_tunnel: non-ECT from fc00:0000:0800:0000:0000:0000:0000:0000 with DS=0x2 [ 284.159199][T10221] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1402'. [ 284.540766][T10238] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1407'. [ 284.559016][T10233] xt_CT: No such helper "syz1" [ 284.559836][T10238] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1407'. [ 284.610771][T10237] syz.2.1406[10237] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 284.610838][T10240] syz.2.1406[10240] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 284.610929][T10237] syz.2.1406[10237] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 284.634895][T10240] syz.2.1406[10240] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 284.700129][T10242] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1406'. [ 284.712576][T10240] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1406'. [ 285.010186][T10255] unsupported nlmsg_type 40 [ 285.012612][T10258] sctp: [Deprecated]: syz.0.1413 (pid 10258) Use of int in maxseg socket option. [ 285.012612][T10258] Use struct sctp_assoc_value instead [ 285.032064][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 285.344509][T10276] sit0: entered promiscuous mode [ 285.387846][T10276] netlink: 'syz.2.1419': attribute type 1 has an invalid length. [ 285.442238][T10276] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1419'. [ 286.072092][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 286.163213][T10309] : renamed from ipvlan1 [ 286.248323][T10317] netlink: 'syz.3.1429': attribute type 11 has an invalid length. [ 286.283519][T10317] netlink: 'syz.3.1429': attribute type 11 has an invalid length. [ 286.368810][T10322] netlink: 'syz.0.1431': attribute type 1 has an invalid length. [ 286.564812][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.605128][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.035383][T10359] netlink: 'syz.1.1442': attribute type 10 has an invalid length. [ 287.088473][T10359] hsr0: entered promiscuous mode [ 287.112034][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 287.132985][T10359] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 287.168867][ T5298] IPVS: starting estimator thread 0... [ 287.182013][T10359] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 287.204449][T10359] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 287.225597][T10359] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 287.269855][T10362] IPVS: using max 16 ests per chain, 38400 per kthread [ 287.608841][T10394] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 287.610712][T10393] netlink: 'syz.2.1452': attribute type 1 has an invalid length. [ 288.152095][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 288.888306][T10443] vlan2: entered promiscuous mode [ 288.939799][ T4625] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 288.958049][ T4625] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 288.967244][ T4625] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 288.984488][ T4625] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 288.998558][ T4625] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 289.009430][ T4625] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 289.169735][T10456] xt_l2tp: v2 sid > 0xffff: 262144 [ 289.192011][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 289.268657][T10460] __nla_validate_parse: 91 callbacks suppressed [ 289.268675][T10460] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1472'. [ 289.395160][T10462] can: request_module (can-proto-0) failed. [ 289.561144][T10447] chnl_net:caif_netlink_parms(): no params data found [ 289.751095][T10447] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.771633][T10447] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.781888][T10447] bridge_slave_0: entered allmulticast mode [ 289.791123][T10447] bridge_slave_0: entered promiscuous mode [ 289.811998][T10447] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.819160][T10447] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.834884][T10447] bridge_slave_1: entered allmulticast mode [ 289.845118][T10447] bridge_slave_1: entered promiscuous mode [ 289.917888][T10447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.966055][T10447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.109348][T10447] team0: Port device team_slave_0 added [ 290.128895][T10447] team0: Port device team_slave_1 added [ 290.231978][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 290.278348][T10447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.298089][T10447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.353187][T10447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.442872][T10513] netlink: 'syz.4.1485': attribute type 2 has an invalid length. [ 290.456133][ T2552] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.469188][T10513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1485'. [ 290.479057][ T2552] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.519829][T10447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.565447][T10447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.610501][T10447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.648925][T10515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1486'. [ 290.691290][T10515] dummy0: entered promiscuous mode [ 290.775413][ T2552] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.822840][ T2552] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.042159][ T4625] Bluetooth: hci4: command tx timeout [ 291.077042][ T2552] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.077056][T10542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1494'. [ 291.098444][ T2552] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.146294][T10447] hsr_slave_0: entered promiscuous mode [ 291.164692][T10447] hsr_slave_1: entered promiscuous mode [ 291.180366][T10447] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 291.200073][T10447] Cannot create hsr debugfs directory [ 291.272287][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 291.388343][ T2552] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.427511][ T2552] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.485291][T10562] "syz.0.1500" (10562) uses obsolete ecb(arc4) skcipher [ 291.665843][T10569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1502'. [ 291.679665][T10569] xt_NFQUEUE: number of total queues is 0 [ 292.143431][ T2552] dummy0: left allmulticast mode [ 292.163115][ T2552] dummy0: left promiscuous mode [ 292.168224][ T2552] bridge0: port 4(dummy0) entered disabled state [ 292.212788][ T2552] gretap0: left allmulticast mode [ 292.217948][ T2552] gretap0: left promiscuous mode [ 292.241331][ T2552] bridge0: port 3(gretap0) entered disabled state [ 292.276071][ T2552] bridge_slave_1: left allmulticast mode [ 292.289878][T10599] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1510'. [ 292.292568][ T2552] bridge_slave_1: left promiscuous mode [ 292.304228][T10598] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1510'. [ 292.307506][ T2552] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.321181][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 292.334789][ T2552] bridge_slave_0: left allmulticast mode [ 292.343102][ T2552] bridge_slave_0: left promiscuous mode [ 292.348955][ T2552] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.070961][ T2552] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.087129][ T2552] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.099545][ T2552] bond0 (unregistering): Released all slaves [ 293.113800][ T2552] bond1 (unregistering): Released all slaves [ 293.122396][ T4625] Bluetooth: hci4: command tx timeout [ 293.282080][ T2552] bond2 (unregistering): Released all slaves [ 293.352040][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 293.464966][T10601] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1511'. [ 293.507845][T10603] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1511'. [ 293.603782][T10615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1513'. [ 293.683171][ T2552] tipc: Disabling bearer [ 293.715746][ T2552] tipc: Left network mode [ 293.852887][T10621] IPVS: Error joining to the multicast group [ 294.002692][T10637] netlink: 'syz.4.1520': attribute type 1 has an invalid length. [ 294.849532][ T2552] hsr_slave_0: left promiscuous mode [ 294.857267][ T2552] hsr_slave_1: left promiscuous mode [ 294.865829][ T2552] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.876310][ T2552] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.885514][ T2552] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.894292][ T2552] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.921715][ T2552] veth1_macvtap: left promiscuous mode [ 294.928344][ T2552] veth0_macvtap: left promiscuous mode [ 294.935748][ T2552] veth1_vlan: left promiscuous mode [ 294.941293][ T2552] veth0_vlan: left promiscuous mode [ 295.209581][ T4625] Bluetooth: hci4: command tx timeout [ 295.628985][ T2552] team0 (unregistering): Port device team_slave_1 removed [ 295.686144][ T2552] team0 (unregistering): Port device team_slave_0 removed [ 296.208903][T10447] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 296.247236][T10686] netlink: 'syz.2.1529': attribute type 10 has an invalid length. [ 296.294480][T10688] netem: change failed [ 296.375894][T10447] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 296.409639][T10447] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 296.459941][T10447] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 296.632694][T10700] hsr_slave_0: left promiscuous mode [ 296.683157][T10700] hsr_slave_1: left promiscuous mode [ 296.804088][T10711] veth1_vlan: left allmulticast mode [ 296.875588][T10711] bridge0: port 3(macvlan1) entered disabled state [ 297.283311][ T4625] Bluetooth: hci4: command tx timeout [ 297.317853][T10447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.451731][T10447] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.454464][ T2552] IPVS: stop unused estimator thread 0... [ 297.501218][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.508480][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.578832][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.586059][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.078765][T10769] __nla_validate_parse: 2 callbacks suppressed [ 298.078784][T10769] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1549'. [ 298.259322][T10447] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 298.318910][T10772] team_slave_0: entered promiscuous mode [ 298.325074][T10772] team_slave_1: entered promiscuous mode [ 298.361724][T10772] bond0: (slave vlan3): Enslaving as an active interface with an up link [ 298.691392][T10794] netlink: 'syz.0.1555': attribute type 1 has an invalid length. [ 298.775525][T10447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.835921][T10799] netlink: 'syz.0.1558': attribute type 9 has an invalid length. [ 298.854033][T10801] netlink: 'syz.4.1557': attribute type 1 has an invalid length. [ 298.868375][T10801] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1557'. [ 298.892705][T10801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1557'. [ 298.935974][T10447] veth0_vlan: entered promiscuous mode [ 299.000285][T10447] veth1_vlan: entered promiscuous mode [ 299.071575][T10447] veth0_macvtap: entered promiscuous mode [ 299.111470][T10447] veth1_macvtap: entered promiscuous mode [ 299.160705][T10809] team_slave_1: entered promiscuous mode [ 299.215257][T10809] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check. [ 299.339780][T10447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.371318][T10447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.401590][T10447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.433543][T10447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.482971][T10447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.505409][T10447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.541474][T10447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.570057][T10447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.645091][T10447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.676974][T10447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.703538][T10447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.715417][T10447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.727200][T10447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.739033][T10447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.751682][T10447] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.776769][T10447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.819812][T10447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.842762][T10447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.860083][T10447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.887661][T10447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.939552][T10447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.971026][T10447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.011148][T10447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.032421][T10447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.062412][T10447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.075777][T10447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.102798][T10447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.122070][T10447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.142757][T10447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.165143][T10447] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.236482][T10852] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1567'. [ 300.285588][T10447] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.353191][T10447] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.383720][T10447] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.414475][T10447] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.503300][T10865] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 300.920880][T10876] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1572'. [ 300.939167][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.943181][T10885] netlink: 'syz.0.1570': attribute type 10 has an invalid length. [ 300.968825][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.019290][T10885] team0: Cannot enslave team device to itself [ 301.211392][ T2552] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.241372][ T2552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.509400][T10908] netlink: 'syz.2.1579': attribute type 1 has an invalid length. [ 301.550181][T10908] netlink: 'syz.2.1579': attribute type 2 has an invalid length. [ 301.773652][T10922] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1582'. [ 301.884164][T10932] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 301.926777][T10934] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1584'. [ 302.419072][ T1050] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.509810][T10946] netlink: 'syz.0.1585': attribute type 4 has an invalid length. [ 302.797429][ T1050] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.078697][T10978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1594'. [ 303.088539][T10984] openvswitch: netlink: ct_state flags 0000d2dc unsupported [ 303.121157][T10978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1594'. [ 303.134868][ T1050] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.145320][T10983] Bluetooth: hci3: unsupported parameter 65535 [ 303.158257][T10978] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1594'. [ 303.186611][T10983] Bluetooth: hci3: unsupported parameter 65535 [ 303.204696][T10990] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 303.222100][T10989] netlink: 'syz.2.1594': attribute type 10 has an invalid length. [ 303.246583][T10989] veth1_macvtap: left promiscuous mode [ 303.294065][T10992] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1598'. [ 303.365325][ T1050] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.459893][T10992] bridge0: port 3(bond0) entered blocking state [ 303.477342][T10992] bridge0: port 3(bond0) entered disabled state [ 303.497676][T10992] bond0: entered allmulticast mode [ 303.513119][T10992] bond_slave_0: entered allmulticast mode [ 303.522588][T10992] bond_slave_1: entered allmulticast mode [ 303.533176][T10992] macvlan2: entered allmulticast mode [ 303.538603][T10992] batadv0: entered allmulticast mode [ 303.564904][T10992] vlan3: entered allmulticast mode [ 303.570163][T10992] team0: entered allmulticast mode [ 303.587650][ T5258] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 303.601089][ T5258] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 303.611577][ T5258] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 303.620532][T10992] team_slave_0: entered allmulticast mode [ 303.628612][ T5258] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 303.642805][T10992] team_slave_1: entered allmulticast mode [ 303.648858][ T5258] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 303.658897][ T5258] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 303.673777][T10992] bond0: left allmulticast mode [ 303.700884][T10992] bond_slave_0: left allmulticast mode [ 303.714681][T10992] bond_slave_1: left allmulticast mode [ 303.722970][T10992] macvlan2: left allmulticast mode [ 303.728835][T10992] batadv0: left allmulticast mode [ 303.734669][T10992] vlan3: left allmulticast mode [ 303.739654][T10992] team0: left allmulticast mode [ 303.745825][T10992] team_slave_0: left allmulticast mode [ 303.751511][T10992] team_slave_1: left allmulticast mode [ 303.758825][T11001] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1601'. [ 303.777240][T11015] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1602'. [ 303.837354][T10999] bridge0: port 3(bond0) entered blocking state [ 303.886330][T10999] bridge0: port 3(bond0) entered disabled state [ 303.914261][T10999] bond0: entered allmulticast mode [ 303.943135][T10999] bond_slave_0: entered allmulticast mode [ 303.949023][T10999] bond_slave_1: entered allmulticast mode [ 303.984684][T10999] macvlan2: entered allmulticast mode [ 303.999997][T10999] batadv0: entered allmulticast mode [ 304.013726][T10999] vlan3: entered allmulticast mode [ 304.030697][T10999] team0: entered allmulticast mode [ 304.060113][T10999] team_slave_0: entered allmulticast mode [ 304.073554][T10999] team_slave_1: entered allmulticast mode [ 304.120276][T10999] bond0: left allmulticast mode [ 304.137612][T10999] bond_slave_0: left allmulticast mode [ 304.150888][T10999] bond_slave_1: left allmulticast mode [ 304.160560][T10999] macvlan2: left allmulticast mode [ 304.167427][T10999] batadv0: left allmulticast mode [ 304.173231][T10999] vlan3: left allmulticast mode [ 304.178198][T10999] team0: left allmulticast mode [ 304.185412][T10999] team_slave_0: left allmulticast mode [ 304.194926][T10999] team_slave_1: left allmulticast mode [ 304.256817][T11028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1604'. [ 304.511572][ T1050] bridge_slave_1: left allmulticast mode [ 304.527963][ T1050] bridge_slave_1: left promiscuous mode [ 304.542788][ T1050] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.569365][T11047] netlink: 210620 bytes leftover after parsing attributes in process `syz.1.1606'. [ 304.581262][ T1050] bridge_slave_0: left allmulticast mode [ 304.591967][ T1050] bridge_slave_0: left promiscuous mode [ 304.605402][ T1050] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.190389][ T1050] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.204313][ T1050] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.230401][ T1050] bond0 (unregistering): Released all slaves [ 305.287812][T11037] syz.1.1606 (11037) used greatest stack depth: 17264 bytes left [ 305.753686][ T4625] Bluetooth: hci4: command tx timeout [ 305.789684][T11068] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 305.837434][T11068] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 305.902267][T11072] netlink: 'syz.1.1614': attribute type 1 has an invalid length. [ 306.045454][T11079] veth0_macvtap: left promiscuous mode [ 306.228543][T11080] bond5: (slave veth1_to_hsr): Enslaving as a backup interface with an up link [ 306.308638][T11088] bridge_slave_0: left allmulticast mode [ 306.342579][T11088] bridge_slave_0: left promiscuous mode [ 306.358853][T11088] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.397735][T11088] bridge_slave_1: left allmulticast mode [ 306.414373][T11088] bridge_slave_1: left promiscuous mode [ 306.432945][T11088] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.469794][T11088] bond0: (slave bond_slave_0): Releasing backup interface [ 306.487536][T11088] bond0: (slave bond_slave_1): Releasing backup interface [ 306.513607][T11088] team0: Port device team_slave_0 removed [ 306.525750][T11088] team0: Port device team_slave_1 removed [ 306.534792][T11088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.545434][T11107] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1617'. [ 306.557348][T11088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.568248][T11088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.576266][T11088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.594453][T11088] bond0: (slave netdevsim0): Releasing backup interface [ 306.661197][T11092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.675478][T11092] team0: Port device bond0 added [ 306.805492][T11110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.020421][T11115] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1620'. [ 307.062940][T11112] can: request_module (can-proto-0) failed. [ 307.070084][T11117] xt_SECMARK: invalid mode: 0 [ 307.100074][ T1050] hsr_slave_0: left promiscuous mode [ 307.126984][ T1050] hsr_slave_1: left promiscuous mode [ 307.168289][ T1050] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.185666][ T1050] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.209710][ T1050] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.230131][ T1050] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 307.318552][ T1050] veth1_macvtap: left promiscuous mode [ 307.331203][ T1050] veth0_macvtap: left promiscuous mode [ 307.375034][ T1050] veth1_vlan: left promiscuous mode [ 307.380541][ T1050] veth0_vlan: left promiscuous mode [ 307.407297][T11135] netlink: zone id is out of range [ 307.433121][T11135] netlink: zone id is out of range [ 307.501516][T11135] netlink: set zone limit has 4 unknown bytes [ 307.843265][ T4625] Bluetooth: hci4: command tx timeout [ 308.463351][ T1050] team0 (unregistering): Port device team_slave_1 removed [ 308.525921][ T1050] team0 (unregistering): Port device team_slave_0 removed [ 309.077251][T11112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1620'. [ 309.091013][T11139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1624'. [ 309.132232][T11156] netlink: 'syz.2.1626': attribute type 11 has an invalid length. [ 309.213486][T11006] chnl_net:caif_netlink_parms(): no params data found [ 309.277855][T11163] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1628'. [ 309.301272][T11163] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1628'. [ 309.317804][T11163] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1628'. [ 309.344482][T11163] netlink: 'syz.0.1628': attribute type 2 has an invalid length. [ 309.409146][T11163] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1628'. [ 309.489940][T11174] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 309.610715][T11184] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1631'. [ 309.833488][T11188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1632'. [ 309.852200][T11194] tipc: Started in network mode [ 309.868326][T11194] tipc: Node identity ffffffff, cluster identity 4711 [ 309.906577][T11194] tipc: Node number set to 4294967295 [ 309.913172][ T4625] Bluetooth: hci4: command tx timeout [ 309.934753][T11006] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.943053][T11006] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.951691][T11006] bridge_slave_0: entered allmulticast mode [ 309.959767][T11006] bridge_slave_0: entered promiscuous mode [ 309.973554][T11200] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1635'. [ 309.983480][T11006] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.983586][T11006] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.983807][T11006] bridge_slave_1: entered allmulticast mode [ 309.986858][T11006] bridge_slave_1: entered promiscuous mode [ 310.038648][T11200] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1635'. [ 310.207805][T11006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.266624][T11006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.356509][T11216] openvswitch: netlink: Missing key (keys=20040, expected=100) [ 310.590188][T11006] team0: Port device team_slave_0 added [ 310.653762][T11006] team0: Port device team_slave_1 added [ 310.846979][T11006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.892130][T11006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.937848][T11006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.965276][T11241] team0: entered promiscuous mode [ 311.005355][T11246] team_slave_0: entered allmulticast mode [ 311.068318][T11246] team0: Port device team_slave_0 removed [ 311.096833][T11006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.104753][T11006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.131383][T11006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.160001][T11240] team0: left promiscuous mode [ 311.213635][T11256] tun0: tun_chr_ioctl cmd 1074025681 [ 311.322233][T11006] hsr_slave_0: entered promiscuous mode [ 311.353707][T11006] hsr_slave_1: entered promiscuous mode [ 311.433015][T11006] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 311.446552][T11006] Cannot create hsr debugfs directory [ 311.749780][T11284] netlink: 'syz.0.1654': attribute type 22 has an invalid length. [ 311.773566][T11283] netlink: 'syz.0.1654': attribute type 22 has an invalid length. [ 311.994715][ T4625] Bluetooth: hci4: command tx timeout [ 312.269131][T11295] geneve3: entered promiscuous mode [ 312.275550][T11295] geneve3: entered allmulticast mode [ 312.331526][T11314] netlink: 'syz.1.1660': attribute type 1 has an invalid length. [ 314.053541][T11369] sctp: [Deprecated]: syz.4.1668 (pid 11369) Use of int in maxseg socket option. [ 314.053541][T11369] Use struct sctp_assoc_value instead [ 314.072841][ T4625] Bluetooth: hci4: command tx timeout [ 314.158392][T11006] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 314.226269][T11006] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 314.262385][T11006] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 314.279125][T11378] netlink: 'syz.0.1671': attribute type 7 has an invalid length. [ 314.300872][T11006] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 314.311999][T11378] __nla_validate_parse: 2 callbacks suppressed [ 314.312019][T11378] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1671'. [ 314.382291][T11376] netlink: 'syz.2.1670': attribute type 6 has an invalid length. [ 314.706798][T11398] netlink: 'syz.1.1676': attribute type 9 has an invalid length. [ 314.748774][T11398] netlink: 134660 bytes leftover after parsing attributes in process `syz.1.1676'. [ 314.833728][T11006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.904454][T11006] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.953879][ T1050] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.961139][ T1050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.974333][T11413] netlink: 'syz.0.1680': attribute type 9 has an invalid length. [ 315.002524][T11413] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1680'. [ 315.067499][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.074944][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.847370][T11457] openvswitch: netlink: Missing key (keys=40, expected=100) [ 315.850385][T11006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.064957][T11006] veth0_vlan: entered promiscuous mode [ 316.141501][T11006] veth1_vlan: entered promiscuous mode [ 316.199214][T11468] netlink: 'syz.2.1691': attribute type 11 has an invalid length. [ 316.254322][T11471] xt_policy: too many policy elements [ 316.365645][T11006] veth0_macvtap: entered promiscuous mode [ 316.398726][T11006] veth1_macvtap: entered promiscuous mode [ 316.800087][T11006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.845557][T11006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.880409][T11006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.934606][T11006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.970035][T11508] netlink: 'syz.0.1700': attribute type 11 has an invalid length. [ 316.971484][T11006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.033076][T11006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.065463][T11511] xt_NFQUEUE: number of total queues is 0 [ 317.071529][T11006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.102506][T11006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.131267][T11006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.143307][T11006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.164479][T11006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.185801][T11006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.201529][T11006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.249660][T11006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.269720][T11006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.282666][T11006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.296530][T11006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.307543][T11006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.318876][T11006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.367526][T11006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.389340][T11006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.451201][T11006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.475133][T11006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.502783][T11006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.532797][T11006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.555996][T11006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.602457][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.638149][T11528] netlink: 'syz.4.1704': attribute type 5 has an invalid length. [ 317.675170][T11006] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.695005][T11006] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.733379][T11006] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.755029][T11006] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.922510][T11543] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1709'. [ 317.960092][T11543] netlink: 'syz.1.1709': attribute type 1 has an invalid length. [ 318.288904][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.314255][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.425677][T11568] netlink: 'syz.4.1716': attribute type 29 has an invalid length. [ 318.482724][T11568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1716'. [ 318.495977][T11570] netlink: 'syz.2.1717': attribute type 1 has an invalid length. [ 318.512969][T11570] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1717'. [ 318.552526][T11574] netlink: 'syz.4.1716': attribute type 29 has an invalid length. [ 318.554563][ T1071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.582328][T11574] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1716'. [ 318.621568][ T1071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.847134][T11585] netlink: 9348 bytes leftover after parsing attributes in process `syz.2.1722'. [ 318.895143][T11585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1722'. [ 319.198587][T11604] IPVS: set_ctl: invalid protocol: 41 172.20.20.33:20002 [ 319.671994][ T5258] Bluetooth: hci3: command 0x0406 tx timeout [ 320.165071][T11657] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1735'. [ 320.210689][T11657] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 320.535133][T11676] Unsupported ieee802154 address type: 0 [ 320.871615][T11691] validate_nla: 2 callbacks suppressed [ 320.871634][T11691] netlink: 'syz.0.1740': attribute type 1 has an invalid length. [ 320.950362][T11691] 8021q: adding VLAN 0 to HW filter on device bond3 [ 321.173799][ T2552] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.384973][ T2552] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.530148][T11722] vlan4: entered promiscuous mode [ 321.543676][T11722] vlan4: entered allmulticast mode [ 321.579578][T11721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1742'. [ 322.127299][ T5258] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 322.137150][ T5258] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 322.159712][ T5258] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 322.181311][ T5258] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 322.191290][ T5258] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 322.200235][ T5258] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 322.275056][ T2552] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.300324][T11738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1747'. [ 322.311386][T11738] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1747'. [ 322.467142][ T2552] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.555832][T11753] netlink: 'syz.1.1750': attribute type 12 has an invalid length. [ 322.581960][T11746] netlink: 'syz.4.1748': attribute type 7 has an invalid length. [ 322.603449][T11753] netlink: 197276 bytes leftover after parsing attributes in process `syz.1.1750'. [ 322.887857][T11765] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1752'. [ 323.172949][ T2552] bridge_slave_1: left allmulticast mode [ 323.178869][ T2552] bridge_slave_1: left promiscuous mode [ 323.185821][ T2552] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.198257][ T2552] bridge_slave_0: left allmulticast mode [ 323.216298][ T2552] bridge_slave_0: left promiscuous mode [ 323.232986][ T2552] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.874740][T11803] xt_TPROXY: Can be used only with -p tcp or -p udp [ 324.152883][ T2552] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 324.168555][ T2552] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.185298][ T2552] bond0 (unregistering): Released all slaves [ 324.313413][ T4625] Bluetooth: hci4: command tx timeout [ 324.329445][T11803] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1760'. [ 324.947022][T11808] netlink: 576 bytes leftover after parsing attributes in process `syz.0.1761'. [ 325.056247][T11743] chnl_net:caif_netlink_parms(): no params data found [ 325.772830][ T2552] hsr_slave_0: left promiscuous mode [ 325.818086][ T2552] hsr_slave_1: left promiscuous mode [ 325.847774][ T2552] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.864952][ T2552] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.888722][T11878] netlink: 'syz.0.1772': attribute type 1 has an invalid length. [ 325.904336][ T2552] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.922067][T11878] netlink: 'syz.0.1772': attribute type 2 has an invalid length. [ 325.931590][ T2552] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.956188][T11884] netlink: 1196 bytes leftover after parsing attributes in process `syz.2.1774'. [ 326.011767][ T2552] veth1_macvtap: left promiscuous mode [ 326.019274][ T2552] veth0_macvtap: left promiscuous mode [ 326.033754][ T2552] veth1_vlan: left promiscuous mode [ 326.039585][ T2552] veth0_vlan: left promiscuous mode [ 326.401994][ T4625] Bluetooth: hci4: command tx timeout [ 326.760749][ T2552] team0 (unregistering): Port device team_slave_1 removed [ 326.809842][ T2552] team0 (unregistering): Port device team_slave_0 removed [ 327.364091][T11871] batadv0: entered promiscuous mode [ 327.369974][T11871] macsec2: entered promiscuous mode [ 327.380153][T11871] macsec2: entered allmulticast mode [ 327.386534][T11871] batadv0: entered allmulticast mode [ 327.401131][T11871] batadv0: left allmulticast mode [ 327.406784][T11871] batadv0: left promiscuous mode [ 327.660660][T11743] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.720524][T11743] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.737564][T11743] bridge_slave_0: entered allmulticast mode [ 327.764047][T11743] bridge_slave_0: entered promiscuous mode [ 327.783984][T11904] netlink: 'syz.1.1777': attribute type 1 has an invalid length. [ 327.889404][T11743] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.921022][T11743] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.963158][T11743] bridge_slave_1: entered allmulticast mode [ 327.981174][T11743] bridge_slave_1: entered promiscuous mode [ 328.141926][T11911] vlan4: entered allmulticast mode [ 328.396730][T11743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.452772][T11743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.482381][ T4625] Bluetooth: hci4: command tx timeout [ 328.549687][T11942] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1783'. [ 328.688051][T11743] team0: Port device team_slave_0 added [ 328.726056][T11743] team0: Port device team_slave_1 added [ 329.033893][T11743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.040899][T11743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.116815][T11958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 329.142705][T11743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.151943][T11962] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1788'. [ 329.164505][T11743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.171510][T11743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.262447][T11743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.320909][T11966] netlink: 'syz.0.1790': attribute type 1 has an invalid length. [ 329.352961][T11966] netlink: 9336 bytes leftover after parsing attributes in process `syz.0.1790'. [ 329.404170][T11966] netlink: 'syz.0.1790': attribute type 8 has an invalid length. [ 329.478952][T11743] hsr_slave_0: entered promiscuous mode [ 329.498684][T11743] hsr_slave_1: entered promiscuous mode [ 329.512676][T11743] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 329.526910][T11743] Cannot create hsr debugfs directory [ 329.604836][T11983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1792'. [ 330.127271][ T6029] IPVS: starting estimator thread 0... [ 330.146726][T12002] tipc: Invalid UDP bearer configuration [ 330.146779][T12002] tipc: Enabling of bearer rejected, failed to enable media [ 330.206445][T12007] bridge0: port 4(macvlan2) entered blocking state [ 330.223258][T12009] IPVS: using max 18 ests per chain, 43200 per kthread [ 330.252687][T12007] bridge0: port 4(macvlan2) entered disabled state [ 330.268726][T12007] macvlan2: entered allmulticast mode [ 330.295137][T12007] macvlan2: entered promiscuous mode [ 330.493002][T12018] syz_tun: entered promiscuous mode [ 330.552390][ T4625] Bluetooth: hci4: command tx timeout [ 330.669791][T12027] netlink: 'syz.1.1802': attribute type 4 has an invalid length. [ 330.684559][T12024] syz_tun: left promiscuous mode [ 330.694880][T12033] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1803'. [ 330.939782][T12044] vlan0: entered promiscuous mode [ 331.314777][T11743] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 331.367640][T11743] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 331.454824][T11743] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 331.520354][T11743] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 331.644804][T12074] netlink: 9412 bytes leftover after parsing attributes in process `syz.1.1816'. [ 331.934522][T11743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.969469][T12083] veth0: entered promiscuous mode [ 331.994758][T12083] ipvlan0: entered promiscuous mode [ 332.098132][T11743] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.126385][T12080] ipvlan0: left promiscuous mode [ 332.131707][T12080] veth0: left promiscuous mode [ 332.312921][ T1063] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.320145][ T1063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.340052][ T1063] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.347317][ T1063] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.460986][T12101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1825'. [ 332.586118][T11743] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 332.726228][T12123] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1828'. [ 332.794307][T12122] vxcan5: entered allmulticast mode [ 333.218073][T11743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.417537][T11743] veth0_vlan: entered promiscuous mode [ 333.450240][T11743] veth1_vlan: entered promiscuous mode [ 333.582634][T12157] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1837'. [ 333.619731][T11743] veth0_macvtap: entered promiscuous mode [ 333.670741][T11743] veth1_macvtap: entered promiscuous mode [ 333.758716][T11743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.812731][T11743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.862752][T11743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.892561][T11743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.924149][T11743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.978049][T11743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.013890][T11743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.040655][T11743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.045605][T12181] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1843'. [ 334.060354][T11743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.112919][T11743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.142658][T11743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.172672][T11743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.207631][T11743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.877013][T12179] netlink: 'syz.0.1842': attribute type 13 has an invalid length. [ 334.913767][T12179] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1842'. [ 334.933605][T12179] syz_tun: refused to change device tx_queue_len [ 334.940000][T12179] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 335.007670][T11743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.075311][T11743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.103000][T11743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.163009][T11743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.190293][T11743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.220235][T11743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.248252][T12235] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1853'. [ 335.258858][T11743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.280251][T11743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.302928][T11743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.332456][T11743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.377857][T11743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.403949][T11743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.445528][T11743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.515089][T12240] lo: entered promiscuous mode [ 335.540943][T12244] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.548830][T12244] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.651186][T11743] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.674904][T11743] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.702858][T11743] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.728448][T11743] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.785336][T12229] lo: left promiscuous mode [ 336.086277][ T1071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.106008][ T1071] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.226194][ T2552] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.253068][ T2552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.097152][T12314] netlink: 'syz.1.1872': attribute type 10 has an invalid length. [ 337.136329][T12314] team0: Device hsr_slave_0 failed to register rx_handler [ 337.437038][T12326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1874'. [ 337.485165][ T53] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.236442][ T53] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.387553][T12346] x_tables: unsorted underflow at hook 3 [ 338.468780][T12348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1881'. [ 338.485323][ T53] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.727073][ T53] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.845022][ T5258] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 338.855989][ T5258] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 338.865298][ T5258] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 338.874970][ T5258] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 338.923809][ T5258] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 338.932257][ T5258] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 338.979439][T12371] IPv6: sit2: Disabled Multicast RS [ 339.375180][T12386] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1890'. [ 339.496663][ T53] bridge_slave_1: left allmulticast mode [ 339.505909][ T53] bridge_slave_1: left promiscuous mode [ 339.517169][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.527892][ T53] bridge_slave_0: left allmulticast mode [ 339.545671][ T53] bridge_slave_0: left promiscuous mode [ 339.559177][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.614378][T12396] netlink: 452 bytes leftover after parsing attributes in process `syz.4.1892'. [ 340.290259][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 340.327704][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 340.366380][ T53] bond0 (unregistering): Released all slaves [ 340.433159][T12411] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1895'. [ 340.471401][T12365] chnl_net:caif_netlink_parms(): no params data found [ 340.670324][T12424] ebt_among: dst integrity fail: 200 [ 340.697240][T12424] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1900'. [ 340.716582][T12427] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 340.860072][T12430] netlink: 'syz.2.1901': attribute type 4 has an invalid length. [ 340.869569][T12430] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.1901'. [ 340.953245][ T5258] Bluetooth: hci4: command tx timeout [ 341.194783][T12440] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1903'. [ 341.222028][T12440] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1903'. [ 341.239291][T12440] netlink: 'syz.4.1903': attribute type 5 has an invalid length. [ 341.315033][T12440] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1903'. [ 341.434053][ T53] hsr_slave_0: left promiscuous mode [ 341.464935][ T53] hsr_slave_1: left promiscuous mode [ 341.475072][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.491005][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 341.502563][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 341.510222][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.561629][ T53] veth1_macvtap: left promiscuous mode [ 341.570845][ T53] veth0_macvtap: left promiscuous mode [ 341.577395][ T53] veth1_vlan: left promiscuous mode [ 341.583096][ T53] veth0_vlan: left promiscuous mode [ 342.453191][ T53] team0 (unregistering): Port device team_slave_1 removed [ 342.509929][ T53] team0 (unregistering): Port device team_slave_0 removed [ 343.033040][ T5258] Bluetooth: hci4: command tx timeout [ 343.097399][T12365] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.132050][T12365] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.139546][T12365] bridge_slave_0: entered allmulticast mode [ 343.184089][T12365] bridge_slave_0: entered promiscuous mode [ 343.252330][T12365] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.259518][T12365] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.296812][T12365] bridge_slave_1: entered allmulticast mode [ 343.314914][T12365] bridge_slave_1: entered promiscuous mode [ 343.346998][T12473] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1910'. [ 343.477367][T12365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.519731][T12365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.838740][T12365] team0: Port device team_slave_0 added [ 343.875397][T12365] team0: Port device team_slave_1 added [ 344.081423][T12365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.111529][T12365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.156555][T12365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.256010][T12484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1915'. [ 344.276970][T12365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.288048][T12484] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1915'. [ 344.300593][T12365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.340587][T12365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.523877][T12365] hsr_slave_0: entered promiscuous mode [ 344.564177][T12365] hsr_slave_1: entered promiscuous mode [ 344.582592][T12365] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 344.590246][T12365] Cannot create hsr debugfs directory [ 344.936360][T12495] IPVS: set_ctl: invalid protocol: 44 255.255.255.255:20000 [ 345.113201][ T5258] Bluetooth: hci4: command tx timeout [ 345.387019][T12507] dvmrp1: entered allmulticast mode [ 345.398748][T12520] xt_policy: neither incoming nor outgoing policy selected [ 345.478723][T12520] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 345.491496][T12523] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1924'. [ 345.791381][T12532] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 345.830802][T12532] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 345.849176][T12534] x_tables: duplicate entry at hook 3 [ 345.992542][T12536] netlink: 'syz.4.1929': attribute type 3 has an invalid length. [ 346.000754][T12536] netlink: 'syz.4.1929': attribute type 1 has an invalid length. [ 346.028183][T12536] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.1929'. [ 346.225004][T12365] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 346.327664][T12365] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 346.386111][T12365] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 346.431361][T12365] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 346.449736][T12559] netlink: 'syz.4.1935': attribute type 1 has an invalid length. [ 346.460032][T12559] netlink: 9348 bytes leftover after parsing attributes in process `syz.4.1935'. [ 346.503245][T12559] Bluetooth: MGMT ver 1.23 [ 346.612829][T12562] pimreg: entered allmulticast mode [ 346.770050][T12365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.787227][T12568] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1939'. [ 346.851460][T12365] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.909363][ T2552] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.916590][ T2552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.977932][ T2552] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.985178][ T2552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.109487][T12588] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1943'. [ 347.196208][ T5258] Bluetooth: hci4: command tx timeout [ 347.671518][T12365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.825870][T12365] veth0_vlan: entered promiscuous mode [ 347.856155][T12365] veth1_vlan: entered promiscuous mode [ 347.929659][T12623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1949'. [ 347.964370][T12365] veth0_macvtap: entered promiscuous mode [ 347.979880][T12365] veth1_macvtap: entered promiscuous mode [ 348.006949][T12365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.025786][T12365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.040343][T12365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.051552][T12365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.061658][T12365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.072616][T12365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.086170][T12365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.097014][T12365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.108337][T12365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.120410][T12365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.130543][T12365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.141447][T12365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.168441][T12365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.177083][T12626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1949'. [ 348.188523][T12626] netlink: 'syz.1.1949': attribute type 15 has an invalid length. [ 348.228186][T12365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.245581][T12365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.257194][T12365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.268112][T12365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.286305][T12365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.305755][T12365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.319830][ T53] wlan1: Trigger new scan to find an IBSS to join [ 348.329115][T12365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.341100][T12365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.351184][T12365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.362626][T12365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.378297][T12365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.389382][T12365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.414029][T12365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.554562][T12365] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.566219][T12365] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.591797][T12365] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.610840][T12365] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.885405][ T2513] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.910538][ T2513] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.935348][T12654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.949038][ T1050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.970630][T12649] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.985496][ T1050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.360099][T12674] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1967'. [ 349.742289][T12688] netlink: 'syz.0.1971': attribute type 1 has an invalid length. [ 349.750144][T12688] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1971'. [ 349.762714][T12688] netlink: 'syz.0.1971': attribute type 5 has an invalid length. [ 350.016259][T12703] netlink: 'syz.4.1975': attribute type 1 has an invalid length. [ 350.031991][T12703] netlink: 512 bytes leftover after parsing attributes in process `syz.4.1975'. [ 350.120924][ T25] IPVS: starting estimator thread 0... [ 350.130579][T12708] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 350.223883][T12710] IPVS: using max 17 ests per chain, 40800 per kthread [ 350.352407][T12722] bridge_slave_1: left allmulticast mode [ 350.358160][T12722] bridge_slave_1: left promiscuous mode [ 350.401701][T12722] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.447007][T12728] syzkaller1: entered promiscuous mode [ 350.462843][T12728] syzkaller1: entered allmulticast mode [ 350.484223][T12728] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993 [ 350.787522][T12746] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1987'. [ 350.920607][T12752] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1989'. [ 351.287397][ T1050] wlan1: Trigger new scan to find an IBSS to join [ 351.334677][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.083711][T12776] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 352.153367][T12776] netlink: 'syz.4.1998': attribute type 9 has an invalid length. [ 352.161613][T12776] netlink: 132304 bytes leftover after parsing attributes in process `syz.4.1998'. [ 352.220231][T12783] batadv0: entered promiscuous mode [ 352.257703][T12783] macsec2: entered promiscuous mode [ 352.278029][T12783] macsec2: entered allmulticast mode [ 352.290325][T12783] batadv0: entered allmulticast mode [ 352.467634][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.609254][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.654240][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 352.666531][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 352.670323][T12798] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 352.687642][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 352.706938][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 352.717426][ T55] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 352.728568][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 352.785922][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.123450][T12813] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2007'. [ 353.234837][T12819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2008'. [ 353.401588][T12830] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2012'. [ 353.417699][T12830] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 353.426005][ T11] bridge_slave_1: left allmulticast mode [ 353.426035][ T11] bridge_slave_1: left promiscuous mode [ 353.426251][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.453520][ T11] bridge_slave_0: left allmulticast mode [ 353.469749][ T11] bridge_slave_0: left promiscuous mode [ 353.477127][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.180334][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 354.193863][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 354.214406][ T11] bond0 (unregistering): Released all slaves [ 354.238431][T12837] netlink: 'syz.0.2014': attribute type 21 has an invalid length. [ 354.258407][T12837] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2014'. [ 354.283307][T12837] netlink: 'syz.0.2014': attribute type 4 has an invalid length. [ 354.292521][T12837] netlink: 'syz.0.2014': attribute type 5 has an invalid length. [ 354.320362][ T53] wlan1: Trigger new scan to find an IBSS to join [ 354.607233][T12796] chnl_net:caif_netlink_parms(): no params data found [ 354.623140][T12851] netlink: 'syz.1.2016': attribute type 2 has an invalid length. [ 354.640503][T12848] openvswitch: netlink: Missing key (keys=440, expected=200000) [ 354.793541][ T5258] Bluetooth: hci4: command tx timeout [ 355.082543][ T11] hsr_slave_0: left promiscuous mode [ 355.095418][ T11] hsr_slave_1: left promiscuous mode [ 355.108465][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.117799][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.128870][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 355.142714][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.244610][ T11] veth1_macvtap: left promiscuous mode [ 355.250273][ T11] veth0_macvtap: left promiscuous mode [ 355.256215][ T11] veth1_vlan: left promiscuous mode [ 355.261626][ T11] veth0_vlan: left promiscuous mode [ 355.281568][ T2513] wlan1: Creating new IBSS network, BSSID 62:ac:bf:ee:8d:25 [ 355.995785][ T30] INFO: task syz.3.449:7056 blocked for more than 143 seconds. [ 356.006348][ T30] Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 356.015482][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 356.024543][ T30] task:syz.3.449 state:D stack:26640 pid:7056 tgid:7055 ppid:6061 flags:0x00000004 [ 356.039636][ T30] Call Trace: [ 356.043113][ T30] [ 356.046073][ T30] __schedule+0x1800/0x4a60 [ 356.050944][ T30] ? __pfx___schedule+0x10/0x10 [ 356.056152][ T30] ? __pfx_lock_release+0x10/0x10 [ 356.061305][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 356.067031][ T30] ? schedule+0x90/0x320 [ 356.071322][ T30] schedule+0x14b/0x320 [ 356.075989][ T30] schedule_preempt_disabled+0x13/0x30 [ 356.081503][ T30] __mutex_lock+0x6a4/0xd70 [ 356.086252][ T30] ? __mutex_lock+0x527/0xd70 [ 356.091016][ T30] ? nfsd_nl_version_get_doit+0x181/0x790 [ 356.097132][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 356.102449][ T30] ? genlmsg_put+0x145/0x2e0 [ 356.108016][ T30] nfsd_nl_version_get_doit+0x181/0x790 [ 356.115841][ T30] ? genl_get_cmd+0x65d/0xbe0 [ 356.120581][ T30] ? __asan_memcpy+0x40/0x70 [ 356.125383][ T30] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 356.131513][ T30] ? genl_get_cmd+0x65d/0xbe0 [ 356.136361][ T30] ? dev_hard_start_xmit+0x773/0x7e0 [ 356.141692][ T30] genl_rcv_msg+0xb14/0xec0 [ 356.146400][ T30] ? mark_lock+0x9a/0x350 [ 356.150783][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 356.156111][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 356.161368][ T30] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 356.167667][ T30] ? __pfx___might_resched+0x10/0x10 [ 356.173145][ T30] netlink_rcv_skb+0x1e3/0x430 [ 356.177953][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 356.183091][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 356.188435][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 356.194197][ T30] genl_rcv+0x28/0x40 [ 356.198216][ T30] netlink_unicast+0x7f6/0x990 [ 356.203232][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 356.210089][ T30] ? __virt_addr_valid+0x183/0x530 [ 356.215436][ T30] ? __check_object_size+0x49c/0x900 [ 356.220784][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 356.227425][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 356.232546][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 356.244924][ T30] ? __import_iovec+0x536/0x820 [ 356.249823][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 356.255080][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 356.260440][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 356.266238][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 356.271562][ T30] __sock_sendmsg+0x221/0x270 [ 356.276431][ T30] ____sys_sendmsg+0x525/0x7d0 [ 356.281267][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 356.286768][ T30] __sys_sendmsg+0x2b0/0x3a0 [ 356.291423][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 356.296775][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 356.303203][ T30] ? do_syscall_64+0x100/0x230 [ 356.308002][ T30] ? do_syscall_64+0xb6/0x230 [ 356.313764][ T30] do_syscall_64+0xf3/0x230 [ 356.318815][ T30] ? clear_bhb_loop+0x35/0x90 [ 356.323658][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.329610][ T30] RIP: 0033:0x7f012b37def9 [ 356.335940][ T30] RSP: 002b:00007f012c150038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 356.349582][ T30] RAX: ffffffffffffffda RBX: 00007f012b535f80 RCX: 00007f012b37def9 [ 356.357781][ T30] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 356.366055][ T30] RBP: 00007f012b3f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 356.374428][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 356.382507][ T30] R13: 0000000000000000 R14: 00007f012b535f80 R15: 00007ffd1e61f3b8 [ 356.390542][ T30] [ 356.409501][ T30] [ 356.409501][ T30] Showing all locks held in the system: [ 356.418167][ T30] 4 locks held by kworker/u8:0/11: [ 356.423764][ T30] 1 lock held by khungtaskd/30: [ 356.428649][ T30] #0: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 356.438713][ T30] 2 locks held by kworker/u8:5/1050: [ 356.445874][ T30] 5 locks held by kworker/u8:7/1071: [ 356.451211][ T30] 3 locks held by kworker/u8:10/2513: [ 356.456707][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 356.468727][ T30] #1: ffffc90009437d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 356.479878][ T30] #2: ffffffff8fc88588 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 356.489122][ T30] 2 locks held by getty/4990: [ 356.494030][ T30] #0: ffff88803104c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 356.504141][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 356.519929][ T30] 2 locks held by syz.2.307/6585: [ 356.525097][ T30] #0: ffffffff8fcee2b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 356.533626][ T30] #1: ffffffff8ec0b768 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_listener_set_doit+0x12d/0x1a90 [ 356.544060][ T30] 2 locks held by syz.3.449/7056: [ 356.549108][ T30] #0: ffffffff8fcee2b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 356.566392][ T30] #1: ffffffff8ec0b768 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_version_get_doit+0x181/0x790 [ 356.577003][ T30] 1 lock held by syz-executor/12796: [ 356.582502][ T30] #0: ffffffff8fc88588 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 356.592134][ T30] 2 locks held by syz.0.2025/12878: [ 356.597412][ T30] #0: ffffffff8fcee2b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 356.605696][ T30] #1: ffffffff8fc88588 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5f/0x8b0 [ 356.615238][ T30] 1 lock held by syz.0.2025/12885: [ 356.621486][ T30] #0: ffffffff8fc88588 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 356.640533][ T30] 1 lock held by syz.4.2027/12895: [ 356.647400][ T30] #0: ffffffff8fc88588 (rtnl_mutex){+.+.}-{3:3}, at: do_ipv6_setsockopt+0x9e4/0x3630 [ 356.657357][ T30] 1 lock held by syz.4.2027/12897: [ 356.664613][ T30] #0: ffffffff8fc88588 (rtnl_mutex){+.+.}-{3:3}, at: do_ipv6_setsockopt+0x9e4/0x3630 [ 356.674327][ T30] 1 lock held by syz.2.2026/12886: [ 356.679453][ T30] #0: ffffffff8fc88588 (rtnl_mutex){+.+.}-{3:3}, at: do_ip_setsockopt+0x127d/0x3cd0 [ 356.689137][ T30] 1 lock held by syz.1.2028/12900: [ 356.694394][ T30] #0: ffffffff8fc88588 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 356.722472][ T30] [ 356.724895][ T30] ============================================= [ 356.724895][ T30] [ 356.742761][ T30] NMI backtrace for cpu 1 [ 356.747178][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 356.757363][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 356.767430][ T30] Call Trace: [ 356.770729][ T30] [ 356.773702][ T30] dump_stack_lvl+0x241/0x360 [ 356.778431][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 356.783650][ T30] ? __pfx__printk+0x10/0x10 [ 356.788271][ T30] ? vprintk_emit+0x667/0x7c0 [ 356.792968][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 356.798034][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 356.803013][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 356.808505][ T30] ? _printk+0xd5/0x120 [ 356.812683][ T30] ? __pfx__printk+0x10/0x10 [ 356.817292][ T30] ? __wake_up_klogd+0xcc/0x110 [ 356.822248][ T30] ? __pfx__printk+0x10/0x10 [ 356.826865][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 356.831909][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 356.837908][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 356.843931][ T30] watchdog+0xff4/0x1040 [ 356.848190][ T30] ? watchdog+0x1ea/0x1040 [ 356.852628][ T30] ? __pfx_watchdog+0x10/0x10 [ 356.857403][ T30] kthread+0x2f0/0x390 [ 356.861484][ T30] ? __pfx_watchdog+0x10/0x10 [ 356.866212][ T30] ? __pfx_kthread+0x10/0x10 [ 356.870817][ T30] ret_from_fork+0x4b/0x80 [ 356.875247][ T30] ? __pfx_kthread+0x10/0x10 [ 356.879856][ T30] ret_from_fork_asm+0x1a/0x30 [ 356.884663][ T30] [ 356.890431][ T30] Sending NMI from CPU 1 to CPUs 0: [ 356.896933][ C0] NMI backtrace for cpu 0 [ 356.896946][ C0] CPU: 0 UID: 0 PID: 53 Comm: kworker/u8:3 Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 356.896968][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 356.896979][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 356.897006][ C0] RIP: 0010:__phys_addr+0x4/0x170 [ 356.897025][ C0] Code: 02 ca 50 00 e9 1b ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <41> 57 41 56 53 49 89 fe e8 cf c9 50 00 48 bf ff ff ff 7f ff ff ff [ 356.897046][ C0] RSP: 0018:ffffc90000bd6dd0 EFLAGS: 00000292 [ 356.897061][ C0] RAX: 0000000000000001 RBX: ffff888022715800 RCX: ffff88801bb70000 [ 356.897074][ C0] RDX: 0000000000000000 RSI: ffffffff8c608fa0 RDI: ffff888022715800 [ 356.897087][ C0] RBP: ffffc90000bd6f50 R08: ffffffff8b257938 R09: 1ffff110053e261b [ 356.897100][ C0] R10: dffffc0000000000 R11: ffffed10053e261c R12: ffff888029f13108 [ 356.897113][ C0] R13: dffffc0000000000 R14: ffffffff8b257a72 R15: ffff88805d6c8700 [ 356.897126][ C0] FS: 0000000000000000(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 356.897142][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 356.897154][ C0] CR2: 0000000021000000 CR3: 0000000079440000 CR4: 00000000003506f0 [ 356.897169][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 356.897180][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 356.897191][ C0] Call Trace: [ 356.897197][ C0] [ 356.897205][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 356.897226][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 356.897253][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 356.897273][ C0] ? nmi_handle+0x2a/0x5a0 [ 356.897299][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 356.897321][ C0] ? nmi_handle+0x14f/0x5a0 [ 356.897338][ C0] ? nmi_handle+0x2a/0x5a0 [ 356.897356][ C0] ? __phys_addr+0x4/0x170 [ 356.897371][ C0] ? default_do_nmi+0x63/0x160 [ 356.897393][ C0] ? exc_nmi+0x123/0x1f0 [ 356.897413][ C0] ? end_repeat_nmi+0xf/0x53 [ 356.897433][ C0] ? ieee80211_inform_bss+0xbb2/0x1080 [ 356.897459][ C0] ? ieee80211_inform_bss+0xa78/0x1080 [ 356.897483][ C0] ? __phys_addr+0x4/0x170 [ 356.897499][ C0] ? __phys_addr+0x4/0x170 [ 356.897516][ C0] ? __phys_addr+0x4/0x170 [ 356.897532][ C0] [ 356.897538][ C0] [ 356.897543][ C0] kfree+0x71/0x360 [ 356.897563][ C0] ieee80211_inform_bss+0xbb2/0x1080 [ 356.897593][ C0] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 356.897619][ C0] ? cfg80211_inform_single_bss_data+0xb2d/0x2090 [ 356.897646][ C0] ? cfg80211_inform_single_bss_data+0xb2d/0x2090 [ 356.897673][ C0] ? cfg80211_inform_single_bss_data+0xd6e/0x2090 [ 356.897701][ C0] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 356.897725][ C0] cfg80211_inform_single_bss_data+0xec1/0x2090 [ 356.897761][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 356.897821][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 356.897863][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 356.897888][ C0] ? cfg80211_inform_bss_data+0x3b6/0x5e70 [ 356.897923][ C0] cfg80211_inform_bss_data+0x3ce/0x5e70 [ 356.897968][ C0] ? __pfx_validate_chain+0x10/0x10 [ 356.898000][ C0] ? __pfx_validate_chain+0x10/0x10 [ 356.898020][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 356.898053][ C0] ? mark_lock+0x9a/0x350 [ 356.898093][ C0] ? __lock_acquire+0x137a/0x2040 [ 356.898135][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 356.898158][ C0] ? ieee80211_bss_info_update+0x3d9/0xbc0 [ 356.898184][ C0] cfg80211_inform_bss_frame_data+0x3b8/0x720 [ 356.898218][ C0] ? ieee80211_bss_info_update+0x3d9/0xbc0 [ 356.898241][ C0] ieee80211_bss_info_update+0x8a7/0xbc0 [ 356.898267][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 356.898291][ C0] ? __pfx_lock_release+0x10/0x10 [ 356.898324][ C0] ieee80211_ibss_rx_queued_mgmt+0x1962/0x2d70 [ 356.898358][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xf7e/0x2d70 [ 356.898380][ C0] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 356.898409][ C0] ? mark_lock+0x9a/0x350 [ 356.898436][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 356.898462][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 356.898486][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 356.898517][ C0] ieee80211_iface_work+0x8a5/0xf20 [ 356.898547][ C0] cfg80211_wiphy_work+0x2db/0x490 [ 356.898569][ C0] ? process_scheduled_works+0x945/0x1830 [ 356.898591][ C0] process_scheduled_works+0xa2c/0x1830 [ 356.898631][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 356.898660][ C0] ? assign_work+0x364/0x3d0 [ 356.898685][ C0] worker_thread+0x870/0xd30 [ 356.898718][ C0] ? __kthread_parkme+0x169/0x1d0 [ 356.898744][ C0] ? __pfx_worker_thread+0x10/0x10 [ 356.898767][ C0] kthread+0x2f0/0x390 [ 356.898793][ C0] ? __pfx_worker_thread+0x10/0x10 [ 356.898815][ C0] ? __pfx_kthread+0x10/0x10 [ 356.898846][ C0] ret_from_fork+0x4b/0x80 [ 356.898870][ C0] ? __pfx_kthread+0x10/0x10 [ 356.898895][ C0] ret_from_fork_asm+0x1a/0x30 [ 356.898929][ C0] [ 356.902480][ T5258] Bluetooth: hci4: command tx timeout [ 356.937064][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 356.937103][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 356.937141][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 356.937154][ T30] Call Trace: [ 356.937164][ T30] [ 356.937175][ T30] dump_stack_lvl+0x241/0x360 [ 356.937218][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 356.937251][ T30] ? __pfx__printk+0x10/0x10 [ 356.937279][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 356.937318][ T30] ? vscnprintf+0x5d/0x90 [ 356.937345][ T30] panic+0x349/0x860 [ 356.937377][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 356.937405][ T30] ? __pfx_panic+0x10/0x10 [ 356.937432][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 356.937457][ T30] ? __irq_work_queue_local+0x137/0x410 [ 356.937488][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 356.937511][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 356.937536][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 356.937564][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 356.937593][ T30] watchdog+0x1033/0x1040 [ 356.937625][ T30] ? watchdog+0x1ea/0x1040 [ 356.937662][ T30] ? __pfx_watchdog+0x10/0x10 [ 356.937692][ T30] kthread+0x2f0/0x390 [ 356.937723][ T30] ? __pfx_watchdog+0x10/0x10 [ 356.937753][ T30] ? __pfx_kthread+0x10/0x10 [ 356.937786][ T30] ret_from_fork+0x4b/0x80 [ 356.937814][ T30] ? __pfx_kthread+0x10/0x10 [ 356.937853][ T30] ret_from_fork_asm+0x1a/0x30 [ 356.937898][ T30] [ 356.941939][ T30] Kernel Offset: disabled