last executing test programs: 13.634409612s ago: executing program 2 (id=2864): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) sendmsg$inet(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000006c0)="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", 0x18f}, {&(0x7f0000000340)="5fdbd61342a1560054f74cee82024cacdf79b6be94f99a7aea5b7678644cc1ef33880d4a59cad1fd0852b05064b02335eb6064c24f1ad325e0325bc473c3aeaf6709e5227bca1f7ba283d381d4f64e34fa77c5cac5d0bcf72850aaa9ea7f9144a008ae41f51262011dd0a3eb6eaf00da010b18a79f6917d0c25efbf1c56feb59cbf4683c026aa7aa1d65bea9ba31000000", 0x91}, {&(0x7f0000000940)="1165b65dc1f84146f03562d6913624a2b6d8ec92d3b85d62c12f159214de3618d4dc028c1b6992dc66459f58c8b8b56fe04e31cdde47a1821cf3bddee1076115f9afb5391f0f33219347a02ffb4109374ae3528f700cf1963b704fd24e27b70dd82d3ef5fd0d6c7e9512db1aff64b84d0fe3cce36da98fcc74949374701d31a1418b3fb186b4fc5f661870be567805e16f89688c5b75b19b2081c8026c57eb5eefe65efbb7e34c39a7651531bd31e4bcb66636f5412f2f97dd0f6eba05988d5dbfef41b1382b757f050000002e48cfb226168a09933e5851fcf209043fdb938b7d7351e7f065d41ec4fa4090a59490776f19d579833473c5faaf30c40d0000000000000000", 0x105}, {&(0x7f0000000500)="0f1d547dfd011eee5ee96e9f1947841b6080ffadffd0f2ba53588a463cb08890097ea28302b894feb895cebb0e72a94c681955c3a39a1e5ebde1638c8f408cbb197ede5a6779e4732b685db9abb1184d1e4bf53bb5eafcc7d265002aeead4852d157cfb83a10f4d80f000000000000a7f702c9424df1ffbd0387c5e7777aa1bf37cbffb95d0daf", 0x87}, {&(0x7f0000000d40)="7a60507430110d45fba18e434184c81c9a10404af273af02537863cd4f9b455ba771ca5222198ae07333ef0d2beff796d017427138340fc2b1528610600c9b212beee90a7941df2f1ec90efc69156c30892b39b7b43f9ddf11e5949fede6ff979b7825229a356cc43023e2eb30577ca2725e6c1ce2e4557d4150336ac279203360ee37b013478d551d95f67dce3d0fa468aed602dc9f641bbacbeac908a860f4d02f22946a5a51f0bd6896b5fb16e75d3437356e3e8307aad07b767649101165270eb5c85ef394c82bc6cd3d2c5954f370361578736b68b2d8d89106b8798d0c28ddc5073e684f7eac3bf100b23c33b516a65aa43705cc1ee3eecea26ef77ec1cc614d8ff2c0e4deba0c70855cfcb08879e6a2928af4018abaeae2ba1e756b250e139ef07219eab5d412f7db8c6dea869cd9fb913f649ec5bd2e019227d678fb8cfdb9d7f5049b9bc9c1b444d76eab7ee99e2505c8fb7aad23b61ee7b04166561e37238ae844cf9ee6c948d485f4f738854f3116a97f531ad67cc4d6fb366dab973b77f54866b1a60fd91d61b86bf684be5392b00f3431f66432865ef46c34fcacfb30a9c685369cf52ccbdc1cecabfc12025b01f0b0236f9babd62f7535c2be61e92b580c061a3ce841eddb1b146c02556c92c5", 0x1d4}, {&(0x7f00000020c0)="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", 0x981}, {&(0x7f00000001c0)="331138efd776a2a48cb8a3c951368f3d1eb3e6588cf55aa8981e709006a06000160b388c1145c4debe57aa46e626e93fb440", 0x32}, {&(0x7f0000002a80)="5614f39e44b6b12adcfa066f3459516b6b6185f770eda23ae23142769e2ad988eb6c9de9448509f51a1a95d55f43e583651bf858dac80b55bf189e0e67bcd592f6b4c4134152ee46e4a25c4358c2fe47463d90148e7a8cf36ad1fca0f1ecf1df0996022c6c5b38aa187c170c700fc8da3044f66d9f0d90a63cb207b98c9fec608c933374027748730ed1cf7a20641bd6d6d3049fc5f841a780e4313c95c2ebabde71f073831e52a559d23b9d2b97ea0a67b827366682c1afd34206170a6d", 0xbe}], 0x8}, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) recvfrom$inet6(r1, &(0x7f0000000100)=""/19, 0xff1, 0x40, 0x0, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, r2, 0x1, 0x78bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x2f, 0xb, 0x5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4) 13.39046918s ago: executing program 2 (id=2866): sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x200020000000}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000000c00)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x30, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @private2={0xfc, 0x2, '\x00', 0x1}, [{0xe, 0x1, "2025b07f3c58"}]}}}}}}, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x262) syz_80211_inject_frame(0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x13) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@bridge_dellink={0x2c, 0x13, 0x5, 0x0, 0xfffffffe, {0x7, 0x0, 0x0, r3, 0x3000}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x8}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xffffffff}, 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/781], 0x31a) 11.908195064s ago: executing program 2 (id=2873): r0 = socket$inet6(0xa, 0x3, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e23, 0x0, @mcast2, 0x80000001}, @in={0x2, 0x4e22, @empty}], 0x3c) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000000c0)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e24, @remote}}}, &(0x7f0000000200)=0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={r1, 0x3c, &(0x7f0000000240)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e20, 0x0, @remote, 0xfffff800}, @in={0x2, 0x67d3, @private=0xa010101}]}, &(0x7f00000002c0)=0x10) r3 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e21, 0x2, @local, 0xfffffffe}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e22, 0xb3, @private0, 0x400}}, 0x0, 0x39ff, 0x626f3f0f, 0x9, 0x28, 0x9, 0x7}, 0x9c) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000400), 0x8) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000440)={r0, 0xe6, 0x232880000000, 0x8000000000000000}) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x0, 0x4, 0x2752, 0x840, r4, 0xbb, '\x00', 0x0, r5, 0x0, 0x1, 0x5, 0x4}, 0x50) getsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000000500), &(0x7f0000000540)=0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) bind$inet(r4, &(0x7f0000000580)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) getsockopt$inet6_int(r4, 0x29, 0xa, &(0x7f0000000600), &(0x7f0000000640)=0x4) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r6) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f00000008c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000880)={&(0x7f0000000700)={0x154, r7, 0x4, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x78, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "7abf55436bedd7a6"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "8fb66aaaac633948"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="521101bac7c0f3dbcb1ca53c3654da9aeeff4590c6e4d8d132b15cbd987516a5"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="6ae2a319b677a74941c13aa2bd01b160937dc9f67e3555ce"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xa6}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "0e8be9b165aadcc8"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}]}, @NL80211_ATTR_REKEY_DATA={0xc8, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b8367ade7669f93e92eddd3f214054ca"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "41a66ef949c6b22b"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="aabd365b6110775661ad9bb68dbba1e228ce48bd2e4a9af5d07ec4e15b8510c7"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="c885a8838fff8451672a00a922f4730c"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="31dc590c1873621c976f9f6f821839c17ec3fa4d809b4cc790026b7251b64e77"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x100}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xe120}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="4f1cd07f5a2228d764f09168f674aa0f"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="09f35308501167bc97bb05545595a063d475527e0d0ed2a33b12bdfb11494319"}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x4c880}, 0x40010) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000900)=""/216, &(0x7f0000000a00)=0xd8) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), r4) sendmsg$MPTCP_PM_CMD_REMOVE(r6, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r8, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x80}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x10001}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xfe}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000800) ioctl$SIOCAX25GETINFOOLD(r5, 0x89e9, &(0x7f0000000bc0)) sendto$inet6(r0, &(0x7f0000000c00)="2f4e9bbed85c35c49d128956638a31b1c77a48f060a0cbd0bd0002a9dcfbe6337f8a8275930dc4797d509f4c052486cc6c30a047f55741110a19fe8b373c6cc027d5ab4e07c67db10396e7230201477de8e447619253c1c7c942a4709f0aba975a08d3ecf8017014371909447e5cd2f5d70207d86e", 0x75, 0x4044080, &(0x7f0000000c80)={0xa, 0x4e22, 0x0, @loopback, 0x6}, 0x1c) shutdown(r0, 0x1) recvmsg$unix(r5, &(0x7f0000001640)={&(0x7f0000000cc0), 0x6e, &(0x7f0000001480)=[{&(0x7f0000000d40)}, {&(0x7f0000000d80)=""/255, 0xff}, {&(0x7f0000000e80)=""/203, 0xcb}, {&(0x7f0000000f80)=""/157, 0x9d}, {&(0x7f0000001040)=""/13, 0xd}, {&(0x7f0000001080)=""/199, 0xc7}, {&(0x7f0000001180)=""/164, 0xa4}, {&(0x7f0000001240)=""/58, 0x3a}, {&(0x7f0000001280)=""/250, 0xfa}, {&(0x7f0000001380)=""/235, 0xeb}], 0xa, &(0x7f0000001540)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd8}, 0x40000062) ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, &(0x7f0000001680)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000001900)={r9}, 0x8) syz_genetlink_get_family_id$tipc2(&(0x7f00000018c0), r10) 11.823850446s ago: executing program 2 (id=2875): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x400000000000003, 0x0, 0x9, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_x_sa2={0x2, 0x13, 0x3}]}, 0x80}}, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) (async, rerun: 32) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async, rerun: 32) sendmsg$rds(r1, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000002c0)=[{&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/91, 0x5b}], 0x2}}], 0x48}, 0x0) 8.473569155s ago: executing program 4 (id=2903): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000140)={'filter\x00', 0x0, 0x4, 0x0, [0xf, 0x6, 0x1, 0x6, 0x9, 0xb7], 0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x78) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x2c, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}]}]}, 0x46}}, 0x4004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newtaction={0xec, 0x30, 0x51b, 0x0, 0x0, {}, [{0xd8, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x3}}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x78, 0x4, 0x0, 0x0, {{0x7}, {0x50, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0xc}, @TCA_CT_MARK_MASK={0x8}, @TCA_CT_PARMS={0x18, 0x1, {0x4, 0xfffffffa, 0x4, 0x8}}, @TCA_CT_MARK={0x8, 0x5, 0xc}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x4}, @TCA_CT_LABELS={0x14, 0x7, "fe74378f8a72eec8fedd50cb2b6972f8"}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xec}}, 0x0) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e0001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) recvmmsg(r1, &(0x7f0000002ec0)=[{{&(0x7f0000000240)=@hci, 0x80, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000180)=""/35, 0x23}], 0x2, &(0x7f0000000400)=""/20, 0x14}, 0x6}, {{&(0x7f0000000440)=@qipcrtr, 0x80, &(0x7f0000000640)=[{&(0x7f0000000540)=""/251, 0xfb}], 0x1, &(0x7f0000000680)=""/29, 0x1d}, 0xfffffffa}, {{&(0x7f00000006c0)=@sco, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000740)=""/139, 0x8b}, {&(0x7f0000000800)=""/248, 0xf8}, {&(0x7f0000000900)=""/186, 0xba}], 0x3, &(0x7f0000000a00)=""/143, 0x8f}}, {{&(0x7f0000000ac0)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000b40)=""/110, 0x6e}, {&(0x7f0000000bc0)=""/7, 0x7}, {&(0x7f0000000c00)=""/169, 0xa9}, {&(0x7f0000000cc0)=""/151, 0x97}, {&(0x7f0000000d80)=""/122, 0x7a}, {&(0x7f0000000e00)=""/145, 0x91}, {&(0x7f0000000ec0)=""/23, 0x17}, {&(0x7f0000000f00)=""/177, 0xb1}], 0x8}, 0x9}, {{&(0x7f0000001040)=@caif=@util, 0x80, &(0x7f00000010c0), 0x0, &(0x7f0000001280)=""/4096, 0x1000}, 0x2}, {{&(0x7f0000001100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, 0x80, &(0x7f0000002280)=[{&(0x7f0000001180)=""/132, 0x84}], 0x1, &(0x7f00000022c0)=""/4, 0x4}, 0x1}, {{&(0x7f0000002300)=@nfc_llcp, 0x80, &(0x7f0000002400)=[{&(0x7f0000002380)=""/26, 0x1a}, {&(0x7f00000023c0)=""/59, 0x3b}], 0x2}, 0x8}, {{&(0x7f0000002440)=@qipcrtr, 0x80, &(0x7f0000002640)=[{&(0x7f00000024c0)=""/127, 0x7f}, {&(0x7f0000002540)=""/115, 0x73}, {&(0x7f00000025c0)=""/118, 0x76}], 0x3}, 0x1}, {{&(0x7f0000002680)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x80, &(0x7f0000002840)=[{&(0x7f0000002700)=""/226, 0xe2}, {&(0x7f0000002800)=""/19, 0x13}], 0x2}, 0x6}, {{&(0x7f0000002880)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f0000002e40)=[{&(0x7f0000002900)=""/93, 0x5d}, {&(0x7f0000002980)=""/196, 0xc4}, {&(0x7f0000002a80)=""/213, 0xd5}, {&(0x7f0000002b80)=""/233, 0xe9}, {&(0x7f0000002c80)=""/42, 0x2a}, {&(0x7f0000002cc0)=""/125, 0x7d}, {&(0x7f0000002d40)=""/201, 0xc9}], 0x7}, 0x8}], 0xa, 0x12102, &(0x7f0000003140)={0x0, 0x989680}) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x88d7}, 0x0) 7.418789057s ago: executing program 4 (id=2909): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$inet6(0xa, 0x0, 0x17) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x6, 0x1, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x80) accept$alg(r1, 0x0, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x80}}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r3, 0x29, 0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b040000000000000000020000000900010073797a30000000000900020073797a32000000002800dc5b57b9266b308b94b41a2a8b44cb9f0480240001800b0000046578c050bef89d319ce8028005000200120000000800064000000001140000001100010000000000000000000000000ad49180c43437f5f22a23de171243719ca8219e46313ebe978c0f0df16accc006da78b0befafcf1d971bde22b873eb038b232c539b5db193918beefd2e0bfcb0be2ffb5b2c86b8dc623880926ed8bcba1d87ce9206538031fc0495f0baefbe8f5e8c4e56043b3a3"], 0x7c}}, 0x0) 6.882598178s ago: executing program 4 (id=2913): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$kcm(0x11, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)={0x1d8, r1, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_WME={0x1c, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x7}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x3}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xb}]}, @NL80211_ATTR_STA_WME={0x44, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x9}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xc}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x8}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xf}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x4}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xb}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x6}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_STA_WME={0x2c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x7}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x67}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x5}]}, @NL80211_ATTR_STA_WME={0x14, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x51}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x7f}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x103, 0xac, "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"}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xdc02b285834fdce7}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x48001}, 0x1) setsockopt$sock_attach_bpf(r4, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f0000000340)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0xf}, 0x56, 0x0}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x1c, r1, 0x221, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x20000890) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$kcm(0x11, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_GET_STATION(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)={0x1d8, r1, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_WME={0x1c, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x7}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x3}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xb}]}, @NL80211_ATTR_STA_WME={0x44, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x9}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xc}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x8}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xf}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x4}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xb}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x6}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_STA_WME={0x2c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x7}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x67}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x5}]}, @NL80211_ATTR_STA_WME={0x14, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x51}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x7f}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x103, 0xac, "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"}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xdc02b285834fdce7}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x48001}, 0x1) (async) setsockopt$sock_attach_bpf(r4, 0x107, 0x14, &(0x7f0000000000), 0x4) (async) sendmsg$kcm(r4, &(0x7f0000000340)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0xf}, 0x56, 0x0}, 0x0) (async) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x1c, r1, 0x221, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x20000890) (async) 6.615905035s ago: executing program 4 (id=2917): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0x0, 0x0, 0x0, 0x2}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1202, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r4, r4, 0x2f}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f008004d", 0x0, 0xdfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = openat$cgroup_devices(r1, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b0001006970766c616e00000c000280060001000200000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 4.635211989s ago: executing program 4 (id=2922): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') unshare(0x6a040000) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) unshare(0x40000080) 3.714213407s ago: executing program 0 (id=2933): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xf, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1500000078000100000000000000000007"], 0x18}, 0x1, 0x5502000000000000}, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="380000002d000100000000000000000004000080240011802fe5afbf24fbcccc554cd9761e79b8dad8a2018544a3f855448c77987d9d7a52"], 0x38}], 0x1}, 0x0) 3.636367311s ago: executing program 3 (id=2934): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x9) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x2, @loopback, 0x4}, 0x1c) shutdown(r0, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r4}, 0x18) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) r6 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'ip6_vti0\x00', 0x0}) sendto$packet(r6, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x11, 0xd, r7, 0x1, 0xda, 0x6, @remote}, 0x14) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20004000) 3.479844301s ago: executing program 3 (id=2936): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0005000140020203600e4109000800ac00060311000000160012000a00fc000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_IFNAME={0x14}]}, 0x50}}, 0x4000) 3.308857106s ago: executing program 0 (id=2939): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet(0x2, 0x80001, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r2, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) bind$inet(r1, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) syz_open_procfs$namespace(r3, &(0x7f00000000c0)='ns/user\x00') unshare(0x6a040000) r4 = socket(0x8, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2c, &(0x7f0000000000)=0x3, 0x4) ioctl$sock_netrom_SIOCADDRT(r4, 0x6180, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_procfs$namespace(0x0, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) sendmsg$TIPC_NL_NET_SET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[], 0x30}}, 0x20088004) 3.148237062s ago: executing program 3 (id=2940): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001ac0)=@delchain={0x14c, 0x65, 0x2, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xa, 0xa}, {0xfff2, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x110, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0xfff1}}, @TCA_BPF_ACT={0xe8, 0x1, [@m_tunnel_key={0xe4, 0x16, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}]}, {0xac, 0x6, "87ac5f7568c2531e1554268c89b9e9957c61c9dbf4f194243b04b0d6a8e37743b6406b52cb73f951c3bfc4155c3813cd430979509fcd6c725e880deb59913fc41d61c991074e6cf67145dd5b349266c6cba5f5cb5bf872ad7b974353b3695155f488857809d18a0e999eaf8196d285bb92e5630c2a15fbe263af698cc5a67f7fbc8fb955236a220d3489b226c3c805590bb82d8ce6ac1af844daa7f359fd699b468f8e301cf2c047"}, {0xc}, {0xc, 0x8, {0x2, 0x4099133fb115446b}}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8}, @TCA_BPF_FD={0x8}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000006c0)=[{{&(0x7f0000000000)={0xa, 0x40, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)="18", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0xfffffffb, @remote, 0x5}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)='.', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000009c0)={0x0, @in6={{0xa, 0x4e23, 0xab9, @local, 0x8}}}, &(0x7f0000000100)=0x84) r1 = socket(0x10, 0x803, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req={0x1ff, 0x8, 0x6, 0x2}, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r4) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x939e02dc105d5baa, 0x2}, {0xb}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r7, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f00000052c0)=""/232, 0xe8}, {&(0x7f0000003080)=""/4093, 0xffd}, {&(0x7f0000000540)=""/212, 0xd4}, {&(0x7f0000000300)=""/10, 0xa}, {&(0x7f0000000380)=""/179, 0xb3}], 0x6}, 0x8}], 0x1, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x20040051) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000240)={@void, @void, @eth={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x1, 0x11, 0x28, 0x65, 0x0, 0x2, 0x6, 0x0, @multicast1, @multicast2}, {{0x4e20, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x800, 0x0, 0x8}}}}}}}, 0x36) write$tun(r4, &(0x7f0000000a80)={@val={0x0, 0x86dd}, @val={0x3, 0x4, 0x9a, 0x7f, 0x211, 0xfff9}, @llc={@llc={0xbc, 0x4, "82", "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"}}}, 0x1011) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) 2.771239825s ago: executing program 3 (id=2944): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, 0x0, &(0x7f0000000000)=0xfffffffffffffea1) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r2 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r2, 0x6180, 0x0) write(r1, &(0x7f00000004c0)="be", 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) socket$netlink(0x10, 0x3, 0xf) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x408100, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r3, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) socket$nl_generic(0x10, 0x3, 0x10) close(0x3) close(0x4) 1.172524886s ago: executing program 1 (id=2949): r0 = socket$inet(0x2, 0x80001, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r2, 0x8954, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @random="996386d83c53"}, 0x0, {0x2, 0x4e21, @private}, 'lo\x00'}) 1.026217127s ago: executing program 1 (id=2950): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0b062bbd70000000000030000000050036000000000005003500040000000a0001007770616e30000000050033000d000000804deddb666f620ed4b0e0572cc24062597a8144fdbc34651584c1ac91aed1132d6922858bf34faf88d4a376d12f85b1cc6964c364086bd55000b988c1bc8b6f07d69045bffae6fa4930ef734e9168d7bdaca01ee91e733700fe01aaff3e06e7a3f2e9a66ba05a3a3c6b"], 0x38}}, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000040)=ANY=[@ANYBLOB="01"], 0x48}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xf, 0x3, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES8=r1, @ANYRES8=r1], 0x9) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r9, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000400)=""/203, 0xcb}, {&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000000840)=""/191, 0xbf}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x810) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r15, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r14, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r14) pipe(0x0) r16 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, &(0x7f0000000240), &(0x7f0000000380)=r16}, 0x20) 929.013351ms ago: executing program 0 (id=2951): r0 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x0, "d176"}}, @common=@unspec=@state={{0x28}, {0xfffffffd}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @private2, [], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) r1 = socket(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r1) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x48014}, 0x20004000) listen(r0, 0x9) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x4a301, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e21, 0x10001, @remote, 0x2}}, 0x8, 0xf5, 0x1, 0x0, 0x8003}, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, 0x0, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, 0x0) close(0x3) ioctl$TUNSETTXFILTER(r2, 0x400454d1, 0x0) 872.605643ms ago: executing program 4 (id=2952): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x18, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) 839.540144ms ago: executing program 1 (id=2953): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x3, 0x0, 0x0, 0x1}, {0x4, 0x0, 0x1}}], 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffe6, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x20, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x0, 0x7b}}}, @TCA_EM_META_RVALUE={0x6, 0x3, [@TCF_META_TYPE_VAR='~3']}]}}]}]}]}}]}, 0x74}}, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x6c, r5, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xdc1}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2000d004}, 0x8008) bind$can_raw(r0, &(0x7f0000000040), 0x10) close(r0) 829.868014ms ago: executing program 2 (id=2878): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f00000012c0)=""/4109, 0x100d) sendmmsg$alg(r1, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000002540)=[{&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000000c0)="4789d3aefc1a4d0334", 0x9}, {&(0x7f0000002600)="782ee097da", 0x5}], 0x3, 0x0, 0x0, 0x20000000}], 0x1, 0x4000080) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0xc01, 0x3, 0x480, 0x2e8, 0x5002004a, 0x6, 0x2e8, 0x3, 0x3e8, 0x3c8, 0x3c8, 0x3e8, 0x3c8, 0x7fffffe, 0x0, {[{{@ip={@dev, @broadcast=0xfeffffff, 0x0, 0x0, 'hsr0\x00', 'bridge0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x0, 0x3fa}, [@common=@unspec=@bpf1={{0x230}, @fd}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@inet=@udp={{0x30}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4e0) r4 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 595.891394ms ago: executing program 0 (id=2955): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r1, 0x84, 0x7f, 0x0, &(0x7f0000001180)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0xf, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0xfffffffe}, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e22, 0x3, @loopback, 0xfffffff7}, @in6={0xa, 0x4e20, 0x67, @loopback, 0x1}, @in6={0xa, 0x4e24, 0x9, @mcast1, 0x7fff}, @in={0x2, 0x4e24, @local}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x280, @local, 0x5}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e24, @remote}], 0xdc) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_getaddr={0x18, 0x16, 0x3c2be10bca706f15, 0x0, 0x0, {0xa, 0x78}}, 0x18}}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r5) sendmsg$IEEE802154_START_REQ(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000d40)={0x34, r6, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000400)={&(0x7f0000000100), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r6, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x24000000) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES8=r4, @ANYRES64=r0, @ANYRES16=r4, @ANYBLOB="f23293dbc77810dc398f0145351c9abf725d672ab96c74bda8faf71bc56ab01d14180d1c7418dfdb0443538fcd7210457e25379b1e77ca10a2a533b3fa6b04443efa23659e1f4527af1c3f1e8cedc912a9"], 0x4c}}, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000200)=0x2, 0x12) r10 = openat$cgroup_ro(r9, &(0x7f0000000080)='memory.swap.current\x00', 0x0, 0x0) write$cgroup_subtree(r10, &(0x7f0000000440)={[{0x0, 'devices'}, {0x2b, 'cpuacct'}]}, 0x12) 569.595207ms ago: executing program 1 (id=2956): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="3fab000046d43ab2f39252"], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x5c, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a0d4e01051d6ff63"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="d5fcfac99a3c120d97ce2b3e3b93fe7b"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8001}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="10536a063100ca14e8d2b3ff327c7355"}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 553.036473ms ago: executing program 2 (id=2957): syz_extract_tcp_res(&(0x7f0000000000)={0x41424344}, 0x9, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6gre0\x00', 0x0, 0x29, 0x81, 0xac, 0x7, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x8, 0x7841, 0x1, 0x1}}) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='blkio.bfq.io_queued\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{0x1, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x10, 0x8, 0x4, 0x6, 0x2001, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000008000000000013000000002000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000c0a4ae45b503d6640000b700000000000800b5009dfa0dd7e88ee70c2e8701000000000000000000000700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) pipe(&(0x7f0000000500)={0xffffffffffffffff}) splice(r9, 0x0, r8, 0x0, 0xffffffffffff8000, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r11, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)='%pI4 \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x15, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000006000000000000000300000018120000", @ANYRES32, @ANYBLOB="0000000000982600b703000017000000850000000c000000b700000000bef57d6dd1fc00ef0000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000cceaa59e14ee84d8ce34923207f25e9bd432c76bbc6e8fb7de0c5d6fb1befb7102820dde8ed4e049e3da72aafec9f38f9bd9c9975aab32e5320ea2f2987f1bd4314b1c1a2710f25f7cfff3f45b624b77da4c503949b3d89acf5bbab1b64f666a55899e21e640e6970416a04c038e9a220dc11285526fbb6f6a81011e70d0c998892037147233721d68c2c31985db1d4c5f40897eab20847a73137d1c43390130feb8ab3f178255732bdfe07c1855f85abcd6e11f9e68a6f7d3c1050dae4045ed9cfc4ffc9922221a47cace66356123c0b978ef0dcaf1ff7afc95627f9c92ee83cef51bce5d2c", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x9, 0xfd, &(0x7f0000000280)=""/253, 0x41000, 0x14, '\x00', r3, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x2, 0x8, 0x6, 0xff}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000680)=[0xffffffffffffffff, r5, r6, r7, 0x1, r8, 0x1, r10, r11, r12], &(0x7f00000006c0)=[{0x0, 0x2, 0xe, 0x8}], 0x10, 0xfffffbff}, 0x94) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller0\x00', @link_local}) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r13, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r13, 0x400454cd, 0x300) syz_emit_ethernet(0x3e, &(0x7f0000000980)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa1039729f47aaaaaaaabb08004714001204d99fbf68c1b117300000000000059078ac1414ff0a010100860800000003010200000000", @ANYRES32=r0, @ANYRES32=0x41424344, @ANYBLOB="5c00000390780000"], 0x0) 440.429254ms ago: executing program 3 (id=2958): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff48700000020000005c0000000000000095000000000000002ba728041598d6fbd307ce99e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f071326bd9174842fa9e09000000000000000a0e168c1884d005d94f204e345c652fbc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc84e974a42a550d6f97181980400003e05df3ceb9f1feae5737ecaa81d666963c474c2a175e04ad6ee1cbf9b0a4def23d410f6296b32ae343881dcc7b1b85f3c3d44aeaced3641110bec4e90a634196508000000000000f0f4ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d4dcecb0c005d2a1bcf9436c101040000f73902ebcf0200822775985b231f000000ccb0ecf31b715f5888b2a858ab3f11afc9bd08c676d2b89432fb465b3dad9d2aa7f1521b3ebb0cc52f49129b204eb99b6150e320c9901de2eb879a15943b6dc8ea15aab9dd6968698e3095c4c5c7a156cec33a7bb727667d81ff2757ca1e6bfdd4c968dacf81e65998b9091957d1d11a5730baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba165d876defd3541772f26e27c44cfd7bb5097379cf1756869cebc7b0b2d85d6d29983e830a9cdd1d0a017c100344c52a6f387a1340a1c8889464f90c284a4db539621fbb70f01a2c02dec4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae610afd01409d9a337ac5d58bcb5e5fc231514952c5255f22bd8b325d9b76e57f041b665ab0249886c0a65cc99d5893521372c8d8b7bacac24000020a4a24d8dbd75062e1daef9dead619cc6e7baa72706287793c3d2a2661edcd3545236c204682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b993508000000e480cd9d4850a049ee19b67d17ef0477aeb12b1d255be1ed66d9051f22614d1f62734d6780393e783df8b8a17e3aa9fe9c502f9acee4f1b56e1f231200743792cead3c058a5b700d64d160abe33df726608510136ce8bf239414a1d98ea93e3d35dbb6c23b90cf36e83b8a4309b402d264b09f2779a0bcd7cd6dfc06b02e69d384146056d125cf4aadd80800000000000000e88d10acd06864eac44c42fbe334bdc3e9768fc360b130dc6111fe3293e8e02f819a2aa34dba1c25be27945507a3477b437525b81aef2f0b4c4f63483026b5e34d44705b76ef29f7f6e0a2be625eae975e02069fbff63a06578d6d184f5de7bfb6aa800016996d536256c02294cb1d3a6fb8eae87691fae365a70c3f15871565bba8dd8a8ca049f798abe646f738bebdfc9d8a5edd7a19ca6a42bc3f1db37c17f22a287c6d31a13db5dfef409eb1d3c91c6e6f80d215c9e16e0c4736c81936315418f26770cca4e2f89800d18c89d7f46f679df6c9e7005f209dda94302a30003b952ae1ebfd0ca88368ee6ce139e8b5822422cf4c9dde943d34c432e1001171792c65986146666a549092398af45ba38c41df7e0fffeac41824ca1fd0eb68aa243c9035c788d5480e5aee9c9e5f2e5a3628995b1531bd20360d33d8f9ffffff5f4bf6ea8a1850c4f83306dbca02ee3686da707b6d85db491ba0cc33f6be92c55969a2b52a25419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9bc31f09834b4788be2a442aa81b259e9eb1bf5314844051f3a642aca9ff98c9036471ccff0522903e7bcf62e18f7796bbc280b95e8e0d6fd5644b0ebde3885b06548862de809d3dae3cccf109f7c78e8479a345e805e47dfa82caed44b11a443c5ba92a326dd10921aa79c62800844c7a59f55ee205a11ab50fb402e7da6ada561ec1117cc186b01fd5c2061d22156b1bfeb51f5c65a907f2217d5f80c580dc31b0963ff953ce09148e8dfe3a61bbd2bb173518507a3cd0e37c4da0a71eee31071d5d642498181c69cee3b2e414ddd6a12ff4bdf6e97c247b6025d4376067e25357d3b521a5b927d3392a7503718aea24179528f6a0c6de4e61b49cad1e4d6b000000000000005b2d16877299acefc0655bc1422c3d425d988eedebcf242b780a687c9acae2a5a71c2a16a32ceb377f5d54f9b2fa90b2905925e611be56e9ebe20cab20ab2b5baa1b07b16e81f278e54a479f1a068658e3656cfa196d6c050000000000000000814955c62a7d72b317399e572a7f6a4657b741eb66c9179ffd097d61fcfd0fa1d46cfb110e3e8cff5579e83f2820f95eaa0c609f666950c24311740e36de8f65708cfffce798c99ef8f62fd2398e999b220125da8eb07947512365abbc5b84ef524bdf184727c67910051f204662264607d548dbdffe14b41dd0843cf3d85bb820656a88a9e52a4cd7b3eeadfe00007267f226019ef0a25bc15da71e893856a2182c3167d8ba73f7c6294b159a426ce44cd73f000000a66fc501eae0c3504c1400697ba69fd9b7eaf49aff6a6aea529610db8dfef86c3cc698e9fddf1b13287615b972281a90c3a4cf415df25fbcdd35cf8368f068c4481844bdd0dda553e1cb0966d5686013d382956d50055dce0d1bc225c1d77612b1ec52e743dbc51f25cc07a202b704577316913cf067fa65e476f688de2d6c54ea192a569eed05d0d7536b3205c68d4ee0fe318ed3112c76dcf128a1d5595b773ef4c8a7ba4e10381de8808ff02dd0a7b996ecf1c65e6d9db90c87123d9cb3945330f7a270ee0cca35b1331ca8fec0b2f39f505140751b60f29a83e4bc0ef2ffea443e4aa221cc38a503add16a2c98cb589e1dac1912b4142a3be30f50b2d9479c5bde0beb38030d0c0ce0590000130000000000000000000000554361e1628ee0017ad19ca787f2c078aa260701ce0800000080623902000000000000000000003d118a04fa6a80c4928c01ccab57b5f4eb265ad15004f967543fe6e6ddc2a12165fe3a08bf9475ee0eee3539369b0e566fedbd215a6ddd4fe03dcc7a922e16410d820747b7e806c0f3b6f14c884d150a0ff07f2e0000bfb083c56d3bed0a61fab880f8885c612ebff8523d14cfb12aca274c000000005e5155611969f6e67dd83b20206207cb8b2cd2fab6fa6d7fdaed6a27a2e4db1d5adc80c4014ff11d9dbceba41d8dfce410333a054e82b1d050331c5bc4acb843b94d67f69f49eb4dd3b1b85b018359c32df01db8ebce0dbc36cade09c6b44f6b93d28db8ae4db5624d8a02f7be91bec65e4b3373059587dd6528bbc48e3379d477d482faff738c39c61cac1195043bd5b70cea5fc1083a169a82632ff3a9a48ff805202ae9aec56b9f7795fa27634a7f06359e3058d2dd69c4e5cc11b36d9ed9c4b2867f583de6fc582f789722bd1500e64c495abdb72de2c739d38c72f6f4fb1946081dcc825d5b5b747e9fa1b5226cd31e131263f1fcd7d45a630b46d04af906f0be464d829dd2dfcf7400002b7827f6d957e51bb1f1b44a50200c9dfadfaff2e32baa9c0edaac7144e174dba582a951d2b03c27219cec4fbc7b6e99c3f00188941e3fbf008cbace177ae250fd757a22e21ec05aa45c91e1345ca936184c3fc28153283e13654123cfaf4e661f4b6d430adad1e2116bc385f888405d48f0d386da0cc6747b33395772a68f2ea3fb7e7207000000b24088014c8e64f03d053c4e02ddd08b262e422eff1c9f124b892b0a9462b07d4f88c0693bd9c54ad2ab5227aa59ef2b53ac528c0800000000000000ebfde0c4a37c2d55c176680c4207000000e4aa467f995c9bc99e60441d4dbebead3b436427762618810bac7308c6d3298ea932b66572825e62d18462d3b2342ba48c145ff4674a94fa078cc552d064da2bb69a0d269076f8955076578f44ffb8895f11bd5e06840f8848df72230a28e0304569bfa0350b6dde9e96273de1758505aa1ba89dfb12be7a7c6dae1028d1bc68b6336eb1a5d18f6148354df7e60a489dc543ccdee1fff9d8f8d78844f0c6a77ef1181d5055c2a193a5763ed7749a17296c76818b60426082c86619dacc8a884c4de8572a044faf0c8e4377776c8703ecf2e3f1c3d6410000000000008369f062639e3ddcf725be54f626448fb7bfc74c183b26e31b71a390ccea4be07278dd12fa16848797397b76908fa03613cd961b98b26a0879ccba4a78c82958764bce07a7f70df1cef6d4db1ddbda1db18e4f41c390fd3cb862216ece39a9ec60bd3be5f9329dcaf33bf2c87cc510557460d14421e1d26322ab64388f2cea0d6269ffc8580a01e9acd2ec3ece39f3b4ffdc4dfea3da6ddb002512e2313253801044e751168eabe977c503c30ef7c489e5ea1fff041e54de54cfeb258f2387dad096b72a78d91134927492cfc773c731cca9b13b3f6e7760ab0929c46f51ea5643f3df4f4044f3ad0a6ba739e72d8b8b2835d81534bea8372bc590c111d573e04280659a096eaa495a4154daae7d1800c130d920964845c50c8ba4763b19b6008f6d7a5091895c7a4b7816ab706503be879b18b778b0f61ecfde2f8bbb32cfeb766ec4430ee0ad45a0a263ddc4b2f47680c8d53439f8d388dab87112c83997c83e178be287eb6e8c95bad8f8ed85cd5b03a7352a0fb83398566d1bc133582ce2d95636cd23eba4432180b2d5c3019879cd949a5be1b241b3d0d0d52a3529cc9e704a9d8d54f4f7b776a969a4505e18fe5284985ca7d112c397d776e3baba918b7df456bd970e761e00f3b0efa5ce4246d9f08ba60da3be556c518a1f19504c7cea1491a9eadd27d747ca9cc5f92e30b2ca3cf0b142a8554c87e8026d4e586cf5f7c9d412e6eb4f66a076c8bca6b294305969dabb6c932b57a5dd4234bf1ed3bd095229ee3cbb86883d574c5af4bb78370561de3fbf55bfcd2db3979eb1be120b5795443324023353bdd9fc87c862c247e140379ef098c7b3fa79a6638a245b6a74f14dde9bd4ee48e62cdc70f486ce38641e4e4309aa9f4bd097fa1530db966d9919544ab4890301e51f9525436f5d9591460340f5093161a78a249783945407f2576d6f35a99e3521d7991e3fdfde5ee7f6a8ff8181a68ef15a2ebfe9e22d7c745949ab5cc15b9f5659799b5e00debbf9f623f75bfd4d83c4859ca9b652cea33daeeef47b60c78a21965bcf91919071c7ded19317dc0b7587d9322f8cec9e32675a187465bdfa101bcd9ac680839b375af12c160247dd960e70eb7ee60c52a900440aa9bd9a6b15a4a34dc73c3c4936d8986300fdc264b28537df387e6442c32f5fa2a31d24c1ed888a57fcc50400a084a38a3630ffc465f36a4b770fab0946148161184be39134542e934f3a538bccd48a0325aa9b151855c800000000881d4361e7fbd1fc2331b4e34733480bc497662a8234a7eeab3e65d6b0f5d92edff04416eedcd15b9ddbcb3cf9228afda6b17d44a276b205eabd0069f7e26aea50f537dc77b683ed83d2f9110e00a705f48e9d13378cf09bca22e8f45c4f360d5fff8ba35f21c4513bcc0800000000000000dc5cc7ad7290c60bc609bff9be7cd922f474c3faa78fd42cba7c78d6d912656b6313497625e2f9afaba05b17ca242b7ca8d6556175aee38142a8aac5f677c2f8a6967f2cb5e97aae97a5e5579a706243688ac4d38a4601b4aadb2d319fe7d6bf1272fa3fa701338d7bce390e8bf959081ed39e63a431901d615a26ff95e1620a6c26eda4f92d83499a173e7217001f58ed5406bdb59acbc997e8fd3d53b4c2c2a1b3145bf54a851f3c08931d4c2c32bfe611e5958458af7b3c5319fdb4c40b8d01365fdee93af6fad7c7a8da86460f45c9e99d43264c929e7de4e9620000000000000000000000000000007cf90000008f8a9da7a8a167815c6ffcd1b6863cde9ab45ecd8f06423198bb00cdf76877f407be46b000000000afbb4cb3a8de259a8beb2223f28b855e2bdf4b31b91e5062a42a55bd95e93f77f2499391cf0000000000000000000000000000195007ad27d1d61dc4d5512f117f0ed554c2c88c1713000000000000bb1ff447d6e12da208e9f0422a84f361684861169f498909c4841f4d5a0f5807a3b7d833075fdcd9c1d169b03d7df7f4150fad8b9e92eaf86992adbda360dd91de51c6df335445492608162fb0804dabdeac6fb71042f906eefd37f1d190a1c8a0d9de7f34dcc8cbd7b565fc675f3bf7aac559411808ee703ec3ad461c6ddc571994cb504c46eabbc2ff4b97df394bc75b5e7f45a4450753b5d2b8b8414a7fe6a17661bdb5b1d080cfd974811e1d60763d8d9509c75aa729a334b55ee76b0c2d50270a1deec1a6d7441d0b5b8d7a4d048d156ebcff102e45c15d2a73b40d74807f5182a319d50edbf430f00b1c29a9e4bd92111caacbb1d4541545c2d262646070da42f76e3f3c6d139eed89cc9300000000000000000000000000000000000072d7e605eb8e978d76796d9d3a728c51a3145da8e1ca4973aa8fed855328e9d2509335c5386cac74e862eac50e9ba95b6a2a29e8ef08a9ae29792e77fb9952b1ac5c816db5c23a656db528f81f6a9465d2c94d701ee8646b30650c84b9510a337e82702baf368d29281d3d54b39014756ca5a1be1881000000000000006fbac0b9c9f97c920dfac7e2379ef6bb076118aa9bb24ee12e64aa530f852bf4f970a08a55531934e39fbae483129949a918115571d76740ca6a1cea59df290f2e63675ca30a289775825fe3e5d6f206f3f395346c0738035dc74368bb035fc65a40f8124369b8950ded31af64855c5c95ef5c83b18b23517ca935a0fa1b630d70c4ca4029a90d47701102045fff90675adb3c83983d125ae730b9497c681a912a6bb70300a2d7fba051f82b9d6f710426b5bd0d0bc0b08a0f801276789613da406905011bd6ebbac91ff17a21d1ed0882e73394025772f31dc8a3048789c703f920c55746f6fc955046f9332d72150be23c26cbb08d1b438e84b83fefc6a16958fd46dc7b8cbea1da2d541324e373e9157696d698a0b4bc84d7cc2fdb069db8a5a491a9d2bbc0a61b73f75d81d07d778a1577db3b06d20a21b19ea17e0000815a42318151feaad37f7abf9bfa0bcac3c1934854b3f6dc6de835952ebdda297dd3b29c07c69888cf029271449e035edc8a4459705f222bda537481e66ce3c665129f9829524eca8b5bef27adde96bd3ee95da4a176deff3408da050fe8d512e5a19379b403ee11d010bf86d0af4ac5c2057709b18cff438d0d58810670b222dfeb317bb935f925d2a070e68a701fd4316a677bb513c9476f25969097c165ca1705473341ea03f259dc5bee6a2d2e05176965192941abfae36b3a1e30784e6532c96ab971c5706a88b6f66860e31098b5b788788aad67507ffab2184a950065c1337259b63135fa060fc5ce3e4f6cdfb64f40e1a90351a01fd3d70f9dde03c335a931e58b8570316590ae22c7de567260849049e963ee15db15f592abb24111a219f0d128ceaf19764d92755abc9c313f65e7a220e64bb0d7139ce59da85bc710cea0c6553b336763bd3e39c2374b86885a32cdfae817196a7850257ead09f3e30e676b51062bb9000000000000000000000000000000000000000000000000000000aefb12dd3507c8dd24490bf9de062cd166a4dad6b9f2e53bad342546e546f6dece81d53cf717bd91ad72f4da82018f43259899e53e0b69a92180f1345699045fd23689e66d21d13be1a2d20eb1ce23eda84a63855173ca7f51d436306c"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0x15, 0x0, &(0x7f00000006c0)="5c71f91b05c413550230b4c817a62875483efe176d", 0x0, 0x8, 0x0, 0x1, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x50) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x6, 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000700)={0x0, 0x1, 0x1, [0x7, 0x3, 0x9, 0x5, 0xfffffffffffffffd], [0x1003, 0x2, 0x2, 0x2, 0xffffffffffff1cac, 0x0, 0x80, 0x5, 0x4, 0x0, 0x4, 0x954, 0x4, 0x9, 0x2, 0x4, 0x0, 0x189, 0x1, 0x5, 0x8, 0x6, 0x9, 0x4, 0x1, 0xffffffff7fffffff, 0x8000000000000001, 0x6, 0x1f, 0x10000000000, 0xf2c, 0x9, 0xffffffffffff8000, 0xe, 0xb17, 0x3, 0x2, 0xff, 0x1, 0x3, 0x1041, 0x7, 0x4, 0x8, 0x6, 0x6, 0x5, 0xfffffffffffffff9, 0xcd, 0xf800000000000000, 0x7, 0x0, 0x80, 0x6d8, 0xb9, 0x9, 0x0, 0x0, 0xffffffff, 0x10, 0x7, 0x1, 0x2, 0x9, 0x5, 0x7, 0x101, 0x3, 0x4, 0x8000000000000000, 0xfff, 0x4, 0x7, 0xfffffffffffffff7, 0x0, 0x30, 0x8000, 0xffffffffffffff4d, 0x8, 0x1, 0x8, 0x9, 0x8, 0x98, 0x4, 0xffffffffffff0000, 0xe78b, 0x3, 0xfffffffffffffff9, 0x7ff, 0xffffffffffffffc6, 0x8000000000000000, 0x28, 0xffff, 0x8000000000000001, 0x37c9, 0x8001, 0x8, 0x2, 0xfffffffffffffffe, 0x7, 0x9, 0x6, 0x8, 0x9, 0x80000001, 0x5, 0xfff, 0x40, 0x9, 0x76bf500, 0x0, 0x3, 0x0, 0x7, 0x1, 0x4, 0x1, 0x2, 0x9, 0x9]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x7, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x4000080) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x80) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000b40)={{r0}, 0x0, 0x8, @unused=[0x7, 0x7, 0x9, 0x100], @devid=r2}) 325.433948ms ago: executing program 1 (id=2959): syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffff000d040002aa967207298ea8e413490180c2000003e0000002"], 0x0) 169.690498ms ago: executing program 0 (id=2960): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffc45, &(0x7f0000000080)={&(0x7f0000000100)={0xf9c460968b579bd8, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_ID={0x0, 0x5, 0x1, 0x0, 0xffffff47}, @CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x98}}, 0x0) 104.536103ms ago: executing program 1 (id=2961): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) close(r1) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r2, 0x101, 0x6, &(0x7f0000000dc0)=0x5, 0x4) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000010c0)={0x0, 0x1de9, 0x70}, 0xc) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0xffea, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000071000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="0c00018008000100000001000c0002"], 0x30}}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r6, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10022, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) sendto$packet(r7, &(0x7f0000000340)="05030006e8fe091c6202a0ffffffff006003000000007f141434e3177f43055762cb80948864113b022543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$BTRFS_IOC_INO_PATHS(r3, 0xc0389423, &(0x7f0000000080)={0x3, 0x20, [0x80000000, 0x9, 0x80000001, 0x75ca], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) 27.023429ms ago: executing program 3 (id=2962): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="070000006569d096640d68ac9bd8a0006b7411a7016422117df1832a359579f8d0073555d448", @ANYRES16=r1, @ANYBLOB="00002bbd7000fcdbdf2519000000280001801400020073797a6b616c6c65723000000000000008000300000000000800030002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x50) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) r3 = socket(0x1d, 0x2, 0x6) getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f0000000100), &(0x7f0000000180)=0x68) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000240)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4008800) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000240)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4008800) 0s ago: executing program 0 (id=2963): syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6c, 0x0, @remote, @private}, "240086ddffff0000"}}}}}, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newtaction={0x48, 0x32, 0x1, 0x80, 0x25dfdbfe, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9, 0x3}, {0xfffffffffffffd97}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x48}}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)=@newtaction={0x14, 0x76, 0x1}, 0x14}}, 0x0) kernel console output (not intermixed with test programs): lticast mode [ 100.157456][ T6999] veth1_to_hsr: entered allmulticast mode [ 100.166251][ T6999] hsr_slave_1: entered allmulticast mode [ 100.175528][ T6999] hsr0: entered allmulticast mode [ 100.183024][ T6999] veth1_virt_wifi: entered allmulticast mode [ 100.198113][ T6999] veth0_virt_wifi: entered allmulticast mode [ 100.205990][ T6999] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 100.213733][ T6999] veth1_vlan: entered allmulticast mode [ 100.224490][ T6999] veth0_vlan: entered allmulticast mode [ 100.237845][ T6999] vlan0: entered allmulticast mode [ 100.243056][ T6999] vlan1: entered allmulticast mode [ 100.249258][ T6999] macvlan0: entered allmulticast mode [ 100.258081][ T6999] macvlan1: entered allmulticast mode [ 100.266150][ T6999] ipvlan0: entered allmulticast mode [ 100.271562][ T6999] ipvlan1: entered allmulticast mode [ 100.277705][ T6999] veth1_macvtap: entered allmulticast mode [ 100.286608][ T6999] veth0_macvtap: entered allmulticast mode [ 100.297037][ T6999] macvtap0: entered allmulticast mode [ 100.305173][ T6999] macsec0: entered allmulticast mode [ 100.313039][ T6999] geneve0: entered allmulticast mode [ 100.321041][ T6999] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.331470][ T6999] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.340740][ T6999] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.349768][ T6999] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.358873][ T6999] geneve1: entered allmulticast mode [ 100.368479][ T6999] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 100.382031][ T6999] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 100.391934][ T6999] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 100.406851][ T6999] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 100.422273][ T6999] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 100.439049][ T6999] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 100.448693][ T6999] veth2: entered allmulticast mode [ 100.453966][ T6999] veth3: entered allmulticast mode [ 100.490528][ T7005] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 100.540036][ T7005] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 100.564393][ T7005] gretap1: entered promiscuous mode [ 100.569703][ T7005] gretap1: entered allmulticast mode [ 100.644772][ T7025] syz.1.311: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 100.678120][ T7025] CPU: 1 UID: 0 PID: 7025 Comm: syz.1.311 Not tainted 6.16.0-rc2-syzkaller-00185-g010c40c1f50e #0 PREEMPT(full) [ 100.678146][ T7025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 100.678170][ T7025] Call Trace: [ 100.678182][ T7025] [ 100.678189][ T7025] dump_stack_lvl+0x189/0x250 [ 100.678229][ T7025] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.678254][ T7025] ? __pfx__printk+0x10/0x10 [ 100.678271][ T7025] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 100.678288][ T7025] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 100.678308][ T7025] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 100.678329][ T7025] warn_alloc+0x214/0x310 [ 100.678349][ T7025] ? stack_depot_save_flags+0x40/0x900 [ 100.678374][ T7025] ? __pfx_warn_alloc+0x10/0x10 [ 100.678396][ T7025] ? kasan_save_track+0x4f/0x80 [ 100.678418][ T7025] ? xskq_create+0x56/0x170 [ 100.678438][ T7025] ? xsk_init_queue+0xb0/0x110 [ 100.678457][ T7025] ? xsk_setsockopt+0x43f/0x710 [ 100.678477][ T7025] ? do_sock_setsockopt+0x257/0x3e0 [ 100.678496][ T7025] ? __x64_sys_setsockopt+0x18b/0x220 [ 100.678514][ T7025] ? do_syscall_64+0xfa/0x3b0 [ 100.678529][ T7025] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.678554][ T7025] __vmalloc_node_range_noprof+0x125/0x12f0 [ 100.678606][ T7025] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 100.678631][ T7025] ? __kasan_kmalloc+0x93/0xb0 [ 100.678651][ T7025] vmalloc_user_noprof+0xad/0xf0 [ 100.678670][ T7025] ? xskq_create+0xbf/0x170 [ 100.678693][ T7025] xskq_create+0xbf/0x170 [ 100.678718][ T7025] xsk_init_queue+0xb0/0x110 [ 100.678743][ T7025] xsk_setsockopt+0x43f/0x710 [ 100.678768][ T7025] ? __pfx_xsk_setsockopt+0x10/0x10 [ 100.678788][ T7025] ? __lock_acquire+0xab9/0xd20 [ 100.678821][ T7025] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 100.678841][ T7025] ? __pfx_xsk_setsockopt+0x10/0x10 [ 100.678865][ T7025] do_sock_setsockopt+0x257/0x3e0 [ 100.678888][ T7025] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 100.678913][ T7025] ? __fget_files+0x2a/0x420 [ 100.678941][ T7025] __x64_sys_setsockopt+0x18b/0x220 [ 100.678968][ T7025] do_syscall_64+0xfa/0x3b0 [ 100.678983][ T7025] ? lockdep_hardirqs_on+0x9c/0x150 [ 100.679006][ T7025] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.679022][ T7025] ? clear_bhb_loop+0x60/0xb0 [ 100.679043][ T7025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.679060][ T7025] RIP: 0033:0x7f47d498e929 [ 100.679083][ T7025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.679097][ T7025] RSP: 002b:00007f47d582d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 100.679116][ T7025] RAX: ffffffffffffffda RBX: 00007f47d4bb5fa0 RCX: 00007f47d498e929 [ 100.679128][ T7025] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 100.679138][ T7025] RBP: 00007f47d4a10b39 R08: 0000000000000004 R09: 0000000000000000 [ 100.679156][ T7025] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.679167][ T7025] R13: 0000000000000000 R14: 00007f47d4bb5fa0 R15: 00007ffee8e36ef8 [ 100.679197][ T7025] [ 100.679208][ T7025] Mem-Info: [ 100.818985][ T7033] netlink: 792 bytes leftover after parsing attributes in process `syz.3.314'. [ 100.858309][ T7025] active_anon:4414 inactive_anon:0 isolated_anon:0 [ 100.858309][ T7025] active_file:1136 inactive_file:39829 isolated_file:0 [ 100.858309][ T7025] unevictable:768 dirty:97 writeback:0 [ 100.858309][ T7025] slab_reclaimable:10400 slab_unreclaimable:95809 [ 100.858309][ T7025] mapped:28839 shmem:1361 pagetables:1056 [ 100.858309][ T7025] sec_pagetables:0 bounce:0 [ 100.858309][ T7025] kernel_misc_reclaimable:0 [ 100.858309][ T7025] free:1332221 free_pcp:17171 free_cma:0 [ 100.925877][ T7041] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.311'. [ 100.945169][ T7042] netlink: 36 bytes leftover after parsing attributes in process `syz.0.315'. [ 100.995951][ T7025] Node 0 active_anon:17656kB inactive_anon:0kB active_file:4544kB inactive_file:159116kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115356kB dirty:388kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12028kB pagetables:4096kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 101.053778][ T7031] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.311'. [ 101.063365][ T7025] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 101.156095][ T7025] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 101.186085][ T7031] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.311'. [ 101.235038][ T7025] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 101.269515][ T7025] Node 0 DMA32 free:1413032kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17608kB inactive_anon:0kB active_file:4544kB inactive_file:157280kB unevictable:1536kB writepending:388kB present:3129332kB managed:2561020kB mlocked:0kB bounce:0kB free_pcp:44844kB local_pcp:18796kB free_cma:0kB [ 101.306575][ T7025] lowmem_reserve[]: 0 0 1 1 1 [ 101.311347][ T7025] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1836kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:4kB free_cma:0kB [ 101.348253][ T7025] lowmem_reserve[]: 0 0 0 0 0 [ 101.353125][ T7025] Node 1 Normal free:3900188kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:23464kB local_pcp:9800kB free_cma:0kB [ 101.370572][ T7051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.457609][ T7055] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 101.465257][ T7052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.475129][ T7025] lowmem_reserve[]: 0 0 0 0 0 [ 101.475178][ T7025] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 101.490938][ T7055] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 101.497209][ T7025] Node 0 DMA32: 666*4kB (UME) 248*8kB (UME) 132*16kB (UM) 130*32kB (UM) 54*64kB (UME) 23*128kB (UM) 14*256kB (UM) 9*512kB (UM) 5*1024kB (ME) 7*2048kB (M) 334*4096kB (M) = 1413032kB [ 101.527423][ T7060] tc_dump_action: action bad kind [ 101.535577][ T7025] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 101.626662][ T7025] Node 1 Normal: 195*4kB (U) 52*8kB (UME) 43*16kB (UME) 40*32kB (UME) 19*64kB (UME) 6*128kB (UME) 3*256kB (ME) 4*512kB (UME) 3*1024kB (UME) 1*2048kB (E) 949*4096kB (M) = 3900188kB [ 101.678980][ T7025] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 101.680553][ T7064] netdevsim netdevsim2: Direct firmware load for  failed with error -2 [ 101.706878][ T7025] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 101.719872][ T7064] netdevsim netdevsim2: Falling back to sysfs fallback for:  [ 101.726682][ T7025] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 101.740221][ T7067] netlink: 5 bytes leftover after parsing attributes in process `syz.0.324'. [ 101.744215][ T7025] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 101.753787][ T7067] netlink: 36 bytes leftover after parsing attributes in process `syz.0.324'. [ 101.770171][ T7067] netlink: 16 bytes leftover after parsing attributes in process `syz.0.324'. [ 101.774252][ T7025] 42323 total pagecache pages [ 101.786911][ T7025] 0 pages in swap cache [ 101.796042][ T7025] Free swap = 124996kB [ 101.800268][ T7025] Total swap = 124996kB [ 101.807292][ T7025] 2097051 pages RAM [ 101.811168][ T7025] 0 pages HighMem/MovableOnly [ 101.818345][ T7025] 424690 pages reserved [ 101.823231][ T7025] 0 pages cma reserved [ 102.148466][ T7085] batadv0: entered promiscuous mode [ 102.149376][ T7089] netlink: 'syz.3.332': attribute type 21 has an invalid length. [ 102.162769][ T7085] team0: entered promiscuous mode [ 102.179359][ T7085] team_slave_0: entered promiscuous mode [ 102.186704][ T7085] team_slave_1: entered promiscuous mode [ 102.197817][ T7085] hsr1: entered promiscuous mode [ 102.202785][ T7085] hsr1: entered allmulticast mode [ 102.210811][ T7092] set match dimension is over the limit! [ 102.224198][ T7085] batadv0: entered allmulticast mode [ 102.229519][ T7085] team0: entered allmulticast mode [ 102.239380][ T7085] team_slave_0: entered allmulticast mode [ 102.248844][ T7085] team_slave_1: entered allmulticast mode [ 102.282093][ T7097] macvtap1: entered promiscuous mode [ 102.287707][ T7097] vlan0: entered promiscuous mode [ 102.293259][ T7097] macvtap1: entered allmulticast mode [ 102.299447][ T7097] vlan0: entered allmulticast mode [ 102.305164][ T7097] veth0_vlan: entered allmulticast mode [ 102.404466][ T7101] Bluetooth: MGMT ver 1.23 [ 102.408710][ T7089] syz.3.332 (7089) used greatest stack depth: 17992 bytes left [ 102.532359][ T7107] netlink: 'syz.4.339': attribute type 11 has an invalid length. [ 102.569389][ T7109] x_tables: unsorted entry at hook 2 [ 102.683815][ T7117] net_ratelimit: 3321 callbacks suppressed [ 102.683834][ T7117] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 102.736316][ T7119] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 102.823075][ T7124] ieee802154 phy0 wpan0: encryption failed: -22 [ 104.439930][ T7210] __nla_validate_parse: 13 callbacks suppressed [ 104.439949][ T7210] netlink: 100 bytes leftover after parsing attributes in process `syz.3.371'. [ 104.478486][ T7215] siw: device registration error -23 [ 105.506333][ T7230] netlink: 4 bytes leftover after parsing attributes in process `syz.3.378'. [ 105.515861][ T7230] netlink: 12 bytes leftover after parsing attributes in process `syz.3.378'. [ 105.616449][ T7235] netlink: 8 bytes leftover after parsing attributes in process `syz.4.380'. [ 106.063875][ T7256] xt_CT: No such helper "snmp" [ 106.115892][ T7271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.393'. [ 106.151943][ T7272] netdevsim netdevsim3: Direct firmware load for /. failed with error -2 [ 106.174165][ T7272] netdevsim netdevsim3: Falling back to sysfs fallback for: /. [ 106.202777][ T7276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.395'. [ 106.239612][ T7277] netlink: 'syz.1.396': attribute type 3 has an invalid length. [ 106.253132][ T7276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.395'. [ 106.259685][ T7277] netlink: 'syz.1.396': attribute type 3 has an invalid length. [ 106.284496][ T7277] netlink: 'syz.1.396': attribute type 3 has an invalid length. [ 106.301009][ T7277] netlink: 'syz.1.396': attribute type 3 has an invalid length. [ 106.312712][ T7277] netlink: 'syz.1.396': attribute type 3 has an invalid length. [ 106.354677][ T7277] netlink: 'syz.1.396': attribute type 3 has an invalid length. [ 106.362528][ T7277] netlink: 'syz.1.396': attribute type 3 has an invalid length. [ 106.427341][ T7277] netlink: 'syz.1.396': attribute type 3 has an invalid length. [ 106.436102][ T7277] netlink: 'syz.1.396': attribute type 3 has an invalid length. [ 106.443992][ T7277] netlink: 'syz.1.396': attribute type 3 has an invalid length. [ 106.570118][ T7296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.400'. [ 106.801170][ T7318] netlink: 'syz.1.407': attribute type 11 has an invalid length. [ 106.810837][ T7318] netlink: 224 bytes leftover after parsing attributes in process `syz.1.407'. [ 106.887558][ T7326] netlink: 16 bytes leftover after parsing attributes in process `syz.1.407'. [ 107.034148][ T7333] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 107.265248][ T7346] wg2: entered promiscuous mode [ 107.270152][ T7346] wg2: entered allmulticast mode [ 107.870208][ T7399] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 108.241111][ T7418] openvswitch: netlink: Missing valid actions attribute. [ 108.261966][ T7418] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.332953][ T7423] vlan2: entered allmulticast mode [ 108.345846][ T7423] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 108.363490][ T7426] gre1: entered promiscuous mode [ 108.368982][ T7426] gre1: entered allmulticast mode [ 108.383154][ T7430] bridge0: entered allmulticast mode [ 108.390264][ T7430] bridge_slave_0: left allmulticast mode [ 108.401162][ T7430] bridge_slave_0: left promiscuous mode [ 108.423367][ T7430] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.499728][ T7430] bridge0 (unregistering): left allmulticast mode [ 108.538687][ T7441] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 108.580603][ T7444] batadv0: Device is already in use. [ 108.729936][ T7451] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.797941][ T7452] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.810575][ T7452] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 108.824135][ T7452] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 108.895990][ T7464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.918496][ T7451] vlan3: entered allmulticast mode [ 108.925756][ T7451] bond1: entered allmulticast mode [ 109.393050][ T7504] IPv6: sit1: Disabled Multicast RS [ 109.663699][ T7518] __nla_validate_parse: 16 callbacks suppressed [ 109.663716][ T7518] netlink: 524 bytes leftover after parsing attributes in process `syz.4.466'. [ 109.683519][ T7524] policy can only be matched on NF_INET_PRE_ROUTING [ 109.683537][ T7524] unable to load match [ 109.698276][ T7518] unsupported nla_type 768 [ 109.721200][ T7527] geneve2: entered promiscuous mode [ 109.726987][ T7527] geneve2: entered allmulticast mode [ 109.764863][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 110.011265][ T7544] batman_adv: batadv0: Adding interface: dummy0 [ 110.018693][ T7544] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.060162][ T7544] batman_adv: batadv0: Interface activated: dummy0 [ 110.119392][ T7544] batadv0: mtu less than device minimum [ 110.146244][ T7544] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 110.158391][ T7544] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 110.170446][ T7544] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 110.182318][ T7544] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 110.194221][ T7544] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 110.206016][ T7544] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 110.370926][ T7565] macsec0: entered promiscuous mode [ 110.399621][ T7565] macsec0: left promiscuous mode [ 110.417964][ T7565] macsec0: left allmulticast mode [ 110.568636][ T7584] !: renamed from bond_slave_0 (while UP) [ 110.949738][ T7616] syzkaller1: entered promiscuous mode [ 110.972883][ T7616] syzkaller1: entered allmulticast mode [ 111.009076][ T7619] tipc: Trying to set illegal importance in message [ 111.034568][ T7619] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.052832][ T7619] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.083544][ T7619] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.091892][ T7619] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.374620][ T7637] validate_nla: 33 callbacks suppressed [ 111.374638][ T7637] netlink: 'syz.1.501': attribute type 1 has an invalid length. [ 111.844736][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 111.860226][ T7665] netlink: 68 bytes leftover after parsing attributes in process `syz.0.507'. [ 111.880019][ T7669] netlink: 148 bytes leftover after parsing attributes in process `syz.4.509'. [ 112.043231][ T7680] xt_policy: too many policy elements [ 112.061126][ T7681] netlink: 'syz.1.512': attribute type 1 has an invalid length. [ 112.071908][ T7681] netlink: 220 bytes leftover after parsing attributes in process `syz.1.512'. [ 112.082742][ T7681] netlink: 'syz.1.512': attribute type 1 has an invalid length. [ 112.103185][ T7681] netlink: 16 bytes leftover after parsing attributes in process `syz.1.512'. [ 112.274927][ T7697] netlink: 132 bytes leftover after parsing attributes in process `syz.2.518'. [ 112.284483][ T7698] netlink: 28 bytes leftover after parsing attributes in process `syz.1.519'. [ 112.309745][ T7697] pimreg3: entered allmulticast mode [ 112.315130][ T7698] netlink: 28 bytes leftover after parsing attributes in process `syz.1.519'. [ 112.403478][ T7704] sch_tbf: burst 5 is lower than device lo mtu (65550) ! [ 112.461972][ T7708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.523'. [ 112.637457][ T7721] ieee802154 phy0 wpan0: encryption failed: -22 [ 112.793132][ T7732] netlink: 'syz.1.532': attribute type 1 has an invalid length. [ 112.810103][ T7732] netlink: 'syz.1.532': attribute type 10 has an invalid length. [ 112.836395][ T7732] netlink: 236 bytes leftover after parsing attributes in process `syz.1.532'. [ 112.862778][ T7737] x_tables: duplicate underflow at hook 2 [ 113.038736][ T7746] : entered promiscuous mode [ 113.376749][ T7776] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 113.800233][ T7801] macvtap1: entered promiscuous mode [ 113.816336][ T7801] vlan0: entered promiscuous mode [ 113.825335][ T7801] macvtap1: entered allmulticast mode [ 113.847205][ T7801] vlan0: entered allmulticast mode [ 113.868081][ T7801] veth0_vlan: entered allmulticast mode [ 113.877610][ T7794] team0: Mode changed to "activebackup" [ 114.069507][ T7814] netlink: 'syz.2.557': attribute type 10 has an invalid length. [ 114.085547][ T7814] team0: left allmulticast mode [ 114.091751][ T7814] batman_adv: batadv0: Adding interface: team0 [ 114.099706][ T7814] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.135910][ T7814] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 114.490838][ T7840] netlink: 'syz.3.563': attribute type 10 has an invalid length. [ 114.739791][ T7854] __nla_validate_parse: 5 callbacks suppressed [ 114.739809][ T7854] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.567'. [ 115.081105][ T7866] netlink: 24 bytes leftover after parsing attributes in process `syz.0.570'. [ 115.247944][ T7881] netlink: 256 bytes leftover after parsing attributes in process `syz.4.572'. [ 115.259011][ T7881] unsupported nlmsg_type 40 [ 115.721962][ T7905] netlink: 'syz.1.576': attribute type 13 has an invalid length. [ 115.751457][ T7905] netlink: 'syz.1.576': attribute type 58 has an invalid length. [ 115.763536][ T7905] netlink: 152 bytes leftover after parsing attributes in process `syz.1.576'. [ 115.783437][ T7909] netlink: 'syz.2.577': attribute type 83 has an invalid length. [ 115.821355][ T7909] netlink: 256 bytes leftover after parsing attributes in process `syz.2.577'. [ 115.963392][ T7913] xt_TPROXY: Can be used only with -p tcp or -p udp [ 115.971275][ T7913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.578'. [ 115.993536][ T7913] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.072820][ T7913] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.328180][ T7928] lo: entered allmulticast mode [ 116.380836][ T7930] netlink: 32 bytes leftover after parsing attributes in process `syz.2.583'. [ 116.923364][ T7971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.076950][ T7971] netlink: 100 bytes leftover after parsing attributes in process `syz.4.592'. [ 117.309281][ T7994] netlink: 104 bytes leftover after parsing attributes in process `syz.2.597'. [ 117.328624][ T7996] netlink: 12 bytes leftover after parsing attributes in process `syz.3.600'. [ 117.400063][ T8004] validate_nla: 1 callbacks suppressed [ 117.400080][ T8004] netlink: 'syz.2.601': attribute type 64 has an invalid length. [ 117.429140][ T756] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 117.442282][ T756] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 117.443363][ T8006] netlink: 'syz.0.602': attribute type 1 has an invalid length. [ 117.458481][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 117.543167][ T8013] bond2: (slave gretap1): making interface the new active one [ 117.578570][ T8013] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 117.921844][ T8045] net_ratelimit: 15 callbacks suppressed [ 117.921862][ T8045] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 118.014284][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 118.096519][ T30] audit: type=1800 audit(1750915918.591:4): pid=8053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.614" name="memory.events" dev="tmpfs" ino=662 res=0 errno=0 [ 118.272584][ T8068] netlink: 'syz.1.617': attribute type 23 has an invalid length. [ 118.302147][ T8067] netlink: 'syz.1.617': attribute type 23 has an invalid length. [ 118.324319][ T978] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 118.366734][ T8073] netlink: 'syz.0.619': attribute type 3 has an invalid length. [ 118.687638][ T8097] sit0: entered promiscuous mode [ 118.704217][ T8097] netlink: 'syz.4.626': attribute type 1 has an invalid length. [ 118.755688][ T8097] netlink: 'syz.4.626': attribute type 1 has an invalid length. [ 118.956891][ T8117] delete_channel: no stack [ 119.094775][ T8126] netlink: 'syz.3.634': attribute type 1 has an invalid length. [ 119.109260][ T8127] netlink: 'syz.3.634': attribute type 1 has an invalid length. [ 119.189239][ T8129] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.318077][ T8129] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.457817][ T8129] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.590253][ T8129] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.786605][ T8129] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.829284][ T8129] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.878364][ T8129] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.911173][ T8129] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.979509][ T8173] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 119.992714][ T8173] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 120.016974][ T8175] __nla_validate_parse: 14 callbacks suppressed [ 120.016989][ T8175] netlink: 100 bytes leftover after parsing attributes in process `syz.1.651'. [ 120.058928][ T8177] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.067998][ T8177] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.077117][ T8177] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.086547][ T8177] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.120838][ T8181] netlink: 32 bytes leftover after parsing attributes in process `syz.4.653'. [ 120.216408][ T8183] bond2: entered promiscuous mode [ 120.221494][ T8183] bond2: entered allmulticast mode [ 120.247547][ T8183] 8021q: adding VLAN 0 to HW filter on device bond2 [ 120.576336][ T8214] delete_channel: no stack [ 120.846681][ T8225] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 120.950351][ T8227] netlink: 24 bytes leftover after parsing attributes in process `syz.1.667'. [ 120.968006][ T8240] netlink: 'syz.2.670': attribute type 21 has an invalid length. [ 121.288770][ T8254] netlink: 204 bytes leftover after parsing attributes in process `syz.2.676'. [ 121.325622][ T8256] netlink: 204 bytes leftover after parsing attributes in process `syz.2.676'. [ 121.764235][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 121.868178][ T8274] netlink: 8 bytes leftover after parsing attributes in process `syz.4.678'. [ 121.878178][ T8274] netlink: 8 bytes leftover after parsing attributes in process `syz.4.678'. [ 121.987916][ T8279] ipt_ECN: cannot use operation on non-tcp rule [ 122.263026][ T8289] netlink: 52 bytes leftover after parsing attributes in process `syz.3.686'. [ 122.507658][ T8300] syzkaller1: entered promiscuous mode [ 122.521277][ T8300] syzkaller1: entered allmulticast mode [ 122.561275][ T8300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.687'. [ 122.977427][ T8327] xt_socket: unknown flags 0x2 [ 122.990874][ T8327] veth0_to_batadv: mtu less than device minimum [ 123.031549][ T1343] tipc: Subscription rejected, illegal request [ 123.052502][ T1343] tipc: Subscription rejected, illegal request [ 123.418443][ T8355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.704'. [ 123.422009][ T8357] validate_nla: 3 callbacks suppressed [ 123.422024][ T8357] netlink: 'syz.0.703': attribute type 10 has an invalid length. [ 123.687151][ T8384] netlink: 'syz.0.714': attribute type 12 has an invalid length. [ 123.886160][ T8399] xt_hashlimit: size too large, truncated to 1048576 [ 124.098921][ T8415] IPVS: set_ctl: invalid protocol: 0 100.1.1.2:20002 [ 124.130379][ T5846] Bluetooth: hci4: link tx timeout [ 124.141951][ T5846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 124.156517][ T8416] netlink: 'syz.4.721': attribute type 9 has an invalid length. [ 124.408160][ T8427] netlink: 'syz.0.727': attribute type 8 has an invalid length. [ 124.454314][ T8437] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.462581][ T8437] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.471093][ T8437] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.479405][ T8437] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.709503][ T8454] netlink: 'syz.4.735': attribute type 4 has an invalid length. [ 124.753165][ T8456] TCP: TCP_TX_DELAY enabled [ 124.853164][ T8464] sctp: [Deprecated]: syz.0.737 (pid 8464) Use of int in maxseg socket option. [ 124.853164][ T8464] Use struct sctp_assoc_value instead [ 125.195485][ T8482] __nla_validate_parse: 8 callbacks suppressed [ 125.195503][ T8482] netlink: 52 bytes leftover after parsing attributes in process `syz.2.747'. [ 125.354912][ T8495] netlink: 104 bytes leftover after parsing attributes in process `syz.4.752'. [ 125.530863][ T8503] netlink: 4 bytes leftover after parsing attributes in process `syz.0.753'. [ 125.706740][ T8515] tipc: Started in network mode [ 125.711656][ T8515] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 125.730379][ T8515] tipc: Enabled bearer , priority 10 [ 125.823731][ T8524] netlink: 68 bytes leftover after parsing attributes in process `syz.3.761'. [ 125.959454][ T8527] netlink: 4 bytes leftover after parsing attributes in process `syz.3.761'. [ 126.043053][ T8533] netlink: 'syz.1.763': attribute type 1 has an invalid length. [ 126.099599][ T8533] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 126.175775][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 126.729456][ T24] tipc: Node number set to 10463914 [ 126.746246][ T8564] netlink: 28 bytes leftover after parsing attributes in process `syz.0.771'. [ 126.785249][ T8564] netlink: 28 bytes leftover after parsing attributes in process `syz.0.771'. [ 127.100729][ T8586] ip6tnl2: entered promiscuous mode [ 127.113762][ T8586] ip6tnl2: entered allmulticast mode [ 127.148585][ T8594] netlink: 'syz.3.779': attribute type 33 has an invalid length. [ 127.293163][ T8601] netlink: 12 bytes leftover after parsing attributes in process `syz.3.781'. [ 127.464514][ T8613] netlink: 'syz.0.785': attribute type 14 has an invalid length. [ 127.579738][ T8623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.789'. [ 127.633247][ T8627] : entered promiscuous mode [ 127.657556][ T8630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.791'. [ 127.668080][ T8630] netlink: 'syz.0.791': attribute type 5 has an invalid length. [ 127.681337][ T8630] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 127.698208][ T8630] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 127.717814][ T8630] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 127.737658][ T8630] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 127.770505][ T8630] geneve2: entered promiscuous mode [ 127.775789][ T8630] geneve2: entered allmulticast mode [ 127.962946][ T8634] veth0_to_bond: entered allmulticast mode [ 128.352431][ T8661] netlink: 'syz.1.801': attribute type 2 has an invalid length. [ 128.717528][ T8683] lo: left allmulticast mode [ 128.722833][ T8683] tunl0: left allmulticast mode [ 128.732739][ T8683] gre0: left allmulticast mode [ 128.742980][ T8683] gretap0: left allmulticast mode [ 128.759215][ T8683] erspan0: left allmulticast mode [ 128.772426][ T8683] ip_vti0: left allmulticast mode [ 128.787800][ T8683] ip6_vti0: left allmulticast mode [ 128.807412][ T8683] sit0: left allmulticast mode [ 128.816874][ T8683] ip6tnl0: left allmulticast mode [ 128.822313][ T8683] ip6gre0: left allmulticast mode [ 128.831152][ T8683] syz_tun: left allmulticast mode [ 128.836518][ T8683] ip6gretap0: left allmulticast mode [ 128.849609][ T8683] bridge0: left allmulticast mode [ 128.858523][ T8683] vcan0: left allmulticast mode [ 128.863600][ T8683] bond0: left allmulticast mode [ 128.873920][ T8683] nlmon0: left allmulticast mode [ 128.879291][ T8683] caif0: left allmulticast mode [ 128.894779][ T8683] batadv0: left allmulticast mode [ 128.907218][ T8683] veth0: left allmulticast mode [ 128.918139][ T8683] veth1: left allmulticast mode [ 128.930547][ T8683] wg0: left allmulticast mode [ 128.935650][ T8683] wg1: left allmulticast mode [ 128.940630][ T8683] wg2: left allmulticast mode [ 128.948847][ T8683] veth0_to_bridge: left allmulticast mode [ 128.955353][ T8683] bridge_slave_0: left allmulticast mode [ 128.961760][ T8683] veth1_to_bridge: left allmulticast mode [ 128.972473][ T8683] bridge_slave_1: left allmulticast mode [ 128.982050][ T8683] veth0_to_bond: left allmulticast mode [ 128.988596][ T8683] bond_slave_0: left allmulticast mode [ 128.998094][ T8683] veth1_to_bond: left allmulticast mode [ 129.008300][ T8683] bond_slave_1: left allmulticast mode [ 129.014706][ T8683] veth0_to_team: left allmulticast mode [ 129.020910][ T8683] team_slave_0: left allmulticast mode [ 129.027309][ T8683] veth1_to_team: left allmulticast mode [ 129.033518][ T8683] team_slave_1: left allmulticast mode [ 129.044648][ T8683] veth0_to_batadv: left allmulticast mode [ 129.054653][ T8683] batadv_slave_0: left allmulticast mode [ 129.062026][ T8683] veth1_to_batadv: left allmulticast mode [ 129.068828][ T8683] batadv_slave_1: left allmulticast mode [ 129.076918][ T8683] xfrm0: left allmulticast mode [ 129.081959][ T8683] veth0_to_hsr: left allmulticast mode [ 129.093000][ T8683] veth1_to_hsr: left allmulticast mode [ 129.102492][ T8683] hsr0: left allmulticast mode [ 129.111141][ T8683] hsr_slave_0: left allmulticast mode [ 129.116600][ T8683] hsr_slave_1: left allmulticast mode [ 129.122259][ T8683] veth1_virt_wifi: left allmulticast mode [ 129.129105][ T8683] veth0_virt_wifi: left allmulticast mode [ 129.135570][ T8683] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 129.142815][ T8683] veth1_vlan: left allmulticast mode [ 129.149470][ T8683] vlan0: left allmulticast mode [ 129.154750][ T8683] vlan1: left allmulticast mode [ 129.159903][ T8683] macvlan0: left allmulticast mode [ 129.165356][ T8683] macvlan1: left allmulticast mode [ 129.174261][ T8683] ipvlan0: left allmulticast mode [ 129.179435][ T8683] ipvlan1: left allmulticast mode [ 129.185818][ T8683] veth0_vlan: left allmulticast mode [ 129.191282][ T8683] geneve0: left allmulticast mode [ 129.196794][ T8683] geneve1: left allmulticast mode [ 129.203618][ T8683] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 129.211283][ T8683] mac80211_hwsim hwsim4 wlan1: left allmulticast mode [ 129.218673][ T8683] veth2: left allmulticast mode [ 129.224404][ T8683] veth3: left allmulticast mode [ 129.254782][ T8683] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.263300][ T8683] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.271900][ T8683] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.280425][ T8683] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.400091][ T8713] validate_nla: 1 callbacks suppressed [ 129.400109][ T8713] netlink: 'syz.0.816': attribute type 1 has an invalid length. [ 129.417230][ T8713] netlink: 'syz.0.816': attribute type 1 has an invalid length. [ 129.426052][ T8686] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 129.449441][ T8686] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 129.537954][ T8717] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 129.677643][ T8727] batman_adv: batadv0: Removing interface: team0 [ 129.689881][ T8727] team0: Device vti0 is up. Set it down before adding it as a team port [ 129.908720][ T8739] dvmrp1: entered allmulticast mode [ 129.951550][ T8742] gtp0: entered promiscuous mode [ 129.956593][ T8742] gtp0: entered allmulticast mode [ 129.963555][ T8739] dvmrp1: left allmulticast mode [ 130.205097][ T8761] __nla_validate_parse: 79 callbacks suppressed [ 130.205112][ T8761] netlink: 40 bytes leftover after parsing attributes in process `syz.2.830'. [ 130.539588][ T8787] netlink: 'syz.2.838': attribute type 29 has an invalid length. [ 130.570524][ T8787] netlink: 'syz.2.838': attribute type 29 has an invalid length. [ 130.656414][ T8795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.842'. [ 130.664711][ T8796] netlink: 596 bytes leftover after parsing attributes in process `syz.2.838'. [ 130.791448][ T8803] netlink: 52 bytes leftover after parsing attributes in process `syz.1.843'. [ 130.833289][ T8804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.843'. [ 130.843455][ T8804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.843'. [ 130.926671][ T8809] netlink: 20 bytes leftover after parsing attributes in process `syz.2.845'. [ 131.604793][ T51] Bluetooth: hci0: command tx timeout [ 131.917159][ T8875] netlink: 36 bytes leftover after parsing attributes in process `syz.1.857'. [ 131.939521][ T8877] netlink: 4 bytes leftover after parsing attributes in process `syz.4.860'. [ 131.974349][ T8880] netlink: 'syz.0.861': attribute type 1 has an invalid length. [ 131.996182][ T8884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.862'. [ 132.112860][ T8880] 8021q: adding VLAN 0 to HW filter on device bond3 [ 132.650595][ T8927] veth3: entered promiscuous mode [ 132.664401][ T8927] veth3: entered allmulticast mode [ 132.690451][ T8932] netlink: 'syz.3.874': attribute type 3 has an invalid length. [ 132.733216][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.911293][ T8939] vlan1: entered allmulticast mode [ 132.919780][ T8939] veth0_vlan: entered allmulticast mode [ 133.233696][ T8963] veth0: entered promiscuous mode [ 133.268058][ T8963] veth0: left promiscuous mode [ 133.900224][ T9007] netlink: 'syz.4.899': attribute type 1 has an invalid length. [ 133.966171][ T9007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.011202][ T9008] gretap0: entered promiscuous mode [ 134.055497][ T9008] bond0: (slave gretap0): making interface the new active one [ 134.091170][ T9008] bond0: (slave gretap0): Enslaving as an active interface with an up link [ 134.113284][ T9032] netlink: 'syz.3.906': attribute type 1 has an invalid length. [ 134.146974][ T9007] bond0: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 134.202169][ T9021] bond0: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 134.260503][ T9032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.423234][ T9048] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 134.450632][ T9049] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 135.061500][ T9085] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 135.251479][ T9107] openvswitch: netlink: Multiple metadata blocks provided [ 135.292286][ T9112] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 135.472849][ T9122] net veth1_virt_wifi .: renamed from virt_wifi0 [ 135.595877][ T9127] netlink: 'syz.1.934': attribute type 12 has an invalid length. [ 135.603876][ T9127] netlink: 'syz.1.934': attribute type 29 has an invalid length. [ 135.612253][ T9127] __nla_validate_parse: 17 callbacks suppressed [ 135.612269][ T9127] netlink: 148 bytes leftover after parsing attributes in process `syz.1.934'. [ 135.629964][ T9127] netlink: 'syz.1.934': attribute type 1 has an invalid length. [ 135.638035][ T9127] netlink: 47 bytes leftover after parsing attributes in process `syz.1.934'. [ 135.648373][ T9127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.934'. [ 135.806316][ T9133] netlink: 56 bytes leftover after parsing attributes in process `syz.4.937'. [ 135.863285][ T9135] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 136.128470][ T9149] xt_CT: No such helper "snmp" [ 136.234723][ T9157] x_tables: duplicate underflow at hook 2 [ 136.480101][ T9179] netdevsim netdevsim3: Direct firmware load for  failed with error -2 [ 136.490512][ T9179] netdevsim netdevsim3: Falling back to sysfs fallback for:  [ 136.514996][ T9181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.949'. [ 136.562407][ T9185] netlink: 'syz.1.952': attribute type 2 has an invalid length. [ 136.616346][ T9183] netlink: 'syz.0.951': attribute type 11 has an invalid length. [ 136.625577][ T9183] netlink: 'syz.0.951': attribute type 11 has an invalid length. [ 136.633456][ T9183] netlink: 'syz.0.951': attribute type 11 has an invalid length. [ 136.641763][ T9183] netlink: 'syz.0.951': attribute type 11 has an invalid length. [ 136.659818][ T9183] netlink: 'syz.0.951': attribute type 11 has an invalid length. [ 136.670307][ T9183] netlink: 'syz.0.951': attribute type 11 has an invalid length. [ 136.683200][ T9183] netlink: 'syz.0.951': attribute type 11 has an invalid length. [ 136.693616][ T9183] netlink: 'syz.0.951': attribute type 11 has an invalid length. [ 136.702331][ T9183] netlink: 'syz.0.951': attribute type 11 has an invalid length. [ 136.713079][ T9183] netlink: 'syz.0.951': attribute type 11 has an invalid length. [ 136.721916][ T9183] netlink: 12 bytes leftover after parsing attributes in process `syz.0.951'. [ 136.956808][ T9195] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 136.957267][ T9196] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 136.976465][ T9195] sctp: [Deprecated]: syz.1.954 (pid 9195) Use of int in max_burst socket option. [ 136.976465][ T9195] Use struct sctp_assoc_value instead [ 136.978731][ T9196] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 136.995764][ T9195] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.954'. [ 137.012305][ T9196] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 137.018779][ T9196] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 137.028773][ T9196] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 137.492629][ T9221] netlink: 203396 bytes leftover after parsing attributes in process `syz.1.966'. [ 137.540961][ T9226] netlink: 4 bytes leftover after parsing attributes in process `syz.2.965'. [ 137.576747][ T9228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.965'. [ 137.652467][ T9234] netlink: 'syz.4.967': attribute type 10 has an invalid length. [ 137.701588][ T9237] xt_HMARK: spi-set and port-set can't be combined [ 137.749625][ T9234] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.763590][ T9234] bridge_slave_1: left allmulticast mode [ 137.789223][ T9234] bridge_slave_1: left promiscuous mode [ 137.807116][ T9234] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.847644][ T9241] pim6reg: entered allmulticast mode [ 138.080609][ T9263] syzkaller1: entered promiscuous mode [ 138.091094][ T9263] syzkaller1: entered allmulticast mode [ 138.221880][ T9266] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 138.230500][ T9266] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 138.968253][ T9315] netlink: 'syz.0.990': attribute type 3 has an invalid length. [ 140.840950][ T9370] netlink: 'syz.3.1002': attribute type 29 has an invalid length. [ 141.142607][ T9389] vxcan1 speed is unknown, defaulting to 1000 [ 141.178805][ T9389] vxcan1 speed is unknown, defaulting to 1000 [ 141.203272][ T9389] vxcan1 speed is unknown, defaulting to 1000 [ 141.527413][ T9408] __nla_validate_parse: 10 callbacks suppressed [ 141.527439][ T9408] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1013'. [ 141.598884][ T9389] infiniband syz2: set active [ 141.605751][ T10] vxcan1 speed is unknown, defaulting to 1000 [ 141.612135][ T9389] infiniband syz2: added vxcan1 [ 141.653807][ T9389] RDS/IB: syz2: added [ 141.658570][ T9389] smc: adding ib device syz2 with port count 1 [ 141.665011][ T9389] smc: ib device syz2 port 1 has pnetid [ 141.686930][ T9389] vxcan1 speed is unknown, defaulting to 1000 [ 141.695303][ T10] vxcan1 speed is unknown, defaulting to 1000 [ 141.889998][ T9422] netlink: 'syz.0.1018': attribute type 32 has an invalid length. [ 141.943489][ T9389] vxcan1 speed is unknown, defaulting to 1000 [ 142.137239][ T9432] netlink: 'syz.1.1020': attribute type 9 has an invalid length. [ 142.321245][ T9436] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1021'. [ 142.358153][ T9436] veth0_to_hsr: entered allmulticast mode [ 142.401126][ T9389] vxcan1 speed is unknown, defaulting to 1000 [ 142.446730][ T9443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1022'. [ 142.473977][ T9443] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1022'. [ 142.552555][ T9448] netlink: 'syz.4.1023': attribute type 8 has an invalid length. [ 142.725577][ T9453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1025'. [ 142.919537][ T9389] vxcan1 speed is unknown, defaulting to 1000 [ 143.212316][ T9477] xt_l2tp: v2 tid > 0xffff: 150994944 [ 143.532426][ T9389] vxcan1 speed is unknown, defaulting to 1000 [ 143.722247][ T9496] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1037'. [ 143.726733][ T9497] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1037'. [ 144.541257][ T9535] vxcan1 speed is unknown, defaulting to 1000 [ 144.621998][ T9550] net_ratelimit: 71 callbacks suppressed [ 144.622015][ T9550] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 144.890007][ T9566] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20004 [ 144.903575][ T9566] raw_sendmsg: syz.4.1061 forgot to set AF_INET. Fix it! [ 144.911211][ T9566] netlink: 268 bytes leftover after parsing attributes in process `syz.4.1061'. [ 144.926432][ T9566] openvswitch: netlink: Flow key attr not present in new flow. [ 144.937909][ T9566] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1061'. [ 145.237354][ T9585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1065'. [ 146.510022][ T9603] ip6erspan0: entered allmulticast mode [ 146.649245][ T9601] __nla_validate_parse: 1 callbacks suppressed [ 146.649262][ T9601] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1069'. [ 146.968491][ T9633] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1077'. [ 146.980850][ T9634] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1080'. [ 147.006830][ T9633] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1077'. [ 147.104979][ T9641] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1081'. [ 147.158558][ T9649] netlink: 'syz.2.1079': attribute type 83 has an invalid length. [ 147.173685][ T9643] netlink: 'syz.0.1081': attribute type 10 has an invalid length. [ 147.316485][ T9643] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 147.417737][ T9650] vxcan1 speed is unknown, defaulting to 1000 [ 147.549605][ T9669] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1087'. [ 147.662888][ T9676] tipc: Enabling of bearer rejected, failed to enable media [ 147.671319][ T9675] tipc: Enabling of bearer rejected, failed to enable media [ 147.705206][ T9675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1089'. [ 147.890206][ T9682] bond3: entered promiscuous mode [ 147.895436][ T9682] bond3: entered allmulticast mode [ 147.901026][ T9682] 8021q: adding VLAN 0 to HW filter on device bond3 [ 148.073421][ T9682] bond3 (unregistering): Released all slaves [ 148.110445][ T9688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1094'. [ 148.237781][ T9695] !: renamed from dummy0 (while UP) [ 148.440216][ T9719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1099'. [ 148.513145][ T9719] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1099'. [ 149.521395][ T9715] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 149.552419][ T9715] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 149.579795][ T9726] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 149.581837][ T9715] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 149.680194][ T9731] syzkaller1: entered promiscuous mode [ 149.690428][ T9731] syzkaller1: entered allmulticast mode [ 149.705956][ T9731] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.057750][ T9748] netlink: 'syz.4.1109': attribute type 1 has an invalid length. [ 150.250866][ T9749] bond0 (unregistering): (slave 1!): Releasing backup interface [ 150.265991][ T9749] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.281719][ T9749] bond0 (unregistering): Released all slaves [ 150.640855][ T9778] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 150.668438][ T9778] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 150.694764][ T9778] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 150.707013][ T9778] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 151.188570][ T9806] openvswitch: netlink: Actions may not be safe on all matching packets [ 151.330002][ T9818] bridge1: entered promiscuous mode [ 151.337800][ T9818] bridge1: entered allmulticast mode [ 151.393369][ T9822] netlink: 'syz.0.1132': attribute type 1 has an invalid length. [ 151.485396][ T9833] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 151.763768][ T9854] netlink: 'syz.4.1143': attribute type 10 has an invalid length. [ 151.820234][ T9854] veth1_vlan: entered allmulticast mode [ 151.867672][ T9854] team0: Device veth1_vlan failed to register rx_handler [ 151.916533][ T9862] IPVS: Error connecting to the multicast addr [ 151.989255][ T9862] __nla_validate_parse: 80 callbacks suppressed [ 151.989273][ T9862] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1145'. [ 152.193367][ T9887] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1151'. [ 152.368193][ T9898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1153'. [ 152.388132][ T9906] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1155'. [ 152.398472][ T9903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1153'. [ 152.617643][ T9917] netlink: 'syz.2.1157': attribute type 1 has an invalid length. [ 152.634939][ T9917] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1157'. [ 152.756860][ T9928] openvswitch: netlink: Unknown key attributes 2 [ 152.768374][ T9924] vxcan1 speed is unknown, defaulting to 1000 [ 152.787936][ T9932] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1162'. [ 153.182979][ T9951] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1168'. [ 153.192696][ T9951] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1168'. [ 153.287565][ T9957] netlink: 'syz.3.1169': attribute type 2 has an invalid length. [ 153.523165][ T9968] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1173'. [ 153.613248][ T9953] team0 (unregistering): Port device team_slave_0 removed [ 153.657236][ T9953] team0 (unregistering): Port device team_slave_1 removed [ 154.076273][ T9995] netlink: 'syz.1.1180': attribute type 3 has an invalid length. [ 154.129114][T10002] netlink: 'syz.3.1181': attribute type 17 has an invalid length. [ 154.349427][T10018] netlink: 'syz.1.1186': attribute type 1 has an invalid length. [ 154.464514][T10021] bond0: (slave bridge3): making interface the new active one [ 154.472997][T10021] bond0: (slave bridge3): Enslaving as an active interface with an up link [ 154.957532][T10040] netlink: 'syz.2.1193': attribute type 4 has an invalid length. [ 155.319352][T10057] xfrm1: entered promiscuous mode [ 155.331349][T10057] xfrm1: entered allmulticast mode [ 155.632945][T10073] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 155.982196][T10098] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 155.997492][T10100] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 156.046705][T10098] veth0: entered promiscuous mode [ 156.066181][T10097] veth0: left promiscuous mode [ 156.243001][T10115] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 156.278773][ T24] IPVS: starting estimator thread 0... [ 156.387154][T10121] IPVS: using max 52 ests per chain, 124800 per kthread [ 156.439294][T10131] netlink: 'syz.4.1219': attribute type 1 has an invalid length. [ 156.677007][T10143] netlink: 'syz.2.1225': attribute type 10 has an invalid length. [ 156.835425][T10154] netlink: 'syz.3.1229': attribute type 1 has an invalid length. [ 156.843283][T10154] netlink: 'syz.3.1229': attribute type 4 has an invalid length. [ 157.073140][T10166] __nla_validate_parse: 20 callbacks suppressed [ 157.073159][T10166] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1234'. [ 157.433572][T10193] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1242'. [ 157.559251][T10199] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1246'. [ 157.569033][T10199] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1246'. [ 157.815254][T10217] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1252'. [ 157.938766][T10225] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20006 [ 158.049695][T10235] Bluetooth: MGMT ver 1.23 [ 158.072536][T10237] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1257'. [ 158.100758][T10236] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1257'. [ 158.246665][T10255] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 158.269375][T10258] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1261'. [ 158.322321][T10261] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1262'. [ 158.440947][T10263] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1263'. [ 158.800481][T10283] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.823111][T10291] syzkaller1: entered promiscuous mode [ 158.873762][T10291] syzkaller1: entered allmulticast mode [ 159.304768][T10320] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.556319][T10339] delete_channel: no stack [ 160.103018][T10372] xt_hashlimit: size too large, truncated to 1048576 [ 160.138841][T10375] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (1452) ! [ 160.148392][T10372] xt_hashlimit: size too large, truncated to 1048576 [ 160.269364][T10380] 8021q: adding VLAN 0 to HW filter on device bond1 [ 160.281758][T10380] bond0: (slave bond1): Enslaving as an active interface with a down link [ 160.311926][T10387] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 160.646871][T10406] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.734504][T10406] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.942615][T10434] validate_nla: 8 callbacks suppressed [ 160.942632][T10434] netlink: 'syz.0.1316': attribute type 13 has an invalid length. [ 160.958498][T10434] netlink: 'syz.0.1316': attribute type 17 has an invalid length. [ 160.961919][T10436] veth0: entered promiscuous mode [ 161.051310][T10434] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 161.071504][T10435] veth0: left promiscuous mode [ 161.531535][ T978] IPVS: starting estimator thread 0... [ 161.637073][T10470] IPVS: using max 36 ests per chain, 86400 per kthread [ 161.967922][T10490] vxcan1 speed is unknown, defaulting to 1000 [ 162.150705][T10497] xt_CT: No such helper "snmp" [ 162.378006][T10510] netlink: 'syz.2.1343': attribute type 2 has an invalid length. [ 162.406540][T10510] __nla_validate_parse: 14 callbacks suppressed [ 162.406557][T10510] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1343'. [ 162.752998][T10522] bond0: entered promiscuous mode [ 162.759446][T10522] batadv_slave_0: entered promiscuous mode [ 162.766167][T10522] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 162.773815][T10522] Cannot create hsr debugfs directory [ 162.779410][T10522] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 162.790470][T10522] hsr1: entered promiscuous mode [ 162.814508][T10533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1351'. [ 162.827225][T10533] netlink: 'syz.0.1351': attribute type 30 has an invalid length. [ 162.977551][T10533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1351'. [ 162.999152][T10533] netlink: 'syz.0.1351': attribute type 30 has an invalid length. [ 163.021053][T10536] xt_CT: No such helper "snmp" [ 163.078632][T10549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1356'. [ 163.178943][T10553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1357'. [ 163.226703][T10553] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1357'. [ 163.250270][T10556] netlink: 'syz.2.1358': attribute type 1 has an invalid length. [ 163.274004][T10556] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1358'. [ 163.311290][T10556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1358'. [ 163.336506][T10559] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1358'. [ 163.528444][T10569] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1362'. [ 163.567265][T10569] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.594980][T10569] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.612543][T10569] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.623502][T10569] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.642069][T10569] geneve2: entered promiscuous mode [ 163.661992][T10569] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.684535][T10569] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.693058][T10569] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.702544][T10569] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.715461][T10579] xt_policy: neither incoming nor outgoing policy selected [ 163.832947][T10587] netlink: 'syz.1.1369': attribute type 21 has an invalid length. [ 164.315870][T10632] xt_CT: You must specify a L4 protocol and not use inversions on it [ 164.598441][T10655] sctp: [Deprecated]: syz.2.1389 (pid 10655) Use of struct sctp_assoc_value in delayed_ack socket option. [ 164.598441][T10655] Use struct sctp_sack_info instead [ 165.146667][T10684] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.179261][T10685] syzkaller1: entered promiscuous mode [ 165.191329][T10685] syzkaller1: entered allmulticast mode [ 165.209276][T10684] SET target dimension over the limit! [ 166.407564][T10768] vxcan1 speed is unknown, defaulting to 1000 [ 166.536699][T10781] netlink: 'syz.1.1426': attribute type 1 has an invalid length. [ 166.589656][T10780] batadv0: entered promiscuous mode [ 166.625286][T10780] batadv0: left promiscuous mode [ 166.812304][T10798] netlink: 'syz.3.1431': attribute type 1 has an invalid length. [ 166.849133][T10798] netlink: 'syz.3.1431': attribute type 2 has an invalid length. [ 166.898679][T10802] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.907923][T10802] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.916225][T10802] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.924583][T10802] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.932935][T10802] geneve2: entered promiscuous mode [ 166.938858][T10802] geneve2: entered allmulticast mode [ 167.471400][T10832] ip6gre1: entered allmulticast mode [ 167.475178][T10834] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.486265][T10831] netlink: 'syz.2.1440': attribute type 2 has an invalid length. [ 167.520279][T10840] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.532245][T10838] __nla_validate_parse: 23 callbacks suppressed [ 167.532262][T10838] netlink: 1196 bytes leftover after parsing attributes in process `syz.3.1443'. [ 167.627740][T10846] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1444'. [ 167.795714][T10853] netlink: 'syz.3.1446': attribute type 33 has an invalid length. [ 167.829100][T10853] vxcan1 speed is unknown, defaulting to 1000 [ 167.978884][T10862] bond0: (slave bridge_slave_1): Releasing backup interface [ 167.998388][T10862] bond0: (slave bond_slave_0): Releasing backup interface [ 168.054676][T10862] bond0: (slave bond_slave_1): Releasing backup interface [ 168.109297][T10862] bond0: (slave netdevsim0): Releasing backup interface [ 168.142453][T10862] bond2: (slave gretap1): Releasing active interface [ 168.390216][T10885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1455'. [ 168.427489][T10887] netlink: 'syz.3.1459': attribute type 11 has an invalid length. [ 168.433906][ T978] IPVS: starting estimator thread 0... [ 168.481957][T10891] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1459'. [ 168.546959][T10889] IPVS: using max 35 ests per chain, 84000 per kthread [ 168.583018][T10892] sch_fq: defrate 0 ignored. [ 168.588997][T10891] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1459'. [ 168.890916][T10903] vxcan1 speed is unknown, defaulting to 1000 [ 168.932166][T10909] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1462'. [ 168.980190][T10909] tunl0: entered promiscuous mode [ 169.002473][T10909] netlink: 'syz.0.1462': attribute type 3 has an invalid length. [ 169.033549][T10909] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1462'. [ 169.068556][T10911] ip6gre2: entered allmulticast mode [ 169.510673][T10932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1475'. [ 169.520677][T10932] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1475'. [ 169.600289][T10902] delete_channel: no stack [ 169.970619][T10958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1482'. [ 170.121623][T10963] vxcan1 speed is unknown, defaulting to 1000 [ 170.648577][T10989] netlink: 'syz.3.1492': attribute type 10 has an invalid length. [ 171.876258][T10989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.885165][T10989] team0: Port device batadv0 added [ 172.169972][T11018] tipc: Started in network mode [ 172.189212][T11018] tipc: Node identity 080211000001, cluster identity 4711 [ 172.198585][T11018] tipc: Enabled bearer , priority 0 [ 172.224495][T11020] tipc: Enabling of bearer rejected, failed to enable media [ 172.350948][T11018] xt_CT: No such helper "pptp" [ 172.549172][T11040] xt_CT: No such helper "snmp" [ 172.647801][T11048] __nla_validate_parse: 7 callbacks suppressed [ 172.647820][T11048] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1505'. [ 172.829512][T11057] vxcan1 speed is unknown, defaulting to 1000 [ 173.053327][T11068] vlan1: entered allmulticast mode [ 173.072590][T11068] veth0_vlan: entered allmulticast mode [ 173.318291][ T978] tipc: Node number set to 134418688 [ 174.065968][T11110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1520'. [ 174.102664][T11110] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1520'. [ 174.336140][T11122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1522'. [ 174.362722][T11122] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1522'. [ 174.531757][T11133] netlink: 45 bytes leftover after parsing attributes in process `syz.4.1526'. [ 175.029461][T11161] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1532'. [ 175.042382][T11164] netlink: 'syz.1.1533': attribute type 1 has an invalid length. [ 175.250347][T11174] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1535'. [ 175.356573][T11177] vxcan1 speed is unknown, defaulting to 1000 [ 175.723196][T11189] xt_CT: No such helper "syz0" [ 175.740722][T11199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1543'. [ 175.750911][T11199] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1543'. [ 176.464770][T11237] IPv6: sit1: Disabled Multicast RS [ 176.505113][T11237] sit1: entered allmulticast mode [ 176.748742][T11247] mac80211_hwsim hwsim11 +: renamed from syzkaller0 [ 176.777619][T11247] tipc: Disabling bearer [ 176.933516][T11257] netlink: 'syz.0.1557': attribute type 1 has an invalid length. [ 176.993182][T11262] tipc: Enabled bearer , priority 12 [ 177.012981][T11266] x_tables: ip_tables: udp match: only valid for protocol 17 [ 177.033170][T11265] bond5: (slave gretap2): making interface the new active one [ 177.043406][T11265] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 177.162554][T11267] netlink: 'syz.3.1559': attribute type 10 has an invalid length. [ 177.220204][T11267] team0: Port device geneve0 added [ 177.287388][T11269] vxcan1 speed is unknown, defaulting to 1000 [ 177.928354][T11309] __nla_validate_parse: 7 callbacks suppressed [ 177.928371][T11309] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1572'. [ 177.982250][T11315] netlink: 'syz.4.1576': attribute type 26 has an invalid length. [ 178.010524][T11309] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1572'. [ 178.247090][T11322] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1577'. [ 178.259890][T11322] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1577'. [ 178.309541][T11323] netlink: 'syz.4.1579': attribute type 25 has an invalid length. [ 178.447221][T11335] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1583'. [ 178.498325][T11337] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1584'. [ 178.723548][T11355] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1591'. [ 178.770460][T11360] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 178.901975][T11366] SET target dimension over the limit! [ 178.909279][T11366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1595'. [ 179.147375][T11379] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1602'. [ 179.165931][T11381] ipvlan2: entered promiscuous mode [ 179.172598][T11381] bridge0: port 1(ipvlan2) entered blocking state [ 179.182069][T11381] bridge0: port 1(ipvlan2) entered disabled state [ 179.188927][T11381] ipvlan2: entered allmulticast mode [ 179.194370][T11381] bridge0: entered allmulticast mode [ 179.203723][T11381] ipvlan2: left allmulticast mode [ 179.209084][T11381] bridge0: left allmulticast mode [ 179.241699][T11386] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1604'. [ 179.508124][T11405] openvswitch: netlink: Message has 24 unknown bytes. [ 179.519576][T11405] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.566177][T11410] netlink: 'syz.3.1610': attribute type 5 has an invalid length. [ 179.867395][T11430] netlink: 'syz.3.1618': attribute type 21 has an invalid length. [ 180.110385][T11443] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 180.527507][T11482] syzkaller0: entered allmulticast mode [ 180.614547][T11490] netlink: 'syz.1.1635': attribute type 49 has an invalid length. [ 180.753418][T11501] netlink: 'syz.2.1637': attribute type 4 has an invalid length. [ 180.999836][T11518] tipc: Started in network mode [ 181.005088][T11518] tipc: Node identity aaaaaaaaaa33, cluster identity 292 [ 181.012793][T11518] tipc: Enabled bearer , priority 12 [ 181.646618][T11551] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 182.124317][ T5918] tipc: Node number set to 10070698 [ 182.379157][T11586] netlink: 'syz.0.1659': attribute type 2 has an invalid length. [ 183.399062][T11647] __nla_validate_parse: 10 callbacks suppressed [ 183.399080][T11647] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1677'. [ 183.576716][T11657] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 183.600158][T11657] netlink: 'syz.4.1678': attribute type 33 has an invalid length. [ 183.624292][T11657] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1678'. [ 183.773908][T11665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1682'. [ 183.897872][T11673] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1684'. [ 184.044558][T11679] siw: device registration error -23 [ 184.372648][T11689] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1690'. [ 184.396226][T11689] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1690'. [ 184.457197][T11691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.609711][T11689] netlink: 4608 bytes leftover after parsing attributes in process `syz.2.1690'. [ 186.248835][T11764] openvswitch: netlink: Geneve opt len 63 is not a multiple of 4. [ 186.430626][T11777] netlink: 'syz.0.1715': attribute type 2 has an invalid length. [ 186.459823][T11776] af_packet: tpacket_rcv: packet too big, clamped from 56584 to 4. macoff=68 [ 186.496997][T11776] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 186.749592][T11792] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1721'. [ 186.779068][T11797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1722'. [ 187.173254][T11812] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 187.239080][T11818] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1726'. [ 187.264665][T11817] syz.1.1730 (11817) used obsolete PPPIOCDETACH ioctl [ 187.531357][T11835] ip6t_rpfilter: unknown options [ 187.829917][T11844] vxcan1 speed is unknown, defaulting to 1000 [ 188.425576][T11875] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.453043][T11875] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.061844][T11894] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 189.407412][T11908] __nla_validate_parse: 4 callbacks suppressed [ 189.407429][T11908] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1759'. [ 189.481784][T11910] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1761'. [ 189.508124][T11910] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1761'. [ 190.003028][T11935] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1766'. [ 190.027059][T11936] netlink: 'syz.4.1769': attribute type 10 has an invalid length. [ 190.869618][T11971] netlink: 2680 bytes leftover after parsing attributes in process `syz.0.1778'. [ 190.899809][T11971] netlink: 2680 bytes leftover after parsing attributes in process `syz.0.1778'. [ 191.175885][T11993] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20003 [ 191.176710][T11994] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1786'. [ 191.203144][T11993] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1784'. [ 191.225988][T11993] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1784'. [ 191.275861][T11993] netlink: 'syz.3.1784': attribute type 6 has an invalid length. [ 191.284596][T11993] netlink: 'syz.3.1784': attribute type 5 has an invalid length. [ 191.310560][T11993] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1784'. [ 191.538126][T12011] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 192.027780][T12043] netlink: 'syz.4.1800': attribute type 2 has an invalid length. [ 192.219878][T12052] xt_limit: Overflow, try lower: 0/0 [ 192.281752][T12055] bridge0: port 2(batadv1) entered blocking state [ 192.291013][T12055] bridge0: port 2(batadv1) entered disabled state [ 192.301505][T12055] batadv1: entered allmulticast mode [ 192.310197][T12055] batadv1: entered promiscuous mode [ 192.322272][T12055] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 192.411332][T12062] bridge0: port 4(batadv2) entered blocking state [ 192.429113][T12062] bridge0: port 4(batadv2) entered disabled state [ 192.440255][T12062] batadv2: entered allmulticast mode [ 192.504124][T12062] batadv2: entered promiscuous mode [ 192.732231][T12079] netlink: 'syz.2.1812': attribute type 6 has an invalid length. [ 192.775188][ T9828] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 192.784864][ T9828] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 192.835105][T12083] xt_ipcomp: unknown flags B [ 192.892404][T12083] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 192.911854][ T9828] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 192.921538][ T9828] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 192.951796][T12089] netlink: 'syz.1.1814': attribute type 33 has an invalid length. [ 194.608733][T12168] bridge0: port 3(30猉功D) entered disabled state [ 194.671181][T12168] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.710364][T12168] batman_adv: batadv0: Interface deactivated: dummy0 [ 194.846883][T12168] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.881994][T12168] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.064886][T12168] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.084243][T12168] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.100800][T12168] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.123129][T12168] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.226611][T12168] vlan0: left allmulticast mode [ 195.231743][T12168] veth0_vlan: left allmulticast mode [ 195.237854][T12168] vlan0: left promiscuous mode [ 195.422429][T12192] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 195.426409][T12195] netlink: 'syz.0.1854': attribute type 2 has an invalid length. [ 195.459396][T12192] __nla_validate_parse: 13 callbacks suppressed [ 195.459413][T12192] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1853'. [ 195.503904][T12192] openvswitch: netlink: Flow key attr not present in new flow. [ 195.898148][T12224] bridge0: port 3(batadv1) entered blocking state [ 195.905251][T12224] bridge0: port 3(batadv1) entered disabled state [ 195.911980][T12224] batadv1: entered allmulticast mode [ 195.921336][T12224] batadv1: entered promiscuous mode [ 196.255797][ T5849] Bluetooth: hci3: command 0x0406 tx timeout [ 196.255852][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 196.261843][ T5849] Bluetooth: hci2: command 0x0406 tx timeout [ 196.398345][ T78] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 196.407879][ T78] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 196.503111][T12236] netlink: 'syz.3.1869': attribute type 4 has an invalid length. [ 196.878371][T12251] syz.4.1877 uses old SIOCAX25GETINFO [ 197.351189][T12282] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1882'. [ 197.382992][T12290] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1883'. [ 197.392216][T12290] netlink: 'syz.2.1883': attribute type 7 has an invalid length. [ 197.417180][T12271] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1882'. [ 197.429518][T12290] netlink: 'syz.2.1883': attribute type 8 has an invalid length. [ 197.468417][T12286] vxcan1 speed is unknown, defaulting to 1000 [ 197.478585][T12290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1883'. [ 197.631693][T12298] veth0: entered promiscuous mode [ 197.650396][T12298] veth0: left promiscuous mode [ 198.842391][T12348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1908'. [ 198.911006][T12353] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1910'. [ 198.963552][T12351] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1909'. [ 199.117906][T12368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1914'. [ 199.372991][T12379] netlink: 'syz.0.1919': attribute type 9 has an invalid length. [ 199.413198][T12386] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1918'. [ 199.617265][T12389] xt_hashlimit: size too large, truncated to 1048576 [ 199.668591][T12398] netlink: 'syz.1.1925': attribute type 14 has an invalid length. [ 199.720460][T12398] bond4: entered promiscuous mode [ 199.727216][T12398] bond4: entered allmulticast mode [ 199.732887][T12398] 8021q: adding VLAN 0 to HW filter on device bond4 [ 199.870280][T12415] xt_recent: Unsupported userspace flags (00000061) [ 199.889971][T12415] hsr_slave_0: left promiscuous mode [ 199.900653][T12415] hsr_slave_1: left promiscuous mode [ 200.202358][T12438] dvmrp1: entered allmulticast mode [ 200.371238][T12450] sctp: [Deprecated]: syz.2.1941 (pid 12450) Use of int in max_burst socket option. [ 200.371238][T12450] Use struct sctp_assoc_value instead [ 200.400040][T12451] sctp: [Deprecated]: syz.2.1941 (pid 12451) Use of int in max_burst socket option. [ 200.400040][T12451] Use struct sctp_assoc_value instead [ 200.439134][T12450] IPVS: Error connecting to the multicast addr [ 200.598651][T12464] __nla_validate_parse: 6 callbacks suppressed [ 200.598672][T12464] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1946'. [ 200.617571][T12464] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1946'. [ 200.682720][T12468] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1947'. [ 200.790874][T12477] tipc: Enabling of bearer rejected, failed to enable media [ 200.807928][T12479] tipc: Enabling of bearer rejected, failed to enable media [ 200.823344][T12481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1950'. [ 200.839215][T12481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1950'. [ 200.849823][T12481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1950'. [ 200.869287][T12481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1950'. [ 200.883496][T12481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1950'. [ 200.899811][T12481] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 200.908408][T12481] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.926868][T12483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1952'. [ 200.996675][T12483] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.094277][T12483] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.169164][T12483] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.197474][T12497] bridge0: port 4(gretap0) entered blocking state [ 201.205633][T12497] bridge0: port 4(gretap0) entered disabled state [ 201.212336][T12497] gretap0: entered allmulticast mode [ 201.219820][T12497] gretap0: entered promiscuous mode [ 201.257873][T12483] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.446932][T12483] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.501815][T12483] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.561730][T12483] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.661223][T12483] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.870556][T12536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1967'. [ 201.930441][T12535] netlink: 'syz.3.1965': attribute type 1 has an invalid length. [ 201.954671][T12540] vxcan1 speed is unknown, defaulting to 1000 [ 202.059012][T12545] netdevsim netdevsim0: Direct firmware load for  failed with error -2 [ 202.122658][T12545] netdevsim netdevsim0: Falling back to sysfs fallback for:  [ 202.156331][T12552] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 202.484543][T12567] netlink: 'syz.3.1974': attribute type 1 has an invalid length. [ 202.496228][T12568] netlink: 'syz.3.1974': attribute type 1 has an invalid length. [ 202.630006][T12574] netlink: 'syz.3.1976': attribute type 10 has an invalid length. [ 202.655887][T12574] veth1_vlan: entered allmulticast mode [ 202.680296][T12574] team0: Device veth1_vlan failed to register rx_handler [ 202.729269][ T4524] tipc: Resetting bearer [ 202.742746][ T4524] tipc: Resetting bearer [ 202.857275][T12580] IPVS: Scheduler module ip_vs_sip not found [ 202.879707][T12586] netlink: 'syz.3.1979': attribute type 9 has an invalid length. [ 203.407191][T12609] sock: sock_timestamping_bind_phc: sock not bind to device [ 204.022412][T12650] sctp: [Deprecated]: syz.3.2000 (pid 12650) Use of int in max_burst socket option. [ 204.022412][T12650] Use struct sctp_assoc_value instead [ 204.094914][T12656] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 204.168547][T12657] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 204.245559][T12656] vxcan1 speed is unknown, defaulting to 1000 [ 205.730263][T12729] xt_CT: No such helper "snmp" [ 206.127691][T12745] vxcan1 speed is unknown, defaulting to 1000 [ 206.439345][T12775] syzkaller1: entered promiscuous mode [ 206.466780][T12775] syzkaller1: entered allmulticast mode [ 206.477588][T12774] x_tables: duplicate underflow at hook 1 [ 206.553666][T12781] __nla_validate_parse: 11 callbacks suppressed [ 206.553685][T12781] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2027'. [ 206.570340][T12782] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 206.710803][T12792] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2029'. [ 206.747178][T12788] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2029'. [ 206.926838][T12800] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2033'. [ 206.968549][T12800] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2033'. [ 207.054924][T12800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2033'. [ 207.063866][T12800] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.355491][T12823] netlink: 'syz.4.2039': attribute type 33 has an invalid length. [ 207.363366][T12823] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2039'. [ 207.411459][T12824] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2039'. [ 207.470566][T12824] batman_adv: batadv0: Removing interface: dummy0 [ 207.517232][T12823] netlink: 'syz.4.2039': attribute type 1 has an invalid length. [ 207.533020][T12823] netlink: 'syz.4.2039': attribute type 2 has an invalid length. [ 207.541072][T12823] netlink: 'syz.4.2039': attribute type 8 has an invalid length. [ 207.573666][T12823] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2039'. [ 207.638303][T12829] netlink: 'syz.0.2041': attribute type 29 has an invalid length. [ 207.777869][T12836] netlink: 'syz.4.2043': attribute type 25 has an invalid length. [ 207.803687][T12836] netlink: 'syz.4.2043': attribute type 7 has an invalid length. [ 208.274549][T12865] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2052'. [ 208.946016][T12905] lo: entered promiscuous mode [ 208.988343][T12905] netlink: 'syz.0.2068': attribute type 2 has an invalid length. [ 209.018809][T12905] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 209.458575][T12951] netlink: 'syz.3.2083': attribute type 8 has an invalid length. [ 210.505857][T13022] erspan0: entered allmulticast mode [ 210.690496][T13036] x_tables: duplicate underflow at hook 1 [ 210.796973][T13040] sctp: [Deprecated]: syz.4.2113 (pid 13040) Use of struct sctp_assoc_value in delayed_ack socket option. [ 210.796973][T13040] Use struct sctp_sack_info instead [ 210.814559][T13040] sctp: [Deprecated]: syz.4.2113 (pid 13040) Use of struct sctp_assoc_value in delayed_ack socket option. [ 210.814559][T13040] Use struct sctp_sack_info instead [ 210.866282][T13044] netlink: 'syz.2.2114': attribute type 1 has an invalid length. [ 210.889209][T13044] netlink: 'syz.2.2114': attribute type 2 has an invalid length. [ 211.135888][T13056] xt_hashlimit: overflow, rate too high: 0 [ 211.314589][T13070] 0猉功D: renamed from gretap0 (while UP) [ 211.343637][T13070] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 211.643372][T13093] IPv6: NLM_F_CREATE should be specified when creating new route [ 211.658278][T13095] IPv6: NLM_F_CREATE should be specified when creating new route [ 211.812183][T13101] __nla_validate_parse: 15 callbacks suppressed [ 211.812202][T13101] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2131'. [ 211.932177][T13108] x_tables: duplicate underflow at hook 2 [ 212.149894][T13124] bridge0: entered allmulticast mode [ 212.332563][T13136] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2140'. [ 212.365022][T13139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2141'. [ 212.387082][T13139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2141'. [ 212.538101][T13149] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2145'. [ 212.850350][T13169] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 212.957530][T13176] validate_nla: 1 callbacks suppressed [ 212.957550][T13176] netlink: 'syz.1.2154': attribute type 10 has an invalid length. [ 213.099010][T13181] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2158'. [ 214.375183][T13215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2172'. [ 214.450294][T13221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2175'. [ 214.481750][T13221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2175'. [ 214.502810][T13223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2176'. [ 214.870149][T13246] sit0: left promiscuous mode [ 214.900197][T13246] wg2: left promiscuous mode [ 214.905496][T13246] hsr1: left promiscuous mode [ 214.921243][T13246] macvtap1: left promiscuous mode [ 214.933824][T13246] veth3: left promiscuous mode [ 214.939079][T13246] gretap0: left promiscuous mode [ 215.057340][T13254] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 215.396127][T13280] bridge4: entered promiscuous mode [ 215.787703][T13299] syzkaller0: entered promiscuous mode [ 215.793433][T13299] syzkaller0: entered allmulticast mode [ 218.372201][T13367] __nla_validate_parse: 201 callbacks suppressed [ 218.372220][T13367] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2241'. [ 219.232634][T13405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2257'. [ 219.321915][T13409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2259'. [ 219.345171][T13409] bridge_slave_1: left allmulticast mode [ 219.350869][T13409] bridge_slave_1: left promiscuous mode [ 219.384591][T13409] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.409127][T13409] bridge_slave_0: left allmulticast mode [ 219.435159][T13409] bridge_slave_0: left promiscuous mode [ 219.444586][T13409] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.000984][T13437] netlink: 'syz.2.2271': attribute type 4 has an invalid length. [ 220.052914][T13437] netlink: 'syz.2.2271': attribute type 4 has an invalid length. [ 220.083974][T13441] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2273'. [ 220.796290][T13472] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2286'. [ 221.656084][T13517] bridge0: entered allmulticast mode [ 221.746833][T13525] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2312'. [ 221.782882][T13527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2313'. [ 221.842181][T13533] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2314'. [ 222.255172][T13554] batadv_slave_0: entered promiscuous mode [ 222.652655][T13579] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2331'. [ 223.173283][T13611] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2342'. [ 223.399442][T13620] __nla_validate_parse: 1 callbacks suppressed [ 223.399462][T13620] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2347'. [ 223.429455][T13620] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2347'. [ 223.557413][T13625] xt_CT: No such helper "snmp" [ 223.563789][T13630] vxcan1 speed is unknown, defaulting to 1000 [ 223.714770][T13637] netlink: 'syz.2.2352': attribute type 21 has an invalid length. [ 223.779291][T13637] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 223.909419][T13648] pim6reg527: entered allmulticast mode [ 224.016723][T13653] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 224.197001][T13665] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2360'. [ 224.270161][T13661] xt_CT: No such helper "snmp" [ 224.270662][T13658] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2360'. [ 224.415642][T13677] netlink: 'syz.2.2365': attribute type 1 has an invalid length. [ 224.510115][T13677] 8021q: adding VLAN 0 to HW filter on device bond3 [ 224.549378][T13677] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2365'. [ 224.705723][T13677] bond3: (slave gretap1): making interface the new active one [ 224.713914][T13677] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 224.780294][T13697] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 225.091203][T13711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2376'. [ 225.124344][T13707] xt_CT: No such helper "snmp" [ 225.148635][T13711] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 225.184287][T13711] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 225.222473][T13711] gretap0: entered promiscuous mode [ 225.265638][T13711] gretap0: entered allmulticast mode [ 225.398722][T13726] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2376'. [ 225.511952][T13732] vxcan1 speed is unknown, defaulting to 1000 [ 225.529060][T13715] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2376'. [ 225.831811][T13753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2382'. [ 225.997771][T13763] netlink: 'syz.3.2384': attribute type 1 has an invalid length. [ 226.013108][T13763] netlink: 'syz.3.2384': attribute type 1 has an invalid length. [ 226.314248][T13777] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2389'. [ 226.367348][T13778] xt_CT: No such helper "snmp" [ 226.806312][ T4524] wlan1: Trigger new scan to find an IBSS to join [ 226.971711][T13809] sit1: entered promiscuous mode [ 226.984852][T13809] sit1: entered allmulticast mode [ 227.163825][T13818] xt_CT: No such helper "snmp" [ 228.633205][T13825] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 228.642850][T13825] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 228.826820][T13851] __nla_validate_parse: 7 callbacks suppressed [ 228.826839][T13851] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2410'. [ 228.892505][T13848] vxcan1 speed is unknown, defaulting to 1000 [ 229.032433][T13866] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2415'. [ 229.071211][T13867] netlink: 152064 bytes leftover after parsing attributes in process `syz.3.2414'. [ 229.098408][T13867] netlink: zone id is out of range [ 229.122031][T13867] netlink: zone id is out of range [ 229.138177][T13867] netlink: zone id is out of range [ 229.184923][T13867] netlink: zone id is out of range [ 229.195308][T13867] netlink: zone id is out of range [ 229.200453][T13867] netlink: zone id is out of range [ 229.229465][T13872] netlink: 'syz.3.2414': attribute type 4 has an invalid length. [ 229.239284][T13867] netlink: zone id is out of range [ 229.244626][T13867] netlink: zone id is out of range [ 229.249750][T13867] netlink: zone id is out of range [ 229.256417][T13867] netlink: zone id is out of range [ 229.268974][T13874] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2416'. [ 229.318295][T13878] netlink: 'syz.1.2418': attribute type 1 has an invalid length. [ 229.352484][T13878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2418'. [ 229.410628][T13882] sch_fq: defrate 0 ignored. [ 229.444360][T13885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2419'. [ 229.509435][T13885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2419'. [ 229.539039][T13891] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.548275][T13891] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.557460][T13891] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.568216][T13891] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.578825][T13892] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2421'. [ 229.588336][T13891] geneve2: entered promiscuous mode [ 229.593568][T13891] geneve2: entered allmulticast mode [ 229.771558][ T4524] wlan1: Trigger new scan to find an IBSS to join [ 230.145497][T13912] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2423'. [ 230.246717][T13915] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2425'. [ 230.696706][ T9829] wlan1: Creating new IBSS network, BSSID 66:91:92:b8:78:c1 [ 231.553580][T13923] bridge: RTM_NEWNEIGH with invalid ether address [ 231.947981][T13937] xt_CT: No such helper "snmp" [ 232.066911][T13948] gretap0: entered promiscuous mode [ 232.140987][T13945] netlink: 'syz.3.2438': attribute type 2 has an invalid length. [ 232.165178][T13945] netlink: 'syz.3.2438': attribute type 7 has an invalid length. [ 232.173172][T13945] netlink: 'syz.3.2438': attribute type 8 has an invalid length. [ 232.186474][T13954] netlink: 'syz.4.2441': attribute type 23 has an invalid length. [ 232.220318][T13954] vlan2: entered promiscuous mode [ 232.226157][T13954] bridge0: entered promiscuous mode [ 232.731664][T13975] xt_CT: No such helper "snmp" [ 232.731938][T13980] netlink: 'syz.0.2449': attribute type 3 has an invalid length. [ 233.040028][T13994] vxcan1 speed is unknown, defaulting to 1000 [ 233.803473][T14033] xt_nat: multiple ranges no longer supported [ 233.961805][T14035] xt_CT: No such helper "snmp" [ 234.210297][T14056] __nla_validate_parse: 14 callbacks suppressed [ 234.210314][T14056] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2470'. [ 234.263549][T14055] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2467'. [ 234.299877][T14055] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2467'. [ 234.315181][T14056] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2470'. [ 234.372291][T14056] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2470'. [ 234.652543][T14071] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2475'. [ 234.681305][T14071] nla_validate_range_unsigned: 11 callbacks suppressed [ 234.681323][T14071] netlink: 'syz.0.2475': attribute type 11 has an invalid length. [ 234.696691][T14071] netlink: 'syz.0.2475': attribute type 11 has an invalid length. [ 234.704950][T14071] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2475'. [ 234.721077][T14071] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2475'. [ 234.896192][T14087] tipc: Enabling of bearer rejected, failed to enable media [ 235.046399][T14096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2483'. [ 235.053370][T14097] netlink: 'syz.0.2485': attribute type 83 has an invalid length. [ 235.179596][T14104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2489'. [ 235.326370][T14116] netlink: 'syz.2.2492': attribute type 13 has an invalid length. [ 235.351776][T14117] vxcan1 speed is unknown, defaulting to 1000 [ 236.523950][T14168] netlink: 'syz.4.2504': attribute type 1 has an invalid length. [ 236.567671][T14168] erspan0: left allmulticast mode [ 236.659103][T14168] bridge0: port 3(30猉功D) entered blocking state [ 236.665969][T14168] bridge0: port 3(30猉功D) entered forwarding state [ 236.686478][T14168] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.696670][T14168] net_ratelimit: 218 callbacks suppressed [ 236.696681][T14168] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 236.927011][T14184] vxcan1 speed is unknown, defaulting to 1000 [ 237.431511][T14211] netlink: 'syz.1.2520': attribute type 4 has an invalid length. [ 237.755822][T14223] batadv0: entered promiscuous mode [ 237.861646][T14223] bridge0: port 1(batadv2) entered blocking state [ 237.875500][T14223] bridge0: port 1(batadv2) entered disabled state [ 237.892693][T14223] batadv2: entered allmulticast mode [ 237.924449][T14223] batadv2: entered promiscuous mode [ 237.976184][T14226] Cannot find set identified by id 0 to match [ 237.993263][T14218] batadv0: left promiscuous mode [ 238.013058][T14228] netlink: 'syz.1.2524': attribute type 11 has an invalid length. [ 238.308913][T12767] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 238.318670][T12767] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 238.553154][T14251] vxcan1 speed is unknown, defaulting to 1000 [ 238.590446][T14253] netlink: 'syz.3.2533': attribute type 1 has an invalid length. [ 238.807848][T14264] netlink: 'syz.4.2538': attribute type 1 has an invalid length. [ 239.135254][T14275] netlink: 'syz.0.2542': attribute type 2 has an invalid length. [ 239.249300][T14280] __nla_validate_parse: 12 callbacks suppressed [ 239.249318][T14280] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2540'. [ 239.384853][ T30] audit: type=1800 audit(1750916039.861:5): pid=14271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2540" name="memory.events" dev="tmpfs" ino=2729 res=0 errno=0 [ 239.659063][T14300] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2548'. [ 239.758181][T14300] vlan2: entered allmulticast mode [ 239.763707][T14300] erspan0: entered allmulticast mode [ 239.781988][T14305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2549'. [ 239.950450][T14316] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2551'. [ 239.967473][T14307] macvlan5: entered promiscuous mode [ 239.982812][T14307] macvlan5: entered allmulticast mode [ 240.408511][T14339] IPVS: length: 167 != 8 [ 240.430679][T14337] vxcan1 speed is unknown, defaulting to 1000 [ 240.517372][T14341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2559'. [ 240.682187][T14348] dvmrp0: entered allmulticast mode [ 241.093618][T14368] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2566'. [ 241.159062][T14371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2567'. [ 241.526878][T14383] veth0: entered promiscuous mode [ 241.594506][T14388] bond3: (slave gretap1): Releasing active interface [ 241.606111][T14396] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2571'. [ 241.615497][T14396] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2571'. [ 241.707655][T14401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2571'. [ 241.875565][T14402] bridge0: port 1(vlan2) entered blocking state [ 241.882188][T14402] bridge0: port 1(vlan2) entered disabled state [ 241.889128][T14402] vlan2: entered allmulticast mode [ 241.895309][T14402] bond0: entered allmulticast mode [ 241.903467][T14402] vlan2: entered promiscuous mode [ 241.911097][T14402] bond0: entered promiscuous mode [ 241.918417][T14382] veth0: left promiscuous mode [ 242.059633][T14416] tipc: Enabling of bearer rejected, failed to enable media [ 242.835691][T14452] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 242.877413][T14454] netlink: 'syz.0.2591': attribute type 11 has an invalid length. [ 243.335610][T14474] netlink: 'syz.1.2596': attribute type 39 has an invalid length. [ 243.860681][T14494] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 243.867652][T14497] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 244.593928][T14543] __nla_validate_parse: 4 callbacks suppressed [ 244.593945][T14543] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2616'. [ 244.629281][T14544] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2614'. [ 244.638397][T14544] netlink: 'syz.1.2614': attribute type 7 has an invalid length. [ 244.651992][T14544] netlink: 'syz.1.2614': attribute type 8 has an invalid length. [ 244.680127][T14544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2614'. [ 244.728718][T14544] bridge0: entered promiscuous mode [ 244.740109][T14544] ip6gretap0: entered promiscuous mode [ 244.747782][T14544] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 244.758926][T14544] Cannot create hsr debugfs directory [ 244.764536][T14544] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 244.774697][T14544] hsr1: Slave B (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 244.932435][T14558] vxcan1 speed is unknown, defaulting to 1000 [ 244.958503][T14552] netlink: 'syz.4.2619': attribute type 8 has an invalid length. [ 245.004272][T14552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2619'. [ 245.031590][T14552] bridge0: port 3(30猉功D) entered disabled state [ 245.045643][T14552] bridge0: entered allmulticast mode [ 245.571346][T14578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2627'. [ 245.630826][T14581] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2625'. [ 245.837930][T14589] team_slave_0: mtu greater than device maximum [ 245.868471][T14593] netlink: 'syz.1.2631': attribute type 13 has an invalid length. [ 245.876502][T14593] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2631'. [ 246.503638][T14613] netlink: 'syz.3.2639': attribute type 1 has an invalid length. [ 246.513522][T14613] netlink: 'syz.3.2639': attribute type 3 has an invalid length. [ 246.526824][T14613] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2639'. [ 246.540961][T14613] netlink: 'syz.3.2639': attribute type 2 has an invalid length. [ 246.549687][T14612] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2640'. [ 246.586709][T14613] bridge5: entered promiscuous mode [ 246.592010][T14613] bridge5: entered allmulticast mode [ 246.757785][T14621] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 246.782383][T14624] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2645'. [ 246.888653][T14632] netlink: 'syz.2.2647': attribute type 5 has an invalid length. [ 247.551361][T14668] netlink: 'syz.4.2656': attribute type 11 has an invalid length. [ 247.605578][T14671] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 247.832034][T14682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.875280][T14682] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.914892][T14682] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 248.175288][T14701] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 248.258660][T14699] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.320019][T14699] : (slave team0): Enslaving as an active interface with an up link [ 248.412652][T14708] vxcan1 speed is unknown, defaulting to 1000 [ 250.289574][T14732] batman_adv: batadv0: Adding interface: ipvlan3 [ 250.296285][T14732] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.322109][T14732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.332961][T14732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.342877][T14732] batman_adv: batadv0: Interface activated: ipvlan3 [ 250.353265][T14733] validate_nla: 1 callbacks suppressed [ 250.353289][T14733] netlink: 'syz.4.2677': attribute type 29 has an invalid length. [ 250.590756][T14752] __nla_validate_parse: 12 callbacks suppressed [ 250.590774][T14752] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2682'. [ 250.616386][T14752] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2682'. [ 250.636415][T14752] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2682'. [ 250.753498][T14764] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2686'. [ 250.839795][T14769] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 251.292044][T14787] vxcan1 speed is unknown, defaulting to 1000 [ 251.730401][T14821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2699'. [ 251.905289][T14828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2700'. [ 252.313561][T14843] IPVS: length: 157 != 24 [ 252.371349][T14847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2708'. [ 252.386864][T14847] sctp: [Deprecated]: syz.1.2708 (pid 14847) Use of struct sctp_assoc_value in delayed_ack socket option. [ 252.386864][T14847] Use struct sctp_sack_info instead [ 252.404939][T14847] sctp: [Deprecated]: syz.1.2708 (pid 14847) Use of struct sctp_assoc_value in delayed_ack socket option. [ 252.404939][T14847] Use struct sctp_sack_info instead [ 252.602298][T14857] vxcan1 speed is unknown, defaulting to 1000 [ 252.682246][T14858] xt_CT: No such helper "snmp" [ 252.999453][T14877] ipvlan0: entered allmulticast mode [ 253.955895][T14914] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2729'. [ 254.087755][T14921] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 254.118053][T14927] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2731'. [ 254.369010][T14938] xt_CT: No such helper "snmp" [ 254.872954][T14975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2748'. [ 254.970563][T14981] lo: left promiscuous mode [ 254.987393][T14981] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 255.020168][T14981] netlink: 'syz.0.2750': attribute type 15 has an invalid length. [ 255.029093][T14981] netlink: 'syz.0.2750': attribute type 10 has an invalid length. [ 255.041381][T14981] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 255.451197][T15010] netlink: 'syz.3.2758': attribute type 7 has an invalid length. [ 255.475050][T15010] netlink: 'syz.3.2758': attribute type 8 has an invalid length. [ 255.512827][T15014] openvswitch: netlink: IP tunnel TTL not specified. [ 255.552176][T15009] xt_CT: No such helper "snmp" [ 255.693261][T15021] netlink: 'syz.1.2762': attribute type 1 has an invalid length. [ 255.726572][T15023] netlink: 'syz.0.2765': attribute type 1 has an invalid length. [ 255.756841][T15031] __nla_validate_parse: 5 callbacks suppressed [ 255.756860][T15031] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2762'. [ 255.837170][T15021] 8021q: adding VLAN 0 to HW filter on device bond5 [ 255.882580][T15037] bond5: entered promiscuous mode [ 255.890649][T15040] netlink: 'syz.4.2767': attribute type 10 has an invalid length. [ 255.904112][T15040] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2767'. [ 255.939084][T15042] No such timeout policy "syz0" [ 255.990705][T15042] bond6: entered promiscuous mode [ 256.001154][T15042] bond6: entered allmulticast mode [ 256.022231][T15042] 8021q: adding VLAN 0 to HW filter on device bond6 [ 256.028485][T15052] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2771'. [ 256.152366][T15042] bond6 (unregistering): Released all slaves [ 256.189925][T15034] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.231492][T15040] geneve0: entered promiscuous mode [ 256.237378][T15040] geneve0: entered allmulticast mode [ 256.243467][T15040] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 256.264703][T15040] team0: Failed to send options change via netlink (err -105) [ 256.272334][T15040] team0: Port device geneve0 added [ 256.310281][T15052] team0: entered promiscuous mode [ 256.317301][T15052] team0: entered allmulticast mode [ 256.361983][T15056] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2772'. [ 256.371531][T15034] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.413680][T15056] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2772'. [ 256.415141][T15047] vxcan1 speed is unknown, defaulting to 1000 [ 256.457874][T15034] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.606975][T15034] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.623503][T15061] xt_CT: No such helper "snmp" [ 256.686493][T15069] delete_channel: no stack [ 256.764814][T15034] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.784258][T15071] netlink: 'syz.1.2776': attribute type 23 has an invalid length. [ 256.785618][T15034] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.817487][T15034] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.852090][T15034] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.069966][T15081] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2779'. [ 257.088581][T15081] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2779'. [ 257.107638][T15081] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2779'. [ 257.146479][T15081] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2779'. [ 257.156212][T15087] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2780'. [ 257.323183][T15092] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 257.366266][T15092] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 257.556289][T15102] syzkaller0: entered promiscuous mode [ 257.572580][T15102] syzkaller0: entered allmulticast mode [ 257.806733][T15122] netlink: 'syz.3.2790': attribute type 10 has an invalid length. [ 259.257644][T15132] netlink: 'syz.2.2793': attribute type 29 has an invalid length. [ 259.501150][T15149] xt_CT: No such helper "snmp" [ 259.891352][T15152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.358113][T15182] netlink: 'syz.1.2806': attribute type 1 has an invalid length. [ 260.383318][T15182] netlink: 'syz.1.2806': attribute type 1 has an invalid length. [ 260.424430][T15184] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 260.495232][T15190] validate_nla: 1 callbacks suppressed [ 260.495251][T15190] netlink: 'syz.2.2809': attribute type 15 has an invalid length. [ 260.588867][T15193] vxcan1 speed is unknown, defaulting to 1000 [ 260.897824][T15212] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 261.375587][T15233] netlink: 'syz.0.2822': attribute type 1 has an invalid length. [ 261.410836][T15233] netlink: 'syz.0.2822': attribute type 4 has an invalid length. [ 261.431859][T15237] netlink: 'syz.0.2822': attribute type 1 has an invalid length. [ 261.444650][T15237] netlink: 'syz.0.2822': attribute type 4 has an invalid length. [ 261.452907][T15237] __nla_validate_parse: 41 callbacks suppressed [ 261.452925][T15237] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2822'. [ 261.547184][T15233] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2822'. [ 261.747270][T15250] netlink: 39 bytes leftover after parsing attributes in process `syz.1.2826'. [ 261.783906][T15256] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2827'. [ 261.984677][T15256] netlink: 'syz.0.2827': attribute type 9 has an invalid length. [ 262.142049][T15269] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2832'. [ 262.153817][T15272] tipc: Failed to remove unknown binding: 66,1,1/10070698:3346711636/3346711638 [ 262.153901][T15271] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2834'. [ 262.165586][T15272] tipc: Failed to remove unknown binding: 66,1,1/10070698:3346711636/3346711638 [ 262.292021][T15281] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 262.408419][T15289] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2837'. [ 262.778875][T15281] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.787617][T15281] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.796278][T15281] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.805101][T15281] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.824546][T15281] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 263.035346][T15305] xt_TPROXY: Can be used only with -p tcp or -p udp [ 263.160562][T15320] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2846'. [ 263.299736][T15329] vxcan1 speed is unknown, defaulting to 1000 [ 263.558659][T15339] netlink: 'syz.4.2849': attribute type 1 has an invalid length. [ 263.558722][T15338] netlink: 'syz.4.2849': attribute type 1 has an invalid length. [ 263.626968][T15339] 8021q: adding VLAN 0 to HW filter on device bond3 [ 263.674746][T15341] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2850'. [ 264.487312][T15383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2864'. [ 264.560982][T15380] vxcan1 speed is unknown, defaulting to 1000 [ 264.594861][T15382] xt_CT: No such helper "snmp" [ 265.304660][T15392] vxcan1 speed is unknown, defaulting to 1000 [ 266.298289][T15419] IPVS: set_ctl: invalid protocol: 190 172.20.20.39:20001 [ 266.518676][T15426] __nla_validate_parse: 2 callbacks suppressed [ 266.518695][T15426] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2877'. [ 267.815685][T15462] netlink: 'syz.3.2886': attribute type 2 has an invalid length. [ 267.872078][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 267.883096][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 267.899444][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 267.909907][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 267.919719][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 267.980369][T15467] vxcan1 speed is unknown, defaulting to 1000 [ 268.260770][T15483] xt_CT: No such helper "snmp" [ 268.266743][T15483] x_tables: duplicate underflow at hook 2 [ 268.278093][T15486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2892'. [ 268.377102][T15486] sit0: Master is either lo or non-ether device [ 268.560315][T15497] x_tables: duplicate underflow at hook 1 [ 268.763423][T15507] vxcan1 speed is unknown, defaulting to 1000 [ 268.840758][T15518] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2899'. [ 269.304648][T15530] block nbd1: server does not support multiple connections per device. [ 269.313535][T15530] block nbd1: shutting down sockets [ 269.331695][T15528] team0 (unregistering): left promiscuous mode [ 269.338238][T15528] team_slave_0: left promiscuous mode [ 269.343863][T15528] team_slave_1: left promiscuous mode [ 269.357861][T15528] geneve0: left promiscuous mode [ 269.363653][T15528] team_slave_0: left allmulticast mode [ 269.375668][T15528] team0 (unregistering): Port device team_slave_0 removed [ 269.383050][T15528] team_slave_1: left allmulticast mode [ 269.398997][T15528] team0 (unregistering): Port device team_slave_1 removed [ 269.410617][T15528] geneve0: left allmulticast mode [ 269.421672][T15528] team0 (unregistering): Port device geneve0 removed [ 269.621080][T15467] chnl_net:caif_netlink_parms(): no params data found [ 270.004319][ T5846] Bluetooth: hci1: command tx timeout [ 270.133154][T15467] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.146310][T15558] x_tables: ip_tables: tcpmss match: only valid for protocol 6 [ 270.154945][T15467] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.162194][T15467] bridge_slave_0: entered allmulticast mode [ 270.175906][T15467] bridge_slave_0: entered promiscuous mode [ 270.202603][T15467] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.213485][T15467] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.228480][T15467] bridge_slave_1: entered allmulticast mode [ 270.248222][T15467] bridge_slave_1: entered promiscuous mode [ 270.318098][T15467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.363383][T15467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.508015][T15467] team0: Port device team_slave_0 added [ 270.522421][T15467] team0: Port device team_slave_1 added [ 270.612522][T15467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.631477][T15467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.715923][T15467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.747234][T15467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.775202][T15467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.851993][T15467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.152373][T15467] hsr_slave_0: entered promiscuous mode [ 271.171936][T15467] hsr_slave_1: entered promiscuous mode [ 271.186892][T15467] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 271.210198][T15467] Cannot create hsr debugfs directory [ 271.366137][T15593] vxcan1 speed is unknown, defaulting to 1000 [ 271.549253][T15621] batadv0: Device is already in use. [ 272.084278][ T5846] Bluetooth: hci1: command tx timeout [ 273.458929][T15467] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.496406][T15641] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 273.609404][T15647] sctp: [Deprecated]: syz.0.2925 (pid 15647) Use of int in maxseg socket option. [ 273.609404][T15647] Use struct sctp_assoc_value instead [ 273.609434][T15467] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.710127][T15654] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2926'. [ 273.737696][T15467] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.810315][T15639] vxcan1 speed is unknown, defaulting to 1000 [ 273.812461][T15656] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2927'. [ 273.870667][T15467] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.165637][ T5846] Bluetooth: hci1: command tx timeout [ 274.374475][T15467] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 274.397695][T15467] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 274.428355][T15467] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 274.450029][T15467] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 274.450635][T15670] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !瀵$蘒L賤y岗丌匘xUD寃榼漽 [ 274.545265][T15643] vxcan1 speed is unknown, defaulting to 1000 [ 274.654745][T15680] netlink: 'syz.3.2936': attribute type 5 has an invalid length. [ 274.676414][T15680] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2936'. [ 275.147318][T15467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.167965][T15691] vxcan1 speed is unknown, defaulting to 1000 [ 275.209602][T15467] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.272773][ T9826] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.280025][ T9826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.291526][T15702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2943'. [ 275.427336][ T9826] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.434554][ T9826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.461861][T15711] sctp: [Deprecated]: syz.1.2945 (pid 15711) Use of struct sctp_assoc_value in delayed_ack socket option. [ 275.461861][T15711] Use struct sctp_sack_info instead [ 275.681755][T15709] vxcan1 speed is unknown, defaulting to 1000 [ 275.781265][T15721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2947'. [ 275.982692][T15467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.072469][T15467] veth0_vlan: entered promiscuous mode [ 276.093621][T15467] veth1_vlan: entered promiscuous mode [ 276.188643][T15467] veth0_macvtap: entered promiscuous mode [ 276.223672][T15467] veth1_macvtap: entered promiscuous mode [ 276.250513][ T5846] Bluetooth: hci1: command tx timeout [ 276.258287][T15467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.293661][T15467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.352208][T15467] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.391378][T15467] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.412732][T15467] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.422339][T15467] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.858451][ T1343] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.871680][ T1343] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.979569][ T9829] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.013945][ T9829] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.302506][T15736] xt_CT: No such helper "snmp" [ 277.308338][T15741] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2953'. [ 277.322865][T15741] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2953'. [ 278.103702][T15768] netlink: 'syz.0.2963': attribute type 3 has an invalid length. [ 278.120292][T15768] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2963'. [ 278.148239][ T5847] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 278.160164][ T5847] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 278.168574][ T5847] CPU: 1 UID: 0 PID: 5847 Comm: syz-executor Not tainted 6.16.0-rc2-syzkaller-00185-g010c40c1f50e #0 PREEMPT(full) [ 278.180729][ T5847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 278.190862][ T5847] RIP: 0010:klist_remove+0x14a/0x340 [ 278.196163][ T5847] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 d9 41 c7 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 ba 41 c7 f6 49 8b 44 24 58 48 89 44 24 08 [ 278.215762][ T5847] RSP: 0018:ffffc900041ef600 EFLAGS: 00010202 [ 278.221828][ T5847] RAX: 000000000000000b RBX: ffff8880309c5a00 RCX: 0000000000000000 [ 278.229787][ T5847] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 278.237741][ T5847] RBP: ffffc900041ef6e8 R08: ffffffff8f8798c3 R09: 1ffffffff1f0f318 [ 278.245698][ T5847] R10: dffffc0000000000 R11: fffffbfff1f0f319 R12: 0000000000000000 [ 278.253663][ T5847] R13: 1ffff1100b757d0c R14: ffff88805babe860 R15: dffffc0000000000 [ 278.261794][ T5847] FS: 0000000000000000(0000) GS:ffff888125d51000(0000) knlGS:0000000000000000 [ 278.270709][ T5847] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 278.277279][ T5847] CR2: 00007f300e82d78c CR3: 00000000270e4000 CR4: 00000000003526f0 [ 278.285246][ T5847] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 278.293207][ T5847] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 278.301174][ T5847] Call Trace: [ 278.304448][ T5847] [ 278.307368][ T5847] ? __pfx_klist_remove+0x10/0x10 [ 278.312387][ T5847] ? __pfx_kobject_move+0x10/0x10 [ 278.317394][ T5847] ? get_device_parent+0x366/0x3a0 [ 278.322488][ T5847] device_move+0x193/0x700 [ 278.326891][ T5847] hci_conn_del_sysfs+0xb8/0x170 [ 278.331819][ T5847] hci_conn_del+0x8ff/0xcb0 [ 278.336308][ T5847] hci_conn_hash_flush+0x191/0x230 [ 278.341426][ T5847] hci_dev_close_sync+0xaef/0x1330 [ 278.346545][ T5847] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 278.352088][ T5847] ? up_write+0x1c4/0x420 [ 278.356415][ T5847] hci_unregister_dev+0x21a/0x510 [ 278.361436][ T5847] vhci_release+0x80/0xd0 [ 278.365760][ T5847] ? __pfx_vhci_release+0x10/0x10 [ 278.370817][ T5847] __fput+0x44c/0xa70 [ 278.374803][ T5847] task_work_run+0x1d1/0x260 [ 278.379382][ T5847] ? __pfx_task_work_run+0x10/0x10 [ 278.384487][ T5847] ? kmem_cache_free+0x18f/0x400 [ 278.389411][ T5847] do_exit+0x6ad/0x22e0 [ 278.393554][ T5847] ? do_raw_spin_lock+0x121/0x290 [ 278.398567][ T5847] ? __pfx_do_exit+0x10/0x10 [ 278.403150][ T5847] do_group_exit+0x21c/0x2d0 [ 278.407741][ T5847] ? lockdep_hardirqs_on+0x9c/0x150 [ 278.412935][ T5847] get_signal+0x1286/0x1340 [ 278.417436][ T5847] arch_do_signal_or_restart+0x9a/0x750 [ 278.422970][ T5847] ? fput_close_sync+0x119/0x200 [ 278.427895][ T5847] ? kmem_cache_free+0x309/0x400 [ 278.432830][ T5847] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 278.438977][ T5847] ? exit_to_user_mode_loop+0x40/0x110 [ 278.444440][ T5847] exit_to_user_mode_loop+0x75/0x110 [ 278.449731][ T5847] do_syscall_64+0x2bd/0x3b0 [ 278.454318][ T5847] ? lockdep_hardirqs_on+0x9c/0x150 [ 278.459517][ T5847] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.465581][ T5847] ? clear_bhb_loop+0x60/0xb0 [ 278.470252][ T5847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.476142][ T5847] RIP: 0033:0x7fdb75b8d33c [ 278.480553][ T5847] Code: Unable to access opcode bytes at 0x7fdb75b8d312. [ 278.487558][ T5847] RSP: 002b:00007fffd8910260 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 278.495956][ T5847] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 00007fdb75b8d33c [ 278.503917][ T5847] RDX: 0000000000000030 RSI: 00007fffd8910320 RDI: 00000000000000f9 [ 278.511876][ T5847] RBP: 00007fffd89102cc R08: 0000000000000000 R09: 0079746972756365 [ 278.519831][ T5847] R10: 00007fffd890fc20 R11: 0000000000000246 R12: 000000000000025e [ 278.527787][ T5847] R13: 00000000000927c0 R14: 0000000000043ad4 R15: 00007fffd8910320 [ 278.535764][ T5847] [ 278.538773][ T5847] Modules linked in: [ 278.544147][ T5847] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 278.555554][ T5847] RIP: 0010:klist_remove+0x14a/0x340 [ 278.560933][ T5847] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 d9 41 c7 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 ba 41 c7 f6 49 8b 44 24 58 48 89 44 24 08 [ 278.605444][ T5847] RSP: 0018:ffffc900041ef600 EFLAGS: 00010202 [ 278.617967][ T5847] RAX: 000000000000000b RBX: ffff8880309c5a00 RCX: 0000000000000000 [ 278.665796][ T5847] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 278.673889][ T5847] RBP: ffffc900041ef6e8 R08: ffffffff8f8798c3 R09: 1ffffffff1f0f318 [ 278.686757][ T5847] R10: dffffc0000000000 R11: fffffbfff1f0f319 R12: 0000000000000000 [ 278.699247][ T5847] R13: 1ffff1100b757d0c R14: ffff88805babe860 R15: dffffc0000000000 [ 278.707619][ T5847] FS: 0000000000000000(0000) GS:ffff888125d51000(0000) knlGS:0000000000000000 [ 278.716750][ T5847] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 278.723347][ T5847] CR2: 000055a41331c000 CR3: 0000000011426000 CR4: 00000000003526f0 [ 278.732511][ T5847] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 278.740737][ T5847] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 278.750922][ T5847] Kernel panic - not syncing: Fatal exception [ 278.757139][ T5847] Kernel Offset: disabled [ 278.761456][ T5847] Rebooting in 86400 seconds..