last executing test programs: 1m0.840826659s ago: executing program 3 (id=1495): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$isdn(0x22, 0x2, 0x26) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x80044942, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x5f67, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000080)=0x5, 0x4) sendto$inet6(r3, &(0x7f0000001680)="6ad1", 0x2, 0x40084, &(0x7f0000001700)={0xa, 0x4e21, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c) syz_emit_ethernet(0x2e, &(0x7f00000004c0)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x8, 0x0, @void}}}}}}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000440)="1a425f3770b268af205c2096cf3a0b353c28019586fa75f943c682a9b3c128851c1c2fe1350a5b994766bce1e24b59d3262ec578e70cb8295b3cee57fb4c161429a2bff8fbf5647da75032c187832a049fea981c7b864465de6bce7661e604adc7fca93f6062578fb4719a710f8870b4586c893ae3d978e64922e14638584262c24a8af7b6ee9678504342", 0x3, r4, 0x4}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)="5d46542b3090ce5ceca970bf8abf170549531f3309044e8b5176033b03b6ffb6877fc1bf93944e8918f7671993d5b56494717c96f1a910bc20b312c4ac1319c04da6b26ab882b4086cb2ac1545cef2003c2f29885496d182cc00eb08067822dfbfa896a37248b990eeeec77445d6f8da", &(0x7f0000000100), 0x1003, r4}, 0x38) sendmsg$can_raw(r0, &(0x7f0000000440)={&(0x7f0000000780)={0x1d, r2}, 0x10, &(0x7f0000000200)={&(0x7f0000000540)=@can={{}, 0x0, 0x0, 0x0, 0x0, "400000008b20aaf0"}, 0x10}}, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r5, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x97, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f00000001c0), &(0x7f0000000240), 0x8, 0x23, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) 50.557763538s ago: executing program 3 (id=1495): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$isdn(0x22, 0x2, 0x26) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x80044942, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x5f67, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000080)=0x5, 0x4) sendto$inet6(r3, &(0x7f0000001680)="6ad1", 0x2, 0x40084, &(0x7f0000001700)={0xa, 0x4e21, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c) syz_emit_ethernet(0x2e, &(0x7f00000004c0)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x8, 0x0, @void}}}}}}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000440)="1a425f3770b268af205c2096cf3a0b353c28019586fa75f943c682a9b3c128851c1c2fe1350a5b994766bce1e24b59d3262ec578e70cb8295b3cee57fb4c161429a2bff8fbf5647da75032c187832a049fea981c7b864465de6bce7661e604adc7fca93f6062578fb4719a710f8870b4586c893ae3d978e64922e14638584262c24a8af7b6ee9678504342", 0x3, r4, 0x4}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)="5d46542b3090ce5ceca970bf8abf170549531f3309044e8b5176033b03b6ffb6877fc1bf93944e8918f7671993d5b56494717c96f1a910bc20b312c4ac1319c04da6b26ab882b4086cb2ac1545cef2003c2f29885496d182cc00eb08067822dfbfa896a37248b990eeeec77445d6f8da", &(0x7f0000000100), 0x1003, r4}, 0x38) sendmsg$can_raw(r0, &(0x7f0000000440)={&(0x7f0000000780)={0x1d, r2}, 0x10, &(0x7f0000000200)={&(0x7f0000000540)=@can={{}, 0x0, 0x0, 0x0, 0x0, "400000008b20aaf0"}, 0x10}}, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r5, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x97, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f00000001c0), &(0x7f0000000240), 0x8, 0x23, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) 40.483261952s ago: executing program 3 (id=1495): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$isdn(0x22, 0x2, 0x26) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x80044942, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x5f67, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000080)=0x5, 0x4) sendto$inet6(r3, &(0x7f0000001680)="6ad1", 0x2, 0x40084, &(0x7f0000001700)={0xa, 0x4e21, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c) syz_emit_ethernet(0x2e, &(0x7f00000004c0)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x8, 0x0, @void}}}}}}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000440)="1a425f3770b268af205c2096cf3a0b353c28019586fa75f943c682a9b3c128851c1c2fe1350a5b994766bce1e24b59d3262ec578e70cb8295b3cee57fb4c161429a2bff8fbf5647da75032c187832a049fea981c7b864465de6bce7661e604adc7fca93f6062578fb4719a710f8870b4586c893ae3d978e64922e14638584262c24a8af7b6ee9678504342", 0x3, r4, 0x4}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)="5d46542b3090ce5ceca970bf8abf170549531f3309044e8b5176033b03b6ffb6877fc1bf93944e8918f7671993d5b56494717c96f1a910bc20b312c4ac1319c04da6b26ab882b4086cb2ac1545cef2003c2f29885496d182cc00eb08067822dfbfa896a37248b990eeeec77445d6f8da", &(0x7f0000000100), 0x1003, r4}, 0x38) sendmsg$can_raw(r0, &(0x7f0000000440)={&(0x7f0000000780)={0x1d, r2}, 0x10, &(0x7f0000000200)={&(0x7f0000000540)=@can={{}, 0x0, 0x0, 0x0, 0x0, "400000008b20aaf0"}, 0x10}}, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r5, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x97, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f00000001c0), &(0x7f0000000240), 0x8, 0x23, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) 31.374677504s ago: executing program 3 (id=1495): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$isdn(0x22, 0x2, 0x26) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x80044942, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x5f67, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000080)=0x5, 0x4) sendto$inet6(r3, &(0x7f0000001680)="6ad1", 0x2, 0x40084, &(0x7f0000001700)={0xa, 0x4e21, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c) syz_emit_ethernet(0x2e, &(0x7f00000004c0)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x8, 0x0, @void}}}}}}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000440)="1a425f3770b268af205c2096cf3a0b353c28019586fa75f943c682a9b3c128851c1c2fe1350a5b994766bce1e24b59d3262ec578e70cb8295b3cee57fb4c161429a2bff8fbf5647da75032c187832a049fea981c7b864465de6bce7661e604adc7fca93f6062578fb4719a710f8870b4586c893ae3d978e64922e14638584262c24a8af7b6ee9678504342", 0x3, r4, 0x4}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)="5d46542b3090ce5ceca970bf8abf170549531f3309044e8b5176033b03b6ffb6877fc1bf93944e8918f7671993d5b56494717c96f1a910bc20b312c4ac1319c04da6b26ab882b4086cb2ac1545cef2003c2f29885496d182cc00eb08067822dfbfa896a37248b990eeeec77445d6f8da", &(0x7f0000000100), 0x1003, r4}, 0x38) sendmsg$can_raw(r0, &(0x7f0000000440)={&(0x7f0000000780)={0x1d, r2}, 0x10, &(0x7f0000000200)={&(0x7f0000000540)=@can={{}, 0x0, 0x0, 0x0, 0x0, "400000008b20aaf0"}, 0x10}}, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r5, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x97, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f00000001c0), &(0x7f0000000240), 0x8, 0x23, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) 20.110337129s ago: executing program 3 (id=1495): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$isdn(0x22, 0x2, 0x26) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x80044942, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x5f67, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000080)=0x5, 0x4) sendto$inet6(r3, &(0x7f0000001680)="6ad1", 0x2, 0x40084, &(0x7f0000001700)={0xa, 0x4e21, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c) syz_emit_ethernet(0x2e, &(0x7f00000004c0)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x8, 0x0, @void}}}}}}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000440)="1a425f3770b268af205c2096cf3a0b353c28019586fa75f943c682a9b3c128851c1c2fe1350a5b994766bce1e24b59d3262ec578e70cb8295b3cee57fb4c161429a2bff8fbf5647da75032c187832a049fea981c7b864465de6bce7661e604adc7fca93f6062578fb4719a710f8870b4586c893ae3d978e64922e14638584262c24a8af7b6ee9678504342", 0x3, r4, 0x4}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)="5d46542b3090ce5ceca970bf8abf170549531f3309044e8b5176033b03b6ffb6877fc1bf93944e8918f7671993d5b56494717c96f1a910bc20b312c4ac1319c04da6b26ab882b4086cb2ac1545cef2003c2f29885496d182cc00eb08067822dfbfa896a37248b990eeeec77445d6f8da", &(0x7f0000000100), 0x1003, r4}, 0x38) sendmsg$can_raw(r0, &(0x7f0000000440)={&(0x7f0000000780)={0x1d, r2}, 0x10, &(0x7f0000000200)={&(0x7f0000000540)=@can={{}, 0x0, 0x0, 0x0, 0x0, "400000008b20aaf0"}, 0x10}}, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r5, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x97, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f00000001c0), &(0x7f0000000240), 0x8, 0x23, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) 8.605100862s ago: executing program 3 (id=1495): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$isdn(0x22, 0x2, 0x26) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x80044942, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x5f67, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000080)=0x5, 0x4) sendto$inet6(r3, &(0x7f0000001680)="6ad1", 0x2, 0x40084, &(0x7f0000001700)={0xa, 0x4e21, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c) syz_emit_ethernet(0x2e, &(0x7f00000004c0)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x8, 0x0, @void}}}}}}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000440)="1a425f3770b268af205c2096cf3a0b353c28019586fa75f943c682a9b3c128851c1c2fe1350a5b994766bce1e24b59d3262ec578e70cb8295b3cee57fb4c161429a2bff8fbf5647da75032c187832a049fea981c7b864465de6bce7661e604adc7fca93f6062578fb4719a710f8870b4586c893ae3d978e64922e14638584262c24a8af7b6ee9678504342", 0x3, r4, 0x4}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)="5d46542b3090ce5ceca970bf8abf170549531f3309044e8b5176033b03b6ffb6877fc1bf93944e8918f7671993d5b56494717c96f1a910bc20b312c4ac1319c04da6b26ab882b4086cb2ac1545cef2003c2f29885496d182cc00eb08067822dfbfa896a37248b990eeeec77445d6f8da", &(0x7f0000000100), 0x1003, r4}, 0x38) sendmsg$can_raw(r0, &(0x7f0000000440)={&(0x7f0000000780)={0x1d, r2}, 0x10, &(0x7f0000000200)={&(0x7f0000000540)=@can={{}, 0x0, 0x0, 0x0, 0x0, "400000008b20aaf0"}, 0x10}}, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r5, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x97, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f00000001c0), &(0x7f0000000240), 0x8, 0x23, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) 2.836432828s ago: executing program 4 (id=2236): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond0\x00'}) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) (async) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100687372001400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="946b6a6f104d488ad2a091d1490168b5a79ebd44c88e4f9072c5961c2a3479416adbc5f07da33fa10900580a2d15bca5f2297add42e1971613e3c19a472697"], 0x40}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100687372001400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="946b6a6f104d488ad2a091d1490168b5a79ebd44c88e4f9072c5961c2a3479416adbc5f07da33fa10900580a2d15bca5f2297add42e1971613e3c19a472697"], 0x40}}, 0x0) 2.522309328s ago: executing program 4 (id=2239): clock_gettime(0xb, &(0x7f0000000980)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000040)={0x0, 0xee, "106c56bd2b2ea93085103aa3ba212b93bb3c728f115bb3436c34172ce4925acbe4636c46f47bb8fed74c8d4edc4dbdf945824a1f6661df37cf0127e5491d37860cf095255cce1b2f66b4eae2b5f93ae8b1e2905e83dd9814d7731b8c82a0a38616c8846092abff8292a69156bc5577edbc67d7d17e93589d6a6726feef5e305106added29943bcbdd50db2ebfd4b11335bb42163a98d99a812140a9761afa61631c024ff325cfab842563186ed8a43024cacb836d658150b2b24592ccb1480fc528cd600a681d1d128b10615e7496f6ddfee4dd3288e834a1e229dacb57d5ed40645fd46f77f7cfa74bbdfb8a9d4"}, &(0x7f0000000180)=0xf6) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000002c0)={r1, 0xc0, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @rand_addr=0x64010101}, @in6={0xa, 0x4e20, 0x6, @mcast1, 0x8}, @in6={0xa, 0x4e23, 0xff, @empty, 0x2d83}, @in6={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e22, 0x0, @loopback, 0x7}, @in={0x2, 0x4e20, @multicast1}]}, &(0x7f0000000300)=0x10) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) (async) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000540)=ANY=[], 0xed) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000540)=ANY=[], 0xed) 2.378103438s ago: executing program 2 (id=2242): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)="77690addcfbe1fbb66ec", 0xa}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) splice(r0, 0x0, r3, 0x0, 0x25a5, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) r4 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x8a, &(0x7f0000000440), 0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, 0x0, &(0x7f00000001c0)) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000040)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x38}], 0x1, 0x8080) 2.320117312s ago: executing program 4 (id=2244): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6(0xa, 0xa, 0xfffffffd) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6000000010000100feffffff0000000000000000", @ANYRES32=r6, @ANYBLOB="008000000000000008000d00ffffff7f2c002b8008000100", @ANYRES32, @ANYBLOB='\b\x00\b\x00', @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\b\x00\b\x00', @ANYRES32, @ANYBLOB="080003000b000000080029004398000004001400"], 0x60}}, 0x0) recvmmsg$unix(r3, 0x0, 0x0, 0x10000, 0x0) write$tun(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d75a3d0dd86110100000000000000000000000000000000ff0200000000000000000000b6bc000000014e20"], 0x42) 2.171709364s ago: executing program 1 (id=2246): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000300)={'gretap0\x00', 0x0, 0x10, 0x20, 0x1, 0xb, {{0x3e, 0x4, 0x1, 0x7, 0xf8, 0x67, 0x0, 0x5, 0x29, 0x0, @private=0xa010100, @remote, {[@rr={0x7, 0x7, 0x32, [@empty]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x14, 0x22, 0x3, 0x7, [{@rand_addr=0x64010101, 0x78f4}, {@multicast2, 0x8}]}, @cipso={0x86, 0x22, 0xffffffffffffffff, [{0x1, 0x7, "eae277871b"}, {0x0, 0x6, "9b7e33f7"}, {0x6, 0x8, "9d58ff7271ad"}, {0x5, 0x7, "080de14d53"}]}, @cipso={0x86, 0x4b, 0x2, [{0x6, 0x8, "2477e9406331"}, {0x1, 0x11, "af208d1a4655ee38a68ea8fad7cd4b"}, {0x1, 0x4, 'xj'}, {0x2, 0x12, "c45e302d09f098b959ff5c2dc139ad44"}, {0x7, 0xb, "cc4726d8efea35b4cf"}, {0x7, 0xb, "15aa7e072e6543e22b"}]}, @lsrr={0x83, 0x23, 0xab, [@loopback, @rand_addr=0x64010102, @rand_addr=0x64010101, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @local, @dev={0xac, 0x14, 0x14, 0x19}]}, @cipso={0x86, 0x16, 0x3, [{0x7, 0x10, "e37de5eb5e620c79a789ecb42d7a"}]}, @timestamp_addr={0x44, 0x14, 0xeb, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0x32}, 0x10000}, {@broadcast, 0xfffffffd}]}, @ra={0x94, 0x4}]}}}}}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaf26419489e3237b328d771aaaaaa00000000050086dd60522d9200083a00000000a80914aafe549a00f1341fabf0a48000000052"], 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x20, 0x34, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str=')\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0x4c044) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x4, 0x9, 0x6, 0x3, 0x4c, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x10, 0x7, 0xe, 0x5}}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="240000001800010000000000000200001d010c0008000a00", @ANYRES32=r7, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r8, @ANYBLOB="063d1bbfac90ad36534b56b8b83ba2db01790393c588309baff0acc62543659aafc6bc713da42b3fd1fdad2ae169942c7db0c87d"], 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)=ANY=[@ANYBLOB="44010000", @ANYRES16=0x0, @ANYBLOB="00012dbd7000fcdbdf2519000000180001801400020065727370616e3000000000000000000044000180080003000000000008000300000000001400020067726530000000000000000000000000140002006970766c616e3000000000000000000008000100", @ANYRES32=r1, @ANYBLOB="6c0001801400020067656e6576653000000000000000000014000200776c616e31000000000000000000000014000200766574683000000000000000000000000800030001000000080003000000000008000100", @ANYRES32=r2, @ANYBLOB="140002006e7230000000000000000000000000001400018008009e09646c63505d760100", @ANYRES32=r3, @ANYBLOB="300001801400020000000000000000000000000000000000080003000400000008000100", @ANYRES32=r5, @ANYBLOB="08000300030000002400018008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="08000300010000000800030001000000"], 0x144}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040200000000806c0100001500100014000000001209000d2000000401a80018000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92637429397f632838", 0xd8}], 0x1}, 0x0) 1.718308274s ago: executing program 4 (id=2248): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)=ANY=[@ANYBLOB="14000000250001002c040000ffdbdf2507"], 0x14}}, 0x1) 1.717505864s ago: executing program 1 (id=2249): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000700)={'bond0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'bond0\x00', 0x1}) r1 = socket$inet(0x2, 0x80000, 0xffffff9d) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000040)={0xffffc44e, {{0x2, 0x4e21, @private=0xa010100}}, 0x1, 0xa, [{{0x2, 0x4e22, @broadcast}}, {{0x2, 0x4e21, @empty}}, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}}, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e20, @loopback}}, {{0x2, 0x4e21, @empty}}, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e23, @rand_addr=0x64010100}}, {{0x2, 0x4e22, @private=0xa010100}}]}, 0x590) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r2) 1.616100198s ago: executing program 4 (id=2251): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x22}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_ECN={0x8, 0x8, 0x4}]}}]}, 0x38}, 0x1, 0x8100000018000000}, 0x1010) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x57}}]}, &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000000)={@empty, @multicast1, r3}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x22}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000580)) (async) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_ECN={0x8, 0x8, 0x4}]}}]}, 0x38}, 0x1, 0x8100000018000000}, 0x1010) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x57}}]}, &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000000)={@empty, @multicast1, r3}, 0xc) (async) 1.512928942s ago: executing program 1 (id=2253): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCALLUSERDATA(r1, 0x89e4, &(0x7f0000000400)={0x4f, "d8caccf4001071d66c155bdd71dc52a9c4b47841a49ba10800122c69bcafaa2abcf78cba7b368261cd17d076acd9901017641abe8e4567f086a593375808de1171cf0e3b925065d214119e421276f0addd81f4987f74a18ff76e563c2b6c9d55ffca4df6280c4059c5c23a440b40937aaa5c066b35150fb074cd4bf934e7ca87"}) listen(r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100ffffff0000080003000000e900000000", @ANYRES32=r4, @ANYBLOB="1c005a8018000480140005000600090009000900000009006dac0000"], 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@delqdisc={0x38, 0x25, 0x72a, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xa, 0xfff3}, {0xc, 0x10}, {0xf}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0xfff}}]}, 0x38}}, 0x0) recvmmsg(r0, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r7) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x40}, 0x40004) socket$inet_udplite(0x2, 0x2, 0x88) (async) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000280)='skb_copy_datagram_iovec\x00', r12}, 0x18) socket(0x10, 0x2, 0x0) (async) r13 = socket(0x10, 0x2, 0x0) write(r13, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r13, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000300)}, {&(0x7f0000000380)}, {&(0x7f00000004c0)=""/254, 0xfe}], 0x3, &(0x7f00000005c0)=""/255, 0xff}, 0x6}], 0x1, 0x0, &(0x7f00000001c0)={0x77359400}) (async) recvmmsg(r13, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000300)}, {&(0x7f0000000380)}, {&(0x7f00000004c0)=""/254, 0xfe}], 0x3, &(0x7f00000005c0)=""/255, 0xff}, 0x6}], 0x1, 0x0, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000013002f0a25bd70000000000007006800", @ANYRES32=r9, @ANYBLOB="00090000102006002400238009000100766c616e000000001400048010000380dda837f40600000007000000"], 0x44}}, 0x0) (async) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000013002f0a25bd70000000000007006800", @ANYRES32=r9, @ANYBLOB="00090000102006002400238009000100766c616e000000001400048010000380dda837f40600000007000000"], 0x44}}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f00000001c0), 0x4) sendmsg$nl_route(r14, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001900010040200000ebffffff7f0800000004fe05001e0000"], 0x1c}}, 0x0) 1.452018967s ago: executing program 2 (id=2254): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c000000100021040200"/20, @ANYRES32=r4, @ANYBLOB="f900000000000000240012800c0001006d6163766c616e00140002800800010010000000080003"], 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 1.258014063s ago: executing program 0 (id=2255): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f00000000000000f000f195"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xf, &(0x7f0000000300)={r2, 0x300, 0x0, 0xffffffffffffff26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r3, 0x10c, 0x8, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r4 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4) syz_emit_ethernet(0x3f, &(0x7f0000000080)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x9, 0x3a, 0xff, @remote, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x4, 0x80, "bd"}}}}}}, 0x0) sendmsg$netlink(r4, &(0x7f00000052c0)={0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x100}], 0x1, 0x0, 0x0, 0x4000010}, 0x8000) socket$alg(0x26, 0x5, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f00000000000000f000f195"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xf, &(0x7f0000000300)={r2, 0x300, 0x0, 0xffffffffffffff26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) (async) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) getsockopt$llc_int(r3, 0x10c, 0x8, &(0x7f0000000000), &(0x7f00000000c0)=0x4) (async) accept4(r0, 0x0, 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4) (async) syz_emit_ethernet(0x3f, &(0x7f0000000080)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x9, 0x3a, 0xff, @remote, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x4, 0x80, "bd"}}}}}}, 0x0) (async) sendmsg$netlink(r4, &(0x7f00000052c0)={0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="000100002700040029bd7000fcdbdf250c00950004000000000000000400e5807c6a667ecdaa482060f1f791bdff67592ea44bf0c13ca581ca846c3400f789b8337cf3067dc6507b86bce001683189c94e81381174e8ce18770238ee3827a87239767313edb93f4684460520999c340f844239559a744a3f583cec1c6a5efa40293bf14db652a3d18974aeead571d3e0a11c871ae436587debd889555ad16799e5a9b11174ddc2edc2417787aed191cb6d54a6cf527fed254096d605afab4e20de0eb6d4d71c8358aea0e5712408df3be73fcc08850f685dcc899f75111ce47e95534647dde15f24b1824cb3bd57e22fd454d6d5e0f4eed97f34ba9c92f20000"], 0x100}], 0x1, 0x0, 0x0, 0x4000010}, 0x8000) (async) 1.17563569s ago: executing program 1 (id=2256): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$netlink(r1, &(0x7f00000052c0)={0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000000280)={0x100, 0x27, 0x4, 0x70bd29, 0x25dfdbfc, "", [@typed={0xc, 0x95, 0x0, 0x0, @u64=0x4}, @nested={0x4, 0xe5}, @generic="7c6a667ecdaa482060f1f791bdff67592ea44bf0c13ca581ca846c3400f789b8337cf3067dc6507b86bce001683189c94e81381174e8ce18770238ee3827a87239767313edb93f4684460520999c340f844239559a744a3f583cec1c6a5efa40293bf14db652a3d18974aeead571d3e0a11c871ae436587debd889555ad16799e5a9b11174ddc2edc2417787aed191cb6d54a6cf527fed254096d605", @generic="afab4e20de0eb6d4d71c8358aea0e5712408df3be73fcc08850f685dcc899f75111ce47e95534647dde15f24b1824cb3bd57e22fd454d6d5e0f4eed97f34ba9c92"]}, 0x100}], 0x1, 0x0, 0x0, 0x4000010}, 0x8000) 1.098287594s ago: executing program 0 (id=2257): r0 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x31, &(0x7f0000000640), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000076000907000000000000000007020000", @ANYRES32=r1, @ANYRES16=r0], 0x24}, 0x1, 0x5502000000000000, 0x0, 0x40000}, 0x0) 1.093648741s ago: executing program 2 (id=2258): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r1, 0x5421, &(0x7f0000000140)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x67}, @exit], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000240)="6e37cff5b582e082d58cb23de3c19dc4971d9b59ddb52ae25a3ca48e8d5284721b4b722d1fd011fc3144e4ceb18b32b5b8", 0x31}, {&(0x7f0000000340)="5fdbd61342a1560054f74cee82024cacdf79b6be94f99a7aea5b7678644cc1ef33880d4a59cad1fd0852b05064b02335eb6064c24f1ad325e0325bc473c3aeaf6709e5227bca1f7ba283d381d4f64e34fa77c5cac5d0bcf72850aaa9ea7f9144a0e108ae41f51262011dd0a3eb6eaf00da010b18a79f6917d0c25efbf1c56feb59cbcb63f4683c026aa7aa1d65bea9ba31", 0x91}, {&(0x7f0000000940)="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", 0x105}, {&(0x7f0000000500)="0f1d547dfd011eee5ee96e9f1947841b6080ffadffd0f2ba53588a463cb08890097ea28302b894feb895cebb0e72a94c681955c3a39a1e5ebde1638c8f408cbb197ede5a6779e4582b685db9abb1184d1e4bf53bb5eafcc7d265002aeead4852d157cfb83a10f405c72c51bd99d99ea7f702c9424dcfffbd0387c5e7777aa1bf37cbffb95d0daf", 0x87}, {&(0x7f0000000700)="7a60507430110d45fba18e434184c81c9a10404af273af02537863cd4f9b455ba771ca5222198ae07333ef0d2beff796d017427138340fc2b1528610600c9b212beee90a7941df2f1ec93c7469156c30892b39b7b43f9d229a356cc43023e2eb30577ca2725e6c1ce2e4557d4150336ac279203360ee37b0f67dce3d0fa468aed602dc9f641bbacbeac908a860f4d02f22946a5a73f0bd6896b5fb16e75d3437356e3e8307c6d07b767649101165270eb5c82bc6cd3d2c5954f370361578736b68b2d8d891071b5ad1e7ede7372c18", 0xcf}, {&(0x7f0000001700)="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", 0x387}], 0x6}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@ccm_128={{0x303}, "b78d736a8c39fdf2", "fcffed65758a3a043eabd1cf621ea1b5", "e89affd1", "3dbe20f912392bd3"}, 0x28) 1.034019542s ago: executing program 4 (id=2259): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000fc0)={0x14, 0x3, 0x2, 0x301}, 0x14}}, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x1, 0x0, 0x2, {}, {0x77359400}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x1, 0x1, 0x0, 0x1}, 0x30, 0x2, 0x0, 0x0, "2aaebe33f76a8521f21ffd6b233661bb10f0fb91e2dd8bb687dcf5ab192795ac7ea3ef4fa35a6f6aa20c47ffcc86987b63044f98aaa369d81e365685185420c4"}}, 0x80}}, 0x20000c00) sendmsg$can_bcm(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c00)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000080f7"], 0x38}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) ppoll(&(0x7f0000000d40)=[{r4}], 0x25, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) readv(r3, &(0x7f0000000240)=[{&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000140)=""/141, 0x8d}, {&(0x7f0000000280)=""/34, 0x22}], 0x4) 880.215224ms ago: executing program 2 (id=2260): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x800, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'virt_wifi0\x00', @random='\\\x00\x00 \x00'}) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={r4, @in={{0x2, 0x4e22, @private=0xa010102}}, 0x0, 0x0, 0x0, 0x0, 0x304, 0x0, 0x2c}, 0x9c) 846.185456ms ago: executing program 0 (id=2261): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x3a, &(0x7f00000000c0)=0x2, 0x4) (async) sendto$inet6(r2, 0x0, 0x0, 0xfffffeffffff3fbf, &(0x7f0000000140)={0xa, 0x4e20, 0x3fc, @loopback}, 0x1c) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000002c0)={0x40, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x40}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) (async) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000029c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000000)=""/98, 0x62}, {&(0x7f0000000380)=""/156, 0x9c}, {&(0x7f0000003800)=""/4100, 0x1004}, {&(0x7f0000000cc0)=""/219, 0xdb}, {&(0x7f0000000300)=""/111, 0x6f}, {&(0x7f0000000c40)=""/65, 0x41}, {&(0x7f0000000280)=""/106, 0x6a}, {&(0x7f0000000440)=""/203, 0xcb}, {&(0x7f0000000180)=""/208, 0xd0}, {&(0x7f0000000080)=""/118, 0x76}], 0xa, 0x0, 0x0, 0xb00}}], 0x2, 0x100, 0x0) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x44, r6, 0x1, 0x70bd2d, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x44d, 0xb, 0x8, 0x3ff, 0x2000000]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x44}}, 0x4) (async) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfb, 0x2000000}, 0xc) (async) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c0000000000000e0021001400000002800000121f", 0x2e}], 0x1}, 0x0) (async) r9 = socket$inet(0x2, 0x2000000000003, 0x2) bind$inet(r9, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) (async) r10 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x4}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 665.986904ms ago: executing program 0 (id=2262): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x4}, {}, {}, {}]}, @fwd, @volatile, @typedef={0x4, 0x0, 0x0, 0x8, 0x3}, @volatile={0x0, 0x0, 0x0, 0x9, 0x6}]}}, 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c00048028000180080001006f7366001c0002800800014000000000080003400500000105000200000000000900010073797a30000000000900020073797a32"], 0x80}}, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1, 0x0, 0x0, @void, @value}, 0x20) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) setsockopt$inet_int(r2, 0x0, 0xc, &(0x7f0000000180)=0x5, 0x4) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f00000000c0)=0x96, 0x4) sendmmsg(r2, &(0x7f0000007fc0), 0x2d, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}, 0x2e}], 0x1, 0x45833af92e4b39ff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x4}, {}, {}, {}]}, @fwd, @volatile, @typedef={0x4, 0x0, 0x0, 0x8, 0x3}, @volatile={0x0, 0x0, 0x0, 0x9, 0x6}]}}, 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c00048028000180080001006f7366001c0002800800014000000000080003400500000105000200000000000900010073797a30000000000900020073797a32"], 0x80}}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1, 0x0, 0x0, @void, @value}, 0x20) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) (async) setsockopt$inet_int(r2, 0x0, 0xc, &(0x7f0000000180)=0x5, 0x4) (async) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) (async) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f00000000c0)=0x96, 0x4) (async) sendmmsg(r2, &(0x7f0000007fc0), 0x2d, 0x0) (async) recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}, 0x2e}], 0x1, 0x45833af92e4b39ff, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) 664.47197ms ago: executing program 1 (id=2263): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000040)={0x4c, r1, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x30, 0x2d, 0x0, 0x1, [{0x4}, {0x28, 0x0, @default_ibss_ssid}, {0x4}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008414}, 0x40000) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000080)={'sit0\x00', 0x0}) 499.1874ms ago: executing program 0 (id=2264): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 456.711903ms ago: executing program 1 (id=2265): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4094}, 0x0) mmap(&(0x7f000083b000/0x13000)=nil, 0x13000, 0x0, 0x13, r0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @remote, 0x1}], 0x1c) setsockopt(r3, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000580)}}], 0x2, 0x4010) 374.206679ms ago: executing program 2 (id=2266): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0xc3, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c0016801800018014000b000000f29c00000000000008000000000008000d"], 0x44}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f00000002c0), 0x4) setsockopt$inet6_udp_int(r3, 0x11, 0x66, &(0x7f0000000340)=0xc6, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xcb, &(0x7f0000000240)={0x0, 0x1aa18adfbe42e3a, 0x0, r4, 0x8}, 0xc) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22, 0x3, @empty}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000900)=ANY=[@ANYBLOB="ffffffffbfff20000000000086dd600489f1009c1100fc010000000000000025030000000000ff02000000000000000000000000000100000e22"], 0x0) 233.763938ms ago: executing program 0 (id=2267): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000004880)) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x16, 0x0, &(0x7f00000001c0)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r4 = socket$inet(0x2, 0x4000000805, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f00000002c0)={@mcast1}, 0x14) r6 = socket(0x10, 0x2, 0x0) sendto$inet6(r6, &(0x7f00000004c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006020a0000000d0085a168d0bf46d32345653600648d07000b000a00070849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160012000a0000000000e000e218d1dd3b6ed538f6523250", 0x78, 0xc090, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x10, 0x6, 0x0, @remote, @local, {[], {{0x0, 0xe22, 0x41424344, 0x41424344, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @md5sig={0x13, 0x12, "ca0c734891a263a2ef1d3622fb24b095"}, @fastopen={0x22, 0x6, "5f83c50f"}, @md5sig={0x13, 0x12, "2bdd4b74a1f6aa675459bc4d77085aa8"}]}}}}}}}}, 0x0) sendmmsg(r4, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="100000000000000084"], 0x10}}], 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x1c, r3, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x200e0850) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x9}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xa05d}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x14) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000003e0007010300000000000000017c0000040042800c00018006000600843b0000100002800c0009"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r9) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r11, 0x18000000000002a0, 0x19, 0x0, &(0x7f0000000000)="b9ff03030018698cb89e40f086dd6000000e00001100630677", 0x0, 0xfa, 0x2000000, 0x3f, 0x5e, &(0x7f0000000440), &(0x7f0000000080), 0x4}, 0x50) sendmsg$NFC_CMD_GET_TARGET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r10, 0x1}, 0x14}}, 0x24004044) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r9) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r9) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r9, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, r12, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000010}, 0x4008000) syz_emit_ethernet(0x52, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa061aaaaa08004c0000440000000000069078ac1414bbac1414bb441c0901e000000200000000ac14140100000000ac14143b0000000400004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ccc2000090780000b7ccbbf7260f48c2309ab4a164cfcdf15b7483affec87e768673eb3a5cd3a5f2c82f475c8fca0e1cadc5137173cd64a1"], 0x0) 0s ago: executing program 2 (id=2268): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x10, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x0, 0x11, r2, 0x0) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000100)=@req3={0x4, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000011000d0927bd7000ffdbdf250000d514fe4b3589874a61d5314325c11997c519fd069e5ccd5eef0cf3f509627650b9b7726a5c51ca155953659f18c4bfb5e0b15f3f08bae8e08ed7a50b70b49daffb1920d0a7f22f5562aefd822acc7521e41aa8748200"/116, @ANYRES32=0x0, @ANYBLOB="00000000010c0200140003006261746164765f736c6176655f300000"], 0x34}}, 0x0) kernel console output (not intermixed with test programs): ooth: hci1: command 0x0406 tx timeout [ 212.413123][ T1097] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 213.522609][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 214.622639][ T1147] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 215.732939][ T1097] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 216.832972][ T1097] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 216.862578][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 216.862996][ T5851] Bluetooth: hci3: command 0x0406 tx timeout [ 217.932974][ T1163] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 219.033024][ T1097] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 220.142514][ T1097] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 221.183926][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 221.243451][ T1097] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 222.362955][ T1163] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 223.472866][ T1163] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 224.582827][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 225.361717][ T9110] x_tables: ip6_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 225.456458][ T9120] __nla_validate_parse: 1 callbacks suppressed [ 225.456476][ T9120] netlink: 44 bytes leftover after parsing attributes in process `syz.1.988'. [ 225.481602][ T9122] netlink: 16 bytes leftover after parsing attributes in process `syz.3.990'. [ 225.516900][ T9120] tc_dump_action: action bad kind [ 225.696819][ T9135] netlink: 'syz.0.994': attribute type 10 has an invalid length. [ 225.717661][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 225.770097][ T9135] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 225.951731][ T9151] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1001'. [ 225.964687][ T9156] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1002'. [ 225.969012][ T9151] netlink: 'syz.1.1001': attribute type 7 has an invalid length. [ 225.986902][ T9151] netlink: 'syz.1.1001': attribute type 8 has an invalid length. [ 226.013582][ T9151] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1001'. [ 226.227339][ T9167] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1006'. [ 226.237091][ T9167] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1006'. [ 226.330684][ T9173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1008'. [ 226.410526][ T9179] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1011'. [ 226.490798][ T9184] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1012'. [ 226.884673][ T1097] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 226.951660][ T9215] netlink: 'syz.3.1020': attribute type 4 has an invalid length. [ 227.442184][ T5846] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 227.490742][ T9243] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 227.498041][ T9243] IPv6: NLM_F_CREATE should be set when creating new route [ 227.509979][ T9243] lo: entered allmulticast mode [ 227.528584][ T9243] tunl0: entered allmulticast mode [ 227.545393][ T9243] gre0: entered allmulticast mode [ 227.572877][ T9243] gretap0: entered allmulticast mode [ 227.582648][ T9243] erspan0: entered allmulticast mode [ 227.592019][ T9243] ip_vti0: entered allmulticast mode [ 227.601364][ T9243] ip6_vti0: entered allmulticast mode [ 227.612155][ T9243] sit0: entered allmulticast mode [ 227.631982][ T9243] ip6tnl0: entered allmulticast mode [ 227.641224][ T9243] ip6gre0: entered allmulticast mode [ 227.654646][ T9243] syz_tun: entered allmulticast mode [ 227.669223][ T9243] ip6gretap0: entered allmulticast mode [ 227.709464][ T9243] bridge0: entered allmulticast mode [ 227.731477][ T9243] nlmon0: entered allmulticast mode [ 227.755222][ T9243] caif0: entered allmulticast mode [ 227.767326][ T9243] batadv0: entered allmulticast mode [ 227.832956][ T9243] veth0: entered allmulticast mode [ 227.885313][ T9243] veth1: entered allmulticast mode [ 227.915627][ T9243] wg0: entered allmulticast mode [ 227.935148][ T9243] wg1: entered allmulticast mode [ 227.956993][ T9243] wg2: entered allmulticast mode [ 227.976160][ T9243] veth1_to_bridge: entered allmulticast mode [ 227.992203][ T9243] veth0_to_bond: entered allmulticast mode [ 228.017950][ T9243] bond_slave_0: entered allmulticast mode [ 228.026380][ T9243] veth1_to_bond: entered allmulticast mode [ 228.034782][ T1097] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 228.040261][ T9243] bond_slave_1: entered allmulticast mode [ 228.048960][ T9243] veth0_to_team: entered allmulticast mode [ 228.057895][ T9243] team_slave_0: entered allmulticast mode [ 228.066215][ T9243] veth1_to_team: entered allmulticast mode [ 228.076667][ T9243] team_slave_1: entered allmulticast mode [ 228.083751][ T9243] veth0_to_batadv: entered allmulticast mode [ 228.091895][ T9243] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.101091][ T9243] batadv_slave_0: entered allmulticast mode [ 228.111562][ T9243] veth1_to_batadv: entered allmulticast mode [ 228.128572][ T9243] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.137695][ T9271] netlink: 'syz.3.1039': attribute type 10 has an invalid length. [ 228.137746][ T9243] batadv_slave_1: entered allmulticast mode [ 228.157000][ T9243] xfrm0: entered allmulticast mode [ 228.166780][ T9243] veth0_to_hsr: entered allmulticast mode [ 228.175497][ T9243] hsr_slave_0: entered allmulticast mode [ 228.187590][ T9243] veth1_to_hsr: entered allmulticast mode [ 228.196676][ T9243] hsr_slave_1: entered allmulticast mode [ 228.205907][ T9243] hsr0: entered allmulticast mode [ 228.216419][ T9243] veth1_virt_wifi: entered allmulticast mode [ 228.226965][ T9243] veth0_virt_wifi: entered allmulticast mode [ 228.236668][ T9243] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 228.245241][ T9243] veth1_vlan: entered allmulticast mode [ 228.253779][ T9243] vlan0: entered allmulticast mode [ 228.259062][ T9243] vlan1: entered allmulticast mode [ 228.265544][ T9243] macvlan0: left promiscuous mode [ 228.271362][ T9243] macvlan1: entered allmulticast mode [ 228.280712][ T9243] ipvlan0: entered allmulticast mode [ 228.287890][ T9243] ipvlan1: entered allmulticast mode [ 228.294874][ T9243] veth1_macvtap: entered allmulticast mode [ 228.301229][ T9243] veth0_macvtap: entered allmulticast mode [ 228.311215][ T9243] macvtap0: entered allmulticast mode [ 228.320834][ T9243] macsec0: entered allmulticast mode [ 228.329667][ T9243] geneve0: entered allmulticast mode [ 228.339615][ T9243] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.349303][ T9243] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.358607][ T9243] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.368370][ T9243] geneve1: entered allmulticast mode [ 228.377241][ T9243] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 228.387291][ T9243] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 228.398021][ T9243] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 228.409098][ T9243] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 228.428056][ T9243] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 228.443701][ T9243] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 228.454553][ T9243] macvlan2: entered allmulticast mode [ 228.460062][ T9243] bond0: entered allmulticast mode [ 228.467185][ T9243] bond1: entered allmulticast mode [ 228.473353][ T9243] macvlan3: entered allmulticast mode [ 228.479240][ T9243] vcan0: entered allmulticast mode [ 228.485924][ T9243] bridge1: entered allmulticast mode [ 228.493704][ T9243] vti0: entered allmulticast mode [ 228.501685][ T9243] bond2: entered allmulticast mode [ 228.507374][ T9243] ip6gretap1: entered allmulticast mode [ 228.516130][ T9247] netlink: 'syz.4.1033': attribute type 3 has an invalid length. [ 228.542329][ T9271] team0: Device ipvlan1 failed to register rx_handler [ 228.641678][ T9278] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 228.949765][ T9301] netlink: 'syz.3.1046': attribute type 29 has an invalid length. [ 228.993893][ T9301] netlink: 'syz.3.1046': attribute type 29 has an invalid length. [ 229.042110][ T9308] vlan2: entered promiscuous mode [ 229.068036][ T9308] bridge0: entered promiscuous mode [ 229.081669][ T9308] vlan2: entered allmulticast mode [ 229.184828][ T9309] vlan2: entered promiscuous mode [ 229.200879][ T9309] vlan2: entered allmulticast mode [ 229.231600][ T9326] netlink: 'syz.0.1053': attribute type 1 has an invalid length. [ 229.428033][ T9336] sctp: [Deprecated]: syz.2.1056 (pid 9336) Use of int in maxseg socket option. [ 229.428033][ T9336] Use struct sctp_assoc_value instead [ 229.428408][ T9337] tipc: Enabled bearer , priority 0 [ 229.487273][ T9335] tipc: Enabling of bearer rejected, already enabled [ 229.571872][ T9340] syzkaller0: entered promiscuous mode [ 229.581456][ T9340] syzkaller0: entered allmulticast mode [ 229.588564][ T9340] tipc: Resetting bearer [ 229.725249][ T36] tipc: Resetting bearer [ 229.752042][ T9335] tipc: Resetting bearer [ 230.457546][ T5889] tipc: Node number set to 4269801491 [ 231.031571][ T9335] tipc: Disabling bearer [ 231.122663][ T9383] 8021q: adding VLAN 0 to HW filter on device bond1 [ 231.161153][ T9383] bond0: (slave bond1): Enslaving as an active interface with an up link [ 231.291280][ T9401] __nla_validate_parse: 20 callbacks suppressed [ 231.291300][ T9401] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1073'. [ 231.400243][ T9405] IPVS: length: 179 != 24 [ 231.631000][ T9425] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1082'. [ 231.837008][ T9442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1087'. [ 231.908434][ T9442] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1087'. [ 231.933231][ T9442] ï‰Oܼ: renamed from hsr0 [ 231.961989][ T9457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1087'. [ 232.001503][ T9442] ï‰Oܼ: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 232.029136][ T9442] ï‰Oܼ: entered promiscuous mode [ 232.042069][ T9442] A link change request failed with some changes committed already. Interface ï‰Oܼ may have been left with an inconsistent configuration, please check. [ 232.077879][ T9460] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 232.104703][ T9464] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1092'. [ 232.125944][ T9464] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 232.684278][ T9496] netlink: 'syz.0.1103': attribute type 1 has an invalid length. [ 232.734353][ T9504] tc_dump_action: action bad kind [ 232.859460][ T9496] 8021q: adding VLAN 0 to HW filter on device bond1 [ 232.877600][ T9508] ip6erspan0: entered promiscuous mode [ 232.891860][ T9508] bond1: (slave ip6erspan0): making interface the new active one [ 232.903980][ T9508] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 232.936127][ T9524] gtp0: entered promiscuous mode [ 232.947435][ T9524] gtp0: entered allmulticast mode [ 233.214901][ T9545] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1115'. [ 233.230305][ T9546] xt_CONNSECMARK: invalid mode: 0 [ 233.265830][ T9546] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1114'. [ 233.507117][ T9549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1117'. [ 233.555414][ T9567] SET target dimension over the limit! [ 233.807635][ T9584] team0: Port device team_slave_0 removed [ 233.817406][ T9584] team0: Port device team_slave_1 removed [ 233.826057][ T9584] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.831404][ T9591] netlink: 'syz.2.1128': attribute type 10 has an invalid length. [ 233.844321][ T9584] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.381872][ T9616] syzkaller0: entered promiscuous mode [ 234.395719][ T9616] syzkaller0: entered allmulticast mode [ 234.461723][ T9626] netlink: 'syz.2.1139': attribute type 1 has an invalid length. [ 234.473063][ T9626] netlink: 'syz.2.1139': attribute type 2 has an invalid length. [ 234.863342][ T9653] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 234.879254][ T9656] netlink: 4552 bytes leftover after parsing attributes in process `syz.0.1150'. [ 234.904578][ T9653] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 234.991500][ T9662] netlink: zone id is out of range [ 235.017113][ T9662] netlink: del zone limit has 4 unknown bytes [ 235.027645][ T9661] 0ªÃøÂFNð¡: renamed from bond_slave_0 (while UP) [ 235.059891][ T9661] 0ªÃøÂFNð¡: entered allmulticast mode [ 235.087132][ T9675] netlink: 'syz.3.1154': attribute type 29 has an invalid length. [ 235.923879][ T9725] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 235.934612][ T9725] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 236.147980][ T5141] Bluetooth: hci4: link tx timeout [ 236.154053][ T5141] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 236.357525][ T9759] netlink: 'syz.0.1178': attribute type 39 has an invalid length. [ 236.377944][ T9761] __nla_validate_parse: 8 callbacks suppressed [ 236.377962][ T9761] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1179'. [ 236.550942][ T9773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1181'. [ 236.851830][ T9791] gtp0: entered promiscuous mode [ 236.901108][ T9791] gtp0: entered allmulticast mode [ 237.133089][ T9800] bond2: entered allmulticast mode [ 237.154433][ T9800] 8021q: adding VLAN 0 to HW filter on device bond2 [ 237.316008][ T9816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1196'. [ 237.349906][ T9816] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1196'. [ 237.515832][ T9835] netlink: 'syz.0.1203': attribute type 10 has an invalid length. [ 237.567680][ T9835] team0: Device hsr_slave_0 failed to register rx_handler [ 237.587877][ T9842] netlink: 'syz.2.1205': attribute type 2 has an invalid length. [ 237.600743][ T9842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1205'. [ 237.670920][ T9845] team0: Device vti0 is up. Set it down before adding it as a team port [ 238.034445][ T9865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1215'. [ 238.045211][ T9865] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1215'. [ 238.197407][ T9868] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 238.223031][ T5141] Bluetooth: hci4: command 0x0405 tx timeout [ 238.251325][ T9877] netlink: 'syz.0.1219': attribute type 10 has an invalid length. [ 238.278932][ T9881] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 238.293398][ T9877] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1219'. [ 238.394780][ T9877] dummy0: entered promiscuous mode [ 238.415703][ T9890] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 238.431315][ T9877] bond0: (slave dummy0): Releasing backup interface [ 238.464488][ T9877] bridge0: port 4(dummy0) entered blocking state [ 238.474485][ T9877] bridge0: port 4(dummy0) entered disabled state [ 238.490067][ T9877] dummy0: entered allmulticast mode [ 238.577488][ T9896] netlink: 'syz.4.1223': attribute type 4 has an invalid length. [ 238.745587][ T9903] gtp1: entered promiscuous mode [ 238.761840][ T9906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1227'. [ 238.767012][ T9903] gtp1: entered allmulticast mode [ 238.796017][ T9901] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1224'. [ 238.796773][ T9907] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.820610][ T9910] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.068788][ T9929] netlink: 'syz.2.1234': attribute type 11 has an invalid length. [ 239.123968][ T9937] netlink: 'syz.1.1235': attribute type 10 has an invalid length. [ 239.129391][ T9931] bond3: entered promiscuous mode [ 239.141803][ T9931] bond3: entered allmulticast mode [ 239.151029][ T9931] 8021q: adding VLAN 0 to HW filter on device bond3 [ 239.978022][ T9997] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 240.473680][T10036] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20001 [ 240.752028][T10061] netlink: 'syz.0.1273': attribute type 2 has an invalid length. [ 240.985197][T10074] vlan3: entered promiscuous mode [ 241.000705][T10074] vlan3: entered allmulticast mode [ 241.050070][T10084] x_tables: duplicate underflow at hook 3 [ 241.234024][T10092] netlink: 'syz.4.1285': attribute type 4 has an invalid length. [ 241.388505][T10103] __nla_validate_parse: 17 callbacks suppressed [ 241.388525][T10103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1289'. [ 241.406392][T10103] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1289'. [ 241.643526][T10115] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1293'. [ 241.920033][T10136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.975500][T10140] Cannot find set identified by id 3 to match [ 241.988755][T10140] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1301'. [ 241.993103][T10136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.011328][T10142] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1302'. [ 242.070642][T10144] xt_CT: You must specify a L4 protocol and not use inversions on it [ 242.089301][T10131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.124480][T10150] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 242.489475][T10161] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1309'. [ 242.867736][T10177] netlink: 'syz.0.1313': attribute type 4 has an invalid length. [ 242.930971][T10179] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 243.040861][T10181] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 243.082116][T10189] netlink: 'syz.1.1317': attribute type 1 has an invalid length. [ 243.373288][T10198] team0: Device vti0 is of different type [ 243.569601][T10209] Cannot find set identified by id 3 to match [ 243.588785][T10209] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1323'. [ 243.696374][T10216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1324'. [ 243.808949][T10226] netlink: 'syz.4.1330': attribute type 12 has an invalid length. [ 243.835361][T10226] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1330'. [ 243.872445][T10227] netlink: 'syz.4.1330': attribute type 12 has an invalid length. [ 243.880711][T10227] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1330'. [ 243.943129][T10233] 8021q: VLANs not supported on tunl0 [ 244.047823][T10242] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 244.141264][T10244] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.150788][T10244] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.160414][T10244] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.169783][T10244] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.419901][T10261] netlink: 'syz.0.1341': attribute type 9 has an invalid length. [ 244.437953][T10261] netlink: 'syz.0.1341': attribute type 6 has an invalid length. [ 244.497923][T10271] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 244.550242][T10266] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 244.599680][T10276] netlink: 'syz.2.1349': attribute type 1 has an invalid length. [ 244.617377][T10279] team0: Device vti0 is up. Set it down before adding it as a team port [ 245.174333][T10311] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.525884][T10337] openvswitch: netlink: Missing key (keys=40, expected=100) [ 245.651735][T10343] vlan2: entered promiscuous mode [ 245.657374][T10343] vlan2: entered allmulticast mode [ 245.663053][T10343] hsr_slave_1: entered allmulticast mode [ 245.679274][T10348] openvswitch: netlink: Missing key (keys=40, expected=100) [ 245.918602][T10366] Bluetooth: MGMT ver 1.23 [ 246.117654][T10378] ÿ: renamed from dummy0 [ 246.137927][T10378] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 246.541161][ T5918] IPVS: starting estimator thread 0... [ 246.552829][T10403] openvswitch: netlink: Actions may not be safe on all matching packets [ 246.632405][T10408] IPVS: using max 26 ests per chain, 62400 per kthread [ 246.861954][T10430] netlink: 'syz.4.1390': attribute type 64 has an invalid length. [ 246.891943][T10430] __nla_validate_parse: 17 callbacks suppressed [ 246.891962][T10430] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1390'. [ 246.897448][T10431] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1391'. [ 247.026769][T10438] veth1_to_team: entered promiscuous mode [ 247.046213][T10439] veth0: entered promiscuous mode [ 247.051850][T10437] veth0: left promiscuous mode [ 247.060828][T10437] veth1_to_team: left promiscuous mode [ 247.369666][T10462] xt_CT: You must specify a L4 protocol and not use inversions on it [ 247.650431][T10482] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1406'. [ 247.828374][T10493] tipc: Started in network mode [ 247.854147][T10493] tipc: Node identity 080211000001, cluster identity 4711 [ 247.877439][T10493] tipc: Enabled bearer , priority 0 [ 247.946240][T10501] netlink: 'syz.3.1412': attribute type 6 has an invalid length. [ 247.984802][T10493] netlink: 'syz.0.1409': attribute type 10 has an invalid length. [ 248.008991][T10493] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 248.034896][T10493] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 248.090268][T10493] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1409'. [ 248.123105][T10493] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 248.154618][T10512] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1415'. [ 248.160248][T10493] tipc: Resetting bearer [ 248.363543][T10519] sctp: [Deprecated]: syz.1.1417 (pid 10519) Use of int in max_burst socket option. [ 248.363543][T10519] Use struct sctp_assoc_value instead [ 248.414516][T10524] netlink: 'syz.2.1416': attribute type 10 has an invalid length. [ 248.415417][T10522] netlink: 'syz.0.1418': attribute type 1 has an invalid length. [ 248.442432][T10524] batadv0: left allmulticast mode [ 248.455843][T10522] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1418'. [ 248.878904][T10546] netlink: 'syz.3.1422': attribute type 2 has an invalid length. [ 248.923694][ T50] tipc: Node number set to 134418688 [ 248.968306][T10549] netlink: 'syz.2.1424': attribute type 21 has an invalid length. [ 248.979305][T10549] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1424'. [ 248.994289][T10549] netlink: 'syz.2.1424': attribute type 5 has an invalid length. [ 249.005465][T10549] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1424'. [ 249.360588][T10579] sit0: entered promiscuous mode [ 249.367152][T10579] netlink: 'syz.3.1429': attribute type 1 has an invalid length. [ 249.378991][T10579] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1429'. [ 249.783079][T10599] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1433'. [ 249.810413][T10599] netlink: 'syz.4.1433': attribute type 8 has an invalid length. [ 250.130247][T10621] netlink: 'syz.3.1443': attribute type 39 has an invalid length. [ 250.300515][T10636] netlink: 'syz.0.1440': attribute type 75 has an invalid length. [ 250.361590][T10626] 0ªÃøÂFNð¡: renamed from bond_slave_0 (while UP) [ 250.381890][T10626] 0ªÃøÂFNð¡: entered allmulticast mode [ 250.407869][T10630] netlink: 'syz.0.1440': attribute type 2 has an invalid length. [ 250.555441][T10635] virt_wifi0 speed is unknown, defaulting to 1000 [ 250.626291][T10635] xfrm0 speed is unknown, defaulting to 1000 [ 250.761241][T10655] netlink: 'syz.4.1451': attribute type 1 has an invalid length. [ 250.964845][T10667] sctp: [Deprecated]: syz.4.1456 (pid 10667) Use of struct sctp_assoc_value in delayed_ack socket option. [ 250.964845][T10667] Use struct sctp_sack_info instead [ 250.983166][T10667] sctp: [Deprecated]: syz.4.1456 (pid 10667) Use of struct sctp_assoc_value in delayed_ack socket option. [ 250.983166][T10667] Use struct sctp_sack_info instead [ 251.170245][T10671] xt_cluster: node mask cannot exceed total number of nodes [ 251.343494][T10680] netlink: 'syz.4.1459': attribute type 10 has an invalid length. [ 251.704706][T10704] unsupported nlmsg_type 40 [ 251.718178][T10707] tipc: Enabling of bearer rejected, failed to enable media [ 251.939964][T10715] __nla_validate_parse: 8 callbacks suppressed [ 251.939983][T10715] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1466'. [ 252.228900][T10731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.245528][T10731] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 252.354732][T10740] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1477'. [ 252.961470][T10786] veth1_macvtap: left promiscuous mode [ 252.981444][T10786] veth1_macvtap: entered promiscuous mode [ 253.122009][T10792] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1492'. [ 253.302195][T10792] 8021q: adding VLAN 0 to HW filter on device bond4 [ 253.367674][T10804] SET target dimension over the limit! [ 253.467127][T10800] veth7: entered promiscuous mode [ 253.488520][T10800] bridge0: port 5(veth7) entered blocking state [ 253.499655][T10800] bridge0: port 5(veth7) entered disabled state [ 253.515371][T10800] veth7: entered allmulticast mode [ 253.521770][T10808] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1497'. [ 253.780722][T10818] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1500'. [ 253.822032][ T5141] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 253.831260][ T5141] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 253.839116][ T5141] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 253.844835][T10818] NCSI netlink: No device for ifindex 0 [ 253.847903][ T5141] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 253.896796][ T5141] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 253.960163][T10822] virt_wifi0 speed is unknown, defaulting to 1000 [ 253.969008][T10822] xfrm0 speed is unknown, defaulting to 1000 [ 254.170775][T10835] validate_nla: 4 callbacks suppressed [ 254.170792][T10835] netlink: 'syz.1.1503': attribute type 10 has an invalid length. [ 254.407854][T10835] veth0_macvtap: left promiscuous mode [ 254.489143][T10822] chnl_net:caif_netlink_parms(): no params data found [ 254.509974][T10837] virt_wifi0 speed is unknown, defaulting to 1000 [ 254.538489][T10837] xfrm0 speed is unknown, defaulting to 1000 [ 254.747616][T10822] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.756815][T10822] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.765373][T10822] bridge_slave_0: entered allmulticast mode [ 254.773500][T10822] bridge_slave_0: entered promiscuous mode [ 254.808182][T10822] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.818243][T10822] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.830604][T10822] bridge_slave_1: entered allmulticast mode [ 254.839652][T10822] bridge_slave_1: entered promiscuous mode [ 254.869989][T10855] pim6reg: entered allmulticast mode [ 255.016546][T10865] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1513'. [ 255.044879][T10869] netlink: 'syz.4.1514': attribute type 1 has an invalid length. [ 255.131868][T10822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.215039][T10869] 8021q: adding VLAN 0 to HW filter on device bond3 [ 255.316231][T10871] bond3: (slave ip6gretap1): making interface the new active one [ 255.368437][T10871] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 255.389622][T10871] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 255.400427][T10871] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 255.425554][T10822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.483190][ T5918] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 255.496952][ T62] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 255.581046][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 255.641510][T10905] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1521'. [ 255.659758][T10905] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1521'. [ 255.754656][ T5918] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 255.808260][T10822] team0: Port device team_slave_0 added [ 255.895342][T10822] team0: Port device team_slave_1 added [ 255.914619][T10916] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1524'. [ 255.992540][ T5141] Bluetooth: hci3: command tx timeout [ 256.120673][T10924] syzkaller1: entered promiscuous mode [ 256.129133][T10924] syzkaller1: entered allmulticast mode [ 256.141214][T10822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.167677][T10822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.193878][T10931] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1526'. [ 256.212132][T10934] sctp: [Deprecated]: syz.4.1528 (pid 10934) Use of int in maxseg socket option. [ 256.212132][T10934] Use struct sctp_assoc_value instead [ 256.213680][T10822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.288015][T10822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.296936][T10822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.321868][T10940] xt_l2tp: v2 sid > 0xffff: 262144 [ 256.330267][T10822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.344785][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 256.480228][T10822] hsr_slave_0: entered promiscuous mode [ 256.497784][T10822] hsr_slave_1: entered promiscuous mode [ 256.507457][T10822] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 256.519077][T10822] Cannot create hsr debugfs directory [ 256.651350][T10951] vlan2: entered allmulticast mode [ 256.707745][T10952] vlan2: entered allmulticast mode [ 256.721059][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 256.733886][T10958] siw: device registration error -23 [ 256.744132][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 257.019766][T10822] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.057444][T10972] __nla_validate_parse: 1 callbacks suppressed [ 257.057462][T10972] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1544'. [ 257.155867][T10822] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.457192][ T1097] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 257.540810][T10822] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.674592][T10822] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.695997][T10996] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1550'. [ 257.710371][T10996] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1550'. [ 257.848608][T10973] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 257.890583][T10822] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 257.921000][T11002] openvswitch: netlink: Key type 10512 is out of range max 32 [ 257.922743][T10822] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 257.967735][T11008] bond0: mtu less than device minimum [ 257.973464][T10822] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 258.002006][T10822] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 258.065409][ T5141] Bluetooth: hci3: command tx timeout [ 258.127121][T11013] ksmbd: Unknown IPC event: 3, ignore. [ 258.164735][T10822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.173448][T11013] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 258.200304][T10822] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.235974][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.244041][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.272119][T11019] x_tables: duplicate entry at hook 3 [ 258.300537][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.307797][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.661763][T11033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1561'. [ 258.719292][T11038] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1561'. [ 258.922400][T11028] team0 (unregistering): Port device team_slave_0 removed [ 258.942172][T11028] team0 (unregistering): Port device team_slave_1 removed [ 259.348706][T10822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.501367][T10822] veth0_vlan: entered promiscuous mode [ 259.547021][T10822] veth1_vlan: entered promiscuous mode [ 259.618104][T10822] veth0_macvtap: entered promiscuous mode [ 259.631883][T10822] veth1_macvtap: entered promiscuous mode [ 259.700158][T10822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.715113][T10822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.727040][T10822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.798466][T10822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.825392][T10822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.849330][T10822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.870196][T11082] netlink: 'syz.1.1572': attribute type 10 has an invalid length. [ 259.880640][T10822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.900137][T10822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.928972][T10822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.947568][T10822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.969351][T10822] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.982731][T10822] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.991600][T10822] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.012133][T10822] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.143433][ T5141] Bluetooth: hci3: command tx timeout [ 260.178189][T11089] netlink: 'syz.0.1577': attribute type 23 has an invalid length. [ 260.196012][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.211627][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.247630][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.257390][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.462451][ C0] ip6_tnl_xmit_ctl: 3 callbacks suppressed [ 260.462469][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 260.628619][T11105] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1584'. [ 260.693790][T11107] netlink: 'syz.1.1585': attribute type 1 has an invalid length. [ 260.852972][ T1097] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 261.044630][T11127] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1591'. [ 261.091645][T11129] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1591'. [ 261.104527][T11132] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 261.120317][T11132] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 261.137839][T11132] xt_hashlimit: size too large, truncated to 1048576 [ 261.666968][ T1097] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.781135][ T1097] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.893170][T11157] netlink: 'syz.0.1596': attribute type 29 has an invalid length. [ 261.930331][T11157] netlink: 'syz.0.1596': attribute type 29 has an invalid length. [ 261.974655][ T62] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 262.048575][T11161] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1600'. [ 262.068702][ T1097] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.077747][T11161] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.319259][ T1097] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.341508][T11177] netlink: 'syz.0.1603': attribute type 1 has an invalid length. [ 262.622780][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 262.631382][ T5851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 262.641367][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 262.653025][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 262.662467][ T5851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 262.853155][T11207] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1615'. [ 262.863486][ T1097] bridge_slave_1: left allmulticast mode [ 262.869493][ T1097] bridge_slave_1: left promiscuous mode [ 262.909546][ T1097] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.932632][T11209] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 262.950872][ T1097] bridge_slave_0: left allmulticast mode [ 262.961923][ T1097] bridge_slave_0: left promiscuous mode [ 262.968182][ T1097] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.013742][T11217] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1617'. [ 263.115079][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 263.317806][ T1097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.329694][ T1097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.340981][ T1097] bond0 (unregistering): Released all slaves [ 263.362622][T11210] ipvlan1: left allmulticast mode [ 263.371618][T11216] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1616'. [ 263.503117][T11192] virt_wifi0 speed is unknown, defaulting to 1000 [ 263.511391][T11192] xfrm0 speed is unknown, defaulting to 1000 [ 263.622597][T11232] sctp: [Deprecated]: syz.0.1622 (pid 11232) Use of int in max_burst socket option. [ 263.622597][T11232] Use struct sctp_assoc_value instead [ 264.090890][T11244] virt_wifi0 speed is unknown, defaulting to 1000 [ 264.103985][T11244] xfrm0 speed is unknown, defaulting to 1000 [ 264.189543][ T1097] hsr_slave_0: left promiscuous mode [ 264.212301][ T1097] hsr_slave_1: left promiscuous mode [ 264.223744][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.231276][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.232992][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 264.255143][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.272403][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.302159][ T1097] veth1_macvtap: left promiscuous mode [ 264.323459][ T1097] veth0_macvtap: left promiscuous mode [ 264.332978][ T1097] veth1_vlan: left promiscuous mode [ 264.338564][ T1097] veth0_vlan: left promiscuous mode [ 264.450035][T11264] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.504160][T11264] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.550568][T11264] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.582745][T11264] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.592080][T11264] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.721820][T11264] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.742653][T11264] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.762640][T11264] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.782802][T11264] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.783013][ T5851] Bluetooth: hci3: command tx timeout [ 264.835527][T11267] netlink: 'syz.1.1630': attribute type 2 has an invalid length. [ 264.916091][T11270] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8 [ 265.018794][T11273] netlink: 'syz.4.1632': attribute type 1 has an invalid length. [ 265.156288][ T1097] team0 (unregistering): Port device team_slave_1 removed [ 265.219766][ T1097] team0 (unregistering): Port device team_slave_0 removed [ 265.352910][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 265.666720][T11261] : entered promiscuous mode [ 265.710362][T11283] bridge5: entered promiscuous mode [ 265.727614][T11283] bridge5: entered allmulticast mode [ 265.789262][T11290] netlink: 'syz.0.1636': attribute type 4 has an invalid length. [ 265.799923][T11289] netlink: 'syz.0.1636': attribute type 4 has an invalid length. [ 265.925001][T11295] netlink: 'syz.4.1638': attribute type 1 has an invalid length. [ 265.968278][T11295] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1638'. [ 265.978607][T11295] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1638'. [ 266.011533][T11192] chnl_net:caif_netlink_parms(): no params data found [ 266.100510][T11305] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1641'. [ 266.157404][T11309] IPVS: set_ctl: invalid protocol: 51 100.1.1.0:20002 [ 266.168909][T11310] netlink: 'syz.0.1642': attribute type 1 has an invalid length. [ 266.201722][T11310] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1642'. [ 266.295760][T11315] netem: change failed [ 266.400459][T11321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1646'. [ 266.447377][T11323] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1648'. [ 266.452192][T11192] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.464335][T11327] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1649'. [ 266.467935][T11326] netlink: 'syz.2.1648': attribute type 1 has an invalid length. [ 266.477311][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 266.517214][T11192] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.524654][T11192] bridge_slave_0: entered allmulticast mode [ 266.538635][T11192] bridge_slave_0: entered promiscuous mode [ 266.548680][T11192] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.562932][T11192] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.570250][T11192] bridge_slave_1: entered allmulticast mode [ 266.588416][T11192] bridge_slave_1: entered promiscuous mode [ 266.792440][T11192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.814474][T11349] netlink: 'syz.2.1654': attribute type 13 has an invalid length. [ 266.840497][T11192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.869607][ T5851] Bluetooth: hci3: command tx timeout [ 266.979360][T11192] team0: Port device team_slave_0 added [ 266.996839][T11192] team0: Port device team_slave_1 added [ 267.079156][T11192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.097952][T11192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.156991][T11192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.203179][T11192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.210174][T11192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.241713][T11192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.353897][T11192] hsr_slave_0: entered promiscuous mode [ 267.360725][T11192] hsr_slave_1: entered promiscuous mode [ 267.367829][T11192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 267.377685][T11192] Cannot create hsr debugfs directory [ 267.626141][ T62] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 267.717418][T11383] netlink: 'syz.0.1664': attribute type 10 has an invalid length. [ 267.767463][T11383] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.777453][T11383] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.789751][T11383] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.800695][T11383] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.089568][T11402] 8021q: VLANs not supported on lo [ 268.107656][T11402] 8021q: VLANs not supported on lo [ 268.249733][T11413] xt_cgroup: xt_cgroup: no path or classid specified [ 268.472142][T11429] lo: entered promiscuous mode [ 268.478465][T11429] tunl0: entered promiscuous mode [ 268.484603][T11429] gre0: entered promiscuous mode [ 268.490267][T11429] gretap0: entered promiscuous mode [ 268.496448][T11429] erspan0: entered promiscuous mode [ 268.502020][T11429] ip_vti0: entered promiscuous mode [ 268.542458][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 268.570402][T11192] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 268.591668][T11192] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 268.621097][T11425] __nla_validate_parse: 2 callbacks suppressed [ 268.621114][T11425] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1678'. [ 268.664953][T11192] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 268.695316][T11192] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 268.745816][ T62] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 268.789417][T11443] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1684'. [ 268.860750][T11443] netlink: 'syz.0.1684': attribute type 4 has an invalid length. [ 268.943442][ T5851] Bluetooth: hci3: command tx timeout [ 268.991239][T11192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.029490][T11461] xt_TCPMSS: Only works on TCP SYN packets [ 269.099343][T11192] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.159361][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.166620][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.194039][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.201303][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.209218][T11466] netlink: 'syz.0.1693': attribute type 1 has an invalid length. [ 269.372695][T11475] af_packet: tpacket_rcv: packet too big, clamped from 2920 to 4294967286. macoff=82 [ 269.409635][T11477] net_ratelimit: 24 callbacks suppressed [ 269.409653][T11477] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 269.443069][T11478] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (8) [ 269.497296][T11478] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1695'. [ 269.638874][T11485] xt_socket: unknown flags 0x2 [ 269.798649][T11192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.875427][T11497] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1702'. [ 269.886679][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 269.929722][T11497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1702'. [ 269.932215][T11192] veth0_vlan: entered promiscuous mode [ 269.969776][T11192] veth1_vlan: entered promiscuous mode [ 269.970695][T11497] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1702'. [ 270.060358][T11192] veth0_macvtap: entered promiscuous mode [ 270.089184][T11192] veth1_macvtap: entered promiscuous mode [ 270.163778][T11192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.191144][T11192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.210770][T11192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.221864][T11192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.235281][T11192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.259795][T11192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.299144][T11192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.320280][T11192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.331500][T11192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.345566][T11192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.381747][T11192] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.411276][T11192] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.421814][T11192] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.441995][T11192] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.659127][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.688898][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.720951][T11529] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1711'. [ 270.805963][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.834487][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.002638][ T1097] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 271.022483][ T5851] Bluetooth: hci3: command tx timeout [ 271.202013][T11547] bond0: entered promiscuous mode [ 271.216324][T11547] 0ªÃøÂFNð¡: entered promiscuous mode [ 271.230329][T11547] bond_slave_1: entered promiscuous mode [ 271.241234][T11547] batadv0: entered promiscuous mode [ 271.252210][T11547] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 271.281515][T11547] bond0: left promiscuous mode [ 271.290348][T11547] 0ªÃøÂFNð¡: left promiscuous mode [ 271.299633][T11547] bond_slave_1: left promiscuous mode [ 271.334457][T11547] batadv0: left promiscuous mode [ 271.752167][T11574] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1723'. [ 271.879600][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.132084][T11586] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1726'. [ 272.143684][ T1147] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 272.335841][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.545132][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.669241][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.802918][ T5141] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 272.805040][T11616] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1735'. [ 272.826843][ T5141] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 272.838566][ T5141] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 272.847270][ T5141] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 272.856996][ T5141] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 272.957759][ T36] bridge_slave_1: left allmulticast mode [ 272.969822][ T36] bridge_slave_1: left promiscuous mode [ 272.975833][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.992054][ T36] bridge_slave_0: left allmulticast mode [ 272.998948][ T36] bridge_slave_0: left promiscuous mode [ 273.010428][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.263394][ T62] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 273.544548][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.559109][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.571371][ T36] bond0 (unregistering): Released all slaves [ 273.605779][T11613] virt_wifi0 speed is unknown, defaulting to 1000 [ 273.616539][T11613] xfrm0 speed is unknown, defaulting to 1000 [ 274.159933][T11664] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.175756][T11663] __nla_validate_parse: 1 callbacks suppressed [ 274.175773][T11663] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1749'. [ 274.204152][T11663] batman_adv: batadv0: Adding interface: gretap0 [ 274.245346][T11664] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1749'. [ 274.256555][T11670] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1749'. [ 274.274416][T11663] batman_adv: batadv0: The MTU of interface gretap0 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.319143][T11663] batman_adv: batadv0: Not using interface gretap0 (retrying later): interface not active [ 274.400592][T11674] vti0: entered promiscuous mode [ 274.405748][ T1147] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 274.594977][ T36] hsr_slave_0: left promiscuous mode [ 274.612873][ T36] hsr_slave_1: left promiscuous mode [ 274.625537][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.635058][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.645017][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.649128][T11679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1753'. [ 274.666098][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.717434][ T36] veth1_macvtap: left promiscuous mode [ 274.733395][ T36] veth0_macvtap: left promiscuous mode [ 274.739169][ T36] veth1_vlan: left promiscuous mode [ 274.744983][ T36] veth0_vlan: left promiscuous mode [ 274.952395][ T5141] Bluetooth: hci3: command tx timeout [ 275.151697][T11696] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1757'. [ 275.228205][ T36] team0 (unregistering): Port device team_slave_1 removed [ 275.274061][ T36] team0 (unregistering): Port device team_slave_0 removed [ 275.532953][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 275.820780][T11613] chnl_net:caif_netlink_parms(): no params data found [ 275.981277][T11715] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 276.147775][T11729] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1764'. [ 276.363512][T11613] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.370702][T11613] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.385939][T11613] bridge_slave_0: entered allmulticast mode [ 276.403739][T11613] bridge_slave_0: entered promiscuous mode [ 276.414653][T11613] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.422468][T11613] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.429719][T11613] bridge_slave_1: entered allmulticast mode [ 276.450986][T11613] bridge_slave_1: entered promiscuous mode [ 276.461756][T11739] validate_nla: 1 callbacks suppressed [ 276.461773][T11739] netlink: 'syz.4.1768': attribute type 39 has an invalid length. [ 276.540964][T11746] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1771'. [ 276.596741][T11613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.616517][T11613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.793325][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 276.816681][T11758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1774'. [ 276.833920][T11613] team0: Port device team_slave_0 added [ 276.856204][T11762] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1774'. [ 276.901078][T11613] team0: Port device team_slave_1 added [ 277.023032][ T5141] Bluetooth: hci3: command tx timeout [ 277.049980][T11613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.066391][T11613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.123459][T11613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.157391][T11613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.167936][T11613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.234134][ T30] audit: type=1804 audit(1746756877.044:2): pid=11772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1779" name="/newroot/397/memory.events" dev="tmpfs" ino=2043 res=1 errno=0 [ 277.268479][ T30] audit: type=1800 audit(1746756877.044:3): pid=11772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1779" name="memory.events" dev="tmpfs" ino=2043 res=0 errno=0 [ 277.316822][T11613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.360762][T11786] netlink: 'syz.4.1781': attribute type 2 has an invalid length. [ 277.377045][T11786] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1781'. [ 277.556667][T11613] hsr_slave_0: entered promiscuous mode [ 277.565777][T11613] hsr_slave_1: entered promiscuous mode [ 277.574356][T11613] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 277.594933][T11796] netlink: 'syz.2.1784': attribute type 4 has an invalid length. [ 277.605307][T11613] Cannot create hsr debugfs directory [ 277.726302][T11802] netlink: 'syz.0.1787': attribute type 3 has an invalid length. [ 277.799724][T11799] syzkaller0: entered promiscuous mode [ 277.818876][T11799] syzkaller0: entered allmulticast mode [ 277.932666][ T1147] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 278.311933][T11836] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input9 [ 278.378198][T11841] netlink: 'syz.1.1798': attribute type 1 has an invalid length. [ 278.535647][T11613] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 278.584603][T11613] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 278.611342][T11852] batman_adv: batadv0: Adding interface: gretap1 [ 278.648552][T11852] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.706313][T11852] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 278.734719][T11613] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 278.751039][T11613] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 279.030539][T11613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.072657][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 279.102760][ T5141] Bluetooth: hci3: command tx timeout [ 279.118194][T11613] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.149513][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.156747][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.197774][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.205021][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.800275][T11895] __nla_validate_parse: 3 callbacks suppressed [ 279.800295][T11895] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1812'. [ 279.820904][T11613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.931088][T11613] veth0_vlan: entered promiscuous mode [ 279.943622][T11898] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1813'. [ 279.952933][T11613] veth1_vlan: entered promiscuous mode [ 280.049989][T11613] veth0_macvtap: entered promiscuous mode [ 280.060922][T11613] veth1_macvtap: entered promiscuous mode [ 280.081424][T11613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.103319][T11613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.121481][T11613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.133502][T11613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.146913][T11613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.167428][T11613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.193197][T11613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.203418][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 280.222009][T11613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.244155][T11613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.283974][T11613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.325899][T11613] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.346880][T11613] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.402909][T11613] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.411762][T11613] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.688744][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.715666][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.774119][T11934] xt_CT: No such helper "pptp" [ 280.789873][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.825458][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.899805][T11942] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 280.900266][T11943] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1824'. [ 280.922579][T11943] gre0: left promiscuous mode [ 281.304093][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 281.850385][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.038358][T11997] netlink: 'syz.0.1841': attribute type 9 has an invalid length. [ 282.067398][T11997] netlink: 'syz.0.1841': attribute type 6 has an invalid length. [ 282.218159][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.443286][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 282.527328][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.705323][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.777467][T12007] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1843'. [ 282.887444][T12011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1845'. [ 282.910987][T12011] netlink: 'syz.2.1845': attribute type 12 has an invalid length. [ 282.925927][T12011] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1845'. [ 283.032591][ T13] bridge_slave_1: left allmulticast mode [ 283.038838][ T13] bridge_slave_1: left promiscuous mode [ 283.071388][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.092471][ T13] bridge_slave_0: left allmulticast mode [ 283.101212][ T13] bridge_slave_0: left promiscuous mode [ 283.117850][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.168809][T12024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1850'. [ 283.213613][T12024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1850'. [ 283.248313][T12024] netlink: 'syz.2.1850': attribute type 15 has an invalid length. [ 283.358744][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 283.369195][ T5851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 283.377639][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 283.401193][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 283.413444][ T5851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 283.542660][ T1163] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 283.638856][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.650081][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.660869][ T13] bond0 (unregistering): Released all slaves [ 283.683678][T12028] tipc: Enabling of bearer rejected, failed to enable media [ 283.708230][T12040] netlink: 229 bytes leftover after parsing attributes in process `syz.2.1850'. [ 283.829042][T12033] virt_wifi0 speed is unknown, defaulting to 1000 [ 283.851492][T12033] xfrm0 speed is unknown, defaulting to 1000 [ 283.948205][T12053] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1855'. [ 284.216904][T12071] netlink: 'syz.2.1860': attribute type 7 has an invalid length. [ 284.244926][T12071] netlink: 'syz.2.1860': attribute type 8 has an invalid length. [ 284.324655][T12071] xt_l2tp: v2 doesn't support IP mode [ 284.338398][T12077] netlink: 'syz.0.1861': attribute type 9 has an invalid length. [ 284.369338][T12077] netlink: 'syz.0.1861': attribute type 9 has an invalid length. [ 284.393979][ T13] hsr_slave_0: left promiscuous mode [ 284.404374][ T13] hsr_slave_1: left promiscuous mode [ 284.416980][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.435521][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.450807][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.459044][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.493056][ T13] veth1_macvtap: left promiscuous mode [ 284.498655][ T13] veth0_macvtap: left promiscuous mode [ 284.505645][ T13] veth1_vlan: left promiscuous mode [ 284.511036][ T13] veth0_vlan: left promiscuous mode [ 284.552495][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 284.643487][ T1163] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 284.941912][ T13] team0 (unregistering): Port device team_slave_1 removed [ 284.985972][ T13] team0 (unregistering): Port device team_slave_0 removed [ 285.353009][T12081] tipc: Enabling of bearer rejected, failed to enable media [ 285.502910][ T5851] Bluetooth: hci3: command tx timeout [ 285.640127][T12033] chnl_net:caif_netlink_parms(): no params data found [ 285.670102][T12101] __nla_validate_parse: 2 callbacks suppressed [ 285.670121][T12101] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1868'. [ 285.762483][ T1163] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 286.046014][T12033] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.063385][T12033] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.070888][T12033] bridge_slave_0: entered allmulticast mode [ 286.116604][T12126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1873'. [ 286.122437][T12033] bridge_slave_0: entered promiscuous mode [ 286.144197][T12033] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.167499][T12033] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.186057][T12033] bridge_slave_1: entered allmulticast mode [ 286.205158][T12033] bridge_slave_1: entered promiscuous mode [ 286.228254][T12134] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1876'. [ 286.247416][T12134] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1876'. [ 286.331972][T12033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.357624][T12142] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 286.408641][T12033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.551329][T12151] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1883'. [ 286.583962][T12033] team0: Port device team_slave_0 added [ 286.604997][T12033] team0: Port device team_slave_1 added [ 286.741420][T12033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.760643][T12033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.807363][T12166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1885'. [ 286.807733][T12033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.836829][T12033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.859011][T12033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.887486][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 286.891332][T12033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.922769][T12175] netlink: 'syz.2.1888': attribute type 8 has an invalid length. [ 287.084277][T12169] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1888'. [ 287.100114][T12033] hsr_slave_0: entered promiscuous mode [ 287.122591][T12033] hsr_slave_1: entered promiscuous mode [ 287.141602][T12033] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 287.171491][T12033] Cannot create hsr debugfs directory [ 287.258254][T12193] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1893'. [ 287.462233][T12197] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 287.584460][ T5851] Bluetooth: hci3: command tx timeout [ 287.771490][T12211] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1898'. [ 287.851941][T12215] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1902'. [ 288.023279][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 288.125975][T12033] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 288.185854][T12033] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 288.229853][T12033] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 288.253592][T12033] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 288.278934][T12234] batadv_slave_0: entered promiscuous mode [ 288.290049][T12234] batadv_slave_0: left allmulticast mode [ 288.378145][T12242] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 288.481159][T12251] netlink: 'syz.4.1915': attribute type 21 has an invalid length. [ 288.536473][T12251] netlink: 'syz.4.1915': attribute type 6 has an invalid length. [ 288.633669][T12257] netlink: 'syz.1.1919': attribute type 1 has an invalid length. [ 288.655693][T12033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.706236][T12033] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.768645][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.775868][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.810255][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.817484][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.936528][T12270] openvswitch: netlink: nsh attr 8192 is out of range max 3 [ 288.973193][T12270] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 289.155616][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 289.206325][T12033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.250757][T12033] veth0_vlan: entered promiscuous mode [ 289.263970][T12033] veth1_vlan: entered promiscuous mode [ 289.296553][T12033] veth0_macvtap: entered promiscuous mode [ 289.306506][T12033] veth1_macvtap: entered promiscuous mode [ 289.324555][T12033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.336519][T12033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.347335][T12033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.359257][T12033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.371478][T12033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 289.387182][T12033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.398233][T12033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.408392][T12033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.420999][T12033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.433326][T12033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.446497][T12033] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.456101][T12033] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.465448][T12033] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.474741][T12033] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.545748][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.559904][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.585938][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.595170][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.890040][T12304] xt_CT: You must specify a L4 protocol and not use inversions on it [ 289.913913][T12306] netlink: 'syz.0.1934': attribute type 10 has an invalid length. [ 290.027934][T12310] syz.2.1935: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 290.051504][T12310] CPU: 0 UID: 0 PID: 12310 Comm: syz.2.1935 Not tainted 6.15.0-rc4-syzkaller-00213-g3c44b2d615e6 #0 PREEMPT(full) [ 290.051538][T12310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 290.051556][T12310] Call Trace: [ 290.051564][T12310] [ 290.051573][T12310] dump_stack_lvl+0x189/0x250 [ 290.051612][T12310] ? __pfx_dump_stack_lvl+0x10/0x10 [ 290.051641][T12310] ? __pfx__printk+0x10/0x10 [ 290.051663][T12310] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 290.051696][T12310] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 290.051731][T12310] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 290.051767][T12310] warn_alloc+0x214/0x310 [ 290.051796][T12310] ? __pfx___schedule+0x10/0x10 [ 290.051820][T12310] ? __pfx_warn_alloc+0x10/0x10 [ 290.051848][T12310] ? kasan_save_track+0x4f/0x80 [ 290.051870][T12310] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 290.051893][T12310] ? xskq_create+0x56/0x170 [ 290.051915][T12310] ? __x64_sys_setsockopt+0x18b/0x220 [ 290.051937][T12310] ? do_syscall_64+0xf6/0x210 [ 290.051959][T12310] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.051992][T12310] __vmalloc_node_range_noprof+0x125/0x12c0 [ 290.052055][T12310] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 290.052084][T12310] ? __kasan_kmalloc+0x93/0xb0 [ 290.052114][T12310] vmalloc_user_noprof+0x74/0x80 [ 290.052142][T12310] ? xskq_create+0xbf/0x170 [ 290.052161][T12310] xskq_create+0xbf/0x170 [ 290.052186][T12310] xsk_init_queue+0xb0/0x110 [ 290.052220][T12310] xsk_setsockopt+0x43f/0x710 [ 290.052248][T12310] ? __pfx_xsk_setsockopt+0x10/0x10 [ 290.052280][T12310] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 290.052302][T12310] ? __pfx_xsk_setsockopt+0x10/0x10 [ 290.052323][T12310] do_sock_setsockopt+0x257/0x3e0 [ 290.052351][T12310] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 290.052372][T12310] ? __fget_files+0x2a/0x420 [ 290.052402][T12310] ? __fget_files+0x3a0/0x420 [ 290.052426][T12310] ? __fget_files+0x2a/0x420 [ 290.052460][T12310] __x64_sys_setsockopt+0x18b/0x220 [ 290.052492][T12310] do_syscall_64+0xf6/0x210 [ 290.052528][T12310] ? clear_bhb_loop+0x45/0xa0 [ 290.052551][T12310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.052570][T12310] RIP: 0033:0x7f925558e969 [ 290.052587][T12310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.052604][T12310] RSP: 002b:00007f925634b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 290.052625][T12310] RAX: ffffffffffffffda RBX: 00007f92557b5fa0 RCX: 00007f925558e969 [ 290.052639][T12310] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 290.052650][T12310] RBP: 00007f9255610ab1 R08: 0000000000000004 R09: 0000000000000000 [ 290.052661][T12310] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 290.052673][T12310] R13: 0000000000000000 R14: 00007f92557b5fa0 R15: 00007ffd738aab08 [ 290.052705][T12310] [ 290.379516][T12310] Mem-Info: [ 290.387738][T12310] active_anon:4337 inactive_anon:0 isolated_anon:0 [ 290.387738][T12310] active_file:1194 inactive_file:39893 isolated_file:0 [ 290.387738][T12310] unevictable:768 dirty:58 writeback:0 [ 290.387738][T12310] slab_reclaimable:11565 slab_unreclaimable:106804 [ 290.387738][T12310] mapped:28965 shmem:1361 pagetables:789 [ 290.387738][T12310] sec_pagetables:0 bounce:0 [ 290.387738][T12310] kernel_misc_reclaimable:0 [ 290.387738][T12310] free:1334109 free_pcp:318 free_cma:0 [ 290.402943][T12314] netlink: 'syz.0.1938': attribute type 12 has an invalid length. [ 290.448828][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 290.487447][T12310] Node 0 active_anon:17248kB inactive_anon:0kB active_file:4776kB inactive_file:159372kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115660kB dirty:232kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11364kB pagetables:3056kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 290.521640][T12310] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 290.565458][T12310] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 290.653178][T12310] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 290.659147][T12310] Node 0 DMA32 free:1411524kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:17140kB inactive_anon:0kB active_file:4776kB inactive_file:159280kB unevictable:1536kB writepending:228kB present:3129332kB managed:2564160kB mlocked:0kB bounce:0kB free_pcp:1488kB local_pcp:668kB free_cma:0kB [ 290.713426][T12310] lowmem_reserve[]: 0 0 0 0 0 [ 290.718230][T12310] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:4kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 290.746311][T12310] lowmem_reserve[]: 0 0 0 0 0 [ 290.751090][T12310] Node 1 Normal free:3910056kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 290.807430][T12310] lowmem_reserve[]: 0 0 0 0 0 [ 290.825334][T12310] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 290.840658][T12310] Node 0 DMA32: 165*4kB (UM) 177*8kB (UME) 119*16kB (UME) 86*32kB (ME) 56*64kB (UME) 32*128kB (UME) 21*256kB (UME) 20*512kB (UM) 12*1024kB (UM) 6*2048kB (UM) 331*4096kB (UM) = 1410380kB [ 290.867897][T12310] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 290.890027][T12335] IPVS: length: 53 != 24 [ 290.932476][T12310] Node 1 Normal: 226*4kB (UE) 60*8kB (UME) 42*16kB (UME) 213*32kB (UME) 96*64kB (UME) 34*128kB (UME) 14*256kB (UME) 10*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 946*4096kB (M) = 3910056kB [ 291.020465][T12310] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 291.046830][ T1147] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.067508][T12310] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 291.095882][T12310] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 291.149081][T12310] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 291.169328][T12310] 42444 total pagecache pages [ 291.176946][T12310] 0 pages in swap cache [ 291.184307][T12310] Free swap = 124996kB [ 291.189222][T12310] Total swap = 124996kB [ 291.194660][T12310] 2097051 pages RAM [ 291.198556][T12310] 0 pages HighMem/MovableOnly [ 291.205181][T12310] 424353 pages reserved [ 291.209440][T12310] 0 pages cma reserved [ 291.633054][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 291.919481][T12354] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 292.240632][T12373] xt_CT: You must specify a L4 protocol and not use inversions on it [ 292.423894][T12379] dvmrp0: entered allmulticast mode [ 292.477158][ T5141] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 292.495395][ T5141] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 292.507226][ T5141] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 292.515238][T12371] tipc: Enabled bearer , priority 10 [ 292.530730][ T5141] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 292.539681][ T5141] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 292.649238][ T1147] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.699570][T12391] __nla_validate_parse: 12 callbacks suppressed [ 292.699589][T12391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1957'. [ 292.745774][ T3487] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 292.764588][T12391] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1957'. [ 292.902185][ T1147] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.957396][T12404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 292.968335][T12385] virt_wifi0 speed is unknown, defaulting to 1000 [ 292.979955][T12407] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1961'. [ 292.990515][T12407] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 293.000606][T12407] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 293.041167][ T1147] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.077765][T12385] xfrm0 speed is unknown, defaulting to 1000 [ 293.091880][T12404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.119617][T12412] netlink: 'syz.0.1963': attribute type 18 has an invalid length. [ 293.174823][T12412] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.183831][T12412] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.193551][T12412] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.203101][T12412] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.216358][T12417] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1964'. [ 293.230678][T12404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.427050][ T1147] bridge_slave_1: left allmulticast mode [ 293.440868][ T1147] bridge_slave_1: left promiscuous mode [ 293.450070][ T1147] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.465141][ T1147] bridge_slave_0: left allmulticast mode [ 293.470870][ T1147] bridge_slave_0: left promiscuous mode [ 293.476943][ T1147] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.710722][T12433] openvswitch: netlink: Flow actions attr not present in new flow. [ 293.863828][ T3487] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 294.008479][ T1147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 294.021509][ T1147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 294.032890][ T1147] bond0 (unregistering): Released all slaves [ 294.051836][T12423] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1966'. [ 294.064379][T12440] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 294.203221][T12451] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1973'. [ 294.280595][T12451] bond2: entered promiscuous mode [ 294.287191][T12451] 8021q: adding VLAN 0 to HW filter on device bond2 [ 294.311477][T12461] netlink: 'syz.4.1975': attribute type 10 has an invalid length. [ 294.478122][T12471] netlink: 'syz.0.1977': attribute type 39 has an invalid length. [ 294.486227][T12461] lo: left promiscuous mode [ 294.579551][T12460] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1973'. [ 294.596638][T12460] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1973'. [ 294.623513][ T5851] Bluetooth: hci3: command tx timeout [ 294.648282][T12471] veth0_macvtap: left promiscuous mode [ 294.678085][ T24] hid-generic 0005:10CF:0010.0002: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 294.865342][ T1147] hsr_slave_0: left promiscuous mode [ 294.875661][ T1147] hsr_slave_1: left promiscuous mode [ 294.885576][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.906902][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.931304][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.952731][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.991225][T12499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1985'. [ 294.992776][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 295.003431][T12500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1984'. [ 295.034382][ T1147] veth1_macvtap: left promiscuous mode [ 295.040013][ T1147] veth0_macvtap: left promiscuous mode [ 295.047263][ T1147] veth1_vlan: left promiscuous mode [ 295.053053][ T1147] veth0_vlan: left promiscuous mode [ 295.476953][ T1147] team0 (unregistering): Port device team_slave_1 removed [ 295.516559][ T1147] team0 (unregistering): Port device team_slave_0 removed [ 295.891307][T12385] chnl_net:caif_netlink_parms(): no params data found [ 296.152734][ T62] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 296.333350][T12385] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.342458][T12385] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.349736][T12385] bridge_slave_0: entered allmulticast mode [ 296.358442][T12532] netlink: 'syz.4.1993': attribute type 5 has an invalid length. [ 296.365974][T12385] bridge_slave_0: entered promiscuous mode [ 296.381355][T12385] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.391312][T12385] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.413363][T12385] bridge_slave_1: entered allmulticast mode [ 296.421748][T12385] bridge_slave_1: entered promiscuous mode [ 296.459914][T12532] netdevsim netdevsim4 : set [1, 0] type 2 family 0 port 256 - 0 [ 296.481593][T12532] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 296.522921][T12532] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 296.531591][T12532] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 296.580308][T12532] geneve3: entered promiscuous mode [ 296.594470][T12532] geneve3: entered allmulticast mode [ 296.702556][ T5851] Bluetooth: hci3: command tx timeout [ 296.728955][T12385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.750531][T12544] (unnamed net_device) (uninitialized): option use_carrier: invalid value (7) [ 296.787345][T12544] (unnamed net_device) (uninitialized): option use_carrier: invalid value (7) [ 296.823661][T12385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.848118][T12544] (unnamed net_device) (uninitialized): option use_carrier: invalid value (7) [ 296.863637][T12544] (unnamed net_device) (uninitialized): option use_carrier: invalid value (7) [ 296.973666][T12544] (unnamed net_device) (uninitialized): option use_carrier: invalid value (7) [ 296.990464][T12551] tipc: Enabling of bearer rejected, failed to enable media [ 297.014023][T12561] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 297.056764][T12385] team0: Port device team_slave_0 added [ 297.065695][T12544] (unnamed net_device) (uninitialized): option use_carrier: invalid value (7) [ 297.076390][T12544] (unnamed net_device) (uninitialized): option use_carrier: invalid value (7) [ 297.099782][T12385] team0: Port device team_slave_1 added [ 297.118675][T12544] (unnamed net_device) (uninitialized): option use_carrier: invalid value (7) [ 297.133266][T12544] (unnamed net_device) (uninitialized): option use_carrier: invalid value (7) [ 297.149662][T12548] lo speed is unknown, defaulting to 1000 [ 297.157084][T12544] (unnamed net_device) (uninitialized): option use_carrier: invalid value (7) [ 297.224804][T12548] lo speed is unknown, defaulting to 1000 [ 297.226437][T12385] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.242170][T12385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.270383][ T62] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 297.283462][T12385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.296005][T12544] (unnamed net_device) (uninitialized): option use_carrier: invalid value (7) [ 297.312448][T12548] lo speed is unknown, defaulting to 1000 [ 297.313766][T12385] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.340772][T12548] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 297.371540][T12385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.401925][T12385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.434728][T12544] (unnamed net_device) (uninitialized): option use_carrier: invalid value (7) [ 297.449181][T12548] lo speed is unknown, defaulting to 1000 [ 297.458055][T12548] lo speed is unknown, defaulting to 1000 [ 297.478645][T12544] (unnamed net_device) (uninitialized): option use_carrier: invalid value (7) [ 297.493079][T12548] lo speed is unknown, defaulting to 1000 [ 297.526249][T12544] (unnamed net_device) (uninitialized): option use_carrier: invalid value (7) [ 297.550127][T12548] lo speed is unknown, defaulting to 1000 [ 297.594863][T12548] lo speed is unknown, defaulting to 1000 [ 297.619478][T12385] hsr_slave_0: entered promiscuous mode [ 297.635540][T12385] hsr_slave_1: entered promiscuous mode [ 297.650539][T12385] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 297.661397][T12385] Cannot create hsr debugfs directory [ 297.668232][T12548] lo speed is unknown, defaulting to 1000 [ 297.882397][T12584] veth0: entered promiscuous mode [ 297.929621][T12584] __nla_validate_parse: 9 callbacks suppressed [ 297.929641][T12584] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2008'. [ 297.954059][T12584] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2008'. [ 298.018959][T12583] veth0: left promiscuous mode [ 298.245534][T12611] sctp: [Deprecated]: syz.0.2015 (pid 12611) Use of int in maxseg socket option. [ 298.245534][T12611] Use struct sctp_assoc_value instead [ 298.274736][T12607] netlink: 'syz.1.2017': attribute type 2 has an invalid length. [ 298.377631][T12601] netlink: 4388 bytes leftover after parsing attributes in process `syz.2.2013'. [ 298.404476][ T62] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 298.418040][T12617] netlink: 'syz.0.2018': attribute type 4 has an invalid length. [ 298.774369][T12385] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 298.782408][ T5851] Bluetooth: hci3: command tx timeout [ 298.806963][T12385] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 298.826194][T12630] netlink: 'syz.0.2024': attribute type 1 has an invalid length. [ 298.864375][T12385] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 298.893345][T12634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2025'. [ 298.953731][T12385] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 299.338971][T12385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.398319][T12650] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 299.408769][T12385] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.465826][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.473104][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.493637][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.500820][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.521549][T12652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2029'. [ 299.539865][ T62] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 299.555838][T12654] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 299.573115][T12652] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2029'. [ 299.582181][T12652] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2029'. [ 299.636025][T12385] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 299.733464][T12663] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2032'. [ 299.762396][T12663] gre0: entered allmulticast mode [ 299.788346][T12665] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2032'. [ 300.048396][T12385] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.093945][T12686] netlink: 'syz.2.2037': attribute type 7 has an invalid length. [ 300.218880][T12385] veth0_vlan: entered promiscuous mode [ 300.281772][T12385] veth1_vlan: entered promiscuous mode [ 300.406014][T12385] veth0_macvtap: entered promiscuous mode [ 300.426801][T12385] veth1_macvtap: entered promiscuous mode [ 300.483977][T12385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.510923][T12385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.533274][T12385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.544469][T12385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.582682][T12385] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.597512][T12385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.611136][T12385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.621095][T12385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.632356][T12385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.648502][T12385] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.670266][T12385] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.689864][T12385] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.705961][T12385] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.709290][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 300.731640][T12385] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.856319][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.864690][ T5851] Bluetooth: hci3: command tx timeout [ 300.878154][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.923416][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.931955][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.470167][T12756] netlink: 'syz.0.2057': attribute type 21 has an invalid length. [ 301.689925][T12763] openvswitch: netlink: Missing key (keys=40, expected=80) [ 301.834269][ T3487] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 302.293057][ T53] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.848403][ T53] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.993557][ T3487] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 303.229335][ T53] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.254868][T12810] tc_dump_action: action bad kind [ 303.404779][ T53] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.433816][T12825] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2079'. [ 303.468429][T12825] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2079'. [ 303.765593][T12846] netlink: 576 bytes leftover after parsing attributes in process `syz.1.2081'. [ 303.796544][T12849] netlink: 576 bytes leftover after parsing attributes in process `syz.1.2081'. [ 303.806052][ T53] bridge_slave_1: left allmulticast mode [ 303.827037][ T53] bridge_slave_1: left promiscuous mode [ 303.847529][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.894373][ T53] bridge_slave_0: left allmulticast mode [ 303.897854][T12843] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2083'. [ 303.903089][ T53] bridge_slave_0: left promiscuous mode [ 303.914056][ T5141] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 303.923691][ T5141] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 303.924694][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.931448][ T5141] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 303.946596][ T5141] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 303.958590][ T5141] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 304.139260][T12865] xt_l2tp: v2 sid > 0xffff: 262144 [ 304.155084][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 304.406229][T12880] openvswitch: netlink: IP tunnel TTL not specified. [ 304.526151][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.545351][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.558104][ T53] bond0 (unregistering): Released all slaves [ 304.585000][T12865] batman_adv: batadv0: Removing interface: gretap0 [ 304.594883][T12865] ÿ: left promiscuous mode [ 304.599921][T12865] bridge0: port 1(ÿ) entered disabled state [ 304.639158][T12865] bridge_slave_1: left promiscuous mode [ 304.668157][T12865] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.701096][T12865] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.721317][T12865] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.739298][T12865] bond2: (slave ip6gretap1): Releasing active interface [ 304.783712][T12877] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2088'. [ 304.795847][T12877] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2088'. [ 304.919042][T12853] virt_wifi0 speed is unknown, defaulting to 1000 [ 304.927389][T12853] xfrm0 speed is unknown, defaulting to 1000 [ 304.936625][T12853] lo speed is unknown, defaulting to 1000 [ 305.072065][T12913] sctp: [Deprecated]: syz.2.2097 (pid 12913) Use of struct sctp_assoc_value in delayed_ack socket option. [ 305.072065][T12913] Use struct sctp_sack_info instead [ 305.095826][T12910] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2096'. [ 305.287047][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 305.320518][T12926] xt_CT: You must specify a L4 protocol and not use inversions on it [ 305.320963][T12927] xt_CT: You must specify a L4 protocol and not use inversions on it [ 305.333652][ T53] hsr_slave_0: left promiscuous mode [ 305.358677][ T53] hsr_slave_1: left promiscuous mode [ 305.373841][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.381715][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.382735][T12933] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2101'. [ 305.400020][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.413801][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.449641][ T53] veth1_macvtap: left promiscuous mode [ 305.456025][ T53] veth0_macvtap: left promiscuous mode [ 305.461842][ T53] veth1_vlan: left promiscuous mode [ 305.468839][ T53] veth0_vlan: left promiscuous mode [ 305.548524][T12939] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2105'. [ 305.919065][ T53] team0 (unregistering): Port device team_slave_1 removed [ 305.956818][ T53] team0 (unregistering): Port device team_slave_0 removed [ 305.982421][ T5141] Bluetooth: hci3: command tx timeout [ 306.434122][ T62] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 306.496772][T12853] chnl_net:caif_netlink_parms(): no params data found [ 306.717226][T12958] IPVS: length: 157 != 232540193976 [ 306.736467][T12853] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.744542][T12853] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.751801][T12853] bridge_slave_0: entered allmulticast mode [ 306.760594][T12853] bridge_slave_0: entered promiscuous mode [ 306.770163][T12853] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.777676][T12853] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.786183][T12853] bridge_slave_1: entered allmulticast mode [ 306.815027][T12853] bridge_slave_1: entered promiscuous mode [ 306.926742][T12971] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 306.933652][T12971] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 306.987511][T12853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.030981][T12853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.159148][T12853] team0: Port device team_slave_0 added [ 307.171203][T12853] team0: Port device team_slave_1 added [ 307.266432][T12853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.279180][T12853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.305850][T12853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.325287][T12853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.340189][T12853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.387161][T12853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.431959][T12953] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 307.543874][ T1147] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 307.572994][T12989] virt_wifi0 speed is unknown, defaulting to 1000 [ 307.627268][T12989] xfrm0 speed is unknown, defaulting to 1000 [ 307.669224][T12853] hsr_slave_0: entered promiscuous mode [ 307.696950][T12853] hsr_slave_1: entered promiscuous mode [ 307.728546][T12853] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 307.759651][T12853] Cannot create hsr debugfs directory [ 307.859266][T12989] lo speed is unknown, defaulting to 1000 [ 308.069951][ T5141] Bluetooth: hci3: command tx timeout [ 308.460656][T13039] __nla_validate_parse: 13 callbacks suppressed [ 308.460676][T13039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2132'. [ 308.643086][ T62] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 308.798754][T13051] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2137'. [ 308.850423][T12853] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 308.879505][T12853] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 308.901652][T12853] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 308.921097][T12853] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 309.078743][T12853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.107388][T12853] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.121826][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.129211][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.155307][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.162559][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.361221][T13073] ip6gre1: entered allmulticast mode [ 309.511526][T13079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2145'. [ 309.570457][T13079] netlink: 'syz.4.2145': attribute type 8 has an invalid length. [ 309.572426][T13081] netlink: 'syz.1.2146': attribute type 1 has an invalid length. [ 309.611039][T13081] 8021q: adding VLAN 0 to HW filter on device bond4 [ 309.631998][T13081] netlink: 'syz.1.2146': attribute type 3 has an invalid length. [ 309.640385][T13081] netlink: 766 bytes leftover after parsing attributes in process `syz.1.2146'. [ 309.661616][T12853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.781544][T13085] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2147'. [ 309.786094][T12853] veth0_vlan: entered promiscuous mode [ 309.796324][ T3487] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 309.903383][T12853] veth1_vlan: entered promiscuous mode [ 309.926437][T13089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2148'. [ 309.949758][T13085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2147'. [ 309.972408][T13085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2147'. [ 310.023488][T13091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2149'. [ 310.038329][T12853] veth0_macvtap: entered promiscuous mode [ 310.066810][T12853] veth1_macvtap: entered promiscuous mode [ 310.133483][T12853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.142974][ T5851] Bluetooth: hci3: command tx timeout [ 310.164698][T12853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.178333][T12853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.191224][T12853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.208193][T12853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.226734][T12853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.230182][T13097] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2151'. [ 310.238147][T12853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.257538][T12853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.286200][T12853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.311000][T12853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 310.419928][T13105] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 310.488618][T12853] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.515309][T12853] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.525373][T12853] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.534383][T12853] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.576686][T13111] ÿ: renamed from dummy0 [ 310.888153][T13131] gre0: left allmulticast mode [ 310.965806][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 311.054576][T13140] sctp: [Deprecated]: syz.4.2160 (pid 13140) Use of int in maxseg socket option. [ 311.054576][T13140] Use struct sctp_assoc_value instead [ 311.331841][T13131] bridge0: port 3(team0) entered disabled state [ 311.338618][T13131] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.346347][T13131] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.665672][T13131] 0ªÃøÂFNð¡: left allmulticast mode [ 311.801253][T13131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.851305][T13131] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.016867][T13131] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 312.123745][ T1147] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 312.224777][ T5851] Bluetooth: hci3: command 0x0419 tx timeout [ 312.323869][T13131] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 312.331080][T13131] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 312.349173][T13131] ip6erspan0: left promiscuous mode [ 312.369954][T13131] bond2: left allmulticast mode [ 312.380101][T13131] bond3: left promiscuous mode [ 312.391269][T13131] bond3: left allmulticast mode [ 312.427543][T13131] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.437262][T13131] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.446832][T13131] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.456380][T13131] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.593965][ T5948] xfrm0 speed is unknown, defaulting to 1000 [ 312.600234][ T5948] syz1: Port: 1 Link DOWN [ 312.616324][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.663186][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.803302][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.833362][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.844646][T13161] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 312.900866][T13165] netlink: 'syz.2.2166': attribute type 1 has an invalid length. [ 313.264535][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 313.389749][T13197] netlink: 'syz.2.2177': attribute type 12 has an invalid length. [ 313.403009][T13197] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 313.933379][ T62] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.940325][T13231] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 314.041518][ T62] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.198874][ T62] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.278242][ T62] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.361952][ T62] bridge_slave_1: left allmulticast mode [ 314.367838][ T62] bridge_slave_1: left promiscuous mode [ 314.373873][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.384671][ T62] bridge_slave_0: left allmulticast mode [ 314.390465][ T62] bridge_slave_0: left promiscuous mode [ 314.396534][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.404320][ T1163] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 314.772830][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.829332][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 314.849621][ T62] bond0 (unregistering): Released all slaves [ 314.892093][T13238] __nla_validate_parse: 4 callbacks suppressed [ 314.892110][T13238] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2189'. [ 314.893809][T13240] tipc: Enabled bearer , priority 10 [ 315.151300][T13254] netlink: 'syz.0.2192': attribute type 4 has an invalid length. [ 315.259651][T13252] 8021q: adding VLAN 0 to HW filter on device bond5 [ 315.276848][T13252] bond0: (slave bond5): Enslaving as an active interface with a down link [ 315.306689][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 315.315733][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 315.324072][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 315.339101][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 315.347244][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 315.457639][T13267] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2197'. [ 315.543147][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 315.596864][T13262] virt_wifi0 speed is unknown, defaulting to 1000 [ 315.637440][T13262] xfrm0 speed is unknown, defaulting to 1000 [ 315.686125][T13262] lo speed is unknown, defaulting to 1000 [ 315.786717][ T62] hsr_slave_0: left promiscuous mode [ 315.807039][ T62] hsr_slave_1: left promiscuous mode [ 315.822525][ T5141] Bluetooth: hci4: command 0x0405 tx timeout [ 315.829528][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.843611][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.853209][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.854624][T13299] netlink: 252 bytes leftover after parsing attributes in process `syz.1.2200'. [ 315.861782][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.912668][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 315.927157][ T62] veth1_macvtap: left promiscuous mode [ 315.941631][ T62] veth0_macvtap: left promiscuous mode [ 315.953374][ T62] veth1_vlan: left promiscuous mode [ 315.958934][ T62] veth0_vlan: left promiscuous mode [ 316.400431][ T62] team0 (unregistering): Port device team_slave_1 removed [ 316.440204][ T62] team0 (unregistering): Port device team_slave_0 removed [ 316.702882][ T1147] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 316.907442][T13300] tipc: Bearer : already 2 bearers with priority 10 [ 316.933887][T13300] tipc: Bearer : trying with adjusted priority [ 316.945581][T13300] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 317.156210][T13320] macsec0: left promiscuous mode [ 317.326649][T13262] chnl_net:caif_netlink_parms(): no params data found [ 317.422460][ T5851] Bluetooth: hci3: command tx timeout [ 317.653409][T13262] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.660858][T13262] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.662966][T13338] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2214'. [ 317.668888][T13262] bridge_slave_0: entered allmulticast mode [ 317.691129][T13349] netlink: 'syz.0.2215': attribute type 2 has an invalid length. [ 317.697825][T13262] bridge_slave_0: entered promiscuous mode [ 317.716838][T13262] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.731934][T13262] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.746087][T13262] bridge_slave_1: entered allmulticast mode [ 317.767947][T13262] bridge_slave_1: entered promiscuous mode [ 317.832984][ T1147] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 317.852879][T13262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.868162][T13262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.030077][T13262] team0: Port device team_slave_0 added [ 318.055237][T13262] team0: Port device team_slave_1 added [ 318.098440][T13361] batadv0: entered allmulticast mode [ 318.170615][T13262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.187847][T13262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.242335][T13262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.265510][T13262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.281586][T13262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.310364][T13262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.324007][T13372] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2221'. [ 318.334821][T13368] batadv_slave_1: default FDB implementation only supports local addresses [ 318.393550][T13368] No such timeout policy "syz0" [ 318.495173][T13262] hsr_slave_0: entered promiscuous mode [ 318.506891][T13262] hsr_slave_1: entered promiscuous mode [ 318.525773][T13262] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 318.545644][T13262] Cannot create hsr debugfs directory [ 318.811366][T13390] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2227'. [ 318.836710][T13393] netlink: 'syz.0.2228': attribute type 1 has an invalid length. [ 318.891854][T13393] 8021q: adding VLAN 0 to HW filter on device bond7 [ 318.900306][T13393] netlink: 'syz.0.2228': attribute type 1 has an invalid length. [ 318.960221][T13393] 8021q: adding VLAN 0 to HW filter on device bond8 [ 318.970044][T13393] netlink: 'syz.0.2228': attribute type 1 has an invalid length. [ 318.978430][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 319.045033][T13393] 8021q: adding VLAN 0 to HW filter on device bond9 [ 319.061279][T13393] netlink: 'syz.0.2228': attribute type 1 has an invalid length. [ 319.128874][T13393] 8021q: adding VLAN 0 to HW filter on device bond10 [ 319.148786][T13393] netlink: 'syz.0.2228': attribute type 1 has an invalid length. [ 319.233317][T13393] 8021q: adding VLAN 0 to HW filter on device bond11 [ 319.241797][T13393] netlink: 'syz.0.2228': attribute type 1 has an invalid length. [ 319.314656][T13393] 8021q: adding VLAN 0 to HW filter on device bond12 [ 319.329020][T13393] netlink: 'syz.0.2228': attribute type 1 has an invalid length. [ 319.450958][T13393] 8021q: adding VLAN 0 to HW filter on device bond13 [ 319.460064][T13393] netlink: 'syz.0.2228': attribute type 1 has an invalid length. [ 319.502774][ T5851] Bluetooth: hci3: command tx timeout [ 319.549890][T13433] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2237'. [ 319.571971][T13393] 8021q: adding VLAN 0 to HW filter on device bond14 [ 319.617724][T13393] 8021q: adding VLAN 0 to HW filter on device bond15 [ 319.695137][T13393] 8021q: adding VLAN 0 to HW filter on device bond16 [ 319.699058][T13440] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2238'. [ 319.713068][T13262] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 319.737115][T13262] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 319.780603][T13262] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 319.826568][T13262] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 320.093038][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 320.103743][T13464] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2244'. [ 320.323857][T13478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2246'. [ 320.355203][T13262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.421559][T13262] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.467464][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.474745][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.551593][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.558822][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.700575][T13492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.877256][T13509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2254'. [ 320.928366][T13511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2254'. [ 320.993992][T13511] macvlan0: left allmulticast mode [ 320.999743][T13511] validate_nla: 2 callbacks suppressed [ 320.999761][T13511] netlink: 'syz.2.2254': attribute type 1 has an invalid length. [ 321.029372][T13511] netlink: 'syz.2.2254': attribute type 2 has an invalid length. [ 321.226906][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 321.307547][T13530] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2257'. [ 321.582824][ T5851] Bluetooth: hci3: command tx timeout [ 321.762880][T13262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.827703][T13563] netlink: 'syz.0.2264': attribute type 1 has an invalid length. [ 321.860871][T13563] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2264'. [ 321.928508][T13568] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 321.988503][T13262] veth0_vlan: entered promiscuous mode [ 322.039349][T13262] veth1_vlan: entered promiscuous mode [ 322.080458][T13575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2267'. [ 322.166336][T13262] veth0_macvtap: entered promiscuous mode [ 322.180074][T13262] veth1_macvtap: entered promiscuous mode [ 322.202488][T13262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.215389][T13262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.228092][T13262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.280909][T13262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.298711][T13262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.309320][ C1] ================================================================== [ 322.309340][ C1] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x471/0x4b0 [ 322.309378][ C1] Read of size 2 at addr ffff88802908502a by task syz-executor/13262 [ 322.309397][ C1] [ 322.309416][ C1] CPU: 1 UID: 0 PID: 13262 Comm: syz-executor Not tainted 6.15.0-rc4-syzkaller-00213-g3c44b2d615e6 #0 PREEMPT(full) [ 322.309444][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 322.309461][ C1] Call Trace: [ 322.309472][ C1] [ 322.309480][ C1] dump_stack_lvl+0x189/0x250 [ 322.309511][ C1] ? __virt_addr_valid+0x18c/0x540 [ 322.309537][ C1] ? rcu_is_watching+0x15/0xb0 [ 322.309567][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 322.309595][ C1] ? rcu_is_watching+0x15/0xb0 [ 322.309624][ C1] ? lock_release+0x4b/0x3e0 [ 322.309654][ C1] ? __virt_addr_valid+0x18c/0x540 [ 322.309679][ C1] ? __virt_addr_valid+0x469/0x540 [ 322.309705][ C1] print_report+0xb4/0x290 [ 322.309730][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 322.309757][ C1] kasan_report+0x118/0x150 [ 322.309783][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 322.309815][ C1] rose_timer_expiry+0x471/0x4b0 [ 322.309845][ C1] call_timer_fn+0x17b/0x5f0 [ 322.309871][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 322.309898][ C1] ? call_timer_fn+0xbe/0x5f0 [ 322.309924][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 322.309955][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 322.309974][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 322.309995][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 322.310023][ C1] __run_timer_base+0x61a/0x860 [ 322.310046][ C1] ? ktime_get+0x3e/0x1f0 [ 322.310072][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 322.310095][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 322.310126][ C1] run_timer_softirq+0xb7/0x180 [ 322.310151][ C1] handle_softirqs+0x283/0x870 [ 322.310184][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 322.310205][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 322.310245][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 322.310272][ C1] __irq_exit_rcu+0xca/0x1f0 [ 322.310289][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 322.310312][ C1] irq_exit_rcu+0x9/0x30 [ 322.310328][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 322.310348][ C1] [ 322.310355][ C1] [ 322.310363][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 322.310385][ C1] RIP: 0010:console_flush_all+0x7f7/0xc40 [ 322.310408][ C1] Code: 48 21 c3 0f 85 e9 01 00 00 e8 85 b5 1e 00 48 8b 5c 24 20 4d 85 f6 75 07 e8 76 b5 1e 00 eb 06 e8 6f b5 1e 00 fb 48 8b 44 24 28 <42> 80 3c 20 00 74 08 48 89 df e8 5a aa 80 00 48 8b 1b 48 8b 44 24 [ 322.310426][ C1] RSP: 0018:ffffc900040d68c0 EFLAGS: 00000293 [ 322.310446][ C1] RAX: 1ffffffff1cf3eeb RBX: ffffffff8e79f758 RCX: ffff888053b70000 [ 322.310461][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 322.310474][ C1] RBP: ffffc900040d6a10 R08: ffffffff8f7eca77 R09: 1ffffffff1efd94e [ 322.310489][ C1] R10: dffffc0000000000 R11: fffffbfff1efd94f R12: dffffc0000000000 [ 322.310504][ C1] R13: 0000000000000001 R14: 0000000000000200 R15: ffffffff8e79f700 [ 322.310531][ C1] ? console_flush_all+0x13a/0xc40 [ 322.310556][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 322.310583][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 322.310611][ C1] console_unlock+0xc4/0x270 [ 322.310631][ C1] ? __pfx_console_unlock+0x10/0x10 [ 322.310651][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 322.310678][ C1] vprintk_emit+0x5b7/0x7a0 [ 322.310697][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 322.310716][ C1] ? __mutex_trylock_common+0x153/0x260 [ 322.310739][ C1] ? __lock_acquire+0xaac/0xd20 [ 322.310770][ C1] _printk+0xcf/0x120 [ 322.310792][ C1] ? __pfx__printk+0x10/0x10 [ 322.310812][ C1] ? batadv_hardif_get_by_netdev+0x36d/0x3b0 [ 322.310835][ C1] ? batadv_hardif_get_by_netdev+0x7e/0x3b0 [ 322.310859][ C1] batadv_check_known_mac_addr+0x2ae/0x3f0 [ 322.310883][ C1] ? batadv_check_known_mac_addr+0x24/0x3f0 [ 322.310909][ C1] batadv_hard_if_event+0x3a8/0x1780 [ 322.310930][ C1] ? __pfx_lowpan_event+0x10/0x10 [ 322.310952][ C1] ? dcbnl_netdevice_event+0x268/0x2b0 [ 322.310987][ C1] notifier_call_chain+0x1b3/0x3e0 [ 322.311012][ C1] netif_set_mac_address+0x37c/0x4c0 [ 322.311040][ C1] ? __pfx_netif_set_mac_address+0x10/0x10 [ 322.311066][ C1] ? down_write+0x162/0x1f0 [ 322.311091][ C1] ? rcu_is_watching+0x15/0xb0 [ 322.311120][ C1] ? trace_kmalloc+0x1f/0xd0 [ 322.311143][ C1] ? do_setlink+0x8ee/0x40d0 [ 322.311167][ C1] do_setlink+0x908/0x40d0 [ 322.311198][ C1] ? __pfx_do_setlink+0x10/0x10 [ 322.311230][ C1] ? __lock_acquire+0xaac/0xd20 [ 322.311261][ C1] ? __mutex_trylock_common+0x153/0x260 [ 322.311283][ C1] ? __pfx___mutex_trylock_common+0x10/0x10 [ 322.311306][ C1] ? rcu_is_watching+0x15/0xb0 [ 322.311336][ C1] ? trace_contention_end+0x39/0x120 [ 322.311356][ C1] ? __mutex_lock+0x330/0xe80 [ 322.311380][ C1] ? __pfx_aa_get_newest_label+0x10/0x10 [ 322.311404][ C1] ? rtnl_newlink+0x8db/0x1c70 [ 322.311423][ C1] ? rcu_is_watching+0x15/0xb0 [ 322.311453][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 322.311482][ C1] ? ns_capable+0x8a/0xf0 [ 322.311501][ C1] ? rtnl_link_get_net_capable+0x16a/0x350 [ 322.311525][ C1] rtnl_newlink+0x160b/0x1c70 [ 322.311544][ C1] ? kasan_save_track+0x3e/0x80 [ 322.311572][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 322.311609][ C1] ? kasan_quarantine_put+0xdd/0x220 [ 322.311631][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 322.311655][ C1] ? nlmon_xmit+0xb0/0x100 [ 322.311680][ C1] ? kmem_cache_free+0x192/0x3f0 [ 322.311709][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 322.311739][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 322.311761][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 322.311791][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 322.311826][ C1] ? aa_get_newest_label+0xf7/0x5d0 [ 322.311848][ C1] ? __lock_acquire+0xaac/0xd20 [ 322.311888][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 322.311908][ C1] rtnetlink_rcv_msg+0x7cc/0xb70 [ 322.311929][ C1] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 322.311948][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 322.311970][ C1] ? ref_tracker_free+0x63a/0x7d0 [ 322.311989][ C1] ? __copy_skb_header+0xa7/0x550 [ 322.312019][ C1] netlink_rcv_skb+0x219/0x490 [ 322.312040][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 322.312061][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 322.312091][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 322.312111][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 322.312135][ C1] netlink_unicast+0x758/0x8d0 [ 322.312171][ C1] netlink_sendmsg+0x805/0xb30 [ 322.312197][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 322.312232][ C1] ? aa_sock_msg_perm+0x94/0x160 [ 322.312253][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 322.312275][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 322.312296][ C1] __sock_sendmsg+0x219/0x270 [ 322.312328][ C1] __sys_sendto+0x3bd/0x520 [ 322.312351][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 322.312380][ C1] ? fput_close_sync+0x119/0x200 [ 322.312416][ C1] ? dnotify_flush+0x1db/0x5e0 [ 322.312442][ C1] ? __pfx_fput_close_sync+0x10/0x10 [ 322.312476][ C1] __x64_sys_sendto+0xde/0x100 [ 322.312500][ C1] do_syscall_64+0xf6/0x210 [ 322.312524][ C1] ? clear_bhb_loop+0x45/0xa0 [ 322.312547][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.312566][ C1] RIP: 0033:0x7f91be7907fc [ 322.312584][ C1] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 322.312601][ C1] RSP: 002b:00007ffdf4a6e190 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 322.312621][ C1] RAX: ffffffffffffffda RBX: 00007f91bf4e4620 RCX: 00007f91be7907fc [ 322.312637][ C1] RDX: 000000000000002c RSI: 00007f91bf4e4670 RDI: 0000000000000003 [ 322.312649][ C1] RBP: 0000000000000000 R08: 00007ffdf4a6e1e4 R09: 000000000000000c [ 322.312662][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 322.312674][ C1] R13: 0000000000000000 R14: 00007f91bf4e4670 R15: 0000000000000000 [ 322.312697][ C1] [ 322.312703][ C1] [ 322.312709][ C1] Allocated by task 7916: [ 322.312720][ C1] kasan_save_track+0x3e/0x80 [ 322.312741][ C1] __kasan_kmalloc+0x93/0xb0 [ 322.312762][ C1] __kmalloc_cache_noprof+0x230/0x3d0 [ 322.312785][ C1] rose_add_node+0x23a/0xde0 [ 322.312809][ C1] rose_rt_ioctl+0xa48/0xfb0 [ 322.312832][ C1] rose_ioctl+0x3ce/0x8b0 [ 322.312850][ C1] sock_do_ioctl+0xd9/0x300 [ 322.312876][ C1] sock_ioctl+0x576/0x790 [ 322.312901][ C1] __se_sys_ioctl+0xf9/0x170 [ 322.312918][ C1] do_syscall_64+0xf6/0x210 [ 322.312938][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.312956][ C1] [ 322.312961][ C1] Freed by task 13487: [ 322.312972][ C1] kasan_save_track+0x3e/0x80 [ 322.312992][ C1] kasan_save_free_info+0x46/0x50 [ 322.313020][ C1] __kasan_slab_free+0x62/0x70 [ 322.313041][ C1] kfree+0x193/0x440 [ 322.313059][ C1] rose_rt_device_down+0x66d/0x6c0 [ 322.313083][ C1] rose_device_event+0x603/0x6a0 [ 322.313104][ C1] notifier_call_chain+0x1b3/0x3e0 [ 322.313121][ C1] dev_close_many+0x29c/0x410 [ 322.313139][ C1] netif_close+0x158/0x210 [ 322.313155][ C1] dev_close+0x10a/0x220 [ 322.313174][ C1] bpq_device_event+0x2f4/0x600 [ 322.313191][ C1] notifier_call_chain+0x1b3/0x3e0 [ 322.313208][ C1] __dev_notify_flags+0x18d/0x2e0 [ 322.313236][ C1] netif_change_flags+0xe8/0x1a0 [ 322.313256][ C1] dev_change_flags+0x130/0x260 [ 322.313275][ C1] dev_ioctl+0x7b4/0x1150 [ 322.313290][ C1] sock_do_ioctl+0x22c/0x300 [ 322.313317][ C1] sock_ioctl+0x576/0x790 [ 322.313342][ C1] __se_sys_ioctl+0xf9/0x170 [ 322.313359][ C1] do_syscall_64+0xf6/0x210 [ 322.313379][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.313398][ C1] [ 322.313403][ C1] The buggy address belongs to the object at ffff888029085000 [ 322.313403][ C1] which belongs to the cache kmalloc-512 of size 512 [ 322.313422][ C1] The buggy address is located 42 bytes inside of [ 322.313422][ C1] freed 512-byte region [ffff888029085000, ffff888029085200) [ 322.313444][ C1] [ 322.313449][ C1] The buggy address belongs to the physical page: [ 322.313466][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29084 [ 322.313485][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 322.313501][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 322.313520][ C1] page_type: f5(slab) [ 322.313539][ C1] raw: 00fff00000000040 ffff88801a041c80 dead000000000100 dead000000000122 [ 322.313557][ C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 322.313577][ C1] head: 00fff00000000040 ffff88801a041c80 dead000000000100 dead000000000122 [ 322.313594][ C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 322.313613][ C1] head: 00fff00000000002 ffffea0000a42101 00000000ffffffff 00000000ffffffff [ 322.313630][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 322.313642][ C1] page dumped because: kasan: bad access detected [ 322.313656][ C1] page_owner tracks the page as allocated [ 322.313664][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5942, tgid 5938 (syz.2.3), ts 98813659622, free_ts 98756327748 [ 322.313700][ C1] post_alloc_hook+0x1d8/0x230 [ 322.313726][ C1] get_page_from_freelist+0x21ce/0x22b0 [ 322.313755][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 322.313785][ C1] alloc_pages_mpol+0x232/0x4a0 [ 322.313807][ C1] allocate_slab+0x8a/0x3b0 [ 322.313823][ C1] ___slab_alloc+0xbfc/0x1480 [ 322.313848][ C1] __kmalloc_cache_noprof+0x296/0x3d0 [ 322.313871][ C1] alloc_work_entries+0xc0/0x360 [ 322.313891][ C1] iw_cm_listen+0x42/0x230 [ 322.313909][ C1] rdma_listen+0xa53/0xd30 [ 322.313936][ C1] cma_listen_on_dev+0x3f5/0x720 [ 322.313954][ C1] cma_add_one+0x647/0xa50 [ 322.313973][ C1] add_client_context+0x367/0x790 [ 322.314000][ C1] enable_device_and_get+0x19b/0x3d0 [ 322.314026][ C1] ib_register_device+0x10c3/0x1390 [ 322.314053][ C1] siw_newlink+0x903/0xd70 [ 322.314077][ C1] page last free pid 5847 tgid 5847 stack trace: [ 322.314089][ C1] __free_frozen_pages+0xb0e/0xcd0 [ 322.314116][ C1] rcu_core+0xca5/0x1710 [ 322.314141][ C1] handle_softirqs+0x283/0x870 [ 322.314169][ C1] __irq_exit_rcu+0xca/0x1f0 [ 322.314185][ C1] irq_exit_rcu+0x9/0x30 [ 322.314199][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 322.314232][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 322.314252][ C1] [ 322.314257][ C1] Memory state around the buggy address: [ 322.314269][ C1] ffff888029084f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 322.314284][ C1] ffff888029084f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 322.314298][ C1] >ffff888029085000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 322.314309][ C1] ^ [ 322.314321][ C1] ffff888029085080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 322.314335][ C1] ffff888029085100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 322.314346][ C1] ================================================================== [ 322.314398][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 322.314413][ C1] CPU: 1 UID: 0 PID: 13262 Comm: syz-executor Not tainted 6.15.0-rc4-syzkaller-00213-g3c44b2d615e6 #0 PREEMPT(full) [ 322.314439][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 322.314452][ C1] Call Trace: [ 322.314460][ C1] [ 322.314469][ C1] dump_stack_lvl+0x99/0x250 [ 322.314499][ C1] ? __asan_memcpy+0x40/0x70 [ 322.314520][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 322.314548][ C1] ? __pfx__printk+0x10/0x10 [ 322.314574][ C1] panic+0x2db/0x790 [ 322.314606][ C1] ? __pfx_panic+0x10/0x10 [ 322.314635][ C1] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 322.314657][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 322.314677][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 322.314696][ C1] ? print_memory_metadata+0x314/0x400 [ 322.314724][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 322.314753][ C1] check_panic_on_warn+0x89/0xb0 [ 322.314779][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 322.314807][ C1] end_report+0x78/0x160 [ 322.314831][ C1] kasan_report+0x129/0x150 [ 322.314857][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 322.314890][ C1] rose_timer_expiry+0x471/0x4b0 [ 322.314920][ C1] call_timer_fn+0x17b/0x5f0 [ 322.314947][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 322.314975][ C1] ? call_timer_fn+0xbe/0x5f0 [ 322.315001][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 322.315033][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 322.315069][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 322.315089][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 322.315119][ C1] __run_timer_base+0x61a/0x860 [ 322.315143][ C1] ? ktime_get+0x3e/0x1f0 [ 322.315170][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 322.315194][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 322.315231][ C1] run_timer_softirq+0xb7/0x180 [ 322.315257][ C1] handle_softirqs+0x283/0x870 [ 322.315290][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 322.315312][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 322.315346][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 322.315373][ C1] __irq_exit_rcu+0xca/0x1f0 [ 322.315390][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 322.315414][ C1] irq_exit_rcu+0x9/0x30 [ 322.315430][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 322.315451][ C1] [ 322.315458][ C1] [ 322.315467][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 322.315489][ C1] RIP: 0010:console_flush_all+0x7f7/0xc40 [ 322.315512][ C1] Code: 48 21 c3 0f 85 e9 01 00 00 e8 85 b5 1e 00 48 8b 5c 24 20 4d 85 f6 75 07 e8 76 b5 1e 00 eb 06 e8 6f b5 1e 00 fb 48 8b 44 24 28 <42> 80 3c 20 00 74 08 48 89 df e8 5a aa 80 00 48 8b 1b 48 8b 44 24 [ 322.315530][ C1] RSP: 0018:ffffc900040d68c0 EFLAGS: 00000293 [ 322.315549][ C1] RAX: 1ffffffff1cf3eeb RBX: ffffffff8e79f758 RCX: ffff888053b70000 [ 322.315566][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 322.315579][ C1] RBP: ffffc900040d6a10 R08: ffffffff8f7eca77 R09: 1ffffffff1efd94e [ 322.315595][ C1] R10: dffffc0000000000 R11: fffffbfff1efd94f R12: dffffc0000000000 [ 322.315610][ C1] R13: 0000000000000001 R14: 0000000000000200 R15: ffffffff8e79f700 [ 322.315638][ C1] ? console_flush_all+0x13a/0xc40 [ 322.315664][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 322.315693][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 322.315720][ C1] console_unlock+0xc4/0x270 [ 322.315740][ C1] ? __pfx_console_unlock+0x10/0x10 [ 322.315762][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 322.315788][ C1] vprintk_emit+0x5b7/0x7a0 [ 322.315809][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 322.315828][ C1] ? __mutex_trylock_common+0x153/0x260 [ 322.315851][ C1] ? __lock_acquire+0xaac/0xd20 [ 322.315884][ C1] _printk+0xcf/0x120 [ 322.315906][ C1] ? __pfx__printk+0x10/0x10 [ 322.315927][ C1] ? batadv_hardif_get_by_netdev+0x36d/0x3b0 [ 322.315950][ C1] ? batadv_hardif_get_by_netdev+0x7e/0x3b0 [ 322.315975][ C1] batadv_check_known_mac_addr+0x2ae/0x3f0 [ 322.316000][ C1] ? batadv_check_known_mac_addr+0x24/0x3f0 [ 322.316026][ C1] batadv_hard_if_event+0x3a8/0x1780 [ 322.316048][ C1] ? __pfx_lowpan_event+0x10/0x10 [ 322.316070][ C1] ? dcbnl_netdevice_event+0x268/0x2b0 [ 322.316105][ C1] notifier_call_chain+0x1b3/0x3e0 [ 322.316129][ C1] netif_set_mac_address+0x37c/0x4c0 [ 322.316158][ C1] ? __pfx_netif_set_mac_address+0x10/0x10 [ 322.316183][ C1] ? down_write+0x162/0x1f0 [ 322.316209][ C1] ? rcu_is_watching+0x15/0xb0 [ 322.316246][ C1] ? trace_kmalloc+0x1f/0xd0 [ 322.316269][ C1] ? do_setlink+0x8ee/0x40d0 [ 322.316295][ C1] do_setlink+0x908/0x40d0 [ 322.316326][ C1] ? __pfx_do_setlink+0x10/0x10 [ 322.316351][ C1] ? __lock_acquire+0xaac/0xd20 [ 322.316383][ C1] ? __mutex_trylock_common+0x153/0x260 [ 322.316405][ C1] ? __pfx___mutex_trylock_common+0x10/0x10 [ 322.316429][ C1] ? rcu_is_watching+0x15/0xb0 [ 322.316460][ C1] ? trace_contention_end+0x39/0x120 [ 322.316481][ C1] ? __mutex_lock+0x330/0xe80 [ 322.316505][ C1] ? __pfx_aa_get_newest_label+0x10/0x10 [ 322.316529][ C1] ? rtnl_newlink+0x8db/0x1c70 [ 322.316548][ C1] ? rcu_is_watching+0x15/0xb0 [ 322.316579][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 322.316607][ C1] ? ns_capable+0x8a/0xf0 [ 322.316626][ C1] ? rtnl_link_get_net_capable+0x16a/0x350 [ 322.316652][ C1] rtnl_newlink+0x160b/0x1c70 [ 322.316671][ C1] ? kasan_save_track+0x3e/0x80 [ 322.316700][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 322.316738][ C1] ? kasan_quarantine_put+0xdd/0x220 [ 322.316759][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 322.316784][ C1] ? nlmon_xmit+0xb0/0x100 [ 322.316810][ C1] ? kmem_cache_free+0x192/0x3f0 [ 322.316838][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 322.316864][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 322.316881][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 322.316905][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 322.316932][ C1] ? aa_get_newest_label+0xf7/0x5d0 [ 322.316949][ C1] ? __lock_acquire+0xaac/0xd20 [ 322.316980][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 322.316995][ C1] rtnetlink_rcv_msg+0x7cc/0xb70 [ 322.317012][ C1] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 322.317027][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 322.317045][ C1] ? ref_tracker_free+0x63a/0x7d0 [ 322.317060][ C1] ? __copy_skb_header+0xa7/0x550 [ 322.317084][ C1] netlink_rcv_skb+0x219/0x490 [ 322.317100][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 322.317117][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 322.317140][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 322.317156][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 322.317174][ C1] netlink_unicast+0x758/0x8d0 [ 322.317202][ C1] netlink_sendmsg+0x805/0xb30 [ 322.317234][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 322.317256][ C1] ? aa_sock_msg_perm+0x94/0x160 [ 322.317277][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 322.317298][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 322.317319][ C1] __sock_sendmsg+0x219/0x270 [ 322.317351][ C1] __sys_sendto+0x3bd/0x520 [ 322.317373][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 322.317396][ C1] ? fput_close_sync+0x119/0x200 [ 322.317424][ C1] ? dnotify_flush+0x1db/0x5e0 [ 322.317445][ C1] ? __pfx_fput_close_sync+0x10/0x10 [ 322.317472][ C1] __x64_sys_sendto+0xde/0x100 [ 322.317491][ C1] do_syscall_64+0xf6/0x210 [ 322.317509][ C1] ? clear_bhb_loop+0x45/0xa0 [ 322.317527][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.317542][ C1] RIP: 0033:0x7f91be7907fc [ 322.317556][ C1] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 322.317570][ C1] RSP: 002b:00007ffdf4a6e190 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 322.317587][ C1] RAX: ffffffffffffffda RBX: 00007f91bf4e4620 RCX: 00007f91be7907fc [ 322.317600][ C1] RDX: 000000000000002c RSI: 00007f91bf4e4670 RDI: 0000000000000003 [ 322.317610][ C1] RBP: 0000000000000000 R08: 00007ffdf4a6e1e4 R09: 000000000000000c [ 322.317621][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 322.317634][ C1] R13: 0000000000000000 R14: 00007f91bf4e4670 R15: 0000000000000000 [ 322.317652][ C1] [ 322.317988][ C1] Kernel Offset: disabled