last executing test programs: 1.490337618s ago: executing program 1 (id=1988): pipe(&(0x7f0000000040)={0xffffffffffffffff}) (async, rerun: 64) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x1}, &(0x7f00000000c0)=0x8) (rerun: 64) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000100)={r1, 0x7e, "b8c1ba87c99ccedaec6b2e36753ee525529af937a76d5dbf98831cdf64dafb24c792086c28dc1d81be67baab05365abac6cbe98ec77ce0f6f631afa29b8406c6734f33261c45dd599d80c0a5f9715abfa7de09268722a4c976f5909e47ef88cd9897884af293869e815ed7cee4d71f899a7bb3988f4fcc692804bdd7c85f"}, &(0x7f0000000200)=0x86) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001940)=ANY=[@ANYBLOB="14010000210001000000000000000000010100800c000100000000000000000016000c"], 0x114}], 0x1}, 0x0) 1.374889301s ago: executing program 4 (id=1990): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r1, 0x8b22, &(0x7f0000000040)) r2 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r2, 0x1, 0x2d, &(0x7f0000000100)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f00000002c0)="08001ebbb07d586e", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x0) 1.372216191s ago: executing program 0 (id=1992): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r1) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000380)={'wpan3\x00'}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x8b}]}, &(0x7f0000000000)='GPL\x00', 0x5}, 0x90) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0c002e8006"], 0x28}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x14, r3, 0x4, 0x70bd28}, 0x14}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r7) sendmsg$NLBL_MGMT_C_ADD(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14017a00", @ANYRES16=r8, @ANYBLOB="cd3e0000000000000000010000000800020005000000ce00010043ecf8a077157cd8bc73e1b93314cdcbb6b9bb84e5bcdb7f9af2eacc913a7640e8332d1daa67516c7f094b740c631f175dd5d0f0a8ebd2679204"], 0x114}}, 0x0) 1.317338501s ago: executing program 1 (id=1993): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000796411000000000000006000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000010000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 1.306742053s ago: executing program 2 (id=1994): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="54010000100013070000000000000000ac1414bb000000000000000000000000ac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0200001900000000000000000000010000000032000000ac1414aa0000000000000000000b0000000000000000000000000000000000000000000000000000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900000000000000000000000000000000000000000002000400000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0004"], 0x154}}, 0x0) 1.298727345s ago: executing program 4 (id=1995): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000300)=0x1000, 0x4) bind$xdp(r3, &(0x7f0000000000)={0x2c, 0x1, r2, 0x2, r3}, 0x10) 1.199067194s ago: executing program 4 (id=1997): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xfffffff8}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], 0x2, [0x8, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) 1.166153522s ago: executing program 2 (id=1998): socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@newlink={0x20, 0x10, 0x503, 0x0, 0x25dfdbfc}, 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x74) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x74) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00'}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f0000000680)=ANY=[@ANYBLOB="73797a311a3e1079f10157ea5a55858feadc0000000000000000dd018c5f0629637f9735799bcd99e4cd066baa4d43d8d4140cbb6efea0edc79191c7f8e559b7559315"], 0x43) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="380000001800050100000000000000000a000000000000000000000008000400", @ANYRES32=r5, @ANYBLOB="0600150006000000ffff16800800010000000000ffd850bd9d1c1e9e0c56fcfd014242f77032dd7af31a91215ae9e44d31cdd4da6e981b26ef1952f200037c71f63d55c8e3878f6f9c38f0fab5ac21f2bd3d7a172e9df6bc"], 0x38}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="380000001800050100000000000000000a000000000000000000000008000400", @ANYRES32=r5, @ANYBLOB="0600150006000000ffff16800800010000000000ffd850bd9d1c1e9e0c56fcfd014242f77032dd7af31a91215ae9e44d31cdd4da6e981b26ef1952f200037c71f63d55c8e3878f6f9c38f0fab5ac21f2bd3d7a172e9df6bc"], 0x38}}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'rr\x00'}, 0x2c) socket$inet_smc(0x2b, 0x1, 0x0) (async) r7 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r7, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00'}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="98030000", @ANYRES16=r9, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r11, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff0802110000010569ea7fa08e8df3d0edd086922799ded6be01d09a95b66d3d"], 0x398}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r10, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000780)={&(0x7f0000000880)=ANY=[@ANYBLOB="34000000130a010200000000000000000100000008000340000056f56a6f3300040900020073c98b271858ced6c3000e0073797a8e00000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x10) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000200)={0x0, @remote, @broadcast}, &(0x7f00000004c0)=0xc) (async) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000200)={0x0, @remote, @broadcast}, &(0x7f00000004c0)=0xc) sendto$packet(r1, &(0x7f0000000340)="bdc1bfd0f82f0941b5b5d48cb5555c14de9cb2eda43089a0392a6fefa804f41cdf672cc31502c73b5ee139a01d2c28665badb4e47bffd7a487523b5ed3a5640f4ad488898969c3d9aa2fa950fd19381b2933d2170a42b8e60d7d9b7bca3fa1f080f86c523bf21dbb3713c30ee4aaa9923439cbf9657e106522f5d7392b572fded69b2938a8e47a860dc93540df993d37cef26d0b94a391682407870a8b6e099816df3e8f0432e7f7ec", 0xa9, 0x40004, &(0x7f0000000500)={0x11, 0xd, r12, 0x1, 0x67, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2ec, &(0x7f0000000040)=ANY=[@ANYBLOB="b48500000000000000770a4000b3561002000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x1dd}, 0x48) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@getqdisc={0x30, 0x26, 0x400, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0x5, 0xe}, {0xfffa, 0x9}, {0x2, 0xe}}, [{0x4}, {0x4}, {0x4}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@getqdisc={0x30, 0x26, 0x400, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0x5, 0xe}, {0xfffa, 0x9}, {0x2, 0xe}}, [{0x4}, {0x4}, {0x4}]}, 0x30}}, 0x0) 1.143795688s ago: executing program 1 (id=1999): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000001c0)='bbr\x00', 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r3, &(0x7f0000000040)={0x1d, 0x0, 0x801}, 0x18) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/128, 0xfffffce3, 0x0, 0x0, 0x0) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000200)="67a818beb2c030ce59945b", 0xb}, {&(0x7f0000000300), 0x400000}, {0x0}], 0x3) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000001400)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000002c0)=0xffffffffffffffff, 0xe) r6 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) getsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f00000000c0), &(0x7f0000000140)=0xe) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3e8, 0x200, 0x200, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x7, 0xe2, [@dev]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040), 0x4) socket$nl_route(0x10, 0x3, 0x0) 1.059003333s ago: executing program 4 (id=2000): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r1, &(0x7f0000000d00)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000006806040000000000f93132", 0x39}], 0x1) 1.041315355s ago: executing program 0 (id=2002): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000080a050400007379"], 0x54}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair(0x1e, 0x4, 0x80, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x400, 0x9, 0xfffffffa, 0x5477, 0x2}, &(0x7f0000000400)=0x14) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000440)={r3, 0x4c1}, 0x8) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000480)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="4900330080000000ffffffffffff08021100000050505050505000000000000000000000000000000100040600000000000025030000002a"], 0x68}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x28, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @ILA_ATTR_IDENT_TYPE={0x5}}]}, 0x28}}, 0x0) (async) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000030c0)=[{&(0x7f0000000000), 0x10, 0x0}], 0x1, 0x0) (async) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x10000000}, 0x20) (async) connect$l2tp6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x20) (async) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) socket$inet(0x2, 0x80001, 0x84) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000180)={r8}, 0xc) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r12, &(0x7f0000000080), 0xc) (async) sendmsg$inet(r12, &(0x7f0000000200)={&(0x7f0000000080)={0x2a, 0x0, @broadcast}, 0x10, 0x0}, 0x0) (async, rerun: 32) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r7, 0x84, 0xc, &(0x7f0000000140)=0x7fffffff, 0x4) (async, rerun: 32) sendmsg$DEVLINK_CMD_RELOAD(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000180000000000250001740e0001"], 0x3c}}, 0x0) (async) r13 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 958.714657ms ago: executing program 0 (id=2003): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @remote}, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='memory.events\x00', 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001400)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000080000001003b00000008000300", @ANYRES32=r8, @ANYBLOB="5900330080040000080211000000080211000000a5fcc8639e98000000000000000000006400000000060202020202020104161ba4840301b004060000000000000602000025030000003c040000000071070101ff01020922000000"], 0x78}}, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000140)={0x40000001}) syz_emit_ethernet(0x4f3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r6) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[], 0x6f4}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f0000000240), 0x3af4701e) sendfile(r10, r4, 0x0, 0x10000a007) ioctl$BTRFS_IOC_SNAP_CREATE(r3, 0x50009401, &(0x7f0000000340)={{r3}, "7d98fda4f5d891597fe1af4491a31813729403613108992a15d101a9aa5cebe3ac81f706480994bd8f46dc04afa8c2fb1c0c80d0bd31a3b2132babdb963acafc84379bd5ae776663b5fcb43155265eb40afae1a5089d59b64ef428a5eda427f2ad54cbbcee679a7d857342edaedefd72e7fbaded96a959a04e32eeb4ed934c73b8bd27ce7ce12967d16c0b2fe5c20a0e9dd652538f76e5d87e6f8bb77dce64d8890228f0b244ed947c1ac51ebce9aa3b9f6f68282e7d1d8b1d3bf6700922541cf3feac146628a3df3c1e62f932fd953721d298dcd92093e965057dc0bd40db77546125d1f4acc87509487f08b2687d1c39fea849c16f0696f524775484318b696e9d9716100f2249f89ea653c3765f26ebf676db97c5de2e649c034c82a875ad961587ef86907d0d5ef5eba0c5c317be7cd83b475eb9955eb152fa759ec4dd4cb15fe25bb658935e07f068f5e7d57b6648817ff543b430f6801cbcf1284f579ce818222a08d29002bc9bfa2d321f67c3ea896cd329316bab7bad9ec54babd4aea4c0a51062ca68497aa9bd066b28f50d076a3276b9be727f03bbae733480c77f855f2ae2c64380b3779cc1409bda3dd86ef29573a60801a339b3b0f4b39ac865eb06f5bd8496530436db16db1f2649a12ae4ccef9dce2b007593bf6cb980ecb4d28929ee65c44eff125cea22f70a3a3c447eb3d84e9a0b8c96458d6739eeed99dbe85037ffe2843e0d7758ee908c181b63ebb763ca2460addc66866d5777a9e218911c2cbbd8d7c895d90a805ddc0a6258789c19ca0681c0a42e164496590c4883539d4c69ce00a8e39ae9080b432033361e3918903182df46bfd9b929ce69f8ff452674cdd50eafd730604d944062c930eb7a5333a1fca5d4be44a58a1e031444e28fb5dcbeeefaf157b24d6e0da7f0bb24916241067d7b742685544036247a45a340e1ee2022277cb7ec04999235d2796704337f1ffacea79f42afe4c3cceb2c3aaf83da408586177ca05ed2b10db06199f48b66de37a136248f036f6c99015f52b249d0c736fc6d80c3a42ec38e8a8b24ddb9644a9dcd6f9e1468f15ce3c33f6d6e651d3b2e88a65b644a51e42a8d0943107eb51c6da27a03e76210e4a80c1910ff1e8c6e039dcc3f5fb86bedaecab4b16ef54d4fc23dcd1299c7c138545fc37d4991c5927b8a092337c9ac147646462b9c5ebb6f65f5cc5aee6e3997ac8ed1ce354a27b37b7b7eec139d2f88f554ef7520bd39ac03724cdb7ce2f60aedf9deb7db00e4b0ae5a9abf5e0968a1dc7fec8029ee6e711da04deccc51124b5a594f9d8047bbd564846cdd1b6d2abc9d6cfbc49883961e16a34338a91454f02e1dea9b920c050f22b669a2cd75ce4b86b774980dd9b545ec0134b641eb09a65fb17106aa5756ce27b24bf42bfb2c6579a16c91c96c0842473ab71cf3f725f54214e9b507a3fce4fe146a30deaf422e3452b6d4e0146e1fdf683b575017e51a491694fe0195150821a47d90df07885a86d3f1e6ff9cedb76f78308bab183958a18153de9fd3ba9b4ed59ab83590d2fb7599dd7656972bd11e11cf978b71b89aad512e96629c413fae726c25487ffa52b2107a8932006e876057e104596b15d96b0de60ba1dc951175984b565cd9bf006c46717bd1a60665715289b103f56274e960d28acc92bd6e1a003a36f4d894337f917788b611793eb4aa444696443b93b49cb221396658a4ceeed4a4863e55b7b95f0965efc5ad02b5f674ae475794d25fcb99044eea97a340de58e703aff9b1961bd60269ec5dd34a9cd8d0486b3251dfbf45ac72b78d2b6ac4f1a4208d8a5ac7bc7beee987c3f6b3a6b3ade0c2720f19618c6558bb55f4a6f7e4dbb522c8f2cbabaf898967734da957c80d944e73225ce526a430cf6424b3dcf9f430d9dbc8e22da63097031e5769bd73ae2027ecb5beb4074bdc73d35a59c56d33e1dc55e228b7953f1518b9aee1287654875963a35ecc2079a7be6e71242c9740bdc559c4a320be5401ef2b584e43abe51e1d12145f30c3bb0c963882ef7a76c17ab009d8ba2f8b6fe888022263e65a28a42e6f41c15160add3ddc4f4b9329758e3c6cd30e8a311d2de72135c171aca50877c4843b09817e565d3765b5d50b6d3b7b0f870514c4bc3f2bc5cb4448dca253916fb530ae6b9574924c1c257b679f43d7228cfbdda83de2f09d6a3ceaefc9ab9747db977b2580dfaee96e5ad1d498022ae0df8c68efa993e0d0141f5dbad25c7bfc928a43cb159e0e0369afff54bf409c0b3edc4c877ef103812ab5e6bf8eceb55cf1edccce2add494e81d6bd3ee515d625521087589e75f4a93b3c2941cbd4bc7f69ff8bdb596d42a20da525fb9565c0fb4ea774fb31f169475ddea55b84258f61dfa45f7fe5d27bc8a7a2de9fbe176f11887ae3ca71a5238685793bf110132334bb729e8c6ee0c29c8b095d00ca3a89f8022513bda92ad4165254c9a37f1c3f9a0393dceafb2ae748488f56371262a477db5892213e88b6c39e7aee601bac91a24e2d024d61856af2a76b47ec4bffdce497ae5826f6f69c362766d9cfc10397806dc6b70fbbd4488ada492a35282d80f2b3718801748d3a7f04bdc22cb91d8b6816dc35f924884d6b1411f4ec3b1d5c07060447b3e1b453eb38036d8c594603b1193ac0974eaa79d637d6f4f0f197a75af97da58bacc34978a9bc41f80ce13d0726f8394dae2a3b53e39aaa670d1e014b9c14aa8463ffd4777ca321b6d4da5cf3210d09df3e3ef7ab928bae449e81b34beff28eb2896614613f338a0971b0863a7d73cb588838e2692c11d00f2f3de8715746ebe28db06c6d8aad90b2493fd0b42dfef71b582501cb38a52e3daf4b61cbd4459fb22b1a2daccd3cba14890443c5bdde64ddd207fc4ee286224a77c6bd3f2de125c93bfa058d28e5d0fa769ed6d0f0acb452f424c2eb81ba804f4e0d707a8ee807c42da2f58e4c4bf5cf3daff2152dccf2f667d1b49034d9c92f68241d027d2b90f228404e08af5cfea73fcc7d0147b46fdd2883f06000b37b0cd0307880bcf6d30e7a3f37e41322b6ceac98df72e27493266b5bacb7d38b80d9fa27d21c838fd7e2e18efa4f7341457cc3790a93d5efefb01261f34e177bf7e10760d59bdf6d8478d041c01261794b3d1353eeb539bcc0a99fd2a49637fc726f1f57e5e85af4cc69de8ce21d9545639be3ebad5260e312455fc0527a02b09926180a3b1f6b92fa291cb17c5f99ee00a2533ebd317033b58594a6d2c54f9bcc682be825dc40a1a8d673059e71b82e77326daafb68b1cc7d84ba0e96909675f69b24f086e906146a6d7dd84b25304b6e0f5b8d97740e6bc302ff14eb3e0d92731831e217cd6dcffe318f1ea5531b1349d4cbf9c65b3f8f78f2878342f563f7494a971ca104bf9fdb66c3c4ba27d6da733c0067c0d65763f69ed2c2ca022d3d57eefc3d8b92f47a8617a395dab17595a849e7759fe8e8c988fc6b2eea1e51682d709a1f7010981d93c164764d3b51850851270b21fec6aff4c3134a2807e9666a4cc4baaee822df387d6ce94b5e5279e47f505c5f0ce084427a8409d0c5b83fbc70b9e53749770b6776452437df1d34777df0650d5c1c65723868146d0eeb48229f34167a9d33fef64eeba9080208c9953e28b22293401c0a211f556eca83983da670461c52af9dbefb35266c213e27283fcb05b4b4d7fd3fb2827f9373ca5e890d4acd497bb99e2dee1d1cc1b86ac7b70c2c75a7d59bd29dd0497b5d97d93d6dc19b7938f44c5548a4fc9d106beb34f1cfd97dfda1b173e2df9b96a03be25729c14970e25fbe5f382431d841065e230c958eee42b95ff760edf968360f9b3eb5106e04880d1489cbb14cb927997b500f6d4d0710c7c507eacc4564e65deecc81d8819f8bdee599be7f025b2e3b2aa03516d5a43d915cc605a3c919a11ed9e353eea73278e28cb86723f98e4944170dbc7fe9c4790d2956cb89e838725f5b15157eded600ecb9a0ee427a3826ce78267535e312cba45a04a88611804f400e8b38b4860eaa7d981c75d8ae0173040ff73411921da87d45b1e30ecb97907ed1c75d4049f6152057d2264c73fedf3d51cb00ec4bf7fec9af6f13b294efe20144273fe2f44241f87744b910d5d7ed15b6507fcb6c96e1eac0c9ea02b3832da6d1d1c026b06056f3b62bd160a7d6bbd0874066754ed0e4e0bb815237392d164ea8c14b4e77a6bbb0794e28f00c9ebb5122d513811a345fc78c8d7c43448fbe9b90b49aa689ee0bc057a06ebe80ff9cbd28620882404275d342dc289131cc5d5b78828f21445137220be2edb94993db16a4822d4b64372b61ac15b4d252e39caabc347e468f69d5111acd1830003563c3d453664c7a00c4c78cbe64019ca2301034e26349e091fafe839272157f6cee91b9e2fa8910e50b8b01da8709e28ec72b33cc67ee06c9671f88ad382832f376ada349454db557523185ca0a8e50d10dba85846a34f2b69532c895be0f6b9cf1fadae965589516e592147165c866449270bde406e00188f981787fc52f291fa45bde0a119b2c75153ee0e5ee63e04b4a863f005da142984c9e8ed96f7f440ad571165fcd77b42f7c5793071e626b6a26948e80a6befa4338ac1cd53278e054fb99c082846414779fcd344a700a45313b8f144223420322a224327b006a6982d2bb8e85281e1f971a97197cd0d7218fa3665569929b4ffc443feb77c7018b8a7d180acba1cb5da021aa1905995da4e6835290662bf7ec05dfaa514b3d765ccaed6ac069f938ee1e2357c499363b3f107bb8850dc191cb99c79843690e80883bc2ee28f03c51b27fc6907644371060b552c1c2c8c81423b6340bd2740c84b687af75e10aba5d47ce6aef37612bdf9fbadd007603adfb574f948dbe9a5a13c9e948a277e205990da9f63f436b8e80c6b98e86232b5a6b9131956d1107325252cf88ac514fec99a93151fc0da29c046f360c19a84632c1ca0627f39c4c27f44a588fece50e4c1345ec2df96606d7f5fc0e0bdd7b90a944d47b6b45e915bb27d10111b2df7ac76222e8135da594a249877fd18b7cd9c39fb4cb5783d5426cdd75ecd0c64b68eabcdf9fb3c0cd67cb0b914a160ddc95622bb95960894a87b42a5d31a3abb4a8f87c4a51e9228689dc6f42ba2665ed5f8b3d9a15403f3aa2427fdf0a37203ab24935d8e6fb63adf83b616424d68f12a746cbbb9790e15d8e743745d479372529054214e87dc0ca3675a926f6a7d4584444aaff42ccfe71a9869b3c7e5c96e3709cbed062ca966845944c9291048c6edfd00c5264c97eec8b83c1843d6731cf68790fb2e3632b271b958323607a0e20cb74ef504e641a81cba207915120e7031d9ed7d8afa83c7502148e48dcd93dd0fbee5d9c3f7da6793b25f1059059d9d78d3bc5b9e9ba5c2bc7799b732b9750b32d2c09fa7f86a2371503f6445cf0e7eb4a4187cf3122ea9af3b4d8379c716f46e217e4f0084bc0960fd0ab608cd3e680510986a34926a4d3ca82095b88b0b7fdd7eafbaeec762bad86f445f22565a4eb157daad4a4ac59ac0b8973ff72608c99dd4d99221d26e6eb6509c6ebd14cd14ac462946bed31a9e6f6ec192dc927199d4110e157f492df0bf7bcc2640451683e418d22c9229a8187a7e4b5abb826d1a4b502685897fb0dff76c62c78657f2d8cab21828c28f53fc3139bf476d70f29fa978c9cc5e6ff359f33905c1ad2d66b08eb18ccbdcb2d9b8bad9b41b27e51a6faa108f6176d3d56c6df15ee77818f411fd684e"}) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000000206050000000000000000feff00000014000300686173683a69702c706f72742c6970000900020073797a32000000000500040000000000050005000a000000050001000600000014000780080006400000000008000840"], 0x60}}, 0x0) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) 886.590305ms ago: executing program 4 (id=2004): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000018901eea02640bc6009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x18) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000067c0)={{{@in=@broadcast, @in=@multicast2, 0x4e20, 0x4, 0x4e20, 0x8000, 0x2, 0xa0, 0x0, 0x33}, {0x1000, 0x6, 0x10000000007, 0x400, 0x40000000000e2d, 0x400000000007fff, 0x5, 0xffffffffffffff52}, {0x8, 0x8000000000000001, 0x4, 0xffffffffffff0001}, 0x8, 0x6e6bb7, 0x1, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d6, 0x33}, 0xa, @in=@multicast1, 0x3504, 0x4, 0x0, 0x0, 0x5c1, 0xfefffff8, 0x401}}, 0xe8) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000300)={0x20, 0x4, 0xff, 0x5, 0x0, 0x2, 0x8, 0x20, 0xfb, 0x81, 0x82, 0x0, 0x94, 0xf7}, 0xe) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180)={0x3, 0x5, 0x9, 0xda, 0x0, 0x16, 0x20, 0x7e, 0x3f, 0x3, 0x7f, 0x7, 0xa0, 0x6}, 0xe) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x1, 0x5}, &(0x7f0000000040)=0xc) shutdown(r2, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r2}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000840)={0x0, 0x13, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x54}}, 0x0) recvmmsg(r2, &(0x7f0000002300)=[{{&(0x7f0000000140)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000740)=[{&(0x7f00000001c0)=""/35, 0x23}, {0x0}, {&(0x7f0000000240)=""/60, 0x3c}, {&(0x7f0000000280)=""/26, 0x1a}, {&(0x7f00000002c0)=""/221, 0xdd}, {&(0x7f00000003c0)=""/236, 0xec}, {&(0x7f0000000580)=""/196, 0xc4}], 0x7, &(0x7f00000007c0)=""/169, 0xa9}, 0x7}, {{&(0x7f0000000880)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000002980)=""/170, 0xaa}, 0x9}, {{&(0x7f0000001d40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000002180)=[{&(0x7f0000001dc0)=""/138, 0x8a}, {&(0x7f0000001e80)=""/63, 0x3f}, {&(0x7f0000001ec0)}, {&(0x7f0000001f00)=""/226, 0xe2}, {&(0x7f0000002000)=""/237, 0xed}, {&(0x7f0000000900)=""/23, 0x17}, {&(0x7f0000002140)=""/21, 0x15}], 0x7, &(0x7f0000002a40)=""/215, 0xd7}, 0x2}], 0x3, 0x40010162, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r2, 0x8008f513, &(0x7f0000000040)) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0xcc, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x38, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2}]}]}, 0xcc}}, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000006b80)={&(0x7f0000006a40)=ANY=[@ANYBLOB="9feb01001800000000000000840000008400000005000000000000000000000300000000020000000300000001000000080000000000000000005b00050000000000000b030000000b0000000000000c02000000000000000300000d000000000000000000000000080000000200000000000000040000000c00000002000004030000000f0000000300000005000000020000000300000004000000002e005f00"], &(0x7f0000006b00)=""/124, 0xa1, 0x7c, 0x1, 0x8000}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000006f00)={0xffffffffffffffff, 0xe0, &(0x7f0000006e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000006c40)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000500)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8e, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000006d40), &(0x7f0000006d80), 0x8, 0xd, 0x8, 0x8, &(0x7f0000006dc0)}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000006fc0)={{0x1, 0xffffffffffffffff}, &(0x7f0000006f40), &(0x7f0000006f80)}, 0x20) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000007000)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x10df, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000006e40)=@bloom_filter={0x1e, 0x3, 0x1, 0x4, 0x290, 0x1, 0xfffffbff, '\x00', r7, r6, 0x1, 0x2, 0x2, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000012c0)={{r11}, &(0x7f0000000200), &(0x7f0000000240), 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000007140)={0x6bda4d5cccc96e0, 0x16, &(0x7f0000001c80)=ANY=[@ANYBLOB="18000000030000000000000000020000d9b31000100000001865000007000000000000000700000018250000", @ANYRES32=r4, @ANYBLOB="0000000005000000180100002d904541031dffd2dada20696c2500000000002020207b1af8ff00000000bfa10000f8ffffff06010000f857acd47b02000008000000b70300000600000085000000060000008500", @ANYRES32=r11, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000006980)='syzkaller\x00', 0x7, 0x68, &(0x7f00000069c0)=""/104, 0x41100, 0x4c, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000006bc0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000006c00)={0x4, 0x10, 0x12f83ec1, 0x8000}, 0x10, r8, r2, 0x5, &(0x7f0000007080)=[r9, r10, r9, r4, r11, r4], &(0x7f00000070c0)=[{0x5, 0x2, 0x6, 0xa}, {0x3, 0x5, 0x6, 0x6}, {0x2, 0x1, 0x4, 0x6}, {0x5, 0x3, 0x7, 0x2}, {0x5, 0x3, 0x3, 0xc}], 0x10, 0x6}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x14, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="9500080000000000f7000000001888d463ee67215c1200"/35, @ANYRES32=0x1, @ANYBLOB="000000000000000018470000fdffffff0000000000000000"], &(0x7f0000000740)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000780)={0x4, 0x2, 0x376a, 0x3f}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000007c0)=[0x1, 0x1], 0x0, 0x10, 0x2}, 0x90) 866.344269ms ago: executing program 3 (id=2005): close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x0, 0x0, 0xc, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000001a000000000000000000000002000000000000000000000067eeb4e88110e6eb5a245d269580cff20ae0a5368504fbb72e7b5750afef675bb1ece3db4c3cad08ffa7c6eb81e52e556607bd4aa02324af7258dea0487bb9d27489a69e80a7190cc657cb4af29d54e06de4d2625b05ac153837f18cf1ec05f8c84004628e7f738605d6c0f3cf57a73b43c8f87087448870993875e00ad1b05d2734a8538233fb6aab4858c991a5016d8412390f85752bc144f268bf11959efbcbe991d40504382d409cd69346dfbbd878b4245a"], 0x1c}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) close(0xffffffffffffffff) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x60, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}], @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x20000000}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x3f, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r3, &(0x7f0000000000), 0x0}, 0x20) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000080)={0x0, 0x54d}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020008000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000800)={r7}, 0xc) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r8, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000}, 0x1c) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="74000000000101040000000000000000020000002400018014000180080001000000000008000200ac1414e8e69a508005000100000000000000000000008001050001000000000014000180080001000000000008000200e00000020800074000000000100006800c0016800600010000000000"], 0x74}}, 0x0) 846.792846ms ago: executing program 2 (id=2006): r0 = accept(0xffffffffffffffff, &(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, &(0x7f0000000000)=0x80) connect$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x2, @none, 0x1000}, 0xe) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r1) r2 = socket$packet(0x11, 0x2, 0x300) poll(&(0x7f0000000300)=[{r0, 0x2010}, {r0, 0xa400}, {0xffffffffffffffff, 0x58df41511fdd15aa}, {r0, 0x8200}, {r0, 0x240}, {r1, 0xa0}, {r0, 0x12083}, {r0, 0x600e}, {r2, 0x1400}, {r0}], 0xa, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0xac, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_VFINFO_LIST={0x8c, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14}]}]}, {0x6c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x5, 0xd0b, 0x9, 0x8100}}]}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x2, 0x2}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0xfff, 0x60000000}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x8, 0x5}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x2, 0x80000000}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x1, 0x6}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x7, 0x6}}]}]}]}, 0xac}}, 0x0) 654.885341ms ago: executing program 4 (id=2007): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b24, &(0x7f0000000400)={'wlan0\x00'}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) close(r1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r7, 0x1, 0x7, &(0x7f0000000080), 0x4) sendmmsg$unix(r7, &(0x7f00000bd000), 0x80, 0x0) connect$unix(r7, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) bind$alg(0xffffffffffffffff, 0x0, 0x0) epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r6, 0x0, 0x0) close(r6) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newlink={0x50, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc}]}]}, @IFLA_NET_NS_PID={0x8, 0x13, r5}, @IFLA_IFNAME={0x14, 0x3, 'veth0_to_bond\x00'}]}, 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@RTM_GETNSID={0x44, 0x5a, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@NETNSA_FD={0x8, 0x3, r0}, @NETNSA_NSID={0x8}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_FD={0x8, 0x3, r0}, @NETNSA_FD={0x8, 0x3, r0}, @NETNSA_PID={0x8, 0x2, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x80) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) write$cgroup_int(r0, &(0x7f0000000340)=0x8, 0x12) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r8, 0x40047451, &(0x7f0000000300)) 654.271664ms ago: executing program 2 (id=2008): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="54010000100013070000000000000000ac1414bb000000000000000000000000ac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0200001900000000000000000000010000000032000000ac1414aa0000000000000000000b000000000000000000000000000000000000000000000000000000000000000000001a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900000000000000000000000000000000000000000002000400000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0004"], 0x154}}, 0x0) 651.074659ms ago: executing program 3 (id=2009): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000796411000000000000006800851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000010000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 597.326859ms ago: executing program 0 (id=2010): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001900090000040000086bb02f23"], 0x24}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000380)=0x6, 0x4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@bridge_dellink={0x2c, 0x13, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r5}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x5, 0x0, 0x1, {0x4, 0x4}}]}]}, 0x2c}}, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x109, 0x109, 0x3, [@var={0x5, 0x0, 0x0, 0xe, 0x2}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x64, 0x0, 0x43, 0x3}, @enum={0x6, 0x4, 0x0, 0x6, 0x4, [{0x6, 0x6}, {0x2, 0x3}, {0x4, 0x567f}, {0x4, 0x8000}]}, @datasec={0x9, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x3, 0x121}], "8b"}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0xe, 0x3}, {0xe, 0x5}, {0xc, 0x4}, {0x8, 0x3}, {0xb, 0x5}, {0x5, 0x3}, {0x1, 0x2}]}, @union={0xb, 0x5, 0x0, 0x5, 0x1, 0x7a, [{0x2, 0x0, 0x10}, {0x2, 0x1, 0x4}, {0xe, 0x0, 0xfffffc00}, {0x3, 0x0, 0x7}, {0x2, 0x1}]}, @volatile={0x9, 0x0, 0x0, 0x9, 0x5}, @restrict={0x4, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x5f]}}, &(0x7f00000002c0)=""/103, 0x127, 0x67, 0x1, 0x9}, 0x20) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f"], &(0x7f0000000540)='syzkaller\x00', 0x4de, 0x0, 0x0, 0x0, 0x22, '\x00', r5, 0x2, r6}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='netlink_extack\x00', r7}, 0x10) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_cred(r8, 0x1, 0x4a, &(0x7f00000000c0), 0xc) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r7, 0xc038943b, &(0x7f00000000c0)={0x2, 0x8, '\x00', 0x0, &(0x7f0000000040)=[0x0]}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="780000001800110100000000000000000a00000000000000000000005c0008800400f9"], 0x78}}, 0x0) 542.560938ms ago: executing program 2 (id=2011): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) socket$tipc(0x1e, 0x2, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff0100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000004000000b704000000000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000500", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 542.130504ms ago: executing program 3 (id=2012): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r1) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000380)={'wpan3\x00'}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x8b}]}, &(0x7f0000000000)='GPL\x00', 0x5}, 0x90) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0c002e8006"], 0x28}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x14, r3, 0x4, 0x70bd28}, 0x14}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r7) sendmsg$NLBL_MGMT_C_ADD(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1401ca00", @ANYRES16=r8, @ANYBLOB="cd3e0000000000000000010000000800020005000000ce00010043ecf8a077157cd8bc73e1b93314cdcbb6b9bb84e5bcdb7f9af2eacc913a7640e8332d1daa67516c7f094b740c631f175dd5d0f0a8ebd2679204"], 0x114}}, 0x0) 531.735648ms ago: executing program 2 (id=2013): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x98}}, 0x0) listen(r0, 0x80080400) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r4, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x18, 0x3f9, 0x20, 0x70bd28, 0x25dfdbfd, {0x1}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x20004000) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r5, 0x29, 0xc8, &(0x7f0000000340), 0x4) syz_emit_ethernet(0x42, &(0x7f0000000580)={@broadcast, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "f7d8ff", 0x8, 0x3c, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], {0x0, 0x0, 0x8}}}}}}, 0x0) epoll_create(0x5) getsockopt$inet_int(r2, 0x10d, 0x95, &(0x7f0000000000), &(0x7f0000000240)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x6f, 0x7fdf, 0x1}, 0x48) r6 = socket$alg(0x26, 0x5, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f00000002c0)=0x4) bind$alg(r6, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$kcm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="ae77965af8b4", 0x6}], 0x1}, 0x0) sendmsg$AUDIT_SET(r7, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x3e9, 0x800, 0x70bd2c, 0x25dfdbfb, {0x518ef845eaa9c776, 0x1, 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x1, 0x5, 0x0, 0x3, 0x9}, ["", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x2000c804) socket$inet6(0xa, 0x2, 0x3a) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_RATE={0x6}]}, 0x40}}, 0x0) 486.647448ms ago: executing program 0 (id=2014): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="180000000000800000000000000000001811", @ANYRESDEC, @ANYBLOB="0000000000000000b708000000000000"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x88) socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T4(r4, 0x103, 0x6, &(0x7f0000000180)=0x80, &(0x7f0000000200)=0x4) bind$packet(r0, &(0x7f0000000400)={0x11, 0x7, 0x0, 0x1, 0x7f, 0x6, @local}, 0x14) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_proto_private(r5, 0x8943, &(0x7f00000001c0)="7351a5666a71b75b3a") bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f0000000280)="4f276a420a37d0c93a379e44ff5226adce4256ad4ad7026c3d6bca930fd95395f54f932145797b6ddb3402d6be865f56e35fb042b236f81860d7e307e8fb9d849be41b9843a8b8bd1dbded07c77f450a761f0262f77faca9869fc3883ec0d87f7b889f8b1c47934e51e16ffced0fcb8932f11487e5aa1763cac8fc77e48a4a8cabbdc3cf", &(0x7f0000000340)=""/191, &(0x7f0000000540)="b412baa571ab8853d3b4da540584a4b75b1980545979dcc41f5a20cfa9ccb8a175f5b583ea10fce487120827bd64b164899b03d4d2ba638ef2f2242b5936036b65d2ffee1ea71ff8b090fbba561e2f74da4fcb39a3021f3460f5e97e86443373965f8fa8ec87b17e191e623c1208dbd98969e060e8ca80a48c78fbe9842cc8b19669dee1ac957ea9419754e846f412fe3633fd2a5d332c482dc5a5733fed25cfbe2b1c41d1b57aea5b3a74af3e849adfceb26364b558d9a2a24ebc107331ab6ae2e7094af0ebd98c70b5f9cc2db487e42925320fb93935e1f34b550f6a2f1832b16dc57cb9694dc82def4e", &(0x7f00000006c0)="8e46f88b925a89fa5aa4c018d2591a0300b07e3177b252992c3a78c05b901a088c68b6f67f41b67fbd25332d9bccf1dd48329619fb44646b4cc8206bbe33a48e3107f61edbcea2260ca6d74af5969366e0832bd69f8ba9523d4e01fd3e480493aecc7ce8176c9c0b8bec39e30eee953920d8e9db0712fe6cac8509dc53411457374973406bd777bbd7d979f45e365f972792e1055a3d4c7271c6b783078799956fb9c416fdc72828c0fcd07b13946705cf9875637dba41180519467fa0d46dadb383aad4156b6b587a1a2c13240d6a71fe", 0x6, r3}, 0x38) r6 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r6, &(0x7f00000004c0)=ANY=[@ANYBLOB="13100000660091"], 0xfe33) setsockopt$inet6_buf(r1, 0x29, 0x2f, &(0x7f00000007c0)="8f3e22587ba89ae3c5c1461811aeb8e0ea7268cab97706901db612f2b16d590ae6724eca717bdbe3b8662c1437ee7d48d3bb69134e37c6796f7d75c54c2c9fbf882aac4775787d0cbad4d9d3c4dff3ec533db35282f56fa004e32ea758d418202dbcf40cf95d2fdcfb0f60e9175410011dd664fef24c7e63df368d8917245e5fa11438137339f07cf2692f", 0x8b) 298.891929ms ago: executing program 3 (id=2015): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r1, &(0x7f0000000d00)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000006c06040000000000f93132", 0x39}], 0x1) 298.459606ms ago: executing program 0 (id=2016): bpf$MAP_CREATE(0x0, 0x0, 0x43) r0 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x4, 0x0, 0x28) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x200008d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="0001"], 0x18) sendto$inet6(r1, &(0x7f0000000080)='w', 0x1, 0xc1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000005640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000280)=ANY=[], 0x8) sendto$inet6(r1, &(0x7f0000000280)="03", 0x1, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000004"], 0x24d8}], 0x1}, 0x0) 287.069717ms ago: executing program 3 (id=2017): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000280)={@random="856b934629fa", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0xf5}, {}, {0xa888}}}}}}}, 0x0) 261.004566ms ago: executing program 3 (id=2018): r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYRES64=r0, @ANYRESDEC=r0, @ANYRES32=0x0, @ANYRESHEX, @ANYRES8=r0], 0x130) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @local}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x2, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000001400000000000000000795"], &(0x7f0000000400)='GPL\x00'}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0xffff, 0x6, 0x6, 0x1001, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2, 0xd}, 0x48) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000080)='.\x00', 0x0, 0x20, r0}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) unshare(0x24020400) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000380)={r1}, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f00000000000000000000850000000e000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYRES64=r0], 0x128}, 0xc850) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffffffffdff, &(0x7f0000000080)}, 0x100) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r9) r11 = syz_open_procfs$namespace(0x0, &(0x7f0000000880)='ns/uts\x00') ioctl$TUNGETVNETHDRSZ(r11, 0xb701, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='sys_exit\x00', r2}, 0x10) accept4$ax25(r1, &(0x7f0000000540)={{0x3, @null}, [@netrom, @null, @default, @netrom, @null, @rose, @default, @rose]}, &(0x7f0000000300)=0x48, 0x80000) 178.876402ms ago: executing program 1 (id=2019): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000001480)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e20, 0x7, @mcast2, 0x6fac}, @in6={0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xffffffff}], 0x48) r3 = socket$alg(0x26, 0x5, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f00000000c0)=""/4096, &(0x7f0000000040)=0x1000) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000010c0)={0x0, 0x9, 0x20}, &(0x7f0000001100)=0xc) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001140)={r5, 0x6, 0xfffffffd, 0x9}, &(0x7f0000000080)=0xfffffffffffffec5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000001300)={0x0, @broadcast, 0x4e22, 0x0, 'lc\x00', 0x0, 0xff, 0x7c}, 0x2c) syz_emit_ethernet(0xd3, &(0x7f0000000880)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb009d2b00fc010000000000000000000000000000fe8000000000000000000000000000aa33000200650000002b"], 0x0) r7 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r7, &(0x7f0000000040)={0x2a, 0x1, 0x8000}, 0xc) write(r7, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x4c}}, 0x4000) 48.56584ms ago: executing program 1 (id=2020): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) close(r1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f0000000140)=[{0x800, 0x7b, 0x1, 0x1d8000}, {0x400, 0x3, 0x39, 0x1000}]}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) connect$pppl2tp(r4, &(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x1, 0x3}}, 0x26) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) getsockopt$bt_BT_SECURITY(r4, 0x111, 0x2, 0x0, 0x20000000) sendto$inet(r2, &(0x7f0000000240)="8050228c0a0d1eb73baf600376bff0823ec7f6275701f9ea8c3422fe02a0f6fb2ae1df19980d4a4de3332244f10f60dad835907cb9ba487b4a90b5b530ee760037a0bdda0ac6283abe9b", 0x4a, 0x0, 0x0, 0x0) socket$isdn(0x22, 0x3, 0x23) close(r1) sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x84}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0x3}, @IFLA_GRE_REMOTE={0x8, 0x7, @loopback}]}}}]}, 0x44}}, 0x0) 0s ago: executing program 1 (id=2021): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="54010000100013070000000000000000ac1414bb000000000000000000000000ac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0200001900000000000000000000010000000032000000ac1414aa0000000000000000000b0000000000000000000000000000000000000000000000000000000000000000000154000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900000000000000000000000000000000000000000002000400000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0004"], 0x154}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.253' (ED25519) to the list of known hosts. [ 50.051239][ T5076] cgroup: Unknown subsys name 'net' [ 50.181878][ T5076] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 51.568354][ T5076] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 55.206621][ T5096] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 55.215770][ T5096] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 55.237446][ T5100] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 55.245061][ T5100] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 55.252547][ T5100] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 55.258275][ T5104] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 55.262331][ T5100] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 55.274509][ T5100] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 55.275482][ T5105] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 55.281785][ T5100] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 55.297959][ T5100] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 55.298783][ T5105] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 55.305708][ T5100] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 55.313135][ T5105] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 55.319638][ T5100] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 55.326061][ T5104] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.333069][ T5100] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 55.340621][ T5105] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 55.348896][ T5100] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 55.355171][ T5105] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 55.362558][ T5100] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 55.369571][ T5104] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 55.392506][ T5105] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 55.401023][ T4489] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 55.408494][ T5105] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 55.415959][ T4489] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 55.423453][ T5107] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 55.431128][ T4489] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 55.440791][ T4489] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 55.454676][ T5090] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 55.803955][ T5085] chnl_net:caif_netlink_parms(): no params data found [ 55.971190][ T5088] chnl_net:caif_netlink_parms(): no params data found [ 56.017829][ T5085] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.025103][ T5085] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.032840][ T5085] bridge_slave_0: entered allmulticast mode [ 56.041048][ T5085] bridge_slave_0: entered promiscuous mode [ 56.083219][ T5085] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.090906][ T5085] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.098147][ T5085] bridge_slave_1: entered allmulticast mode [ 56.105492][ T5085] bridge_slave_1: entered promiscuous mode [ 56.146544][ T5085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.183479][ T5086] chnl_net:caif_netlink_parms(): no params data found [ 56.196298][ T5085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.226490][ T5093] chnl_net:caif_netlink_parms(): no params data found [ 56.278712][ T5085] team0: Port device team_slave_0 added [ 56.287207][ T5085] team0: Port device team_slave_1 added [ 56.386952][ T5085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.393929][ T5085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.420136][ T5085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.451595][ T5085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.458752][ T5085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.484787][ T5085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.525888][ T5088] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.533064][ T5088] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.540495][ T5088] bridge_slave_0: entered allmulticast mode [ 56.548357][ T5088] bridge_slave_0: entered promiscuous mode [ 56.560336][ T5088] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.567660][ T5088] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.574917][ T5088] bridge_slave_1: entered allmulticast mode [ 56.581588][ T5088] bridge_slave_1: entered promiscuous mode [ 56.603669][ T5086] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.610930][ T5086] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.618197][ T5086] bridge_slave_0: entered allmulticast mode [ 56.625634][ T5086] bridge_slave_0: entered promiscuous mode [ 56.633130][ T5091] chnl_net:caif_netlink_parms(): no params data found [ 56.656483][ T5088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.677458][ T5086] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.684802][ T5086] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.691920][ T5086] bridge_slave_1: entered allmulticast mode [ 56.699250][ T5086] bridge_slave_1: entered promiscuous mode [ 56.723874][ T5088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.755431][ T5093] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.762555][ T5093] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.770334][ T5093] bridge_slave_0: entered allmulticast mode [ 56.777430][ T5093] bridge_slave_0: entered promiscuous mode [ 56.836701][ T5088] team0: Port device team_slave_0 added [ 56.844067][ T5088] team0: Port device team_slave_1 added [ 56.850491][ T5093] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.857956][ T5093] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.866179][ T5093] bridge_slave_1: entered allmulticast mode [ 56.872887][ T5093] bridge_slave_1: entered promiscuous mode [ 56.907711][ T5085] hsr_slave_0: entered promiscuous mode [ 56.914228][ T5085] hsr_slave_1: entered promiscuous mode [ 56.960433][ T5093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.972118][ T5086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.984847][ T5086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.002546][ T5088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.009598][ T5088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.035563][ T5088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.050170][ T5093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.111239][ T5088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.119308][ T5088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.145251][ T5088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.174063][ T5093] team0: Port device team_slave_0 added [ 57.183292][ T5086] team0: Port device team_slave_0 added [ 57.229367][ T5093] team0: Port device team_slave_1 added [ 57.247199][ T5086] team0: Port device team_slave_1 added [ 57.272235][ T5091] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.279717][ T5091] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.287329][ T5091] bridge_slave_0: entered allmulticast mode [ 57.294059][ T5091] bridge_slave_0: entered promiscuous mode [ 57.328534][ T5093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.335509][ T5093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.361586][ T5093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.372853][ T5091] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.380657][ T5091] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.388004][ T5091] bridge_slave_1: entered allmulticast mode [ 57.394964][ T5091] bridge_slave_1: entered promiscuous mode [ 57.406522][ T5088] hsr_slave_0: entered promiscuous mode [ 57.412860][ T5088] hsr_slave_1: entered promiscuous mode [ 57.418981][ T5088] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.427144][ T5096] Bluetooth: hci0: command tx timeout [ 57.432713][ T5088] Cannot create hsr debugfs directory [ 57.453727][ T5093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.460770][ T5093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.486836][ T5093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.505210][ T5096] Bluetooth: hci2: command tx timeout [ 57.505348][ T5095] Bluetooth: hci1: command tx timeout [ 57.510753][ T5090] Bluetooth: hci3: command tx timeout [ 57.516864][ T5095] Bluetooth: hci4: command tx timeout [ 57.546224][ T5091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.560476][ T5086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.567591][ T5086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.593780][ T5086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.607268][ T5086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.614323][ T5086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.640266][ T5086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.668141][ T5091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.732009][ T5091] team0: Port device team_slave_0 added [ 57.740996][ T5091] team0: Port device team_slave_1 added [ 57.809728][ T5093] hsr_slave_0: entered promiscuous mode [ 57.816504][ T5093] hsr_slave_1: entered promiscuous mode [ 57.822500][ T5093] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.830341][ T5093] Cannot create hsr debugfs directory [ 57.868566][ T5091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.875677][ T5091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.902022][ T5091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.936011][ T5086] hsr_slave_0: entered promiscuous mode [ 57.942539][ T5086] hsr_slave_1: entered promiscuous mode [ 57.949097][ T5086] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.956857][ T5086] Cannot create hsr debugfs directory [ 57.969206][ T5091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.976235][ T5091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.002329][ T5091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.220667][ T5085] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.243738][ T5091] hsr_slave_0: entered promiscuous mode [ 58.250195][ T5091] hsr_slave_1: entered promiscuous mode [ 58.256513][ T5091] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.264053][ T5091] Cannot create hsr debugfs directory [ 58.283288][ T5085] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.293075][ T5085] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.303449][ T5085] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.515463][ T5088] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 58.526774][ T5088] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 58.537377][ T5088] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 58.565722][ T5088] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.643168][ T5086] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.653240][ T5086] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.678733][ T5086] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.689572][ T5086] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.767117][ T5093] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.780556][ T5093] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.801015][ T5093] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 58.810503][ T5093] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.902448][ T5091] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.932985][ T5085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.942218][ T5091] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.953349][ T5091] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.964123][ T5091] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.983567][ T5088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.058185][ T5085] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.087840][ T5088] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.098052][ T5141] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.105507][ T5141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.118023][ T5141] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.125133][ T5141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.157707][ T5141] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.164876][ T5141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.207125][ T5142] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.214313][ T5142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.320240][ T5086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.365402][ T5091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.387000][ T5086] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.401608][ T5093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.441298][ T5094] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.448972][ T5094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.460285][ T5094] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.467433][ T5094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.505008][ T5095] Bluetooth: hci0: command tx timeout [ 59.512723][ T5093] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.536774][ T5091] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.584018][ T5141] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.591127][ T5141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.599918][ T5095] Bluetooth: hci3: command tx timeout [ 59.599939][ T5090] Bluetooth: hci2: command tx timeout [ 59.605759][ T5095] Bluetooth: hci1: command tx timeout [ 59.616496][ T5095] Bluetooth: hci4: command tx timeout [ 59.642701][ T5141] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.649809][ T5141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.659995][ T5141] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.667109][ T5141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.697159][ T5094] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.704446][ T5094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.809062][ T5085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.912803][ T5093] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.056950][ T5085] veth0_vlan: entered promiscuous mode [ 60.130598][ T5088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.146657][ T5086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.189095][ T5085] veth1_vlan: entered promiscuous mode [ 60.286757][ T5086] veth0_vlan: entered promiscuous mode [ 60.342422][ T5086] veth1_vlan: entered promiscuous mode [ 60.361231][ T5091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.379064][ T5093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.403646][ T5085] veth0_macvtap: entered promiscuous mode [ 60.423926][ T5085] veth1_macvtap: entered promiscuous mode [ 60.491353][ T5086] veth0_macvtap: entered promiscuous mode [ 60.505688][ T5085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.547290][ T5086] veth1_macvtap: entered promiscuous mode [ 60.571244][ T5085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.585367][ T5085] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.595993][ T5085] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.604951][ T5085] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.613639][ T5085] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.643601][ T5091] veth0_vlan: entered promiscuous mode [ 60.667114][ T5093] veth0_vlan: entered promiscuous mode [ 60.693871][ T5088] veth0_vlan: entered promiscuous mode [ 60.702577][ T5091] veth1_vlan: entered promiscuous mode [ 60.711382][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.725317][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.737689][ T5086] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.749930][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.760528][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.772693][ T5086] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.802143][ T5093] veth1_vlan: entered promiscuous mode [ 60.827088][ T5086] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.835972][ T5086] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.846646][ T5086] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.857037][ T5086] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.889405][ T5088] veth1_vlan: entered promiscuous mode [ 60.941738][ T2814] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.949844][ T5091] veth0_macvtap: entered promiscuous mode [ 60.966197][ T2814] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.996984][ T5091] veth1_macvtap: entered promiscuous mode [ 61.033560][ T5093] veth0_macvtap: entered promiscuous mode [ 61.045012][ T5093] veth1_macvtap: entered promiscuous mode [ 61.089917][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.101389][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.112561][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.124795][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.136252][ T5091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.146884][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.154242][ T2814] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.157617][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.175722][ T2814] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.177992][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.194580][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.207897][ T5091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.223830][ T5091] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.232711][ T5091] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.241668][ T5091] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.250611][ T5091] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.262739][ T5088] veth0_macvtap: entered promiscuous mode [ 61.278660][ T5088] veth1_macvtap: entered promiscuous mode [ 61.313706][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.324780][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.336608][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.348958][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.358816][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.369617][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.386436][ T5093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.421925][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.438422][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.461885][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.480146][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.491937][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.522122][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.532774][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.543473][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.556730][ T5093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.564991][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.576577][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.588244][ T5095] Bluetooth: hci0: command tx timeout [ 61.593857][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.593879][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.593890][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.593903][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.593915][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.593928][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.597469][ T5088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.670066][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.681020][ T5095] Bluetooth: hci4: command tx timeout [ 61.681040][ T5096] Bluetooth: hci2: command tx timeout [ 61.686727][ T5095] Bluetooth: hci1: command tx timeout [ 61.692203][ T5090] Bluetooth: hci3: command tx timeout [ 61.699879][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.713750][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.724532][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.734667][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.746529][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.756417][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.766986][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.778194][ T5088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.809336][ T5088] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.818297][ T5088] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.828730][ T5088] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.837826][ T5088] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.862904][ T5093] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.884667][ T5093] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.894417][ T5093] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.903646][ T5093] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.941416][ T5175] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 61.948860][ T5175] IPv6: NLM_F_CREATE should be set when creating new route [ 61.956127][ T5175] IPv6: NLM_F_CREATE should be set when creating new route [ 61.987112][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.996497][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.041229][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.061193][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.098232][ T5175] netlink: 'syz.0.6': attribute type 22 has an invalid length. [ 62.163954][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.189266][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.282110][ T5143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.292711][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.312623][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.360186][ T5181] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7'. [ 62.373233][ T5177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 62.383867][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.410845][ T5181] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7'. [ 62.423250][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.506458][ T5181] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 62.596425][ T2814] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.613767][ T2814] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.613861][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.633846][ T5190] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8'. [ 62.676102][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.717456][ T5192] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 62.862217][ T5196] Driver unsupported XDP return value 0 on prog (id 3) dev N/A, expect packet loss! [ 62.872546][ T2814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.882333][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 63.010390][ T2814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 63.098958][ T5209] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 63.176799][ T5212] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 63.323924][ T5209] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12'. [ 63.353297][ T5209] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.378300][ T5209] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.393588][ T5209] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.410820][ T5209] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.487929][ T5227] hsr0: entered promiscuous mode [ 63.665360][ T5096] Bluetooth: hci0: command tx timeout [ 63.720827][ T5237] netlink: 20 bytes leftover after parsing attributes in process `syz.4.18'. [ 63.746625][ T5096] Bluetooth: hci1: command tx timeout [ 63.752379][ T5090] Bluetooth: hci4: command tx timeout [ 63.758358][ T4489] Bluetooth: hci2: command tx timeout [ 63.758411][ T5095] Bluetooth: hci3: command tx timeout [ 63.795270][ T5233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16'. [ 63.905391][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 63.917183][ T5240] netlink: 40 bytes leftover after parsing attributes in process `syz.4.19'. [ 63.988022][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 64.034245][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 64.239039][ T5249] netlink: 'syz.4.22': attribute type 4 has an invalid length. [ 64.265355][ T5139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 64.593492][ T5266] netlink: 20 bytes leftover after parsing attributes in process `syz.2.30'. [ 64.802512][ T5281] openvswitch: netlink: Flow key attr not present in new flow. [ 65.522150][ T5317] Zero length message leads to an empty skb [ 66.394469][ T5370] netlink: 'syz.2.69': attribute type 20 has an invalid length. [ 66.452389][ T5369] vlan2: entered promiscuous mode [ 66.542924][ T5380] warning: `syz.4.70' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 66.839100][ T5397] xt_TCPMSS: Only works on TCP SYN packets [ 66.936737][ T5402] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.997098][ T5402] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.014079][ T5402] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.028796][ T5402] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.745162][ C0] net_ratelimit: 14 callbacks suppressed [ 67.745184][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.825570][ T5460] netlink: 'syz.2.95': attribute type 4 has an invalid length. [ 67.888085][ T5467] netlink: 'syz.2.95': attribute type 4 has an invalid length. [ 68.011752][ T5476] netlink: 'syz.0.100': attribute type 3 has an invalid length. [ 68.072839][ T45] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.115493][ T5480] Bluetooth: MGMT ver 1.22 [ 68.373502][ T5485] __nla_validate_parse: 19 callbacks suppressed [ 68.373521][ T5485] netlink: 96 bytes leftover after parsing attributes in process `syz.4.104'. [ 68.483567][ T5499] vlan2: entered promiscuous mode [ 68.677112][ T5518] netlink: 28 bytes leftover after parsing attributes in process `syz.4.116'. [ 68.682353][ T5519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.695021][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.718268][ T5524] netlink: 40 bytes leftover after parsing attributes in process `syz.3.117'. [ 68.915940][ T5537] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 69.110841][ T45] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.119032][ T45] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.392215][ T5565] vlan2: entered promiscuous mode [ 69.438908][ T5568] netlink: 4 bytes leftover after parsing attributes in process `syz.4.127'. [ 69.495228][ T5568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.127'. [ 69.617016][ T5582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.676040][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.745819][ T5582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.862493][ T5593] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3) [ 70.250051][ T5616] team0: entered promiscuous mode [ 70.263411][ T5616] team_slave_0: entered promiscuous mode [ 70.308340][ T5616] team_slave_1: entered promiscuous mode [ 70.535866][ T5632] FAULT_INJECTION: forcing a failure. [ 70.535866][ T5632] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 70.578133][ T5632] CPU: 1 PID: 5632 Comm: syz.2.149 Not tainted 6.10.0-rc6-syzkaller-01258-g2f5e6395714d #0 [ 70.588150][ T5632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 70.598223][ T5632] Call Trace: [ 70.601514][ T5632] [ 70.604458][ T5632] dump_stack_lvl+0x241/0x360 [ 70.609172][ T5632] ? __pfx_dump_stack_lvl+0x10/0x10 [ 70.614390][ T5632] ? __pfx__printk+0x10/0x10 [ 70.619008][ T5632] ? __pfx_lock_release+0x10/0x10 [ 70.624078][ T5632] should_fail_ex+0x3b0/0x4e0 [ 70.628783][ T5632] _copy_from_user+0x2f/0xe0 [ 70.633392][ T5632] copy_msghdr_from_user+0xae/0x680 [ 70.638613][ T5632] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 70.644452][ T5632] __sys_sendmsg+0x23d/0x3a0 [ 70.649069][ T5632] ? __pfx___sys_sendmsg+0x10/0x10 [ 70.654198][ T5632] ? vfs_write+0x7c4/0xc90 [ 70.658649][ T5632] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 70.664969][ T5632] ? do_syscall_64+0x100/0x230 [ 70.669728][ T5632] ? do_syscall_64+0xb6/0x230 [ 70.674397][ T5632] do_syscall_64+0xf3/0x230 [ 70.678891][ T5632] ? clear_bhb_loop+0x35/0x90 [ 70.683575][ T5632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.689477][ T5632] RIP: 0033:0x7fc60ff75bd9 [ 70.693888][ T5632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.713485][ T5632] RSP: 002b:00007fc610c93048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 70.721895][ T5632] RAX: ffffffffffffffda RBX: 00007fc610104038 RCX: 00007fc60ff75bd9 [ 70.729855][ T5632] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 000000000000000c [ 70.737813][ T5632] RBP: 00007fc610c930a0 R08: 0000000000000000 R09: 0000000000000000 [ 70.745772][ T5632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.753727][ T5632] R13: 000000000000006e R14: 00007fc610104038 R15: 00007ffd37f6d258 [ 70.761696][ T5632] [ 71.061422][ T5648] netlink: 'syz.0.156': attribute type 4 has an invalid length. [ 71.110156][ T5614] team0: left promiscuous mode [ 71.132144][ T5614] team_slave_0: left promiscuous mode [ 71.157787][ T5614] team_slave_1: left promiscuous mode [ 71.178262][ T5648] netlink: 'syz.0.156': attribute type 4 has an invalid length. [ 71.312770][ T5660] xfrm0: entered promiscuous mode [ 71.346342][ T5660] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 71.480223][ T5677] netlink: 28 bytes leftover after parsing attributes in process `syz.2.160'. [ 71.645724][ T5674] netlink: 88 bytes leftover after parsing attributes in process `syz.3.166'. [ 71.671230][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.678054][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.792043][ T5688] netlink: 24 bytes leftover after parsing attributes in process `syz.1.168'. [ 71.917838][ T5695] netlink: 40 bytes leftover after parsing attributes in process `syz.3.171'. [ 72.390823][ T5677] infiniband syz1: set active [ 72.422074][ T5677] infiniband syz1: added veth1_vlan [ 72.440730][ T5677] syz1: rxe_create_cq: returned err = -12 [ 72.465763][ T5677] infiniband syz1: Couldn't create ib_mad CQ [ 72.473756][ T5677] infiniband syz1: Couldn't open port 1 [ 72.551953][ T5736] netlink: 40 bytes leftover after parsing attributes in process `syz.3.184'. [ 72.587661][ T5677] RDS/IB: syz1: added [ 72.592184][ T5677] smc: adding ib device syz1 with port count 1 [ 72.618553][ T5677] smc: ib device syz1 port 1 has pnetid [ 73.378386][ T5777] FAULT_INJECTION: forcing a failure. [ 73.378386][ T5777] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.402176][ T5779] netlink: 'syz.0.198': attribute type 4 has an invalid length. [ 73.413253][ T5777] CPU: 0 PID: 5777 Comm: syz.1.197 Not tainted 6.10.0-rc6-syzkaller-01258-g2f5e6395714d #0 [ 73.423349][ T5777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 73.433415][ T5777] Call Trace: [ 73.436709][ T5777] [ 73.439655][ T5777] dump_stack_lvl+0x241/0x360 [ 73.444355][ T5777] ? __pfx_dump_stack_lvl+0x10/0x10 [ 73.449568][ T5777] ? __pfx__printk+0x10/0x10 [ 73.454173][ T5777] ? __pfx_lock_release+0x10/0x10 [ 73.459219][ T5777] should_fail_ex+0x3b0/0x4e0 [ 73.463915][ T5777] _copy_from_iter+0x1f6/0x1960 [ 73.468780][ T5777] ? __virt_addr_valid+0x183/0x520 [ 73.473913][ T5777] ? __pfx_lock_release+0x10/0x10 [ 73.478961][ T5777] ? __alloc_skb+0x28f/0x440 [ 73.483566][ T5777] ? __pfx__copy_from_iter+0x10/0x10 [ 73.488870][ T5777] ? __virt_addr_valid+0x183/0x520 [ 73.494083][ T5777] ? __virt_addr_valid+0x183/0x520 [ 73.499204][ T5777] ? __virt_addr_valid+0x44e/0x520 [ 73.504328][ T5777] ? __check_object_size+0x49c/0x900 [ 73.509628][ T5777] netlink_sendmsg+0x73d/0xcb0 [ 73.514413][ T5777] ? __pfx_netlink_sendmsg+0x10/0x10 [ 73.519715][ T5777] ? __import_iovec+0x536/0x820 [ 73.524580][ T5777] ? aa_sock_msg_perm+0x91/0x160 [ 73.529535][ T5777] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 73.534830][ T5777] ? security_socket_sendmsg+0x87/0xb0 [ 73.540308][ T5777] ? __pfx_netlink_sendmsg+0x10/0x10 [ 73.545610][ T5777] __sock_sendmsg+0x221/0x270 [ 73.550308][ T5777] ____sys_sendmsg+0x525/0x7d0 [ 73.555091][ T5777] ? __pfx_____sys_sendmsg+0x10/0x10 [ 73.560407][ T5777] __sys_sendmsg+0x2b0/0x3a0 [ 73.565004][ T5777] ? __pfx___sys_sendmsg+0x10/0x10 [ 73.570129][ T5777] ? trie_delete_elem+0x3ed/0x6a0 [ 73.575151][ T5777] ? bpf_trace_run2+0x1fc/0x540 [ 73.579998][ T5777] ? bpf_trace_run2+0x36e/0x540 [ 73.584876][ T5777] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 73.591190][ T5777] ? rcu_is_watching+0x15/0xb0 [ 73.595940][ T5777] ? trace_sys_enter+0x1f/0xd0 [ 73.600690][ T5777] do_syscall_64+0xf3/0x230 [ 73.605176][ T5777] ? clear_bhb_loop+0x35/0x90 [ 73.609844][ T5777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.615734][ T5777] RIP: 0033:0x7fae16b75bd9 [ 73.620161][ T5777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.639770][ T5777] RSP: 002b:00007fae1798c048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 73.648167][ T5777] RAX: ffffffffffffffda RBX: 00007fae16d04038 RCX: 00007fae16b75bd9 [ 73.656122][ T5777] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 000000000000000c [ 73.664079][ T5777] RBP: 00007fae1798c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 73.672041][ T5777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.680002][ T5777] R13: 000000000000006e R14: 00007fae16d04038 R15: 00007ffe37fe0228 [ 73.687976][ T5777] [ 73.707517][ T5782] netlink: 'syz.0.198': attribute type 4 has an invalid length. [ 74.148621][ T5809] __nla_validate_parse: 6 callbacks suppressed [ 74.148639][ T5809] netlink: 40 bytes leftover after parsing attributes in process `syz.4.208'. [ 74.369521][ T5818] netlink: 4 bytes leftover after parsing attributes in process `syz.4.210'. [ 74.398631][ T5818] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.409954][ T5818] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.428856][ T5818] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.451520][ T5818] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.532206][ T5833] netlink: 40 bytes leftover after parsing attributes in process `syz.0.211'. [ 74.700865][ T5838] netlink: 'syz.3.214': attribute type 4 has an invalid length. [ 74.899744][ T29] audit: type=1107 audit(1720353257.966:2): pid=5848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Za:87\}n|ΈLw [ 74.899744][ T29] v\.fiOql.z .*:3=z`C,9}nڂ[9v< [ 74.899744][ T29] `=kT5e9pE@"' [ 75.017709][ T5865] syz.3.219 uses obsolete (PF_INET,SOCK_PACKET) [ 75.179605][ T5871] netlink: 24 bytes leftover after parsing attributes in process `syz.4.224'. [ 75.354589][ T5884] netlink: 28 bytes leftover after parsing attributes in process `syz.4.228'. [ 75.382432][ T5873] netlink: 40 bytes leftover after parsing attributes in process `syz.1.226'. [ 75.383942][ T5884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.228'. [ 75.613568][ T5894] netlink: 40 bytes leftover after parsing attributes in process `syz.1.233'. [ 75.646665][ T5894] FAULT_INJECTION: forcing a failure. [ 75.646665][ T5894] name failslab, interval 1, probability 0, space 0, times 0 [ 75.700255][ T5894] CPU: 0 PID: 5894 Comm: syz.1.233 Not tainted 6.10.0-rc6-syzkaller-01258-g2f5e6395714d #0 [ 75.710268][ T5894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 75.720331][ T5894] Call Trace: [ 75.723603][ T5894] [ 75.726531][ T5894] dump_stack_lvl+0x241/0x360 [ 75.731207][ T5894] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.736411][ T5894] ? __pfx__printk+0x10/0x10 [ 75.741007][ T5894] ? __pfx___might_resched+0x10/0x10 [ 75.746295][ T5894] should_fail_ex+0x3b0/0x4e0 [ 75.750973][ T5894] ? netlbl_mgmt_add_common+0x57/0x1320 [ 75.756520][ T5894] should_failslab+0x9/0x20 [ 75.761026][ T5894] kmalloc_trace_noprof+0x6c/0x2c0 [ 75.766139][ T5894] netlbl_mgmt_add_common+0x57/0x1320 [ 75.771510][ T5894] ? apparmor_current_getsecid_subj+0xde/0x1b0 [ 75.777659][ T5894] ? end_current_label_crit_section+0x14e/0x180 [ 75.783907][ T5894] netlbl_mgmt_add+0x312/0x3a0 [ 75.788694][ T5894] ? __nla_parse+0x40/0x60 [ 75.793104][ T5894] ? __pfx_netlbl_mgmt_add+0x10/0x10 [ 75.798383][ T5894] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 75.804712][ T5894] genl_rcv_msg+0xb14/0xec0 [ 75.809208][ T5894] ? mark_lock+0x9a/0x350 [ 75.813535][ T5894] ? __pfx_genl_rcv_msg+0x10/0x10 [ 75.818572][ T5894] ? __pfx_lock_acquire+0x10/0x10 [ 75.823585][ T5894] ? __pfx_netlbl_mgmt_add+0x10/0x10 [ 75.828869][ T5894] ? __pfx___might_resched+0x10/0x10 [ 75.834165][ T5894] netlink_rcv_skb+0x1e3/0x430 [ 75.838932][ T5894] ? __pfx_genl_rcv_msg+0x10/0x10 [ 75.843969][ T5894] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 75.849279][ T5894] genl_rcv+0x28/0x40 [ 75.853254][ T5894] netlink_unicast+0x7f0/0x990 [ 75.858017][ T5894] ? __pfx_netlink_unicast+0x10/0x10 [ 75.863291][ T5894] ? __virt_addr_valid+0x183/0x520 [ 75.868401][ T5894] ? __check_object_size+0x49c/0x900 [ 75.873681][ T5894] ? bpf_lsm_netlink_send+0x9/0x10 [ 75.878794][ T5894] netlink_sendmsg+0x8e4/0xcb0 [ 75.883559][ T5894] ? __pfx_netlink_sendmsg+0x10/0x10 [ 75.888841][ T5894] ? __import_iovec+0x536/0x820 [ 75.893682][ T5894] ? aa_sock_msg_perm+0x91/0x160 [ 75.898616][ T5894] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 75.903897][ T5894] ? security_socket_sendmsg+0x87/0xb0 [ 75.909352][ T5894] ? __pfx_netlink_sendmsg+0x10/0x10 [ 75.914629][ T5894] __sock_sendmsg+0x221/0x270 [ 75.919299][ T5894] ____sys_sendmsg+0x525/0x7d0 [ 75.924065][ T5894] ? __pfx_____sys_sendmsg+0x10/0x10 [ 75.929361][ T5894] __sys_sendmsg+0x2b0/0x3a0 [ 75.933950][ T5894] ? __pfx___sys_sendmsg+0x10/0x10 [ 75.939056][ T5894] ? vfs_write+0x7c4/0xc90 [ 75.943503][ T5894] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 75.949821][ T5894] ? do_syscall_64+0x100/0x230 [ 75.954582][ T5894] ? do_syscall_64+0xb6/0x230 [ 75.959250][ T5894] do_syscall_64+0xf3/0x230 [ 75.963745][ T5894] ? clear_bhb_loop+0x35/0x90 [ 75.968415][ T5894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.974299][ T5894] RIP: 0033:0x7fae16b75bd9 [ 75.978702][ T5894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.998296][ T5894] RSP: 002b:00007fae1798c048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 76.006703][ T5894] RAX: ffffffffffffffda RBX: 00007fae16d04038 RCX: 00007fae16b75bd9 [ 76.014666][ T5894] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 000000000000000c [ 76.022624][ T5894] RBP: 00007fae1798c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 76.030586][ T5894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.038550][ T5894] R13: 000000000000006e R14: 00007fae16d04038 R15: 00007ffe37fe0228 [ 76.046524][ T5894] [ 76.348313][ T5917] netlink: 'syz.0.240': attribute type 4 has an invalid length. [ 76.414586][ T5921] netlink: 'syz.4.241': attribute type 4 has an invalid length. [ 76.480139][ T5929] netlink: 'syz.4.241': attribute type 4 has an invalid length. [ 76.502987][ T5930] netlink: 'syz.2.244': attribute type 4 has an invalid length. [ 76.537695][ T5930] netlink: 'syz.2.244': attribute type 4 has an invalid length. [ 76.703755][ T5943] netlink: 40 bytes leftover after parsing attributes in process `syz.2.251'. [ 76.710011][ T5938] netlink: 4 bytes leftover after parsing attributes in process `syz.1.248'. [ 76.800895][ T929] cfg80211: failed to load regulatory.db [ 77.235309][ T5970] netlink: 'syz.0.261': attribute type 4 has an invalid length. [ 77.496731][ T5977] netlink: 'syz.0.261': attribute type 4 has an invalid length. [ 78.427887][ T6025] team_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 78.459091][ T6027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.484406][ T6027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.528552][ T6027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.544863][ T6027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.908290][ T6048] team0: entered promiscuous mode [ 78.919299][ T6048] team_slave_0: entered promiscuous mode [ 78.926132][ T6048] team_slave_1: entered promiscuous mode [ 79.046424][ T6045] team0: left promiscuous mode [ 79.051230][ T6045] team_slave_0: left promiscuous mode [ 79.079276][ T6045] team_slave_1: left promiscuous mode [ 79.100501][ T6061] vlan2: entered promiscuous mode [ 79.402032][ T6079] __nla_validate_parse: 5 callbacks suppressed [ 79.402050][ T6079] netlink: 40 bytes leftover after parsing attributes in process `syz.2.296'. [ 79.864411][ T6112] netlink: 40 bytes leftover after parsing attributes in process `syz.3.306'. [ 80.479789][ T6146] netlink: 'syz.1.317': attribute type 4 has an invalid length. [ 80.598835][ T6153] netlink: 4 bytes leftover after parsing attributes in process `syz.4.318'. [ 80.794826][ T6153] batman_adv: batadv0: Adding interface: netdevsim0 [ 80.848130][ T6153] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.882502][ T6163] netlink: 24 bytes leftover after parsing attributes in process `syz.1.325'. [ 80.914663][ T6153] batman_adv: batadv0: Interface activated: netdevsim0 [ 81.060656][ T6167] netlink: 84 bytes leftover after parsing attributes in process `syz.1.327'. [ 81.326390][ T6185] tipc: Enabling of bearer rejected, media not registered [ 81.384982][ T6185] netlink: 'syz.0.331': attribute type 5 has an invalid length. [ 81.511555][ T6196] netlink: 28 bytes leftover after parsing attributes in process `syz.2.338'. [ 81.563134][ T6196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.338'. [ 81.787518][ T6215] netlink: 40 bytes leftover after parsing attributes in process `syz.2.343'. [ 82.034471][ T6230] netlink: 40 bytes leftover after parsing attributes in process `syz.0.347'. [ 82.061998][ T6230] FAULT_INJECTION: forcing a failure. [ 82.061998][ T6230] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.122572][ T6230] CPU: 1 PID: 6230 Comm: syz.0.347 Not tainted 6.10.0-rc6-syzkaller-01258-g2f5e6395714d #0 [ 82.132587][ T6230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 82.142654][ T6230] Call Trace: [ 82.145947][ T6230] [ 82.148888][ T6230] dump_stack_lvl+0x241/0x360 [ 82.153584][ T6230] ? __pfx_dump_stack_lvl+0x10/0x10 [ 82.158800][ T6230] ? __pfx__printk+0x10/0x10 [ 82.163428][ T6230] ? snprintf+0xda/0x120 [ 82.167696][ T6230] should_fail_ex+0x3b0/0x4e0 [ 82.172397][ T6230] _copy_to_user+0x2f/0xb0 [ 82.176837][ T6230] simple_read_from_buffer+0xca/0x150 [ 82.182230][ T6230] proc_fail_nth_read+0x1e9/0x250 [ 82.187273][ T6230] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 82.192838][ T6230] ? rw_verify_area+0x520/0x6b0 [ 82.197709][ T6230] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 82.203274][ T6230] vfs_read+0x204/0xbc0 [ 82.207449][ T6230] ? __pfx_lock_release+0x10/0x10 [ 82.211585][ T6236] netlink: 68 bytes leftover after parsing attributes in process `syz.4.353'. [ 82.212479][ T6230] ? __pfx_vfs_read+0x10/0x10 [ 82.226001][ T6230] ? __fget_files+0x29/0x470 [ 82.230614][ T6230] ? __fget_files+0x3f6/0x470 [ 82.235326][ T6230] ksys_read+0x1a0/0x2c0 [ 82.239594][ T6230] ? __pfx_ksys_read+0x10/0x10 [ 82.244378][ T6230] ? do_syscall_64+0x100/0x230 [ 82.249161][ T6230] ? do_syscall_64+0xb6/0x230 [ 82.253839][ T6230] do_syscall_64+0xf3/0x230 [ 82.258343][ T6230] ? clear_bhb_loop+0x35/0x90 [ 82.263019][ T6230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.268905][ T6230] RIP: 0033:0x7f8e0d5746bc [ 82.273312][ T6230] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 82.292912][ T6230] RSP: 002b:00007f8e0e2ac040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 82.301319][ T6230] RAX: ffffffffffffffda RBX: 00007f8e0d704038 RCX: 00007f8e0d5746bc [ 82.309284][ T6230] RDX: 000000000000000f RSI: 00007f8e0e2ac0b0 RDI: 000000000000000b [ 82.317246][ T6230] RBP: 00007f8e0e2ac0a0 R08: 0000000000000000 R09: 0000000000000000 [ 82.325205][ T6230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 82.333166][ T6230] R13: 000000000000006e R14: 00007f8e0d704038 R15: 00007ffc091e5548 [ 82.341143][ T6230] [ 82.479910][ T6249] xt_cgroup: invalid path, errno=-2 [ 82.579735][ T6254] netlink: 'syz.1.358': attribute type 16 has an invalid length. [ 82.601670][ T6254] netlink: 'syz.1.358': attribute type 3 has an invalid length. [ 83.059819][ T6283] netlink: 'syz.1.365': attribute type 4 has an invalid length. [ 83.170989][ T6285] netlink: 'syz.1.365': attribute type 4 has an invalid length. [ 83.231439][ T6288] vlan2: entered promiscuous mode [ 83.482429][ T6306] netlink: 'syz.1.370': attribute type 17 has an invalid length. [ 83.548931][ T6306] lo: entered promiscuous mode [ 84.180766][ T6295] lo: left promiscuous mode [ 84.347969][ T6356] netlink: 'syz.3.383': attribute type 4 has an invalid length. [ 84.609959][ T6368] __nla_validate_parse: 6 callbacks suppressed [ 84.609977][ T6368] netlink: 40 bytes leftover after parsing attributes in process `syz.3.386'. [ 84.772603][ T6374] netlink: 'syz.4.391': attribute type 3 has an invalid length. [ 85.038443][ T6384] netlink: 24 bytes leftover after parsing attributes in process `syz.1.392'. [ 85.064908][ T6384] netlink: 24 bytes leftover after parsing attributes in process `syz.1.392'. [ 85.091347][ T6382] netlink: 'syz.3.394': attribute type 4 has an invalid length. [ 85.156185][ T6396] xt_cgroup: invalid path, errno=-2 [ 85.411266][ T6407] netlink: 24 bytes leftover after parsing attributes in process `syz.1.402'. [ 85.520007][ T6413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.404'. [ 85.708377][ T6421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.408'. [ 85.844971][ T6425] netlink: 'syz.4.408': attribute type 1 has an invalid length. [ 85.893539][ T6424] netlink: 36 bytes leftover after parsing attributes in process `syz.1.409'. [ 86.553609][ T6466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.423'. [ 86.857182][ T6485] netlink: 40 bytes leftover after parsing attributes in process `syz.3.429'. [ 87.340586][ T6508] netem: incorrect ge model size [ 87.349678][ T6508] netem: change failed [ 87.511225][ T6532] netlink: 24 bytes leftover after parsing attributes in process `syz.1.445'. [ 87.558521][ T6537] xt_hashlimit: Unknown mode mask 242, kernel too old? [ 87.671973][ T6545] net_ratelimit: 17 callbacks suppressed [ 87.671990][ T6545] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 88.377536][ T6578] vlan2: entered promiscuous mode [ 88.393561][ T5096] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.402724][ T5096] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.410778][ T5096] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.420076][ T5096] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.432859][ T5096] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 88.440630][ T5096] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.745733][ T62] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.824120][ T62] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.957806][ T62] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.163779][ T62] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.542756][ T6582] chnl_net:caif_netlink_parms(): no params data found [ 89.665701][ T6639] unsupported nlmsg_type 40 [ 89.674642][ T62] bridge_slave_1: left allmulticast mode [ 89.680549][ T62] bridge_slave_1: left promiscuous mode [ 89.703202][ T6639] __nla_validate_parse: 3 callbacks suppressed [ 89.703218][ T6639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.473'. [ 89.719397][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.736100][ T6639] nbd: socks must be embedded in a SOCK_ITEM attr [ 89.743044][ T62] bridge_slave_0: left allmulticast mode [ 89.760754][ T62] bridge_slave_0: left promiscuous mode [ 89.777095][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.466198][ T5095] Bluetooth: hci4: command tx timeout [ 90.822877][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.837496][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.850214][ T62] bond0 (unregistering): Released all slaves [ 90.886950][ T6642] netlink: 'syz.2.474': attribute type 4 has an invalid length. [ 90.929161][ T6644] netlink: 'syz.2.474': attribute type 4 has an invalid length. [ 90.941962][ T6659] netlink: 5 bytes leftover after parsing attributes in process `syz.1.477'. [ 90.957154][ T6659] 0XD: renamed from gretap0 (while UP) [ 90.998993][ T6659] 0XD: entered allmulticast mode [ 91.010117][ T6663] netlink: 20 bytes leftover after parsing attributes in process `syz.1.477'. [ 91.078393][ T6668] netlink: 'syz.4.479': attribute type 5 has an invalid length. [ 91.187547][ T6678] tipc: Can't bind to reserved service type 0 [ 91.344698][ T6685] ip6t_srh: unknown srh match flags 4001 [ 91.399947][ T6684] netlink: 40 bytes leftover after parsing attributes in process `syz.4.484'. [ 91.431292][ T6694] netlink: 'syz.0.481': attribute type 11 has an invalid length. [ 91.671087][ T6708] xt_l2tp: v2 doesn't support IP mode [ 91.840364][ T6582] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.857567][ T6582] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.876335][ T6582] bridge_slave_0: entered allmulticast mode [ 91.892079][ T6582] bridge_slave_0: entered promiscuous mode [ 91.928743][ T6582] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.948459][ T6582] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.970730][ T6582] bridge_slave_1: entered allmulticast mode [ 91.983351][ T6582] bridge_slave_1: entered promiscuous mode [ 92.008268][ T6712] netlink: 36 bytes leftover after parsing attributes in process `syz.4.491'. [ 92.306472][ T6744] netlink: 'syz.4.494': attribute type 1 has an invalid length. [ 92.345664][ T6744] netlink: 'syz.4.494': attribute type 2 has an invalid length. [ 92.376103][ T6582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.416216][ T6582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.431471][ T6736] netlink: 112 bytes leftover after parsing attributes in process `syz.4.494'. [ 92.494879][ T6736] tipc: Started in network mode [ 92.524337][ T6736] tipc: Node identity aaaaaaaaaa0c, cluster identity 4711 [ 92.540036][ T6736] tipc: Enabled bearer , priority 16 [ 92.544343][ T5095] Bluetooth: hci4: command tx timeout [ 92.562528][ T6758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.498'. [ 92.729852][ T6582] team0: Port device team_slave_0 added [ 92.752110][ T62] hsr_slave_0: left promiscuous mode [ 92.792602][ T62] hsr_slave_1: left promiscuous mode [ 92.883254][ T62] veth1_macvtap: left promiscuous mode [ 92.895004][ T6771] Cannot find set identified by id 0 to match [ 92.905633][ T62] veth0_macvtap: left promiscuous mode [ 92.918997][ T62] veth1_vlan: left promiscuous mode [ 92.953150][ T62] veth0_vlan: left promiscuous mode [ 93.588257][ T62] team0 (unregistering): Port device team_slave_1 removed [ 93.620899][ T62] team0 (unregistering): Port device team_slave_0 removed [ 93.676990][ T5092] tipc: Node number set to 10922666 [ 93.890577][ T6582] team0: Port device team_slave_1 added [ 94.050508][ T6806] netlink: 40 bytes leftover after parsing attributes in process `syz.1.509'. [ 94.182361][ T6582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.196157][ T6582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.228294][ T6582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.287266][ T6582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.308140][ T6582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.382512][ T6582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.406556][ T6833] netlink: 'syz.1.515': attribute type 12 has an invalid length. [ 94.453525][ T6833] netlink: 197276 bytes leftover after parsing attributes in process `syz.1.515'. [ 94.492658][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 94.624232][ T5095] Bluetooth: hci4: command tx timeout [ 94.717048][ T6851] netlink: 'syz.0.518': attribute type 4 has an invalid length. [ 94.813892][ T6582] hsr_slave_0: entered promiscuous mode [ 94.845128][ T6582] hsr_slave_1: entered promiscuous mode [ 94.865012][ T6582] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.881640][ T6582] Cannot create hsr debugfs directory [ 94.890454][ T6853] netlink: 'syz.0.518': attribute type 4 has an invalid length. [ 94.950645][ T6862] netlink: 40 bytes leftover after parsing attributes in process `syz.2.523'. [ 95.005843][ T6866] netlink: 40 bytes leftover after parsing attributes in process `syz.4.524'. [ 95.358749][ T6891] netlink: 'syz.0.529': attribute type 3 has an invalid length. [ 95.384551][ T6891] netlink: 224 bytes leftover after parsing attributes in process `syz.0.529'. [ 95.432090][ T6896] sch_tbf: peakrate 7462380593465401512 is lower than or equals to rate 18428595723600419182 ! [ 95.955196][ T6921] netlink: 'syz.4.535': attribute type 4 has an invalid length. [ 95.992863][ T6923] netlink: 40 bytes leftover after parsing attributes in process `syz.2.536'. [ 96.054335][ T6924] netlink: 'syz.4.535': attribute type 4 has an invalid length. [ 96.495682][ T6955] netlink: 28 bytes leftover after parsing attributes in process `syz.4.545'. [ 96.609173][ T6582] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.656781][ T6582] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.679021][ T6968] netlink: 36 bytes leftover after parsing attributes in process `syz.4.549'. [ 96.704480][ T5095] Bluetooth: hci4: command tx timeout [ 96.729456][ T6582] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.751246][ T6582] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.827576][ T6972] netlink: 'syz.1.551': attribute type 4 has an invalid length. [ 96.863217][ T6975] netlink: 24 bytes leftover after parsing attributes in process `syz.4.552'. [ 96.869057][ T6976] netlink: 'syz.1.551': attribute type 4 has an invalid length. [ 96.872510][ T6975] netlink: 22800 bytes leftover after parsing attributes in process `syz.4.552'. [ 97.087111][ T6582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.107614][ T6980] netlink: 'syz.4.552': attribute type 10 has an invalid length. [ 97.136422][ T6980] netlink: 212412 bytes leftover after parsing attributes in process `syz.4.552'. [ 97.162527][ T6582] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.173497][ T6980] openvswitch: netlink: Flow key attr not present in new flow. [ 97.208556][ T5092] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.215768][ T5092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.263430][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.270636][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.352427][ T6994] netlink: 28 bytes leftover after parsing attributes in process `syz.4.557'. [ 97.555357][ T7007] --map-set only usable from mangle table [ 97.727441][ T7015] netlink: 'syz.4.562': attribute type 4 has an invalid length. [ 97.787359][ T7018] netlink: 'syz.1.563': attribute type 4 has an invalid length. [ 97.821623][ T7024] netlink: 'syz.4.562': attribute type 4 has an invalid length. [ 97.848688][ T7025] netlink: 'syz.1.563': attribute type 4 has an invalid length. [ 97.939534][ T7024] syz.4.562 (7024) used greatest stack depth: 18352 bytes left [ 98.041039][ T6582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.235909][ T7041] vlan2: entered promiscuous mode [ 98.344044][ T6582] veth0_vlan: entered promiscuous mode [ 98.388054][ T6582] veth1_vlan: entered promiscuous mode [ 98.532659][ T6582] veth0_macvtap: entered promiscuous mode [ 98.567551][ T6582] veth1_macvtap: entered promiscuous mode [ 98.655504][ T6582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.698517][ T6582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.731871][ T6582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.750470][ T6582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.762623][ T6582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.779857][ T6582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.799751][ T7078] netlink: 'syz.4.578': attribute type 4 has an invalid length. [ 98.845433][ T6582] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.886265][ T6582] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.907713][ T6582] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.918748][ T6582] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.128701][ T7092] hsr0: entered promiscuous mode [ 99.312302][ T7092] hsr0: left promiscuous mode [ 99.423940][ T7096] vlan2: entered promiscuous mode [ 99.544012][ T990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.594561][ T990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.650539][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.699185][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.827559][ T7129] xt_l2tp: missing protocol rule (udp|l2tpip) [ 100.158429][ T7146] __nla_validate_parse: 9 callbacks suppressed [ 100.158446][ T7146] netlink: 28 bytes leftover after parsing attributes in process `syz.2.593'. [ 101.636412][ T7272] netlink: 40 bytes leftover after parsing attributes in process `syz.4.624'. [ 102.170649][ T7308] validate_nla: 4 callbacks suppressed [ 102.170666][ T7308] netlink: 'syz.4.636': attribute type 1 has an invalid length. [ 102.209899][ T7304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.634'. [ 102.250187][ T7304] netlink: 12 bytes leftover after parsing attributes in process `syz.0.634'. [ 102.296709][ T7313] netlink: 36 bytes leftover after parsing attributes in process `syz.1.637'. [ 102.333277][ T7313] netlink: 20 bytes leftover after parsing attributes in process `syz.1.637'. [ 102.499998][ T7327] tun0: tun_chr_ioctl cmd 35108 [ 102.625422][ T7330] vlan2: entered promiscuous mode [ 102.794352][ T7352] netlink: 24 bytes leftover after parsing attributes in process `syz.1.647'. [ 102.931521][ T7359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.649'. [ 103.156952][ T7373] netlink: 40 bytes leftover after parsing attributes in process `syz.1.654'. [ 103.366702][ T7382] netlink: 'syz.1.659': attribute type 4 has an invalid length. [ 103.416647][ T7387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.658'. [ 103.458840][ T7389] netlink: 'syz.1.659': attribute type 4 has an invalid length. [ 103.736628][ T29] audit: type=1107 audit(1720353286.806:3): pid=7406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=':Y$nJ5 9Icc}֨ V}L(ΤO*?S\HSsdLY۞D|UsH;=' [ 103.772077][ T29] audit: type=1107 audit(1720353286.806:4): pid=7406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=':Y$nJ5 9Icc}֨ V}L(ΤO*?S\HSsdLY۞D|UsH;=' [ 103.945591][ T7403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.114068][ T7430] netlink: 'syz.4.671': attribute type 1 has an invalid length. [ 104.141575][ T7436] netlink: 'syz.1.673': attribute type 4 has an invalid length. [ 104.246218][ T7436] netlink: 'syz.1.673': attribute type 4 has an invalid length. [ 104.479285][ T7456] vlan3: entered promiscuous mode [ 104.917616][ T7491] netlink: 'syz.2.684': attribute type 10 has an invalid length. [ 105.008376][ T7491] team0: Port device syz_tun added [ 105.047832][ T7491] syz.2.684 (7491) used greatest stack depth: 18000 bytes left [ 105.352474][ T7516] vlan2: entered promiscuous mode [ 105.704905][ T7540] netlink: 'syz.0.700': attribute type 11 has an invalid length. [ 105.747919][ T7544] __nla_validate_parse: 3 callbacks suppressed [ 105.747936][ T7544] netlink: 84 bytes leftover after parsing attributes in process `syz.0.700'. [ 105.889179][ T7552] netlink: 'syz.0.702': attribute type 1 has an invalid length. [ 105.897736][ T7552] netlink: 'syz.0.702': attribute type 1 has an invalid length. [ 106.151532][ T7567] ip6tnl0: entered promiscuous mode [ 106.159134][ T7566] ip6tnl0: left promiscuous mode [ 106.598903][ T7595] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.716'. [ 107.557143][ T7673] netlink: 'syz.3.733': attribute type 9 has an invalid length. [ 107.578267][ T7673] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.733'. [ 107.743797][ T7678] netlink: 'syz.3.733': attribute type 9 has an invalid length. [ 107.782202][ T7678] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.733'. [ 107.946395][ T7698] netlink: 'syz.0.740': attribute type 4 has an invalid length. [ 108.002494][ T7698] netlink: 'syz.0.740': attribute type 4 has an invalid length. [ 108.101436][ T7701] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.110707][ T7701] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.119511][ T7701] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.128264][ T7701] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.168095][ T7709] netlink: 6 bytes leftover after parsing attributes in process `syz.4.744'. [ 108.209475][ T7705] netlink: 28 bytes leftover after parsing attributes in process `syz.3.742'. [ 108.640497][ T7754] xt_CT: You must specify a L4 protocol and not use inversions on it [ 108.791326][ T7766] netlink: 'syz.1.755': attribute type 4 has an invalid length. [ 108.862838][ T7770] netlink: 'syz.1.755': attribute type 4 has an invalid length. [ 109.070290][ T7791] x_tables: duplicate entry at hook 3 [ 109.142065][ T7796] netlink: 24 bytes leftover after parsing attributes in process `syz.4.762'. [ 109.245766][ T7800] netlink: 40 bytes leftover after parsing attributes in process `syz.3.760'. [ 109.299841][ T7804] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 4, id = 0 [ 109.387438][ T7809] Bluetooth: MGMT ver 1.22 [ 109.462860][ T7815] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-xor(2) [ 109.733842][ T7828] netlink: 8 bytes leftover after parsing attributes in process `syz.3.771'. [ 109.772666][ T7833] netlink: 24 bytes leftover after parsing attributes in process `syz.2.773'. [ 110.161644][ T7862] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 110.206414][ T7862] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 110.284283][ T7868] lo: entered allmulticast mode [ 110.427188][ T7865] lo: left allmulticast mode [ 111.517854][ T7883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.722316][ T7951] __nla_validate_parse: 4 callbacks suppressed [ 111.722333][ T7951] netlink: 20 bytes leftover after parsing attributes in process `syz.0.808'. [ 111.806951][ T7957] netlink: 'syz.3.809': attribute type 2 has an invalid length. [ 111.905344][ T7960] netlink: 24 bytes leftover after parsing attributes in process `syz.3.810'. [ 112.050443][ T7967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.810'. [ 112.082937][ T7967] netlink: 2 bytes leftover after parsing attributes in process `syz.3.810'. [ 112.129346][ T7960] netlink: 'syz.3.810': attribute type 1 has an invalid length. [ 112.164305][ T7960] netlink: 224 bytes leftover after parsing attributes in process `syz.3.810'. [ 112.194753][ T7960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.810'. [ 112.410730][ T7982] netlink: 32 bytes leftover after parsing attributes in process `syz.2.818'. [ 112.493004][ T7984] netlink: 'syz.3.819': attribute type 4 has an invalid length. [ 112.541990][ T7986] x_tables: ip_tables: CHECKSUM target: only valid in mangle table, not [ 112.541990][ T7986] [ 112.590458][ T7984] netlink: 'syz.3.819': attribute type 4 has an invalid length. [ 112.608678][ T7987] dccp_xmit_packet: Payload too large (65475) for featneg. [ 112.755535][ T7993] IPv6: NLM_F_REPLACE set, but no existing node found! [ 113.220106][ T8025] netlink: 20 bytes leftover after parsing attributes in process `syz.4.831'. [ 113.569768][ T8044] bridge0: entered promiscuous mode [ 113.657841][ T8044] bridge0: left promiscuous mode [ 114.229420][ T8093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.853'. [ 114.601049][ T8117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.861'. [ 115.035698][ T8149] netlink: 'syz.3.870': attribute type 4 has an invalid length. [ 115.253207][ T8164] batman_adv: batadv0: Interface deactivated: netdevsim0 [ 115.283500][ T8164] batman_adv: batadv0: Removing interface: netdevsim0 [ 115.706121][ T8196] netlink: 'syz.4.883': attribute type 4 has an invalid length. [ 115.918869][ T8210] xt_ecn: cannot match TCP bits for non-tcp packets [ 116.823357][ T8273] vlan3: entered promiscuous mode [ 116.879543][ T8275] netlink: 'syz.3.912': attribute type 10 has an invalid length. [ 116.898102][ T8275] __nla_validate_parse: 7 callbacks suppressed [ 116.898118][ T8275] netlink: 132 bytes leftover after parsing attributes in process `syz.3.912'. [ 116.982636][ T8282] netlink: 'syz.3.912': attribute type 7 has an invalid length. [ 117.015396][ T8282] netlink: 224 bytes leftover after parsing attributes in process `syz.3.912'. [ 117.099193][ T8294] raw_sendmsg: syz.1.918 forgot to set AF_INET. Fix it! [ 117.155424][ T8298] netlink: 40 bytes leftover after parsing attributes in process `syz.4.919'. [ 117.307886][ T8306] netlink: 'syz.2.921': attribute type 30 has an invalid length. [ 117.340848][ T8307] netlink: 'syz.1.922': attribute type 4 has an invalid length. [ 117.453626][ T8314] netlink: 'syz.3.925': attribute type 7 has an invalid length. [ 117.474465][ T8314] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 117.540558][ T8314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.925'. [ 117.670779][ T8324] netlink: 28 bytes leftover after parsing attributes in process `syz.2.928'. [ 117.704324][ T8324] netlink: 16 bytes leftover after parsing attributes in process `syz.2.928'. [ 117.769763][ T8330] netlink: 40 bytes leftover after parsing attributes in process `syz.1.930'. [ 117.809212][ T8328] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.929'. [ 117.860414][ T8337] netlink: 40 bytes leftover after parsing attributes in process `syz.3.929'. [ 117.984855][ T8349] No such timeout policy "syz0" [ 118.045388][ T8352] netlink: 40 bytes leftover after parsing attributes in process `syz.4.934'. [ 118.182256][ T8362] netlink: 'syz.3.938': attribute type 4 has an invalid length. [ 118.486037][ T8380] x_tables: duplicate underflow at hook 1 [ 118.792482][ T8399] netlink: 'syz.4.953': attribute type 4 has an invalid length. [ 118.996961][ T8410] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 119.028427][ T8410] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 119.445870][ T8441] netlink: 'syz.2.967': attribute type 4 has an invalid length. [ 119.470502][ T8438] ipvlan2: entered promiscuous mode [ 119.477390][ T8438] ipvlan2: entered allmulticast mode [ 119.513959][ T8438] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 120.777716][ T8518] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 121.269575][ T8553] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 121.492233][ T8560] netlink: 'syz.0.1002': attribute type 11 has an invalid length. [ 121.523606][ T8573] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 121.668557][ T8585] netlink: 'syz.4.1008': attribute type 4 has an invalid length. [ 121.686853][ T8584] tipc: Started in network mode [ 121.692485][ T8584] tipc: Node identity 1, cluster identity 4711 [ 121.712813][ T8584] tipc: Node number set to 1 [ 121.798250][ T8589] dccp_invalid_packet: P.Data Offset(224) too large [ 121.918871][ T8592] veth1_vlan: entered allmulticast mode [ 121.965142][ T8592] infiniband syz1: set down [ 122.254437][ T8619] netlink: 'syz.4.1014': attribute type 10 has an invalid length. [ 122.328735][ T8619] team0: Device hsr_slave_1 failed to register rx_handler [ 122.352971][ T8623] __nla_validate_parse: 15 callbacks suppressed [ 122.352987][ T8623] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1019'. [ 122.419904][ T8624] netlink: 'syz.3.1020': attribute type 4 has an invalid length. [ 122.787488][ T8647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1027'. [ 122.980731][ T8658] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1032'. [ 123.013532][ T8661] netlink: 'syz.1.1033': attribute type 3 has an invalid length. [ 123.094097][ T8667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1031'. [ 123.132985][ T8667] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.142944][ T8667] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.152400][ T8667] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.161223][ T8667] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.210339][ T8667] vxlan0: entered promiscuous mode [ 123.265444][ T8679] netlink: 'syz.0.1040': attribute type 1 has an invalid length. [ 123.398657][ T8688] tipc: Enabling of bearer rejected, failed to enable media [ 123.660449][ T8706] netlink: 'syz.1.1046': attribute type 4 has an invalid length. [ 123.672043][ T8705] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1045'. [ 123.733285][ T8710] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1047'. [ 123.748992][ T8710] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1047'. [ 123.823104][ T8719] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1050'. [ 123.853383][ T8722] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1050'. [ 124.049633][ T8736] can: request_module (can-proto-0) failed. [ 124.090149][ T8742] netlink: 'syz.0.1058': attribute type 4 has an invalid length. [ 124.188385][ T8750] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 124.202681][ T8747] sctp: [Deprecated]: syz.2.1057 (pid 8747) Use of int in max_burst socket option. [ 124.202681][ T8747] Use struct sctp_assoc_value instead [ 124.263544][ T8757] netlink: 'syz.3.1063': attribute type 10 has an invalid length. [ 124.301223][ T8757] batman_adv: batadv0: Adding interface: team0 [ 124.317920][ T8757] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.351483][ T8757] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 124.368719][ T8763] netlink: 'syz.3.1063': attribute type 10 has an invalid length. [ 124.387901][ T8759] netlink: 'syz.0.1064': attribute type 29 has an invalid length. [ 124.396267][ T8763] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1063'. [ 124.409145][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:172.20.20.170]:2. Sending cookies. [ 124.417910][ T8763] team0: entered promiscuous mode [ 124.427186][ T8763] team_slave_0: entered promiscuous mode [ 124.433141][ T8763] team_slave_1: entered promiscuous mode [ 124.441225][ T8763] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.448236][ T8763] batman_adv: batadv0: Interface activated: team0 [ 124.455582][ T8763] batman_adv: batadv0: Interface deactivated: team0 [ 124.462250][ T8763] batman_adv: batadv0: Removing interface: team0 [ 124.472013][ T8763] bridge0: port 3(team0) entered blocking state [ 124.478477][ T8763] bridge0: port 3(team0) entered disabled state [ 124.485373][ T8763] team0: entered allmulticast mode [ 124.490663][ T8763] team_slave_0: entered allmulticast mode [ 124.496602][ T8763] team_slave_1: entered allmulticast mode [ 124.504091][ T8763] bridge0: port 3(team0) entered blocking state [ 124.511291][ T8763] bridge0: port 3(team0) entered forwarding state [ 124.527119][ T8759] netlink: 'syz.0.1064': attribute type 29 has an invalid length. [ 124.538033][ T8766] netlink: 'syz.0.1064': attribute type 29 has an invalid length. [ 124.555244][ T8759] Bluetooth: MGMT ver 1.22 [ 124.561146][ T8768] netlink: 'syz.0.1064': attribute type 29 has an invalid length. [ 124.584287][ T8759] Bluetooth: hci3: invalid len left 7, exp >= 119 [ 124.697274][ T8779] netlink: 'syz.3.1066': attribute type 7 has an invalid length. [ 124.947111][ T8803] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.960795][ T8803] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.975311][ T8803] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.987778][ T8803] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.055597][ T8805] ipvlan2: entered promiscuous mode [ 125.061008][ T8805] ipvlan2: entered allmulticast mode [ 125.075155][ T8805] syz_tun: entered allmulticast mode [ 125.122281][ T8814] x_tables: duplicate underflow at hook 1 [ 125.393911][ T8831] openvswitch: netlink: ct_state flags 0000ee00 unsupported [ 125.403576][ T8833] 8021q: VLANs not supported on lo [ 125.639216][ T8851] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.659636][ T8851] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.687727][ T8851] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.719243][ T8851] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.765502][ T8860] xt_ecn: cannot match TCP bits for non-tcp packets [ 125.980124][ T8871] bond0: entered allmulticast mode [ 125.986348][ T8871] bond_slave_0: entered allmulticast mode [ 125.992105][ T8871] bond_slave_1: entered allmulticast mode [ 126.036450][ T8871] bridge0: port 3(team0) entered disabled state [ 126.042888][ T8871] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.051453][ T8871] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.817961][ T8921] bridge0: port 3(macvlan2) entered blocking state [ 126.844418][ T8921] bridge0: port 3(macvlan2) entered disabled state [ 126.851248][ T8921] macvlan2: entered allmulticast mode [ 126.864668][ T8921] macvlan2: entered promiscuous mode [ 126.923838][ T8923] macvlan2 (unregistering): left allmulticast mode [ 126.935175][ T8923] macvlan2 (unregistering): left promiscuous mode [ 126.943292][ T8923] bridge0: port 3(macvlan2) entered disabled state [ 127.359341][ T8956] __nla_validate_parse: 22 callbacks suppressed [ 127.359359][ T8956] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1128'. [ 127.429986][ T8962] Bluetooth: hci3: invalid length 0, exp 2 for type 30 [ 127.589099][ T8976] pim6reg0: tun_chr_ioctl cmd 1075377419 [ 127.596498][ T8977] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 127.602446][ T8977] pim6reg0: linktype set to 787 [ 127.859321][ T8987] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1139'. [ 127.892551][ T8993] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1141'. [ 127.937990][ T8994] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1142'. [ 127.953204][ T8994] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1142'. [ 127.974598][ T8998] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1144'. [ 128.163850][ T9008] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1148'. [ 128.228655][ T9014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1148'. [ 128.249960][ T9014] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1148'. [ 128.282951][ T9008] validate_nla: 5 callbacks suppressed [ 128.282967][ T9008] netlink: 'syz.1.1148': attribute type 1 has an invalid length. [ 128.299620][ T9008] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1148'. [ 128.389683][ T9018] netlink: 'syz.4.1152': attribute type 4 has an invalid length. [ 128.444755][ T9018] netlink: 'syz.4.1152': attribute type 4 has an invalid length. [ 129.236406][ T9076] netlink: 'syz.0.1166': attribute type 1 has an invalid length. [ 130.245777][ T9170] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge_slave_0 [ 130.311840][ T9173] netlink: 'syz.2.1194': attribute type 1 has an invalid length. [ 130.335963][ T9175] netlink: 'syz.4.1193': attribute type 4 has an invalid length. [ 130.396192][ T9175] netlink: 'syz.4.1193': attribute type 4 has an invalid length. [ 130.557212][ T9195] Cannot find set identified by id 4 to match [ 130.866874][ T9221] netlink: 'syz.3.1210': attribute type 4 has an invalid length. [ 131.020329][ T9236] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 131.092776][ T9243] vlan3: entered promiscuous mode [ 131.129060][ T9247] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 131.708883][ T9311] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 131.805773][ T9320] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 132.007905][ T9340] tipc: Started in network mode [ 132.012968][ T9340] tipc: Node identity 0000000000000000ffffffffffffffff, cluster identity 4711 [ 132.341339][ T9357] openvswitch: netlink: Geneve option length err (len 3060, max 255). [ 132.860684][ T9402] __nla_validate_parse: 29 callbacks suppressed [ 132.860703][ T9402] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1275'. [ 132.889572][ T9406] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1277'. [ 133.108587][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.116733][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.256653][ T9443] vlan2: entered promiscuous mode [ 133.262106][ T9443] xfrm0: entered promiscuous mode [ 133.275293][ T5095] Bluetooth: hci4: command 0x0405 tx timeout [ 133.276328][ T9443] team0: Port device vlan2 added [ 133.348836][ T9455] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1291'. [ 133.422681][ T9460] delete_channel: no stack [ 133.574856][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888071b41000: rx timeout, send abort [ 133.588888][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802bfe6400: rx timeout, send abort [ 133.618142][ T9468] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1295'. [ 133.677328][ T9475] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1296'. [ 133.910954][ T9491] netlink: 'syz.3.1300': attribute type 15 has an invalid length. [ 134.066887][ T9500] delete_channel: no stack [ 134.084291][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888071b41000: abort rx timeout. Force session deactivation [ 134.097217][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802bfe6400: abort rx timeout. Force session deactivation [ 134.291947][ T9512] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1308'. [ 134.377331][ T9526] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1311'. [ 134.429370][ T9506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1308'. [ 134.455201][ T9528] : renamed from ipvlan1 [ 134.658691][ T9542] netlink: 'syz.2.1319': attribute type 5 has an invalid length. [ 134.672971][ T9545] delete_channel: no stack [ 134.678031][ T9547] vlan2: entered promiscuous mode [ 134.768431][ T9552] team_slave_0: entered promiscuous mode [ 134.774395][ T9552] team_slave_1: entered promiscuous mode [ 134.783069][ T9554] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1320'. [ 134.796420][ T9552] macsec2: entered promiscuous mode [ 134.801857][ T9552] team0: entered promiscuous mode [ 134.815588][ T9552] macsec2: entered allmulticast mode [ 134.834958][ T9552] team0: entered allmulticast mode [ 134.840100][ T9552] team_slave_0: entered allmulticast mode [ 134.854384][ T9552] team_slave_1: entered allmulticast mode [ 134.866813][ T9552] team0: left allmulticast mode [ 134.872570][ T9552] team_slave_0: left allmulticast mode [ 134.878830][ T9552] team_slave_1: left allmulticast mode [ 134.891014][ T9552] team0: left promiscuous mode [ 134.899127][ T9552] team_slave_0: left promiscuous mode [ 134.904630][ T9552] team_slave_1: left promiscuous mode [ 135.071710][ T9570] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1328'. [ 135.102222][ T9570] netlink: zone id is out of range [ 135.119549][ T9570] netlink: zone id is out of range [ 135.138077][ T9570] netlink: zone id is out of range [ 135.148970][ T9570] netlink: zone id is out of range [ 135.161226][ T9570] netlink: zone id is out of range [ 135.271957][ T9580] nr0: tun_chr_ioctl cmd 2147767520 [ 135.459116][ T9594] netlink: 'syz.1.1337': attribute type 10 has an invalid length. [ 135.613875][ T9601] delete_channel: no stack [ 135.742010][ T9607] netlink: 'syz.0.1340': attribute type 25 has an invalid length. [ 135.751532][ T9607] netlink: 'syz.0.1340': attribute type 8 has an invalid length. [ 135.763277][ T9608] Unsupported ieee802154 address type: 0 [ 135.967749][ T9616] lo: entered promiscuous mode [ 136.145287][ T9622] rdma_op ffff88802b0989f0 conn xmit_rdma 0000000000000000 [ 136.354825][ T9636] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 136.706483][ T9653] net_ratelimit: 4 callbacks suppressed [ 136.706503][ T9653] openvswitch: netlink: Port 6910562 exceeds max allowable 65535 [ 136.722046][ T9610] lo: left promiscuous mode [ 137.298529][ T9704] x_tables: duplicate underflow at hook 1 [ 137.474440][ T9716] 0XD: renamed from gretap0 (while UP) [ 137.551361][ T9716] 0XD: entered allmulticast mode [ 137.730240][ T9728] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 137.742788][ T9733] netlink: 'syz.2.1381': attribute type 4 has an invalid length. [ 137.918833][ T9754] __nla_validate_parse: 9 callbacks suppressed [ 137.918852][ T9754] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1387'. [ 138.323757][ T9786] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1397'. [ 138.585869][ T9798] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1400'. [ 138.646308][ T9799] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1399'. [ 138.686594][ T9799] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1399'. [ 138.716655][ T9795] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1399'. [ 139.104375][ T9822] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1405'. [ 139.188087][ T9828] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1409'. [ 139.321072][ T9835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1411'. [ 139.443515][ T9839] netlink: 'syz.0.1412': attribute type 10 has an invalid length. [ 139.475185][ T9849] netlink: 868 bytes leftover after parsing attributes in process `syz.0.1412'. [ 139.531295][ T9839] team0: Port device netdevsim0 added [ 139.552306][ T9854] netlink: 'syz.0.1412': attribute type 10 has an invalid length. [ 139.591670][ T9839] Bluetooth: hci3: service_discovery: expected 25604 bytes, got 7 bytes [ 139.617530][ T9854] team0: Port device netdevsim0 removed [ 139.658828][ T9854] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 139.672410][ T9852] netlink: 'syz.3.1414': attribute type 10 has an invalid length. [ 139.689395][ T9852] batadv_slave_0: entered allmulticast mode [ 139.703401][ T9852] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 139.864622][ T9866] trusted_key: syz.4.1421 sent an empty control message without MSG_MORE. [ 140.226632][ T9902] vlan0: entered promiscuous mode [ 140.293150][ T9902] vlan0 (unregistering): left promiscuous mode [ 140.344067][ T9912] netlink: 'syz.3.1435': attribute type 4 has an invalid length. [ 140.874870][ T9953] netlink: 'syz.4.1447': attribute type 4 has an invalid length. [ 141.208316][ T9978] tipc: Failed to remove unknown binding: 66,1,1/10922666:4132173991/4132173993 [ 141.226958][ T9978] tipc: Failed to remove unknown binding: 66,1,1/10922666:4132173991/4132173993 [ 141.239263][ T9978] tipc: Failed to remove unknown binding: 66,1,1/10922666:4132173991/4132173993 [ 141.383051][ T9989] x_tables: unsorted underflow at hook 2 [ 141.456513][ T9994] syz.3.1458[9994] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 141.456663][ T9994] syz.3.1458[9994] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 141.474648][ T9994] netlink: 'syz.3.1458': attribute type 1 has an invalid length. [ 141.496959][ T9996] veth0_macvtap: left promiscuous mode [ 141.613869][T10000] xt_cgroup: path and classid specified [ 141.625466][T10000] netlink: zone id is out of range [ 141.631168][T10000] netlink: zone id is out of range [ 141.638241][T10000] netlink: zone id is out of range [ 141.643426][T10000] netlink: zone id is out of range [ 141.649507][T10000] netlink: zone id is out of range [ 141.655242][T10000] netlink: zone id is out of range [ 141.660652][T10000] netlink: zone id is out of range [ 141.666346][T10000] netlink: zone id is out of range [ 141.672502][T10000] netlink: zone id is out of range [ 141.743741][T10002] netlink: 'syz.4.1461': attribute type 4 has an invalid length. [ 141.800564][T10004] sit0: entered promiscuous mode [ 141.805974][T10004] sit0: entered allmulticast mode [ 141.896806][T10018] netlink: 'syz.2.1463': attribute type 1 has an invalid length. [ 141.909105][T10018] netlink: 'syz.2.1463': attribute type 1 has an invalid length. [ 141.950520][T10016] team0: Port device wlan1 added [ 141.958105][T10008] netlink: 'syz.2.1463': attribute type 5 has an invalid length. [ 143.016354][T10110] __nla_validate_parse: 22 callbacks suppressed [ 143.016373][T10110] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1494'. [ 143.042077][T10114] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1495'. [ 143.138926][T10121] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1500'. [ 143.215501][T10132] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1504'. [ 143.348760][T10144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1508'. [ 143.385900][T10147] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1509'. [ 143.426821][T10149] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 143.667111][T10159] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1514'. [ 143.676369][T10159] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1514'. [ 143.759587][T10166] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1517'. [ 143.885153][T10172] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1520'. [ 144.450999][T10207] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 144.473860][T10207] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 144.846571][T10235] net_ratelimit: 12 callbacks suppressed [ 144.846590][T10235] dccp_v4_rcv: dropped packet with invalid checksum [ 144.869584][T10235] sctp: [Deprecated]: syz.4.1537 (pid 10235) Use of struct sctp_assoc_value in delayed_ack socket option. [ 144.869584][T10235] Use struct sctp_sack_info instead [ 145.172188][T10261] team0: Device vlan3 is already an upper device of the team interface [ 146.237574][T10342] validate_nla: 8 callbacks suppressed [ 146.237592][T10342] netlink: 'syz.0.1574': attribute type 4 has an invalid length. [ 146.280220][T10342] netlink: 'syz.0.1574': attribute type 4 has an invalid length. [ 146.335555][T10348] netlink: 'syz.0.1575': attribute type 2 has an invalid length. [ 146.572075][T10361] netlink: 'syz.3.1579': attribute type 4 has an invalid length. [ 147.032841][T10389] netlink: 'syz.3.1586': attribute type 63 has an invalid length. [ 147.328154][T10407] bridge0: entered allmulticast mode [ 147.402436][T10413] bridge0: left allmulticast mode [ 147.713980][T10446] netlink: 'syz.2.1605': attribute type 1 has an invalid length. [ 147.723356][T10446] netlink: 'syz.2.1605': attribute type 4 has an invalid length. [ 147.981481][T10479] netlink: 'syz.4.1611': attribute type 10 has an invalid length. [ 148.002606][T10460] netlink: 'syz.4.1611': attribute type 10 has an invalid length. [ 148.032624][T10477] team0: Port device syz_tun removed [ 148.117471][T10487] __nla_validate_parse: 22 callbacks suppressed [ 148.117497][T10487] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1618'. [ 148.652749][T10526] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1632'. [ 148.900753][T10549] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1640'. [ 149.020844][T10545] xt_TCPMSS: Only works on TCP SYN packets [ 149.105675][T10565] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1644'. [ 149.315337][T10589] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1652'. [ 149.332724][T10585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1649'. [ 149.460240][T10598] netlink: 'syz.1.1649': attribute type 2 has an invalid length. [ 149.487827][T10604] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1658'. [ 149.529575][T10585] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1649'. [ 149.551853][T10607] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1656'. [ 149.655884][T10613] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1661'. [ 149.715917][T10618] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 149.883716][T10626] vlan2: entered promiscuous mode [ 149.935533][T10622] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 149.968067][T10622] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 150.051019][T10632] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 150.083969][T10627] pim6reg1: entered promiscuous mode [ 150.124174][T10627] pim6reg1: entered allmulticast mode [ 151.175411][T10694] macsec0: entered allmulticast mode [ 151.192316][T10694] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 151.531856][T10716] validate_nla: 7 callbacks suppressed [ 151.531873][T10716] netlink: 'syz.1.1692': attribute type 4 has an invalid length. [ 151.560073][T10716] netlink: 'syz.1.1692': attribute type 4 has an invalid length. [ 152.009687][T10749] netlink: 'syz.0.1703': attribute type 4 has an invalid length. [ 152.052565][T10751] vlan0: entered promiscuous mode [ 152.070336][T10749] netlink: 'syz.0.1703': attribute type 4 has an invalid length. [ 152.488867][T10774] netlink: 'syz.0.1713': attribute type 11 has an invalid length. [ 152.611694][T10787] netlink: 'syz.2.1716': attribute type 1 has an invalid length. [ 152.623924][T10787] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 152.631250][T10787] IPv6: NLM_F_CREATE should be set when creating new route [ 152.638568][T10787] IPv6: NLM_F_CREATE should be set when creating new route [ 152.801796][T10804] netlink: 'syz.2.1722': attribute type 3 has an invalid length. [ 153.223981][T10828] syzkaller0: entered promiscuous mode [ 153.236158][T10828] syzkaller0: entered allmulticast mode [ 154.668235][T10852] netlink: 'syz.2.1735': attribute type 4 has an invalid length. [ 154.843655][T10875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.946096][T10885] __nla_validate_parse: 25 callbacks suppressed [ 154.946116][T10885] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1744'. [ 155.104751][T10899] netlink: 'syz.1.1750': attribute type 4 has an invalid length. [ 155.146961][T10901] netlink: 'syz.2.1752': attribute type 2 has an invalid length. [ 155.295645][T10917] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1758'. [ 155.335622][T10919] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1759'. [ 155.399886][T10922] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1760'. [ 155.812007][T10954] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1774'. [ 155.937087][T10970] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1779'. [ 155.946571][T10974] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1780'. [ 155.982309][T10977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1781'. [ 156.001026][T10977] block nbd0: not configured, cannot reconfigure [ 156.088041][T10986] netlink: 209840 bytes leftover after parsing attributes in process `syz.1.1784'. [ 156.097307][T10987] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1785'. [ 156.509764][T11027] openvswitch: netlink: Message has 16 unknown bytes. [ 156.575635][T11010] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.779680][T11047] validate_nla: 9 callbacks suppressed [ 156.779699][T11047] netlink: 'syz.2.1795': attribute type 4 has an invalid length. [ 157.087034][T11076] netlink: 'syz.2.1809': attribute type 1 has an invalid length. [ 157.243773][T11081] syzkaller1: entered promiscuous mode [ 157.253259][T11081] syzkaller1: entered allmulticast mode [ 157.422662][T11102] netlink: 'syz.4.1815': attribute type 4 has an invalid length. [ 157.460184][T11102] netlink: 'syz.4.1815': attribute type 4 has an invalid length. [ 157.643245][T11123] netlink: 'syz.0.1822': attribute type 21 has an invalid length. [ 157.652166][T11123] netlink: 'syz.0.1822': attribute type 1 has an invalid length. [ 157.791837][T11134] x_tables: ip_tables: ah match: only valid for protocol 51 [ 157.817600][T11136] netlink: 'syz.1.1828': attribute type 4 has an invalid length. [ 157.851614][T11136] netlink: 'syz.1.1828': attribute type 4 has an invalid length. [ 157.886398][T11139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.088104][T11158] netlink: 'syz.1.1833': attribute type 3 has an invalid length. [ 158.457831][T11176] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 158.495466][T11178] bridge_slave_0: left allmulticast mode [ 158.501306][T11178] bridge_slave_0: left promiscuous mode [ 158.507267][T11178] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.520430][T11178] bridge_slave_1: left allmulticast mode [ 158.526574][T11178] bridge_slave_1: left promiscuous mode [ 158.532299][T11178] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.544178][T11178] bond0: (slave bond_slave_0): Releasing backup interface [ 158.559898][T11178] bond0: (slave bond_slave_1): Releasing backup interface [ 158.579632][T11178] team0: Port device team_slave_0 removed [ 158.596213][T11178] team0: Port device team_slave_1 removed [ 158.620591][T11178] xfrm0: left promiscuous mode [ 158.637496][T11178] team0: Port device vlan2 removed [ 158.649721][T11180] netlink: 'syz.0.1841': attribute type 4 has an invalid length. [ 158.767745][ T45] tipc: Resetting bearer [ 159.089710][T11211] lo: entered promiscuous mode [ 159.229480][T11208] lo: left promiscuous mode [ 159.352487][T11233] sctp: [Deprecated]: syz.3.1853 (pid 11233) Use of struct sctp_assoc_value in delayed_ack socket option. [ 159.352487][T11233] Use struct sctp_sack_info instead [ 159.581400][T11252] bond1: (slave vlan2): Opening slave failed [ 159.866890][T11264] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 159.988714][T11271] __nla_validate_parse: 23 callbacks suppressed [ 159.988733][T11271] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1867'. [ 160.159443][T11281] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1870'. [ 160.187685][T11283] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1871'. [ 160.984512][T11310] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1879'. [ 161.013327][T11320] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1881'. [ 161.105160][T11325] bridge12: entered promiscuous mode [ 161.117668][T11325] bridge12: entered allmulticast mode [ 161.317854][T11340] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1885'. [ 161.391305][T11340] netlink: 16074 bytes leftover after parsing attributes in process `syz.1.1885'. [ 162.375615][T11445] validate_nla: 7 callbacks suppressed [ 162.375633][T11445] netlink: 'syz.4.1913': attribute type 1 has an invalid length. [ 162.424282][T11445] netlink: 9324 bytes leftover after parsing attributes in process `syz.4.1913'. [ 162.447464][T11445] netlink: 'syz.4.1913': attribute type 1 has an invalid length. [ 162.450761][T11449] netlink: 'syz.1.1914': attribute type 2 has an invalid length. [ 162.485225][T11445] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1913'. [ 162.491887][T11449] netlink: 'syz.1.1914': attribute type 8 has an invalid length. [ 162.521393][T11449] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1914'. [ 163.060281][T11509] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.067505][T11509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.253640][T11519] xfrm0: entered promiscuous mode [ 163.271172][T11519] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 164.309245][T11600] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 164.331115][T11604] xt_hashlimit: overflow, rate too high: 0 [ 164.498234][T11618] netlink: 'syz.3.1957': attribute type 29 has an invalid length. [ 164.539560][T11618] netlink: 'syz.3.1957': attribute type 29 has an invalid length. [ 164.574684][T11630] netlink: 'syz.3.1957': attribute type 29 has an invalid length. [ 164.687608][T11637] netlink: 'syz.4.1961': attribute type 5 has an invalid length. [ 164.772145][T11637] : entered promiscuous mode [ 164.802426][T11644] macsec1: entered promiscuous mode [ 164.823867][T11644] macvlan1: entered promiscuous mode [ 164.830867][T11644] macsec1: entered allmulticast mode [ 164.837899][T11644] macvlan1: entered allmulticast mode [ 164.879387][T11644] macvlan1: left allmulticast mode [ 164.890939][T11644] macvlan1: left promiscuous mode [ 164.938719][T11652] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551614) [ 164.952110][T11652] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 165.058696][T11657] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 165.075565][T11663] __nla_validate_parse: 12 callbacks suppressed [ 165.075585][T11663] netlink: 9412 bytes leftover after parsing attributes in process `syz.2.1970'. [ 165.339896][T11687] netlink: 'syz.4.1977': attribute type 4 has an invalid length. [ 165.395141][T11687] netlink: 'syz.4.1977': attribute type 4 has an invalid length. [ 165.845649][T11727] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1987'. [ 166.065405][ T5096] Bluetooth: hci3: command 0x1407 tx timeout [ 166.072150][ T5095] Bluetooth: hci3: Opcode 0x1407 failed: -110 [ 166.193756][T11760] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1998'. [ 166.218000][T11760] IPv6: NLM_F_REPLACE set, but no existing node found! [ 166.233340][T11761] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1998'. [ 166.249062][T11761] IPv6: NLM_F_REPLACE set, but no existing node found! [ 166.267554][ T5143] IPVS: starting estimator thread 0... [ 166.281343][T11760] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 166.318110][T11765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2001'. [ 166.333262][T11761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1998'. [ 166.346496][T11761] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1998'. [ 166.374471][T11768] IPVS: using max 19 ests per chain, 45600 per kthread [ 166.390052][T11774] team0: entered promiscuous mode [ 166.415343][T11774] team_slave_0: entered promiscuous mode [ 166.444682][T11774] team_slave_1: entered promiscuous mode [ 166.538295][T11789] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2005'. [ 166.560676][T11789] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2005'. [ 166.608896][T11773] team0: left promiscuous mode [ 166.622522][T11773] team_slave_0: left promiscuous mode [ 166.633947][T11773] team_slave_1: left promiscuous mode [ 166.711122][T11793] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 166.751055][T11803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2010'. [ 167.081060][T11828] bond0: entered promiscuous mode [ 167.086394][T11828] bond_slave_0: entered promiscuous mode [ 167.092214][T11828] bond_slave_1: entered promiscuous mode [ 167.098111][T11828] vlan2: entered promiscuous mode [ 167.104080][T11828] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 167.114743][T11828] bond0: left promiscuous mode [ 167.119523][T11828] bond_slave_0: left promiscuous mode [ 167.126304][T11828] bond_slave_1: left promiscuous mode [ 167.131804][T11828] vlan2: left promiscuous mode [ 167.274397][ T2814] ================================================================== [ 167.282493][ T2814] BUG: KASAN: slab-use-after-free in l2tp_tunnel_del_work+0x114/0x330 [ 167.290663][ T2814] Read of size 8 at addr ffff8880715a10c0 by task kworker/u8:7/2814 [ 167.298646][ T2814] [ 167.300975][ T2814] CPU: 1 PID: 2814 Comm: kworker/u8:7 Not tainted 6.10.0-rc6-syzkaller-01258-g2f5e6395714d #0 [ 167.311216][ T2814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 167.321271][ T2814] Workqueue: l2tp l2tp_tunnel_del_work [ 167.326738][ T2814] Call Trace: [ 167.330024][ T2814] [ 167.332962][ T2814] dump_stack_lvl+0x241/0x360 [ 167.337645][ T2814] ? __pfx_dump_stack_lvl+0x10/0x10 [ 167.342838][ T2814] ? __pfx__printk+0x10/0x10 [ 167.347433][ T2814] ? _printk+0xd5/0x120 [ 167.351576][ T2814] ? __virt_addr_valid+0x183/0x520 [ 167.356689][ T2814] ? __virt_addr_valid+0x183/0x520 [ 167.361823][ T2814] print_report+0x169/0x550 [ 167.366347][ T2814] ? __virt_addr_valid+0x183/0x520 [ 167.371473][ T2814] ? __virt_addr_valid+0x183/0x520 [ 167.376599][ T2814] ? __virt_addr_valid+0x44e/0x520 [ 167.381725][ T2814] ? __phys_addr+0xba/0x170 [ 167.386243][ T2814] ? l2tp_tunnel_del_work+0x114/0x330 [ 167.391625][ T2814] kasan_report+0x143/0x180 [ 167.396144][ T2814] ? l2tp_tunnel_del_work+0x114/0x330 [ 167.401533][ T2814] l2tp_tunnel_del_work+0x114/0x330 [ 167.406739][ T2814] ? process_scheduled_works+0x945/0x1830 [ 167.412458][ T2814] process_scheduled_works+0xa2c/0x1830 [ 167.417996][ T2814] ? __pfx_process_scheduled_works+0x10/0x10 [ 167.423963][ T2814] ? assign_work+0x364/0x3d0 [ 167.428543][ T2814] worker_thread+0x86d/0xd50 [ 167.433131][ T2814] ? __kthread_parkme+0x169/0x1d0 [ 167.438148][ T2814] ? __pfx_worker_thread+0x10/0x10 [ 167.443247][ T2814] kthread+0x2f0/0x390 [ 167.447312][ T2814] ? __pfx_worker_thread+0x10/0x10 [ 167.452414][ T2814] ? __pfx_kthread+0x10/0x10 [ 167.456994][ T2814] ret_from_fork+0x4b/0x80 [ 167.461402][ T2814] ? __pfx_kthread+0x10/0x10 [ 167.465983][ T2814] ret_from_fork_asm+0x1a/0x30 [ 167.470743][ T2814] [ 167.473746][ T2814] [ 167.476059][ T2814] Allocated by task 11833: [ 167.480465][ T2814] kasan_save_track+0x3f/0x80 [ 167.485129][ T2814] __kasan_kmalloc+0x98/0xb0 [ 167.489702][ T2814] __kmalloc_noprof+0x1f9/0x400 [ 167.494540][ T2814] l2tp_session_create+0x3b/0xc20 [ 167.499550][ T2814] pppol2tp_connect+0xca3/0x17a0 [ 167.504482][ T2814] __sys_connect+0x2df/0x310 [ 167.509075][ T2814] __x64_sys_connect+0x7a/0x90 [ 167.513836][ T2814] do_syscall_64+0xf3/0x230 [ 167.518335][ T2814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.524219][ T2814] [ 167.526526][ T2814] Freed by task 5086: [ 167.530485][ T2814] kasan_save_track+0x3f/0x80 [ 167.535157][ T2814] kasan_save_free_info+0x40/0x50 [ 167.540186][ T2814] poison_slab_object+0xe0/0x150 [ 167.545128][ T2814] __kasan_slab_free+0x37/0x60 [ 167.549887][ T2814] kfree+0x149/0x360 [ 167.553777][ T2814] __sk_destruct+0x58/0x5f0 [ 167.558272][ T2814] rcu_core+0xafd/0x1830 [ 167.562501][ T2814] handle_softirqs+0x2c4/0x970 [ 167.567254][ T2814] __irq_exit_rcu+0xf4/0x1c0 [ 167.571830][ T2814] irq_exit_rcu+0x9/0x30 [ 167.576062][ T2814] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 167.581686][ T2814] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 167.587660][ T2814] [ 167.589969][ T2814] Last potentially related work creation: [ 167.595664][ T2814] kasan_save_stack+0x3f/0x60 [ 167.600326][ T2814] __kasan_record_aux_stack+0xac/0xc0 [ 167.605685][ T2814] call_rcu+0x167/0xa70 [ 167.609825][ T2814] pppol2tp_release+0x24b/0x350 [ 167.614661][ T2814] sock_close+0xbc/0x240 [ 167.618888][ T2814] __fput+0x24a/0x8a0 [ 167.622854][ T2814] task_work_run+0x24f/0x310 [ 167.627443][ T2814] syscall_exit_to_user_mode+0x168/0x360 [ 167.633069][ T2814] do_syscall_64+0x100/0x230 [ 167.637648][ T2814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.643532][ T2814] [ 167.645841][ T2814] The buggy address belongs to the object at ffff8880715a1000 [ 167.645841][ T2814] which belongs to the cache kmalloc-1k of size 1024 [ 167.659882][ T2814] The buggy address is located 192 bytes inside of [ 167.659882][ T2814] freed 1024-byte region [ffff8880715a1000, ffff8880715a1400) [ 167.673753][ T2814] [ 167.676067][ T2814] The buggy address belongs to the physical page: [ 167.682466][ T2814] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x715a0 [ 167.691214][ T2814] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 167.699709][ T2814] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 167.707252][ T2814] page_type: 0xffffefff(slab) [ 167.711916][ T2814] raw: 00fff00000000040 ffff888015041dc0 ffffea0001c72800 dead000000000002 [ 167.720486][ T2814] raw: 0000000000000000 0000000080100010 00000001ffffefff 0000000000000000 [ 167.729064][ T2814] head: 00fff00000000040 ffff888015041dc0 ffffea0001c72800 dead000000000002 [ 167.737722][ T2814] head: 0000000000000000 0000000080100010 00000001ffffefff 0000000000000000 [ 167.746376][ T2814] head: 00fff00000000003 ffffea0001c56801 ffffffffffffffff 0000000000000000 [ 167.755030][ T2814] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 167.763687][ T2814] page dumped because: kasan: bad access detected [ 167.770093][ T2814] page_owner tracks the page as allocated [ 167.775789][ T2814] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 35, tgid 35 (kworker/u8:2), ts 62136713506, free_ts 62125875976 [ 167.797577][ T2814] post_alloc_hook+0x1f3/0x230 [ 167.802338][ T2814] get_page_from_freelist+0x2e4c/0x2f10 [ 167.807871][ T2814] __alloc_pages_noprof+0x256/0x6c0 [ 167.813059][ T2814] alloc_slab_page+0x5f/0x120 [ 167.817722][ T2814] allocate_slab+0x5a/0x2f0 [ 167.822211][ T2814] ___slab_alloc+0xcd1/0x14b0 [ 167.826871][ T2814] __slab_alloc+0x58/0xa0 [ 167.831183][ T2814] kmalloc_node_track_caller_noprof+0x281/0x440 [ 167.837414][ T2814] kmalloc_reserve+0x111/0x2a0 [ 167.842163][ T2814] __alloc_skb+0x1f3/0x440 [ 167.846568][ T2814] inet6_rt_notify+0xdf/0x290 [ 167.851227][ T2814] fib6_add+0x1e33/0x4430 [ 167.855544][ T2814] ip6_ins_rt+0x106/0x170 [ 167.859858][ T2814] __ipv6_ifa_notify+0x5d2/0x1230 [ 167.864869][ T2814] addrconf_dad_completed+0x181/0xcd0 [ 167.870230][ T2814] addrconf_dad_work+0xdc2/0x16f0 [ 167.875241][ T2814] page last free pid 5086 tgid 5086 stack trace: [ 167.881548][ T2814] free_unref_page+0xd22/0xea0 [ 167.886303][ T2814] __put_partials+0xeb/0x130 [ 167.890876][ T2814] put_cpu_partial+0x17c/0x250 [ 167.895627][ T2814] __slab_free+0x2ea/0x3d0 [ 167.900035][ T2814] qlist_free_all+0x9e/0x140 [ 167.904611][ T2814] kasan_quarantine_reduce+0x14f/0x170 [ 167.910052][ T2814] __kasan_slab_alloc+0x23/0x80 [ 167.914891][ T2814] kmalloc_node_trace_noprof+0x166/0x300 [ 167.920507][ T2814] __get_vm_area_node+0x113/0x270 [ 167.925512][ T2814] __vmalloc_node_range_noprof+0x3bc/0x1460 [ 167.931387][ T2814] vzalloc_noprof+0x79/0x90 [ 167.935874][ T2814] alloc_counters+0xd7/0x740 [ 167.940445][ T2814] do_ipt_get_ctl+0xecc/0x1810 [ 167.945192][ T2814] nf_getsockopt+0x299/0x2c0 [ 167.949765][ T2814] ip_getsockopt+0x222/0x2e0 [ 167.954343][ T2814] tcp_getsockopt+0x163/0x1c0 [ 167.959007][ T2814] [ 167.961314][ T2814] Memory state around the buggy address: [ 167.966924][ T2814] ffff8880715a0f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 167.975055][ T2814] ffff8880715a1000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 167.983097][ T2814] >ffff8880715a1080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 167.991143][ T2814] ^ [ 167.997284][ T2814] ffff8880715a1100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 168.005327][ T2814] ffff8880715a1180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 168.013367][ T2814] ================================================================== [ 168.021518][ T2814] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 168.028714][ T2814] CPU: 1 PID: 2814 Comm: kworker/u8:7 Not tainted 6.10.0-rc6-syzkaller-01258-g2f5e6395714d #0 [ 168.038955][ T2814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 168.049097][ T2814] Workqueue: l2tp l2tp_tunnel_del_work [ 168.054554][ T2814] Call Trace: [ 168.057820][ T2814] [ 168.060737][ T2814] dump_stack_lvl+0x241/0x360 [ 168.065403][ T2814] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.070586][ T2814] ? __pfx__printk+0x10/0x10 [ 168.075170][ T2814] ? vscnprintf+0x5d/0x90 [ 168.079486][ T2814] panic+0x349/0x860 [ 168.083371][ T2814] ? check_panic_on_warn+0x21/0xb0 [ 168.088476][ T2814] ? __pfx_panic+0x10/0x10 [ 168.092884][ T2814] ? mark_lock+0x9a/0x350 [ 168.097206][ T2814] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 168.103089][ T2814] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 168.108970][ T2814] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 168.115292][ T2814] ? print_report+0x502/0x550 [ 168.119967][ T2814] check_panic_on_warn+0x86/0xb0 [ 168.124897][ T2814] ? l2tp_tunnel_del_work+0x114/0x330 [ 168.130262][ T2814] end_report+0x77/0x160 [ 168.134497][ T2814] kasan_report+0x154/0x180 [ 168.138989][ T2814] ? l2tp_tunnel_del_work+0x114/0x330 [ 168.144352][ T2814] l2tp_tunnel_del_work+0x114/0x330 [ 168.149539][ T2814] ? process_scheduled_works+0x945/0x1830 [ 168.155241][ T2814] process_scheduled_works+0xa2c/0x1830 [ 168.160782][ T2814] ? __pfx_process_scheduled_works+0x10/0x10 [ 168.166752][ T2814] ? assign_work+0x364/0x3d0 [ 168.171328][ T2814] worker_thread+0x86d/0xd50 [ 168.175916][ T2814] ? __kthread_parkme+0x169/0x1d0 [ 168.180926][ T2814] ? __pfx_worker_thread+0x10/0x10 [ 168.186025][ T2814] kthread+0x2f0/0x390 [ 168.190081][ T2814] ? __pfx_worker_thread+0x10/0x10 [ 168.195181][ T2814] ? __pfx_kthread+0x10/0x10 [ 168.199759][ T2814] ret_from_fork+0x4b/0x80 [ 168.204168][ T2814] ? __pfx_kthread+0x10/0x10 [ 168.208745][ T2814] ret_from_fork_asm+0x1a/0x30 [ 168.213503][ T2814] [ 168.216716][ T2814] Kernel Offset: disabled [ 168.221036][ T2814] Rebooting in 86400 seconds..