last executing test programs: 5.414898398s ago: executing program 2 (id=3573): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e24, @remote}, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000002c0)={0x0, 0x900, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="410000000000000001000603000014000300060afc04090300f006e8ffff00000001080007003a3a2f09140002"], 0x44}, 0x1, 0x1000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) r5 = socket(0x10, 0x3, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r1) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r8, &(0x7f0000001040)={0x27, r10, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) sendmsg$NFC_CMD_LLC_SET_PARAMS(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r7, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0xd0}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x2}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8}, 0x20000000) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x10fffffc, 0x10000, 0x0, 0xfffffffe}, 0x10) write(r5, &(0x7f0000000000)="240000001a00590214f9f407000904101f00000000000000000000000800040001000000", 0x24) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) 4.905443034s ago: executing program 2 (id=3579): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r0, 0x0, 0x0) write$ppp(r0, &(0x7f00000002c0)='{\r\x00\x00\x00w', 0x6) openat$tun(0xffffff9c, &(0x7f00000001c0), 0xe000, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) (async) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) (async) read(r0, 0x0, 0x0) (async) write$ppp(r0, &(0x7f00000002c0)='{\r\x00\x00\x00w', 0x6) (async) openat$tun(0xffffff9c, &(0x7f00000001c0), 0xe000, 0x0) (async) 4.595478781s ago: executing program 2 (id=3583): r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_getnexthop={0x20, 0x6a, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NHA_MASTER={0x8, 0xa, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20001024}, 0x40) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa00000, 0x0) ioctl$TUNSETVNETHDRSZ(r6, 0x400454d8, &(0x7f0000000280)=0xff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r7) sendmsg$DEVLINK_CMD_PORT_GET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x3c, r8, 0x1, 0xffffffff, 0x0, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)={0x188, r8, 0x100, 0x70bd28, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0xba2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x7b37}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x401}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xcc5}, {0x6, 0x11, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x101}, {0x6, 0x11, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x1ff}}]}, 0x188}, 0x1, 0x0, 0x0, 0x20000000}, 0x90) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) 4.348614935s ago: executing program 2 (id=3586): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000840)=@deltaction={0x140, 0x31, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x54, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x14, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x84, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3c59}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd9cc}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff7}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x100}}]}]}, 0x140}}, 0x4004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="6a0ac4ff0000000071109d000000000095"], &(0x7f0000000480)='GPL\x00', 0x3}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'geneve1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x58840}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x400000008000f28, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@typedef={0xe, 0x0, 0x0, 0x8, 0x1}, @ptr={0xe, 0x0, 0x0, 0x2, 0x5}, @var={0x6, 0x0, 0x0, 0xe, 0x4, 0x1}]}, {0x0, [0x0]}}, &(0x7f00000006c0)=""/138, 0x43, 0x8a, 0x1ff, 0x1, 0x10000}, 0x28) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1e00000000000000040000e00100000012040000cf79fd491a7257eb15a6b4895473bdce6984206069ba9da761238090238c76661d7d1c739d37297a3c0fe365585211159cb51849f2ba24abaaa5619be95bef13f19dfeec79806d55a812f2741d41d12d28e3301b73116edda5bb186c5a", @ANYRES32=r4, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0400000002000000030000000900"/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000940), 0xfffe, r6}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r6, &(0x7f0000000080), &(0x7f0000001300)=""/4096}, 0x20) getsockopt$sock_buf(r0, 0x1, 0x4d, 0x0, &(0x7f0000000140)) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000240)="27050200340f14000600002fb96dbcf706060000170008005f45f491bdd54ec5ff1144ee162fd4b8bf7256da82f600102c21880b00000000010040570000000600004000000000805db18f", 0x4b}, {&(0x7f0000002280)="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", 0xeff}, {&(0x7f00000000c0)="04c018a32678eac1a2b734703ac8b07c75", 0x11}], 0x3}, 0x9cdc2384056b48b8) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0x80000000, 0x8}, 0xc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r8, &(0x7f00000002c0)="81051c7525facd9426cc5b5a1ba41ff19bebd925db6fc72a5d764cfee16a2420412951b7d82d5d7182f910f5ba1ea649c9a29dc712095da6d773e3870aca876321a577da79cb8495277d4cbd2b03540ddf29a9be89cb5daed9b34f257b0863aa496a7211d441aff940eefff866a84864eb7864d5c5d18f5ef99aa14093d0b664ca1caee0e7255ebb4953dd5c62ef1849e6f6f4a1d788a48ec72b6849c59df20ec0a7", &(0x7f0000000100)=@udp6=r0, 0x4}, 0x20) ioctl$SIOCGETSGCNT(r0, 0x89e1, &(0x7f0000000040)={@broadcast, @empty}) 3.576682507s ago: executing program 1 (id=3594): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="2c0000001d005f80004000000000000002000000000000000000080008000100000000ff5b1844ad30c8ac46", 0x2c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="03009000"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/188, 0xbc}, {&(0x7f0000000840)=""/245, 0xf5}, {&(0x7f0000000000)=""/44, 0x2c}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000001940)=""/4102, 0x1006}, {&(0x7f0000000040)=""/74, 0x4a}, {&(0x7f00000004c0)=""/6, 0x6}, {&(0x7f00000006c0)=""/243, 0xf3}], 0x8}, 0x5}], 0x4, 0x20, 0x0) 2.478504986s ago: executing program 0 (id=3596): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="01961405e2648f776fc30e811dd03c816afdc0d98b0def32641716f49cee1456b88dec6563d17e8b343389451e64418a762a12daf427d7d667977f91fa53", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x5}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r5 = socket$can_raw(0x1d, 0x3, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random='\x00\x00\x00\x00]\x00', @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @broadcast, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @remote}}}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="05000000000000000000000000e370cfacbb", @ANYRES32=r4, @ANYBLOB="04003400"], 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000440)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x70, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x1e}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x4044018}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009"], 0x7c}}, 0x0) r10 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r10, 0x84, 0x9, &(0x7f0000000380), 0x98) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x400000}, 0x10) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c0000001600010000000000fcffffff0a000000", @ANYRES32=0x0, @ANYBLOB="140007"], 0x2c}}, 0x0) write(r8, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc0280200003031e000500e1000c0400070080000900", 0x33a) 2.416756175s ago: executing program 1 (id=3597): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00e\x00\a'], 0x20}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x0, 0x4, 0x8301, 0x7, 0x0, 0x2, 0x2fd, 0x100000}}) 2.416462204s ago: executing program 3 (id=3598): sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x1, 0x4, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f91624fc60100c214002000014050582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 2.253317329s ago: executing program 3 (id=3600): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xad}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32) r0 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newtaction={0x24c, 0x30, 0x1, 0x0, 0x0, {}, [{0x238, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0xe4}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8}]}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x1b4, 0xc, 0x0, 0x0, {{0x8}, {0x144, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x6211cb98, 0x0, 0x4, 0x5, 0x2}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0xffff0000, 0x4, 0xd, 0x6}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff0000ff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x0, 0x3, 0x6, 0x1}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x93, 0x4, 0x6, 0x8c42, 0x9f4}, @local, @remote, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x7, 0x1, 0x9, 0xe}, @dev={0xac, 0x14, 0x14, 0x1a}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7ff, 0xfff, 0x2, 0xe000, 0x2}, @multicast1, @rand_addr=0x64010100}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x7, 0x4, 0x2, 0x5}, @private=0xa010102, @rand_addr=0x64010102, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x3, 0x7, 0x6, 0x2}, @private=0xa010102, @loopback, 0xffffff00}}]}, {0x4b, 0x6, "dd1f9ce6c137f0f088e7e6baabc747eb6106674069132dc847dc69eb0c5d97fd2a86d03ab1ecf74f1d9773d617bce6cf1aa66b3f5330ba1465791b94d754d61a942057d76f3cd5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x24c}}, 0x0) 2.16016813s ago: executing program 4 (id=3601): syz_emit_ethernet(0x43f, &(0x7f0000000000)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x2, 0x6, "55ff13", 0x409, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3d}, {[@fragment={0x0, 0x0, 0xe4, 0x0, 0x0, 0x5, 0x67}, @srh={0x1d, 0x12, 0x4, 0x9, 0x7, 0x18, 0xc, [@loopback, @local, @private2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00', @remote, @ipv4={'\x00', '\xff\xff', @empty}]}, @srh={0x3c, 0x10, 0x4, 0x8, 0xfd, 0x68, 0x100, [@empty, @loopback, @dev={0xfe, 0x80, '\x00', 0x25}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @loopback, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}]}, @routing={0xc, 0x4, 0x2, 0x2, 0x0, [@rand_addr=' \x01\x00', @rand_addr=' \x01\x00']}, @srh={0x32, 0x10, 0x4, 0x8, 0x3, 0x20, 0x9b0, [@empty, @remote, @loopback, @private0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, @loopback]}], @ndisc_ns={0x87, 0x0, 0x0, @private2, [{0xe, 0x18, "dd00f52e7771695de00f9ee1dbbf1398e302701d9289b3a3e867ccc06c14570cd111e033bd72e5cb250581e4cc29065c2e4f17a43b06338be227e724c97efbcfa97c0abf613abd73797884a655d7edf25aa534d387735114a465e823ce7e681d2f9c2a06b9ed4250b7bac3a0eaa822daa294d1232583eb0f2e9249b09ecffb886a22531be8e286bb58b838d24770f28c371e5f87b225ea3fc4e77083db0255db05047e6ebd58a99905f48661efb1049177a4af1d8779dadecb35fe3e16ee293dfa81"}, {0x1, 0x12, "de4e82f00b9e6503cd56e91e63d0ae522cbbef0568c272dc21577a05b0d30c7d6b8355556a6b45a76e7866753410864be9b5f271f77b1e1f71a449e901f5224a9fbc5a92c600ac86cbad11a514406583ec8acb4c67ee2e69d140f48da16168f05b6e0c86df6d20dfb606a53f5f1272f89fb0508e293529ba8a686c06d271f9854768e0e06edc0538a188546d2a45d2f8b8"}, {0x22, 0x18, "0fa5f637582d8dbdba01b668589904b90b819d4d4e187df76723220a61d6ada14414b0fd5242118b88ffdcfda119363714fce0c2b431197522f0874e6431a0a4bc2a2cd6541d512622b6ecc10205ab1f7062868f301ecfcc7cfbe7c80d2249d0103c9834cfa95de85c2e331a5e6c12f941fcb3e1cc047c3cd5dc1470b6ea9cdd69eccb6775d3667f0602b9b99b6568c0ea6a7cd26256c720f423ff411742160293a6232c7b632b9983c9a3c00aa9f3cc285dbae85223e299711c73a01dab23b9a9cd6f63"}]}}}}}}, &(0x7f0000000440)={0x1, 0x3, [0x848, 0x28a, 0x87e, 0xf86]}) (async, rerun: 32) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x2, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000024) (async, rerun: 32) r0 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$FIOCLEX(r0, 0x5451) (async) sendmmsg$sock(r0, &(0x7f0000004640)=[{{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f00000005c0)="2e679a63644fcec9af8a38948e15e7b827dd2814884c531a9bbea544ed723d959ebb43c6eee8eb90ba006125e9aa6031c946a87a375541b3f53e0a65b8c8e2d7f9d230c7aa1a9735df9b7477bf9f64abbb11278600b78dc6f46cf586ea79d5e68ccd1fa4c9096d48765b76248439208db2450ee02c6ef13c298fadc1e46fb1e0e0ab833f55571bf5f8ea8b706e8860ccad8a1e6a904a3bcc0b44188f3dd4a34d0d8bc02be806a3b52b4ad28c142e5457428dd0c791c2a0311d", 0xb9}, {&(0x7f0000000680)="cdbd332f0cb4979438003128ab51fbe4d690c770a4264da769e574ca68c1e746f3de127265002e38f599b72dea86296781f0f6a9943a794aed5adba5c616c843a641205e6058893823a35ffe6bdd1d6cf3ed1afcef667b9744260400e224ad291cdd791859cc9953415ea1706bc1e15b31ae754240bd2ca64c7e19095f877c5c0db1b7837b9957e5126c24ea11de9a3998d3274ee9f2132c7a8be69bb21c71508c30554e47997a1452682c612d7472f740a3153b4e4cb789209c6bc41097509923c65063a4b4d8b50458e95568c3137665a47a5ad3add4e1fa3daa3fd7925ba7e40ea60cef6634ec", 0xe8}, {&(0x7f0000000780)="f96e6673a25fba9dfe918ffd509380aaf2ade44cb657387554beb440d74499dba992f5617328b622c093db64a6c62c03f9697d032ab2db3da5074308863d21b1535e0b73ef9dd9fd6fc9bfa8404f0863990f1b2d4b35f9c4639aa5c596abbe659da30f3334e8ad18ab3c6b281d64", 0x6e}, {&(0x7f0000000800)="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", 0x1000}, {&(0x7f0000001800)="0f401d0f57e5191ebada6242711a0c1f77d357783b0c8ae88163e22c9e5ef8b735627712b97351d5d0f7bbfa88bb9f135df785a7ec482e9158387de5062ef1b3af13a915a79f0507ca944f667cdf444093a4abf3ada434447e0ce73c4bc8d4b45002f7abc4511cee4ab5a0b296da99179c4514856bf4692d8d5e4624efc68cba7f23be589c021f086df05900209d9a8050a9ae2710895222f86b6282ae", 0x9d}, {&(0x7f00000018c0)="c3a3c8d7588279794de417b20c7d144dd593e3962666352c5357b3388421869dc489490f1a1af5eeff0317afc30059c4b75fc3f35b67e78e184eae23775fd7548e50209988c53d04d193d5fc87168beacc2ebda835dc403e90fd2b3876c22207fb9cfb12d6d11f3ce49b4da92c0e06fc9d5aeec2af4f333a1f46b827eda5cc97587b080b2e0256d514d4b10a", 0x8c}, {&(0x7f0000001980)="bda8700051528da21c69d7eb34cfffe4e8ff3de0d66f4690b2ba2e0f73654463d67f029e67cefb17d8a2280936777ce6b162b6e2f28f04a7f25041e60b2448c94b72d76eae19ce072eaf1d0d395bff1378c7adfe77b68e81856236240e9ee866dfbacd4826e6dbee48a2ba680c467cbbc3c75bbe4d9e66f248d856be45e7e4390a0b975981358b02c8", 0x89}], 0x7}}, {{&(0x7f0000001ac0)=@caif=@dbg={0x25, 0x9, 0xe}, 0x80, &(0x7f0000003000)=[{&(0x7f0000001b40)="7c59016d2cfee1113a1048e83c963722f4edb08ba240b00ca9f8c30849f8d55db3e97a02a6b725452d6cc3189cbb40bd3f5bf829056c133157bbd67ecee11723cf0ea2e36922931b12d68cc15366b0eb7fbf64ff1e8f8d89806b6b1f42ac3734b7abcb1e6cdd", 0x66}, {&(0x7f0000001bc0)="53bdf68dca901e58df51833bc50c3b78640d2ea5da48d76ef6fc525abdf6d666916af8d2b3f15779e5e273179d12f54ce71ad1b2056b7b50839c5e85b92f1efe1aec2956326d856a1cffffadeae928226ba3d7256b1795f5fb12716f4d54eac0e51fd9bddf1c2a3d8f9b15f263e3f0c6ebe3b8ddf220e5eb8abc4f67724e6bf2d3aa7154c0930a0dbb988a0d02431dd251794d7d0413e99cfabb2843fddbb62525d3ff5bd54ff72d08138191eb567d135a18b5d8969658c08e6d01355168c196fc1abc74ac7b841d57753da66f8e7d", 0xcf}, {&(0x7f0000001cc0)="10fdb36d4c3b53a9cdbde8033a988ce72ad5821a9b4556ac666cb332ad3607c48bc56b1674ebd9841c5ee282e9f167fa836ef0cfae948f005a6e8d76651d0c588e8a62c71735e4c91eb2f86d4218b8a39e2cd012be9991fdf8ef56d0cca786cd4e931f5d1d657fe280cd055fc145802239186b2d59211d1bf4d98dc55d2155f001fd073c9983f3daa86fae3b3bb5c5870caf119fe695d9e412af5024c3305097d908cd53816fa0661b1890cab1ebdec385e1e7289761d13c1f054a65dd7099c6fab23bcbb752d7060b617cb15decda7f296a8a3d6fe9af7382d641749244a6ab35357fe4ed", 0xe5}, {&(0x7f0000001dc0)="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", 0x1000}, {&(0x7f0000002dc0)="67a7af16644a57e8c4ecd8fbd4bc900d8283255251f1b03df65b5f8dfa5346383a31b0f4d954d973e33c02aa23b2eb85f78865f9fe09d2c0c0024da8babedc306916f9e74737fcf209fc1068e5f2ed83bb7d728f8b08ec61ae8e4f82769c760ae13c0159a6ebfbd12d2f77682235fad0bc6a93a9ca606b2df578745c4af9c298bff58a4b60067031f75a7859a8f46a00477da74519cd31a35ffcf480e974ef47a9f1a1cfcd7347991f97aca21438a25054dc5cd16a71fb619cdf46f7f74e8d02a99acb39400febed760a6bc3a160f7839c7f4489cdf3c07aee9d404a498d44955c0623af889612035e3bcfb1e04d1d039fab7089", 0xf4}, {&(0x7f0000002ec0)="bb4d739637", 0x5}, {&(0x7f0000002f00)="59b4c7132475e72df26bed4cfb66292e4e29971b97efc3e911d68a07293f6a8606a2d6bd600e76c1e7f53e0217bd0ed82fc22d4b1a84ce5366d194f83ea6a54db5afbaeb18b38256883ba603cfd0289505317ebce39c232a1becfffdaec3546c6d7a5022fcd149d2dab9785257a5cd8165d26cf766bccc4692da6e0ff3e203520bc2a3a4063ce8148d45fb794b4a1f8322036f8bc3019865aeaac57ec280ab738099f5f159552c72998dae68e82996f40d678674d10acf7beb17a0208110a49c58a46502b20298675787eb8ba9a1642d9eabe12003314677243dbbb33b", 0xdd}], 0x7, &(0x7f0000003080)=[@txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffff}}, @mark={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x3ff}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x7f}}, @timestamping={{0x14, 0x1, 0x25, 0xfc}}, @mark={{0x14, 0x1, 0x24, 0xa3}}], 0xd8}}, {{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000003180)="81b528ed3327750af4", 0x9}], 0x1}}, {{0x0, 0x0, &(0x7f00000044c0)=[{&(0x7f0000003200)="4031d6d3bd7b86858c2758c041365f102ffda338bfdacb1e6bd4df73ba462445fbeae70f6c7b75bd5c5390f04f3f061cfd", 0x31}, {&(0x7f0000003240)="212df30cef07c4fad16a5361eef19fa374ed8286c93619054daaec05bc978260d0ba95402acedd1932a5ce884993289ca30f0fa9d58f92a3330a274fec39fd56d2fafd8b6faabb2e63b46e2f2efd0b857d62428d2028dc30df84a0a1d54969e01abc05a1a81a8e0942b60a7558c2380fcd136ec65cd0fb47d5a363fdec94362d8109a1776f7eb5145b2f762f05fa883cffd00d39d0", 0x95}, {&(0x7f0000003300)="1e61ba3591e813aa5283f1a73fa89a8f6a3c607d7361efd6ec2174c6cb95fbfc5052b57a623587d07ee87aa155cea50053a98e57a501f9b1bb26e7f0f9916ef80e5890c98d4655865b548e89e4c8f70aa08e5363b0da6e2d44abe0876bde6a1789e5247df9c3fd0c8553a9672849a08c56786d554695c77784e51705e37a", 0x7e}, {&(0x7f0000003380)="3cf15a04c5ae00b1eaaf6a7b073931c25b831cc8e9e29ce59f0efc11bec71cc0d8f38438047e404f256697e57b9262735ca02c816bf5e1f3f6", 0x39}, {&(0x7f00000033c0)="6ea769f1b821dca97f200756c6351d47987b33d6ac0605734240cf9ce703987c172982eb45091537fb673f4cb528fb0b57494792f52686015b1ff92e196f4f2235fc779507a2f6c8fbece2922b42a7c67f3ed0a8b456c89d175de4b522ffddbedfc81b9f0fd8b822d964a1d88589cc4db720a49eb47f53", 0x77}, {&(0x7f0000003440)="8b02c5609ede1081e10c81660c399de7fc8e5198c0e4f6c65bc4fd40873a68cb653069739f77d11efbc8cdadd8f5b55c1fa6a8da963b71376f3e009ebf399001d69b39326da265fce8242b81ef0a6f83fb9ffaef0b33", 0x56}, {&(0x7f00000034c0)="386d6d328bda986c7b38703c91d4c87a67226cb3196c22a277b0be79d0f1328163e41def6e1f14eabcc4e3c2eb766ce1a179789ed86101170ee70214213b6879d4441910cd482294f5d94dfe53609dc8dec2b2c29cf5a3118a31272e6659315c27bace52a85f980b4f5b5ffd8a9dfa7d51b94513bffeb2f1f42ca5dffadd63602c0436d1f4d4806945d4b962d0a3b01e5548552b1206f778a1bbc3a7f84de80bd2aa84317b5ae831b5464be59c48fff64701b16be85c72d795a33dcf1c9325dd1182b16c06c1d9e6cc9b8a6996cc74e4bc7e33d1704e121de92211b34811618937284a213ae48b48411a6ea62b366e88c1f37b01f4c1607fbe16da883c48654f91b38227f104203e2187ebe89da18a4d33c937fb78e061f4c10ac1540489df6809ba851d8d8899664d57372a583a08bb67876116b26c2c993e652c0b0c8b03c35a0fcfbe33a0d986fc25ece58e3028a2b5c59f1ed57c49d47fa543c9068d92602461df7aac7e9289b0982e39ed2e76f1351b3e065727a0e730b5f344791dff6dd9f2e5c67fb5e0a6e819461c4da24654184de0e05015dbd7307af100fb4bd686cb5c4dc96e53d69460a55340bf22cfd450dbbfbc2de29934e7dd41563de58f91ec6e88b2c70756a1f005f35f04190abae5b4797967f2a46c120f4351e8d59d1c981246d0e9ce32c83fe8ffd093112c019810e06cfa9e8663cecae6bb5d4cdb0c3d4147a1454a4c62451eb4b899be2971d1f8bfbcc4d801ae8fba48cfdf63fc4e4a735172634446925e34a938252384a735b7937ad2eaa73f0e28ed739b90a947bc05469ba6b442c7d271d3ce70097327eedbfed92db69b7980ec311f77cd0a610f22f72af86ee9c50cefe2d59dce07f9829014f9e7ce2109396e12fe2a1fafd9d5520aad266b125dac1478debbe5fea1e75190bd2880ccee8deb2e6757b61b1b99325dae2973a9d1b07d7945619814b4497e1eeabf126460c687d3ba99f07ef78f1e2e681cc5eee99047dbccf43762e14a318148b17af94acd95e4ee3c677937bf1c866d4de85be940cb7214f499f4f365ee3e58d7e147d4830390f71d7b1cfeab1d425cc7e3d03baa19af83045d43230eeead2ffeb822e10682eed14bbe9c3bf38264c57d9dbecd4a1a23df9b5448b9cc7e45c1c0766130b46fe8f24a87acbccf7fd8cd5f5d33e95a7cce19aa09186b3b37063b5c073401ddacf90f16d55805db7102f0de4ef5bd006cd4cfc1011b3d2a461d700b5a63aacfce43e65e7d3711b407ada28180346e6071986a3933db16603769bd19520451c2d81f8569bea859b0b610c35e0106c91479d0bd978058d0e03850332a72482977f44680d2f3f9381628f8ca69519b15f9f4c1c0e810e2b313ce258590bcad1f9e838b54e9f3a53cd32ff801fd9120e16313b2319083bc92849ffcd78329bf8b6432cc6d5fcb20bf4fb3b7adabad75a779d7435019ed506dda6bd96f3f6118b719ec70ed6994ee309196a17537545912e6fae1f3eb567981f06dfcccb7220ad1dd8e6c0cb43971e0cb134e2f90f23ea118b33f7b03768845cdb0ecd36be5c101b341382c65861655ad83d84c86a86a7920926592ce40472afd9a2dc7c8dffd8477493bb433bd4f65b17cb981b451ecc1df7906690ae3246dc84882808c29c042974ee534fbe37a971ca7d310715b1ad7c296a6908edde69634af903e7af97a87b54699488aa2e267f3d86349a21437541859cae44edaec7bc82b21e0998a5bd5840cf2ebe098e9b8061e7b4cf0a21a59331762473ae8958d8d63ed2081ca80adcc927b0ae7ac9e55c4e24d254a2cfa7008dd782d0674806a3d6e9d76bf100e3b2f4c91dd4198e5df8c08d3f6352d4aa9fef4b96424cb75396113de53ef309e27a8cae81d5b648d389d76db49b4130b4a9c4fa261a5a82cd6cf096c2611d7c7c2a5a9ab5df7207533630f0cb3b73c216c1b63c43d8aa9a924445bb2d604a88a70fb0e64b1516a7c3bad6260ab6587ad489f9a28d7087b761ce4f73d79f71681a031c76b50f0b7a0f4eda115e1ddbf121bbf66678f3e134eb6ce22e32f17a55df884bba6bd66e7e2c107379f6f8d6fb67bf38a155a49a5e00dae11486ea305be07225c40296186eba18376cda361cdf9bb461c762b1ebbaf4aef6fdb949ef4f3dc32529ccc05e34246449e274b22889495279d4f138b3f7c7e8e14157898925672644f5d4b2000ac9693363907c85b250730f00d7aed234cf8aeb18d64b2e24ce92c8a49a358ca0849695914dce50f12023b5bfc79a117f612d7994d5e72749f6f7d69bd022cc5687b8987b618d3867e4099e8fac54a478d4f9f3d7f4b14cff33a588b502dd179d93abbe6d0ea2b5ebb706bdd014f08caec6ca8a92e18cd6f588ad60ba6dd10795c42303327ce6c36b89a5470436fc779fc6ea5d97581c79fc1c55cf892cc155469fc39a76f69d8821f7d8be94e74fead11e05c35fe674e8af42dc42f3f4818990b92896792fdc08fc79e8129c54a0c86f3b4e906f65acc2110900a2b51710e9953cbf2c2804df0b9ccb573d9e32aa9ec7a76f5d5dda2459d0f4adcc1e6d9b56da76f57f15db78ccfe76ecb2e33ac250d7b75c1b516d2912330a91322dbee12d7db521629fd7d06cd3c7f008ed1848ced5796ad567a96a765bddf94b665e3253f6dbaf425bf988b6de4a84df696c476ac2fa6ea27fe7628e1c2ad8d2bc63b5d302719577233b5795f78f22f11ef74f947b23a4e9a3abf1ac985643b54fb5db4950389e383f3e32bd9baf5da796c4c863d4f2b4b9c5938a533f85d44ffce3a8f3cad607eb28d2cbde90bdc2921351c76bf78ae57eb7e741162f21a8cef9a9fdf7ae8bf42bce063effcd293c8ed0747c48fb5f089c7e189134230f866ed7ab601ad7be056fee8d41adf3cd0f671bb8f855d4f21eed5f297f34db25071199649128cad82ae95446a11fb1803d5f11b307f957a56809f6000bc4bd70aca0b58953211aeffeb8f5878a08bdf77c68a4dfaaac121cbc2f2be9c72faaa6ed29c5ad767ce339b34d5a29c1e3bfbe57de3c9f023a2befbcf099e572be1df49f7aa41b6c42343c2dd232ec6d14ee9f29d9aa5b45fa928d5cbe5d6e697c548a57c78b5483f01901b9463761fcf2dccc0bf37cd9c74aba8db2331e16558cb49375e987b9912eeb9d9b302b52cbf237392463ec418821d8c4c9dfdfea2fcb1246468794f06964ffa349427d5a9d2ccd35ef88e3ea26acbe6916871d5add34787a99f6eca18c020d1e523b1954dc0ccdd8469a95c412ffe1b21b9cb80af74dba599c9893ed1e3ee5988c95e3eca1912cb3d39c08e94f7236d09b7adfd93f50629dd32143a34c98b2804be139d209083ea58349056641b25c69805e2e92599b11be9a317fc5c93fd8d138e433faf563eb01d47b5c704c3e24429701277e7392d85d7a664bd7e5ecb1215ec2cc12b27134fab782a5767c440980477f3f5bfea01f8fd157989b88b3afc3fffc863ddb3d44548344efc413696973e720ef91d858d0d6177251bf3dbe1669c01e3c96cd33d73962df45cf2454194a300b178de0e82d100bd0c7a2249a936e4bfd0b3770175a3537658ee484e488a48cecfe7f07358300eb2f3ebf2386e55ca145b5500868d3d62220bbb5055104c1d827ce93a80b829218437e3ec7edc5e99d346f73d997fb7cebafea6b4905c9db17447d24f2d0c2d572cd4606d0fe0e3afc69711ec8fc899f1ca3a5bffc37f7bb2cb9f9db062c17c5045ae46581296051c96edb60304d681125b5ea682b9e21f7ce880db33fc088e2236deffd9917164f3beb57c89e352305ac9c2943d14d92293b54c2d7d76fe1d1ab6d0bf8978733f8494d06c954bc979be876373337aad06bf32bd65d6d75d4317e48f26640f6932cc1314ab175980728b4440163f9699dd35a69f3af54eb3876a416fab2015880471c62e784a2cf7746f9b63c0d9cc727f01c996b64b3d491a1fcb2ba02d4adf641fab45eeb61e3f18f046808f5f9de04979fbf6c1adcbd0c49bfa9da4cd3f0ee9ff2037a9a85ef44b7060485066090b28fc97d2e8f3efbde4204709053c048a9032d84af0a51c016a25e56b77ca39f6714b219b45e4341771396095521c1f95649e6361ed5d7c4045e5faa2f075572db7bee7179d2adea96f4a9b99308a70136ae8da264bf545c845c8e2c473f6fdfe7b1ca0bc48718f0d2f636e04f75dc83ddde0a6526dbe01615752aa0c35dbae3e0b45667df6054666b31cd684bf063007c09402716cbb15887a8acdac94ea465493a3de8afce444de5819ef02bf740aa8afca6267ca61089d5eff9598d67061ad8d7c65bbee624c24f48ae8241c4c14c8b17eca2d73691f82914f6ec86cd6c4e21dd62ea46373432ca0901561746a41037d4a5cc46395ea3f66f290578fea0fd4b1e9b09815b72a2ff4097dda6b990f40efe7cc4a49e96892105b78355253848ed35f01bf3a64fd4d0f1d18d05db0388ec086a7769ccb71717993441be5a72c6bb2e71b4c9b6d16a661ca1cde8e6f51b5c78b05de5536aa96782a49424ec0e60ec4de2fac767901731f719c423282d7e0ad42b3b2a8d83929fefa9dca03bbdc43efa9804303d07f7eb19c00f1654772b35ba2331d81fbdbc8780e7b7d0679e94f84a915dda569c4a4aab169cc85255bab4752585b14e036753821dc833fd44e2c3b641790e5416026b814d055224ee3a031224dd251392bc5e37ced5c5896f91b88e33c2f034bc6629976de942d7b40f6af30ebd9bcbcf4b6b7e5d02ba00a041e3923e996bab14871a9a8613c77a4731446781728e342af9f9e906c3eb4370b8f41b97d8295873383b2dc8618639d32e9ad7ea4ef7659a4163d569da72ffb918207bb7d6923689c360c7331e9e925b6156ad31ec5f5fa616116c2136c44987a7ab15e5deed244f48fb7bf344f7e524b77409d282051927a6c9804dc140d6b78482bceddf996ddefab625f8fefe6235041e2520a6da08010c563ab3ff166bc752a7242b9d14860a44b1314a8ab07778c53375ed061d2ea31096c8c75dcc38223d7c8e80ea0cda3ed66d9a726d3e107112c0de1b7844ee7a2b77863210630d08deee6989f43d7989fdfe1b900ad62889ebab08b55a8eb18d341ed6623737f74cfd3998dbbe8bd009a4dcfa6e78fa0abb2b3e89b8ab4f8c24fa6713e4137acd8520191ac34058a2f66a42987b5888ac900bd0d0ce6f1ebb509c5d320a5f3ef277f50bfdb230763ba8545a652b7111271ff0ecc6380e1fe0da702289ccac1d4f8f967fe1b6b347c1f2a566a939d7e0553d869617ea9a7d83bd605ea2ff586a303e11ed6415c63854fdf8a8ab1d53ac446f938cfd3457ac4084e683fa77b7597128e0328fe9fa6dbb626728f7f89cd60b8723cb578210f08f3f71d755d56f76cee855132670b46dbd45e517b09cfa85e9a63d1197b9bb77807cdec617771298ebd4b00d58e25ba54ce6554547854864ea284e9911ab5213eb36118ee5c3606264cd82263c669fa12afbc7df25633a898db1f1726f1e9cfc8f476d36eab2a2764efd8ee18ff2b6ff558e808bb419363868f798323de7e853eb6f44a2017e30d1f83e488a14a3ce93cb217a33cb2b5d26f2f1d2f81abb4dfc458703d2a767e581b168f3931b6fa3a92467f50ab8ad84266480c3fdf16444f762cbfc8e6d6d151b511e31a22df003f2f0bbf89e271475824d6ec8e9c7b31d3bd29661de02759053655c801f44d3c68e2603e5adc7191649a4d28f9d647c394a03d173d34a2eccd66db32249b1366f353fc82aedca9acd449b765c5ee5b", 0x1000}], 0x7, &(0x7f0000004540)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x644e448e}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0xffff}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x10000}}], 0xf0}}], 0x4, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000004740)={'wlan0\x00', 0x0}) r2 = socket(0x1e, 0x1, 0x7f) (async, rerun: 32) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000047c0), 0xffffffffffffffff) (rerun: 32) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000048c0)={&(0x7f0000004780)={0x10, 0x0, 0x0, 0x8040800}, 0xc, &(0x7f0000004880)={&(0x7f0000004800)={0x4c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1ff, 0x7f}}}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x7}, @device_b, @device_b, @from_mac=@broadcast, {0x6}, @value=@ver_80211n={0x0, 0x6, 0x3, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}}, 0xf, @void}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x40001) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000004900)={'vcan0\x00', 0x0}) bind$rxrpc(r2, &(0x7f0000004940)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e22, 0x6, @remote, 0x5}}, 0x24) (async, rerun: 64) bind$bt_l2cap(r2, &(0x7f0000004980)={0x1f, 0x6, @none, 0x7, 0x2}, 0xe) (rerun: 64) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000004a80)={&(0x7f00000049c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000004a40)={&(0x7f0000004a00)={0x24, r3, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x8}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0xfffffffd}]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x6000084) syz_emit_ethernet(0x55, &(0x7f0000004ac0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @void, {@generic={0x888e, "ecfe809983eff05482056f954b60afc180f5db0ff1d0e999ad6ad3953d5991f26c73937a58a323d60305596873a384ea4aeeb3e3de25295425c4b972b6381e7d3712d6c1f30130"}}}, &(0x7f0000004b40)={0x1, 0x1, [0xa5d, 0x8c, 0x284, 0x9f0]}) (async) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000004c40)={&(0x7f0000004b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000004c00)={&(0x7f0000004bc0)={0x38, r3, 0x300, 0x5, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x4}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7fffffff}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x908}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8}]}, 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000004dc0)={&(0x7f0000004c80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004d80)={&(0x7f0000004cc0)=@bridge_newvlan={0x8c, 0x70, 0x400, 0x70bd2b, 0x25dfdbfd, {0x7, 0x0, 0x0, r4}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xe}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x5}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0xff}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x4}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x1b, 0x2}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x4}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0xf360}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x20008040) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000004e00)={0x1f, 0x81, @none, 0x1, 0x2}, 0xe) connect$inet(r2, &(0x7f0000004e40)={0x2, 0x4e22, @remote}, 0x10) (async) ioctl$int_in(r2, 0x5421, &(0x7f0000004e80)=0x7) (async) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000004ec0), r2) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000005080)={&(0x7f0000004f00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000005040)={&(0x7f0000004f40)={0xcc, r6, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8001}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1358}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xe002}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DEST={0x5c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x37}}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xcf1f}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8d2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xf1}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x41}, 0x4) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f00000050c0)={'filter\x00', 0x7e, "f59944c7fc58aaa26655c1f13593715bbb7e874f948d4dd548916ee3f3bf020ffad9e49b9275d159fe91e89422e8fbeec9ca213f2291ff72fccf1da95f6f576ec297e5963151662a2d975bd7b4d653274ce8a5eb2c443ea43c2ab4828228d393c89f250b845c438173fb2840506b9eadd80c6a3a26133e48fd74e0c4f0ae"}, &(0x7f0000005180)=0xa2) (async) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000051c0)={0x3, 0xffffffffffffffff, 0xfffffffffffffffe, 0x8, 0x2, 0x3e}) (async) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000005200)={'ip6tnl0\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000005300)={&(0x7f0000005240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000052c0)={&(0x7f0000005280)={0x2c, r3, 0x2, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xa8}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x38}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) (async, rerun: 32) ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, 0x0) (rerun: 32) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000005340)={{{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @in6=@private2, 0x4e22, 0x1, 0x4e21, 0x2, 0xa, 0x80, 0x80, 0x2, 0x0, 0xffffffffffffffff}, {0x80, 0x6, 0x1, 0x9, 0x5, 0x6, 0x1, 0x2}, {0x10e7, 0x2, 0x8000}, 0x885f, 0x6e6bb2, 0x2, 0x0, 0x0, 0x3}, {{@in=@private=0xa010102, 0x4d2, 0x2b}, 0xa, @in6=@rand_addr=' \x01\x00', 0x34ff, 0x1, 0x3, 0xaf, 0xad6f, 0x1, 0x301}}, 0xe8) (async) getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f0000005440)=""/101, &(0x7f00000054c0)=0x65) (async) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000005680)={&(0x7f0000005500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000005640)={&(0x7f0000005580)={0x90, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8001}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xc0000000}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x600000}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffff0000}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x634}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x56}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x34004040}, 0x10001) 2.159891318s ago: executing program 1 (id=3602): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r0, 0x0, 0x22, &(0x7f00000002c0)=0xffff0000, 0x4) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000380)={0x7, {{0x2, 0x4e23, @broadcast}}, {{0x2, 0x4e22, @remote}}}, 0x108) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x0, 0x2, 0x3, 0xffff}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv4_newaddr={0x34, 0x14, 0x1, 0x70bd29, 0x25dfdbfd, {0x2, 0x18, 0xc0, 0x2, r7}, [@IFA_LOCAL={0x8, 0x2, @broadcast}, @IFA_CACHEINFO={0x14, 0x6, {0xffbb, 0x0, 0x0, 0x10001}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000040)={@local, 0x800, 0x0, 0x2, 0x0, 0x0, 0x200}, 0x20) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x88, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x300, 0x1, 0x4, 0x0, {0x5, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x300, 0x3, 0x1}}, @void, @void, @val={0x76, 0x6, {0x4, 0x80, 0x7, 0x6}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x88}, 0x1, 0x0, 0x0, 0x40025}, 0x0) 2.040486356s ago: executing program 0 (id=3603): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000017000b63d25a80648c2594f917a3c92b", 0x14}], 0x1}, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, 0x0, &(0x7f0000000500)) (async) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000001ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x39, 0x0, 0xffffffffffffffff, 0x8}, 0x48) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r4, 0x0, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x10c, r5, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x1000}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3}, @NL80211_ATTR_TX_RATES={0xdc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0xb, 0x1b, 0x31, 0xc, 0x1, 0x30, 0x4, 0x4, 0x2, 0xc, 0x1b, 0x36, 0x16, 0x3]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x40, 0xff22, 0xfc1a, 0x6, 0x57f, 0x1, 0x70, 0xc8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x2, 0x3}, {0x5, 0x2}, {0x7, 0x3}, {0x4, 0x1}, {0x0, 0x9}, {0x1, 0x7}, {0x3, 0x7}, {0x6, 0xa}, {0x6, 0x1}, {0x5, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x0, 0x3aa, 0x7, 0x0, 0x7, 0xfff0, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x7, 0x8, 0x73c8, 0x0, 0x10, 0x6]}}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x4, 0x3, 0x30, 0x6, 0x12, 0x0, 0x4, 0x24, 0x32, 0xc, 0x48, 0x4, 0x1, 0xc, 0x2, 0x3, 0x18, 0x39, 0x16, 0x2e, 0x6, 0xb, 0x6, 0x1b, 0x1, 0x36, 0x8, 0x36, 0x5]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xe, 0x7, 0x6c, 0x7fff, 0x1, 0x1, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xf5, 0x2, 0x7, 0x1f0a, 0x81, 0x0, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffd, 0x68f9, 0x2, 0x6, 0x5, 0xdd8d, 0x9, 0x101]}}]}]}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x10c}, 0x1, 0x0, 0x0, 0x40000}, 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = socket$inet(0xa, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r9, 0x29, 0x1f, 0x0, 0x48) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000740)={'ip6_vti0\x00', &(0x7f00000006c0)={'syztnl0\x00', 0x0, 0x2f, 0xa, 0xa, 0x7fffffff, 0x59, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x27, 0x0, 0x7, 0x4}}) sendmsg$nl_route(r3, &(0x7f0000000840)={&(0x7f0000000280), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@ipv6_getroute={0x24, 0x1a, 0x200, 0x70bd2b, 0x25dfdbfc, {0xa, 0x10, 0x80, 0x3, 0xfe, 0x4, 0x0, 0x7, 0x200}, [@RTA_OIF={0x8, 0x4, r10}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20000890) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_CQM(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES64=r8, @ANYRES32=r8, @ANYRES32=r8, @ANYRESOCT=r7], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x8081) 2.029538944s ago: executing program 3 (id=3604): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket(0x840000000002, 0x3, 0x100) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, 0x0, 0x0) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000b40)={'dummy0\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001d000100000000000080000007000000", @ANYRES32=r4, @ANYBLOB="000096040a000200aa"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x8d}}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0) connect$llc(r1, &(0x7f0000000300)={0x1a, 0x326, 0x2, 0x40, 0x3, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, r0, 0x1, 0x2, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x4}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4008080) 1.940713974s ago: executing program 4 (id=3605): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000000)=0x400, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r1) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010010000000ffdbdf2500000000", @ANYRES32=r4, @ANYBLOB="20000000280e0400280012800b0001006d61637365630000180002800500030008"], 0x48}, 0x1, 0x0, 0x0, 0x24008001}, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYRES32=r1], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1.833427019s ago: executing program 1 (id=3606): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2f}]}, 0x9c}, 0x1, 0x0, 0x0, 0x80}, 0x0) accept(r0, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_SET_MACPARAMS(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x48, r3, 0x200, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_CSMA_RETRIES={0x5}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x4}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x2}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x40) recvmmsg(r1, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002740)=""/4090, 0xffa}, {&(0x7f0000000300)=""/130, 0x82}], 0x2}}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000680)=""/96, 0x60}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000003740)=""/4082, 0xff2}], 0x3}, 0x8}], 0x3, 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2c000011) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) 1.804480254s ago: executing program 4 (id=3607): syz_emit_ethernet(0x23, &(0x7f0000000c80)={@random="b19098cbaf38", @local, @void, {@generic={0x800, "efe89e7109972a2633ca95a9d3c644698d0698b4b9"}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0700000002390ca0fce3c3b2525c0000000000007d619906d828fb7152754e53fdf8d6dedbef28cb87be5acac5137bab95976b8aee97dc374e9f1f9f76b3d91ac9f4", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = socket(0x15, 0x5, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001300100000000000000000007374726565626f673531322d67656e65726963"], 0xe0}}, 0x0) sendmsg$nl_crypto(r1, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) 1.70472285s ago: executing program 0 (id=3608): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x4, 0x3, 0x3, 0x0, {0xa, 0x4e21, 0x40, @mcast1, 0x6}}}, 0x3a) (async, rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50) (rerun: 32) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r1, &(0x7f00000001c0), 0x0}, 0x20) (async, rerun: 64) r2 = socket$netlink(0x10, 0x3, 0xa) (rerun: 64) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000700), r3) sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, r4, 0xf002135a49ffa319, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40800) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) (async, rerun: 64) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x1050, 0x8130}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x42}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf250b00000008000300", @ANYRES32=r5, @ANYBLOB="0c0099000000f2925700000004000b000a000600080211000000000004002800"], 0x3c}, 0x1, 0x0, 0x0, 0x4000840}, 0x4) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x30, r8, 0x801, 0x70bd29, 0x0, {0x7}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_IFNAME={0x14}]}, 0x30}}, 0x0) sendmmsg$inet(r0, &(0x7f0000003940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000004) 1.456557511s ago: executing program 4 (id=3609): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, &(0x7f0000000840)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x18, 0x10, 0xa, 0x101, 0x0, 0x0, {}, [@generic="c9"]}, 0x18}}, 0x0) 1.413762261s ago: executing program 1 (id=3610): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x1000) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@timestamp_addr={0x44, 0xc, 0xa, 0x2, 0x0, [{@loopback}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r1, 0x84, 0x7f, 0x0, &(0x7f0000001180)) mmap(&(0x7f0000811000/0x4000)=nil, 0x4000, 0x1000000, 0x11, r0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="953a04"], 0x24}}, 0x0) recvmmsg$unix(r3, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/249, 0xf9}, {&(0x7f0000004480)=""/4098, 0x1002}, {&(0x7f0000000740)=""/13, 0xd}, {&(0x7f00000003c0)=""/97, 0x61}, {&(0x7f00000001c0)=""/104, 0x68}, {&(0x7f0000000540)=""/130, 0x82}, {&(0x7f00000009c0)=""/133, 0x85}], 0x7}}], 0x1, 0x40, 0x0) write(r3, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff, r2}) 1.304617031s ago: executing program 3 (id=3611): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) socket$xdp(0x2c, 0x3, 0x0) (async) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0xfffffffffffffffd, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800800101"], 0x50) 1.284571776s ago: executing program 0 (id=3612): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000001440)={0x2, 0x2, 0x0, 0x9, 0x20000000000000c3, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_address={0x5, 0x17, 0x33, 0x40, 0x0, @in6={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}}, @sadb_address={0x3, 0x5, 0x0, 0xa0, 0x0, @in={0x2, 0x0, @loopback}}]}, 0x68}}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000001400)=ANY=[@ANYBLOB="14af250000005a39e6a6505f18841b989e438a68262bddc54b459ecf3b", @ANYRES16=r1, @ANYBLOB="010000000000000000000b000000"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8844) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x1398, 0xffffffff, 0x0, 0x11d8, 0x10f8, 0xffffffff, 0xffffffff, 0x1300, 0x1300, 0x1300, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0x10d0, 0x10f8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x7}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.net/syz1\x00'}}]}, @REJECT={0x28}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'batadv_slave_1\x00', 'macvtap0\x00'}, 0x0, 0xa0, 0xe0, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@ip={@private, @loopback, 0x0, 0x0, 'erspan0\x00', 'ip6erspan0\x00'}, 0x0, 0xe0, 0x128, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}, @common=@socket0={{0x20}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x13f8) 1.195282855s ago: executing program 3 (id=3613): r0 = epoll_create(0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) listen(0xffffffffffffffff, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000040)=[{0x1, 0x2, {0x1}, {0x3, 0x1, 0x1}, 0xfe, 0x2}, {0x2, 0x2, {0x1, 0x1, 0x3}, {0x1, 0x0, 0x2}, 0xfe, 0xfe}, {0x1, 0x2, {0x0, 0x1, 0x1}, {0x1, 0x1, 0x2}, 0xfd, 0x2}, {0x1, 0x3, {0x0, 0x0, 0x1}, {0x1, 0x0, 0x2}, 0xfe, 0x1}, {0x0, 0x1, {0x2, 0x1}, {0x1, 0xff, 0x3}}, {0x0, 0x0, {0x2, 0x1, 0x3}, {0x1, 0x0, 0x1}, 0x2}, {0x2, 0x2, {0x1, 0x0, 0x1}, {0x0, 0x0, 0x3}, 0xfe}, {0x2, 0x2, {0x2, 0x0, 0x2}, {0x2, 0xff, 0x3}, 0xe9e0725d3f2ff698, 0xfc}, {0x0, 0x3, {0x1, 0xff, 0x1}, {0x1}, 0xfd, 0xff}], 0x120) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r3) r4 = accept4$netrom(0xffffffffffffffff, &(0x7f00000001c0)={{0x3, @null}, [@bcast, @remote, @bcast, @default, @null, @bcast, @rose, @bcast]}, &(0x7f0000000240)=0x48, 0x80000) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r4, 0x80047210, &(0x7f0000000280)) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000002c0)={r2}) r6 = accept4$inet(r5, &(0x7f0000000300), &(0x7f0000000340)=0x10, 0x80800) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000000380)={0x0, 'dvmrp0\x00'}, 0x18) writev(r3, &(0x7f00000004c0)=[{&(0x7f00000003c0)="477f2bbe42b3531f9e51ca85e2e5d0e0401bb9e38416b7ded966776f", 0x1c}, {&(0x7f0000000400)="6801d937572447d7cd87f89408aa4e86cbae8e184bb43f3ff71df7a67100683dfe9d6dc5590519f5177303e37484e8a560b67b27e72a089b591d2f24bf3b677500dadd9392ef1cc28e15ac68d7e5efd864af9f9ca73f4485e22373cd624da91997c3da85f61330e3a60c19a23dcf7f0830d8045d79eabe7b5c5819872c82b9e6a87b2a714715d01154e848decfc44d008177f3c94dd0696616e019a3d3aefb83fdf40e29cf9de1f8f4", 0xa9}], 0x2) sendmsg$nl_route(r5, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=@ipv6_getanyicast={0x14, 0x3e, 0x100, 0x70bd29, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x50090) r7 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='pids.max\x00', 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000640)={"43cf0a6db174ea70f5939537a9a0dd70", 0x0, 0x0, {0x0, 0x1000}, {0xff, 0x8}, 0x8, [0x4, 0x2, 0x3, 0x7, 0x8, 0x3, 0x7, 0x2, 0xe00, 0xe1d, 0x5, 0x9b20, 0xffff, 0x8000000000000000, 0x80000001, 0xffffffffffffb72d]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r5, 0x50009418, &(0x7f00000007c0)={{r7}, r8, 0x4, @inherit={0x80, &(0x7f0000000740)={0x1, 0x7, 0x52ac500e, 0x101, {0x8, 0x5, 0x3, 0x52a3, 0x1}, [0x8, 0x4, 0x9, 0xfff, 0x2, 0x7, 0x40]}}, @subvolid=0x8}) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f00000017c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x3, @null, @netrom={'nr', 0x0}, 0x2, [@default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @bcast, @null]}) connect$rose(r5, &(0x7f0000001840)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null]}, 0x40) openat$tun(0xffffffffffffff9c, &(0x7f0000001880), 0x40, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r6) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001980)={&(0x7f00000018c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@enum64={0xc, 0x1, 0x0, 0x13, 0x1, 0x8, [{0x10, 0x1000, 0x41f0}]}]}, {0x0, [0x0]}}, &(0x7f0000001900)=""/86, 0x33, 0x56, 0x1, 0x80}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000019c0)=@base={0xc, 0x2, 0x6, 0x1, 0x1004, r6, 0x3, '\x00', 0x0, r9, 0x1, 0x3, 0x1}, 0x50) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r10, 0x400448dd, &(0x7f0000001a40)="380da311d3751294cd3961f46ae383b030638c9fb777052dc814a82b4b53") r11 = accept$inet(r5, &(0x7f0000001a80)={0x2, 0x0, @loopback}, &(0x7f0000001ac0)=0x10) sendto$inet(r11, &(0x7f0000001b00)="ad4567890039d428376cda7723f6159f7e07329d71db9d2dcb1dc9c31d85ef7a7f474fbe31bfa3324161a1d613cf1d7b84227bb192c93e932d90f6604ea6d0fc7974f52efd5e363ba9cff4cd", 0x4c, 0x4010, &(0x7f0000001b80)={0x2, 0x4e24, @empty}, 0x10) r12 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0x14, &(0x7f0000001bc0), &(0x7f0000001c00)=0x4) 1.084883312s ago: executing program 2 (id=3614): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000001d000500feff000000009500f30000000000"], &(0x7f0000000000)='GPL\x00'}, 0x90) 1.083544972s ago: executing program 4 (id=3615): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x7c, 0x2, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}]}, @CTA_FILTER={0x24, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x678}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x1c0}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x208}]}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x5, 0x7]}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x0]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'tftp-20000\x00'}}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x6}]}, 0x7c}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0xe689b000) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={0x0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e21, @local}, 0xa1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x1, 0x1000}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x55, 0x55, 0x5, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x5f5e0ff}, @datasec={0x4, 0x5, 0x0, 0xf, 0x1, [{0x1, 0x23, 0x40}, {0x4, 0x856, 0x5}, {0x3, 0x6, 0x2}, {0x5, 0x1, 0xdd8}, {0x4, 0x80, 0x282599c7}], "d3"}]}, {0x0, [0x0, 0x0, 0x2e]}}, &(0x7f0000000f40)=""/4096, 0x75, 0x1000, 0xa}, 0x28) r2 = socket$l2tp(0x2, 0x2, 0x73) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0x2}, 0xc) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r3, &(0x7f0000000140)="6ad8d7f4633bf71dd3457f5d59d1774853ecfe33b7115ae76bc252d1978073a9c12c09b2cdcbaf4da744757abf", &(0x7f0000000180)=""/58, 0x4}, 0x20) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000200)={0x3, 'bond_slave_1\x00', {0x782f}, 0xaee}) sendto$l2tp(r2, &(0x7f0000000040)="e5786a0d000000000000c83b", 0xc, 0x20080, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) 1.03631742s ago: executing program 0 (id=3616): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000880)=0x9, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4623, 0xfffffffd, @local, 0x6}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000055c0)=[{{&(0x7f0000001640)={0xa, 0xf, 0xfffffc01, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0xe}, 0x1c, &(0x7f0000000100)}}], 0x1, 0x8000) (async) sendmmsg$inet6(r0, &(0x7f0000002880)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000900)="976d7a07eb881aba56b60f810adac018553d53d9dfa60311058829866dd152e6b593119b15d99bdb7c301b7594910da06d9e96d5d0c100468663309005c40549778cbf0310b43be9856f8e9cdc84a09ec970dde8a45721cc090c502fcbd7dcacab0d88e1b8bcd2296793e7f43e4e9d07efb25a81f7cb17641f7e3c6cfe3d47cbf215863caca660ee51f0a3630629ef615dfdf1f9c9025919ccc7d9537b34843964e1b6491ff832da53012e22bb4fb7fbfec048753ebf", 0xb6}], 0x1}}], 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r5, 0x6a, 0x3, 0x0, &(0x7f0000000000)=0xfffffffffffffd68) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r6, @ANYBLOB="1c002380050005000bd6e0139efd5650b900000005000e0002000000"], 0x38}}, 0x80) (async) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f0000001240), &(0x7f0000001280)=0x4) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000007911c800000000009500000000000000c6ecca154808c9b195783c174d8cf1a45bb3f67bc8e95f37310b8b1c218d012964530807a8625c202597cec7a823600b539741ae0489f38369511c4735628168cbfe39c4f7f27e940c6d70"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70) (async) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010002000000fcdbdf2517000000400006803c000400"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x0, 0x3}}]}}}]}, 0x40}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001200)='./cgroup/syz0\x00', 0x1ff) 996.631013ms ago: executing program 2 (id=3617): bind$packet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3ffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @generic={0x66, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1000}, @jmp={0x5, 0x0, 0x1, 0xb, 0x7, 0x40, 0x4}, @jmp={0x5, 0x1, 0x1, 0x0, 0x0, 0xffffffffffffffe0}, @call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20004004) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0) 880.740629ms ago: executing program 0 (id=3618): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0xfffffffd) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r4, 0x10, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x79}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, 0x0, &(0x7f0000000380)) r5 = socket$can_raw(0x1d, 0x3, 0x1) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000700)={'veth0\x00', 0x0}) sendmsg$can_raw(r5, &(0x7f0000000400)={&(0x7f0000000300)={0x1d, r7}, 0x10, &(0x7f00000003c0)={0x0, 0x10}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@delnexthop={0x20, 0x69, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [{0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@delchain={0x24, 0x65, 0x10, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff3, 0x7ff9}, {0xe, 0x6}, {0x10}}}, 0x24}}, 0x4084000) 26.961839ms ago: executing program 1 (id=3619): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000006b00)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="044804c752bf0f30a7c59d079b300f2d42e8397169bf3159b604c216137d8e61cda7553cab236c6e6acaa5679db1cbd520f15c3b04335f9246701242e606d3ed0b3b27bb7b8ffb19989beb63cfc91df37335f3914f", 0x55}], 0x1}}], 0x1, 0x4040854) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r1, &(0x7f0000000200)={0x0, 0xb00, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) close(r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x2c, r4, 0x1, 0x70bd3c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40111}, 0x10050) socket(0x10, 0x80002, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0xc8, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x74, 0x2, [@TCA_HTB_INIT={0xf}, @TCA_HTB_INIT={0x18}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_DIRECT_QLEN={0x8}]}}, @qdisc_kind_options=@q_fq_codel={{}, {0x0, 0x2, [@TCA_FQ_CODEL_INTERVAL]}}]}, 0xc8}}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close(0x4) sendmmsg(r0, &(0x7f0000000340), 0x222874f4405e5c0, 0x40840) 6.474442ms ago: executing program 4 (id=3620): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x4, 0x0, 0x6, 0x3}]}, &(0x7f0000001300)='GPL\x00'}, 0x90) r1 = socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7f00000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@initdev, @empty, 0x0}, &(0x7f0000000040)=0xc) r4 = socket(0x200000100000011, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) bind$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x7, 0x6, @multicast}, 0x14) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r5, 0x9) syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0xffff, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x4, 0xfffffff1, 0x200000, 0x1201, r0, 0x3, '\x00', r3, r6, 0x0, 0x4, 0x3}, 0x50) 0s ago: executing program 3 (id=3621): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, 0x0, 0x5f) (async) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r6 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000180)=0xcf, 0x12) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001e40)=@newtfilter={0xd14, 0x2c, 0xd27, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x10, 0xfff2}, {0x0, 0x2}, {0xa, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0xff, 0x0, 0x6}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x800}}]}]}}, @filter_kind_options=@f_basic={{0xa}, {0xc58, 0x2, [@TCA_BASIC_POLICE={0xc54, 0x4, [@TCA_POLICE_RATE64={0xc, 0x8, 0x8000000000000001}, @TCA_POLICE_RESULT={0x8, 0x5, 0x975}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0xffffff24, 0x3, 0x8, 0x2de6, 0x40, 0x6d, 0x6, 0x3, 0x6, 0x2, 0x6, 0xe, 0x1, 0x4, 0x1, 0x7fff, 0x8, 0x5, 0x40, 0x800, 0xcff, 0x74c, 0xcc, 0x800, 0x5, 0x100, 0x8, 0x8614, 0x9, 0x101, 0x10000, 0x4, 0xffffffc0, 0x12, 0x0, 0x1, 0x2, 0x10000, 0x6, 0x6, 0x9, 0xff, 0x6, 0x2, 0x7, 0x101, 0x7, 0x5, 0x5, 0x1d, 0x1, 0x7, 0x7fff, 0x1, 0xffffc87f, 0x673, 0x1, 0x7, 0x571f, 0x1, 0x100, 0xfffffffb, 0x2, 0x6, 0x8, 0x9, 0x3, 0x9, 0x8001, 0x3, 0xa9, 0x2, 0x4, 0x0, 0x1e000000, 0xfffff641, 0x8, 0x81, 0x1, 0x5, 0x7, 0xffffffff, 0x100, 0x5, 0x3, 0x0, 0x5, 0x1, 0x3, 0x4, 0xd, 0x67, 0x6, 0x0, 0x3, 0x5, 0x2ae, 0x2, 0x9, 0x80000001, 0x1, 0x3, 0x7, 0x1, 0x3, 0x10000, 0x10000, 0x6, 0x1, 0x6, 0x5, 0xe0, 0x5dde5bcd, 0x0, 0x3, 0x5, 0x5, 0x80000000, 0x1, 0xa5, 0x9, 0x9, 0x9, 0x5, 0x8, 0xc79, 0x3, 0x6, 0x2, 0x0, 0x4, 0x6, 0x3, 0xd, 0x7, 0xffffba09, 0x10001, 0x10000, 0x8, 0x8, 0x2, 0xc5, 0x9, 0x3, 0x7, 0x1, 0x800, 0x8, 0xfffffff6, 0xcddf, 0x6, 0x11a, 0x7, 0x0, 0x32b, 0x4, 0xffffffff, 0x2, 0x101, 0x1, 0xb, 0x9, 0x636, 0x4, 0x4, 0xff, 0x0, 0x7, 0x1, 0x8, 0x0, 0xd3d, 0x80000001, 0x3, 0x2, 0x0, 0x163, 0x6, 0x10000, 0x9, 0x1, 0x2, 0xffff7fff, 0xf3, 0x0, 0x1ff, 0x6, 0x79b62340, 0x9, 0xb, 0x6a91, 0x300000, 0x7, 0x39, 0x1000, 0x8, 0x0, 0x2, 0x1b600000, 0x81, 0xdd7, 0x6c1, 0x44c767a7, 0x9, 0xde6, 0xfdf, 0x5, 0x5, 0x18, 0x6, 0x7, 0x5, 0x9, 0x6, 0x9f, 0x91ee, 0x917e, 0x2, 0x6, 0xc51f, 0x7d, 0x83, 0x8001, 0x8000, 0x1, 0xe07, 0x15b5, 0xfffffe01, 0xfff, 0xa, 0x8, 0x8, 0x5, 0x3, 0x3, 0x7f, 0x0, 0x80000000, 0x71, 0x9, 0x7, 0x80, 0x1684, 0xa, 0xe00, 0x9, 0x1, 0x2e, 0x0, 0x401, 0x100, 0x4, 0xffff, 0x80, 0x1]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8000000000000000}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8ef}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x800, 0x7fffffff, 0x6, 0x1ff, 0x1, 0x1, 0x101, 0x7, 0xdb, 0x1000, 0x3, 0x95c, 0xdfba, 0x10001, 0xffff8001, 0x5, 0x0, 0x0, 0xa3, 0xfffffc01, 0x8, 0x7, 0x5, 0x6, 0xfffffff7, 0x5, 0xd, 0x10, 0x100, 0xfe8, 0x2e, 0xfffffffb, 0xd8e5, 0x7, 0x7, 0x4, 0x6, 0x810c, 0x7, 0x8, 0x9591, 0x9, 0x8, 0x1, 0x0, 0x0, 0xfffffffa, 0x7, 0x2, 0x400, 0x9, 0x9, 0xd954, 0x5, 0x1, 0x1, 0x4, 0x9, 0xdda8, 0x81, 0xd70, 0x80000000, 0x7, 0x2400000, 0x470, 0x6, 0x2, 0x2, 0x2, 0x7, 0x3, 0xc, 0xfffff554, 0x0, 0x3, 0x0, 0x0, 0x3, 0xfff, 0xc, 0x6, 0x9, 0x6, 0x34, 0x8001, 0x8, 0x0, 0x9, 0xbdfe, 0xe4, 0x5d2f, 0x5, 0x6, 0xffff52d1, 0x2, 0x9, 0x1, 0x5, 0x3, 0x5, 0x2, 0xc, 0x0, 0xc, 0x8, 0x952, 0x6, 0x9, 0x101, 0x4, 0x0, 0x224, 0xb2, 0x101, 0x918a, 0x3, 0x80, 0xffff0001, 0x4, 0x1, 0x5, 0xd, 0x6, 0x3ad7, 0x7, 0x40, 0x1, 0x0, 0x7ff, 0x1, 0xf7f1, 0x3, 0x7, 0x9, 0x9, 0x6, 0x8, 0x401, 0xffffffff, 0x0, 0x200, 0x8, 0x33, 0xb14a, 0x7, 0x2e04, 0x200, 0x93, 0x3, 0x8, 0x6, 0x6, 0x10001, 0x7d4d, 0x6, 0x7fffffff, 0x3, 0x1000, 0xa, 0x849e, 0x6, 0x6, 0x9832, 0xfffffff8, 0x3ff, 0x5, 0x8000, 0x3, 0x10000, 0x1, 0x10001, 0xcfc0, 0x1, 0x6, 0x6, 0x10, 0xa7d5, 0x9, 0x3, 0x3, 0x7, 0x3, 0x9, 0x7f, 0xc, 0x9, 0x542b, 0x4, 0x9, 0x1, 0x3, 0x1000, 0x400, 0xd, 0x3, 0x3, 0x9, 0xd, 0x81, 0x6, 0x4c, 0x4, 0x6, 0xb, 0x3ff, 0x6, 0x7, 0x1, 0x80, 0x5, 0x784f, 0x4, 0x799, 0x7, 0x7, 0x0, 0x43, 0x9, 0xf86, 0x0, 0x3, 0x4, 0x5, 0x80000001, 0x9, 0x4, 0x6, 0xd, 0x2, 0x9, 0x4, 0x0, 0x1, 0x0, 0x4, 0x642d, 0xffffff7f, 0x0, 0x5, 0xe4bd, 0x8, 0x7fff, 0x6, 0x4, 0x8, 0x5, 0x3e08, 0xfffffffe, 0x97, 0x6, 0x9, 0x0, 0x7fff, 0x0, 0x10]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8001}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0xe, 0xd9a, 0x0, 0xfffff800, 0x1, 0x9, 0x8, 0xc, 0x6, 0xfffffffb, 0x10001, 0xd4, 0x80000000, 0x11, 0x0, 0xffffffff, 0xfffffff9, 0xf, 0x3, 0x4, 0x9, 0x3, 0xfffffffc, 0x8, 0x86d, 0x3ff, 0x0, 0x20000000, 0x3b, 0x13a7, 0x81, 0x1ff, 0x5, 0x7, 0x100, 0x7, 0x4, 0x80000001, 0xfffffff4, 0x4a, 0x15e, 0x1ff, 0x3, 0x620b, 0x6, 0x10, 0x2, 0xf5b, 0x6, 0x1, 0x13, 0x9, 0x0, 0x4, 0x3ff, 0x4, 0x3ff, 0x9be, 0x7, 0x0, 0x3, 0x8, 0xc7d, 0x6, 0x9, 0x3ff, 0x0, 0xec73, 0x9, 0x2, 0xcd, 0x10, 0x4, 0xd2, 0x9c, 0x3, 0x1, 0x6, 0x6, 0x4, 0xa, 0x1, 0x3, 0x6, 0x81, 0x0, 0x0, 0x8, 0x4, 0x8, 0x8657, 0x8000, 0x4, 0x9, 0x0, 0x80000000, 0x7, 0x1, 0xfffffff9, 0x9, 0xa, 0xf, 0x7, 0x4, 0x9, 0xffffffff, 0x0, 0x3, 0xffffffff, 0x1, 0x358b90db, 0x0, 0x5, 0xfffffffd, 0xffff4be3, 0x7, 0x3ff8, 0x11, 0x10, 0x0, 0x9, 0x85ca, 0xffffffc0, 0xdb, 0x6, 0x5, 0x1, 0x81, 0x6, 0x8, 0x1, 0xfffffffd, 0x7, 0x80000000, 0x6b400000, 0xe, 0x2, 0x3, 0xffffffff, 0x1000, 0x7, 0x7, 0x3e4, 0x100, 0x7, 0x47e34816, 0x1000, 0x8001, 0x8, 0x0, 0x0, 0xfffff001, 0x4, 0x1, 0xd6, 0x10, 0x6, 0x1, 0x0, 0x2, 0x50, 0x0, 0x8d95, 0xf, 0xd, 0x0, 0x1, 0xffffffff, 0x80000000, 0x3, 0x7, 0x4, 0xffffff00, 0x7, 0x81, 0x3, 0x8, 0x80000001, 0x2, 0x101, 0xc74, 0x80000001, 0x8, 0xfff, 0x6, 0x10001, 0x9, 0x9, 0x1, 0x0, 0xa0dd, 0x755e, 0x6, 0x5, 0xffffffff, 0x2, 0x1, 0x0, 0x1, 0x4, 0x6faa, 0x7, 0x3, 0x10000, 0x697c, 0x10, 0x7, 0x5, 0xff, 0x6a3, 0xd32, 0x0, 0xd75b, 0x3, 0x80000001, 0xfb, 0x9, 0x1, 0xa, 0x8, 0x268, 0x1, 0x3ff, 0x8, 0x9, 0x7c091ec7, 0xbe5, 0x8, 0x2, 0x7ed, 0x5, 0x100, 0x3, 0x6086396b, 0x5, 0x10, 0x727c, 0x1, 0x6, 0x200, 0xfffffffe, 0x6, 0x2, 0x0, 0x4, 0x9, 0x3, 0x11, 0x100, 0x0, 0xfffffffd, 0xf83, 0x2bd, 0xffffffff]}]}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0xc0}}, @filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT_MASK={0x6}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0x71}, @TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xff, 0xffffffff, 0xffffff00]}, @TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "9a2b443cdc18525d32d6b7f65ede6537"}, @TCA_FLOWER_KEY_PORT_DST_MIN={0x6, 0x59, 0x4e22}]}}]}, 0xd14}, 0x1, 0x0, 0x0, 0x20000080}, 0x60048084) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r7) sendmsg$NFC_CMD_GET_TARGET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r8, 0x1, 0x70bd2b}, 0x14}}, 0x24004044) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r7) (async) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r7) sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r9, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x8800) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) (async) sendto$inet6(r0, 0x0, 0x0, 0x240000c5, &(0x7f0000000040)={0xa, 0x2, 0x2, @empty, 0x20000}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) (async) shutdown(r0, 0x1) kernel console output (not intermixed with test programs): 142][T12782] xt_ecn: cannot match TCP bits for non-tcp packets [ 249.677610][T12798] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1902'. [ 249.826559][T12804] erspan0: entered allmulticast mode [ 249.852707][T12804] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1903'. [ 249.855004][T12806] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 249.894218][T12804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1903'. [ 250.027022][T12814] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1907'. [ 250.668155][T12848] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1917'. [ 251.687031][T12886] openvswitch: netlink: IP tunnel dst address not specified [ 251.730055][T12886] openvswitch: netlink: IP tunnel dst address not specified [ 251.899186][T12895] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 251.908093][T12898] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1933'. [ 252.018606][T12905] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1934'. [ 253.469346][T12913] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1938'. [ 253.845497][T12931] netlink: 'syz.2.1944': attribute type 3 has an invalid length. [ 253.879130][T12931] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.1944'. [ 253.981611][T12943] Bluetooth: MGMT ver 1.23 [ 254.002739][T12943] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1948'. [ 254.050464][T12947] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1948'. [ 254.177535][T12952] xt_TCPMSS: Only works on TCP SYN packets [ 254.392701][T12964] xt_TCPMSS: Only works on TCP SYN packets [ 254.406212][T12967] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1955'. [ 254.408597][T12964] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1954'. [ 254.445772][T12964] ip6tnl0: entered promiscuous mode [ 254.457505][T12964] ip6tnl0: entered allmulticast mode [ 254.524135][T12969] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1956'. [ 254.584828][T12969] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 255.069572][T13000] pim6reg1: entered promiscuous mode [ 255.075295][T13000] pim6reg1: entered allmulticast mode [ 255.386652][T13016] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1973'. [ 255.584258][T13025] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 255.591173][T13025] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 255.757595][T13030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1979'. [ 255.853395][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.075720][T13037] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1981'. [ 256.258984][T13044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1984'. [ 256.442496][T13055] netlink: 'syz.3.1988': attribute type 8 has an invalid length. [ 256.695135][T13067] sctp: [Deprecated]: syz.0.1990 (pid 13067) Use of int in max_burst socket option deprecated. [ 256.695135][T13067] Use struct sctp_assoc_value instead [ 257.093161][T13089] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 257.930132][T13133] rdma_op ffff8880248251f0 conn xmit_rdma 0000000000000000 [ 257.996832][T13142] SET target dimension over the limit! [ 258.239939][T13156] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 258.631938][T13167] xt_CT: No such helper "syz1" [ 259.142195][T13201] __nla_validate_parse: 8 callbacks suppressed [ 259.142216][T13201] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2027'. [ 259.289680][T13204] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 259.424101][T13207] netlink: 'syz.4.2029': attribute type 10 has an invalid length. [ 259.449846][T13207] veth0_vlan: entered allmulticast mode [ 259.617598][T13207] veth0_vlan: left promiscuous mode [ 259.644258][T13207] veth0_vlan: entered promiscuous mode [ 259.673751][T13207] team0: Device veth0_vlan failed to register rx_handler [ 260.066145][T13238] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 260.206445][T13242] tipc: Enabled bearer , priority 0 [ 260.284305][T13240] tipc: Disabling bearer [ 260.298423][T13249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2041'. [ 260.339181][ C1] syz_tun: tun_net_xmit 76 [ 260.349884][T13249] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2041'. [ 260.367209][T13249] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2041'. [ 260.567707][T13256] xt_CT: You must specify a L4 protocol and not use inversions on it [ 260.868310][T13274] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2050'. [ 261.035531][T13280] netlink: 'syz.3.2051': attribute type 11 has an invalid length. [ 261.065714][T13280] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2051'. [ 261.127002][T13288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2055'. [ 261.207422][T13294] netlink: 'syz.4.2057': attribute type 1 has an invalid length. [ 261.222377][T13294] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2057'. [ 261.384015][T13308] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 261.511891][T13314] ip6tnl3: entered promiscuous mode [ 261.564998][T13314] ip6tnl3: entered allmulticast mode [ 261.791342][T13332] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 261.832728][T13332] netlink: 'syz.4.2066': attribute type 1 has an invalid length. [ 261.893447][T13345] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2065'. [ 262.249398][T13358] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2070'. [ 262.259231][T13358] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 262.269079][T13358] tipc: Enabling of bearer rejected, failed to enable media [ 262.739959][T13380] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 263.058094][T13398] TCP: TCP_TX_DELAY enabled [ 263.303288][T13414] netlink: 'syz.4.2086': attribute type 3 has an invalid length. [ 263.311424][T13413] netlink: 'syz.3.2085': attribute type 10 has an invalid length. [ 263.375693][T13413] bond0: (slave ªªªªªª): Enslaving as an active interface with an up link [ 263.438078][T13421] veth0_vlan: left promiscuous mode [ 263.445391][T13421] vlan0: entered promiscuous mode [ 263.454640][T13421] veth0_vlan: entered promiscuous mode [ 263.516210][T13421] team0: Port device vlan0 added [ 263.737803][T13432] netlink: 'syz.1.2090': attribute type 1 has an invalid length. [ 263.747946][T13432] netlink: 'syz.1.2090': attribute type 1 has an invalid length. [ 264.274186][T13462] __nla_validate_parse: 7 callbacks suppressed [ 264.274208][T13462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2100'. [ 264.293432][T13454] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2099'. [ 264.365859][T13467] netlink: 'syz.0.2101': attribute type 2 has an invalid length. [ 264.415083][T13467] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2101'. [ 264.539959][T13475] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2104'. [ 264.599189][T13477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2105'. [ 264.648626][T13477] batadv0: left promiscuous mode [ 264.683796][T13477] batadv0: left allmulticast mode [ 264.765253][T13488] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2106'. [ 264.827525][T13491] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2108'. [ 264.885243][T13498] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2109'. [ 265.084549][T13506] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 265.133681][T13506] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 265.409673][T13513] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2112'. [ 265.462667][T13519] tipc: Enabled bearer , priority 10 [ 265.518627][T13515] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2113'. [ 266.022082][T13550] netlink: 'syz.0.2122': attribute type 1 has an invalid length. [ 266.702868][T13598] FAULT_INJECTION: forcing a failure. [ 266.702868][T13598] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 266.753401][T13598] CPU: 1 UID: 0 PID: 13598 Comm: syz.4.2136 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 266.753434][T13598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 266.753455][T13598] Call Trace: [ 266.753464][T13598] [ 266.753474][T13598] dump_stack_lvl+0x189/0x250 [ 266.753518][T13598] ? __pfx____ratelimit+0x10/0x10 [ 266.753543][T13598] ? __pfx_dump_stack_lvl+0x10/0x10 [ 266.753570][T13598] ? __pfx__printk+0x10/0x10 [ 266.753623][T13598] should_fail_ex+0x414/0x560 [ 266.753652][T13598] _copy_from_iter+0x575/0x16f0 [ 266.753693][T13598] ? __pfx__copy_from_iter+0x10/0x10 [ 266.753721][T13598] ? __build_skb_around+0x257/0x3e0 [ 266.753756][T13598] ? netlink_sendmsg+0x642/0xb30 [ 266.753785][T13598] ? skb_put+0x11b/0x210 [ 266.753819][T13598] netlink_sendmsg+0x6b2/0xb30 [ 266.753861][T13598] ? __pfx_netlink_sendmsg+0x10/0x10 [ 266.753895][T13598] ? aa_sock_msg_perm+0x94/0x160 [ 266.753920][T13598] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 266.753944][T13598] ? __pfx_netlink_sendmsg+0x10/0x10 [ 266.753976][T13598] __sock_sendmsg+0x21c/0x270 [ 266.754005][T13598] ____sys_sendmsg+0x505/0x830 [ 266.754044][T13598] ? __pfx_____sys_sendmsg+0x10/0x10 [ 266.754088][T13598] ? import_iovec+0x74/0xa0 [ 266.754121][T13598] ___sys_sendmsg+0x21f/0x2a0 [ 266.754157][T13598] ? __pfx____sys_sendmsg+0x10/0x10 [ 266.754231][T13598] ? __fget_files+0x2a/0x420 [ 266.754251][T13598] ? __fget_files+0x3a0/0x420 [ 266.754282][T13598] __x64_sys_sendmsg+0x19b/0x260 [ 266.754318][T13598] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 266.754362][T13598] ? __pfx_ksys_write+0x10/0x10 [ 266.754388][T13598] ? rcu_is_watching+0x15/0xb0 [ 266.754420][T13598] ? do_syscall_64+0xbe/0x3b0 [ 266.754448][T13598] do_syscall_64+0xfa/0x3b0 [ 266.754471][T13598] ? lockdep_hardirqs_on+0x9c/0x150 [ 266.754493][T13598] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.754514][T13598] ? clear_bhb_loop+0x60/0xb0 [ 266.754540][T13598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.754561][T13598] RIP: 0033:0x7fe43178e9a9 [ 266.754594][T13598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.754613][T13598] RSP: 002b:00007fe42f5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 266.754645][T13598] RAX: ffffffffffffffda RBX: 00007fe4319b6160 RCX: 00007fe43178e9a9 [ 266.754662][T13598] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 266.754676][T13598] RBP: 00007fe42f5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 266.754689][T13598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.754701][T13598] R13: 0000000000000000 R14: 00007fe4319b6160 R15: 00007fff15da2d58 [ 266.754734][T13598] [ 266.939884][T13605] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 267.328152][T13624] netlink: 'syz.4.2142': attribute type 8 has an invalid length. [ 267.584478][T13632] netlink: 'syz.0.2145': attribute type 4 has an invalid length. [ 267.665371][T13635] netlink: 'syz.0.2145': attribute type 4 has an invalid length. [ 268.176955][T13675] FAULT_INJECTION: forcing a failure. [ 268.176955][T13675] name failslab, interval 1, probability 0, space 0, times 1 [ 268.249316][T13675] CPU: 0 UID: 0 PID: 13675 Comm: syz.0.2153 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 268.249351][T13675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 268.249365][T13675] Call Trace: [ 268.249374][T13675] [ 268.249384][T13675] dump_stack_lvl+0x189/0x250 [ 268.249417][T13675] ? __pfx____ratelimit+0x10/0x10 [ 268.249450][T13675] ? __pfx_dump_stack_lvl+0x10/0x10 [ 268.249477][T13675] ? __pfx__printk+0x10/0x10 [ 268.249514][T13675] ? ref_tracker_alloc+0x318/0x460 [ 268.249543][T13675] should_fail_ex+0x414/0x560 [ 268.249572][T13675] should_failslab+0xa8/0x100 [ 268.249607][T13675] kmem_cache_alloc_noprof+0x73/0x3c0 [ 268.249637][T13675] ? skb_clone+0x212/0x3a0 [ 268.249664][T13675] skb_clone+0x212/0x3a0 [ 268.249689][T13675] __netlink_deliver_tap+0x404/0x850 [ 268.249736][T13675] ? netlink_deliver_tap+0x2e/0x1b0 [ 268.249768][T13675] netlink_deliver_tap+0x19c/0x1b0 [ 268.249800][T13675] netlink_unicast+0x730/0x8e0 [ 268.249841][T13675] netlink_sendmsg+0x805/0xb30 [ 268.249884][T13675] ? __pfx_netlink_sendmsg+0x10/0x10 [ 268.249920][T13675] ? aa_sock_msg_perm+0x94/0x160 [ 268.249946][T13675] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 268.249969][T13675] ? __pfx_netlink_sendmsg+0x10/0x10 [ 268.250001][T13675] __sock_sendmsg+0x21c/0x270 [ 268.250031][T13675] ____sys_sendmsg+0x505/0x830 [ 268.250072][T13675] ? __pfx_____sys_sendmsg+0x10/0x10 [ 268.250116][T13675] ? import_iovec+0x74/0xa0 [ 268.250152][T13675] ___sys_sendmsg+0x21f/0x2a0 [ 268.250188][T13675] ? __pfx____sys_sendmsg+0x10/0x10 [ 268.250265][T13675] ? __fget_files+0x2a/0x420 [ 268.250285][T13675] ? __fget_files+0x3a0/0x420 [ 268.250317][T13675] __x64_sys_sendmsg+0x19b/0x260 [ 268.250353][T13675] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 268.250398][T13675] ? __pfx_ksys_write+0x10/0x10 [ 268.250424][T13675] ? rcu_is_watching+0x15/0xb0 [ 268.250463][T13675] ? do_syscall_64+0xbe/0x3b0 [ 268.250492][T13675] do_syscall_64+0xfa/0x3b0 [ 268.250514][T13675] ? lockdep_hardirqs_on+0x9c/0x150 [ 268.250536][T13675] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.250558][T13675] ? clear_bhb_loop+0x60/0xb0 [ 268.250584][T13675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.250605][T13675] RIP: 0033:0x7f9a9798e9a9 [ 268.250624][T13675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.250644][T13675] RSP: 002b:00007f9a9887e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 268.250668][T13675] RAX: ffffffffffffffda RBX: 00007f9a97bb6160 RCX: 00007f9a9798e9a9 [ 268.250684][T13675] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 268.250698][T13675] RBP: 00007f9a9887e090 R08: 0000000000000000 R09: 0000000000000000 [ 268.250711][T13675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.250724][T13675] R13: 0000000000000000 R14: 00007f9a97bb6160 R15: 00007ffcb7da67e8 [ 268.250758][T13675] [ 268.631382][T13684] IPVS: set_ctl: invalid protocol: 43 172.30.1.3:20007 [ 268.698372][T10010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.723926][T10010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.128641][T13711] x_tables: duplicate underflow at hook 1 [ 269.648066][T13737] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.737605][T13746] __nla_validate_parse: 10 callbacks suppressed [ 269.737627][T13746] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2173'. [ 269.754565][T13746] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2173'. [ 269.850701][T13752] netlink: 'syz.3.2176': attribute type 1 has an invalid length. [ 269.861990][T13756] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2175'. [ 269.988664][T13761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2177'. [ 270.026224][T13769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2178'. [ 270.051070][T13769] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2178'. [ 270.076689][T13769] netlink: 'syz.4.2178': attribute type 13 has an invalid length. [ 270.234889][T13775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2181'. [ 270.252766][T13775] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2181'. [ 270.326198][T13778] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2182'. [ 270.453442][T13786] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.468530][T13786] netlink: 'syz.0.2184': attribute type 7 has an invalid length. [ 270.842394][T13805] netlink: 'syz.0.2192': attribute type 1 has an invalid length. [ 270.869098][T13805] netlink: 208 bytes leftover after parsing attributes in process `syz.0.2192'. [ 270.895979][T13805] netlink: 'syz.0.2192': attribute type 1 has an invalid length. [ 270.910302][T13805] netlink: 'syz.0.2192': attribute type 2 has an invalid length. [ 271.145761][T13820] IPVS: set_ctl: invalid protocol: 32477 255.255.255.255:20001 [ 271.439251][T13832] can: request_module (can-proto-0) failed. [ 271.821153][T13849] validate_nla: 3 callbacks suppressed [ 271.821175][T13849] netlink: 'syz.0.2202': attribute type 1 has an invalid length. [ 272.487831][T13866] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 272.507578][T13866] bridge1: entered promiscuous mode [ 272.544427][T13866] bridge1: entered allmulticast mode [ 272.920398][T13888] netlink: 'syz.1.2218': attribute type 2 has an invalid length. [ 273.802712][T13941] FAULT_INJECTION: forcing a failure. [ 273.802712][T13941] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 273.817409][T13941] CPU: 0 UID: 0 PID: 13941 Comm: syz.2.2232 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 273.817441][T13941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 273.817455][T13941] Call Trace: [ 273.817463][T13941] [ 273.817472][T13941] dump_stack_lvl+0x189/0x250 [ 273.817504][T13941] ? __pfx____ratelimit+0x10/0x10 [ 273.817527][T13941] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.817552][T13941] ? __pfx__printk+0x10/0x10 [ 273.817597][T13941] should_fail_ex+0x414/0x560 [ 273.817625][T13941] _copy_to_user+0x31/0xb0 [ 273.817659][T13941] simple_read_from_buffer+0xe1/0x170 [ 273.817696][T13941] proc_fail_nth_read+0x1df/0x250 [ 273.817722][T13941] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 273.817748][T13941] ? rw_verify_area+0x258/0x650 [ 273.817775][T13941] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 273.817799][T13941] vfs_read+0x200/0x980 [ 273.817833][T13941] ? __pfx___mutex_lock+0x10/0x10 [ 273.817859][T13941] ? __pfx_vfs_read+0x10/0x10 [ 273.817888][T13941] ? __fget_files+0x2a/0x420 [ 273.817914][T13941] ? __fget_files+0x3a0/0x420 [ 273.817931][T13941] ? __fget_files+0x2a/0x420 [ 273.817962][T13941] ksys_read+0x145/0x250 [ 273.817993][T13941] ? __pfx_ksys_read+0x10/0x10 [ 273.818019][T13941] ? rcu_is_watching+0x15/0xb0 [ 273.818058][T13941] ? do_syscall_64+0xbe/0x3b0 [ 273.818087][T13941] do_syscall_64+0xfa/0x3b0 [ 273.818110][T13941] ? lockdep_hardirqs_on+0x9c/0x150 [ 273.818131][T13941] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.818153][T13941] ? clear_bhb_loop+0x60/0xb0 [ 273.818179][T13941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.818199][T13941] RIP: 0033:0x7fbd3df8d3bc [ 273.818219][T13941] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 273.818238][T13941] RSP: 002b:00007fbd3eda7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 273.818260][T13941] RAX: ffffffffffffffda RBX: 00007fbd3e1b6160 RCX: 00007fbd3df8d3bc [ 273.818276][T13941] RDX: 000000000000000f RSI: 00007fbd3eda70a0 RDI: 0000000000000008 [ 273.818289][T13941] RBP: 00007fbd3eda7090 R08: 0000000000000000 R09: 0000000000000000 [ 273.818302][T13941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 273.818314][T13941] R13: 0000000000000000 R14: 00007fbd3e1b6160 R15: 00007ffca1662588 [ 273.818349][T13941] [ 275.542953][T14018] __nla_validate_parse: 10 callbacks suppressed [ 275.542975][T14018] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2257'. [ 275.628760][T14020] digital: digital_start_poll: Unknown protocol [ 275.823062][T14032] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2261'. [ 275.857070][T14032] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2261'. [ 276.138420][T14048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2265'. [ 276.208594][T14051] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 276.644870][T14080] netlink: 22 bytes leftover after parsing attributes in process `syz.2.2274'. [ 276.868359][T14090] ip6gre1: entered allmulticast mode [ 276.926875][T14094] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2278'. [ 277.007980][ T30] audit: type=1107 audit(1752873813.752:6): pid=14095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ex ‚ÓÖ‹„œG–º [ 277.007980][ T30] qO·µ$' [ 277.308649][T14116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2285'. [ 277.503746][T14127] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 277.607700][T14132] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2286'. [ 277.659400][T14132] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2286'. [ 277.868137][T14141] sch_tbf: burst 0 is lower than device lo mtu (39799) ! [ 277.953797][T14147] sctp: [Deprecated]: syz.3.2293 (pid 14147) Use of int in maxseg socket option. [ 277.953797][T14147] Use struct sctp_assoc_value instead [ 278.015242][T14149] nbd: must specify at least one socket [ 278.187655][T14158] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2297'. [ 278.295332][T14166] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 278.353218][T14168] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 278.356026][T14170] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 278.616861][T14181] tipc: Cannot configure node identity twice [ 278.739328][T14187] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 278.853139][T14196] netlink: 'syz.4.2306': attribute type 11 has an invalid length. [ 279.238152][T14219] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 279.255464][T14219] netlink: 'syz.1.2314': attribute type 8 has an invalid length. [ 280.397952][T14268] openvswitch: netlink: IPv4 tun info is not correct [ 280.491802][T14270] netlink: 'syz.1.2328': attribute type 4 has an invalid length. [ 280.554632][T14277] unsupported nla_type 52263 [ 280.619250][T14281] tipc: Bearer : already 2 bearers with priority 10 [ 280.628103][T14281] tipc: Bearer : trying with adjusted priority [ 280.640654][T14281] tipc: Enabling of bearer rejected, failed to enable media [ 280.743948][T14287] block nbd1: not configured, cannot reconfigure [ 280.822942][T14295] __nla_validate_parse: 10 callbacks suppressed [ 280.822963][T14295] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2336'. [ 280.865016][T14296] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2338'. [ 280.881055][T14299] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2336'. [ 281.085321][T14311] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2336'. [ 281.143103][T14313] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2336'. [ 281.287963][T14295] netlink: 'syz.2.2336': attribute type 1 has an invalid length. [ 281.296423][T14295] netlink: 'syz.2.2336': attribute type 2 has an invalid length. [ 281.836450][T14321] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.866987][T14321] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.983297][T14337] tipc: Enabled bearer , priority 0 [ 282.104850][T14321] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.136978][T14321] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.200473][T14326] tipc: Disabling bearer [ 282.412424][T14321] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.449171][T14321] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.622600][T14321] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.658085][T14321] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.881889][T14351] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 282.906245][T14321] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.916297][T14321] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.948415][T14321] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.968048][T14321] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.014169][T14321] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.031632][T14321] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.100844][T14321] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.121351][T14321] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.375900][T14360] netlink: 'syz.4.2353': attribute type 10 has an invalid length. [ 283.843268][T14376] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2359'. [ 283.873145][T14378] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2357'. [ 283.942182][T14380] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2360'. [ 284.167975][T14394] netlink: 'syz.2.2363': attribute type 12 has an invalid length. [ 284.214498][T14376] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.324173][T14376] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.345702][T14376] bond0 (unregistering): Released all slaves [ 284.440337][ T1324] bond3: (slave veth0_to_bond): link status definitely down, disabling slave [ 284.468522][ T1324] bond3: (slave vlan2): making interface the new active one [ 284.517421][ T1324] veth1: entered promiscuous mode [ 284.523969][ T1324] vlan2: entered promiscuous mode [ 284.593247][T14400] netlink: 'syz.3.2365': attribute type 1 has an invalid length. [ 284.619390][T14400] netlink: 204 bytes leftover after parsing attributes in process `syz.3.2365'. [ 284.836160][T14404] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2366'. [ 284.915266][T14420] netlink: 'syz.3.2370': attribute type 83 has an invalid length. [ 285.860911][T14475] __nla_validate_parse: 1 callbacks suppressed [ 285.860931][T14475] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2388'. [ 285.879679][T14484] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2385'. [ 285.941253][T14485] bond0: entered promiscuous mode [ 285.949554][T14486] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2387'. [ 285.977381][T14485] bond0: left promiscuous mode [ 286.000066][T14486] ipt_REJECT: ECHOREPLY no longer supported. [ 286.725959][T14519] netlink: 216 bytes leftover after parsing attributes in process `syz.1.2399'. [ 286.738171][T14522] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2401'. [ 286.767097][T14522] veth0: entered promiscuous mode [ 286.852428][T14526] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 286.915238][T14520] veth0: left promiscuous mode [ 287.082110][T14537] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 287.407518][T14556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2412'. [ 287.423138][T14556] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2412'. [ 287.433894][T14559] A link change request failed with some changes committed already. Interface ªªªªªª†³?ÂHº may have been left with an inconsistent configuration, please check. [ 287.669291][T14573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2418'. [ 287.695561][T14573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2418'. [ 287.970897][T14588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2424'. [ 287.980947][T14588] netlink: 'syz.1.2424': attribute type 5 has an invalid length. [ 287.997905][T14589] netlink: 'syz.0.2423': attribute type 10 has an invalid length. [ 288.012848][T14588] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 288.023952][T14588] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 288.039409][T14588] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 288.048363][T14588] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 288.066525][T14588] geneve2: entered promiscuous mode [ 288.075697][T14588] geneve2: entered allmulticast mode [ 289.058636][T14648] sctp: [Deprecated]: syz.2.2442 (pid 14648) Use of struct sctp_assoc_value in delayed_ack socket option. [ 289.058636][T14648] Use struct sctp_sack_info instead [ 289.129138][ C1] syz_tun: tun_net_xmit 76 [ 289.144138][T14647] team1: entered promiscuous mode [ 289.162178][T14647] team1: entered allmulticast mode [ 289.378371][T14659] netlink: 'syz.4.2446': attribute type 21 has an invalid length. [ 289.415152][T14659] tipc: Enabled bearer , priority 0 [ 289.481433][T14661] syzkaller0: entered promiscuous mode [ 289.516106][T14661] syzkaller0: entered allmulticast mode [ 289.687980][T14684] netlink: 'syz.3.2449': attribute type 4 has an invalid length. [ 289.761456][T14657] tipc: Resetting bearer [ 289.930201][T14657] tipc: Disabling bearer [ 289.967630][T14686] bond0: left allmulticast mode [ 289.973454][T14686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.108823][T14702] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 290.958348][T14727] bond0 (unregistering): Released all slaves [ 291.239716][T14746] xt_bpf: check failed: parse error [ 291.888708][T14777] __nla_validate_parse: 10 callbacks suppressed [ 291.888734][T14777] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2473'. [ 291.936736][T14777] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2473'. [ 291.978018][T14777] netlink: 31 bytes leftover after parsing attributes in process `syz.1.2473'. [ 292.026179][T14777] netlink: 'syz.1.2473': attribute type 3 has an invalid length. [ 292.048225][T14777] netlink: 'syz.1.2473': attribute type 2 has an invalid length. [ 292.056440][T14777] netlink: 31 bytes leftover after parsing attributes in process `syz.1.2473'. [ 292.450359][T14801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2483'. [ 292.560727][T14815] netlink: 'syz.1.2485': attribute type 39 has an invalid length. [ 292.591170][T14801] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 292.600687][T14805] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 292.779106][T14826] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2488'. [ 292.818039][T14832] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2491'. [ 292.875007][T14835] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 292.896449][T14836] IPVS: sync thread started: state = BACKUP, mcast_ifn = erspan0, syncid = 0, id = 0 [ 293.008549][T14838] bridge3: entered promiscuous mode [ 293.023254][T14838] bridge3: entered allmulticast mode [ 293.066512][T14840] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2492'. [ 293.497975][T14865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2501'. [ 293.548758][T14865] ip6gre2: entered allmulticast mode [ 293.580267][T14872] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2502'. [ 294.198933][T14901] syz_tun: tun_net_xmit 42 [ 294.219764][T14897] netlink: 'syz.1.2510': attribute type 1 has an invalid length. [ 294.258496][T14893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 294.406277][T14906] tipc: Bearer : already 2 bearers with priority 10 [ 294.432677][T14906] tipc: Bearer : trying with adjusted priority [ 294.448713][T14906] tipc: Enabling of bearer rejected, failed to enable media [ 294.637972][T14924] xt_cluster: node mask cannot exceed total number of nodes [ 295.208999][ C0] syz_tun: tun_net_xmit 42 [ 295.509942][T14963] tipc: Enabling of bearer rejected, failed to enable media [ 295.634119][T12512] vlan2: left promiscuous mode [ 295.673177][T14972] xt_hashlimit: max too large, truncated to 1048576 [ 295.856903][T14985] xt_TPROXY: Can be used only with -p tcp or -p udp [ 295.978123][T14991] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 295.989624][T14991] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 296.125467][T14999] netlink: 'syz.1.2542': attribute type 2 has an invalid length. [ 296.249037][ C0] syz_tun: tun_net_xmit 42 [ 296.408257][ T5859] Bluetooth: hci4: link tx timeout [ 296.417262][ T5859] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 297.002512][T15046] netlink: 'syz.0.2558': attribute type 4 has an invalid length. [ 297.024874][T15046] __nla_validate_parse: 14 callbacks suppressed [ 297.024896][T15046] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2558'. [ 297.439753][T15075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2565'. [ 297.474537][T15075] netlink: 19708 bytes leftover after parsing attributes in process `syz.2.2565'. [ 297.491275][T15075] netlink: 'syz.2.2565': attribute type 4 has an invalid length. [ 297.549426][T15080] netlink: 'syz.2.2565': attribute type 11 has an invalid length. [ 297.576547][T15081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2567'. [ 297.589207][T15080] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2565'. [ 297.609568][T15081] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.700080][T15086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2570'. [ 297.729317][T15086] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2570'. [ 297.738619][T15086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2570'. [ 297.828496][T15081] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.848224][T15097] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2571'. [ 297.966158][T15088] gretap2: entered promiscuous mode [ 298.262001][T15122] Unsupported ieee802154 address type: 0 [ 298.320857][T15122] netlink: 'syz.2.2581': attribute type 2 has an invalid length. [ 298.328820][T15122] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2581'. [ 298.357675][T15127] No such timeout policy "syz0" [ 298.474978][T15132] No such timeout policy "syz0" [ 298.494269][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 298.512854][T15135] netlink: 'syz.3.2584': attribute type 1 has an invalid length. [ 298.540698][T15135] netlink: 'syz.3.2584': attribute type 1 has an invalid length. [ 298.585713][T15136] netlink: 'syz.3.2584': attribute type 1 has an invalid length. [ 298.626090][T15136] netlink: 'syz.3.2584': attribute type 1 has an invalid length. [ 298.815336][T15153] netlink: 'syz.2.2590': attribute type 11 has an invalid length. [ 298.860756][T15159] netlink: 'syz.3.2592': attribute type 1 has an invalid length. [ 298.873653][T15159] netlink: 'syz.3.2592': attribute type 2 has an invalid length. [ 299.322712][T15183] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 299.374014][T15184] xt_TCPMSS: Only works on TCP SYN packets [ 299.930543][T15204] rdma_op ffff88803205d9f0 conn xmit_rdma 0000000000000000 [ 301.896894][T15284] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 302.084070][T15294] x_tables: duplicate underflow at hook 1 [ 302.918473][ T13] tipc: Subscription rejected, illegal request [ 303.256428][T15337] validate_nla: 2 callbacks suppressed [ 303.256450][T15337] netlink: 'syz.2.2643': attribute type 39 has an invalid length. [ 303.576609][T15356] netlink: 'syz.3.2648': attribute type 2 has an invalid length. [ 303.962055][T15369] __nla_validate_parse: 8 callbacks suppressed [ 303.962100][T15369] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2651'. [ 303.987229][T15370] batadv3: entered allmulticast mode [ 304.246361][T15380] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2653'. [ 304.279090][T15380] netlink: zone id is out of range [ 304.284772][T15380] netlink: zone id is out of range [ 304.301283][T15380] netlink: zone id is out of range [ 304.321173][T15380] netlink: zone id is out of range [ 304.335724][T15380] netlink: zone id is out of range [ 304.349058][T15380] netlink: zone id is out of range [ 304.362096][T15380] netlink: zone id is out of range [ 304.380399][T15380] netlink: zone id is out of range [ 304.393523][T15380] netlink: zone id is out of range [ 304.422343][T15380] netlink: zone id is out of range [ 304.439080][T15380] netlink: zone id is out of range [ 304.457380][T15380] netlink: zone id is out of range [ 304.477473][T15380] netlink: zone id is out of range [ 304.486234][T15380] netlink: zone id is out of range [ 304.540660][T15395] netlink: 'syz.1.2658': attribute type 12 has an invalid length. [ 304.549143][T15395] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2658'. [ 304.740133][T15408] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2661'. [ 304.953838][T15408] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2661'. [ 305.618496][T15434] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2669'. [ 305.764796][T15441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2671'. [ 307.315841][T15439] netdevsim netdevsim3 netdevsim3: left allmulticast mode [ 307.331370][T15446] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 307.470693][T15457] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2675'. [ 307.501997][T15457] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2675'. [ 307.527608][T15457] netlink: 'syz.4.2675': attribute type 3 has an invalid length. [ 307.547081][T15469] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 307.604943][T15469] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2679'. [ 308.113431][T15503] netlink: 'syz.4.2686': attribute type 8 has an invalid length. [ 308.126015][T15504] netlink: 'syz.1.2689': attribute type 1 has an invalid length. [ 308.166463][T15507] ip6t_srh: unknown srh match flags 536B [ 308.586150][T15523] netlink: 'syz.4.2695': attribute type 1 has an invalid length. [ 308.600431][T15523] netlink: 'syz.4.2695': attribute type 1 has an invalid length. [ 308.617380][T15523] netlink: 'syz.4.2695': attribute type 1 has an invalid length. [ 308.625754][T15523] netlink: 'syz.4.2695': attribute type 1 has an invalid length. [ 308.850970][T15531] netlink: 'syz.3.2699': attribute type 29 has an invalid length. [ 308.871051][T15531] netlink: 'syz.3.2699': attribute type 29 has an invalid length. [ 310.072593][T15595] __nla_validate_parse: 4 callbacks suppressed [ 310.072615][T15595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2715'. [ 310.260979][T15604] netlink: 'syz.2.2718': attribute type 10 has an invalid length. [ 310.528606][T15619] netlink: 240 bytes leftover after parsing attributes in process `syz.3.2723'. [ 310.850333][T15638] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2727'. [ 310.864973][T15638] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2727'. [ 310.877045][T15638] netlink: 'syz.0.2727': attribute type 5 has an invalid length. [ 310.909142][T15638] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2727'. [ 311.115086][T15653] 8021q: VLANs not supported on lo [ 311.612969][T15676] hsr0 speed is unknown, defaulting to 1000 [ 311.631705][T15676] hsr0 speed is unknown, defaulting to 1000 [ 311.652202][T15676] hsr0 speed is unknown, defaulting to 1000 [ 311.677919][T15680] netlink: 'syz.1.2736': attribute type 1 has an invalid length. [ 311.686223][T15680] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2736'. [ 311.695676][T15680] netlink: 'syz.1.2736': attribute type 1 has an invalid length. [ 311.710089][T15662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.718243][T15676] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 311.740720][T15676] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 311.805417][T15676] hsr0 speed is unknown, defaulting to 1000 [ 311.814194][T15676] hsr0 speed is unknown, defaulting to 1000 [ 311.831630][T15676] hsr0 speed is unknown, defaulting to 1000 [ 311.840921][T15676] hsr0 speed is unknown, defaulting to 1000 [ 311.849619][T15676] hsr0 speed is unknown, defaulting to 1000 [ 312.054098][T15692] mac80211_hwsim hwsim10 wlan1: left allmulticast mode [ 312.155949][T15696] 8021q: adding VLAN 0 to HW filter on device bond6 [ 312.380209][T15714] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2751'. [ 312.414626][T15711] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2750'. [ 312.725636][T15727] sch_tbf: peakrate 7 is lower than or equals to rate 2476736875580203068 ! [ 312.773734][T15740] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2759'. [ 312.942920][T15751] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2762'. [ 313.809499][T15788] validate_nla: 4 callbacks suppressed [ 313.809520][T15788] netlink: 'syz.2.2772': attribute type 1 has an invalid length. [ 314.403955][T15817] net_ratelimit: 15 callbacks suppressed [ 314.403977][T15817] team_slave_0: mtu greater than device maximum [ 314.608784][T15826] tap0: tun_chr_ioctl cmd 1074025677 [ 314.638600][T15826] tap0: linktype set to 65534 [ 315.094596][T15854] __nla_validate_parse: 10 callbacks suppressed [ 315.094618][T15854] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2793'. [ 315.130258][T15854] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2793'. [ 315.137204][T15858] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2794'. [ 315.146049][T15854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2793'. [ 315.200524][T15862] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2796'. [ 315.217270][T15862] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2796'. [ 315.258522][T15865] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2797'. [ 315.445481][T15873] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 315.483913][T15880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2802'. [ 316.244525][T15917] netlink: 'syz.1.2809': attribute type 6 has an invalid length. [ 316.285749][T15917] pimreg: entered allmulticast mode [ 316.323038][T15907] delete_channel: no stack [ 316.460627][T15923] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2810'. [ 316.502649][T15923] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2810'. [ 316.675754][T15936] gretap0: entered promiscuous mode [ 316.699059][T15936] gretap0: left promiscuous mode [ 317.109428][T15954] nbd1: detected capacity change from 0 to 127 [ 317.151175][T15970] bridge0: port 1(batadv0) entered disabled state [ 317.294262][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.543058][T15970] tipc: Resetting bearer [ 317.586219][T15970] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.596623][T15970] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.605855][T15970] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.614974][T15970] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.662887][T15970] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.672517][T15970] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.681811][T15970] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.690969][T15970] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.743541][T15970] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 317.754442][ T5859] block nbd1: Receive control failed (result -32) [ 317.763900][T15970] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 317.773763][T15970] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 317.783425][T15970] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 318.287051][T16022] netlink: 'syz.2.2835': attribute type 10 has an invalid length. [ 318.625734][T16042] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 318.809625][T16052] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 318.818203][T16052] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 319.236262][T16070] tun0: tun_chr_ioctl cmd 1074025675 [ 319.246465][T16070] tun0: persist disabled [ 319.476850][T16078] bridge7: entered allmulticast mode [ 319.594363][T16085] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 319.607016][T16086] netlink: 'syz.1.2847': attribute type 2 has an invalid length. [ 319.795166][T16095] x_tables: duplicate underflow at hook 1 [ 319.947700][T16102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 320.429646][T16132] netlink: 'syz.1.2866': attribute type 1 has an invalid length. [ 320.437482][T16132] netlink: 'syz.1.2866': attribute type 2 has an invalid length. [ 320.532111][T16139] vlan2: entered promiscuous mode [ 320.540825][T16139] vlan2: entered allmulticast mode [ 320.546016][T16139] hsr_slave_1: entered allmulticast mode [ 320.642969][T16147] __nla_validate_parse: 9 callbacks suppressed [ 320.642988][T16147] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2867'. [ 320.831449][T16153] tap0: tun_chr_ioctl cmd 2148553947 [ 321.184135][T16167] netlink: 'syz.4.2876': attribute type 4 has an invalid length. [ 321.193148][T16167] netlink: 'syz.4.2876': attribute type 4 has an invalid length. [ 321.357268][T16173] syzkaller0: entered promiscuous mode [ 321.384650][T16173] syzkaller0: entered allmulticast mode [ 321.400019][T16178] netlink: 'syz.3.2880': attribute type 3 has an invalid length. [ 321.416312][T16175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2879'. [ 321.510360][T16176] openvswitch: netlink: Missing key (keys=40, expected=80) [ 322.040837][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 322.054066][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 322.067810][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 322.086530][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 322.114235][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 323.507225][T16195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2885'. [ 323.573848][T16198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2885'. [ 323.587320][T16197] x_tables: duplicate underflow at hook 1 [ 323.825171][T16210] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2889'. [ 323.868685][T12518] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.912734][T16215] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2890'. [ 323.977620][T16217] nbd: must specify at least one socket [ 324.061599][T12518] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.157154][T16227] netlink: 'syz.3.2896': attribute type 10 has an invalid length. [ 324.177068][ T51] Bluetooth: hci2: command tx timeout [ 324.222619][T12518] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.239840][T16233] openvswitch: netlink: Message has -1 unknown bytes. [ 324.289925][T16231] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2895'. [ 324.330359][T16231] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2895'. [ 324.340202][T12518] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.763995][T16192] chnl_net:caif_netlink_parms(): no params data found [ 324.954828][T16265] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2908'. [ 325.097889][T16270] xt_l2tp: invalid flags combination: 4 [ 325.118428][T16271] netlink: 'syz.4.2911': attribute type 142 has an invalid length. [ 325.131955][T16273] netlink: 'syz.4.2911': attribute type 142 has an invalid length. [ 325.220541][T16276] netlink: 'syz.4.2912': attribute type 1 has an invalid length. [ 325.228985][T16276] netlink: 'syz.4.2912': attribute type 2 has an invalid length. [ 325.410640][T12518] tipc: Disabling bearer [ 325.437982][T16281] IPv6: NLM_F_REPLACE set, but no existing node found! [ 325.922158][T12518] bond1 (unregistering): Released all slaves [ 326.045453][T12518] bond0 (unregistering): Released all slaves [ 326.062081][T12518] bond2 (unregistering): Released all slaves [ 326.078269][T12518] bond3 (unregistering): Released all slaves [ 326.204170][T12518] bond4 (unregistering): Released all slaves [ 326.220838][T12518] bond5 (unregistering): Released all slaves [ 326.238184][T12518] bond6 (unregistering): Released all slaves [ 326.253900][ T51] Bluetooth: hci2: command tx timeout [ 326.274864][T16263] lo: left promiscuous mode [ 326.284021][T16263] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 326.520286][T12518] tipc: Disabling bearer [ 326.545018][T12518] tipc: Left network mode [ 326.643894][T16298] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2917'. [ 326.680475][T12518] IPVS: stopping master sync thread 13156 ... [ 326.770639][T16192] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.788658][T16192] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.805962][T16192] bridge_slave_0: entered allmulticast mode [ 326.814299][T16192] bridge_slave_0: entered promiscuous mode [ 326.878353][T16192] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.896352][T16192] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.908409][T16192] bridge_slave_1: entered allmulticast mode [ 326.935294][T16192] bridge_slave_1: entered promiscuous mode [ 327.108328][T16307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2920'. [ 327.158714][T16305] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.177459][T16305] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.222566][T16192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.264762][T16192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.426169][T16305] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.437237][T16305] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.517568][T16310] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2922'. [ 327.530872][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.555329][T16305] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.579104][T16305] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.707184][T16192] team0: Port device team_slave_0 added [ 327.721220][T16305] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.735070][T16305] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.778192][T16192] team0: Port device team_slave_1 added [ 327.996170][T16192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.011643][T16192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.047235][T16192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.093724][T16192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.109585][T16325] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2925'. [ 328.119183][T16192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.183866][T16192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.218535][T16305] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.227396][T16305] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.329645][ T51] Bluetooth: hci2: command tx timeout [ 328.335510][T12518] hsr_slave_0: left promiscuous mode [ 328.362512][T12518] hsr_slave_1: left promiscuous mode [ 328.508368][T16344] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 328.633427][T16344] netlink: 'syz.3.2930': attribute type 10 has an invalid length. [ 329.197656][T16305] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.206727][T16305] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.380780][T16192] hsr_slave_0: entered promiscuous mode [ 329.397857][T16192] hsr_slave_1: entered promiscuous mode [ 329.437454][T16305] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.449329][T16305] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.492119][T16305] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.522823][T16305] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.838697][T16373] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2935'. [ 330.338667][T12518] IPVS: stop unused estimator thread 0... [ 330.419530][ T51] Bluetooth: hci2: command tx timeout [ 330.492992][T16398] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2942'. [ 330.507276][T16398] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2942'. [ 330.827163][T16418] sctp: [Deprecated]: syz.3.2948 (pid 16418) Use of struct sctp_assoc_value in delayed_ack socket option. [ 330.827163][T16418] Use struct sctp_sack_info instead [ 330.899782][T16192] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 330.928724][T16192] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 330.937640][T16422] netlink: 'syz.2.2949': attribute type 1 has an invalid length. [ 330.956574][T16422] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2949'. [ 330.958631][T16192] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 330.980248][T16422] netlink: 'syz.2.2949': attribute type 1 has an invalid length. [ 331.004224][T16192] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 331.153517][T16437] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 331.293463][T16192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.403635][T16192] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.445226][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.452505][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.496445][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.503840][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.644127][T16192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 331.651031][T16457] netlink: 'syz.2.2958': attribute type 83 has an invalid length. [ 331.724753][T16461] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2959'. [ 331.747042][T16461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2959'. [ 331.772722][T16464] sock: sock_set_timeout: `syz.4.2960' (pid 16464) tries to set negative timeout [ 331.952169][T16474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2962'. [ 332.225239][T16481] dvmrp8: entered allmulticast mode [ 332.301897][T16192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.341627][T16484] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2966'. [ 332.347230][T16491] batadv_slave_0: entered allmulticast mode [ 332.391919][T16486] batadv_slave_0: left allmulticast mode [ 332.482322][T16192] veth0_vlan: entered promiscuous mode [ 332.526595][T16192] veth1_vlan: entered promiscuous mode [ 332.610536][T16192] veth0_macvtap: entered promiscuous mode [ 332.623789][T16192] veth1_macvtap: entered promiscuous mode [ 332.648790][T16192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.725669][T16192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.908019][T16192] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.120588][T16192] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.130787][T16192] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.139839][T16192] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.532116][ T1324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.553053][ T1324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.701965][T12511] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.729887][T12511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.802229][T16544] syz_tun: tun_net_xmit 34 [ 333.809104][T16543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2979'. [ 333.939641][T16551] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2980'. [ 333.948676][T16551] tc_dump_action: action bad kind [ 333.979135][T12246] syz_tun: tun_net_xmit 110 [ 334.063974][T12246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.113924][T12246] syz_tun: tun_net_xmit 96 [ 334.179806][T12246] syz_tun: tun_net_xmit 96 [ 334.237703][T16559] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2982'. [ 334.254143][T16569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2985'. [ 334.492750][T16577] netlink: 'syz.2.2987': attribute type 23 has an invalid length. [ 334.648441][T16559] bond0 (unregistering): (slave ªªªªªª): Releasing backup interface [ 334.685956][T16559] bond0 (unregistering): Released all slaves [ 334.738472][T16574] C: renamed from lo (while UP) [ 334.752281][T16574] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 334.807597][ T5859] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 334.849470][ T5859] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 334.866788][ T5859] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 334.876164][ T5859] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 334.902521][ T5859] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 334.902944][T12246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.952590][T12246] syz_tun: tun_net_xmit 110 [ 335.057463][T16590] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 335.109212][T16590] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 335.110888][T16594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2988'. [ 335.143959][T16594] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 335.742776][T16617] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2999'. [ 336.011935][T16620] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 336.141668][T16620] netlink: 'syz.2.2998': attribute type 13 has an invalid length. [ 336.159330][T16620] netlink: 'syz.2.2998': attribute type 17 has an invalid length. [ 336.400089][T16620] tunl0: left promiscuous mode [ 336.425932][T16620] gre0: left promiscuous mode [ 336.461626][T16620] gretap0: left promiscuous mode [ 336.490625][T16620] erspan0: left promiscuous mode [ 336.495950][T16620] erspan0: left allmulticast mode [ 336.505078][T16640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.523876][T16620] ip_vti0: left promiscuous mode [ 336.628791][T16620] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 336.645852][T16636] bridge0: port 4(gretap0) entered blocking state [ 336.653569][T16636] bridge0: port 4(gretap0) entered disabled state [ 336.661123][T16636] gretap0: entered allmulticast mode [ 336.668550][T16636] gretap0: entered promiscuous mode [ 336.676517][T16636] bridge0: port 4(gretap0) entered blocking state [ 336.683144][T16636] bridge0: port 4(gretap0) entered forwarding state [ 336.692934][T16637] ip6erspan0: entered allmulticast mode [ 336.979915][ T51] Bluetooth: hci5: command tx timeout [ 337.093786][T16653] netlink: 'syz.1.3006': attribute type 8 has an invalid length. [ 337.151909][T16653] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 337.197250][T16579] chnl_net:caif_netlink_parms(): no params data found [ 337.747150][T16579] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.768007][T16579] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.792938][T16579] bridge_slave_0: entered allmulticast mode [ 337.812647][T16579] bridge_slave_0: entered promiscuous mode [ 337.836024][T16579] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.836199][T16702] __nla_validate_parse: 2 callbacks suppressed [ 337.836215][T16702] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3018'. [ 337.870759][T16579] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.878265][T16579] bridge_slave_1: entered allmulticast mode [ 337.886884][T16579] bridge_slave_1: entered promiscuous mode [ 338.024382][T16706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3019'. [ 338.074393][T16579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.104165][T16579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.114966][T16709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3020'. [ 338.275170][T16579] team0: Port device team_slave_0 added [ 338.301892][T16579] team0: Port device team_slave_1 added [ 338.407745][T16722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3022'. [ 338.447748][T16579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.475284][T16579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.508330][T16579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.530455][T16579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.537618][T16579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.566145][T16579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.700306][T16732] sctp: [Deprecated]: syz.2.3028 (pid 16732) Use of struct sctp_assoc_value in delayed_ack socket option. [ 338.700306][T16732] Use struct sctp_sack_info instead [ 338.744959][T16579] hsr_slave_0: entered promiscuous mode [ 338.767735][T16579] hsr_slave_1: entered promiscuous mode [ 338.780810][T16579] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 338.784948][T16734] sctp: [Deprecated]: syz.2.3028 (pid 16734) Use of struct sctp_assoc_value in delayed_ack socket option. [ 338.784948][T16734] Use struct sctp_sack_info instead [ 338.799670][T16579] Cannot create hsr debugfs directory [ 339.054043][ T51] Bluetooth: hci5: command tx timeout [ 339.092413][T16744] syzkaller1: entered promiscuous mode [ 339.105089][T16744] syzkaller1: entered allmulticast mode [ 339.353841][T16579] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.373544][T16579] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.450619][T16763] netlink: 'syz.0.3037': attribute type 1 has an invalid length. [ 339.458520][T16763] netlink: 'syz.0.3037': attribute type 4 has an invalid length. [ 339.478916][T16763] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.3037'. [ 339.528194][T16579] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.558504][T16579] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.697314][T16579] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.717284][T16579] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.743162][T16776] nbd: socks must be embedded in a SOCK_ITEM attr [ 339.780970][T16777] netlink: 'syz.1.3043': attribute type 10 has an invalid length. [ 339.797503][T16579] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.821010][T16579] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.901439][T16783] netlink: 'syz.0.3045': attribute type 29 has an invalid length. [ 339.928196][T16787] netlink: 'syz.0.3045': attribute type 29 has an invalid length. [ 339.939979][T16774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 339.961442][T16783] netlink: 500 bytes leftover after parsing attributes in process `syz.0.3045'. [ 340.002178][T16791] netlink: 'syz.2.3046': attribute type 8 has an invalid length. [ 340.045833][T16791] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3046'. [ 340.217258][T16796] syz_tun: tun_net_xmit 50 [ 340.256874][T16579] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 340.276523][T16579] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 340.323816][T16579] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 340.363471][T16579] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 340.596183][T16816] ip6gre2: entered allmulticast mode [ 340.674038][T16820] netlink: zone id is out of range [ 340.685090][T16820] netlink: zone id is out of range [ 340.708615][T16820] netlink: zone id is out of range [ 340.738204][T16820] netlink: zone id is out of range [ 340.768424][T16579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.778354][T16820] netlink: zone id is out of range [ 340.807783][T16820] netlink: zone id is out of range [ 340.836229][T16820] netlink: zone id is out of range [ 340.854880][T16579] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.871036][T16820] netlink: zone id is out of range [ 340.911911][T16820] netlink: zone id is out of range [ 340.917125][T16820] netlink: zone id is out of range [ 340.927177][ T7552] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.934464][ T7552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.935368][T16824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 341.116138][ T7552] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.123413][ T7552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.133742][ T51] Bluetooth: hci5: command tx timeout [ 342.202241][T16892] netlink: 'syz.1.3069': attribute type 4 has an invalid length. [ 342.281429][T16883] netlink: 'syz.1.3069': attribute type 4 has an invalid length. [ 342.358750][T16897] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3072'. [ 342.561798][T16910] netlink: 348 bytes leftover after parsing attributes in process `syz.3.3075'. [ 343.213370][ T51] Bluetooth: hci5: command tx timeout [ 344.096996][T16579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.127679][T16918] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3077'. [ 344.149982][T16921] netlink: 'syz.3.3078': attribute type 21 has an invalid length. [ 344.166553][T16921] netlink: 'syz.3.3078': attribute type 21 has an invalid length. [ 344.185832][T16921] netlink: 'syz.3.3078': attribute type 21 has an invalid length. [ 344.194405][T16921] netlink: 'syz.3.3078': attribute type 21 has an invalid length. [ 344.204184][T16921] netlink: 'syz.3.3078': attribute type 21 has an invalid length. [ 344.209419][T16918] netlink: 'syz.1.3077': attribute type 1 has an invalid length. [ 344.214344][T16921] netlink: 'syz.3.3078': attribute type 21 has an invalid length. [ 344.229215][T16921] netlink: 'syz.3.3078': attribute type 21 has an invalid length. [ 344.239406][T16918] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3077'. [ 344.248696][T16918] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3077'. [ 344.474529][T16939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3081'. [ 344.484745][T16939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3081'. [ 344.985478][T16579] veth0_vlan: entered promiscuous mode [ 345.034978][T16962] !: renamed from dummy0 (while UP) [ 345.068601][T16964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3089'. [ 345.085325][T16579] veth1_vlan: entered promiscuous mode [ 345.132332][T16967] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 345.196574][T16579] veth0_macvtap: entered promiscuous mode [ 345.225357][T16579] veth1_macvtap: entered promiscuous mode [ 345.230803][T16971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3090'. [ 345.245590][T16971] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3090'. [ 345.291911][T16579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.324816][T16579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.401132][T16579] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.427156][T16579] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.458290][T16579] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.475937][T16579] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.677898][T10010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.687516][T10010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.705696][T16991] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3097'. [ 345.755488][T16991] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 345.782732][T16991] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 345.804971][ T4578] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.825779][ T4578] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.852559][T16996] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3098'. [ 346.690483][ T5859] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 346.709370][ T5859] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 346.718411][ T5859] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 346.738100][ T5859] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 346.753635][ T5859] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 346.824073][T17027] net_ratelimit: 15 callbacks suppressed [ 346.824095][T17027] openvswitch: netlink: Flow key attr not present in new flow. [ 346.933102][T17029] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 346.954688][T17029] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 347.324723][T17044] syz_tun: tun_net_xmit 42 [ 347.330932][T17044] syz_tun: tun_net_xmit 42 [ 347.344043][T17044] syz_tun: tun_net_xmit 42 [ 347.354996][T17044] syz_tun: tun_net_xmit 42 [ 347.400116][T17044] syz_tun: tun_net_xmit 42 [ 347.414842][T17044] syz_tun: tun_net_xmit 42 [ 347.423150][T17044] syz_tun: tun_net_xmit 42 [ 347.427972][T17044] syz_tun: tun_net_xmit 42 [ 347.437400][T17044] syz_tun: tun_net_xmit 42 [ 347.445472][T17044] syz_tun: tun_net_xmit 42 [ 347.456281][T17044] syz_tun: tun_net_xmit 42 [ 347.463481][T17044] syz_tun: tun_net_xmit 42 [ 347.468508][T17044] syz_tun: tun_net_xmit 42 [ 347.477488][T17044] syz_tun: tun_net_xmit 42 [ 347.484355][T17044] syz_tun: tun_net_xmit 42 [ 347.495643][T17044] syz_tun: tun_net_xmit 42 [ 347.567723][T17048] syz_tun (unregistering): left promiscuous mode [ 347.893931][T17061] validate_nla: 61 callbacks suppressed [ 347.893952][T17061] netlink: 'syz.0.3122': attribute type 1 has an invalid length. [ 347.962598][T17059] veth7: entered allmulticast mode [ 348.002779][T17067] netlink: 'syz.3.3123': attribute type 1 has an invalid length. [ 348.023159][T17022] chnl_net:caif_netlink_parms(): no params data found [ 348.127894][T17067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.186021][T17075] bridge0: port 1(batadv0) entered disabled state [ 348.197018][T17075] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 348.231210][T17067] bond0: (slave gretap1): making interface the new active one [ 348.242441][T17067] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 348.476639][T17091] xt_limit: Overflow, try lower: 0/0 [ 348.518076][T17093] tipc: Failed to remove unknown binding: 66,1,1/0:542887323/542887326 [ 348.530766][T17093] tipc: Failed to remove unknown binding: 66,1,1/0:542887323/542887326 [ 348.539665][T17093] tipc: Failed to remove unknown binding: 66,1,1/0:542887323/542887326 [ 348.561339][T17022] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.585800][T17022] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.612690][T17022] bridge_slave_0: entered allmulticast mode [ 348.632412][T17022] bridge_slave_0: entered promiscuous mode [ 348.654372][T17022] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.673326][T17022] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.693609][T17022] bridge_slave_1: entered allmulticast mode [ 348.709607][T17022] bridge_slave_1: entered promiscuous mode [ 348.753409][T17101] xt_ecn: cannot match TCP bits for non-tcp packets [ 348.802923][T17022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.819967][ T51] Bluetooth: hci4: command tx timeout [ 348.836851][T17022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.952733][T17022] team0: Port device team_slave_0 added [ 348.963763][T17022] team0: Port device team_slave_1 added [ 349.015640][T17022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.031737][T17022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.065678][T17022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.090583][T17022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.097706][T17022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.134649][T17022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.154338][T17113] tipc: Started in network mode [ 349.161053][T17113] tipc: Node identity e0000002, cluster identity 4711 [ 349.168178][T17113] tipc: Enabling of bearer rejected, failed to enable media [ 349.254549][T17022] hsr_slave_0: entered promiscuous mode [ 349.285693][T17022] hsr_slave_1: entered promiscuous mode [ 349.296533][T17022] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 349.310292][T17022] Cannot create hsr debugfs directory [ 349.415738][T17115] netlink: 'syz.4.3138': attribute type 64 has an invalid length. [ 349.428239][T17115] __nla_validate_parse: 8 callbacks suppressed [ 349.428260][T17115] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3138'. [ 349.466376][T17121] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 349.858128][T17143] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 350.073735][T17022] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.090094][T17022] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 350.272626][T17022] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.293335][T17022] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 350.491149][T17022] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.519107][T17022] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 350.612705][T17022] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.676938][T17022] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 350.760898][T17170] netlink: 'syz.4.3155': attribute type 2 has an invalid length. [ 350.803907][T17172] netlink: 'syz.3.3156': attribute type 1 has an invalid length. [ 350.823496][T17172] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3156'. [ 350.900330][ T51] Bluetooth: hci4: command tx timeout [ 350.938661][T17165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 351.196120][T17022] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 351.235194][T17022] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 351.265807][T17022] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 351.294154][T17022] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 351.557794][T17022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.635447][T17022] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.675245][ T4578] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.682504][ T4578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.746389][ T4578] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.753647][ T4578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.794394][T17208] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3163'. [ 351.872829][T17213] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 351.903729][T17022] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 351.962634][T17022] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 352.356837][T17226] Cannot find set identified by id 0 to match [ 352.396696][T17225] vlan1: entered allmulticast mode [ 352.422113][T17225] veth0_vlan: entered allmulticast mode [ 352.762682][T17022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.837426][T17244] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3173'. [ 352.911669][T17244] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3173'. [ 352.967593][T17244] gretap0: entered promiscuous mode [ 352.977905][ T51] Bluetooth: hci4: command tx timeout [ 353.011018][T17244] gretap0: left promiscuous mode [ 353.180204][T17264] netlink: 'syz.3.3176': attribute type 39 has an invalid length. [ 353.212498][T17022] veth0_vlan: entered promiscuous mode [ 353.345260][T17268] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.416517][T17268] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.460303][T17022] veth1_vlan: entered promiscuous mode [ 353.601743][T17022] veth0_macvtap: entered promiscuous mode [ 353.639637][T17022] veth1_macvtap: entered promiscuous mode [ 353.723463][T17022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.782209][T17022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.882444][T17022] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.894009][T17022] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.903089][T17022] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.912028][T17022] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.969946][T17295] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3186'. [ 354.161174][ T7552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.177047][ T7552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.225356][T17308] netlink: 'syz.0.3189': attribute type 10 has an invalid length. [ 354.259071][T17308] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3189'. [ 354.285269][T17310] netlink: 'syz.4.3191': attribute type 3 has an invalid length. [ 354.301610][T17310] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3191'. [ 354.313211][T17311] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 354.361492][T17308] team0: Port device geneve0 added [ 354.385194][T10010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.401156][T10010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.050504][ T51] Bluetooth: hci4: command tx timeout [ 355.275903][T17352] sctp: [Deprecated]: syz.4.3205 (pid 17352) Use of struct sctp_assoc_value in delayed_ack socket option. [ 355.275903][T17352] Use struct sctp_sack_info instead [ 355.430683][T17357] batadv1: entered allmulticast mode [ 355.759892][ T5859] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 355.778493][ T5859] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 355.794908][ T5859] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 355.800345][T17376] x_tables: ip_tables: osf match: only valid for protocol 6 [ 355.831489][ T5859] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 355.850345][ T5859] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 355.858800][T17376] x_tables: ip_tables: osf match: only valid for protocol 6 [ 356.006702][T17382] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3213'. [ 356.131021][T17387] netlink: 'syz.4.3215': attribute type 1 has an invalid length. [ 356.149778][T17387] netlink: 204 bytes leftover after parsing attributes in process `syz.4.3215'. [ 356.159636][T17382] veth3: entered allmulticast mode [ 356.391892][T17393] netlink: 'syz.1.3217': attribute type 11 has an invalid length. [ 356.534124][T17398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3219'. [ 356.590771][T17398] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3219'. [ 356.628456][T17407] netlink: 388 bytes leftover after parsing attributes in process `syz.1.3221'. [ 356.928067][T17371] chnl_net:caif_netlink_parms(): no params data found [ 356.976674][T17421] netlink: 'syz.0.3225': attribute type 10 has an invalid length. [ 357.020646][T17422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3224'. [ 357.040974][T17421] batman_adv: batadv0: Adding interface: team0 [ 357.047801][T17421] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.080864][T17422] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3224'. [ 357.096199][T17422] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3224'. [ 357.158415][T17421] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 357.178976][T17421] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 357.488605][T17371] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.516047][T17371] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.546174][T17371] bridge_slave_0: entered allmulticast mode [ 357.549166][T17443] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 357.576150][T17371] bridge_slave_0: entered promiscuous mode [ 357.598287][T17371] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.615431][T17371] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.643485][T17371] bridge_slave_1: entered allmulticast mode [ 357.675927][T17371] bridge_slave_1: entered promiscuous mode [ 357.732448][T17452] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3232'. [ 357.929433][ T51] Bluetooth: hci0: command tx timeout [ 357.963559][T17371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.024665][T17371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.173454][T17371] team0: Port device team_slave_0 added [ 358.184551][T17371] team0: Port device team_slave_1 added [ 358.395467][T17371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.437594][T17371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.537202][T17371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.566390][T17497] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3243'. [ 358.607893][T17371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.648885][T17371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.753047][T17371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.814539][T17503] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 358.905260][T17496] xt_HMARK: proto mask must be zero with L3 mode [ 359.072165][T17519] netlink: 'syz.0.3248': attribute type 1 has an invalid length. [ 359.093459][T17371] hsr_slave_0: entered promiscuous mode [ 359.105965][T17371] hsr_slave_1: entered promiscuous mode [ 359.116692][T17371] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 359.133918][T17371] Cannot create hsr debugfs directory [ 359.220406][T17519] 8021q: adding VLAN 0 to HW filter on device bond1 [ 359.340596][T17522] 8021q: adding VLAN 0 to HW filter on device bond1 [ 359.392198][T17522] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 359.428800][T17522] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 359.473663][T17526] gretap1: entered promiscuous mode [ 359.489286][T17526] bond1: (slave gretap1): making interface the new active one [ 359.497548][T17526] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 359.913355][T17557] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 359.925117][T17559] netlink: 'syz.4.3259': attribute type 10 has an invalid length. [ 359.970250][T17561] netlink: 'syz.0.3261': attribute type 1 has an invalid length. [ 359.991656][T17559] batman_adv: batadv0: Adding interface: team0 [ 359.998074][T17559] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.025261][ T51] Bluetooth: hci0: command tx timeout [ 360.032873][T17559] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 360.172267][T17570] netlink: 'syz.4.3263': attribute type 10 has an invalid length. [ 360.186260][T17562] 8021q: adding VLAN 0 to HW filter on device bond3 [ 360.204039][T17562] bond2: (slave bond3): making interface the new active one [ 360.215972][T17562] bond2: (slave bond3): Enslaving as an active interface with an up link [ 360.226910][T17567] bond2: entered allmulticast mode [ 360.234677][T17567] bond3: entered allmulticast mode [ 360.304760][T17570] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 360.323404][T17577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 360.497001][T12251] IPVS: starting estimator thread 0... [ 360.497225][T17581] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 360.599043][T17585] IPVS: using max 25 ests per chain, 60000 per kthread [ 360.854908][T17371] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 360.887832][T17371] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 360.934544][T17371] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 360.952925][T17371] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 361.031052][T17606] __nla_validate_parse: 10 callbacks suppressed [ 361.031073][T17606] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3270'. [ 361.287014][T17620] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.327143][T17620] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 361.593861][T17640] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3275'. [ 361.644011][T17642] netlink: 'syz.0.3275': attribute type 2 has an invalid length. [ 361.669485][T17642] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3275'. [ 361.673605][T17371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.728115][T17644] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3277'. [ 361.773066][T17371] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.856389][ T1324] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.863606][ T1324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.952499][T10010] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.959758][T10010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.012022][T17650] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3279'. [ 362.091281][ T51] Bluetooth: hci0: command tx timeout [ 362.137243][T17656] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3280'. [ 362.273128][T17662] vlan1: entered promiscuous mode [ 362.278247][T17662] bridge0: entered promiscuous mode [ 362.557532][T17678] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3288'. [ 362.653775][T17371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.802433][T17693] netlink: 'syz.4.3293': attribute type 10 has an invalid length. [ 362.842607][T17692] sit1: entered promiscuous mode [ 362.847639][T17692] sit1: entered allmulticast mode [ 362.873234][T17371] veth0_vlan: entered promiscuous mode [ 362.909553][T17371] veth1_vlan: entered promiscuous mode [ 362.996049][T17371] veth0_macvtap: entered promiscuous mode [ 363.112778][T17371] veth1_macvtap: entered promiscuous mode [ 363.172753][T17371] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.253160][T17371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.265515][T17712] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3299'. [ 363.354921][T17721] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 363.367045][T17371] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.417536][T17371] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.431367][T17371] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.440686][T17371] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.470447][T17723] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3302'. [ 363.650244][T17729] vlan2: entered allmulticast mode [ 363.655475][T17729] team0: entered allmulticast mode [ 363.666256][T17732] netlink: 'syz.4.3304': attribute type 10 has an invalid length. [ 363.674823][T17729] team_slave_0: entered allmulticast mode [ 363.676966][T17729] team_slave_1: entered allmulticast mode [ 363.687727][T17729] team0: Device vlan2 is already an upper device of the team interface [ 363.800534][T17736] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3306'. [ 363.813672][T17732] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 363.831015][T17736] netlink: 'syz.0.3306': attribute type 32 has an invalid length. [ 363.897064][T17743] netlink: 'syz.1.3308': attribute type 23 has an invalid length. [ 363.986468][ T4578] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.019169][ T4578] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.097056][T17752] lo: entered promiscuous mode [ 364.127676][T17752] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 364.170483][ T51] Bluetooth: hci0: command tx timeout [ 364.214563][ T4578] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.233629][ T4578] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.387457][T17768] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 364.495169][T17768] 8021q: adding VLAN 0 to HW filter on device bond1 [ 364.519402][T17768] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 364.606863][T17775] netlink: zone id is out of range [ 364.615841][T17775] netlink: get zone limit has 8 unknown bytes [ 364.784861][T17768] macvlan2: entered promiscuous mode [ 364.799229][T17768] macvlan2: entered allmulticast mode [ 364.810724][T17768] bond1: entered promiscuous mode [ 364.849054][T17768] bridge2: entered promiscuous mode [ 364.880380][T17768] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 364.946553][T17768] bond1: left promiscuous mode [ 364.979262][T17768] bridge2: left promiscuous mode [ 365.565807][ T5859] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 365.576740][ T5859] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 365.594706][ T5859] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 365.617495][ T5859] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 365.631806][ T5859] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 365.763737][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.845340][T17818] unsupported nlmsg_type 40 [ 365.863755][T17813] vlan2: entered promiscuous mode [ 365.872544][T17813] bridge0: entered promiscuous mode [ 366.051813][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.452653][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.578430][ T13] netdevsim netdevsim3 ªªªªªª (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.921573][T17862] __nla_validate_parse: 5 callbacks suppressed [ 366.921588][T17862] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3342'. [ 367.226984][T17879] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3346'. [ 367.304682][T17806] chnl_net:caif_netlink_parms(): no params data found [ 367.434801][ T13] tipc: Resetting bearer [ 367.634885][T17895] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3350'. [ 367.689411][ T51] Bluetooth: hci1: command tx timeout [ 367.738207][ T13] tipc: Disabling bearer [ 367.798491][ T13] bond0 (unregistering): (slave gretap1): Releasing active interface [ 368.423177][ T13] bond1 (unregistering): Released all slaves [ 368.557332][ T13] bond2 (unregistering): Released all slaves [ 368.670730][ T13] bond3 (unregistering): Released all slaves [ 368.691277][ T13] bond4 (unregistering): Released all slaves [ 368.708045][ T13] bond5 (unregistering): Released all slaves [ 368.829520][ T13] bond6 (unregistering): Released all slaves [ 368.949439][ T13] bond0 (unregistering): Released all slaves [ 368.966777][ T13] bond7 (unregistering): Released all slaves [ 369.071593][T17895] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.310795][T17895] bridge_slave_0 (unregistering): left allmulticast mode [ 369.325183][T17895] bridge_slave_0 (unregistering): left promiscuous mode [ 369.336279][T17895] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.399060][ T13] : left promiscuous mode [ 369.444435][T17902] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 369.624706][ T13] tipc: Disabling bearer [ 369.657153][ T13] tipc: Left network mode [ 369.769677][ T51] Bluetooth: hci1: command tx timeout [ 370.071249][T17928] netlink: 'syz.2.3359': attribute type 2 has an invalid length. [ 370.199044][T17806] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.206257][T17806] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.236922][T17806] bridge_slave_0: entered allmulticast mode [ 370.256530][T17806] bridge_slave_0: entered promiscuous mode [ 370.437509][T17806] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.452859][T17806] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.476282][T17806] bridge_slave_1: entered allmulticast mode [ 370.492175][T17806] bridge_slave_1: entered promiscuous mode [ 370.872974][T17806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.966664][T17806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.034275][ T13] batadv_slave_0: left promiscuous mode [ 371.081607][ T13] hsr_slave_0: left promiscuous mode [ 371.107218][ T13] hsr_slave_1: left promiscuous mode [ 371.151422][ T13] veth1_vlan: left promiscuous mode [ 371.484036][ T13] pim6reg (unregistering): left allmulticast mode [ 371.852773][ T51] Bluetooth: hci1: command tx timeout [ 372.241443][T17956] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.250943][T17956] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.260190][T17956] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.269712][T17956] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.419191][T17806] team0: Port device team_slave_0 added [ 372.488650][T17806] team0: Port device team_slave_1 added [ 372.497179][T17974] nbd2: detected capacity change from 0 to 127 [ 372.539841][ T51] block nbd2: Receive control failed (result -32) [ 372.739919][T17806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.758228][T17806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.795182][T17806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.810111][T17991] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3377'. [ 372.833455][T17990] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3377'. [ 372.879724][T17806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.900453][ T13] IPVS: stop unused estimator thread 0... [ 372.929560][T17806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.976462][T17806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.083341][T18004] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3380'. [ 373.461202][T17806] hsr_slave_0: entered promiscuous mode [ 373.483436][T17806] hsr_slave_1: entered promiscuous mode [ 373.484839][T18019] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3385'. [ 373.500518][T17806] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 373.511339][T17806] Cannot create hsr debugfs directory [ 373.572037][T18015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3384'. [ 373.581237][T18020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3384'. [ 373.727811][T18030] netlink: 'syz.0.3388': attribute type 10 has an invalid length. [ 373.739686][T18028] batman_adv: batadv0: Adding interface: dummy0 [ 373.746009][T18028] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.772386][T18028] batman_adv: batadv0: Interface activated: dummy0 [ 373.811305][T18031] batadv0: mtu less than device minimum [ 373.818598][T18031] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 373.830776][T18031] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 373.843030][T18031] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 373.854597][T18031] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 373.866642][T18031] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 373.878694][T18031] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 373.890760][T18031] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 373.902909][T18031] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 373.914988][T18031] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 373.930263][ T51] Bluetooth: hci1: command tx timeout [ 374.383547][T18052] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3391'. [ 374.466437][T18056] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 374.903831][T18073] bond0: Error: Cannot enslave bond to itself. [ 374.926131][T18081] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3401'. [ 374.926417][T18070] syzkaller1: entered promiscuous mode [ 374.946710][T18070] syzkaller1: entered allmulticast mode [ 375.167144][T18089] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3404'. [ 375.265628][T18095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3404'. [ 375.282693][T17806] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 375.438237][T17806] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 375.477963][T17806] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 375.522807][T17806] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 375.540819][T18106] netlink: 'syz.0.3409': attribute type 1 has an invalid length. [ 375.722049][T18120] xt_hashlimit: invalid rate [ 375.966291][T18136] batman_adv: batadv0: Interface deactivated: dummy0 [ 375.985966][T18136] batman_adv: batadv0: Removing interface: dummy0 [ 376.030140][T18136] bridge_slave_1: left allmulticast mode [ 376.045402][T18136] bridge_slave_1: left promiscuous mode [ 376.055498][T18136] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.090252][T18136] bond0: (slave bond_slave_0): Releasing backup interface [ 376.141818][T18136] bond0: (slave bond_slave_1): Releasing backup interface [ 376.248775][T18136] team0: Port device team_slave_0 removed [ 376.329718][T18136] team0: Port device team_slave_1 removed [ 376.347285][T18136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 376.356625][T18136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.370000][T18136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 376.377619][T18136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.472565][T18149] veth0_vlan: left promiscuous mode [ 376.477896][T18149] vlan0: entered promiscuous mode [ 376.499430][T18149] veth0_vlan: entered promiscuous mode [ 376.530852][T18149] vlan0: entered allmulticast mode [ 376.594470][T18149] team0: Port device vlan0 added [ 376.656483][T17806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.707285][T17806] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.726932][ T1324] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.734284][ T1324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.766282][ T1324] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.773552][ T1324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.576856][T17806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.723603][T17806] veth0_vlan: entered promiscuous mode [ 377.774676][T17806] veth1_vlan: entered promiscuous mode [ 377.799817][T18206] netlink: 'syz.4.3440': attribute type 6 has an invalid length. [ 378.083207][T17806] veth0_macvtap: entered promiscuous mode [ 378.142425][T17806] veth1_macvtap: entered promiscuous mode [ 378.195408][T18217] __nla_validate_parse: 11 callbacks suppressed [ 378.195428][T18217] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3443'. [ 378.218081][T17806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.247630][T17806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.297657][T17806] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.323511][T17806] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.326722][T18218] netlink: 'syz.0.3442': attribute type 2 has an invalid length. [ 378.349286][T17806] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.403546][T18218] netlink: 'syz.0.3442': attribute type 8 has an invalid length. [ 378.425184][T18218] netlink: 1148 bytes leftover after parsing attributes in process `syz.0.3442'. [ 378.432411][T17806] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.455700][T18221] netlink: 'syz.0.3442': attribute type 21 has an invalid length. [ 378.464309][T18221] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3442'. [ 378.545765][T18223] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3445'. [ 378.647084][T18223] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.657226][T18223] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.666678][T18223] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.675885][T18223] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.686612][T18228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3446'. [ 378.717616][T18230] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3445'. [ 378.962046][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.992422][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.080104][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.096548][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.154979][T18236] sctp: [Deprecated]: syz.4.3448 (pid 18236) Use of struct sctp_assoc_value in delayed_ack socket option. [ 379.154979][T18236] Use struct sctp_sack_info instead [ 379.184112][T18241] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3449'. [ 379.276945][T18241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3449'. [ 379.752421][T18268] netlink: 'syz.0.3458': attribute type 11 has an invalid length. [ 379.818768][T18272] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3459'. [ 379.833478][T18272] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3459'. [ 380.311586][T18294] delete_channel: no stack [ 380.476889][T18302] netlink: 'syz.0.3469': attribute type 12 has an invalid length. [ 381.182405][T18326] delete_channel: no stack [ 381.508415][T18346] vlan2: entered promiscuous mode [ 381.540269][T18346] bridge0: entered promiscuous mode [ 381.561271][T18346] x_tables: duplicate underflow at hook 1 [ 381.874741][T18370] Cannot find set identified by id 0 to match [ 382.239485][T18391] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 382.272359][T18391] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 382.404319][T18404] sit0: entered promiscuous mode [ 382.433272][T18404] netlink: 'syz.4.3499': attribute type 1 has an invalid length. [ 382.459127][T18408] sctp: [Deprecated]: syz.2.3500 (pid 18408) Use of struct sctp_assoc_value in delayed_ack socket option. [ 382.459127][T18408] Use struct sctp_sack_info instead [ 382.567251][T18411] netlink: 'syz.1.3501': attribute type 39 has an invalid length. [ 383.080571][T18437] netlink: 'syz.4.3509': attribute type 10 has an invalid length. [ 383.106917][T18437] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 383.255091][T18447] __nla_validate_parse: 9 callbacks suppressed [ 383.255111][T18447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3511'. [ 383.312661][T18445] net_ratelimit: 11 callbacks suppressed [ 383.312685][T18445] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 383.559339][T18456] netlink: 'syz.4.3512': attribute type 11 has an invalid length. [ 383.605110][T18462] IPVS: set_ctl: invalid protocol: 59 172.20.20.60:20003 [ 383.613587][T18464] IPVS: set_ctl: invalid protocol: 59 172.20.20.60:20003 [ 383.909954][T18475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3516'. [ 383.927407][T18482] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 383.937025][T18475] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3516'. [ 384.290233][T18505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3526'. [ 384.339790][T18507] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3528'. [ 384.350280][T18510] x_tables: duplicate underflow at hook 2 [ 384.358646][T18507] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3528'. [ 384.447970][T18512] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3529'. [ 384.467842][T18512] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3529'. [ 384.806759][T18535] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3535'. [ 384.840469][T18535] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3535'. [ 385.206705][T18550] nbd: must specify an index to disconnect [ 385.281686][T18552] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 385.488785][T18557] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.497856][T18557] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.507513][T18557] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.516856][T18557] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.452159][T18598] Unsupported ieee802154 address type: 0 [ 386.488640][T18596] tipc: Started in network mode [ 386.495811][T18596] tipc: Node identity 7eaa1ddb8966, cluster identity 4711 [ 386.514846][T18596] tipc: Enabled bearer , priority 0 [ 386.561025][T18596] tipc: Resetting bearer [ 386.617638][T18607] syz_tun: entered promiscuous mode [ 386.633338][T18607] batadv_slave_0: entered promiscuous mode [ 386.647470][T18607] hsr1: entered allmulticast mode [ 386.665200][T18607] syz_tun: entered allmulticast mode [ 386.687819][T18607] batadv_slave_0: entered allmulticast mode [ 386.730938][T18594] tipc: Disabling bearer [ 386.917712][T18615] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 386.950433][T18619] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 387.169419][T18626] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 387.207839][T18626] syz.4.3564: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 387.261311][T18626] CPU: 1 UID: 0 PID: 18626 Comm: syz.4.3564 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 387.261356][T18626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 387.261383][T18626] Call Trace: [ 387.261393][T18626] [ 387.261403][T18626] dump_stack_lvl+0x189/0x250 [ 387.261441][T18626] ? __pfx_dump_stack_lvl+0x10/0x10 [ 387.261469][T18626] ? __pfx__printk+0x10/0x10 [ 387.261502][T18626] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 387.261531][T18626] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 387.261564][T18626] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 387.261599][T18626] warn_alloc+0x214/0x310 [ 387.261619][T18626] ? stack_depot_save_flags+0x40/0x900 [ 387.261649][T18626] ? __pfx_warn_alloc+0x10/0x10 [ 387.261673][T18626] ? kasan_save_track+0x4f/0x80 [ 387.261705][T18626] ? xskq_create+0x56/0x170 [ 387.261725][T18626] ? xsk_init_queue+0xb0/0x110 [ 387.261743][T18626] ? xsk_setsockopt+0x43f/0x710 [ 387.261775][T18626] ? do_sock_setsockopt+0x17c/0x1b0 [ 387.261807][T18626] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 387.261839][T18626] ? do_syscall_64+0xfa/0x3b0 [ 387.261861][T18626] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.261894][T18626] __vmalloc_node_range_noprof+0x125/0x12f0 [ 387.261966][T18626] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 387.262016][T18626] ? __kasan_kmalloc+0x93/0xb0 [ 387.262050][T18626] vmalloc_user_noprof+0xad/0xf0 [ 387.262085][T18626] ? xskq_create+0xbf/0x170 [ 387.262108][T18626] xskq_create+0xbf/0x170 [ 387.262134][T18626] xsk_init_queue+0xb0/0x110 [ 387.262159][T18626] xsk_setsockopt+0x43f/0x710 [ 387.262196][T18626] ? __pfx_xsk_setsockopt+0x10/0x10 [ 387.262234][T18626] ? __fget_files+0x2a/0x420 [ 387.262254][T18626] ? aa_sock_opt_perm+0x74/0x110 [ 387.262280][T18626] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 387.262303][T18626] ? __pfx_xsk_setsockopt+0x10/0x10 [ 387.262340][T18626] do_sock_setsockopt+0x17c/0x1b0 [ 387.262378][T18626] __x64_sys_setsockopt+0x13f/0x1b0 [ 387.262416][T18626] do_syscall_64+0xfa/0x3b0 [ 387.262438][T18626] ? lockdep_hardirqs_on+0x9c/0x150 [ 387.262461][T18626] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.262484][T18626] ? clear_bhb_loop+0x60/0xb0 [ 387.262512][T18626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.262540][T18626] RIP: 0033:0x7f0522b8e9a9 [ 387.262562][T18626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 387.262583][T18626] RSP: 002b:00007f0523ac6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 387.262606][T18626] RAX: ffffffffffffffda RBX: 00007f0522db5fa0 RCX: 00007f0522b8e9a9 [ 387.262623][T18626] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 387.262635][T18626] RBP: 00007f0522c10ca1 R08: 0000000000000004 R09: 0000000000000000 [ 387.262648][T18626] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 387.262662][T18626] R13: 0000000000000000 R14: 00007f0522db5fa0 R15: 00007ffe8222fe58 [ 387.262698][T18626] [ 387.262713][T18626] Mem-Info: [ 387.279939][T18634] gtp0: entered promiscuous mode [ 387.296441][T18626] active_anon:3628 inactive_anon:0 isolated_anon:0 [ 387.296441][T18626] active_file:1279 inactive_file:39953 isolated_file:0 [ 387.296441][T18626] unevictable:768 dirty:79 writeback:0 [ 387.296441][T18626] slab_reclaimable:11668 slab_unreclaimable:123702 [ 387.296441][T18626] mapped:28843 shmem:1366 pagetables:993 [ 387.296441][T18626] sec_pagetables:0 bounce:0 [ 387.296441][T18626] kernel_misc_reclaimable:0 [ 387.296441][T18626] free:1299273 free_pcp:21331 free_cma:0 [ 387.305409][T18634] gtp0: entered allmulticast mode [ 387.307064][T18626] Node 0 active_anon:14512kB inactive_anon:0kB active_file:5116kB inactive_file:159608kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115372kB dirty:312kB writeback:0kB shmem:3928kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13416kB pagetables:3816kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 387.611427][T18640] netlink: 'syz.4.3564': attribute type 10 has an invalid length. [ 387.700847][T18626] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 387.724662][T18649] netlink: 'syz.1.3570': attribute type 33 has an invalid length. [ 387.750123][T18626] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 387.781579][T18640] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.799260][T18626] lowmem_reserve[]: 0 2498 2500 2500 2500 [ 387.809748][T18626] Node 0 DMA32 free:1279896kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14464kB inactive_anon:0kB active_file:5116kB inactive_file:158032kB unevictable:1536kB writepending:308kB present:3129332kB managed:2558500kB mlocked:0kB bounce:0kB free_pcp:68296kB local_pcp:27560kB free_cma:0kB [ 387.816706][T18640] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.849890][T18640] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.888031][T18640] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 387.925235][T18626] lowmem_reserve[]: 0 0 1 1 1 [ 387.930596][T18626] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 388.038336][T18626] lowmem_reserve[]: 0 0 0 0 0 [ 388.058683][T18626] Node 1 Normal free:3901364kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:16864kB local_pcp:7936kB free_cma:0kB [ 388.094270][T18626] lowmem_reserve[]: 0 0 0 0 0 [ 388.107127][T18626] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 388.109676][T18657] gretap0: entered promiscuous mode [ 388.133993][T18626] Node 0 DMA32: 1762*4kB (UME) 632*8kB (UME) 325*16kB (UME) 384*32kB (UME) 98*64kB (UM) 41*128kB (UM) 8*256kB (UM) 12*512kB (M) 23*1024kB (UME) 2*2048kB (U) 294*4096kB (UM) = 1281176kB [ 388.223972][T18626] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 388.270663][T18626] Node 1 Normal: 203*4kB (UME) 57*8kB (UME) 42*16kB (UME) 179*32kB (UME) 55*64kB (UME) 14*128kB (UME) 5*256kB (UME) 4*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 947*4096kB (M) = 3901364kB [ 388.315248][T18626] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 388.326072][T18626] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 388.346380][T18626] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 388.357003][T18626] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 388.369233][T18626] 42614 total pagecache pages [ 388.384525][T18626] 0 pages in swap cache [ 388.388765][T18626] Free swap = 124996kB [ 388.393499][T18626] Total swap = 124996kB [ 388.397985][T18626] 2097051 pages RAM [ 388.401919][T18626] 0 pages HighMem/MovableOnly [ 388.406757][T18626] 425384 pages reserved [ 388.412034][T18626] 0 pages cma reserved [ 388.434452][T18667] __nla_validate_parse: 10 callbacks suppressed [ 388.434475][T18667] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3574'. [ 388.493273][T18667] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3574'. [ 388.846508][T18695] netlink: 'syz.2.3583': attribute type 1 has an invalid length. [ 388.862299][T18698] netlink: 'syz.2.3583': attribute type 1 has an invalid length. [ 389.025063][T18708] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3585'. [ 389.148287][T18710] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3587'. [ 389.230064][T18711] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3587'. [ 389.331361][T18720] netlink: 'syz.3.3590': attribute type 1 has an invalid length. [ 389.348613][T18721] netlink: 'syz.0.3589': attribute type 1 has an invalid length. [ 389.645145][ T36] bond2 (unregistering): (slave gretap1): Releasing active interface [ 389.695479][ T36] bond3 (unregistering): (slave gretap2): Releasing active interface [ 389.706403][ T36] gretap2 (unregistering): left allmulticast mode [ 390.445996][ T36] bond1 (unregistering): Released all slaves [ 390.462918][ T36] bond2 (unregistering): Released all slaves [ 390.595036][ T36] bond3 (unregistering): Released all slaves [ 390.617073][ T36] bond0 (unregistering): Released all slaves [ 390.635305][T18716] geneve1: entered promiscuous mode [ 390.649843][T18716] geneve1: entered allmulticast mode [ 390.659671][T18721] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 390.771334][T18733] veth3: entered promiscuous mode [ 390.819284][T18751] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3595'. [ 390.837517][ T36] tipc: Disabling bearer [ 390.849430][ T36] tipc: Disabling bearer [ 390.867515][ T36] tipc: Left network mode [ 390.983013][ T36] IPVS: stopping backup sync thread 14836 ... [ 391.066927][T18756] bridge0: port 3(gretap0) entered blocking state [ 391.076325][T18756] bridge0: port 3(gretap0) entered disabled state [ 391.092649][T18758] netlink: 'syz.3.3598': attribute type 33 has an invalid length. [ 391.096716][T18756] gretap0: entered allmulticast mode [ 391.108177][T18756] gretap0: entered promiscuous mode [ 391.127549][T18756] bridge0: port 3(gretap0) entered blocking state [ 391.134247][T18756] bridge0: port 3(gretap0) entered forwarding state [ 391.202068][T18761] netlink: 666 bytes leftover after parsing attributes in process `syz.0.3596'. [ 391.494336][T18781] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3605'. [ 391.799375][T18789] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3607'. [ 392.113042][T18796] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3609'. [ 392.250393][ T36] hsr_slave_0: left promiscuous mode [ 392.268410][T18806] xt_cgroup: xt_cgroup: no path or classid specified [ 392.269662][T18804] sctp: [Deprecated]: syz.3.3613 (pid 18804) Use of int in max_burst socket option. [ 392.269662][T18804] Use struct sctp_assoc_value instead [ 392.309300][ T36] hsr_slave_1: left promiscuous mode [ 392.503058][T18818] netlink: 'syz.2.3617': attribute type 1 has an invalid length. [ 392.635171][ T1324] smc: removing ib device syz0 [ 393.427897][T18818] 8021q: adding VLAN 0 to HW filter on device bond2 [ 393.476684][T18830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3619'. [ 393.502395][T18822] 8021q: adding VLAN 0 to HW filter on device bond2 [ 393.509851][T18822] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 393.522505][T18822] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 393.561236][T18824] gretap1: entered promiscuous mode [ 393.577968][T18824] bond2: (slave gretap1): making interface the new active one [ 393.589973][T18824] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 393.606313][T12254] ================================================================== [ 393.614532][T12254] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x6e/0x190 [ 393.623376][T12254] Read of size 8 at addr ffff888079f302e8 by task kworker/1:16/12254 [ 393.631505][T12254] [ 393.633875][T12254] CPU: 1 UID: 0 PID: 12254 Comm: kworker/1:16 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 393.633907][T12254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 393.633925][T12254] Workqueue: events smc_ib_port_event_work [ 393.633967][T12254] Call Trace: [ 393.633976][T12254] [ 393.633987][T12254] dump_stack_lvl+0x189/0x250 [ 393.634017][T12254] ? rcu_is_watching+0x15/0xb0 [ 393.634044][T12254] ? __kasan_check_byte+0x12/0x40 [ 393.634080][T12254] ? __pfx_dump_stack_lvl+0x10/0x10 [ 393.634106][T12254] ? rcu_is_watching+0x15/0xb0 [ 393.634133][T12254] ? lock_release+0x4b/0x3e0 [ 393.634161][T12254] ? __virt_addr_valid+0x1c8/0x5c0 [ 393.634192][T12254] ? __virt_addr_valid+0x4a5/0x5c0 [ 393.634225][T12254] print_report+0xca/0x230 [ 393.634246][T12254] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 393.634283][T12254] kasan_report+0x118/0x150 [ 393.634326][T12254] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 393.634370][T12254] __ethtool_get_link_ksettings+0x6e/0x190 [ 393.634410][T12254] ib_get_eth_speed+0x15e/0x7b0 [ 393.634437][T12254] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 393.634467][T12254] ? do_raw_spin_unlock+0x122/0x240 [ 393.634507][T12254] rxe_query_port+0x93/0x3b0 [ 393.634542][T12254] ib_query_port+0x170/0x830 [ 393.634571][T12254] smc_ib_port_event_work+0x15a/0x940 [ 393.634615][T12254] ? _raw_spin_unlock_irq+0x23/0x50 [ 393.634651][T12254] ? process_scheduled_works+0x9ef/0x17b0 [ 393.634678][T12254] ? process_scheduled_works+0x9ef/0x17b0 [ 393.634706][T12254] process_scheduled_works+0xae1/0x17b0 [ 393.634753][T12254] ? __pfx_process_scheduled_works+0x10/0x10 [ 393.634791][T12254] worker_thread+0x8a0/0xda0 [ 393.634837][T12254] kthread+0x70e/0x8a0 [ 393.634871][T12254] ? __pfx_worker_thread+0x10/0x10 [ 393.634899][T12254] ? __pfx_kthread+0x10/0x10 [ 393.634933][T12254] ? _raw_spin_unlock_irq+0x23/0x50 [ 393.634969][T12254] ? lockdep_hardirqs_on+0x9c/0x150 [ 393.634992][T12254] ? __pfx_kthread+0x10/0x10 [ 393.635025][T12254] ret_from_fork+0x3fc/0x770 [ 393.635052][T12254] ? __pfx_ret_from_fork+0x10/0x10 [ 393.635080][T12254] ? __switch_to_asm+0x39/0x70 [ 393.635111][T12254] ? __switch_to_asm+0x33/0x70 [ 393.635141][T12254] ? __pfx_kthread+0x10/0x10 [ 393.635173][T12254] ret_from_fork_asm+0x1a/0x30 [ 393.635215][T12254] [ 393.635224][T12254] [ 393.861053][T12254] Allocated by task 5849: [ 393.865428][T12254] kasan_save_track+0x3e/0x80 [ 393.870130][T12254] __kasan_kmalloc+0x93/0xb0 [ 393.874745][T12254] __kvmalloc_node_noprof+0x30d/0x5f0 [ 393.880235][T12254] alloc_netdev_mqs+0xa6/0x11e0 [ 393.885202][T12254] rtnl_create_link+0x31f/0xd10 [ 393.890077][T12254] rtnl_newlink_create+0x25c/0xb00 [ 393.895217][T12254] rtnl_newlink+0x16d6/0x1c70 [ 393.899920][T12254] rtnetlink_rcv_msg+0x7cf/0xb70 [ 393.904880][T12254] netlink_rcv_skb+0x208/0x470 [ 393.909670][T12254] netlink_unicast+0x75c/0x8e0 [ 393.914449][T12254] netlink_sendmsg+0x805/0xb30 [ 393.919232][T12254] __sock_sendmsg+0x21c/0x270 [ 393.923928][T12254] __sys_sendto+0x3bd/0x520 [ 393.928459][T12254] __x64_sys_sendto+0xde/0x100 [ 393.933245][T12254] do_syscall_64+0xfa/0x3b0 [ 393.937766][T12254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.943675][T12254] [ 393.946028][T12254] Freed by task 36: [ 393.949845][T12254] kasan_save_track+0x3e/0x80 [ 393.954545][T12254] kasan_save_free_info+0x46/0x50 [ 393.959585][T12254] __kasan_slab_free+0x62/0x70 [ 393.964379][T12254] kfree+0x18e/0x440 [ 393.968389][T12254] device_release+0x99/0x1c0 [ 393.972992][T12254] kobject_put+0x22b/0x480 [ 393.977420][T12254] netdev_run_todo+0xd2e/0xea0 [ 393.982196][T12254] default_device_exit_batch+0x81e/0x890 [ 393.987851][T12254] ops_undo_list+0x525/0x990 [ 393.992460][T12254] cleanup_net+0x4c5/0x800 [ 393.996894][T12254] process_scheduled_works+0xae1/0x17b0 [ 394.002711][T12254] worker_thread+0x8a0/0xda0 [ 394.007405][T12254] kthread+0x70e/0x8a0 [ 394.011490][T12254] ret_from_fork+0x3fc/0x770 [ 394.016099][T12254] ret_from_fork_asm+0x1a/0x30 [ 394.020894][T12254] [ 394.023235][T12254] The buggy address belongs to the object at ffff888079f30000 [ 394.023235][T12254] which belongs to the cache kmalloc-cg-4k of size 4096 [ 394.037604][T12254] The buggy address is located 744 bytes inside of [ 394.037604][T12254] freed 4096-byte region [ffff888079f30000, ffff888079f31000) [ 394.051509][T12254] [ 394.053849][T12254] The buggy address belongs to the physical page: [ 394.060287][T12254] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79f30 [ 394.069064][T12254] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 394.077575][T12254] memcg:ffff888078794481 [ 394.081846][T12254] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 394.089440][T12254] page_type: f5(slab) [ 394.093562][T12254] raw: 00fff00000000040 ffff88801a44b500 ffffea0001e8be00 dead000000000002 [ 394.102781][T12254] raw: 0000000000000000 0000000000040004 00000000f5000000 ffff888078794481 [ 394.111397][T12254] head: 00fff00000000040 ffff88801a44b500 ffffea0001e8be00 dead000000000002 [ 394.120183][T12254] head: 0000000000000000 0000000000040004 00000000f5000000 ffff888078794481 [ 394.128873][T12254] head: 00fff00000000003 ffffea0001e7cc01 00000000ffffffff 00000000ffffffff [ 394.137561][T12254] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 394.146249][T12254] page dumped because: kasan: bad access detected [ 394.152692][T12254] page_owner tracks the page as allocated [ 394.158416][T12254] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5849, tgid 5849 (syz-executor), ts 93454622515, free_ts 73958420223 [ 394.181614][T12254] post_alloc_hook+0x240/0x2a0 [ 394.186497][T12254] get_page_from_freelist+0x21e4/0x22c0 [ 394.192158][T12254] __alloc_frozen_pages_noprof+0x181/0x370 [ 394.197979][T12254] alloc_pages_mpol+0x232/0x4a0 [ 394.202934][T12254] allocate_slab+0x8a/0x3b0 [ 394.207457][T12254] ___slab_alloc+0xbfc/0x1480 [ 394.212144][T12254] __kvmalloc_node_noprof+0x429/0x5f0 [ 394.217541][T12254] alloc_netdev_mqs+0xa6/0x11e0 [ 394.222411][T12254] rtnl_create_link+0x31f/0xd10 [ 394.227276][T12254] rtnl_newlink_create+0x25c/0xb00 [ 394.232446][T12254] rtnl_newlink+0x16d6/0x1c70 [ 394.237157][T12254] rtnetlink_rcv_msg+0x7cf/0xb70 [ 394.242115][T12254] netlink_rcv_skb+0x208/0x470 [ 394.246919][T12254] netlink_unicast+0x75c/0x8e0 [ 394.251801][T12254] netlink_sendmsg+0x805/0xb30 [ 394.256601][T12254] __sock_sendmsg+0x21c/0x270 [ 394.261298][T12254] page last free pid 5723 tgid 5723 stack trace: [ 394.267654][T12254] __free_frozen_pages+0xc71/0xe70 [ 394.272815][T12254] __put_partials+0x161/0x1c0 [ 394.277530][T12254] put_cpu_partial+0x17c/0x250 [ 394.282348][T12254] __slab_free+0x2f7/0x400 [ 394.286787][T12254] qlist_free_all+0x97/0x140 [ 394.291413][T12254] kasan_quarantine_reduce+0x148/0x160 [ 394.297162][T12254] __kasan_slab_alloc+0x22/0x80 [ 394.302305][T12254] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 394.307786][T12254] vm_area_alloc+0x24/0x140 [ 394.312317][T12254] mmap_region+0xcc7/0x1f30 [ 394.316841][T12254] do_mmap+0xc45/0x10d0 [ 394.321018][T12254] vm_mmap_pgoff+0x31b/0x4c0 [ 394.325660][T12254] ksys_mmap_pgoff+0x51f/0x760 [ 394.330450][T12254] do_syscall_64+0xfa/0x3b0 [ 394.334977][T12254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.340889][T12254] [ 394.343225][T12254] Memory state around the buggy address: [ 394.348874][T12254] ffff888079f30180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 394.357036][T12254] ffff888079f30200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 394.365109][T12254] >ffff888079f30280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 394.373183][T12254] ^ [ 394.380654][T12254] ffff888079f30300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 394.388736][T12254] ffff888079f30380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 394.396822][T12254] ================================================================== [ 394.444058][T12254] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 394.451330][T12254] CPU: 1 UID: 0 PID: 12254 Comm: kworker/1:16 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 394.463613][T12254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 394.473705][T12254] Workqueue: events smc_ib_port_event_work [ 394.479556][T12254] Call Trace: [ 394.482865][T12254] [ 394.485819][T12254] dump_stack_lvl+0x99/0x250 [ 394.490445][T12254] ? __asan_memcpy+0x40/0x70 [ 394.495089][T12254] ? __pfx_dump_stack_lvl+0x10/0x10 [ 394.500346][T12254] ? __pfx__printk+0x10/0x10 [ 394.504979][T12254] panic+0x2db/0x790 [ 394.508901][T12254] ? __pfx_panic+0x10/0x10 [ 394.513361][T12254] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 394.519295][T12254] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 394.525712][T12254] ? print_memory_metadata+0x314/0x400 [ 394.531199][T12254] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 394.537224][T12254] check_panic_on_warn+0x89/0xb0 [ 394.542195][T12254] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 394.548239][T12254] end_report+0x78/0x160 [ 394.552514][T12254] kasan_report+0x129/0x150 [ 394.557043][T12254] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 394.563064][T12254] __ethtool_get_link_ksettings+0x6e/0x190 [ 394.568965][T12254] ib_get_eth_speed+0x15e/0x7b0 [ 394.573878][T12254] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 394.579281][T12254] ? do_raw_spin_unlock+0x122/0x240 [ 394.584541][T12254] rxe_query_port+0x93/0x3b0 [ 394.589183][T12254] ib_query_port+0x170/0x830 [ 394.593817][T12254] smc_ib_port_event_work+0x15a/0x940 [ 394.599255][T12254] ? _raw_spin_unlock_irq+0x23/0x50 [ 394.604515][T12254] ? process_scheduled_works+0x9ef/0x17b0 [ 394.610259][T12254] ? process_scheduled_works+0x9ef/0x17b0 [ 394.616028][T12254] process_scheduled_works+0xae1/0x17b0 [ 394.621643][T12254] ? __pfx_process_scheduled_works+0x10/0x10 [ 394.627675][T12254] worker_thread+0x8a0/0xda0 [ 394.632309][T12254] kthread+0x70e/0x8a0 [ 394.636428][T12254] ? __pfx_worker_thread+0x10/0x10 [ 394.641566][T12254] ? __pfx_kthread+0x10/0x10 [ 394.646293][T12254] ? _raw_spin_unlock_irq+0x23/0x50 [ 394.651554][T12254] ? lockdep_hardirqs_on+0x9c/0x150 [ 394.656797][T12254] ? __pfx_kthread+0x10/0x10 [ 394.661447][T12254] ret_from_fork+0x3fc/0x770 [ 394.666090][T12254] ? __pfx_ret_from_fork+0x10/0x10 [ 394.671259][T12254] ? __switch_to_asm+0x39/0x70 [ 394.676087][T12254] ? __switch_to_asm+0x33/0x70 [ 394.680886][T12254] ? __pfx_kthread+0x10/0x10 [ 394.685527][T12254] ret_from_fork_asm+0x1a/0x30 [ 394.690333][T12254] [ 394.693814][T12254] Kernel Offset: disabled [ 394.698149][T12254] Rebooting in 86400 seconds..