last executing test programs: 2m37.713933962s ago: executing program 3 (id=393): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f00000012c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001280)={&(0x7f00000000c0)={0x1184, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TESTDATA={0x4}, @NL80211_ATTR_TESTDATA={0x87, 0x45, "295e81ef3ef592018a144d08a438b7ed1aa1e20be3a403e2dfafb2651774d832cb8b8c1adb38ad058d772e518163addb65418dbb5165512d25771ed8e5f026084a1c7b0549a61491fb1aa674fd3796bf5d130184124575ec2b8360dad25d7b32929437cf8719c42fef3c83a766796c7b9cc5051a6b3a80c6283278f065543ba796386c"}, @NL80211_ATTR_TESTDATA={0x1004, 0x45, "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"}, @NL80211_ATTR_TESTDATA={0xd8, 0x45, "0e3a415d23bd4282e9dc86820e000b5f4d55e76ac14a4a4aac797c460acef019512d718940bd9fbf6fa4233ed11d310bfc0e24ab7bf99693099037e2d5c7b6235922fab6c75b618cb940d75ee637de3d02f39d3052c445a2d7774108033dc9af348359fc03cbc227ee735e36cdde6ebceb99922ef34651233be7d2315c4fdc58916d183f72365286bd36f82e1ae14e28561285b69412c2078d59e964cc16612ba30ee59a3dd0784a773799ac836f0a4f37b49d7bf29e51683c880d66450b17ccf2ee23dce9fa03a8be9b3af2dab4a28505979c7e"}]}, 0x1184}, 0x1, 0x0, 0x0, 0x4}, 0xc0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x3c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x1000) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001480)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000001580)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x48, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x4}, @ETHTOOL_A_LINKMODES_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4000880) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, &(0x7f00000015c0)=""/4096, &(0x7f00000025c0)=0x1000) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002600)={0x1b, 0x0, 0x0, 0x1000, 0x0, r1, 0x7ff, '\x00', r4, r0, 0x2, 0x5, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000026c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTDEF(r6, &(0x7f00000027c0)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002780)={&(0x7f0000002700)={0x54, r7, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_DOMAIN={0x7, 0x1, '$\xbc\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}]}, 0x54}, 0x1, 0x0, 0x0, 0x50}, 0x20000803) syz_genetlink_get_family_id$nl80211(&(0x7f0000002800), r1) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002880), r6) sendmsg$NLBL_MGMT_C_REMOVE(r6, &(0x7f0000002940)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002900)={&(0x7f00000028c0)={0x34, r8, 0x300, 0x70bd29, 0x8, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010102}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4040054) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000029c0), r6) sendmsg$NLBL_MGMT_C_PROTOCOLS(r6, &(0x7f0000002a80)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002a40)={&(0x7f0000002a00)={0x28, r9, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000000}, 0x4001) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002b00), r0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000002c00)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b40)={0x5c, r10, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8084}, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(r6, &(0x7f0000002d40)={&(0x7f0000002c40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002d00)={&(0x7f0000002c80)={0x5c, r9, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010102}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x18}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20000005) tee(r5, r1, 0xffffffffffffffff, 0x3) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002dc0)={0x1, &(0x7f0000002d80)=[{0x40, 0xff, 0xf2, 0x9}]}, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002e40), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000002f00)={&(0x7f0000002e00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002ec0)={&(0x7f0000002e80)={0x24, r11, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x2}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40840}, 0x4000000) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000002f40)={0xffffffffffffffff}) setsockopt$sock_timeval(r12, 0x1, 0x14, &(0x7f0000002f80)={0x77359400}, 0x10) sendmsg$NL80211_CMD_FRAME(r12, &(0x7f00000030c0)={&(0x7f0000002fc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003080)={&(0x7f0000003000)={0x60, r10, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x686, 0x39}}}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0xd}, @broadcast, @broadcast, @initial, {0x9, 0x40}, @value=@ver_80211n={0x0, 0xff, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1}}, 0x19, @void}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x38b}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x446}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x28a182f047977558}, 0x8010) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000003200)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000031c0)={&(0x7f0000003140)={0x5c, r10, 0xff77dc5ff0b4931, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x41}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x56}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x20}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x20}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x84) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r13, &(0x7f0000003340)={&(0x7f0000003240)={0x10, 0x0, 0x0, 0x4008000}, 0xc, &(0x7f0000003300)={&(0x7f0000003280)={0x54, r9, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '\\N(}$\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '+\']\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x4) 2m37.575522758s ago: executing program 3 (id=394): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000040000009c08000008000300", @ANYRES32=r2], 0x1c}}, 0xc0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$netrom(r3, &(0x7f0000000040)={{0x3, @bcast}, [@remote, @bcast, @bcast, @remote, @null, @netrom, @default]}, &(0x7f00000000c0)=0x48) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x50}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x10, 0x9000, 0x6}, [@NFT_MSG_DELFLOWTABLE={0x144, 0x18, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_FLOWTABLE_HANDLE={0x0, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0xf0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'wg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xee1f}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'wg0\x00'}, {0x43, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x5, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3, 0x84}}}, 0x16c}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x10, 0x9000, 0x6}, [@NFT_MSG_DELFLOWTABLE={0x144, 0x18, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_FLOWTABLE_HANDLE={0x0, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0xf0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'wg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xee1f}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'wg0\x00'}, {0x43, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x5, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3, 0x84}}}, 0x16c}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x58, r7, 0xc4fc9e906872308b, 0x0, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0x4}}}}, [@NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x64}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd8}]}]}]}, 0x58}}, 0x0) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x58, r7, 0xc4fc9e906872308b, 0x0, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0x4}}}}, [@NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x64}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd8}]}]}]}, 0x58}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@ipv6_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x0, @LWTUNNEL_IP_SRC={0x8, 0x3, @private=0xa010101}}, @RTA_OIF={0x8, 0x4, r9}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}]}, 0x38}}, 0x200040c0) (async) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@ipv6_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x0, @LWTUNNEL_IP_SRC={0x8, 0x3, @private=0xa010101}}, @RTA_OIF={0x8, 0x4, r9}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}]}, 0x38}}, 0x200040c0) setsockopt$inet_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000100), 0x4) 2m10.579524895s ago: executing program 3 (id=399): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r2, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f00000007c0)}, 0x20) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 2m10.576927855s ago: executing program 3 (id=405): socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000005"], 0x114}], 0x1}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r2 = socket(0x10, 0x3, 0x2) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0xb, 0x2c, 0x0, @remote, @local, {[], {{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0xb, 0x2c, 0x0, @remote, @local, {[], {{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) close(r2) (async) close(r2) r3 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000035c0), r3) syz_emit_ethernet(0x4e, &(0x7f0000000a40)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x18, 0x6, 0x0, @private2, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x2}]}}}}}}}}, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r4, &(0x7f0000000080)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x80}}}, 0x10, 0x0}, 0x4046840) r5 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_int(r5, 0x0, 0x3, &(0x7f0000000080)=0x3, 0x2) (async) setsockopt$inet_int(r5, 0x0, 0x3, &(0x7f0000000080)=0x3, 0x2) sendmsg$alg(r3, &(0x7f0000003540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003500)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x34000041) (async) sendmsg$alg(r3, &(0x7f0000003540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003500)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x34000041) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x30, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0xad3, 0x8001, 0x0, 0x8}}}}, 0x30}, 0x1, 0x0, 0x0, 0x404c08d}, 0x40040) 2m10.558555708s ago: executing program 3 (id=409): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r1, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x74c83f16}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc014) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x301, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2}}]}, 0x1c}}, 0x0) 2m10.361744215s ago: executing program 3 (id=412): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) r3 = socket$unix(0x1, 0x5, 0x0) recvfrom$unix(r3, &(0x7f00000000c0)=""/242, 0xf2, 0x2003, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r4 = socket(0x10, 0x3, 0x0) connect$netlink(r4, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f00000006c0)=[{0x2, 0x3, {0x1, 0x1, 0x3}, {0x1, 0x1, 0x4}, 0x8d582fc6ec6e7987}, {0x2, 0x10000000000000, {0x0, 0x1, 0x4}, {0x2, 0x0, 0x4}, 0x1, 0xff}], 0x40) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xfff1}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) (async) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async) socket$unix(0x1, 0x5, 0x0) (async) recvfrom$unix(r3, &(0x7f00000000c0)=""/242, 0xf2, 0x2003, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) (async) socket(0x10, 0x3, 0x0) (async) connect$netlink(r4, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) (async) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f00000006c0)=[{0x2, 0x3, {0x1, 0x1, 0x3}, {0x1, 0x1, 0x4}, 0x8d582fc6ec6e7987}, {0x2, 0x10000000000000, {0x0, 0x1, 0x4}, {0x2, 0x0, 0x4}, 0x1, 0xff}], 0x40) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xfff1}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async) 1m55.29205911s ago: executing program 32 (id=412): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) r3 = socket$unix(0x1, 0x5, 0x0) recvfrom$unix(r3, &(0x7f00000000c0)=""/242, 0xf2, 0x2003, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r4 = socket(0x10, 0x3, 0x0) connect$netlink(r4, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f00000006c0)=[{0x2, 0x3, {0x1, 0x1, 0x3}, {0x1, 0x1, 0x4}, 0x8d582fc6ec6e7987}, {0x2, 0x10000000000000, {0x0, 0x1, 0x4}, {0x2, 0x0, 0x4}, 0x1, 0xff}], 0x40) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xfff1}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) (async) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async) socket$unix(0x1, 0x5, 0x0) (async) recvfrom$unix(r3, &(0x7f00000000c0)=""/242, 0xf2, 0x2003, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) (async) socket(0x10, 0x3, 0x0) (async) connect$netlink(r4, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) (async) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f00000006c0)=[{0x2, 0x3, {0x1, 0x1, 0x3}, {0x1, 0x1, 0x4}, 0x8d582fc6ec6e7987}, {0x2, 0x10000000000000, {0x0, 0x1, 0x4}, {0x2, 0x0, 0x4}, 0x1, 0xff}], 0x40) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xfff1}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async) 21.174450323s ago: executing program 2 (id=2064): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001780), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001800)={0x20, r1, 0x401, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x44000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000002880)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)="fc4406008e199ae0898c7a8988823619badd4fe626289574f86d0809dc46543a7397ceafd65272d076683d2908aba612c0421a489cbc57359748ade403033388d7b866e35806784dfd62ea58f65ccb3cf9c6bc", 0x53}, {&(0x7f00000048c0)="4aa6ebbaadac821a088be79aff597e399b67d0e0d8b16af93d4078939730787afd7ca85bd5aa74fab362b0585f095ee8c513e864ee7783500a577bfbf648389284cb6744ba7d2e73d9d618702e712ecd6a199286326ff22d59544afc715f8eccf9b851691d3b14dac31434bfec34", 0x6e}], 0x2, 0x0, 0x0, 0x800}], 0x1, 0x4815) recvmmsg(r3, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000980)=""/87, 0x57}], 0x1}, 0xffffff0b}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x1}, 0xf}], 0x400000000000249, 0x2101, 0x0) 21.009982248s ago: executing program 2 (id=2068): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xa, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008804}, 0x40000) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0x10, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @dev={0xac, 0x14, 0x14, 0x3b}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 20.923822867s ago: executing program 2 (id=2071): r0 = socket$l2tp(0x2, 0x2, 0x73) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r2, 0x2, 0x2, 0x0, @void, @value}, 0x10) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="13bca4c136947cdbca38025ad7be290b5e12a5548d572dd0e3563cbe312f8a124790d60f365a82c921247535b520c46d91e290bf73158de2328179ffd7641174f4eac2913b9f2697ef19bca34e34807a107c3493b8b4e0ec4a76001bf12d9b776a529963b0925e0fac6c0582c80646dcb401cf1be25e852ece6861fea803007163da6f599cce3ff7cbb1407145de3807d59b80fdc1178cb60af55c77c267267bb6eb619913ee6ef9f2bd3b109608a4505ddc76", @ANYRES32=r3, @ANYBLOB="00ffe8ffe224d7b5001000000a01a0beff", @ANYRES16=r2], 0x10) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r4, 0x2, 0x0, 0x5, &(0x7f0000000180)=[0x0], 0x400000c0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000680)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000080], 0x3f, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) 20.718506442s ago: executing program 2 (id=2074): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x10, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="380000001800017e63000000000000000a0000000000c800000000000c001600080001000400000008000400", @ANYRES32=r3, @ANYBLOB="0600150007"], 0x38}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r6 = epoll_create(0x2) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='virt_wifi0\x00', 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r7, 0x8b2a, &(0x7f0000000040)) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f0000000000)={0xc0000000}) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000002c00000000000000", @ANYRES32, @ANYBLOB="728c00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="985df1a50000000000000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0x1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000900)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{0x1, 0xffffffffffffffff}, &(0x7f0000000a00), &(0x7f0000000a40)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x2a, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @alu={0x7, 0x1, 0x4, 0x9, 0xb, 0x50}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x3}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf3d}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ldst={0x2, 0x2, 0x1, 0x2, 0x5, 0x20, 0x10}, @map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000740)='syzkaller\x00', 0x7f, 0xa8, &(0x7f0000000840)=""/168, 0x40f00, 0x48, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000780)={0x3, 0xd, 0x9, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[0x1, r11, 0xffffffffffffffff, r5, r12], 0x0, 0x10, 0x7, @void, @value}, 0x94) r13 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r13, 0x1, r6, &(0x7f0000000040)) close(0x3) r14 = socket$unix(0x1, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r15, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1c, 0xf, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0x5c9b, 0x0, 0x0, 0x223bab7f66901c13, 0x14, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x3, 0x3, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f0000000340)=[0xffffffffffffffff, r5, 0x1, 0x1], &(0x7f0000000380)=[{0x1, 0x3, 0x6}, {0x4, 0x3, 0xd, 0x7}, {0x4, 0x5, 0x1, 0x2}], 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000480), 0x4) 20.318520924s ago: executing program 2 (id=2082): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xfffd, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r1 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x303}, "620edd46263e719d", "f3df1a3e5b04f68348bdc0e8be822425c20802bc154ccd94c1e3f4a462ad018e", "74105022", "04b8c849f167e3c9"}, 0x38) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) close(r0) 10.310046149s ago: executing program 2 (id=2082): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xfffd, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r1 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x303}, "620edd46263e719d", "f3df1a3e5b04f68348bdc0e8be822425c20802bc154ccd94c1e3f4a462ad018e", "74105022", "04b8c849f167e3c9"}, 0x38) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) close(r0) 2.724190611s ago: executing program 1 (id=2256): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) ioctl$F2FS_IOC_COMPRESS_FILE(r1, 0xf518, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x200000000000023f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRES64=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0xbe) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f0000000240)=r3}, 0x20) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) (rerun: 64) r6 = bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=@base={0x14, 0x4, 0x4, 0x7, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xf, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async, rerun: 32) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r4) (async, rerun: 32) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r7, &(0x7f0000000400)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x2, @default}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.542723536s ago: executing program 1 (id=2258): socket$can_bcm(0x1d, 0x2, 0x2) (async) socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x6, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x80, r1, 0x0, 0x7}, 0x38) sendmmsg$inet6(r0, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x2, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r3}) (async) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r3}) shutdown(r0, 0x1) (async) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x7f5f}}, 0x8, 0x4}, 0x90) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$phonet(0x23, 0x2, 0x1) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) listen(r6, 0x0) (async) listen(r6, 0x0) bind$bt_sco(r6, &(0x7f0000000200), 0x8) (async) bind$bt_sco(r6, &(0x7f0000000200), 0x8) connect$bt_sco(r6, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) connect$bt_sco(r6, &(0x7f0000000000)={0x1f, @none}, 0x8) sendmsg(r5, &(0x7f0000000440)={&(0x7f00000000c0)=@phonet, 0x80, &(0x7f0000000300)=[{&(0x7f0000000140)='l', 0x1}, {0x0, 0x2}], 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="34000000b88dcd983775682d32846f697285dca85996ae98901a9a4324cdcef280a6deccdd6bfa305e18bbaa9a32cf6d03544dcc0b8cbea0bc0bd454968e289ad7ca7a2b81983627bda82eccc804e5af4cc2726fb860b672ec74a7081eea176b2adb797a9de920ab32c3b170cf62d6dece936f032a255d7abac6ab665a045d90b6dd2190bc789b49ccf16262538252887caef350b1f9640a1e6ba09cac9aea4f76", @ANYRES16=r7, @ANYBLOB="010000000000000000000200000014000200626f6e643000000000000000000000000900010073797a3200000000"], 0x34}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[], 0x9c}}, 0x0) 2.349419546s ago: executing program 1 (id=2262): r0 = socket$inet6(0xa, 0x7, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000900)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) (async, rerun: 32) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x4200}], 0x1, &(0x7f0000000140), 0x0, 0x0) (async, rerun: 32) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) (async) sendto$inet6(r0, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) (async) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)=@getsa={0x34, 0x12, 0x1, 0x0, 0x0, {@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0xff}, [@mark={0xc}]}, 0x34}}, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000000906010200000000000000000200ffff08000940000000390900020073797a3100000000050001000700000014000880100a"], 0x44}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) sendmsg$inet6(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)="2f6c62fdf406a1a0175bd356c35c10e4d1be87033978d275293527325d1cd47e250c", 0x22}], 0x1}, 0x0) (async) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f00000000c0), 0x4) 2.034047713s ago: executing program 1 (id=2267): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)={{0x14}, [@NFT_MSG_DELRULE={0x0, 0x8, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_RULE_TABLE={0x0, 0x1, 'syz0\x00'}, @NFTA_RULE_TABLE={0x0, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0x0, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x0, 0x4, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, @queue={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @socket={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY, @NFTA_SOCKET_KEY={0x0, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_KEY={0x0, 0x1, 0x1, 0x0, 0x2}, @NFTA_SOCKET_DREG={0x0, 0x2, 0x1, 0x0, 0x8}]}}}, {0x0, 0x1, 0x0, 0x1, @inner={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @bitwise={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @flow_offload={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x0, 0x1, 'syz0\x00'}]}}}, {0x0, 0x1, 0x0, 0x1, @reject={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x0, 0x2, 0xec}, @NFTA_REJECT_TYPE, @NFTA_REJECT_TYPE={0x0, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_TYPE, @NFTA_REJECT_TYPE={0x0, 0x1, 0x1, 0x0, 0x7}, @NFTA_REJECT_TYPE]}}}, {0x0, 0x1, 0x0, 0x1, @inner={{0x5b}, @void}}]}, @NFTA_RULE_CHAIN={0x0, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x0, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0x0, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT={0x0, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x0, 0x1, 0x1, 0x0, 0x88}]}]}, @NFT_MSG_NEWRULE={0x0, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_COMPAT={0x0, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x0, 0x1, 0x1, 0x0, 0x9000}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x0, 0x1, 0x1, 0x0, 0xc}]}, @NFTA_RULE_CHAIN={0x0, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x0, 0x4, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, @limit={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_LIMIT_FLAGS={0x0, 0x5, 0x1, 0x0, 0x1}, @NFTA_LIMIT_BURST={0x0, 0x3, 0x1, 0x0, 0xffffffff}, @NFTA_LIMIT_TYPE={0x0, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_BURST={0x0, 0x3, 0x1, 0x0, 0x750}, @NFTA_LIMIT_RATE={0x0, 0x1, 0x1, 0x0, 0x8000000000000001}, @NFTA_LIMIT_FLAGS={0x0, 0x5, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0x0, 0x1, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_LIMIT_TYPE={0x0, 0x4, 0x1, 0x0, 0x2}, @NFTA_LIMIT_TYPE={0x0, 0x4, 0x1, 0x0, 0x1}]}}}, {0x0, 0x1, 0x0, 0x1, @dynset={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @connlimit={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x0, 0x1, 0x1, 0x0, 0xff}]}}}, {0x0, 0x1, 0x0, 0x1, @quota={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @numgen={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @nat={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MIN={0x0, 0x3, 0x1, 0x0, 0xd}, @NFTA_NAT_REG_PROTO_MIN={0x0, 0x5, 0x1, 0x0, 0x8}, @NFTA_NAT_FLAGS={0x0, 0x7, 0x1, 0x0, 0x40}]}}}, {0x0, 0x1, 0x0, 0x1, @ct={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x0, 0x1, 0x1, 0x0, 0x4}, @NFTA_CT_DREG={0x0, 0x1, 0x1, 0x0, 0x4}, @NFTA_CT_DIRECTION={0x0, 0x3, 0x1}, @NFTA_CT_SREG={0x0, 0x4, 0x1, 0x0, 0x13}, @NFTA_CT_SREG={0x0, 0x4, 0x1, 0x0, 0x12}, @NFTA_CT_SREG={0x0, 0x4, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_USERDATA={0x0, 0x7, 0x1, 0x0, "f8513b48f91867f62d7bc055daab449f9eb04302f48178b157f6"}]}], {0xffffffffffffffce, 0x11, 0x1, 0x0, 0x0, {0x8}}}, 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0x135cfb4307d517, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}], {0x14}}, 0x60}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0x2, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a32000000001400048008000240326565a708000140000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c0001800b00010072656a65637400000c000280080001400000000114000000110001"], 0xd0}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14}}, 0x5c}}, 0x0) 1.871559904s ago: executing program 1 (id=2269): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmmsg$sock(r3, &(0x7f000000bb40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001740)="ee5886e0b4a7667690f1667187f548b5dd806b642c598c818297305ef94826cf43347480c352a7687efd2b88142035c05e0b12bf21ce9c302aec3dad537125bf10c5d85c7af2cac9b92bb50a62c1497041f9745be39fc73b06ccc272be3d1570557eb0a831cf68944bf8d2efcbdf362cbe33092b0d78bcc9c3967b86525d47e16d8c3adda02b695bfa52f28142e759f8dbb33476c2edbb2707ee460329afe8275aca6bc1ec8ce9bd03ff0c188e2d8cb8f741800474df71d4c2a1e21a9b52b2c90a7162e2205546a2be56164b1f172a0dce32a1fd903726c08ea3dbe194aaefe465fac3a7", 0xe4}, {&(0x7f0000001840)="b792374b149f4cc5d3f155a0451609108f52206fe2441f23b1ba334d6c15b5268b4301fd805e21e7fc62f1acb0189c2786864f8af215c4c9327efb60965faa14092ae73bd93521b4c1b8cd70ef6991a33d69741e7c7e4b06e1ea98e0543698018f28ed13370d8e43fcecfbb0a1e909f6b4b2af1a3a832c56172abb1960a6f26447066f947d368188198761c4a9b7bbaa984b18f663e6dbeb1ed88fd32ceb88a6c743f303850988", 0xa7}, {&(0x7f0000001900)="814d61e8e52c537c9998f5b84a01cfef88daee9bfe1542b6953c6521e3453264f8dad438b05944c30d60e479cf5d55c288a89dec7b0dcbe43b723ef32926423c17", 0x41}, {&(0x7f0000001980)="c17c8b83f132c039d41275cc024ca0411772c061cbf34e34f6aa", 0x1a}, {&(0x7f00000019c0)="cd50cb276d31843728fdd1b4d9443f0493685a902bbe47543901d67a4b9add80e5c48f94808ac3bb1cc7d7525bd861267c6051fcb1fd90752bd7515a6734563e983cdddef8a40af954c51dce6d3fbd7fcb5f0e9aa5c842969251fb6e9d2e468e84cbaeab607d071abc6e59b673315473db64494f7f86a51820a12fcbe13498951f45ba3274e6de36ce8ec65d50cc4dfce288fc5f23289576a10b", 0x9a}], 0x5}}, {{0x0, 0x0, &(0x7f0000005500)=[{&(0x7f00000050c0)="ee0e4582ba0614e5e185ee74c1ededadbe569a96b62b925667d0a392fe8c900a119fd9c2b14e91ffa24b211a903afb6f6cdd3143f507ac024293e3923d3617e0667a5902cbfce554ef481af6057c861c627557da175c76b452bc68f081f551cc55e8c52440be9529dadcca04a4c0eabf833d9c45c8d01ee6bfaa0615590126e79a9665445056", 0x86}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f00000059c0)=[{&(0x7f0000005640)="35033276e4182bf05da6dba9497609361c261aacc3f1f07b2786fa3cc11683a17d722e3035c5b73598c0835f3ebcbc15d5bf1b6f07426475348426b74e314d7b11083f2f2331a4", 0x47}, {&(0x7f00000056c0)="0cf3bbc86c3be13e049b7726659813f6e5002a95fbc60ada3a271d39af8445e7698c90d154b32e68f7037786e3e0baab8b3bf51033206fbb9b82c171950e2f951149c90d88f07d59e2c3a34d1b51ce18c051ad19138299f0db214dd0a0f2f3b733922434f0e1cba8c19d31ea7429ade0a5bce8aa8ef6613c475f37f08a1b03e37104", 0x82}, {&(0x7f0000005780)="e6afeb66137d540bb20fc2648790cd3143649ad14a4ae447e071d23877c471fce8cb00af5bff001c81e78809efa77efdb8a912894dd545c1cefa6295be21dbbecab4a74f5b49bd2014a7dd3b348417a44f6c4f8abd1f7c193a46f0ebbe444f71c66ceeac9235e92fb34a9cb158469bc9d62db26e52fe4e9a4bc3b37d9c822f0aea673a02c4324bfc638a0898ea6de844851aeaec603fb31490e0e60264f14e333333807db17277caed9f9bfa5c25947766dba10c75bfd55350f72272e7b781de95cae3d1f76d46b61e9f1d7b37b3835bccec30fd0b7fe8e0d20dc6e4dd54c5437420517e873777a935eb24dfa59c", 0xee}, {&(0x7f0000005880)="1abec9916dfc6341f205af2ddeb54033c4a8c733e1a211363dd3e77850fbcf63c394c6c0cb0f4a0c0386e79590492085d40b0bac721875e27388dc2fbafcf190d69b5a71681be3cd08117460b878f3bb42734e0dd00564dcc8c51454fd01860221bb996caac887c1af262dcfaf527916db9feda28dea3a8e8a5fe9f3e28dddaf8546cff808f818a30d6be666081ae6b8fd47133ffbc10a", 0x97}, {&(0x7f0000005940)="40ee9ab1e7dc5e3b590a66b1e1", 0xd}], 0x5}}], 0x4, 0x4000011) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\b\x00\x00\x00\x00@'], 0x10}, 0x1, 0x0, 0x0, 0x805}, 0x240401d1) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x6, 0x6, 0x301, 0x0, 0x0, {0xc, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x800) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r4, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)="e6", 0x1}], 0x1}}], 0x1, 0x24040890) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000140)=0xffff0000, 0x4) 1.753701733s ago: executing program 4 (id=2271): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25ADDFWD(r0, 0x8919, 0x0) socketpair(0xf, 0xa, 0x2, &(0x7f0000000000)) 1.631673518s ago: executing program 0 (id=2273): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000340)=0xdd7d, 0x4) close(0x3) 1.54172415s ago: executing program 4 (id=2275): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.536614774s ago: executing program 0 (id=2276): r0 = socket(0x10, 0x3, 0x0) setsockopt$MRT6_DONE(r0, 0x29, 0xc9, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000300000008000400ac1414000800020000000000080001"], 0x2c}}, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x200182, 0x0) r5 = socket(0x10, 0x3, 0x0) getsockopt$netlink(r5, 0x10e, 0x8, &(0x7f0000000180)=""/129, &(0x7f0000000040)=0x81) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES8], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.335495576s ago: executing program 4 (id=2277): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x4000004) socket$caif_stream(0x25, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f0000000e00)={{}, "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"}) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r6}, 0x38) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=@gettfilter={0x24, 0x2e, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xfff2, 0xe}, {}, {0xe}}}, 0x24}}, 0x0) (async) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x9, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0xc0) (async) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000440)={0x18, r10, 0x400, 0x3, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 1.334491619s ago: executing program 0 (id=2278): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x1016, &(0x7f00000010c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa81004000001142027f62ef"], 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}}, 0x800) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000340)={0x8, {{0xa, 0x4e21, 0x9, @mcast2, 0x3}}, {{0xa, 0x4e21, 0x9, @loopback, 0x800}}}, 0x108) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x34, 0x2, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8081}, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_emit_ethernet(0x1016, &(0x7f00000010c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa81004000001142027f62ef"], 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}}, 0x800) (async) socket(0x80000000000000a, 0x2, 0x0) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000340)={0x8, {{0xa, 0x4e21, 0x9, @mcast2, 0x3}}, {{0xa, 0x4e21, 0x9, @loopback, 0x800}}}, 0x108) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x34, 0x2, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8081}, 0x8000) (async) 1.291270119s ago: executing program 5 (id=2279): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="8b0edb00"], 0x8) setsockopt$inet_tcp_int(r2, 0x6, 0x10, &(0x7f00000000c0)=0x100000001, 0x4) close(r2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vxcan0\x00'}) socket$rds(0x15, 0x5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r6, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000300)={0x41}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='contention_end\x00', r7}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000005c40), r1) sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f0000005d00)={&(0x7f0000005c00)={0x10, 0x0, 0x0, 0x10a100}, 0xc, &(0x7f0000005cc0)={&(0x7f0000005c80)={0x1c, r8, 0x0, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x40000) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000200)={@cgroup=r9, r9, 0x2e, 0x0, 0x0, @void, @value}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0xffffffdb, 0x3, r10}, @val={0x0, 0x99, {0x7, 0x2f}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) 1.138673256s ago: executing program 0 (id=2280): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffe, @local, 0x13}, 0x1c) (async) setsockopt$inet6_int(r1, 0x29, 0x2, 0x0, 0x0) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x4c, r2, 0x1, 0x0, 0x0, {0x4f}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}}]}, 0x4c}}, 0x0) 1.079291362s ago: executing program 4 (id=2281): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='signal_generate\x00', r3}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xf, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f00000002c0)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x144}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800c0001006d6163766c616e0020000280080001001000000008000300000000000a000400aaaaaaaaaabb000008000500", @ANYRES32=r2, @ANYBLOB="d6ae5f8ff0dc6e576f3edbd51e0949b0d1f138328121f10ee41ec197ee681c8b1cb8ea7dffa826979db95f40136a5ac3f81b67effcbae3199571203334d2ca"], 0x58}}, 0x0) 966.100931ms ago: executing program 5 (id=2282): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)="5490", 0x2}], 0x1}, 0x4048841) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="010000000004000096fb470106824073337482c60277dbca25e5a3def200019aca5049f0b94cfcfca31f26ace5fcf1a97da1708f99284c06144d807a488a871c18fb848a453187a9ed25281b3f9f5cfcee57df8fb62f12277aa287e312149fe94a9bd06ed9a6e39f8a104298f4334abf23e8b19d1ec01554f9cd19be4e4dde3806c76c5b50fc51a2edf33000cf774c5e0d466f912835af7c4ba20fe602dbcd15af4d099862538b28a6643122d338a1373d667066a37b89b5f112dd910f382f65998f0ff54fda231021583b828cb404e2adbb18e7279824", 0xd7}], 0x1}, 0x4000041) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)}, 0x40032000) 783.877616ms ago: executing program 5 (id=2283): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904ff80000000fe280000000000000800040001000000", 0x24) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) 602.73097ms ago: executing program 5 (id=2284): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB="84010000", @ANYRES16=r2, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000000000050009"], 0x184}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000003e000701fcffffff7ee55290328a7b840400368004000180"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000000400000000000000c3a00000e100000095000000000000001a42d4f421a7be9b3315accb3048c4aca6d08ff8060f28a9ab63efab0e68b1dab174155a4874249ec6ee0299ede615a47b6f5e6e12de1d93761314b902a35ba0ff45a45140eab714fd3c798dba30e44ef0f8369fa7ca53174073ffefad22dc7ac1feb6a2d62f635f3f45f57e8d431d1bd13b622cc5d83f7095a2f41f7115f06dc82e3937edb9fce1e5ee3e0d198cfccf754a6efbef781839e37a7d087dcfb469e403c9dde48816"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x27, &(0x7f0000000640)=""/159, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x17, 0x10, 0x0, 0x0, 0x61e5cc96, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x43) ioctl$SIOCSIFMTU(r4, 0x8923, &(0x7f0000000000)={'bridge_slave_0\x00', 0x7}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000003680)={'tunl0\x00', 0x400}) r5 = socket$inet(0x2b, 0x801, 0x0) socket$igmp6(0xa, 0x3, 0x2) connect$inet(r5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB="84010000", @ANYRES16=r2, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000000000050009"], 0x184}}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000003e000701fcffffff7ee55290328a7b840400368004000180"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc10) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000000400000000000000c3a00000e100000095000000000000001a42d4f421a7be9b3315accb3048c4aca6d08ff8060f28a9ab63efab0e68b1dab174155a4874249ec6ee0299ede615a47b6f5e6e12de1d93761314b902a35ba0ff45a45140eab714fd3c798dba30e44ef0f8369fa7ca53174073ffefad22dc7ac1feb6a2d62f635f3f45f57e8d431d1bd13b622cc5d83f7095a2f41f7115f06dc82e3937edb9fce1e5ee3e0d198cfccf754a6efbef781839e37a7d087dcfb469e403c9dde48816"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x27, &(0x7f0000000640)=""/159, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x17, 0x10, 0x0, 0x0, 0x61e5cc96, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x43) (async) ioctl$SIOCSIFMTU(r4, 0x8923, &(0x7f0000000000)={'bridge_slave_0\x00', 0x7}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000003680)={'tunl0\x00', 0x400}) (async) socket$inet(0x2b, 0x801, 0x0) (async) socket$igmp6(0xa, 0x3, 0x2) (async) connect$inet(r5, 0x0, 0x0) (async) 602.111975ms ago: executing program 1 (id=2285): r0 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r1}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008040) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32], 0x38}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x46, 0x2, {{0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xd], 0x0, [0x4, 0x2], [0x0, 0x4, 0x0, 0xfffd]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000000580)={'wg0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000000)="6b4857fca43dca8e298229a25a846420fd27f303667ec4f721a77c40675d4d6aa51f124ca81f2fbb", 0x28, 0x4008000, &(0x7f0000000080)={0x11, 0x15, r10, 0x1, 0xe, 0x6, @local}, 0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vxcan0\x00', 0x0}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000300)={0x0, @loopback, @multicast1}, &(0x7f0000000380)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x1, 0x0, 0x2, {0x0, 0x0, 0x0, r15, 0x18f40, 0x22008}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e24}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}]}, 0x48}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000001d00)=ANY=[@ANYRES16, @ANYRES16=0x0, @ANYBLOB="00042bbd7000fddbdf250300000008000100", @ANYRES16=r12, @ANYBLOB="7c02028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000700000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000100000008000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="4c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c0004000700810d0002000007000307fdffffff0a0007c30900000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r1, @ANYRES16, @ANYRES32=r1, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="640202804c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000003c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000005000300050000000900040068617368000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="3c00010024000100757365725f6c696e6b755c00000000000000000000000000000000000000000005769000060000000400040008000600c75fe175b85aaa473b3406c5a53ca7f5ea30eb842881275879c1dfbdf4c03d6ef3922ddde001294ec8eddf5b63d240b3d13854b24b0440597e4f131f9d366a7210a7f0644573113e4671d272eb56e1ff5161ff00e34d69c1345f6787449d47cc7f3fcfdf9f9dddab51a94858750c932c5e11c391af5ffef204129801f24fb93390b7b4e647e66482ad376f4b4e37f07aea7ee15c5848fec8415037bc8dc6137ca1669f907057166d9d5899f380b075c7a586fc91fb71f91531", @ANYRES32=r1, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400ca000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000080000008000600", @ANYRES32=r1, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r1, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r10, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r1, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400539d355408000100", @ANYRES32=r1, @ANYBLOB="6c01028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r11, @ANYBLOB="080007000000000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e000038000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000005000300030000000800040081ffffff38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400fbffffff38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400b9040000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000200000008000600", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="b800028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000400000044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b75700000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000400000008000100", @ANYRES32=r1, @ANYBLOB="000102803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r1, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r1, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000000000008000100", @ANYRES32=r13, @ANYBLOB="9401028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004008000000008000700000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r15, @ANYBLOB], 0x9dc}}, 0x4) r16 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) r18 = socket$nl_route(0x10, 0x3, 0x0) r19 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r19, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083911000000000000a1180015000600142603600e120900210000000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) sendmsg$nl_route_sched(r18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r17}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) 341.637488ms ago: executing program 5 (id=2286): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf200000000000001600100007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000240)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r4, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r5, @ANYBLOB="b400028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004"], 0xd0}, 0x1, 0x0, 0x0, 0x24004000}, 0x24044880) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xd11325b154cab3b3}, 0xc, &(0x7f00000000c0)={&(0x7f0000000700)={0x3cc, r4, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0xc, 0x8, 0x6, 0xed}, {0x7, 0x0, 0x4, 0xfffffe1c}, {0x401, 0x5, 0x81, 0x36}, {0x5, 0x9, 0xe, 0x6}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xd7dd}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}]}, 0x3cc}, 0x1, 0x0, 0x0, 0x20008800}, 0x44080) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="20000000000000004000128008000100687372003400028008000200", @ANYRES32=r1, @ANYBLOB="050006000000000008000100", @ANYRES32, @ANYBLOB="05000700010000000500030000000000050007"], 0x60}}, 0x0) 210.428731ms ago: executing program 5 (id=2287): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8001000000000000, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2a0, 0x2e8, 0x4003, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000540)=ANY=[@ANYRES32=r1]) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000100), 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r4, 0x0) getsockopt$inet_tcp_int(r4, 0x6, 0x2, 0x0, &(0x7f0000000300)) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x0) 119.451972ms ago: executing program 4 (id=2288): r0 = socket$netlink(0x10, 0x3, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e000000000000001280000003"], 0x50) (async, rerun: 32) socket$inet_sctp(0x2, 0x5, 0x84) (async, rerun: 32) socket$inet_smc(0x2b, 0x1, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) pipe(&(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) (async, rerun: 32) socket$nl_sock_diag(0x10, 0x3, 0x4) (rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000c7aa00859d37040e1a8bd30000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x48) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000010651fbe347b2c2b00000c00018008000100", @ANYRES8=r4], 0x20}}, 0x0) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x0) (rerun: 32) 117.419396ms ago: executing program 0 (id=2289): sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x78, 0x7, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_META_SREG={0x8}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1f}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x11, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r2, &(0x7f0000000300), &(0x7f00000003c0)=""/174}, 0x20) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 54.428463ms ago: executing program 4 (id=2290): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61154c000000000061138c0000000000bfa000000000000007000000080000002d0301000000000095000000000000006916000000000000bf67000000000000350607000fff07206706000002000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r1, &(0x7f0000000500)=[{&(0x7f0000000040)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, &(0x7f0000000340)=[@dstaddrv6={0x20, 0x84, 0x8, @mcast1}, @init={0x18, 0x84, 0x0, {0x803}}], 0x38}], 0x1, 0x0) (async) sendmmsg$inet_sctp(r1, &(0x7f0000000500)=[{&(0x7f0000000040)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, &(0x7f0000000340)=[@dstaddrv6={0x20, 0x84, 0x8, @mcast1}, @init={0x18, 0x84, 0x0, {0x803}}], 0x38}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) (async) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x8, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000180), &(0x7f0000000300)=r0}, 0x20) 0s ago: executing program 0 (id=2291): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x4, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x10}, {0xd}, {0x0, 0x7}}}, 0x24}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000540), r0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x2, 0x1, 0x1}}}}]}, 0x44}}, 0xc4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x4c, 0x2c, 0xd27, 0x200, 0x0, {0x0, 0x0, 0x0, r1, {0x5, 0xd}, {}, {0x9, 0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0xe, 0x0, 0x0, 0x8000, 0xffff}}, @TCA_U32_CLASSID={0x8, 0x1, {0x9, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) r4 = socket(0x2a, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89b0, &(0x7f0000000180)={'macvlan1\x00', &(0x7f00000001c0)}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x5c, r6, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xa68}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "27a7b424cb8765ad4e47580609848a77e9af5e28"}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x20000010) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)={0x144, r6, 0xa4d, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8cb}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffff9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7f}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xc3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5000000000000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xce1a}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffb}]}, @TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "d99472e9e54cf9787e4ace564d193e0b651ae2194003d32bc7c9"}}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x4004000}, 0x10) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): :50:50:50 [ 79.069253][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.109869][ T5837] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.121084][ T5837] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.130423][ T5837] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.139422][ T5837] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.167734][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.215103][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.367926][ T5935] netlink: 176 bytes leftover after parsing attributes in process `syz.0.11'. [ 79.398598][ T5935] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11'. [ 79.409990][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.437877][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.534618][ T5940] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 79.561405][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.591493][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.794594][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.815967][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.015730][ T5961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16'. [ 80.053476][ T5838] Bluetooth: hci0: command tx timeout [ 80.131346][ T5961] 8021q: adding VLAN 0 to HW filter on device team1 [ 80.142364][ T5838] Bluetooth: hci1: command tx timeout [ 80.188164][ T5973] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19'. [ 80.299508][ T5838] Bluetooth: hci3: command tx timeout [ 80.299531][ T51] Bluetooth: hci2: command tx timeout [ 80.306386][ T5838] Bluetooth: hci4: command tx timeout [ 80.394209][ T5975] syz.0.20 uses obsolete (PF_INET,SOCK_PACKET) [ 80.559986][ T5980] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21'. [ 80.608996][ T5980] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21'. [ 80.781641][ T5993] netlink: 'syz.2.24': attribute type 2 has an invalid length. [ 81.002350][ T6004] netlink: 4 bytes leftover after parsing attributes in process `syz.0.29'. [ 81.031472][ T6007] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 81.058102][ T6014] Bluetooth: MGMT ver 1.23 [ 81.095187][ T6007] netlink: 20 bytes leftover after parsing attributes in process `syz.2.30'. [ 81.405979][ T6031] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.500282][ T6030] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.622881][ T6030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.706634][ T6035] sch_tbf: burst 0 is lower than device team_slave_0 mtu (1514) ! [ 81.759271][ T6042] netlink: 'syz.0.41': attribute type 4 has an invalid length. [ 82.213821][ T5838] Bluetooth: hci1: command 0x0401 tx timeout [ 82.382453][ T6067] tipc: Started in network mode [ 82.411614][ T6067] tipc: Node identity ea19550b69c1, cluster identity 4711 [ 82.432978][ T6067] tipc: Enabled bearer , priority 0 [ 82.459294][ T6067] syzkaller0: entered promiscuous mode [ 82.478037][ T6067] syzkaller0: entered allmulticast mode [ 82.496642][ T6069] bridge: RTM_NEWNEIGH with invalid ether address [ 82.690294][ T6084] tipc: Resetting bearer [ 82.948992][ T6066] tipc: Resetting bearer [ 83.028911][ T6066] tipc: Disabling bearer [ 83.098713][ T5838] Bluetooth: hci0: command tx timeout [ 83.350761][ T6123] netlink: zone id is out of range [ 83.372312][ T6123] netlink: zone id is out of range [ 83.414464][ T6123] netlink: zone id is out of range [ 83.457929][ T6123] netlink: zone id is out of range [ 83.473201][ T6123] netlink: zone id is out of range [ 83.490997][ T6123] netlink: zone id is out of range [ 83.519717][ T6123] netlink: zone id is out of range [ 83.531617][ T6134] tipc: Started in network mode [ 83.537021][ T6134] tipc: Node identity ee814dfc04c, cluster identity 4711 [ 83.539903][ T6123] netlink: zone id is out of range [ 83.544803][ T6134] tipc: Enabled bearer , priority 0 [ 83.560728][ T6134] syzkaller0: entered promiscuous mode [ 83.566774][ T6123] netlink: get zone limit has 8 unknown bytes [ 83.581907][ T6134] syzkaller0: entered allmulticast mode [ 83.611329][ T6134] tipc: Resetting bearer [ 83.674135][ T6133] tipc: Resetting bearer [ 83.710386][ T6133] tipc: Disabling bearer [ 84.068184][ T6155] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 84.081197][ T6155] netlink: 'syz.1.71': attribute type 5 has an invalid length. [ 84.261463][ T6165] __nla_validate_parse: 11 callbacks suppressed [ 84.261482][ T6165] netlink: 256 bytes leftover after parsing attributes in process `syz.1.75'. [ 84.262337][ T6168] netlink: 12 bytes leftover after parsing attributes in process `syz.3.74'. [ 84.632731][ T6183] netlink: 'syz.3.79': attribute type 1 has an invalid length. [ 84.789287][ T6191] xt_CT: You must specify a L4 protocol and not use inversions on it [ 84.794976][ T6187] ip6t_srh: unknown srh match flags 536B [ 85.008798][ T6198] netlink: 36 bytes leftover after parsing attributes in process `syz.0.85'. [ 85.079880][ T6200] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 85.086477][ T6202] netlink: 16 bytes leftover after parsing attributes in process `syz.3.88'. [ 85.086528][ T6202] netlink: 616 bytes leftover after parsing attributes in process `syz.3.88'. [ 85.112382][ T6200] : renamed from bridge_slave_0 (while UP) [ 85.339392][ T6209] netlink: 8 bytes leftover after parsing attributes in process `syz.3.91'. [ 85.447702][ T6225] Zero length message leads to an empty skb [ 85.602758][ T6233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.99'. [ 85.619104][ T6230] netlink: 4 bytes leftover after parsing attributes in process `syz.3.98'. [ 85.647320][ T6230] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.800987][ T6230] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.895151][ T6252] netlink: 'syz.0.101': attribute type 3 has an invalid length. [ 85.914343][ T6252] netlink: 32 bytes leftover after parsing attributes in process `syz.0.101'. [ 86.200736][ T6274] netlink: 256 bytes leftover after parsing attributes in process `syz.3.110'. [ 86.241292][ T6273] lo speed is unknown, defaulting to 1000 [ 86.268085][ T6273] lo speed is unknown, defaulting to 1000 [ 86.285344][ T6273] lo speed is unknown, defaulting to 1000 [ 86.319105][ T6273] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 86.414114][ T6273] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 86.498892][ T6273] lo speed is unknown, defaulting to 1000 [ 86.505550][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 86.558651][ T6273] lo speed is unknown, defaulting to 1000 [ 86.613665][ T6273] lo speed is unknown, defaulting to 1000 [ 86.620553][ T6273] lo speed is unknown, defaulting to 1000 [ 86.678907][ T6273] lo speed is unknown, defaulting to 1000 [ 86.776100][ T24] cfg80211: failed to load regulatory.db [ 86.852171][ T6301] warning: `syz.3.120' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 87.151205][ T5838] Bluetooth: hci0: command 0x0401 tx timeout [ 87.522977][ T6337] netlink: 'syz.4.131': attribute type 1 has an invalid length. [ 87.555412][ T6344] netlink: 'syz.3.133': attribute type 21 has an invalid length. [ 87.662699][ T6353] SET target dimension over the limit! [ 87.780435][ T6360] tipc: Started in network mode [ 87.786007][ T6360] tipc: Node identity e2361f06d2e6, cluster identity 4711 [ 87.794147][ T6360] tipc: Enabled bearer , priority 10 [ 87.867164][ T6366] netlink: 'syz.0.140': attribute type 4 has an invalid length. [ 88.654807][ T6412] veth0: entered promiscuous mode [ 88.714741][ T6411] veth0: left promiscuous mode [ 88.767316][ T6416] raw_sendmsg: syz.1.157 forgot to set AF_INET. Fix it! [ 88.801513][ T6419] netlink: 'syz.2.158': attribute type 2 has an invalid length. [ 88.926695][ T5878] tipc: Node number set to 818945798 [ 89.279571][ T6446] __nla_validate_parse: 21 callbacks suppressed [ 89.279589][ T6446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.164'. [ 89.382035][ T6451] ieee802154 phy0 wpan0: encryption failed: -22 [ 89.475875][ T6456] netlink: 16 bytes leftover after parsing attributes in process `syz.1.168'. [ 89.485770][ T6456] netlink: 32 bytes leftover after parsing attributes in process `syz.1.168'. [ 89.502248][ T6456] gretap1: entered promiscuous mode [ 89.510177][ T6456] gretap1: entered allmulticast mode [ 89.667958][ T6470] netlink: 12 bytes leftover after parsing attributes in process `syz.4.173'. [ 89.855429][ T6484] netlink: 'syz.2.177': attribute type 3 has an invalid length. [ 89.863435][ T6484] netlink: 766 bytes leftover after parsing attributes in process `syz.2.177'. [ 89.937495][ T6489] netlink: 'syz.2.177': attribute type 1 has an invalid length. [ 89.960764][ T6491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.178'. [ 89.972416][ T6489] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.177'. [ 90.149388][ T6505] sctp: [Deprecated]: syz.4.182 (pid 6505) Use of int in maxseg socket option. [ 90.149388][ T6505] Use struct sctp_assoc_value instead [ 90.181347][ T6507] netlink: 16 bytes leftover after parsing attributes in process `syz.1.183'. [ 90.197519][ T6507] netlink: 32 bytes leftover after parsing attributes in process `syz.1.183'. [ 90.306299][ T6512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.186'. [ 90.325640][ T6512] net_ratelimit: 3 callbacks suppressed [ 90.325659][ T6512] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 90.353533][ T6512] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 90.393544][ T6516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.464987][ T6516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.508741][ T6520] netlink: 'syz.1.189': attribute type 1 has an invalid length. [ 90.550237][ T6520] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.793364][ T6524] bond1 (unregistering): Released all slaves [ 91.018040][ T6545] xt_CT: You must specify a L4 protocol and not use inversions on it [ 91.240513][ T6560] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.278905][ T6560] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.348156][ T6568] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.408804][ T6571] trusted_key: syz.1.204 sent an empty control message without MSG_MORE. [ 91.451613][ T6573] netlink: 'syz.3.206': attribute type 1 has an invalid length. [ 91.531421][ T6573] 8021q: adding VLAN 0 to HW filter on device bond1 [ 91.569728][ T6578] 8021q: adding VLAN 0 to HW filter on device bond1 [ 91.577637][ T6578] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 91.595322][ T6578] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 91.791874][ T61] bond0: (slave bond_slave_0): interface is now down [ 91.813825][ T61] bond0: (slave bond_slave_1): interface is now down [ 91.827444][ T61] bond0: (slave bond_slave_0): interface is now down [ 91.846652][ T61] bond0: (slave bond_slave_1): interface is now down [ 91.862527][ T61] bond0: now running without any active interface! [ 91.997786][ T6612] x_tables: duplicate underflow at hook 1 [ 92.002922][ T6611] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 92.135394][ T6624] xt_CT: You must specify a L4 protocol and not use inversions on it [ 92.210335][ T6634] netlink: 'syz.1.223': attribute type 1 has an invalid length. [ 92.279464][ T6634] netlink: 'syz.1.223': attribute type 3 has an invalid length. [ 92.318105][ T6634] netlink: 'syz.1.223': attribute type 11 has an invalid length. [ 92.468882][ T6642] tipc: Started in network mode [ 92.484309][ T6642] tipc: Node identity ac141413, cluster identity 4711 [ 92.495186][ T6642] tipc: Enabled bearer , priority 10 [ 92.939125][ T6674] xt_cluster: you have exceeded the maximum number of cluster nodes (257 > 32) [ 93.131785][ T6685] openvswitch: netlink: IPv4 tun info is not correct [ 93.623831][ T5887] tipc: Node number set to 2886997011 [ 94.300782][ T6766] macvlan1: entered promiscuous mode [ 94.328220][ T6766] macvlan1: left promiscuous mode [ 94.334124][ T6769] xt_hashlimit: max too large, truncated to 1048576 [ 94.348789][ T6760] IPVS: persistence engine module ip_vs_pe_ not found [ 94.352503][ T6771] __nla_validate_parse: 24 callbacks suppressed [ 94.352519][ T6771] netlink: 56 bytes leftover after parsing attributes in process `syz.2.266'. [ 94.373851][ T5838] Bluetooth: hci4: command 0x0405 tx timeout [ 94.770917][ T6800] netlink: 20 bytes leftover after parsing attributes in process `syz.0.275'. [ 94.856750][ T6810] netlink: 232 bytes leftover after parsing attributes in process `syz.0.275'. [ 95.009341][ T6800] netlink: 12 bytes leftover after parsing attributes in process `syz.0.275'. [ 95.115053][ T6825] netlink: 4 bytes leftover after parsing attributes in process `syz.3.284'. [ 95.736322][ T6867] lo speed is unknown, defaulting to 1000 [ 96.099077][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805d229c00: rx timeout, send abort [ 96.109283][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88805d229c00: 0x3ff01: (3) A timeout occurred and this is the connection abort to close the session. [ 96.179582][ T6878] net veth1_virt_wifi : renamed from virt_wifi0 [ 96.264925][ T6882] netlink: 'syz.2.298': attribute type 4 has an invalid length. [ 96.296139][ T6884] openvswitch: netlink: Multiple metadata blocks provided [ 96.304278][ T6884] netlink: 'syz.1.299': attribute type 15 has an invalid length. [ 96.324130][ T6886] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 96.351938][ T6886] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 96.376204][ T6886] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 96.394264][ T6886] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 96.412645][ T6889] pimreg: entered allmulticast mode [ 96.418347][ T6886] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 96.439965][ T6886] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 96.468275][ T6886] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 96.492020][ T6886] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 96.517331][ T6886] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 96.532287][ T6893] netlink: 24 bytes leftover after parsing attributes in process `syz.4.303'. [ 97.050172][ T6927] xt_l2tp: invalid flags combination: 4 [ 97.054684][ T6926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.314'. [ 97.081925][ T6930] xt_l2tp: invalid flags combination: 4 [ 97.419217][ T6944] lo speed is unknown, defaulting to 1000 [ 97.661370][ T6953] netlink: 'syz.3.323': attribute type 1 has an invalid length. [ 97.699042][ T6953] netlink: 184 bytes leftover after parsing attributes in process `syz.3.323'. [ 97.727776][ T6953] netlink: 'syz.3.323': attribute type 1 has an invalid length. [ 98.041049][ T6971] netlink: 'syz.1.329': attribute type 11 has an invalid length. [ 98.126619][ T6978] xt_limit: Overflow, try lower: 2147483649/128 [ 98.193638][ T6979] xt_limit: Overflow, try lower: 2147483649/128 [ 98.276465][ T6985] netlink: 'syz.2.332': attribute type 12 has an invalid length. [ 98.316763][ T6985] netlink: 'syz.2.332': attribute type 29 has an invalid length. [ 98.326776][ T6985] netlink: 148 bytes leftover after parsing attributes in process `syz.2.332'. [ 98.327580][ T6989] netlink: 'syz.3.335': attribute type 1 has an invalid length. [ 98.348219][ T6985] netlink: 59 bytes leftover after parsing attributes in process `syz.2.332'. [ 98.584697][ T7001] netlink: 'syz.1.339': attribute type 39 has an invalid length. [ 98.646187][ T43] IPVS: starting estimator thread 0... [ 98.744794][ T7010] IPVS: using max 27 ests per chain, 64800 per kthread [ 98.782413][ T7017] netlink: 'syz.2.342': attribute type 11 has an invalid length. [ 99.388669][ T7043] __nla_validate_parse: 4 callbacks suppressed [ 99.388689][ T7043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.349'. [ 99.408961][ T7043] netlink: 24 bytes leftover after parsing attributes in process `syz.2.349'. [ 99.418007][ T7043] netlink: 24 bytes leftover after parsing attributes in process `syz.2.349'. [ 99.432260][ T7045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.349'. [ 99.441350][ T7045] netlink: 24 bytes leftover after parsing attributes in process `syz.2.349'. [ 99.455238][ T7045] netlink: 24 bytes leftover after parsing attributes in process `syz.2.349'. [ 100.538348][ T7031] syzkaller1: entered promiscuous mode [ 100.544156][ T7031] syzkaller1: entered allmulticast mode [ 100.558524][ T7040] syzkaller1: left promiscuous mode [ 100.576287][ T7040] syzkaller1: left allmulticast mode [ 100.634369][ T7058] geneve2: entered promiscuous mode [ 100.685091][ T7058] geneve2: entered allmulticast mode [ 100.887366][ T7076] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.356'. [ 101.032260][ T7081] netlink: 4 bytes leftover after parsing attributes in process `syz.4.358'. [ 101.056671][ T7081] netlink: 16 bytes leftover after parsing attributes in process `syz.4.358'. [ 102.181066][ T7091] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 102.464548][ T7116] IPVS: Unknown mcast interface: nicvf0 [ 102.628195][ T7124] net_ratelimit: 25 callbacks suppressed [ 102.628215][ T7124] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 102.642978][ T7127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.370'. [ 103.067536][ T7157] netlink: 'syz.3.379': attribute type 1 has an invalid length. [ 103.211737][ T7158] netlink: 'syz.3.379': attribute type 1 has an invalid length. [ 103.567871][ T7172] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 104.439426][ T7225] __nla_validate_parse: 5 callbacks suppressed [ 104.439444][ T7225] netlink: 304 bytes leftover after parsing attributes in process `syz.3.394'. [ 104.457356][ T7222] netlink: 304 bytes leftover after parsing attributes in process `syz.3.394'. [ 105.963907][ T7274] netlink: 'syz.1.402': attribute type 1 has an invalid length. [ 106.003284][ T7275] netlink: 'syz.1.402': attribute type 1 has an invalid length. [ 106.110528][ T7287] netlink: 256 bytes leftover after parsing attributes in process `syz.3.405'. [ 106.128539][ T7277] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 106.140027][ T7277] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 106.151699][ T7277] bond1: (slave vcan1): making interface the new active one [ 106.159999][ T7277] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 131.487203][ T7303] netlink: 72 bytes leftover after parsing attributes in process `syz.1.407'. [ 131.667573][ T7315] netlink: 32 bytes leftover after parsing attributes in process `syz.4.413'. [ 131.675584][ T7318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.412'. [ 131.813693][ T7322] netlink: 28 bytes leftover after parsing attributes in process `syz.1.414'. [ 131.957798][ T7336] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 132.080815][ T7343] : entered promiscuous mode [ 132.103120][ T7345] netlink: 'syz.1.420': attribute type 10 has an invalid length. [ 132.111470][ T7345] netlink: 40 bytes leftover after parsing attributes in process `syz.1.420'. [ 132.130961][ T7347] netlink: 12 bytes leftover after parsing attributes in process `syz.4.423'. [ 132.162822][ T7349] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.181872][ T7345] team0: Port device geneve0 added [ 132.491873][ T7360] unknown channel width for channel at 909000KHz? [ 132.514318][ T7360] unknown channel width for channel at 909000KHz? [ 132.858676][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.865244][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.020293][ T7384] netlink: 40 bytes leftover after parsing attributes in process `syz.0.435'. [ 133.065556][ T7386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.436'. [ 133.295317][ T7395] netlink: 4 bytes leftover after parsing attributes in process `syz.1.440'. [ 133.562908][ T7412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.447'. [ 133.595628][ T7414] dvmrp0: entered allmulticast mode [ 133.717074][ T7423] netlink: 'syz.2.450': attribute type 3 has an invalid length. [ 133.727870][ T7423] netlink: 'syz.2.450': attribute type 1 has an invalid length. [ 133.729225][ T7424] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 133.874821][ T7430] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 134.114077][ T7448] netlink: 'syz.1.460': attribute type 1 has an invalid length. [ 134.533229][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 134.567071][ T7470] netlink: 'syz.2.467': attribute type 14 has an invalid length. [ 134.574944][ T7470] netlink: 'syz.2.467': attribute type 13 has an invalid length. [ 134.739513][ T7482] xt_CT: You must specify a L4 protocol and not use inversions on it [ 135.617305][ T7538] IPv6: NLM_F_CREATE should be specified when creating new route [ 135.628648][ T7542] macvlan1: entered promiscuous mode [ 135.637071][ T7542] macvlan1: left promiscuous mode [ 135.710590][ T7552] netem: change failed [ 135.808139][ T7554] bond2: entered promiscuous mode [ 135.814590][ T7554] bond2: entered allmulticast mode [ 135.820485][ T7554] 8021q: adding VLAN 0 to HW filter on device bond2 [ 136.434666][ T7603] netlink: 'syz.0.511': attribute type 4 has an invalid length. [ 136.819642][ T7614] __nla_validate_parse: 21 callbacks suppressed [ 136.819659][ T7614] netlink: 24 bytes leftover after parsing attributes in process `syz.0.513'. [ 137.121381][ T7636] netlink: 'syz.1.519': attribute type 1 has an invalid length. [ 137.197847][ T7642] netlink: 168 bytes leftover after parsing attributes in process `syz.1.520'. [ 137.383715][ T7653] netlink: 24 bytes leftover after parsing attributes in process `syz.1.524'. [ 137.445075][ T7655] netlink: 20 bytes leftover after parsing attributes in process `syz.4.526'. [ 137.458990][ T7655] netlink: 20 bytes leftover after parsing attributes in process `syz.4.526'. [ 137.547560][ T7661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.528'. [ 137.580908][ T7661] erspan0: entered promiscuous mode [ 137.587358][ T7661] macsec1: entered promiscuous mode [ 137.596442][ T7667] netlink: 96 bytes leftover after parsing attributes in process `syz.4.530'. [ 137.607765][ T7668] netlink: 96 bytes leftover after parsing attributes in process `syz.4.530'. [ 137.930365][ T7683] netlink: 'syz.0.534': attribute type 4 has an invalid length. [ 137.981530][ T7688] netlink: 4 bytes leftover after parsing attributes in process `syz.1.531'. [ 138.216505][ T7698] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.259237][ T7701] netlink: 16 bytes leftover after parsing attributes in process `syz.2.539'. [ 138.600373][ T7727] veth0: entered promiscuous mode [ 138.649228][ T7727] veth0: left promiscuous mode [ 138.727302][ T7733] netlink: 'syz.1.548': attribute type 12 has an invalid length. [ 138.817810][ T7736] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.827069][ T7736] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.836241][ T7736] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.845030][ T7736] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.886959][ T7736] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.896741][ T7736] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.906658][ T7736] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.916178][ T7736] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.108737][ T7760] tipc: Enabling of bearer rejected, failed to enable media [ 139.180765][ T7768] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.372043][ T7777] netlink: 'syz.1.563': attribute type 4 has an invalid length. [ 139.592521][ T7792] Driver unsupported XDP return value 0 on prog (id 132) dev N/A, expect packet loss! [ 139.855977][ T7811] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 140.201351][ T7834] tls_set_device_offload_rx: netdev not found [ 140.450511][ T7851] netlink: 'syz.2.589': attribute type 29 has an invalid length. [ 141.002080][ T7887] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 141.053115][ T7887] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 141.137687][ T7890] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 141.761164][ T7929] 8021q: adding VLAN 0 to HW filter on device bond1 [ 141.788739][ T7928] 8021q: adding VLAN 0 to HW filter on device bond2 [ 141.991364][ T7937] can: request_module (can-proto-0) failed. [ 142.258621][ T7957] xt_socket: unknown flags 0x3c [ 142.267672][ T7957] __nla_validate_parse: 11 callbacks suppressed [ 142.267690][ T7957] netlink: 830 bytes leftover after parsing attributes in process `syz.4.621'. [ 142.306060][ T7958] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 142.342150][ T7951] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 142.589479][ T7983] netlink: 'syz.4.627': attribute type 1 has an invalid length. [ 142.599669][ T7983] netlink: 224 bytes leftover after parsing attributes in process `syz.4.627'. [ 142.791200][ T7991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.630'. [ 143.135289][ T8016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.637'. [ 143.222875][ T8018] netlink: 'syz.1.638': attribute type 2 has an invalid length. [ 143.262421][ T8007] 8021q: VLANs not supported on vcan0 [ 143.532343][ T8032] netlink: 36 bytes leftover after parsing attributes in process `syz.2.641'. [ 143.557984][ T8033] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 143.573235][ T8032] openvswitch: netlink: Flow key attr not present in new flow. [ 143.628983][ T8033] netlink: 8 bytes leftover after parsing attributes in process `syz.4.642'. [ 143.638789][ T5887] lo speed is unknown, defaulting to 1000 [ 143.678368][ T8041] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 143.952327][ T8054] xt_HMARK: proto mask must be zero with L3 mode [ 144.004811][ T8057] netlink: 24 bytes leftover after parsing attributes in process `syz.1.648'. [ 144.078131][ T8061] xt_hashlimit: size too large, truncated to 1048576 [ 144.092853][ T8061] xt_hashlimit: size too large, truncated to 1048576 [ 144.191520][ T8070] netlink: 256 bytes leftover after parsing attributes in process `syz.0.652'. [ 144.215189][ T8070] unsupported nlmsg_type 40 [ 144.521709][ T8088] x_tables: duplicate underflow at hook 1 [ 144.545229][ T8093] netlink: 64 bytes leftover after parsing attributes in process `syz.1.657'. [ 144.753240][ T8106] x_tables: unsorted entry at hook 3 [ 144.777918][ T8106] netlink: 'syz.1.662': attribute type 13 has an invalid length. [ 144.794243][ T8106] netlink: 40 bytes leftover after parsing attributes in process `syz.1.662'. [ 144.991043][ T8110] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.007634][ T8110] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.025120][ T8110] bond0 (unregistering): Released all slaves [ 145.059947][ T8106] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len [ 145.496954][ T8153] bond3: entered promiscuous mode [ 145.502280][ T8153] bond3: entered allmulticast mode [ 145.509760][ T8153] 8021q: adding VLAN 0 to HW filter on device bond3 [ 145.761441][ T8171] ieee802154 phy1 wpan1: encryption failed: -22 [ 145.784849][ T8177] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.009350][ T8185] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.119551][ T8185] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.220882][ T8185] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.305052][ T8185] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.329677][ T8201] xt_policy: too many policy elements [ 146.330076][ T8202] xt_policy: too many policy elements [ 146.418164][ T8185] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.476846][ T8185] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.544492][ T8185] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.618020][ T8185] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.849337][ T8217] syz_tun: entered allmulticast mode [ 146.865990][ T8220] vxcan0: entered promiscuous mode [ 147.108858][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 147.118545][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 147.138560][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 147.147989][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 147.156455][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 147.186219][ T8216] syz_tun: left allmulticast mode [ 147.262478][ T8232] lo speed is unknown, defaulting to 1000 [ 147.334895][ T8240] __nla_validate_parse: 16 callbacks suppressed [ 147.334912][ T8240] netlink: 12 bytes leftover after parsing attributes in process `syz.4.706'. [ 147.354572][ T8241] netlink: 12 bytes leftover after parsing attributes in process `syz.4.706'. [ 147.366507][ T8241] netlink: 72 bytes leftover after parsing attributes in process `syz.4.706'. [ 147.435291][ T8240] IPVS: ip_vs_add_dest(): server weight less than zero [ 147.456121][ T5878] IPVS: starting estimator thread 0... [ 147.487866][ T8240] netlink: 4 bytes leftover after parsing attributes in process `syz.4.706'. [ 147.546122][ T8245] IPVS: using max 30 ests per chain, 72000 per kthread [ 147.628216][ T8254] openvswitch: netlink: VXLAN extension 173 out of range max 1 [ 147.642120][ T8257] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.703430][ T30] audit: type=1804 audit(1748584537.608:2): pid=8259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.709" name="/newroot/153/cgroup.controllers" dev="tmpfs" ino=801 res=1 errno=0 [ 147.705367][ T8259] netlink: 'syz.2.709': attribute type 32 has an invalid length. [ 147.749287][ T30] audit: type=1800 audit(1748584537.618:3): pid=8259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.709" name="cgroup.controllers" dev="tmpfs" ino=801 res=0 errno=0 [ 147.806554][ T8257] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.867758][ T8232] chnl_net:caif_netlink_parms(): no params data found [ 147.891641][ T8257] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.996690][ T8257] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.037744][ T8276] netlink: 56 bytes leftover after parsing attributes in process `syz.0.714'. [ 148.093962][ T8232] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.101624][ T8232] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.109939][ T8232] bridge_slave_0: entered allmulticast mode [ 148.120665][ T8232] bridge_slave_0: entered promiscuous mode [ 148.131575][ T8232] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.141335][ T8232] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.149629][ T8232] bridge_slave_1: entered allmulticast mode [ 148.158331][ T8232] bridge_slave_1: entered promiscuous mode [ 148.196894][ T8279] netlink: 'syz.0.717': attribute type 12 has an invalid length. [ 148.216497][ T8232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.237659][ T8232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.340647][ T8281] xt_time: unknown flags 0x4 [ 148.368655][ T8232] team0: Port device team_slave_0 added [ 148.389989][ T8232] team0: Port device team_slave_1 added [ 148.477750][ T8232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.484994][ T8232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.516156][ T8232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.752068][ T8290] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.761992][ T8290] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.864698][ T8308] xt_CT: You must specify a L4 protocol and not use inversions on it [ 149.018729][ T8318] netlink: 20 bytes leftover after parsing attributes in process `syz.0.724'. [ 149.153055][ T8290] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.162354][ T8290] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.183246][ T8290] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.198015][ T8290] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.254012][ T5838] Bluetooth: hci5: command tx timeout [ 149.344685][ T8290] vxcan0: left promiscuous mode [ 149.360229][ T8232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.368713][ T8232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.396265][ T8232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.407715][ T5881] lo speed is unknown, defaulting to 1000 [ 149.414308][ T5881] syz2: Port: 1 Link DOWN [ 149.515763][ T8232] hsr_slave_0: entered promiscuous mode [ 149.522288][ T8232] hsr_slave_1: entered promiscuous mode [ 149.543648][ T8232] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 149.551348][ T8232] Cannot create hsr debugfs directory [ 149.562920][ T8322] netlink: 'syz.1.725': attribute type 4 has an invalid length. [ 149.698614][ T8324] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 149.771404][ T8324] bond4: entered promiscuous mode [ 149.797794][ T8324] bond4: entered allmulticast mode [ 149.808257][ T8324] 8021q: adding VLAN 0 to HW filter on device bond4 [ 149.845640][ T8334] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 149.864959][ T8334] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 149.874787][ T8334] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 149.885164][ T8334] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 149.890545][ T8337] netlink: 10 bytes leftover after parsing attributes in process `syz.4.729'. [ 149.895158][ T8334] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 149.895537][ T8334] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 149.895909][ T8334] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 149.896271][ T8334] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.089750][ T8257] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.117737][ T8347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.731'. [ 150.154342][ T8257] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.218766][ T8257] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.231946][ T8354] netlink: 24 bytes leftover after parsing attributes in process `syz.1.733'. [ 150.287781][ T8356] netlink: 12 bytes leftover after parsing attributes in process `syz.0.734'. [ 150.312823][ T8356] tc_dump_action: action bad kind [ 150.437359][ T8257] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.488440][ T8366] syz.0.736 (8366) used greatest stack depth: 19496 bytes left [ 150.497487][ T8232] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 150.527969][ T8232] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 150.561309][ T8232] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 150.588458][ T8232] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 150.751833][ T8232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.794918][ T8232] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.837790][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.845010][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.856135][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.863519][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.965659][ T8315] IPVS: starting estimator thread 0... [ 150.985087][ T8378] netlink: 'syz.2.741': attribute type 10 has an invalid length. [ 151.047671][ T8384] vlan2: entered promiscuous mode [ 151.061339][ T8384] bond0: entered promiscuous mode [ 151.066527][ T8383] IPVS: using max 30 ests per chain, 72000 per kthread [ 151.089405][ T8384] bond_slave_0: entered promiscuous mode [ 151.107212][ T8384] bond_slave_1: entered promiscuous mode [ 151.157678][ T8378] team0: Device veth0_macvtap failed to register rx_handler [ 151.335318][ T5838] Bluetooth: hci5: command tx timeout [ 151.433688][ T8232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.548231][ T8408] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.556996][ T8408] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.565889][ T8408] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.575592][ T8408] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.605918][ T8408] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.614950][ T8408] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.624750][ T8408] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.633786][ T8408] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.748101][ T8412] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.216983][ T8232] veth0_vlan: entered promiscuous mode [ 152.246422][ T8232] veth1_vlan: entered promiscuous mode [ 152.359521][ T8232] veth0_macvtap: entered promiscuous mode [ 152.387880][ T8232] veth1_macvtap: entered promiscuous mode [ 152.390749][ T8449] netlink: 'syz.4.759': attribute type 10 has an invalid length. [ 152.418340][ T8449] veth0_vlan: entered allmulticast mode [ 152.425968][ T8449] veth0_vlan: left promiscuous mode [ 152.439970][ T8449] veth0_vlan: entered promiscuous mode [ 152.472141][ T8449] team0: Device veth0_vlan failed to register rx_handler [ 152.577682][ T8232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.641312][ T8232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.654296][ T8467] __nla_validate_parse: 6 callbacks suppressed [ 152.654315][ T8467] netlink: 20 bytes leftover after parsing attributes in process `syz.4.764'. [ 152.725988][ T8232] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.756124][ T8232] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.765439][ T8232] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.774724][ T8232] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.984385][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.010429][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.066219][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.088438][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.236273][ T8487] netlink: 12 bytes leftover after parsing attributes in process `syz.2.769'. [ 153.337211][ T8493] netlink: 4 bytes leftover after parsing attributes in process `syz.5.695'. [ 153.413943][ T5838] Bluetooth: hci5: command tx timeout [ 153.477981][ T8499] xt_policy: output policy not valid in PREROUTING and INPUT [ 153.665963][ T8505] syz.2.773 (8505) used greatest stack depth: 17992 bytes left [ 153.684376][ T8510] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.712573][ T8512] netlink: 'syz.5.776': attribute type 39 has an invalid length. [ 153.781078][ T8519] netlink: 'syz.2.777': attribute type 10 has an invalid length. [ 153.790002][ T8519] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 154.315003][ T8547] openvswitch: netlink: Unknown key attributes 2 [ 154.425739][ T8550] netlink: 236 bytes leftover after parsing attributes in process `syz.4.785'. [ 154.454571][ T8552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.786'. [ 154.468939][ T8552] netlink: 224 bytes leftover after parsing attributes in process `syz.2.786'. [ 154.487679][ T8552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.786'. [ 154.958303][ T8582] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 154.966194][ T8582] IPv6: NLM_F_CREATE should be set when creating new route [ 155.164174][ T8592] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 155.339710][ T8600] netlink: 20 bytes leftover after parsing attributes in process `syz.1.802'. [ 155.493350][ T5838] Bluetooth: hci5: command tx timeout [ 155.859020][ T8625] vlan2: entered promiscuous mode [ 155.910011][ T8625] bridge0: entered promiscuous mode [ 156.833235][ T8656] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.885312][ T8673] netlink: 20 bytes leftover after parsing attributes in process `syz.4.826'. [ 157.139571][ T8656] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.154301][ T8686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.832'. [ 157.167041][ T8678] batman_adv: batadv0: Adding interface: dummy0 [ 157.174033][ T8678] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.202315][ T8678] batman_adv: batadv0: Interface activated: dummy0 [ 157.301088][ T8656] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.334076][ T8694] netlink: 'syz.5.833': attribute type 4 has an invalid length. [ 157.469802][ T8656] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.714206][ T8656] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.792730][ T8656] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.835877][ T8656] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.871517][ T8656] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.021286][ T8739] x_tables: duplicate entry at hook 1 [ 158.080120][ T8740] netlink: 'syz.0.846': attribute type 21 has an invalid length. [ 158.093577][ T8740] netlink: 152 bytes leftover after parsing attributes in process `syz.0.846'. [ 158.364166][ T8760] netlink: 20 bytes leftover after parsing attributes in process `syz.5.852'. [ 158.632325][ T8778] netlink: 28 bytes leftover after parsing attributes in process `syz.0.858'. [ 158.692080][ T8777] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.746367][ T8778] netlink: 'syz.0.858': attribute type 10 has an invalid length. [ 158.780423][ T8778] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.789982][ T8778] team0: entered promiscuous mode [ 158.796068][ T8778] team_slave_0: entered promiscuous mode [ 158.802946][ T8778] team_slave_1: entered promiscuous mode [ 158.814105][ T8778] bond0: (slave team0): Enslaving as an active interface with an up link [ 158.842157][ T8777] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.940794][ T8777] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.074677][ T8777] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.103160][ T8793] netlink: 'syz.2.863': attribute type 11 has an invalid length. [ 159.127388][ T8793] netlink: 224 bytes leftover after parsing attributes in process `syz.2.863'. [ 159.137736][ T8790] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 159.160994][ T8790] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 159.179119][ T8794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.861'. [ 159.222635][ T8793] lo speed is unknown, defaulting to 1000 [ 159.296411][ T8777] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.377377][ T8777] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.431590][ T8777] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.471795][ T8777] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.496763][ T8809] netlink: 12 bytes leftover after parsing attributes in process `syz.4.864'. [ 159.554464][ T8808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.867'. [ 159.583703][ T8808] netlink: 'syz.1.867': attribute type 5 has an invalid length. [ 159.618845][ T8808] netlink: 20 bytes leftover after parsing attributes in process `syz.1.867'. [ 159.762460][ T8808] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 159.793142][ T8808] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 159.806174][ T8808] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 159.825850][ T8808] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 159.840404][ T8808] geneve2: entered promiscuous mode [ 159.847258][ T8808] geneve2: entered allmulticast mode [ 159.871591][ T8821] ip6gre1: entered allmulticast mode [ 160.216927][ T8844] netlink: 'syz.2.878': attribute type 2 has an invalid length. [ 160.277593][ T8842] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 160.290611][ T8851] netlink: 72 bytes leftover after parsing attributes in process `syz.5.880'. [ 160.667545][ T8874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.888'. [ 161.059142][ T8886] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.068071][ T8886] bridge0: port 1() entered disabled state [ 161.227779][ T8886] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.250503][ T8886] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.381531][ T8886] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.390390][ T8886] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.400790][ T8886] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.411297][ T8886] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.462684][ T8886] gretap1: left promiscuous mode [ 161.484535][ T8886] bond2: left promiscuous mode [ 161.491472][ T8886] macsec1: left promiscuous mode [ 161.503024][ T8886] bond4: left promiscuous mode [ 161.510659][ T8886] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 256 - 0 [ 161.521008][ T8886] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 256 - 0 [ 161.529933][ T8886] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 256 - 0 [ 161.539052][ T8886] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 256 - 0 [ 161.549504][ T8886] geneve2: left promiscuous mode [ 161.781168][ T8891] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.792593][ T8891] bond_slave_0: left promiscuous mode [ 161.800133][ T8891] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.812169][ T8891] bond_slave_1: left promiscuous mode [ 161.820790][ T8891] bond0 (unregistering): (slave team0): Releasing backup interface [ 161.833511][ T8891] team0: left promiscuous mode [ 161.838441][ T8891] team_slave_0: left promiscuous mode [ 161.844836][ T8891] team_slave_1: left promiscuous mode [ 161.851934][ T8891] bond0 (unregistering): Released all slaves [ 162.250112][ T8939] netlink: 'syz.2.908': attribute type 13 has an invalid length. [ 162.483004][ T8939] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.491125][ T8939] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.674085][ T8939] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.690990][ T8939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.706265][ T8939] tipc: Resetting bearer [ 162.857244][ T8939] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.867479][ T8939] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.877633][ T8939] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.888633][ T8939] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.160807][ T8976] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 163.209890][ T8976] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 163.353834][ T8982] __nla_validate_parse: 6 callbacks suppressed [ 163.353851][ T8982] netlink: 244 bytes leftover after parsing attributes in process `syz.2.922'. [ 163.855500][ T9015] netlink: 60 bytes leftover after parsing attributes in process `syz.0.933'. [ 163.937837][ T9017] netlink: 4 bytes leftover after parsing attributes in process `syz.4.934'. [ 164.112262][ T9028] netlink: 'syz.2.938': attribute type 1 has an invalid length. [ 164.160640][ T9034] netlink: 'syz.5.940': attribute type 10 has an invalid length. [ 164.172578][ T9034] netlink: 40 bytes leftover after parsing attributes in process `syz.5.940'. [ 164.266062][ T9017] team0 (unregistering): Port device team_slave_0 removed [ 164.278052][ T9017] team0 (unregistering): Port device team_slave_1 removed [ 164.307939][ T9034] dummy0: entered promiscuous mode [ 164.317804][ T9034] bridge0: port 3(dummy0) entered blocking state [ 164.329187][ T9034] bridge0: port 3(dummy0) entered disabled state [ 164.351378][ T9034] dummy0: entered allmulticast mode [ 164.386314][ T9034] bridge0: port 3(dummy0) entered blocking state [ 164.393041][ T9034] bridge0: port 3(dummy0) entered forwarding state [ 164.447031][ T9042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.942'. [ 164.685323][ T9055] xt_CT: You must specify a L4 protocol and not use inversions on it [ 164.740523][ T9059] netlink: 'syz.0.950': attribute type 11 has an invalid length. [ 164.761073][ T9059] netlink: 224 bytes leftover after parsing attributes in process `syz.0.950'. [ 164.796866][ T9059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.950'. [ 164.807989][ T9064] netlink: 12 bytes leftover after parsing attributes in process `syz.0.950'. [ 164.839484][ T9067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.952'. [ 165.053304][ T9064] netlink: 48 bytes leftover after parsing attributes in process `syz.0.950'. [ 165.073649][ T9071] batadv_slave_1: entered promiscuous mode [ 165.619134][ T9107] netlink: 'syz.5.964': attribute type 1 has an invalid length. [ 165.758953][ T9107] 8021q: adding VLAN 0 to HW filter on device bond1 [ 165.770986][ T9068] batadv_slave_1: left promiscuous mode [ 165.842545][ T9114] veth3: entered promiscuous mode [ 165.868051][ T9114] bond1: (slave veth3): Enslaving as an active interface with a down link [ 165.900100][ T9119] ip6gretap1: entered allmulticast mode [ 165.938585][ T9119] bond1: (slave ip6gretap1): making interface the new active one [ 165.984269][ T9119] ip6gretap1: entered promiscuous mode [ 166.000638][ T9119] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 166.316079][ T9155] x_tables: duplicate underflow at hook 3 [ 166.923260][ T9183] netlink: 'syz.4.988': attribute type 11 has an invalid length. [ 166.931317][ T9183] netlink: 'syz.4.988': attribute type 11 has an invalid length. [ 167.085478][ T9193] tipc: Enabled bearer , priority 10 [ 167.476981][ T9213] lo speed is unknown, defaulting to 1000 [ 167.540673][ T9219] netlink: 'syz.1.999': attribute type 10 has an invalid length. [ 167.572778][ T9219] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 167.636696][ T9222] bond0: entered promiscuous mode [ 167.642106][ T9222] bond_slave_0: entered promiscuous mode [ 167.648905][ T9222] bond_slave_1: entered promiscuous mode [ 168.203284][ T5881] tipc: Node number set to 2211992843 [ 168.388727][ T5881] IPVS: starting estimator thread 0... [ 168.483281][ T9264] IPVS: using max 27 ests per chain, 64800 per kthread [ 168.651164][ T9273] __nla_validate_parse: 18 callbacks suppressed [ 168.651182][ T9273] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1018'. [ 169.058410][ T9300] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 169.166571][ T9304] netlink: 'syz.1.1029': attribute type 1 has an invalid length. [ 169.176744][ T9304] netlink: 'syz.1.1029': attribute type 2 has an invalid length. [ 169.198181][ T9304] tunl0: entered promiscuous mode [ 169.204023][ T9304] netlink: 'syz.1.1029': attribute type 3 has an invalid length. [ 169.213968][ T9304] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1029'. [ 169.227594][ T9304] tunl0: left promiscuous mode [ 169.317213][ T9304] gretap1: left allmulticast mode [ 169.329849][ T9304] bond2: left allmulticast mode [ 169.337188][ T9304] bond4: left allmulticast mode [ 169.346964][ T9304] geneve2: left allmulticast mode [ 169.432525][ T9273] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 169.507648][ T9317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1033'. [ 169.721795][ T9331] netlink: 'syz.0.1036': attribute type 12 has an invalid length. [ 169.773845][ T9331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1036'. [ 169.849980][ T9336] netlink: 'syz.5.1037': attribute type 32 has an invalid length. [ 170.142412][ T9353] openvswitch: netlink: Message has 4 unknown bytes. [ 170.451603][ T9375] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1050'. [ 171.696473][ T9448] tipc: Enabling of bearer rejected, failed to enable media [ 171.860005][ T9451] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 171.933421][ T9457] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1077'. [ 172.075077][ T9461] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1080'. [ 172.103509][ T9463] netlink: 'syz.4.1079': attribute type 1 has an invalid length. [ 172.143708][ T9463] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1079'. [ 172.257569][ T9474] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1083'. [ 172.317195][ T9474] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 172.431402][ T9480] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1086'. [ 173.009465][ T9516] ieee802154 phy1 wpan1: encryption failed: -22 [ 173.051021][ T9518] ieee802154 phy1 wpan1: encryption failed: -22 [ 173.082023][ T9516] openvswitch: netlink: Flow key attr not present in new flow. [ 173.104337][ T9518] openvswitch: netlink: Flow key attr not present in new flow. [ 173.149470][ T9516] netlink: 'syz.4.1097': attribute type 10 has an invalid length. [ 173.410339][ T9538] bridge0: port 3(batadv1) entered blocking state [ 173.420235][ T9538] bridge0: port 3(batadv1) entered disabled state [ 173.427703][ T9538] batadv1: entered allmulticast mode [ 173.440339][ T9538] batadv1: entered promiscuous mode [ 173.911876][ T61] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 173.923563][ T61] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 173.975091][ T9571] __nla_validate_parse: 2 callbacks suppressed [ 173.975109][ T9571] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1115'. [ 174.073383][ T9578] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1118'. [ 174.317835][ T9598] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5 [ 174.553901][ T9596] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 174.706124][ T9611] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1126'. [ 175.081241][ T9635] netlink: 'syz.4.1132': attribute type 11 has an invalid length. [ 175.472782][ T9662] bridge0: port 4(gretap0) entered blocking state [ 175.480762][ T9645] can: request_module (can-proto-4) failed. [ 175.500394][ T9661] netlink: 'syz.4.1140': attribute type 1 has an invalid length. [ 175.509818][ T9662] bridge0: port 4(gretap0) entered disabled state [ 175.529987][ T9662] gretap0: entered allmulticast mode [ 175.547230][ T9665] netlink: 'syz.2.1139': attribute type 10 has an invalid length. [ 175.573893][ T9662] gretap0: entered promiscuous mode [ 175.607442][ T9665] veth1_macvtap: left promiscuous mode [ 175.641894][ T9665] team0: Device veth1_macvtap failed to register rx_handler [ 175.706441][ T9670] x_tables: duplicate underflow at hook 1 [ 175.792468][ T9675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1143'. [ 175.855360][ T9676] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1143'. [ 175.981820][ T9686] pim6reg: entered allmulticast mode [ 176.122159][ T9692] netlink: 15 bytes leftover after parsing attributes in process `syz.1.1149'. [ 176.144470][ T9692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1149'. [ 176.217843][ T9702] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1151'. [ 176.428747][ T9716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1155'. [ 176.479176][ T9718] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1156'. [ 176.914762][ T9751] netdevsim netdevsim0 : renamed from netdevsim0 (while UP) [ 176.963268][ T5900] IPVS: starting estimator thread 0... [ 177.063218][ T9755] IPVS: using max 28 ests per chain, 67200 per kthread [ 177.192545][ T9767] x_tables: ip6_tables: HL target: only valid in mangle table, not blkio.bfq.sectors [ 177.260889][ T1093] ip6gretap1: left promiscuous mode [ 177.274021][ T9771] team0: No ports can be present during mode change [ 177.733149][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 177.895200][ T9799] C: renamed from lo [ 177.904594][ T9799] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 178.085429][ T9811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.122304][ T9811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.220880][ T9817] dvmrp1: entered allmulticast mode [ 178.424899][ T9835] netlink: 'syz.2.1190': attribute type 21 has an invalid length. [ 178.773091][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 178.848742][ T9851] 0: renamed from hsr_slave_1 (while UP) [ 178.871268][ T9851] 0: entered allmulticast mode [ 178.879799][ T9851] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 179.272105][ T9876] __nla_validate_parse: 8 callbacks suppressed [ 179.272123][ T9876] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1204'. [ 179.438857][ T9881] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1205'. [ 179.478198][ T9881] Cannot find add_set index 4 as target [ 179.592856][ T9890] netlink: 'syz.0.1207': attribute type 4 has an invalid length. [ 179.606963][ T9890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1207'. [ 179.759288][ T9897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1209'. [ 179.771459][ T9900] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1208'. [ 179.787597][ T9897] xt_socket: unknown flags 0x3c [ 179.813370][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 179.975065][ T9908] Cannot find add_set index 4 as target [ 180.338189][ T9926] tipc: Resetting bearer [ 180.350202][ T9924] netlink: 312 bytes leftover after parsing attributes in process `syz.5.1220'. [ 180.502839][ T9934] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1223'. [ 180.521781][ T9938] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1224'. [ 180.585157][ T9934] Cannot find add_set index 0 as target [ 180.786769][ T9958] netlink: 'syz.0.1231': attribute type 4 has an invalid length. [ 180.796749][ T9958] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1231'. [ 180.815420][ T9958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1231'. [ 180.855103][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 180.896525][ T9960] veth5: entered allmulticast mode [ 180.918818][ T9963] TCP: TCP_TX_DELAY enabled [ 181.140209][ T9971] x_tables: duplicate underflow at hook 3 [ 181.192077][ T9976] netlink: 'syz.4.1239': attribute type 6 has an invalid length. [ 181.314862][ T9981] netlink: 'syz.5.1240': attribute type 1 has an invalid length. [ 181.660768][ T9995] gretap0: left allmulticast mode [ 181.673273][ T9995] gretap0: left promiscuous mode [ 181.681890][ T9995] bridge0: port 4(gretap0) entered disabled state [ 181.701245][ T9995] batadv1: left allmulticast mode [ 181.732663][ T9995] batadv1: left promiscuous mode [ 181.740963][ T9995] bridge0: port 3(batadv1) entered disabled state [ 181.759408][ T9995] bridge_slave_1: left allmulticast mode [ 181.767730][ T9995] bridge_slave_1: left promiscuous mode [ 181.774948][ T9995] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.785020][ T9995] : left allmulticast mode [ 181.790076][ T9995] : left promiscuous mode [ 181.796317][ T9995] bridge0: port 1() entered disabled state [ 181.889040][ T9995] bond0: (slave bridge0): Releasing backup interface [ 181.893095][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 182.100026][T10004] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 182.141512][T10004] bond3: entered promiscuous mode [ 182.147469][T10004] bond3: entered allmulticast mode [ 182.165094][T10004] 8021q: adding VLAN 0 to HW filter on device bond3 [ 182.174555][T10007] tipc: Enabled bearer , priority 0 [ 182.188799][T10010] syzkaller1: entered promiscuous mode [ 182.203572][T10010] syzkaller1: entered allmulticast mode [ 182.301746][T10008] syzkaller0: entered promiscuous mode [ 182.310099][T10008] syzkaller0: entered allmulticast mode [ 182.317433][T10008] tipc: Resetting bearer [ 182.336508][ T9998] tipc: Resetting bearer [ 182.933126][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 183.983243][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 184.391444][ T9998] tipc: Disabling bearer [ 184.408790][T10024] hsr_slave_0: left promiscuous mode [ 184.416808][T10024] hsr_slave_1: left promiscuous mode [ 184.678788][T10039] __nla_validate_parse: 8 callbacks suppressed [ 184.678809][T10039] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1256'. [ 184.726759][T10039] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 184.785256][T10039] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 184.833597][T10052] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1260'. [ 184.872013][T10043] netlink: 'syz.1.1258': attribute type 1 has an invalid length. [ 184.891413][T10043] netlink: 'syz.1.1258': attribute type 1 has an invalid length. [ 185.013102][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 185.040406][T10060] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1263'. [ 185.062935][T10065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1261'. [ 185.073953][T10065] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1261'. [ 185.090863][T10065] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1261'. [ 185.210581][T10069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.231117][T10069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.280664][T10075] netlink: 'syz.5.1267': attribute type 13 has an invalid length. [ 185.292418][T10075] netlink: 'syz.5.1267': attribute type 17 has an invalid length. [ 185.393295][T10075] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 185.531305][T10083] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1269'. [ 185.561314][T10083] netlink: 'syz.4.1269': attribute type 1 has an invalid length. [ 185.572389][T10083] netlink: 'syz.4.1269': attribute type 2 has an invalid length. [ 185.591280][T10083] netlink: 'syz.4.1269': attribute type 3 has an invalid length. [ 185.601459][T10083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1269'. [ 185.671491][T10093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1272'. [ 185.714521][T10093] xt_cluster: node mask cannot exceed total number of nodes [ 185.958163][T10103] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1275'. [ 186.016044][T10103] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 186.053089][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 186.480357][T10135] sctp: [Deprecated]: syz.0.1284 (pid 10135) Use of int in maxseg socket option. [ 186.480357][T10135] Use struct sctp_assoc_value instead [ 186.893478][T10167] validate_nla: 1 callbacks suppressed [ 186.893499][T10167] netlink: 'syz.5.1293': attribute type 19 has an invalid length. [ 186.951473][T10175] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 187.008915][T10167] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 187.093057][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 187.337517][T10191] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 187.375113][T10193] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 187.387936][T10194] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 187.751194][T10222] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 187.854284][T10229] netlink: 'syz.5.1311': attribute type 3 has an invalid length. [ 187.875755][T10229] netlink: 'syz.5.1311': attribute type 2 has an invalid length. [ 187.965614][T10233] netlink: 'syz.1.1315': attribute type 3 has an invalid length. [ 188.046176][T10240] netlink: 'syz.4.1313': attribute type 3 has an invalid length. [ 188.133480][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 188.204505][T10243] sctp: [Deprecated]: syz.0.1319 (pid 10243) Use of struct sctp_assoc_value in delayed_ack socket option. [ 188.204505][T10243] Use struct sctp_sack_info instead [ 188.222806][T10249] netlink: 'syz.2.1320': attribute type 11 has an invalid length. [ 188.530785][T10272] netlink: 'syz.4.1328': attribute type 13 has an invalid length. [ 189.173399][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 189.227834][T10299] syzkaller0: entered promiscuous mode [ 189.238595][T10299] syzkaller0: entered allmulticast mode [ 189.351597][T10321] netlink: 'syz.5.1349': attribute type 3 has an invalid length. [ 189.764750][T10329] can: request_module (can-proto-0) failed. [ 190.223290][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 191.263226][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 192.293077][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 192.354724][T10366] __nla_validate_parse: 27 callbacks suppressed [ 192.354741][T10366] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1360'. [ 192.436172][T10363] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1360'. [ 192.469641][T10362] xt_CT: No such helper "snmp_trap" [ 192.476590][T10372] sctp: [Deprecated]: syz.4.1364 (pid 10372) Use of int in max_burst socket option deprecated. [ 192.476590][T10372] Use struct sctp_assoc_value instead [ 192.502700][T10363] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1360'. [ 192.538633][T10369] syzkaller0: entered promiscuous mode [ 192.568027][T10369] syzkaller0: entered allmulticast mode [ 192.627616][T10363] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1360'. [ 192.724762][T10363] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1360'. [ 192.752908][T10377] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1366'. [ 192.846867][T10363] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1360'. [ 192.900947][T10388] netlink: 'syz.1.1368': attribute type 5 has an invalid length. [ 192.910997][T10388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1368'. [ 192.948055][T10363] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1360'. [ 193.059383][T10363] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1360'. [ 193.094252][T10399] netlink: 'syz.2.1372': attribute type 1 has an invalid length. [ 193.102682][T10399] netlink: 'syz.2.1372': attribute type 1 has an invalid length. [ 193.333238][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 193.423733][T10405] bond2: entered allmulticast mode [ 193.451267][T10405] 8021q: adding VLAN 0 to HW filter on device bond2 [ 193.724196][T10429] netlink: 'syz.4.1382': attribute type 1 has an invalid length. [ 193.800514][T10433] C speed is unknown, defaulting to 1000 [ 194.031199][T10454] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 194.057525][T10454] netlink: 'syz.1.1390': attribute type 13 has an invalid length. [ 194.067807][T10457] netlink: 'syz.2.1391': attribute type 1 has an invalid length. [ 194.069473][T10454] netlink: 'syz.1.1390': attribute type 17 has an invalid length. [ 194.144388][ T5838] Bluetooth: hci2: command tx timeout [ 194.194546][T10468] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.202150][T10467] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.220758][T10454] erspan0: left promiscuous mode [ 194.305484][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.345258][T10454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.369434][T10454] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.383056][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 194.409433][T10454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.427074][T10478] netlink: 'syz.2.1397': attribute type 2 has an invalid length. [ 194.487256][T10454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.499293][T10454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.526336][T10483] ip6t_srh: unknown srh invflags 5F00 [ 194.541872][T10454] veth1_vlan: left promiscuous mode [ 194.556451][T10454] veth0_vlan: left promiscuous mode [ 194.562904][T10454] veth0_vlan: entered promiscuous mode [ 194.571925][T10454] veth1_vlan: entered promiscuous mode [ 194.585164][T10454] veth1_macvtap: left promiscuous mode [ 194.593353][T10454] veth0_macvtap: left promiscuous mode [ 194.601122][T10454] veth0_macvtap: entered promiscuous mode [ 194.612073][T10454] veth1_macvtap: entered promiscuous mode [ 194.620488][T10454] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.630949][T10454] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.640087][T10454] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.648566][T10454] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.695829][T10485] netlink: 'syz.0.1399': attribute type 1 has an invalid length. [ 194.711595][T10454] 8021q: adding VLAN 0 to HW filter on device bond1 [ 194.728245][T10454] 8021q: adding VLAN 0 to HW filter on device bond2 [ 194.738599][T10454] 8021q: adding VLAN 0 to HW filter on device bond3 [ 194.750677][T10454] erspan0: entered promiscuous mode [ 194.764407][T10454] 8021q: adding VLAN 0 to HW filter on device bond4 [ 194.784479][T10454] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 194.793616][T10454] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 194.802017][T10454] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 194.811766][T10454] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 194.824738][T10454] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 194.837773][T10454] 8021q: adding VLAN 0 to HW filter on device bond5 [ 194.969125][T10485] bond0: entered promiscuous mode [ 195.014419][T10485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.082126][T10486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.117742][T10486] bond0: (slave wireguard0): The slave device specified does not support setting the MAC address [ 195.129283][T10486] bond0: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 195.149500][T10486] bond0: (slave wireguard0): making interface the new active one [ 195.158201][T10486] wireguard0: entered promiscuous mode [ 195.168544][T10504] netlink: 'syz.1.1400': attribute type 11 has an invalid length. [ 195.178073][T10486] bond0: (slave wireguard0): Enslaving as an active interface with an up link [ 195.570919][T10516] xt_l2tp: invalid flags combination: 4 [ 195.706878][T10523] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.896671][ T5900] hid-generic 0005:16BF:0006.0001: unknown main item tag 0x0 [ 195.916781][ T5900] hid-generic 0005:16BF:0006.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz1] on aa:aa:aa:aa:aa:aa [ 196.373353][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 196.375422][ T5844] Bluetooth: hci1: command 0x0401 tx timeout [ 196.381933][ T5840] Bluetooth: hci3: command 0x0406 tx timeout [ 198.386047][T10568] __nla_validate_parse: 12 callbacks suppressed [ 198.386065][T10568] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1422'. [ 198.416472][T10568] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1422'. [ 198.434786][T10569] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1423'. [ 198.597558][T10584] netlink: 'syz.0.1426': attribute type 1 has an invalid length. [ 198.688884][T10584] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 198.916251][T10604] netlink: 11 bytes leftover after parsing attributes in process `syz.5.1431'. [ 198.933438][T10609] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1433'. [ 198.979715][T10611] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1433'. [ 199.020501][T10620] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1436'. [ 199.043731][T10616] tipc: Enabled bearer , priority 0 [ 199.066603][T10616] syzkaller0: entered promiscuous mode [ 199.086007][T10616] syzkaller0: entered allmulticast mode [ 199.102780][T10610] xt_CT: No such helper "snmp_trap" [ 199.140027][T10616] tipc: Resetting bearer [ 199.183599][T10612] tipc: Resetting bearer [ 199.252744][T10612] tipc: Disabling bearer [ 199.449925][T10641] netlink: 'syz.0.1441': attribute type 12 has an invalid length. [ 199.532508][T10643] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1442'. [ 199.617175][T10649] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1445'. [ 199.656308][T10649] netlink: 'syz.5.1445': attribute type 1 has an invalid length. [ 199.681592][T10646] delete_channel: no stack [ 199.752537][T10661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.856685][T10666] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1449'. [ 200.077845][T10673] syzkaller0: entered promiscuous mode [ 200.084868][T10673] syzkaller0: entered allmulticast mode [ 202.230738][T10686] bridge0: entered allmulticast mode [ 202.509542][T10719] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 202.870837][T10745] syz_tun: entered allmulticast mode [ 202.954839][T10745] syz_tun: left allmulticast mode [ 203.136447][T10762] netlink: 'syz.0.1479': attribute type 1 has an invalid length. [ 203.322631][T10777] bridge8: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 203.361914][T10777] bridge9: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 203.407682][T10777] bridge10: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 203.463539][T10786] __nla_validate_parse: 77 callbacks suppressed [ 203.463558][T10786] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1484'. [ 203.481793][T10777] bridge11: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 203.564719][T10783] C speed is unknown, defaulting to 1000 [ 203.770660][T10798] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1486'. [ 203.772600][T10797] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1486'. [ 203.849022][T10802] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1489'. [ 203.860512][T10802] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 203.868922][T10802] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 204.031581][T10813] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1492'. [ 204.194224][T10816] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1493'. [ 204.390961][T10824] pimreg3: entered allmulticast mode [ 204.412505][T10829] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1498'. [ 204.587433][T10829] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1498'. [ 204.792022][T10829] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1498'. [ 205.006066][T10829] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1498'. [ 205.185517][ T5838] block nbd0: Receive control failed (result -32) [ 205.464445][T10875] xt_ecn: cannot match TCP bits for non-tcp packets [ 205.604691][T10878] 0: renamed from hsr_slave_1 (while UP) [ 205.657953][T10878] 0: entered allmulticast mode [ 205.676642][T10878] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 205.777191][T10892] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 205.795101][T10892] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 206.305472][T10924] veth0: entered promiscuous mode [ 206.475451][T10936] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 206.492638][T10936] netlink: 'syz.4.1528': attribute type 39 has an invalid length. [ 206.626951][T10940] netlink: 'syz.0.1529': attribute type 4 has an invalid length. [ 206.801226][T10954] xt_l2tp: wrong L2TP version: 5 [ 207.465822][T10991] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.510428][T10996] netlink: 'syz.4.1544': attribute type 10 has an invalid length. [ 207.541924][T10996] bridge0: entered promiscuous mode [ 207.578360][T10991] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.697589][T10996] bridge_slave_1: left allmulticast mode [ 207.707343][T10996] bridge_slave_1: left promiscuous mode [ 207.714591][T10996] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.726467][T10996] bridge_slave_0: left allmulticast mode [ 207.734106][T10996] bridge_slave_0: left promiscuous mode [ 207.740771][T10996] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.809464][T11005] Cannot find del_set index 4 as target [ 207.850623][T10991] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.870291][T11005] batadv0: entered allmulticast mode [ 207.999737][T10991] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.221262][T10991] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.346269][T10991] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.707181][T11039] __nla_validate_parse: 18 callbacks suppressed [ 208.707198][T11039] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1558'. [ 208.870950][T11048] xfrm1: entered allmulticast mode [ 209.353099][T11063] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1565'. [ 209.514583][T11073] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1569'. [ 209.838655][T11090] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1573'. [ 210.012315][T11096] IPv6: sit1: Disabled Multicast RS [ 210.020247][T11099] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1577'. [ 210.031694][T11096] sit1: entered allmulticast mode [ 210.259506][T11111] netlink: 'syz.2.1580': attribute type 11 has an invalid length. [ 210.289411][T11111] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1580'. [ 210.312459][T11117] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1580'. [ 210.393123][T11120] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1584'. [ 210.437033][T11126] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1584'. [ 210.514026][T11129] xt_limit: Overflow, try lower: 2147483649/128 [ 210.532122][T11129] netlink: 'syz.4.1587': attribute type 1 has an invalid length. [ 210.557583][T11129] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1587'. [ 210.697217][T11139] netlink: 'syz.2.1590': attribute type 1 has an invalid length. [ 211.199620][T11166] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 211.207489][T11166] IPv6: NLM_F_CREATE should be set when creating new route [ 211.215209][T11166] IPv6: NLM_F_CREATE should be set when creating new route [ 211.354747][T11174] netlink: 'syz.1.1599': attribute type 7 has an invalid length. [ 211.621126][T11189] set match dimension is over the limit! [ 212.220431][T11220] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 212.228364][T11220] IPv6: NLM_F_CREATE should be set when creating new route [ 212.236191][T11220] IPv6: NLM_F_CREATE should be set when creating new route [ 212.341818][T11229] netlink: 'syz.0.1618': attribute type 10 has an invalid length. [ 212.357924][T11229] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.368022][T11229] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.550246][T11240] netlink: 'syz.2.1622': attribute type 16 has an invalid length. [ 212.560134][T11240] netlink: 'syz.2.1622': attribute type 17 has an invalid length. [ 212.578907][T11240] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDw}z [ 212.741717][T11245] nbd: must specify an index to disconnect [ 213.019184][T11250] nbd: couldn't find a device at index 64 [ 213.150507][T11258] xt_bpf: check failed: parse error [ 213.481340][T11278] openvswitch: netlink: Actions may not be safe on all matching packets [ 213.627897][T11283] Unsupported ieee802154 address type: 0 [ 213.732437][T11286] netlink: 'syz.5.1640': attribute type 62 has an invalid length. [ 214.005678][T11307] __nla_validate_parse: 20 callbacks suppressed [ 214.005699][T11307] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1646'. [ 214.476883][T11328] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1652'. [ 214.686544][T11338] netlink: 'syz.0.1656': attribute type 1 has an invalid length. [ 214.707797][T11338] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1656'. [ 215.060740][T11360] netlink: zone id is out of range [ 215.078820][T11360] netlink: del zone limit has 4 unknown bytes [ 215.244951][T11368] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 215.282098][T11370] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1667'. [ 215.567923][T11386] x_tables: duplicate underflow at hook 3 [ 215.719357][T11395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1675'. [ 215.796422][T11394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1676'. [ 216.025509][T11408] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1680'. [ 216.042208][T11408] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1680'. [ 216.144638][T11410] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 216.171669][T11410] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1684'. [ 216.187555][T11414] xt_hashlimit: size too large, truncated to 1048576 [ 216.225123][T11418] veth1_to_batadv: invalid flags given to default FDB implementation [ 216.257901][T11419] C: renamed from lo (while UP) [ 216.282200][T11419] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 216.467395][T11426] tap0: tun_chr_ioctl cmd 1074025677 [ 216.503927][T11426] tap0: linktype set to 65534 [ 216.555778][T11429] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1687'. [ 216.663806][T11436] netlink: 'syz.0.1690': attribute type 11 has an invalid length. [ 216.855210][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 217.075807][T11459] xt_TCPMSS: Only works on TCP SYN packets [ 217.116545][T11461] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 217.139706][T11461] team0: Device ipvlan2 is already an upper device of the team interface [ 217.359689][T11482] bond0: entered promiscuous mode [ 217.370340][T11482] bond_slave_0: entered promiscuous mode [ 217.377376][T11482] bond_slave_1: entered promiscuous mode [ 217.390553][T11482] batadv0: entered promiscuous mode [ 217.398309][T11482] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.415918][T11482] Cannot create hsr debugfs directory [ 217.427874][T11482] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 217.441821][T11482] bond0: left promiscuous mode [ 217.452541][T11482] bond_slave_0: left promiscuous mode [ 217.459710][T11482] bond_slave_1: left promiscuous mode [ 217.469188][T11482] batadv0: left promiscuous mode [ 217.470366][T11486] xt_ecn: cannot match TCP bits for non-tcp packets [ 217.832286][T11507] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.844295][T11507] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.853843][T11507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.861785][T11507] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.242815][T11526] team_slave_0: entered promiscuous mode [ 218.248931][T11526] team_slave_1: entered promiscuous mode [ 218.271846][T11526] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 218.284976][T11526] team0: Device macvtap1 is already an upper device of the team interface [ 218.307260][T11526] team_slave_0: left promiscuous mode [ 218.313616][T11526] team_slave_1: left promiscuous mode [ 218.517191][T11544] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 219.046105][T11584] netlink: 'syz.0.1736': attribute type 1 has an invalid length. [ 219.096940][T11584] 8021q: adding VLAN 0 to HW filter on device bond5 [ 219.146266][T11591] bond5: (slave geneve2): making interface the new active one [ 219.156765][T11591] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 219.240673][T11597] ip6gre1: entered allmulticast mode [ 219.293962][T11591] veth9: entered promiscuous mode [ 219.304050][T11591] bond5: (slave veth9): Enslaving as an active interface with a down link [ 219.314078][T11601] dummy0: left allmulticast mode [ 219.319087][T11601] dummy0: left promiscuous mode [ 219.325751][T11601] bridge0: port 3(dummy0) entered disabled state [ 219.356276][T11584] vlan3: entered allmulticast mode [ 219.372096][T11584] bond5: entered allmulticast mode [ 219.391866][T11584] geneve2: entered allmulticast mode [ 219.401302][T11584] bond5: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 219.592536][T11613] __nla_validate_parse: 10 callbacks suppressed [ 219.592555][T11613] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1746'. [ 219.632148][T11618] netlink: 'syz.5.1748': attribute type 1 has an invalid length. [ 219.677930][T11618] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.707190][T11620] netlink: 'syz.0.1749': attribute type 3 has an invalid length. [ 219.726862][T11620] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1749'. [ 219.748728][T11620] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1749'. [ 219.761303][T11622] veth0: entered promiscuous mode [ 219.779357][T11621] veth0: left promiscuous mode [ 219.786621][T11625] netlink: 'syz.4.1750': attribute type 10 has an invalid length. [ 219.847064][T11625] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 219.933179][T11629] netlink: 'syz.2.1753': attribute type 26 has an invalid length. [ 220.117692][T11641] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1757'. [ 220.233540][T11645] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1760'. [ 220.270436][T11650] netlink: 'syz.2.1762': attribute type 1 has an invalid length. [ 220.300696][T11650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1762'. [ 220.470505][T11654] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1761'. [ 220.503447][T11654] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1761'. [ 220.536071][ T5838] Bluetooth: hci0: command tx timeout [ 220.568052][T11654] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 220.642601][ T13] syzkaller0: tun_net_xmit 76 [ 220.674601][ T8315] syzkaller0: tun_net_xmit 76 [ 220.687925][ T13] syzkaller0: tun_net_xmit 48 [ 220.715919][T11670] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 220.722737][T11670] syzkaller0: Linktype set failed because interface is up [ 220.760530][T11677] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1767'. [ 220.843490][ T8315] syzkaller0: tun_net_xmit 76 [ 220.864708][ T5900] syzkaller0: tun_net_xmit 76 [ 223.198891][T11704] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 223.582164][T11732] 8021q: VLANs not supported on lo [ 223.590395][T11732] 8021q: VLANs not supported on lo [ 223.596152][T11732] 8021q: VLANs not supported on lo [ 223.607078][T11732] 8021q: VLANs not supported on lo [ 223.626253][T11732] 8021q: VLANs not supported on lo [ 223.652680][T11732] 8021q: VLANs not supported on lo [ 223.667651][T11732] 8021q: VLANs not supported on lo [ 223.704512][T11732] 8021q: VLANs not supported on lo [ 223.710382][T11732] 8021q: VLANs not supported on lo [ 223.745997][T11732] 8021q: VLANs not supported on lo [ 223.771534][T11732] 8021q: VLANs not supported on lo [ 223.801509][T11750] netlink: 'syz.2.1786': attribute type 23 has an invalid length. [ 223.803852][T11732] 8021q: VLANs not supported on lo [ 223.865024][T11732] 8021q: VLANs not supported on lo [ 223.925988][T11732] 8021q: VLANs not supported on lo [ 223.932783][T11732] 8021q: VLANs not supported on lo [ 223.938579][T11732] 8021q: VLANs not supported on lo [ 223.944703][T11732] 8021q: VLANs not supported on lo [ 223.952598][T11732] 8021q: VLANs not supported on lo [ 223.981009][T11732] 8021q: VLANs not supported on lo [ 224.011033][T11732] 8021q: VLANs not supported on lo [ 224.043969][T11732] 8021q: VLANs not supported on lo [ 224.049412][T11732] 8021q: VLANs not supported on lo [ 224.066009][T11732] 8021q: VLANs not supported on lo [ 224.082356][T11732] 8021q: VLANs not supported on lo [ 224.089576][T11732] 8021q: VLANs not supported on lo [ 224.095204][T11732] 8021q: VLANs not supported on lo [ 224.101529][T11732] 8021q: VLANs not supported on lo [ 224.113430][T11732] 8021q: VLANs not supported on lo [ 224.124513][T11762] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 224.135673][T11732] 8021q: VLANs not supported on lo [ 224.141474][T11732] 8021q: VLANs not supported on lo [ 224.177679][T11765] xt_recent: Unsupported userspace flags (00000061) [ 224.193615][T11732] 8021q: VLANs not supported on lo [ 224.209973][T11732] 8021q: VLANs not supported on lo [ 224.243599][T11732] 8021q: VLANs not supported on lo [ 224.249734][T11732] 8021q: VLANs not supported on lo [ 224.287586][T11732] 8021q: VLANs not supported on lo [ 224.306721][T11732] 8021q: VLANs not supported on lo [ 224.312615][T11732] 8021q: VLANs not supported on lo [ 224.336167][T11770] Unknown options in mask 1f4 [ 224.357560][T11732] 8021q: VLANs not supported on lo [ 224.364547][T11732] 8021q: VLANs not supported on lo [ 224.592075][T11732] 8021q: VLANs not supported on lo [ 224.808988][T11791] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1796'. [ 225.169043][T11812] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1802'. [ 225.434794][T11832] bond6: entered allmulticast mode [ 225.442828][T11832] 8021q: adding VLAN 0 to HW filter on device bond6 [ 225.457395][T11837] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1806'. [ 225.811268][T11852] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1811'. [ 225.878045][T11856] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1813'. [ 225.912744][T11856] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 226.036418][T11866] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 226.086573][T11865] syz.1.1818 (11865) used obsolete PPPIOCDETACH ioctl [ 226.100071][T11865] tipc: New replicast peer: 255.255.255.255 [ 226.108095][T11865] tipc: Enabled bearer , priority 10 [ 226.196116][T11876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1822'. [ 226.408962][T11889] netlink: 71 bytes leftover after parsing attributes in process `syz.4.1826'. [ 226.473579][T11891] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1827'. [ 226.526108][T11891] netlink: zone id is out of range [ 226.556798][T11896] netlink: 'syz.1.1829': attribute type 29 has an invalid length. [ 226.577574][T11891] netlink: zone id is out of range [ 226.583201][T11891] netlink: get zone limit has 8 unknown bytes [ 226.907296][T11911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1834'. [ 226.987558][T11913] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1835'. [ 227.380978][T11923] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.389459][T11923] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.554814][T11923] 0: left allmulticast mode [ 227.678909][T11923] vlan2: left promiscuous mode [ 227.686980][T11923] bridge0: left promiscuous mode [ 227.699906][T11923] veth3: left promiscuous mode [ 227.708158][T11923] ip6gretap1: left allmulticast mode [ 227.719763][T11923] veth5: left allmulticast mode [ 227.726804][T11923] bond2: left allmulticast mode [ 227.766607][T11934] IPv6: sit1: Disabled Multicast RS [ 227.782169][T11935] IPVS: Error connecting to the multicast addr [ 228.133463][T11952] netlink: 'syz.1.1847': attribute type 3 has an invalid length. [ 228.992214][T12000] lo: entered allmulticast mode [ 229.009783][T11998] lo: left allmulticast mode [ 229.055101][T12001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.304969][T12016] netlink: 'syz.5.1869': attribute type 1 has an invalid length. [ 229.358279][T12018] C speed is unknown, defaulting to 1000 [ 229.727718][T12032] tipc: Invalid UDP bearer configuration [ 229.727775][T12032] tipc: Enabling of bearer rejected, failed to enable media [ 229.998202][T12052] netlink: 'syz.0.1882': attribute type 1 has an invalid length. [ 230.099751][T12053] netlink: 'syz.5.1880': attribute type 1 has an invalid length. [ 230.113381][T12053] __nla_validate_parse: 2 callbacks suppressed [ 230.113402][T12053] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1880'. [ 230.304330][T12078] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1888'. [ 230.327418][T12078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1888'. [ 230.682290][T12095] netlink: 'syz.4.1894': attribute type 8 has an invalid length. [ 230.710108][T12095] x_tables: duplicate underflow at hook 2 [ 231.404740][T12130] C speed is unknown, defaulting to 1000 [ 231.458326][T12141] xt_TCPMSS: Only works on TCP SYN packets [ 231.765397][T12155] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1909'. [ 232.332061][T12187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1918'. [ 232.371775][T12187] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 232.432346][T12194] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1916'. [ 232.488851][T12195] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1920'. [ 232.529891][T12199] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1921'. [ 232.779286][T12214] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1925'. [ 233.272609][T12241] veth1_macvtap: left promiscuous mode [ 233.320851][T12244] nbd: must specify a device to reconfigure [ 233.505974][T12255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1933'. [ 233.709264][T12264] ip6t_srh: unknown srh match flags 4001 [ 233.827765][T12270] netlink: 'syz.2.1941': attribute type 1 has an invalid length. [ 234.516843][T12309] bridge0: port 3(batadv0) entered blocking state [ 234.545701][T12309] bridge0: port 3(batadv0) entered disabled state [ 234.563422][T12315] Unsupported ieee802154 address type: 0 [ 234.573492][T12309] batadv0: entered allmulticast mode [ 234.581321][T12309] batadv0: entered promiscuous mode [ 234.997012][ T1098] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 235.007528][ T1098] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 235.129782][T12333] __nla_validate_parse: 99 callbacks suppressed [ 235.129801][T12333] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1961'. [ 235.150851][T12333] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1961'. [ 235.190048][T12333] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1961'. [ 235.207068][T12347] netlink: 'syz.1.1965': attribute type 1 has an invalid length. [ 235.225284][T12333] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1961'. [ 235.249772][T12333] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1961'. [ 235.282774][T12333] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1961'. [ 235.347694][T12333] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1961'. [ 235.360974][T12333] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1961'. [ 235.401074][T12333] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1961'. [ 235.434857][T12333] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1961'. [ 235.468798][T12363] netlink: 'syz.1.1969': attribute type 13 has an invalid length. [ 235.500994][T12363] netlink: 'syz.1.1969': attribute type 17 has an invalid length. [ 235.516018][T12358] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 235.631153][T12363] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.665165][T12363] veth1_macvtap: entered promiscuous mode [ 235.692189][T12363] bridge0: left allmulticast mode [ 235.705481][T12363] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.714450][T12363] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.722642][T12363] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.731774][T12363] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.756147][T12363] ip6gre1: left allmulticast mode [ 235.808683][T12363] bond6: left allmulticast mode [ 236.188908][T12399] netlink: 'syz.1.1978': attribute type 5 has an invalid length. [ 236.239505][T12397] Cannot find set identified by id 0 to match [ 236.926624][T12449] netlink: 'syz.0.1994': attribute type 4 has an invalid length. [ 236.965426][T12449] netlink: 'syz.0.1994': attribute type 1 has an invalid length. [ 237.182701][T12469] delete_channel: no stack [ 237.424964][T12478] gretap0: entered promiscuous mode [ 237.474843][T12478] 0{X: renamed from gretap0 [ 237.489996][T12478] 0{X: left promiscuous mode [ 237.496824][T12478] 0{X: entered allmulticast mode [ 237.510566][T12478] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 237.549808][T12478] netlink: 'syz.5.2004': attribute type 10 has an invalid length. [ 237.605788][T12478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.622228][T12478] team0: Port device bond0 added [ 238.011635][T12511] gretap0: entered promiscuous mode [ 238.057107][T12518] ?H: renamed from lo [ 238.087098][T12515] netlink: 'syz.0.2017': attribute type 1 has an invalid length. [ 238.104155][T12511] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.138258][T12511] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.465944][T12543] IPVS: set_ctl: invalid protocol: 19 0.0.0.0:20003 [ 238.785445][T12562] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 239.158711][T12587] netlink: 'syz.4.2035': attribute type 15 has an invalid length. [ 239.163960][T12590] netlink: 'syz.1.2036': attribute type 32 has an invalid length. [ 239.188943][T12590] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 239.354852][T12600] x_tables: duplicate underflow at hook 1 [ 239.591350][T12611] ieee802154 phy1 wpan1: encryption failed: -22 [ 239.992608][T12619] geneve3: entered promiscuous mode [ 239.998307][T12619] geneve3: entered allmulticast mode [ 240.311374][T12640] netlink: 'syz.0.2051': attribute type 11 has an invalid length. [ 240.471774][T12648] __nla_validate_parse: 33 callbacks suppressed [ 240.471793][T12648] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2055'. [ 240.544612][T12660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2055'. [ 240.689783][T12666] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2061'. [ 240.836601][T12673] tipc: Enabling of bearer rejected, already enabled [ 240.960995][T12689] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2066'. [ 240.988510][T12690] C: entered allmulticast mode [ 240.997460][T12687] C: left allmulticast mode [ 241.068323][T12689] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2066'. [ 241.106310][T12693] xt_cgroup: xt_cgroup: no path or classid specified [ 241.156693][T12706] SET target dimension over the limit! [ 241.180272][T12706] x_tables: duplicate underflow at hook 1 [ 241.467806][T12717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2076'. [ 241.480260][T12717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2076'. [ 241.504978][T12719] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2079'. [ 241.536301][T12719] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2079'. [ 241.551981][T12717] netlink: 'syz.0.2076': attribute type 15 has an invalid length. [ 241.981893][T12736] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 242.005378][T12742] netlink: 'syz.1.2085': attribute type 21 has an invalid length. [ 242.142333][T12753] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2088'. [ 242.283692][ T3572] bridge_slave_1: left allmulticast mode [ 242.304165][ T3572] bridge_slave_1: left promiscuous mode [ 242.311288][ T3572] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.385317][ T3572] bridge_slave_0: left allmulticast mode [ 242.391225][ T3572] bridge_slave_0: left promiscuous mode [ 242.407882][ T3572] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.622606][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 242.648754][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 242.658934][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 242.674957][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 242.684515][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 242.722778][ T3572] tipc: Disabling bearer [ 243.548689][ T3572] bond1 (unregistering): Released all slaves [ 243.671461][ T3572] bond2 (unregistering): Released all slaves [ 243.684584][ T3572] bond0 (unregistering): Released all slaves [ 243.814878][ T3572] bond3 (unregistering): Released all slaves [ 243.897269][T12774] C speed is unknown, defaulting to 1000 [ 244.042776][ T3572] tipc: Left network mode [ 244.246802][T12791] netlink: 'syz.1.2099': attribute type 1 has an invalid length. [ 244.280788][T12795] netlink: 'syz.0.2100': attribute type 11 has an invalid length. [ 244.397017][T12801] netlink: 'syz.0.2101': attribute type 21 has an invalid length. [ 244.406814][T12791] 8021q: adding VLAN 0 to HW filter on device bond8 [ 244.479782][T12798] 8021q: adding VLAN 0 to HW filter on device bond8 [ 244.492510][T12798] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 244.508449][T12798] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 244.577551][T12791] veth7: entered promiscuous mode [ 244.590612][T12791] bond8: (slave veth7): Enslaving as an active interface with a down link [ 244.604938][T12774] chnl_net:caif_netlink_parms(): no params data found [ 244.626430][T12802] vlan2: entered allmulticast mode [ 244.631877][T12802] bond8: entered allmulticast mode [ 244.774650][ T51] Bluetooth: hci4: command tx timeout [ 244.930051][T12818] xt_l2tp: invalid flags combination: 4 [ 245.195419][ T3572] hsr_slave_0: left promiscuous mode [ 245.209027][T12824] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 245.235282][ T3572] hsr_slave_1: left promiscuous mode [ 245.290347][T12828] xt_CT: No such helper "snmp" [ 245.608258][ T3572] team0 (unregistering): Port device team_slave_1 removed [ 245.656297][ T3572] team0 (unregistering): Port device team_slave_0 removed [ 246.011263][T12774] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.020575][T12774] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.031081][T12774] bridge_slave_0: entered allmulticast mode [ 246.039497][T12774] bridge_slave_0: entered promiscuous mode [ 246.087435][T12839] syzkaller0: entered promiscuous mode [ 246.102391][T12839] syzkaller0: entered allmulticast mode [ 246.215120][T12852] netlink: 'syz.5.2112': attribute type 49 has an invalid length. [ 246.228322][T12774] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.242097][T12774] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.250802][T12774] bridge_slave_1: entered allmulticast mode [ 246.264683][T12774] bridge_slave_1: entered promiscuous mode [ 246.405548][T12774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.424316][T12774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.508505][T12774] team0: Port device team_slave_0 added [ 246.528902][T12861] __nla_validate_parse: 7 callbacks suppressed [ 246.528921][T12861] netlink: 100 bytes leftover after parsing attributes in process `syz.5.2116'. [ 246.532545][T12774] team0: Port device team_slave_1 added [ 246.572258][T12859] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2115'. [ 246.772007][T12870] netlink: zone id is out of range [ 246.793228][T12870] netlink: zone id is out of range [ 246.799240][T12870] netlink: zone id is out of range [ 246.809410][T12774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.818659][T12870] netlink: zone id is out of range [ 246.831361][T12870] netlink: zone id is out of range [ 246.838396][T12774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.874748][T12774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.879586][ T51] Bluetooth: hci4: command tx timeout [ 246.891140][T12774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.900493][T12774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.901413][T12870] netlink: zone id is out of range [ 246.931951][T12774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.953117][T12870] netlink: zone id is out of range [ 246.958665][T12870] netlink: zone id is out of range [ 246.964977][T12872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2119'. [ 247.003396][T12870] netlink: zone id is out of range [ 247.073923][T12870] netlink: zone id is out of range [ 247.195539][T12774] hsr_slave_0: entered promiscuous mode [ 247.204337][T12774] hsr_slave_1: entered promiscuous mode [ 247.212710][T12774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 247.222482][T12774] Cannot create hsr debugfs directory [ 247.239832][T12891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2123'. [ 247.241705][ T3572] IPVS: stop unused estimator thread 0... [ 247.391826][T12893] xt_connbytes: Forcing CT accounting to be enabled [ 247.830915][T12910] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2128'. [ 247.840793][T12910] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2128'. [ 248.137229][T12774] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 248.174907][T12774] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 248.218775][T12774] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 248.248584][T12929] ?H: entered allmulticast mode [ 248.255670][T12774] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 248.265555][T12928] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2132'. [ 248.281015][T12929] ?H: left allmulticast mode [ 248.291912][T12928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2132'. [ 248.568355][T12941] team0: entered promiscuous mode [ 248.574700][T12941] team_slave_0: entered promiscuous mode [ 248.581165][T12941] team_slave_1: entered promiscuous mode [ 248.590457][T12941] batadv_slave_1: entered promiscuous mode [ 248.659649][T12774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.722022][T12774] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.746585][ T7246] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.754689][ T7246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.797186][T12952] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2141'. [ 248.815268][T12952] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2141'. [ 248.831719][T12952] netlink: 'syz.5.2141': attribute type 15 has an invalid length. [ 248.856565][ T7246] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.864176][ T7246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.933532][ T51] Bluetooth: hci4: command tx timeout [ 248.999647][T12774] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 249.438109][T12982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 249.645165][T12997] x_tables: duplicate entry at hook 2 [ 249.660629][T12774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.844296][T12774] veth0_vlan: entered promiscuous mode [ 249.909103][T12774] veth1_vlan: entered promiscuous mode [ 249.979318][T12774] veth0_macvtap: entered promiscuous mode [ 250.015241][T12774] veth1_macvtap: entered promiscuous mode [ 250.084377][T12774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.120892][T12774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.156139][T12774] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.173117][T12774] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.200932][T12774] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.211331][T12774] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.222839][T13018] x_tables: duplicate underflow at hook 3 [ 250.424619][T13032] netlink: 'syz.0.2167': attribute type 1 has an invalid length. [ 250.462122][T13032] bond7: entered promiscuous mode [ 250.468396][T13032] 8021q: adding VLAN 0 to HW filter on device bond7 [ 250.491434][T13028] C speed is unknown, defaulting to 1000 [ 250.511767][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.520657][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.672161][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.703991][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.717077][T13039] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 251.550516][T13076] __nla_validate_parse: 9 callbacks suppressed [ 251.550535][T13076] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2176'. [ 251.581889][T13070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2177'. [ 251.711471][T13083] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2178'. [ 251.805440][ T1093] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.237736][T13098] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2182'. [ 252.240834][ T1093] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.524031][ T1093] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.549872][T13112] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2186'. [ 252.562472][T13110] netlink: 'syz.4.2188': attribute type 10 has an invalid length. [ 252.668184][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 252.679843][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 252.693479][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 252.715788][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 252.729914][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 252.818103][T13117] netlink: 'syz.5.2189': attribute type 4 has an invalid length. [ 252.885844][ T1093] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.109853][T13116] C speed is unknown, defaulting to 1000 [ 253.354726][T13147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2197'. [ 253.374774][T13151] netlink: 'syz.5.2200': attribute type 10 has an invalid length. [ 253.377215][ T1093] bridge_slave_1: left allmulticast mode [ 253.400965][ T1093] bridge_slave_1: left promiscuous mode [ 253.408113][ T1093] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.421135][ T1093] bridge_slave_0: left allmulticast mode [ 253.428375][ T1093] bridge_slave_0: left promiscuous mode [ 253.435286][ T1093] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.883904][ T1093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.896446][ T1093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.908611][ T1093] bond0 (unregistering): Released all slaves [ 253.952547][T13147] gretap0: entered promiscuous mode [ 253.963610][T13147] macvtap1: entered promiscuous mode [ 253.969530][T13147] macvtap1: entered allmulticast mode [ 253.983688][T13147] gretap0: entered allmulticast mode [ 254.226276][T13169] netlink: 'syz.1.2202': attribute type 7 has an invalid length. [ 254.265366][T13169] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 254.273185][T13169] IPv6: NLM_F_CREATE should be set when creating new route [ 254.507656][T13190] Bluetooth: MGMT ver 1.23 [ 254.645064][T13198] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2209'. [ 254.774382][ T5838] Bluetooth: hci4: command tx timeout [ 254.790880][ T1093] hsr_slave_0: left promiscuous mode [ 254.805241][ T1093] hsr_slave_1: left promiscuous mode [ 254.818789][ T1093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.827508][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.845589][ T1093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.859522][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.870905][T13211] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2211'. [ 254.896514][T13206] xt_CT: You must specify a L4 protocol and not use inversions on it [ 254.971493][ T1093] veth1_macvtap: left promiscuous mode [ 254.979153][T13214] net_ratelimit: 394 callbacks suppressed [ 254.979174][T13214] sock: sock_set_timeout: `syz.4.2213' (pid 13214) tries to set negative timeout [ 254.990081][ T1093] veth0_macvtap: left promiscuous mode [ 255.080450][ T1093] veth1_vlan: left promiscuous mode [ 255.088374][ T1093] veth0_vlan: left promiscuous mode [ 255.754922][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.897456][ T1093] team0 (unregistering): Port device team_slave_1 removed [ 255.958105][ T1093] team0 (unregistering): Port device team_slave_0 removed [ 256.466616][T13204] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2208'. [ 256.498646][T13116] chnl_net:caif_netlink_parms(): no params data found [ 256.722088][T13238] netlink: 'syz.5.2220': attribute type 27 has an invalid length. [ 256.865221][ T5838] Bluetooth: hci4: command tx timeout [ 256.898105][T13254] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2226'. [ 256.976549][T13116] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.992463][T13116] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.010940][T13116] bridge_slave_0: entered allmulticast mode [ 257.032071][T13258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2227'. [ 257.036895][T13116] bridge_slave_0: entered promiscuous mode [ 257.056851][T13116] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.071046][T13116] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.092058][T13116] bridge_slave_1: entered allmulticast mode [ 257.102721][T13116] bridge_slave_1: entered promiscuous mode [ 257.238250][T13262] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 257.281075][T13116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.312312][T13116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.478355][T13116] team0: Port device team_slave_0 added [ 257.504673][T13270] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2231'. [ 257.531454][T13116] team0: Port device team_slave_1 added [ 257.617453][T13116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.625404][T13116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.656538][T13116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.705517][T13278] veth9: entered allmulticast mode [ 257.714977][T13116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.732312][T13116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.783250][T13116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.976869][T13116] hsr_slave_0: entered promiscuous mode [ 257.984731][T13116] hsr_slave_1: entered promiscuous mode [ 257.991580][T13116] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 258.014902][T13116] Cannot create hsr debugfs directory [ 258.151012][T13298] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode [ 258.193436][T13301] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2240'. [ 258.239742][T13297] mac80211_hwsim hwsim16 wlan0: left promiscuous mode [ 258.601151][T13316] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2243'. [ 258.934132][T13328] IPVS: set_ctl: invalid protocol: 50 172.20.20.35:20000 [ 258.935563][ T5838] Bluetooth: hci4: command tx timeout [ 259.170944][T13343] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2252'. [ 259.203842][T13348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2255'. [ 259.446124][T13116] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 259.528107][T13116] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 259.539271][T13367] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2259'. [ 259.593251][T13116] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 259.619943][T13116] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 259.783985][T13379] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2263'. [ 259.850148][T13379] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2263'. [ 259.925962][T13384] netlink: 'syz.0.2265': attribute type 1 has an invalid length. [ 259.936270][T13116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.050120][T13116] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.115344][T13390] 8021q: adding VLAN 0 to HW filter on device bond10 [ 260.130077][T13390] bond9: (slave bond10): making interface the new active one [ 260.140974][T13390] bond9: (slave bond10): Enslaving as an active interface with an up link [ 260.209406][ T7251] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.216744][ T7251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.330457][ T7246] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.337847][ T7246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.024160][ T5838] Bluetooth: hci4: command tx timeout [ 261.071632][T13116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.198291][T13116] veth0_vlan: entered promiscuous mode [ 261.222302][T13116] veth1_vlan: entered promiscuous mode [ 261.279083][T13116] veth0_macvtap: entered promiscuous mode [ 261.298749][T13116] veth1_macvtap: entered promiscuous mode [ 261.322674][T13446] netlink: 'syz.5.2284': attribute type 9 has an invalid length. [ 261.342000][T13116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.357372][T13446] : renamed from bridge_slave_0 [ 261.416980][T13450] netlink: 'syz.5.2284': attribute type 9 has an invalid length. [ 261.425607][T13116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.481232][T13116] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.491243][T13116] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.501218][T13116] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.510223][T13116] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.597334][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.612774][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.657947][ T3572] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.674353][ T3572] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.878859][T13461] kobject: kobject_add_internal failed for queues (error: -2 parent: bnep0) [ 261.930318][T13461] ================================================================== [ 261.939676][T13461] BUG: KASAN: slab-use-after-free in cfusbl_device_notify+0x150/0x6a0 [ 261.948167][T13461] Read of size 8 at addr ffff888063c68c50 by task syz.5.2287/13461 [ 261.956259][T13461] [ 261.958717][T13461] CPU: 1 UID: 0 PID: 13461 Comm: syz.5.2287 Not tainted 6.15.0-syzkaller-07787-g27eab4c64423 #0 PREEMPT(full) [ 261.958744][T13461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 261.958764][T13461] Call Trace: [ 261.958771][T13461] [ 261.958779][T13461] dump_stack_lvl+0x189/0x250 [ 261.958810][T13461] ? __virt_addr_valid+0x1c8/0x5c0 [ 261.958829][T13461] ? rcu_is_watching+0x15/0xb0 [ 261.958852][T13461] ? __kasan_check_byte+0x12/0x40 [ 261.958877][T13461] ? __pfx_dump_stack_lvl+0x10/0x10 [ 261.958902][T13461] ? rcu_is_watching+0x15/0xb0 [ 261.958925][T13461] ? lock_release+0x4b/0x3e0 [ 261.958949][T13461] ? __virt_addr_valid+0x1c8/0x5c0 [ 261.958965][T13461] ? __virt_addr_valid+0x4a5/0x5c0 [ 261.958982][T13461] print_report+0xd2/0x2b0 [ 261.959005][T13461] ? cfusbl_device_notify+0x150/0x6a0 [ 261.959029][T13461] kasan_report+0x118/0x150 [ 261.959055][T13461] ? cfusbl_device_notify+0x150/0x6a0 [ 261.959084][T13461] cfusbl_device_notify+0x150/0x6a0 [ 261.959107][T13461] ? net_generic+0x1e/0x240 [ 261.959130][T13461] ? __pfx_cfusbl_device_notify+0x10/0x10 [ 261.959187][T13461] ? caif_device_notify+0x250/0xfc0 [ 261.959210][T13461] ? smc_pnet_netdev_event+0x3b5/0x6c0 [ 261.959237][T13461] notifier_call_chain+0x1b3/0x3e0 [ 261.959265][T13461] register_netdevice+0x12ee/0x1ae0 [ 261.959292][T13461] ? __pfx_register_netdevice+0x10/0x10 [ 261.959314][T13461] ? __asan_memset+0x22/0x50 [ 261.959333][T13461] ? dev_addr_mod+0x2ce/0x3d0 [ 261.959361][T13461] register_netdev+0x40/0x60 [ 261.959380][T13461] bnep_add_connection+0x6bf/0xbf0 [ 261.959406][T13461] ? __pfx_bnep_add_connection+0x10/0x10 [ 261.959426][T13461] ? __fget_files+0x3a0/0x420 [ 261.959457][T13461] do_bnep_sock_ioctl+0x40e/0x640 [ 261.959480][T13461] ? __pfx_do_bnep_sock_ioctl+0x10/0x10 [ 261.959504][T13461] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 261.959525][T13461] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 261.959545][T13461] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 261.959567][T13461] sock_do_ioctl+0xd9/0x300 [ 261.959589][T13461] ? __pfx_sock_do_ioctl+0x10/0x10 [ 261.959618][T13461] ? __lock_acquire+0xab9/0xd20 [ 261.959647][T13461] sock_ioctl+0x576/0x790 [ 261.959668][T13461] ? __pfx_sock_ioctl+0x10/0x10 [ 261.959686][T13461] ? __fget_files+0x2a/0x420 [ 261.959708][T13461] ? __fget_files+0x3a0/0x420 [ 261.959730][T13461] ? __fget_files+0x2a/0x420 [ 261.959753][T13461] ? bpf_lsm_file_ioctl+0x9/0x20 [ 261.959774][T13461] ? __pfx_sock_ioctl+0x10/0x10 [ 261.959792][T13461] __se_sys_ioctl+0xf9/0x170 [ 261.959812][T13461] do_syscall_64+0xfa/0x3b0 [ 261.959832][T13461] ? lockdep_hardirqs_on+0x9c/0x150 [ 261.959851][T13461] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.959869][T13461] ? clear_bhb_loop+0x60/0xb0 [ 261.959887][T13461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.959904][T13461] RIP: 0033:0x7f134878e969 [ 261.959928][T13461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.959944][T13461] RSP: 002b:00007f13495aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 261.959966][T13461] RAX: ffffffffffffffda RBX: 00007f13489b5fa0 RCX: 00007f134878e969 [ 261.959980][T13461] RDX: 0000200000000540 RSI: 00000000400442c8 RDI: 0000000000000006 [ 261.959994][T13461] RBP: 00007f1348810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 261.960006][T13461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 261.960017][T13461] R13: 0000000000000000 R14: 00007f13489b5fa0 R15: 00007fff31247cc8 [ 261.960038][T13461] [ 261.960045][T13461] [ 262.345257][T13461] Allocated by task 5838: [ 262.349598][T13461] kasan_save_track+0x3e/0x80 [ 262.354483][T13461] __kasan_kmalloc+0x93/0xb0 [ 262.359236][T13461] __kmalloc_cache_noprof+0x230/0x3d0 [ 262.364630][T13461] __hci_conn_add+0x233/0x1b30 [ 262.369619][T13461] hci_conn_request_evt+0x53e/0xb60 [ 262.375443][T13461] hci_event_packet+0x7e3/0x1200 [ 262.380474][T13461] hci_rx_work+0x46a/0xe80 [ 262.385226][T13461] process_scheduled_works+0xae1/0x17b0 [ 262.391041][T13461] worker_thread+0x8a0/0xda0 [ 262.396264][T13461] kthread+0x70e/0x8a0 [ 262.400447][T13461] ret_from_fork+0x3fc/0x770 [ 262.405254][T13461] ret_from_fork_asm+0x1a/0x30 [ 262.410509][T13461] [ 262.412933][T13461] Freed by task 13461: [ 262.417323][T13461] kasan_save_track+0x3e/0x80 [ 262.422761][T13461] kasan_save_free_info+0x46/0x50 [ 262.428525][T13461] __kasan_slab_free+0x62/0x70 [ 262.433490][T13461] kfree+0x18e/0x440 [ 262.437761][T13461] device_release+0x9c/0x1c0 [ 262.442553][T13461] kobject_put+0x22b/0x480 [ 262.446975][T13461] device_del+0x7a4/0x8e0 [ 262.451296][T13461] netdev_register_kobject+0x290/0x2f0 [ 262.456850][T13461] register_netdevice+0x126c/0x1ae0 [ 262.462245][T13461] register_netdev+0x40/0x60 [ 262.466855][T13461] bnep_add_connection+0x6bf/0xbf0 [ 262.472108][T13461] do_bnep_sock_ioctl+0x40e/0x640 [ 262.477267][T13461] sock_do_ioctl+0xd9/0x300 [ 262.481976][T13461] sock_ioctl+0x576/0x790 [ 262.486553][T13461] __se_sys_ioctl+0xf9/0x170 [ 262.491320][T13461] do_syscall_64+0xfa/0x3b0 [ 262.496015][T13461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.502184][T13461] [ 262.504512][T13461] Last potentially related work creation: [ 262.510315][T13461] kasan_save_stack+0x3e/0x60 [ 262.515308][T13461] kasan_record_aux_stack+0xbd/0xd0 [ 262.520727][T13461] insert_work+0x3d/0x330 [ 262.525060][T13461] __queue_work+0xcfc/0xfe0 [ 262.530472][T13461] queue_delayed_work_on+0x18b/0x280 [ 262.536141][T13461] l2cap_chan_del+0x285/0x5e0 [ 262.540996][T13461] l2cap_conn_del+0x388/0x680 [ 262.545957][T13461] hci_conn_hash_flush+0x10a/0x230 [ 262.552143][T13461] hci_dev_close_sync+0xaef/0x1330 [ 262.557445][T13461] hci_unregister_dev+0x206/0x500 [ 262.562565][T13461] vhci_release+0x80/0xd0 [ 262.566909][T13461] __fput+0x44c/0xa70 [ 262.571025][T13461] task_work_run+0x1d1/0x260 [ 262.575811][T13461] do_exit+0x8d1/0x2550 [ 262.580099][T13461] do_group_exit+0x21c/0x2d0 [ 262.584873][T13461] __x64_sys_exit_group+0x3f/0x40 [ 262.589988][T13461] x64_sys_call+0x21ba/0x21c0 [ 262.594940][T13461] do_syscall_64+0xfa/0x3b0 [ 262.599462][T13461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.605645][T13461] [ 262.607964][T13461] The buggy address belongs to the object at ffff888063c68000 [ 262.607964][T13461] which belongs to the cache kmalloc-8k of size 8192 [ 262.622577][T13461] The buggy address is located 3152 bytes inside of [ 262.622577][T13461] freed 8192-byte region [ffff888063c68000, ffff888063c6a000) [ 262.636907][T13461] [ 262.639398][T13461] The buggy address belongs to the physical page: [ 262.645990][T13461] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x63c68 [ 262.654843][T13461] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 262.663541][T13461] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 262.671276][T13461] page_type: f5(slab) [ 262.675617][T13461] raw: 00fff00000000040 ffff88801a442280 ffffea0000cdfe00 dead000000000004 [ 262.684551][T13461] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 262.693348][T13461] head: 00fff00000000040 ffff88801a442280 ffffea0000cdfe00 dead000000000004 [ 262.702489][T13461] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 262.711166][T13461] head: 00fff00000000003 ffffea00018f1a01 00000000ffffffff 00000000ffffffff [ 262.720286][T13461] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 262.729056][T13461] page dumped because: kasan: bad access detected [ 262.735590][T13461] page_owner tracks the page as allocated [ 262.741476][T13461] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5483, tgid 5483 (rcS), ts 45501901475, free_ts 45416733726 [ 262.761714][T13461] post_alloc_hook+0x240/0x2a0 [ 262.766696][T13461] get_page_from_freelist+0x21e0/0x22c0 [ 262.772535][T13461] __alloc_frozen_pages_noprof+0x181/0x370 [ 262.778742][T13461] alloc_pages_mpol+0x232/0x4a0 [ 262.783785][T13461] allocate_slab+0x8a/0x3b0 [ 262.788476][T13461] ___slab_alloc+0xbfc/0x1480 [ 262.793319][T13461] __kmalloc_cache_noprof+0x296/0x3d0 [ 262.798869][T13461] tomoyo_init_log+0x111f/0x1f70 [ 262.804040][T13461] tomoyo_supervisor+0x340/0x1480 [ 262.809434][T13461] tomoyo_env_perm+0x149/0x1e0 [ 262.814470][T13461] tomoyo_find_next_domain+0x15cf/0x1aa0 [ 262.820630][T13461] tomoyo_bprm_check_security+0x11c/0x180 [ 262.826642][T13461] security_bprm_check+0x89/0x270 [ 262.831805][T13461] bprm_execve+0x8ee/0x1450 [ 262.836433][T13461] do_execveat_common+0x510/0x6a0 [ 262.841726][T13461] __x64_sys_execve+0x94/0xb0 [ 262.846772][T13461] page last free pid 5482 tgid 5482 stack trace: [ 262.853563][T13461] __free_frozen_pages+0xc6e/0xe50 [ 262.858782][T13461] __slab_free+0x326/0x400 [ 262.863298][T13461] qlist_free_all+0x97/0x140 [ 262.868068][T13461] kasan_quarantine_reduce+0x148/0x160 [ 262.873890][T13461] __kasan_slab_alloc+0x22/0x80 [ 262.878853][T13461] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 262.884712][T13461] getname_flags+0xb8/0x540 [ 262.889991][T13461] do_sys_openat2+0xbc/0x1c0 [ 262.894768][T13461] __x64_sys_openat+0x138/0x170 [ 262.900077][T13461] do_syscall_64+0xfa/0x3b0 [ 262.905059][T13461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.912146][T13461] [ 262.915520][T13461] Memory state around the buggy address: [ 262.922526][T13461] ffff888063c68b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 262.931159][T13461] ffff888063c68b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 262.940183][T13461] >ffff888063c68c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 262.949043][T13461] ^ [ 262.956206][T13461] ffff888063c68c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 262.965544][T13461] ffff888063c68d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 262.974837][T13461] ================================================================== [ 262.989756][T13461] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 262.997880][T13461] CPU: 1 UID: 0 PID: 13461 Comm: syz.5.2287 Not tainted 6.15.0-syzkaller-07787-g27eab4c64423 #0 PREEMPT(full) [ 263.010132][T13461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 263.021034][T13461] Call Trace: [ 263.025095][T13461] [ 263.028383][T13461] dump_stack_lvl+0x99/0x250 [ 263.033211][T13461] ? __asan_memcpy+0x40/0x70 [ 263.038286][T13461] ? __pfx_dump_stack_lvl+0x10/0x10 [ 263.043873][T13461] ? __pfx__printk+0x10/0x10 [ 263.048624][T13461] panic+0x2db/0x790 [ 263.053005][T13461] ? __pfx_panic+0x10/0x10 [ 263.057547][T13461] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 263.063532][T13461] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 263.069888][T13461] ? print_memory_metadata+0x314/0x400 [ 263.075553][T13461] ? cfusbl_device_notify+0x150/0x6a0 [ 263.081556][T13461] check_panic_on_warn+0x89/0xb0 [ 263.086855][T13461] ? cfusbl_device_notify+0x150/0x6a0 [ 263.092521][T13461] end_report+0x78/0x160 [ 263.097016][T13461] kasan_report+0x129/0x150 [ 263.102456][T13461] ? cfusbl_device_notify+0x150/0x6a0 [ 263.108258][T13461] cfusbl_device_notify+0x150/0x6a0 [ 263.114458][T13461] ? net_generic+0x1e/0x240 [ 263.119059][T13461] ? __pfx_cfusbl_device_notify+0x10/0x10 [ 263.124965][T13461] ? caif_device_notify+0x250/0xfc0 [ 263.130467][T13461] ? smc_pnet_netdev_event+0x3b5/0x6c0 [ 263.136272][T13461] notifier_call_chain+0x1b3/0x3e0 [ 263.141595][T13461] register_netdevice+0x12ee/0x1ae0 [ 263.146997][T13461] ? __pfx_register_netdevice+0x10/0x10 [ 263.152588][T13461] ? __asan_memset+0x22/0x50 [ 263.157610][T13461] ? dev_addr_mod+0x2ce/0x3d0 [ 263.162315][T13461] register_netdev+0x40/0x60 [ 263.167010][T13461] bnep_add_connection+0x6bf/0xbf0 [ 263.172858][T13461] ? __pfx_bnep_add_connection+0x10/0x10 [ 263.179335][T13461] ? __fget_files+0x3a0/0x420 [ 263.184448][T13461] do_bnep_sock_ioctl+0x40e/0x640 [ 263.189858][T13461] ? __pfx_do_bnep_sock_ioctl+0x10/0x10 [ 263.195792][T13461] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 263.202057][T13461] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 263.208411][T13461] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 263.214927][T13461] sock_do_ioctl+0xd9/0x300 [ 263.220566][T13461] ? __pfx_sock_do_ioctl+0x10/0x10 [ 263.226407][T13461] ? __lock_acquire+0xab9/0xd20 [ 263.231828][T13461] sock_ioctl+0x576/0x790 [ 263.236645][T13461] ? __pfx_sock_ioctl+0x10/0x10 [ 263.242830][T13461] ? __fget_files+0x2a/0x420 [ 263.248434][T13461] ? __fget_files+0x3a0/0x420 [ 263.254187][T13461] ? __fget_files+0x2a/0x420 [ 263.260178][T13461] ? bpf_lsm_file_ioctl+0x9/0x20 [ 263.266707][T13461] ? __pfx_sock_ioctl+0x10/0x10 [ 263.272301][T13461] __se_sys_ioctl+0xf9/0x170 [ 263.277192][T13461] do_syscall_64+0xfa/0x3b0 [ 263.283807][T13461] ? lockdep_hardirqs_on+0x9c/0x150 [ 263.289379][T13461] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.296512][T13461] ? clear_bhb_loop+0x60/0xb0 [ 263.301809][T13461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.308084][T13461] RIP: 0033:0x7f134878e969 [ 263.312576][T13461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.332975][T13461] RSP: 002b:00007f13495aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 263.342038][T13461] RAX: ffffffffffffffda RBX: 00007f13489b5fa0 RCX: 00007f134878e969 [ 263.350295][T13461] RDX: 0000200000000540 RSI: 00000000400442c8 RDI: 0000000000000006 [ 263.358459][T13461] RBP: 00007f1348810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 263.366434][T13461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 263.374404][T13461] R13: 0000000000000000 R14: 00007f13489b5fa0 R15: 00007fff31247cc8 [ 263.382404][T13461] [ 263.385762][T13461] Kernel Offset: disabled [ 263.390252][T13461] Rebooting in 86400 seconds..