last executing test programs: 3.044146085s ago: executing program 2 (id=3759): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0x10, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet6_udp_int(r3, 0x11, 0x66, 0x0, &(0x7f0000000b80)) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="14000000100001000000ee41ca35422186f7000a7c000000060a010400000000000000000a0000050900010073797a31000000005000048020000180070001006374000014000280080002400000000708000140000000092c0001800a0001006c696d69740000001c0002800c00024000000000000000000c00014000000000000000090900020073797a32"], 0xa4}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfff00001}, {0x16}]}, 0x10) sendto$inet6(r1, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000080025bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="1000000082040400240012800b0001006272696467650000140002800800020001000000080003001d0020"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="280400001600e5632bbd7000fedbdf25fc010000000000000000000000000000ac1414aa0000000000000000000000004e230fff4e2300050200808021000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe800000000000000000000000000035000004d432000000ac1414bb000000000000000000000000050000000000000002000000000000000004000000000000070000000000000007000000000000006cee0000000000000700000000000000ff03000000000000010000000100000005000000000000003f0000000000000009000000000000000800000001000080090000002bbd7000ff3400000a0000039400000000000000010000000e2dcf0905"], 0x428}}, 0x0) 2.849432729s ago: executing program 0 (id=3763): r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x34, 0x71, &(0x7f00000000c0)="bf3a7136ad3e939d71fa64c608108f03a140c198ea73db5972f9f1ef111d8d0d75cf7062f9e86ecfae1b439582e8e2be12eed9bb", &(0x7f0000000240)=""/113, 0x3, 0x0, 0xd5, 0x5d, &(0x7f0000000300)="1485d27ec4098754df613870f3f2e15e7f311fa5c2d0bcc4cf3d2b53141ea5f63ea57978ca50061797145839191930048879a7073a284930cf627b94a80dd93d7cbdc44caa69b7acaf8554b2409ff013bc3a48981065649cbd7f63e1b01dad15ee0bd884870de2fd2be72d7a578910bbbb84171893b77d243afb1a1341c2e562083a3e8475d6e7259b4f608f309b8bdd91e5fb4f4316d4e360a003ccdfd16c31e42e94c22335e4fc3ac8f3ad27e080d9b126a31d0c5204bfa237d3859058d204cc0007f6b7083c4314c24ca3e1605882c62e6f656e", &(0x7f00000004c0)="a9b6c0d9aecc99f382640c2f5cc7aa6b41b7d6d75a3839b0b281dbc52924681a5f454d1432c6b1c33aafb28e6f3cecdde1f33fbfb5486001f7aea8532c0c65d782828324f63fc3fee80703ae730b28cf15af800a9981a6e73950b35c00", 0x3, 0x0, 0x9}, 0x50) (async) sendmsg$netlink(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)={0x1c, 0x76, 0xfcdfa0f79c183163, 0x0, 0x0, "", [@generic="a4fe72bc49a2b43c04"]}, 0x1c}], 0x1}, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'dummy0\x00', 0x0}) (async, rerun: 64) getsockopt(r2, 0x400, 0x0, &(0x7f0000000140)=""/209, &(0x7f0000000000)=0xd1) (rerun: 64) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@dev={0xfe, 0x80, '\x00', 0x25}, 0x7f, r4}) 2.792086913s ago: executing program 2 (id=3765): bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000080)={'pimreg1\x00'}) 2.660913459s ago: executing program 0 (id=3767): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000380)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000140), 0x0, 0xfffffffe, 0x0) 2.587777332s ago: executing program 3 (id=3768): syz_emit_ethernet(0x7e, &(0x7f0000000000)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0700a6", 0x48, 0x3c, 0x0, @private0, @ipv4={'\x00', '\xff\xff', @remote}, {[@hopopts={0x32, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x5}]}, @routing={0x87, 0x6, 0x2, 0x2, 0x0, [@dev={0xfe, 0x80, '\x00', 0x27}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}]}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="68000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a30000000002000078005000300000000000c0001800800014080ffffff05001400fa00000005000500020000000500010006"], 0x68}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$packet(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x1, 0x0, 0x6, @random="b6c1c02b5fbb"}, 0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0xc, 0x12, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @private}]}]}, 0xa0}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0x1000000c}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00005200060005000100000008000800", @ANYRES64=r5], 0x2c}}, 0x4000000) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000140)) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r8, 0x890b, &(0x7f0000000000)={0x0, @null, @netrom={'nr', 0x0}, 0x0, 'syz0\x00', @default, 0x0, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x20, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0xa, 0x1, 0x0, 0x0, @str='wlan0\x00'}]}, 0x20}}, 0x0) r9 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r9, &(0x7f00000009c0)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000240)="e0a0dce4", 0x4}, {&(0x7f0000000380)="52dcc7a4261700d5c327e7583be79e15f77e9484990ec6929b78905fc7bdd55cadc1db1db08fe5484b8b", 0x2a}, {&(0x7f00000004c0)="3353e244bbec90dca824099187b2148e47abb612f232d76ec9b4a3eec4e12c8b86c52d3a76f78770f1c76771467102cabd2f5d096be56888111478944ebbb584a98ba887c98cc829c862090c0aa7e3801621b99d9f5fa0a6f9df096d4e2024c63c65cb91338ac7562ad966ce586f196a1067aa22408c1384ab356524c95d58349c37f8590c9a46445892041bf76dcda87fc4643fe874c42baccaa369b0db99af9276ef29fae36d851357417fe625293e3a593376edb894a2dc2dcbb3c8bfbcb5a12f5d4ca6efbb930c77f6b132d59eac163db0bb09d1fbc323d97bb5e24f395483dfbe01cfa22d3ce429d3bd586f4ec328cb5c0a7b3d", 0xf6}, {&(0x7f0000000640)="c950c95741b9275b43c5b06d27a56ee09a877427c99a93e74ec6455473989eccb37bdb4479f04bfe3c10d0f0896ad08bf06cf4531d1220ec0a0d2b34852779cb1db25089b07cde4e071c5098b77b03a55ca4e14bea2760bea2cabb86eea29b9dcd684d07a08530ecff34db7007210ab095208e96113d936177aecc34743d36847ce22d2842dc51692e62cee1e93a9f05cd207082fe24499770656650ef3f3d0da4b608e72b2964bc4c7f0c7b38f2f7626a6f4e831b184ecc8ee92f57fae9c3ee86e0c8b28f13e53501376687013bf4542bc1eac1ee990e70", 0xd8}, {&(0x7f0000000740)="8b8790489cbdbb34d7ed1ed35b6e90f35b1b71d41cb42b73237d84e26302900dedc6a70cb5294e93e44f74dd12fb017100f66d7cfd157b0540b3842e3ded8029fde4991718fd23e8ae608eef0a97375e955297880857b75b7b205d6f11288eec9895b082d061b393dcab58f9be02028cbfb91f36405db92be0e9773ab4aab4dd2cb6680ae8eea82fbb5fe15bb4a0e786a716cb4ac0a75fefff1b2fcddca211270e4776ebbf5383e4", 0xa8}], 0x5, &(0x7f0000000800)=[@ip_ttl={{0x14, 0x0, 0x2, 0x80000001}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @rand_addr=0x64010102, @broadcast}}}, @ip_retopts={{0x30, 0x0, 0x7, {[@lsrr={0x83, 0x1f, 0x51, [@multicast1, @private=0xa010101, @multicast1, @private=0xa010100, @remote, @loopback, @private=0xa010100]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x638}}, @ip_retopts={{0x28, 0x0, 0x7, {[@cipso={0x86, 0x18, 0x1, [{0x0, 0x4, "d2cc"}, {0x1, 0xc, "969d97bfae79671f471d"}, {0x5, 0x2}]}]}}}], 0xf0}}], 0x3, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r9, 0x84, 0x19, &(0x7f00000002c0)={r10, 0x7}, 0x8) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r13, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0003000000080026000816"], 0x40}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000080)={r10, @in6={{0xa, 0x4e24, 0x3, @loopback, 0x4}}, 0x5a, 0xa07b}, 0x90) 2.423839201s ago: executing program 0 (id=3770): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f000000a780), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x7c, r3, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x6, 0x7b}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x40}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x79}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x10}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x79}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x19}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20004801}, 0x1f7e991fe3d6e37a) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3ff}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xd8}}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f000000a8c0)={0x0, 0x0, &(0x7f000000a880)={&(0x7f000000a7c0)={0x2c, r2, 0x201, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048091}, 0x80) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x128, r6, 0x2, 0x70bd28, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x128}, 0x1, 0x0, 0x0, 0x8000}, 0x4000004) r7 = socket(0x10, 0x3, 0x0) sendto$inet6(r7, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160009000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0xa0833}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x31}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x80) 2.41109711s ago: executing program 1 (id=3771): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in=@loopback, @in6=@mcast1, 0x0, 0x3}, {@in6=@remote, 0x0, 0x33}, @in=@local, {0x2}, {0x0, 0x0, 0x0, 0x3}}, 0x0, 0x5dfe}, [@lastused={0xc, 0xf, 0xfffffffffffffffd}]}, 0x104}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000009110a9000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000600)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)={0x2c, r2, 0x615, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0xc040) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r5, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xaa}}, 0x8) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @match={{0xa}, @val={0x4}}}]}], {0x14, 0x10}}, 0x98}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) shutdown(r9, 0x0) recvmsg$unix(r9, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) syz_open_procfs$namespace(r10, 0x0) sendmsg$nl_netfilter(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x9, 0x201, 0x70bd25, 0x25dfdbfe, {0x5, 0x0, 0x7}, [@typed={0x8, 0x106, 0x0, 0x0, @pid=r10}, @nested={0x8, 0x6b, 0x0, 0x1, [@nested={0x4, 0x6a}]}, @typed={0x8, 0x106, 0x0, 0x0, @fd=r0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x408d1}, 0x40004) 2.248161322s ago: executing program 2 (id=3773): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r1, 0xd431d0895f43591e, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x56}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8040}, 0x4000810) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)={0x2c, r2, 0x1, 0x70bd26, 0x0, {0x25}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880) 2.110560541s ago: executing program 0 (id=3774): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r3, 0x6, 0x100}, 0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000001080)={r3, 0x21}, 0xc) getsockopt$bt_hci(r0, 0x84, 0x84, &(0x7f0000000040)=""/4146, &(0x7f0000000000)=0x1032) 1.98642193s ago: executing program 4 (id=3775): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r1, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="93", 0x1}], 0x1}}], 0x1, 0x4040040) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x200}, 0x8) close(r1) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001840)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x3}, [{}, {}, {0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0x9}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3cf}, {0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x4000}, {}, {0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x200}, {}, {0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7f, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0xfffffffd}, {0x0, 0xffffff01}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0xdf}, {0x0, 0xfffffff2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x2, 0xf}, {}, {}, {}, {0x0, 0x0, 0x10}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x100}, {}, {0xfffffffc, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2, 0x0, 0x0, 0x4000000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac000000410007010000000007000000017c00000400fc809400018006000600800a00008500908008"], 0xac}}, 0x4010) connect$pppoe(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x0, {0x1, @random="00a26a3a76ba", 'rose0\x00'}}, 0x1e) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="500000001000010400000000ffdbdf0000000000", @ANYRES32=0x0, @ANYBLOB="00000000000005001c0012800b00010067656e65766500000c00028005000a00000000001400030067656e6576653100"], 0x50}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x30, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x100}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x30}}, 0x0) 1.936310925s ago: executing program 2 (id=3776): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time\x00') ioctl$NS_GET_NSTYPE(r0, 0x8008b705, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x20050800) 1.90349092s ago: executing program 0 (id=3777): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x4d, &(0x7f0000000100)=0xffff, 0x4) sendto$inet6(r2, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4000, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback, 0x7}, 0x1c) recvfrom$inet6(r2, 0x0, 0x0, 0x120, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r4 = socket$key(0xf, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0x3, 0x5, 0x6c, @dev={0xfe, 0x80, '\x00', 0x13}, @loopback, 0x63f4a2ba45f61b6e, 0x700, 0x9, 0x100}}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="0000020000780eb2ad2d74d1473ceb42bfbc780934d2174e130bff09db7163", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008520000003000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x71, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x5, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0xe, 0x3, 0x5}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000600)=[r0, r0], &(0x7f0000000640)=[{0x1, 0x3, 0xa, 0x5}, {0x3, 0x5, 0xe, 0xb}, {0x3, 0xfffffff2, 0x4, 0x5}, {0x3, 0x1, 0xb, 0x9}], 0x10, 0x4}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000840)={@cgroup, 0x9, 0x1, 0xd, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r0, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)=r3}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000880)=ANY=[@ANYRES32=r8, @ANYRES32=r3, @ANYBLOB="0d0000c2ba562989", @ANYRES32=r6, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=r7], 0x20) sendmsg$inet(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="ec5984b11d4b3e1d5c2cfd402400a0c583d8a53af0133785384ce8bac7dc05c56f70bf97374fef72292d78b02066b24fdd1f2b1d2b3640e97e90550c7b76a9e48f0bc6c7f624b023a0c3c05c6604a46fb3823065fc6db690d2af4e5355039421a762c4a68c4c3bb474826de908ac98a0be830746749134929e441d793ef97a3c9be1ca7fd3ed03da460b98d8eb09b13f120471c374d6660949570f0d7e16901edee971e7", 0xa4}], 0x1, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @remote, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7ff}}], 0x38}, 0x4000080) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$unix(0x1, 0x2, 0x0) bind$unix(r9, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r10 = socket$unix(0x1, 0x2, 0x0) connect$unix(r10, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r11 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r11, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@ip_ttl={{0x14, 0x110, 0xd}}, @ip_ttl={{0x14}}], 0x30}, 0x0) sendmmsg(r10, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r12 = accept4(r9, &(0x7f0000000340)=@l2tp6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @loopback}}, 0x0, 0x80000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x40c1}, 0x40) sendmsg$unix(r10, &(0x7f0000000840)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0xa, 0x8800}, 0x4000080) close(r9) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), 0xffffffffffffffff) 1.875194472s ago: executing program 3 (id=3778): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000180)=@ethtool_ringparam={0x11, 0x0, 0x20040001, 0xffff, 0x3f, 0xffffffff, 0x0, 0x9, 0x200}}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008080}, 0x4048806) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0xc000000) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c040056", @ANYRES16=r3, @ANYBLOB="000127bd7000ffdbdf25010000000000000002410000001000137564703a73797a3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x4004040) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x7) r5 = accept4(r4, 0x0, 0x0, 0x80000) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000200)={0x0, 0x4, 0x20}, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x2c, r7, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15f4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)={0x1c, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_BSS(r5, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, r7, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x19}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x8}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xfe}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x8}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x2}]}, 0x54}}, 0x400) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r12 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r12, 0x0, 0x0, 0x40800, &(0x7f0000000100)={0xa, 0x4e21, 0xbdb, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c) 1.841889249s ago: executing program 4 (id=3779): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) syz_emit_ethernet(0x46, &(0x7f0000000080)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x10, 0x2c, 0x0, @dev, @mcast2, {[@hopopts={0x3c}], @echo_reply}}}}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x24000050) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xbf}]}, &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x53}, 0x90) r3 = accept4(r1, 0x0, 0x0, 0x0) connect$l2tp6(r3, 0x0, 0x0) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r4, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) sendmsg$inet(r1, &(0x7f0000000400)={&(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000500)="bfb66564b5b9410d807adabc85dea728560a5cf0b36431869b7bbe8057acce94a400859f09bf28a3fbe7860b39109f1333cfe89c3b8be60637697a75c2cf0dfdca57c8da50cfa974c987e432997e4fba7cb34369f9d1f24e6a1453e0dff8d52139f3d626fd37fe9956d77b58a82730e016b2ad250d1444917e8c75f55f8313dd1d36752ae6bb66a4d37260dc0dac56275cf2b565431f51e5082ea9dec4c72314f2a85b254e45f1c69cd6dc06dbf3386406e46b57334e6feb5017ce8d4cfc5497dad8c469a1f51fd4fa4863c8a8a684", 0xcf}, {&(0x7f0000000600)="367b9ceb3388fa42e664e773af2e1f1c1616807a6129bd05a9ddf510386133601a4fd2a96cdbd5b0f35c39787903dc60df2eeebbf420c08043c27415ec2997a811185b7310ce738a2b1d81a4045f696713c4f32aadfd0a88d4f350e7c09906e42785532b9c4bc234b53a03b54c9958f6d4e6515ed0dbd5321e50cdaa3c559096e9f8007e80b0236909fe469ff18485d931cc3914140dd9601937aa1a46c7936c32ecc5df3b154d90160e2707a19237d2c6395faa2a325e27726029b1741e3a3f2016c0bb16e7a3bf9435755ac379bef06f4e0942", 0xd4}, {&(0x7f0000000700)="6a7147fb12eaa8581fb60245168aa1fd2ab27f1c1028885a1f99c3f9bd33342e0430f2af62b8fb00183bd4e707a3f5389908d81ffeb9d842283b689fa85cdf3d0288244eac65fd706db53a62254105e07b1c9fb873b5a7be50d5affe5e9a5ec619c6b641c8a9f8c4d81294728915f4369a34fe78ff7a339931a1bd2b8f4bb26dc2706249f653f2ed23862999a663f9a3b5d5534b51c590aa4b664e3ff808a8be87df5c6fcc86addb34457d0479986035cd288c34eb7afc0bf6fa9fb2418b002bfd258edcedc7478fe1cae5306a9baf8897e171e379aeeac8180c3cacee", 0xdd}, {&(0x7f0000000800)="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", 0xfd}], 0x4, &(0x7f00000002c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0xffff}}, @ip_ttl={{0x14, 0x0, 0x2, 0xbb}}], 0x30}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r6) syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r8, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916d, 0x15}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x4000054) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000b00)=ANY=[@ANYRES16=r7, @ANYRES32=r7, @ANYBLOB="010300000080000000000700000008000114cf09e6628f676a2018e38983f071fe6bd358d4752df40190c414b29f44cf17cac17f3e3ca94af9e96df0e391a5632ebce62b5727d91dea2a0e5f75c42a4b471295444492a8b9a13641971b912c726cb5e7e3d8ad26708e08fbd9ff6ba7c57b922873a4cff6d5ca75158efd7e7d6500"/143], 0x1c}}, 0x20040040) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x24, 0x7, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x5a}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000840) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f00000004c0)=[@in6={0xa, 0x3, 0x9, @mcast2, 0x9}], 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="000000e8ff07000014000300000000000000000000000000000000001800128008000100707070000c00028008000100", @ANYRES32], 0x4c}}, 0x0) 1.768270065s ago: executing program 1 (id=3780): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c0000009500000000000000eb4779fcbb3e3bbff2971871b1b1c0b4f0fca28377f3aa77d6c8d949060c54d53bd61b3561319f7b346f8cadae05957ee562fe28a5d0b564a59c30cb37ebb90e516d9c72b9d81817f7a04496e4261b41dae579bd93d38e2740ac98d6108c318a35d29534fd3c6bf14ef7a5c59c3d48f092e6b6bb43ec765d850f71052de0718c08"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x15, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x801, 0x0, 0x0, {0x1b, 0x0, 0x9}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004801}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) 1.663898106s ago: executing program 3 (id=3781): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x24, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffd}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe}}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffff8}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5d691320}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x94) bind$ax25(r1, &(0x7f0000000100)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) close(r1) r3 = socket(0x10, 0x803, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x0, 0x3}, 0x10) ioctl$BTRFS_IOC_DEFRAG_RANGE(r5, 0x40309410, &(0x7f0000000200)={0x200, 0x3ff, 0x0, 0xe, 0x1, [0x5, 0x401, 0x5, 0x80]}) connect$bt_l2cap(r4, &(0x7f00000001c0)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x100, 0x1}, 0xe) getpeername(r4, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x275) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_mreqn(r7, 0x0, 0x20, &(0x7f0000004280)={@loopback, @loopback, 0x0}, &(0x7f00000042c0)=0xc) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f000000a400)=@newtfilter={0x102c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x8, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1000, 0x2, [@TCA_BPF_NAME={0xffb, 0x7, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}]}}]}, 0x102c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmmsg$inet(r1, &(0x7f0000005ec0)=[{{&(0x7f0000000280)={0x2, 0x4e22, @empty}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000540)="25ee061d3f0e1e9897ffa402713d0ee164d2a2c5bc87061c1661948f5a876a9b4a352b19ced0ce9ed672f976a3612a7ce830e71810a7bd1fc0acbf26c4d9604fc7eaf879e6bcef38dbe75f509e670f99e67d9a6ce31fcb7f3b4986167b2c50140923d5cdf4cd58298d99562d0883a1576b5a6dbae69f6f2c7c0f5d01facc9a67d44296de2d485924cbdcac21de0d", 0x8e}], 0x1, &(0x7f0000000300)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @multicast2}}}], 0x20}}, {{&(0x7f0000000600)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000b40)=[{&(0x7f0000000640)="e0b4705cd6", 0x5}, {&(0x7f0000001180)="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", 0x1000}, {&(0x7f0000000680)="1504e94136c16262333063158cba9b973cdc8531314e2752357a92344031a92e31bd8171b0a33b6da1598b378c5efbf02264dc7f69ed3d5aeb22ac74573d60ba0efe3c750a29bb35e61763c5f2eba956bfdeca9d61e3637ca30b45bd639dcb36f8804691699dc719ebfdebd697cd456dcd24f3b20304790ed8e9eed819cb0df0c8f6f19b02115de47484a391125a49580bacc3aaafc7d017a94715c2e1598b9f1879db6ebd5cbf9e6fde68d061044f64bc83b08a80c930ab34b3538ae46467190a8f175ab38a78882233a86b00acaeb6eb04859db384108198fa90cfeede3a129784c37fe265c85d2d442db6ee173a614774d57c641ff20e51329e6146", 0xfd}, {&(0x7f0000000780)="a4797f45253d5cd56eb7280df2bbd908210b9fc8d03d0bd7e3ade9cbf114339f76862eb4dd9f38cd35a67458003cd38cf7301a803329271d176ee9f006c89cd26a7eff22511d1481f38bba3df33c096e47ddba0967ccd046fd600801e1909dba8663704a", 0x64}, {&(0x7f0000000880)="1264b71ad443b4f8f795d5347006d5c89b82e0ebb97cf3b7917350e82672140f2f11bd4daaa6f91a57baf4827abfcb1e1e9cc3590a7e916f35895226622a299788c99148ae13e620ffbe2328560050cbd4ee816b11ed5505c39f5b8f8a5704cc7ed0e42d8812209e067a65e844d3dd33a8d2d422ad8f308d28aa90c2271128dd6dc075c7ee15011fd56610417a505f6942e39f3f3ea914273f58cf81a2b980f69c9c402c4e5af4edd6d193b5c0ad5de5a9565f5f05c3611ea69238487f74", 0xbe}, {&(0x7f0000000800)="761fec69dbe99775887ba92c0e68d9461000dc28db32912a6f71ae4c710a90438fd91669ef354f67", 0x28}, {&(0x7f0000000940)="87dcdd946274bf54b29e16391f73301ff0caca2e0477617595bc7c28d9960b94a19883c9f48cf6eb5b05ece329b51746e51342436af40d18771877e4d9f64fd05213b06ffa51bd31a5e707b42856f7698ca37a000536ff894cf528e72f1454f088458da63a940f4eab4cdf1c197f04b592f4c869b6d2d95802de33c2d3e7930d928fd012a567bebd4754201166fc6c01ea5530c1a72c75663507d98999d46e3b72efe23f86b4d538a847a0a1384e", 0xae}, {&(0x7f0000002180)="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", 0x1000}, {&(0x7f0000000a00)}, {&(0x7f0000000b00)="af95770c6e66b3a6e037120ac41440a7a9bcdca8a2229229477f03a5e058ef846364e0f44cf69ff4b3ea94a0c4f3a5c17dadf85517db2201598f2bfe271a", 0x3e}], 0xa, &(0x7f0000000c00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_retopts={{0x74, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0xcd, 0x0, 0x0, [0x0, 0x4]}, @generic={0x44, 0xe, "7358c337ec47c4a2cb2fd6a0"}, @generic={0x94, 0x12, "7b1be288205bec4fb4e3d0df5e7fc7e9"}, @noop, @ra={0x94, 0x4}, @generic={0x83, 0x12, "00ee2efd2900e573792e85a8b6e6fd4b"}, @cipso={0x86, 0x1f, 0xffffffffffffffff, [{0x0, 0x2}, {0x5, 0x5, "dcb073"}, {0x2, 0x12, "0358ec0ebe1fd6d8003f30f3ebd3cf80"}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0xf0}}, {{&(0x7f0000000d00)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000001000)=[{&(0x7f0000000d40)="25f95621d4c506819a40a383b5d5c31af90a4c70fab58a31e749ff82c12fa63ebaced485043672369afeb6c00c1d940e1eae13cf5b8ceb13396f807096b76a8084c813ec81034a95213805f4805de3edb8471464058bf4b89325016783c0e5dba89cd7452b1d03e7add29151f287eaaa613cbf37850804ff696ed9b42e71b5aa24a04d99", 0x84}, {&(0x7f0000000e00)="4ae7a2831f8fb63091704dffe6fb2f40316ba9a703499fb8fec669f7f394905a0c7bfc2411c7346f3cd0", 0x2a}, {&(0x7f0000000e40)="b2c1bb790cb95cebd457922d0ec8b7b5d972aac3b5615f9a9226dac6540c9fdcad01936baea3624b3e0ff1510c30f353820ff989eaea21c02c39e7cb364aba92edc191774d396a7523ce051f70ffa8057109f9dd860aae434bec451267539c18094f202396caa5fd02e88ec9d904f81ef294eacc14216681a69191ed01f083e33fef4a53e29a3cda657583e13c90085a07a0b660a65e9a5a2c667e3188cd50b483c1d79ec7508366448175122c67dd8c7174f2a85e745d147248d525835159b4edce3f9610f55294f6d3e0d92ec4a1a02bd2fea4f41d586e54f2645b6ba14e46efa02b4d4c4131", 0xe7}, {&(0x7f0000000f40)="d10dcde931e40018b01b1e33eac0f86a35dbd346273d6b90f8dd600b4bab5b4420091d345aafd08c5aeffabe8b01f4dd5b92cc81207becc5b96e668091353b46655832aba5c1e4291d75f3cefe4f9bf3f2c1316bb0ba3c63cc513cc5ebb4d1e40b151acaac990bedafbf74773a50e89dfd8ac727e6a550f767348ba61c668365f2ca4680cb1b9d67ebcb28727a18979198d972c184fb76dea3a8ebeafa67c0d6857cc0d1706197fd8ead158150c1e420ed276d9ced1959", 0xb7}], 0x4}}, {{&(0x7f0000001040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10, &(0x7f0000001080)=[{&(0x7f0000003180)="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", 0x1000}], 0x1, &(0x7f0000004180)=[@ip_retopts={{0x38, 0x0, 0x7, {[@generic={0x88, 0x8, "4e1c173363f2"}, @ssrr={0x89, 0x13, 0x9b, [@private=0xa010102, @loopback, @private=0xa010101, @rand_addr=0x64010101]}, @noop, @noop, @cipso={0x86, 0x9, 0x0, [{0x7, 0x3, "1a"}]}]}}}], 0x38}}, {{&(0x7f00000041c0)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f0000004240)=[{&(0x7f0000004200)="43a1ae7c9ceefbfad2c2b13006017fb261eb3b47d74af9de5cee821fef89ad8d7eeaf3603e5ecf", 0x27}], 0x1, &(0x7f0000004300)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6b}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0x23}, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7ff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10001}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}], 0xc8}}, {{&(0x7f0000004400)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000004600)=[{&(0x7f0000004440)="ed735b86519a7dce14f994f28e892935816a28de9fe8b63997ec6bcac13ba9ce8e85392ec56d16dac809093fdee579a9f89e6abbfd5b36691c1b52c35d366d22b554bac1c091cc037da26809699e1ec8aa4be31b4dcc84cd41fdc47b8f38fd1079b1fb75ddb1869c21d7a563bc604a26d00807fc8495426cd534d9db3c6414d3232ea96aca5591723da0d7e265093724732d76d4744ee67fbadcf9095f9c68de839d4ec3ac1467a19dde79a814dcbe37c912b5c9cd9a02b44ce161df55266bd16c537362796f8bd8c004385f014d9f0ecb3037b2e5aa6964132f38d0a5ef520579cb4fe986ce76dc7352", 0xea}, {&(0x7f0000004540)="9c5215b032a94532d2d8d4ff219f7a59f570109b5b6d130cbe33b4ddaacef325d00b4044022b962230eba6cd203dbcc342b011cc255f59b1657617dd1a52d53b285412f2247cfef2795fca806ee82e91dfe58da4ea4790f3204a4af67642b8999d692ae24e326e8f1b724d1662ad89e1d695f3f3e4fc9ab560cf6637945bdda65eb42c01de718eae426ad3dd4fa3aa50e5feb0cdb570986ed2b15a9f", 0x9c}], 0x2, &(0x7f0000004640)=[@ip_retopts={{0x68, 0x0, 0x7, {[@cipso={0x86, 0x2a, 0x2, [{0x7, 0x5, "2dae48"}, {0x7, 0xb, "e0bbeb4917cd6b8588"}, {0x6, 0x7, "1269a1bc10"}, {0x6, 0x7, "60c81d1688"}, {0x5, 0x2}, {0x5, 0x4, 'Qt'}]}, @noop, @timestamp_prespec={0x44, 0x1c, 0x38, 0x3, 0xc, [{@rand_addr=0x64010101, 0x5}, {@multicast1, 0x8000}, {@loopback, 0x4}]}, @lsrr={0x83, 0xf, 0x97, [@multicast2, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfe}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xa15b}}], 0x98}}, {{&(0x7f0000004700)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000005a80)=[{&(0x7f0000004740)="0724604193c458ed582dfdf56dd9c2156f535900c7f3cc6a9554c4d218ba5054c6cdd97b4f407d50b0ab88569d3ed483090ce98747aa553c120b0c165d1cc29c826c9966", 0x44}, {&(0x7f00000047c0)="1d19502d42b13a0d37fcc51c32dde68e8290c98ff64f38706ef3a53cce75f1fc8580a51c64bbf3fbc58ea48f6e7576245ccccc11e5bd95e43de1c4aefde90d925ca483992a8d701f3beebfae8a7861746001d3508508a25c4db359f4f2bd", 0x5e}, {&(0x7f0000004840)="bb22c870dd1c869b65e2e7a7fe72539a4798a5722e71dbec5ee3", 0x1a}, {&(0x7f0000004880)="4c9faec3c131016e3e30d9a2aff896f1c5f313e90aaade86105ef5f9e16e595208fb12d244c04dfcb28b7998a402f3c5bbe0fdbad8082e21a68b84db8f61c24f710f060967effcdf580dea137d00d494ac77f589ab42ad28171ef4e748275821676d255f06655f2d85ce5c13f981b6261e34a220bceccc59c8d5f7b4f5b3b7a88467187fc21dd83cbc767402f9837681a6779a456d6220672e39ffb05b8f9da1c615", 0xa2}, {&(0x7f0000004940)="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", 0x1000}, {&(0x7f0000005940)}, {&(0x7f0000005980)="f6f233ef24594baf745450d3a11325084397d22b43375546fc3fda24510833d13082b10f317b71f4efb47d976d9141", 0x2f}, {&(0x7f00000059c0)="65f3c9f7c4da8062feb0f00f655b0dc3865a8230b081466a748446109bd5b534f39a76f043e56fba340d442081c67cb8c3ddc3b953f55fd75f361c14424935b36df2860f71d11b8361822d4249356e095d113f47e91b479e7571725f001f10f9c1aaea32884f18cc8f372d19c5c3f8e69173e8a098b571cb942fd9631b2536b1fc7c8feb22b704235aa3851a09bc70c86f247d8c9584469eedb964523fa20410f7dad8db31394802", 0xa8}], 0x8}}, {{&(0x7f0000005b00)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000005d00)=[{&(0x7f0000005b40)="0738cfe33e1e861a48ece5d60bbc3f5e869eb2a99caa68972fca9e19190c248f409083d029070c4e5b09a79bbf2f21cc28cbbd91afab4d41bec62e3c8fc6f234002a3fc11ec0f6e9ff8809b57ed76714da440aad9f95a6e051e62190ec35b105dabb53e7a5ebf38937fd678f454d1b24fc3f04930071358fa1", 0x79}, {&(0x7f0000005bc0)="f065c0a1e7380dc7bf2226fce97f91f50e060abb3b3d72b241a92ece3bf418ca323a6db43d2bd6b64a1e647cb10e9eae6565fc79f9f4489e62e32e3aa38c28dfedad4780228f55e10c1eff0a3c7bdf0307391760eefe082b9a7c018232b0c0c8ad33087bf2c111a8ca0531de5e72df5dd6fc5946caa352aff4952bfdaa8c8afac0d0471119f52f64bbb5b64add31afef1f0803a8787e7a881640e5f3235192f50b1732d64c7cf896aea3e42176f7e0a857ce70d21991749d1f8b5e6331feb1749272180044d3d25b0f4edaff6cdf5fa0265b0e3ced5350840c42f80ca7f66d18b9161c47e9d24269", 0xe8}, {&(0x7f0000005cc0)}], 0x3, &(0x7f0000005d40)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_retopts={{0xf4, 0x0, 0x7, {[@lsrr={0x83, 0x1b, 0x45, [@rand_addr=0x64010100, @remote, @dev={0xac, 0x14, 0x14, 0x26}, @dev={0xac, 0x14, 0x14, 0x33}, @remote, @broadcast]}, @cipso={0x86, 0x52, 0x2, [{0x1, 0x4, "ab04"}, {0x0, 0x4, "0f8e"}, {0x0, 0x2}, {0x0, 0x6, "0c91ce5f"}, {0x6, 0x2}, {0x0, 0x8, "1923d31c02b4"}, {0x2, 0x9, "ce1a3e9856fd99"}, {0x1, 0x11, "b1b5ef2537d0397e4e8cdc75ee54f1"}, {0x6, 0xd, "46f143f7bb3c16b2af13a5"}, {0x5, 0xb, "e814a05022492a7fae"}]}, @ra={0x94, 0x4}, @generic={0x83, 0xc, "f0a0e07e18c31c5630ef"}, @timestamp_prespec={0x44, 0x34, 0x64, 0x3, 0x5, [{@rand_addr=0x64010101, 0xe}, {@broadcast, 0xffff}, {@rand_addr=0x64010101, 0x5}, {@multicast1, 0x877}, {@remote, 0x60000000}, {@dev={0xac, 0x14, 0x14, 0xe}, 0xfffffffa}]}, @timestamp={0x44, 0x24, 0x84, 0x0, 0xc, [0x1, 0xd, 0x0, 0x0, 0xfffffffa, 0x6, 0x7fffffff, 0x1]}, @end, @noop, @lsrr={0x83, 0xb, 0x84, [@broadcast, @local]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @empty, @remote}}}], 0x160}}], 0x8, 0x44000) setsockopt$sock_int(r7, 0x1, 0x2e, &(0x7f0000000080)=0xffffffff, 0x4) write(r6, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) r12 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r12, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r12, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x2c, 0x1407, 0x1, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x80) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8314050000000000200012800800016f000100000008000700640101010000000100000000000000"], 0x40}}, 0x8040) 1.528869204s ago: executing program 1 (id=3782): socket$inet6(0xa, 0x5, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x25}, 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000e4ff000000000000000000630100000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 1.419914561s ago: executing program 4 (id=3783): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x3, 0x4, 0x4, 0x10001, 0x0, 0xffffffffffffffff, 0x200000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x5, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000004e800000000000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xfe, &(0x7f00000004c0)=""/254}, 0x80) (async, rerun: 64) r2 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0xfffffffd, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x1, 0x1d161108a18bb434, 0x4}}}}]}, 0x40}}, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[], 0x32600) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3801000010000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="20010000000000000000000000000000000000006c0000007f0000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000350000020001000000000000000000480003006465666c617465"], 0x138}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[], 0x138}}, 0x0) (async) r8 = socket$packet(0x11, 0x3, 0x300) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@newqdisc={0x80, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x1ff, 0x4, 0x0, 0x8, 0xfffffffd, 0x8}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x8}]}}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x3, 0xd6b9, 0x3, 0x2, 0x10, 0x7, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0x80}}, 0x0) (async) sendto$packet(r8, &(0x7f00000006c0)="44c33b69ebc9e05e9bdec0c288a8", 0xe, 0x835, &(0x7f0000000440)={0x11, 0xf4, r11, 0x1, 0x1, 0x6, @multicast}, 0x14) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r1, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x41, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x8a, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) (async, rerun: 32) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) (rerun: 32) r13 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_process_wait\x00', r12}, 0x18) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r13}, 0x8) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000220c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) (rerun: 64) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f0000000b80)={0x9, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @link_local}]}) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r14, 0x4) 1.337744386s ago: executing program 3 (id=3784): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'geneve1\x00', 0x0}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x8, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0x1}, {0x2}]}]}, {0x0, [0x2e, 0x51, 0x556c9cad818221ea, 0x2e, 0x5f, 0x61]}}, &(0x7f00000004c0)=""/226, 0x3c, 0xe2, 0x1}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x80, 0xb2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40800) (async) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r3, 0x29, 0x48, &(0x7f0000000040)=0x7fff, 0x4) r4 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r4, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="20000000200000009477367b84000000080000a916a7cd2ef30000002b34002001000000a3a40f2ba256c9ab14736ee7199049bfdf5ec5ffa8a06e2745dc50d35b62a5339203d55049ad9a0a08d944ec40a38388060000002c8f21333612314a987d6536aa070d09930e7a00dc3202431c2042b455f217cab2f8d5c797e89b10744fe947a9259e21da1b02bf8f6363d679798891b4deb3778e583ee9105cf7f059"], 0x20, 0x4855}, 0x24000052) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f00000006c0)={0x0, 0xfffffffffffffff4, "456826f93865922cebb615e516962ef485a75be28cf5000000000000d1d75bb9aefe53ee29bd8c71701666a682c1fef5fdbde37e5befb0380a3b30e2c945c12522484a690881008eaaa5d150853b2784bc41a8e965dc89bc60e2fb3ecd431ca8a2696694a4d1f4e4dbf1f1d04a4c3fc4fd22f3ca7173e9ea86efa96dcb5724646a6916e9043a14fbeb45d2a0d3efc927787f03e0ca8dc17fe158dc62a800e32678e44b1f377a58cdc1f5c71a52c7935e7d9c7ed759fc3ceaffe5303270025388eedcf972e5845b2659e4cd7aa3aab2a14f2a81255a68ab94b38b1b40ac94"}, &(0x7f0000000080)=0x98) 1.328710583s ago: executing program 2 (id=3785): socket$inet(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0xc850}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000880)=@ipv6_delrule={0x1c, 0x1e, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x1c}}, 0x0) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, 0x0, 0x0) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, 0x0, 0x20000000) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, 0x0, 0x2) ioctl$FS_IOC_GETFSUUID(0xffffffffffffffff, 0x80111500, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r5, 0x6, 0x100}, 0xc) r6 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r6, 0x29, 0x24, &(0x7f0000000000)=0x400, 0x4) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003000000060ec970012302c00fe8000000000000000000005000000aaff0200000000000000000000000000013a"], 0xfdef) syz_emit_ethernet(0x45, &(0x7f0000000480)={@local, @link_local, @val={@val={0x88a8, 0x3, 0x1, 0x2}, {0x8100, 0x0, 0x0, 0x3}}, {@arp={0x806, @generic={0x17, 0x10, 0x6, 0xf, 0x4, @remote, "8a0921a150dff3c6203cc9647d1b1b", @local, "1a0505ccdd51fd2ebff246f9"}}}}, 0x0) 1.226784936s ago: executing program 1 (id=3786): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f00000006c0)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x20061, @private0, 0x3}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}], 0x1, 0x48000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xf, 0x10, r1, 0x604ac000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4079, 0xfef, 0x0, 0x0}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f00000002c0)=0x40) shutdown(r0, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0400000004000000040000000500010000080000", @ANYRES32, @ANYBLOB="0000000000000000067d0e8860d50bc19879a750681e2dc900", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r2, 0xa2, &(0x7f00000003c0)={0x0, 0x0}}, 0x10) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001040)={r3}, 0xc) close(r4) getsockopt$bt_hci(r0, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0, @ANYBLOB="c30c424700defe8a11209f18000000280012800a00010076786c616e00000018000280140010180497e6c57309c780af7d0913d831a6b0e271023b99d403084b3b4f6d9a4dc7a7a2bc816f1c81301cfd0453733642765f5e560fb0b1881fb01341c8317262bf211f5e86877ee06223fb5f27ffb4b0e561ba2d9a96c2f8dff865bfdd4318211d1f793617ea9e0e01e3e505dc85a04609cde4f2d41babc21a16033a5d165e6acc44d6683543e0158a7465b5644e4edd5657334d9d91847095bdf42b677e2b28b49f8fa25a4fc0749f2cb693129238a860076b6d79a603e991d154e69ef120871cc295cf4fc204928601df6b7cc0408ba2100199bb17dbdf9f54ca77a081209215c86781c9abb63a0658cb1eeb9c36ec54805a0198a65236be96d54730", @ANYRES8=0x0, @ANYRES8=r5], 0x48}}, 0x400400c0) sendmmsg$alg(r5, &(0x7f00000000c0), 0x0, 0x80) r6 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYRES32], &(0x7f0000003ff6)='GPL\x00', 0x100005, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000004c0)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x5, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) syz_open_procfs$namespace(r9, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f00000000c0)=r9) sendmsg$alg(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000002380)="40c8c0f0ceda91fb68b72d3f94ad49d0662b3e7caa7326f78b1b4626a75d09dd71a2e1d76961f9eda35137dbbf2fe484125cefa82c06290ef9c047d33316cd69e9424665b8734bd5274689ccda4c624fb6469309ea841d26e62252ec369a934ecd2918c676a610dbc21b7a2a070dbfadf37e033cbe7809e034db0bb156a9c3d260a616adff065991709b215628bffa52fe5d228529ce30ab8075e67e44935905c259fecc46a6ea35d4e8ac0cf5b02030c31c6fe80fe8d0f4896c8b39f8bf7f16b154a9f47e0b7cb92cdc87189476d5ecd86b7df9b8286e015ee5f4fb4591f67b4e9fd089a87473b79aaaadb0", 0xec}], 0x1, &(0x7f00000025c0)=ANY=[@ANYBLOB="500000000000000017010000020000003a000000da592ffb86e1594f4241d5c3e2f5e658bcf2ce40d9a91bbbf218f309b6292aef4b15dcdcdc39abc4d53130b99e44ebda8b20fa47eb90c0f368e71e844437ba16e763ac50fc9c64178f0000180000000000000017010000040000004000000000000000180000000000000017010000030000000100000000000000180000000000000017010000030000000000000000000000180000000000000017010000030000000100000000000000180000000000000017010000030000000100000000000000180000000000000017010000030000000100000000000000180000000000000017010000030000000100000000000000180000000000000017010000030000000100000000000000"], 0x110, 0x20000001}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000780)={r7, @in6={{0xa, 0x4e24, 0x0, @mcast1, 0x10000}}, [0x4e1, 0xffffffffffffff7f, 0x8b, 0x800, 0x4, 0x9, 0x1ff, 0x6, 0x2339, 0x8, 0x3, 0x10, 0x7fff, 0x5bd, 0x8]}, &(0x7f0000000100)=0x100) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, 0x0, &(0x7f0000000040)) 1.225340574s ago: executing program 4 (id=3787): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000400), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) r6 = socket$alg(0x26, 0x5, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r8, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916d, 0x15}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x4000054) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x10800) socket(0x2d, 0x2, 0x0) sendfile(r6, r3, 0x0, 0x9) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002c00000018000180140002007665746830"], 0x2c}}, 0x0) 1.193885706s ago: executing program 3 (id=3788): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x9, 0x7, 0x8, 0x8, @dev={0xfe, 0x80, '\x00', 0x33}, @mcast2, 0x1, 0x7, 0x1, 0xfffc0000}}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000010000000100000000300000009000000000000110200000001000000002e00bfe7dbff087cfed0b3c709a734895bfa7be9a55f50baa150184637828a9022f48a56d505acaa728d6566cc24e5a1d869c1726ac88962527c10ec9f24a1c8847b1befa9bbbcb142d72ae8833ab143174a4bfee30714ebb9816fb008777aaf042f324f84e902a9232c42a327de241c54b66f5594c51324258511bfd1f219e4e518b96bd3674f0f1544c160d22b95f1cddaa2e8c59b4dde7784daaa63e24523"], &(0x7f00000001c0)=""/118, 0x2b, 0x76, 0x0, 0x4}, 0x28) r2 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket(0x2b, 0x801, 0x1) mmap(&(0x7f000087d000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f000087cf79)={@in6={{0xa, 0x0, 0x0, @ipv4}}, 0x0, 0x0, 0x0, 0x0, "0000000000000099010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000be4f28860000000000000000ffe300"}, 0xd8) sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="450400000000000000000a00"], 0x20}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x4, 0x6, 0x1, 0x40000, 0x1, 0x39a, '\x00', r0, r1, 0x4, 0x0, 0x5, 0xf}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000006000000000000000000000b04000000000000000000000d04000000000000000000000200000000040000000000000f030000000000000061"], 0x0, 0x4e}, 0x28) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r5}, 0x4) r6 = socket$rds(0x15, 0x5, 0x0) sendmsg$sock(r6, &(0x7f0000001240)={&(0x7f0000000c40)=@in6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x0) mmap(&(0x7f0000b02000/0x2000)=nil, 0x2000, 0x1000002, 0x28011, r5, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x9, 0x7, 0x8, 0x8, @dev={0xfe, 0x80, '\x00', 0x33}, @mcast2, 0x1, 0x7, 0x1, 0xfffc0000}}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000010000000100000000300000009000000000000110200000001000000002e00bfe7dbff087cfed0b3c709a734895bfa7be9a55f50baa150184637828a9022f48a56d505acaa728d6566cc24e5a1d869c1726ac88962527c10ec9f24a1c8847b1befa9bbbcb142d72ae8833ab143174a4bfee30714ebb9816fb008777aaf042f324f84e902a9232c42a327de241c54b66f5594c51324258511bfd1f219e4e518b96bd3674f0f1544c160d22b95f1cddaa2e8c59b4dde7784daaa63e24523"], &(0x7f00000001c0)=""/118, 0x2b, 0x76, 0x0, 0x4}, 0x28) (async) socket(0x10, 0x2, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) socket(0x2b, 0x801, 0x1) (async) mmap(&(0x7f000087d000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) (async) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f000087cf79)={@in6={{0xa, 0x0, 0x0, @ipv4}}, 0x0, 0x0, 0x0, 0x0, "0000000000000099010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000be4f28860000000000000000ffe300"}, 0xd8) (async) sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="450400000000000000000a00"], 0x20}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x4, 0x6, 0x1, 0x40000, 0x1, 0x39a, '\x00', r0, r1, 0x4, 0x0, 0x5, 0xf}, 0x50) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000006000000000000000000000b04000000000000000000000d04000000000000000000000200000000040000000000000f030000000000000061"], 0x0, 0x4e}, 0x28) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r5}, 0x4) (async) socket$rds(0x15, 0x5, 0x0) (async) sendmsg$sock(r6, &(0x7f0000001240)={&(0x7f0000000c40)=@in6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x0) (async) mmap(&(0x7f0000b02000/0x2000)=nil, 0x2000, 0x1000002, 0x28011, r5, 0x0) (async) 1.067255689s ago: executing program 2 (id=3789): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0xff6d) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0xffffffffffffffff, 0x1}, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0xf}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0xf}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x202, @private2={0xfc, 0x2, '\x00', 0xff}, 0x4ac2d78a}}, 0x0, 0x0, 0x34, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) ioctl$int_in(r1, 0x5421, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f00000002c0)={@val={0x0, 0xf7}, @val={0x2, 0x1, 0x4, 0x81, 0x9}, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @val={@val={0x88a8, 0x2}, {0x8100, 0x1, 0x1, 0x3}}, {@canfd={0xd, {{0x4, 0x1, 0x1}, 0x18, 0x1, 0x0, 0x0, "9920c0dc2c2ea171e384dd74360a53f909f2e2595886de72dfa5d6c4963a6e3623c24662c396d7440d9f702e3c6e7826b5a6783becdf58adef27dc0df23490a5"}}}}}, 0x6c) writev(r0, &(0x7f0000000040), 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010000108000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="b40200000000000008001b"], 0x28}}, 0x0) 948.162187ms ago: executing program 4 (id=3790): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x20, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x2}}}}]}]}, 0x48}}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000003b0007a737e41bcac743098701"], 0x2c}}, 0xc000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000007000000000000000100000d00000000030000000200000000000000000000020000000000000000013000"], 0x0, 0x3f}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x14, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r5, 0x0, &(0x7f0000000500)=""/184}, 0x20) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r7, &(0x7f0000000780)={0xa, 0x0, 0xfffffffc, @mcast2, 0x2}, 0xa) setsockopt$inet_int(r6, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r8, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) sendto$inet(r8, &(0x7f0000000040)='@', 0x1, 0x20044890, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) connect$inet(r6, &(0x7f0000000400)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 947.333434ms ago: executing program 0 (id=3791): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000800)='br_fdb_add\x00', r1, 0x0, 0x8ca}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x1}], 0x1, 0x40800) r6 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r6, 0x84, 0x11, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8804) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) syz_emit_ethernet(0x82, &(0x7f0000000100)={@multicast, @empty, @val={@val={0x88a8, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x86ddffff}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}}}}}}}}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) recvmmsg(r8, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000d40)=""/4084, 0xff4}, {&(0x7f00000002c0)=""/136, 0x88}, {&(0x7f0000000380)=""/174, 0xae}], 0x3}, 0x8000}], 0x1, 0x12002, 0x0) 883.900849ms ago: executing program 3 (id=3792): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002000)={0x28, r2, 0x421, 0x4, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x80}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r3 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0xd1, &(0x7f0000000040)=0x20f, 0x4) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000140)={0x0, 0x1}, 0xc) 267.253597ms ago: executing program 1 (id=3793): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0000001e0a01020000000000000000070000000900020073797a31000000002900010073797a3000000000100003800c00008004000a8004000180140000001000010000000000000000000084000ae036"], 0xc0}}, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(r0, 0x1) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 64.90175ms ago: executing program 1 (id=3794): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f000000c900)={0x1f, @none}, 0x8) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x9}]}, 0x3c}}, 0x0) 0s ago: executing program 4 (id=3795): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d04000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a23000400180004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYRES64], 0x48}}, 0x400400c0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) kernel console output (not intermixed with test programs): 968318][T12673] __nla_validate_parse: 4 callbacks suppressed [ 263.968342][T12673] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1818'. [ 264.028843][T12673] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1818'. [ 264.123734][T12680] vlan0: entered promiscuous mode [ 264.203987][T12682] tipc: Enabled bearer , priority 0 [ 264.217194][T12682] syzkaller0: entered promiscuous mode [ 264.224615][T12682] syzkaller0: entered allmulticast mode [ 264.283567][T12682] tipc: Resetting bearer [ 264.325730][T12682] netlink: 71 bytes leftover after parsing attributes in process `syz.4.1822'. [ 264.355142][T12681] tipc: Resetting bearer [ 264.382326][T12681] tipc: Disabling bearer [ 264.392079][T12688] netlink: 'syz.0.1824': attribute type 1 has an invalid length. [ 264.486704][T12694] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1825'. [ 264.519043][T12694] team0: No ports can be present during mode change [ 264.625080][T12700] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1827'. [ 264.670345][T12700] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1827'. [ 264.724764][T12700] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1827'. [ 264.956330][T12714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1832'. [ 264.988052][T12720] tipc: Enabled bearer , priority 10 [ 264.995589][T12719] IPVS: Error connecting to the multicast addr [ 265.575824][T12753] netlink: 'syz.4.1845': attribute type 64 has an invalid length. [ 265.585096][T12753] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1845'. [ 265.628299][T12753] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1845'. [ 265.638861][T12753] netlink: 'syz.4.1845': attribute type 9 has an invalid length. [ 266.081319][T12774] netlink: 'syz.2.1851': attribute type 9 has an invalid length. [ 266.166601][T12770] hsr_slave_0 (unregistering): left promiscuous mode [ 267.144812][T12819] bond2: entered promiscuous mode [ 267.150304][T12819] bond2: entered allmulticast mode [ 267.156052][T12819] 8021q: adding VLAN 0 to HW filter on device bond2 [ 267.454764][T12819] bond2 (unregistering): Released all slaves [ 267.832782][T12857] tipc: Enabled bearer , priority 0 [ 267.851828][T12856] tipc: Enabling of bearer rejected, already enabled [ 267.888521][T12857] syzkaller0: entered promiscuous mode [ 267.917649][T12857] syzkaller0: entered allmulticast mode [ 267.975370][T12856] tipc: Resetting bearer [ 267.995526][T12859] macsec0: left allmulticast mode [ 268.017204][T12855] tipc: Resetting bearer [ 268.065484][T12855] tipc: Disabling bearer [ 268.165604][T12843] hsr0 speed is unknown, defaulting to 1000 [ 268.316293][T12868] lo speed is unknown, defaulting to 1000 [ 268.363857][T12868] lo speed is unknown, defaulting to 1000 [ 268.453417][T12868] lo speed is unknown, defaulting to 1000 [ 268.721947][T12881] delete_channel: no stack [ 269.098233][T12889] sctp: [Deprecated]: syz.4.1883 (pid 12889) Use of int in maxseg socket option. [ 269.098233][T12889] Use struct sctp_assoc_value instead [ 269.204106][T12868] infiniband syz0: set active [ 269.209070][ T9570] lo speed is unknown, defaulting to 1000 [ 269.215658][T12868] infiniband syz0: added lo [ 269.224178][T12868] syz0: rxe_create_cq: returned err = -12 [ 269.231807][T12868] infiniband syz0: Couldn't create ib_mad CQ [ 269.240225][T12868] infiniband syz0: Couldn't open port 1 [ 269.316586][T12896] netlink: 'syz.0.1886': attribute type 23 has an invalid length. [ 269.325350][T12868] RDS/IB: syz0: added [ 269.352754][T12868] smc: adding ib device syz0 with port count 1 [ 269.375472][T12868] smc: ib device syz0 port 1 has pnetid [ 269.394313][ T9570] lo speed is unknown, defaulting to 1000 [ 269.407903][T12868] lo speed is unknown, defaulting to 1000 [ 269.469696][T12909] __nla_validate_parse: 6 callbacks suppressed [ 269.469720][T12909] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1887'. [ 269.509955][T12896] net_ratelimit: 56 callbacks suppressed [ 269.509978][T12896] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.822546][T12924] sctp: [Deprecated]: syz.0.1890 (pid 12924) Use of int in max_burst socket option. [ 269.822546][T12924] Use struct sctp_assoc_value instead [ 270.444263][T12947] netlink: 'syz.3.1898': attribute type 12 has an invalid length. [ 270.493330][T12947] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1898'. [ 270.576281][T12868] lo speed is unknown, defaulting to 1000 [ 270.948919][T12868] lo speed is unknown, defaulting to 1000 [ 271.078877][T12975] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1902'. [ 271.128756][T12974] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1904'. [ 271.176838][T12974] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1904'. [ 271.384718][T12984] bond4: entered promiscuous mode [ 271.392484][T12984] bond4: entered allmulticast mode [ 271.405804][T12984] 8021q: adding VLAN 0 to HW filter on device bond4 [ 271.585503][T12984] bond4 (unregistering): Released all slaves [ 271.623586][T12868] lo speed is unknown, defaulting to 1000 [ 271.640057][T12988] syzkaller0: entered promiscuous mode [ 271.649843][T12988] syzkaller0: entered allmulticast mode [ 271.894243][T12974] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 271.931931][T12997] geneve2: entered promiscuous mode [ 271.937391][T12997] geneve2: entered allmulticast mode [ 272.057135][T11916] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.110910][T11907] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.295523][T11907] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.302389][T13014] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1912'. [ 272.326073][T13015] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1911'. [ 272.437670][T12868] lo speed is unknown, defaulting to 1000 [ 273.290938][T13046] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1920'. [ 273.342563][T13048] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1919'. [ 273.942441][T12997] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.158841][T12997] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.258347][T13086] netlink: 'syz.0.1930': attribute type 6 has an invalid length. [ 274.338109][T12997] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.532398][T13098] netlink: 'syz.1.1933': attribute type 21 has an invalid length. [ 274.577785][T11912] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.627673][T11912] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.693179][T11912] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.762698][T11901] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.793885][T13105] veth0_to_team: entered promiscuous mode [ 274.966869][T13117] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1936'. [ 275.572954][T13150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1947'. [ 275.947821][T13171] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1952'. [ 276.056921][T13176] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1953'. [ 276.433594][T13195] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1959'. [ 276.443348][T13195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1959'. [ 277.001773][T13212] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1966'. [ 277.223819][T13226] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1967'. [ 277.671348][T13243] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1973'. [ 277.721377][T13243] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1973'. [ 277.907999][T13248] netlink: 'syz.2.1975': attribute type 28 has an invalid length. [ 277.921477][T13248] netlink: 'syz.2.1975': attribute type 3 has an invalid length. [ 278.172391][T13254] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.215523][T13261] gretap0: entered promiscuous mode [ 278.358586][T13268] netlink: 'syz.4.1983': attribute type 21 has an invalid length. [ 278.384352][T13268] nbd: couldn't find a device at index -373156329 [ 278.615744][T13279] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 278.695830][T13280] netlink: 'syz.0.1989': attribute type 75 has an invalid length. [ 279.154470][T13309] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 280.217016][T13359] netlink: 'syz.2.2012': attribute type 6 has an invalid length. [ 280.455871][T13367] __nla_validate_parse: 6 callbacks suppressed [ 280.455936][T13367] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2015'. [ 280.651093][T13380] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2017'. [ 280.796051][T13384] netlink: 64985 bytes leftover after parsing attributes in process `syz.0.2020'. [ 281.169577][ T5159] Bluetooth: hci1: command 0x0406 tx timeout [ 281.252616][T13419] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 281.642121][T13439] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2037'. [ 281.686945][T13441] netlink: 'syz.4.2038': attribute type 10 has an invalid length. [ 281.702593][T13441] bridge_slave_1: left allmulticast mode [ 281.735056][T13441] bridge_slave_1: entered allmulticast mode [ 281.758155][T13441] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 281.819775][T13449] tipc: Enabled bearer , priority 0 [ 281.868237][T13449] tipc: Resetting bearer [ 281.903008][T13457] netlink: 'syz.2.2044': attribute type 3 has an invalid length. [ 281.912227][T13447] tipc: Disabling bearer [ 282.454319][T13484] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2053'. [ 282.630664][T13484] netlink: 'syz.2.2053': attribute type 1 has an invalid length. [ 282.662310][T13484] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2053'. [ 282.681222][T13484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2053'. [ 282.824621][T13496] veth0_to_team: left promiscuous mode [ 282.847687][T13496] hsr0: left promiscuous mode [ 282.859345][T13496] hsr0: entered allmulticast mode [ 282.885085][T13496] gre3: entered allmulticast mode [ 282.913363][T13496] bond3: entered allmulticast mode [ 282.918563][T13496] bridge4: entered allmulticast mode [ 282.955297][T13496] macsec2: entered allmulticast mode [ 283.135041][T13515] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2064'. [ 283.294098][T13530] netlink: 'syz.4.2069': attribute type 10 has an invalid length. [ 283.341131][ T5159] Bluetooth: hci0: command tx timeout [ 283.451675][T13542] nbd: must specify at least one socket [ 283.455678][T13543] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2071'. [ 283.487999][T13545] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2073'. [ 283.723790][T13563] veth0_to_hsr: left allmulticast mode [ 283.805273][T13566] netlink: 'syz.2.2081': attribute type 1 has an invalid length. [ 283.822856][T13566] netlink: 'syz.2.2081': attribute type 1 has an invalid length. [ 283.890620][T13573] tipc: Enabled bearer , priority 0 [ 283.908993][T13573] syzkaller0: entered promiscuous mode [ 283.924230][T13573] syzkaller0: entered allmulticast mode [ 283.959156][T13573] tipc: Resetting bearer [ 283.975471][T13570] tipc: Resetting bearer [ 283.996179][T13570] tipc: Disabling bearer [ 284.040595][T13581] veth1_macvtap: left promiscuous mode [ 284.047613][T13581] macsec0: entered allmulticast mode [ 284.105665][ T5159] block nbd1: Receive control failed (result -32) [ 284.426989][T13599] veth0_virt_wifi: renamed from veth0_vlan [ 284.443371][T13602] netem: incorrect ge model size [ 284.457376][T13602] netem: change failed [ 284.710764][T13621] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 285.205408][T13652] veth0_to_team: entered promiscuous mode [ 285.865837][T13682] netlink: 'syz.1.2114': attribute type 10 has an invalid length. [ 285.882221][T13682] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 288.026411][T13720] __nla_validate_parse: 8 callbacks suppressed [ 288.026435][T13720] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2121'. [ 288.105061][T13722] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2122'. [ 288.263041][T13733] netlink: 'syz.2.2126': attribute type 1 has an invalid length. [ 288.281961][T13733] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2126'. [ 288.493076][T13722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2122'. [ 288.581054][T13743] netlink: 'syz.1.2122': attribute type 1 has an invalid length. [ 288.590110][T13743] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2122'. [ 289.103549][T13782] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2135'. [ 289.756881][T13814] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2147'. [ 289.818805][T13820] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2149'. [ 289.850750][T13821] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2148'. [ 289.871373][T13814] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2147'. [ 289.881643][T13819] tipc: Enabled bearer , priority 0 [ 289.894100][T13819] syzkaller0: entered promiscuous mode [ 289.915211][T13819] syzkaller0: entered allmulticast mode [ 289.949072][T13817] tipc: Resetting bearer [ 290.022268][T13817] tipc: Disabling bearer [ 290.147851][T13828] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 290.792094][T13867] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 290.840097][T13867] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 290.969131][ T9569] hid-generic 0005:0458:0009.0002: item fetching failed at offset 0/1 [ 290.980497][T13877] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 290.993825][ T9569] hid-generic 0005:0458:0009.0002: probe with driver hid-generic failed with error -22 [ 291.502315][T13905] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 292.197813][T13946] netlink: 'syz.1.2180': attribute type 11 has an invalid length. [ 292.249386][T13946] netlink: 'syz.1.2180': attribute type 11 has an invalid length. [ 292.265728][T13953] unsupported nla_type 52263 [ 292.271499][T13946] netlink: 'syz.1.2180': attribute type 11 has an invalid length. [ 292.289398][T13946] netlink: 'syz.1.2180': attribute type 11 has an invalid length. [ 292.469919][T13959] netlink: 'syz.3.2184': attribute type 1 has an invalid length. [ 292.478058][T13959] netlink: 'syz.3.2184': attribute type 11 has an invalid length. [ 292.572130][T13968] Bluetooth: MGMT ver 1.23 [ 293.053268][T13986] netlink: 'syz.0.2194': attribute type 33 has an invalid length. [ 293.083424][T13986] __nla_validate_parse: 41 callbacks suppressed [ 293.083446][T13986] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2194'. [ 293.109599][T13989] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2194'. [ 293.133082][T13954] hsr0 speed is unknown, defaulting to 1000 [ 293.140833][T13989] netlink: 'syz.0.2194': attribute type 33 has an invalid length. [ 293.165069][T13954] lo speed is unknown, defaulting to 1000 [ 293.167271][T13989] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2194'. [ 293.329885][T13995] netlink: 'syz.3.2196': attribute type 21 has an invalid length. [ 293.355957][T13984] netlink: 'syz.1.2192': attribute type 10 has an invalid length. [ 293.377238][T13984] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 293.408241][T13996] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2196'. [ 293.434222][T13996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2196'. [ 293.463292][T13995] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 293.776961][T13975] hsr0 speed is unknown, defaulting to 1000 [ 293.855328][T13975] lo speed is unknown, defaulting to 1000 [ 293.875504][T14016] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3) [ 293.921218][T14017] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3) [ 294.616566][ T5159] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 294.626146][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 294.695146][T14046] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 295.468916][T14067] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2211'. [ 295.582838][T14069] bond5: (slave vcan0): The slave device specified does not support setting the MAC address [ 295.597913][T14069] bond5: (slave vcan0): Error -95 calling set_mac_address [ 295.852797][T14077] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2212'. [ 295.989104][T14080] delete_channel: no stack [ 296.172104][T14093] tipc: Enabling of bearer rejected, failed to enable media [ 296.413199][T14105] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 296.605600][T14134] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 296.685048][T14138] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2229'. [ 296.782836][T14140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.804899][T14140] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2230'. [ 296.816958][T14140] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2230'. [ 297.603480][T14173] tipc: Enabled bearer , priority 24 [ 297.707281][T14176] bridge4: entered promiscuous mode [ 297.714708][T14176] bridge4: entered allmulticast mode [ 298.030123][T14171] hsr0 speed is unknown, defaulting to 1000 [ 298.038310][T14171] lo speed is unknown, defaulting to 1000 [ 298.912790][T14228] bond2: entered allmulticast mode [ 298.927749][T14228] 8021q: adding VLAN 0 to HW filter on device bond2 [ 298.938886][T14228] bridge0: port 2(bond2) entered blocking state [ 298.951766][T14228] bridge0: port 2(bond2) entered disabled state [ 298.963682][T14228] bond2: entered promiscuous mode [ 299.171727][T14239] validate_nla: 2 callbacks suppressed [ 299.171747][T14239] netlink: 'syz.3.2253': attribute type 2 has an invalid length. [ 299.190992][T14239] __nla_validate_parse: 5 callbacks suppressed [ 299.191015][T14239] netlink: 1184 bytes leftover after parsing attributes in process `syz.3.2253'. [ 299.705613][T14258] bond0: (slave bridge0): Releasing backup interface [ 299.792510][T14258] bond0: (slave bridge_slave_1): Releasing backup interface [ 299.883122][T14271] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2262'. [ 299.883915][T14265] team0: Mode changed to "activebackup" [ 299.903036][T14271] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2262'. [ 299.952892][T14258] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2260'. [ 299.965351][T14258] tipc: Enabled bearer , priority 0 [ 300.317442][T14293] netlink: 'syz.1.2270': attribute type 1 has an invalid length. [ 300.335465][T14294] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2270'. [ 300.345145][T14293] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2270'. [ 300.465897][T14297] tipc: Enabled bearer , priority 0 [ 300.553479][T14297] syzkaller0: entered promiscuous mode [ 300.559950][T14297] syzkaller0: entered allmulticast mode [ 300.583759][T14296] tipc: Resetting bearer [ 301.051752][T14319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2276'. [ 301.089333][ T5915] tipc: Node number set to 2075253692 [ 302.580983][T14296] tipc: Disabling bearer [ 302.926067][T14347] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2283'. [ 303.164874][T14360] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2286'. [ 303.183845][T14360] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2286'. [ 304.255521][T14433] __nla_validate_parse: 3 callbacks suppressed [ 304.255545][T14433] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2309'. [ 304.297299][T14435] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2310'. [ 304.512972][T14450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2311'. [ 304.972205][T14473] syzkaller0: entered promiscuous mode [ 305.002726][T14473] syzkaller0: entered allmulticast mode [ 305.146528][T14486] netlink: 1036 bytes leftover after parsing attributes in process `syz.4.2326'. [ 305.156978][T14486] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 305.268728][T14492] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2328'. [ 305.290138][T14491] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2328'. [ 305.566255][T14510] netlink: 'syz.3.2335': attribute type 1 has an invalid length. [ 305.589735][T14510] netlink: 212 bytes leftover after parsing attributes in process `syz.3.2335'. [ 305.600455][T14510] netlink: 'syz.3.2335': attribute type 1 has an invalid length. [ 305.643630][T14506] pim6reg1: entered promiscuous mode [ 305.650733][T14506] pim6reg1: entered allmulticast mode [ 305.686807][T14516] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2338'. [ 305.935043][T14528] netlink: set zone limit has 8 unknown bytes [ 306.128018][T14543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2344'. [ 306.160866][T14547] netlink: 'syz.2.2345': attribute type 64 has an invalid length. [ 306.174703][T14547] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2345'. [ 306.623793][T14575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.718777][T14581] IPVS: length: 4096 != 24 [ 306.829863][T14586] netlink: 'syz.0.2358': attribute type 11 has an invalid length. [ 306.942252][T14592] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 307.030752][T14598] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 307.347290][T14618] bridge_slave_0: invalid flags given to default FDB implementation [ 307.683869][T14635] bond6: entered promiscuous mode [ 307.690363][T14635] bond6: entered allmulticast mode [ 307.696017][T14635] 8021q: adding VLAN 0 to HW filter on device bond6 [ 308.347659][T14677] netlink: 'syz.2.2386': attribute type 2 has an invalid length. [ 308.367121][T14677] netlink: 'syz.2.2386': attribute type 2 has an invalid length. [ 308.386460][T14677] netlink: 'syz.2.2386': attribute type 1 has an invalid length. [ 354.957505][T14714] blkio.reset_stats is deprecated [ 354.966709][T14717] __nla_validate_parse: 6 callbacks suppressed [ 354.966730][T14717] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2392'. [ 355.182722][T14727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2400'. [ 355.193114][T14729] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2401'. [ 355.211313][T14727] openvswitch: netlink: nsh attribute has 16 unknown bytes. [ 355.252563][T14727] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 355.590671][T14749] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 355.604688][T14750] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2409'. [ 355.639681][T14750] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2409'. [ 356.020947][T14775] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2423'. [ 356.326810][T14793] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2432'. [ 356.541648][T14809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2438'. [ 356.704399][T14814] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2442'. [ 356.790796][T14814] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2442'. [ 357.386413][T14858] veth1: left allmulticast mode [ 357.883471][T14888] netlink: 'syz.1.2473': attribute type 4 has an invalid length. [ 357.906583][T14888] netlink: 'syz.1.2473': attribute type 4 has an invalid length. [ 358.080820][T14893] nbd2: detected capacity change from 0 to 63 [ 358.109449][T14900] block nbd2: NBD_DISCONNECT [ 358.130813][T14900] block nbd2: Disconnected due to user request. [ 358.168021][T14900] block nbd2: shutting down sockets [ 358.394574][T14917] netlink: 'syz.2.2480': attribute type 12 has an invalid length. [ 359.365266][T14960] netlink: 'syz.0.2494': attribute type 1 has an invalid length. [ 360.117720][T15004] netlink: 'syz.0.2505': attribute type 4 has an invalid length. [ 360.128272][T15004] __nla_validate_parse: 4 callbacks suppressed [ 360.128296][T15004] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2505'. [ 360.404604][T15012] Can't find ip_set type  [ 360.594117][T15024] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2511'. [ 360.716993][T15033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2514'. [ 360.883069][T15033] hsr_slave_1 (unregistering): left promiscuous mode [ 361.259819][T15062] netlink: 'syz.1.2521': attribute type 1 has an invalid length. [ 361.283607][T15062] nbd: error processing sock list [ 361.298986][T15062] block nbd2: shutting down sockets [ 361.490010][T15075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2525'. [ 361.631065][T15082] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2527'. [ 361.645045][T15082] netlink: zone id is out of range [ 361.653232][T15082] netlink: zone id is out of range [ 361.658766][T15082] netlink: get zone limit has 8 unknown bytes [ 361.755014][T15085] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2528'. [ 361.773980][T15085] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2528'. [ 361.789290][T15086] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2528'. [ 361.793686][T15087] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2528'. [ 362.441458][T15108] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2535'. [ 362.518841][T15108] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 362.882547][T15135] syzkaller1: entered promiscuous mode [ 362.894944][T15137] netlink: 'syz.4.2540': attribute type 19 has an invalid length. [ 362.911599][T15135] syzkaller1: entered allmulticast mode [ 363.157057][T15150] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 363.545316][T15178] netlink: 'syz.3.2552': attribute type 1 has an invalid length. [ 363.574874][T15183] netlink: 'syz.3.2552': attribute type 1 has an invalid length. [ 363.587144][T15178] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 364.705365][T15263] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 365.077295][T15287] netlink: 'syz.0.2579': attribute type 1 has an invalid length. [ 365.097403][T15287] netlink: 'syz.0.2579': attribute type 1 has an invalid length. [ 365.340763][T15295] netlink: 'syz.0.2581': attribute type 7 has an invalid length. [ 365.465291][T15303] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 365.862484][T15325] __nla_validate_parse: 4 callbacks suppressed [ 365.862505][T15325] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2590'. [ 366.657302][T15375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2601'. [ 366.678267][T15375] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 366.690788][T15375] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.128612][T15404] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2608'. [ 367.653891][T15431] batadv2: entered allmulticast mode [ 367.907530][T15442] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2617'. [ 368.322187][T15451] syz.0.2620: vmalloc error: size 6000640, failed to allocated page array size 11720, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 368.359525][T15451] CPU: 1 UID: 0 PID: 15451 Comm: syz.0.2620 Not tainted 6.16.0-syzkaller-06589-g010510128873 #0 PREEMPT(full) [ 368.359558][T15451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 368.359580][T15451] Call Trace: [ 368.359589][T15451] [ 368.359603][T15451] dump_stack_lvl+0x189/0x250 [ 368.359637][T15451] ? __pfx_dump_stack_lvl+0x10/0x10 [ 368.359661][T15451] ? __pfx__printk+0x10/0x10 [ 368.359689][T15451] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 368.359714][T15451] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 368.359742][T15451] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 368.359770][T15451] warn_alloc+0x214/0x310 [ 368.359800][T15451] ? __pfx_warn_alloc+0x10/0x10 [ 368.359833][T15451] ? __get_vm_area_node+0x28f/0x300 [ 368.359868][T15451] ? fq_pie_init+0x430/0x840 [ 368.359900][T15451] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 368.359956][T15451] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 368.359984][T15451] ? rcu_is_watching+0x15/0xb0 [ 368.360026][T15451] ? fq_pie_init+0x430/0x840 [ 368.360052][T15451] ? fq_pie_init+0x430/0x840 [ 368.360076][T15451] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 368.360111][T15451] ? fq_pie_init+0x430/0x840 [ 368.360138][T15451] ? tcf_block_get+0x67/0xa0 [ 368.360167][T15451] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 368.360204][T15451] fq_pie_init+0x430/0x840 [ 368.360235][T15451] ? __pfx_fq_pie_init+0x10/0x10 [ 368.360262][T15451] qdisc_create+0x7ac/0xea0 [ 368.360300][T15451] tc_modify_qdisc+0x1538/0x20e0 [ 368.360343][T15451] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 368.360404][T15451] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 368.360430][T15451] rtnetlink_rcv_msg+0x77c/0xb70 [ 368.360462][T15451] ? __lock_acquire+0xab9/0xd20 [ 368.360495][T15451] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 368.360527][T15451] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 368.360579][T15451] netlink_rcv_skb+0x208/0x470 [ 368.360608][T15451] ? __lock_acquire+0xab9/0xd20 [ 368.360638][T15451] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 368.360672][T15451] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 368.360718][T15451] ? netlink_deliver_tap+0x2e/0x1b0 [ 368.360760][T15451] netlink_unicast+0x82c/0x9e0 [ 368.360799][T15451] ? __pfx_netlink_unicast+0x10/0x10 [ 368.360831][T15451] ? netlink_sendmsg+0x642/0xb30 [ 368.360861][T15451] ? skb_put+0x11b/0x210 [ 368.360886][T15451] netlink_sendmsg+0x805/0xb30 [ 368.360930][T15451] ? __pfx_netlink_sendmsg+0x10/0x10 [ 368.360967][T15451] ? aa_sock_msg_perm+0x94/0x160 [ 368.360999][T15451] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 368.361031][T15451] ? __pfx_netlink_sendmsg+0x10/0x10 [ 368.361065][T15451] __sock_sendmsg+0x21c/0x270 [ 368.361098][T15451] ____sys_sendmsg+0x505/0x830 [ 368.361129][T15451] ? __pfx_____sys_sendmsg+0x10/0x10 [ 368.361163][T15451] ? import_iovec+0x74/0xa0 [ 368.361198][T15451] ___sys_sendmsg+0x21f/0x2a0 [ 368.361224][T15451] ? __pfx____sys_sendmsg+0x10/0x10 [ 368.361289][T15451] ? __fget_files+0x2a/0x420 [ 368.361310][T15451] ? __fget_files+0x3a0/0x420 [ 368.361343][T15451] __x64_sys_sendmsg+0x19b/0x260 [ 368.361370][T15451] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 368.361406][T15451] ? rcu_is_watching+0x15/0xb0 [ 368.361445][T15451] ? do_syscall_64+0xbe/0x3b0 [ 368.361483][T15451] do_syscall_64+0xfa/0x3b0 [ 368.361513][T15451] ? lockdep_hardirqs_on+0x9c/0x150 [ 368.361544][T15451] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.361565][T15451] ? clear_bhb_loop+0x60/0xb0 [ 368.361592][T15451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.361613][T15451] RIP: 0033:0x7fed49f8eb69 [ 368.361635][T15451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 368.361653][T15451] RSP: 002b:00007fed4add6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 368.361680][T15451] RAX: ffffffffffffffda RBX: 00007fed4a1b5fa0 RCX: 00007fed49f8eb69 [ 368.361695][T15451] RDX: 000000002000400c RSI: 0000200000000300 RDI: 0000000000000005 [ 368.361709][T15451] RBP: 00007fed4a011df1 R08: 0000000000000000 R09: 0000000000000000 [ 368.361722][T15451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 368.361735][T15451] R13: 0000000000000000 R14: 00007fed4a1b5fa0 R15: 00007ffd38050df8 [ 368.361769][T15451] [ 368.361786][T15451] Mem-Info: [ 368.843665][T15451] active_anon:4676 inactive_anon:0 isolated_anon:0 [ 368.843665][T15451] active_file:1549 inactive_file:39934 isolated_file:0 [ 368.843665][T15451] unevictable:768 dirty:123 writeback:0 [ 368.843665][T15451] slab_reclaimable:11979 slab_unreclaimable:111946 [ 368.843665][T15451] mapped:30173 shmem:1386 pagetables:1236 [ 368.843665][T15451] sec_pagetables:0 bounce:0 [ 368.843665][T15451] kernel_misc_reclaimable:0 [ 368.843665][T15451] free:1293142 free_pcp:38134 free_cma:0 [ 368.932022][T15451] Node 0 active_anon:18604kB inactive_anon:0kB active_file:6196kB inactive_file:159536kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118592kB dirty:492kB writeback:0kB shmem:4008kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13504kB pagetables:4516kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 368.985816][T15451] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 369.071148][T15451] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 369.102260][T15489] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2626'. [ 369.148939][T15451] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 369.164163][T15451] Node 0 DMA32 free:1261032kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18456kB inactive_anon:0kB active_file:6196kB inactive_file:157712kB unevictable:1536kB writepending:492kB present:3129332kB managed:2560292kB mlocked:0kB bounce:0kB free_pcp:134148kB local_pcp:105312kB free_cma:0kB [ 369.202481][T15490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2626'. [ 369.218547][T15451] lowmem_reserve[]: 0 0 1 1 1 [ 369.226127][T15451] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1824kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:4kB free_cma:0kB [ 369.258953][T15495] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2626'. [ 369.266861][T15451] lowmem_reserve[]: 0 0 0 0 0 [ 369.274240][T15451] Node 1 Normal free:3896160kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:19552kB local_pcp:9536kB free_cma:0kB [ 369.311322][T15451] lowmem_reserve[]: 0 0 0 0 0 [ 369.316470][T15451] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 369.330477][T15451] Node 0 DMA32: 1665*4kB (UM) 606*8kB (UME) 298*16kB (UME) 316*32kB (UME) 77*64kB (UME) 46*128kB (UM) 18*256kB (UM) 8*512kB (UM) 5*1024kB (UME) 6*2048kB (UME) 295*4096kB (M) = 1271636kB [ 369.349686][T15451] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 369.362739][T15451] Node 1 Normal: 220*4kB (UME) 54*8kB (UME) 38*16kB (UME) 141*32kB (UME) 37*64kB (UME) 12*128kB (UME) 5*256kB (UM) 3*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 947*4096kB (M) = 3896160kB [ 369.381945][T15451] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 369.392932][T15451] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 369.402687][T15451] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 369.412895][T15451] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 369.423134][T15451] 42849 total pagecache pages [ 369.427937][T15451] 0 pages in swap cache [ 369.432387][T15451] Free swap = 124996kB [ 369.436898][T15451] Total swap = 124996kB [ 369.441351][T15451] 2097051 pages RAM [ 369.445449][T15451] 0 pages HighMem/MovableOnly [ 369.451018][T15451] 424872 pages reserved [ 369.455273][T15451] 0 pages cma reserved [ 369.617196][T15502] syzkaller1: entered promiscuous mode [ 369.642867][T15502] syzkaller1: entered allmulticast mode [ 369.656144][T15502] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2629'. [ 369.721282][T15502] openvswitch: netlink: Message has 8 unknown bytes. [ 370.043063][T15523] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.203503][T15531] netlink: 'syz.2.2637': attribute type 1 has an invalid length. [ 370.207252][T15523] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.215352][T15531] netlink: 'syz.2.2637': attribute type 2 has an invalid length. [ 370.246396][T15531] netlink: 'syz.2.2637': attribute type 1 has an invalid length. [ 370.246853][T15532] netlink: 'syz.1.2635': attribute type 4 has an invalid length. [ 370.255871][T15531] netlink: 'syz.2.2637': attribute type 2 has an invalid length. [ 370.313685][T15523] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.393993][T15523] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.498821][T15544] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2640'. [ 370.545629][T11914] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.587682][T11914] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.626122][T11914] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.655327][T11916] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.737628][T15553] tipc: Enabled bearer , priority 0 [ 370.752396][T15553] syzkaller0: entered promiscuous mode [ 370.770503][T15553] syzkaller0: entered allmulticast mode [ 370.824092][T15553] tipc: Resetting bearer [ 370.833947][T15552] tipc: Resetting bearer [ 370.873124][T15552] tipc: Disabling bearer [ 370.901562][T15558] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2643'. [ 371.223518][T15574] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2646'. [ 371.253080][T15577] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2649'. [ 371.302321][T15578] Can't find ip_set type /dev/net/tun [ 372.494081][T15644] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2662'. [ 373.514169][T15693] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.527934][T15693] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.673828][T15693] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.704231][T15693] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.824742][T15693] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.863332][T15693] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.056833][T15693] netdevsim netdevsim2 ÿÿÿÿÿÿ (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.080979][T15693] netdevsim netdevsim2 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.102696][T15737] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 374.137320][T15738] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2689'. [ 374.533048][T11916] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.544247][T11916] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.602667][T15761] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.2698'. [ 374.613393][T15758] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2697'. [ 374.638610][ T1090] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.657198][ T1090] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.677789][ T1090] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.701693][ T1090] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.749012][ T1090] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.769907][ T1090] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.008360][T15793] netlink: 'syz.3.2706': attribute type 29 has an invalid length. [ 375.070613][T15793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2706'. [ 375.106552][T15796] netlink: 'syz.3.2706': attribute type 29 has an invalid length. [ 375.159627][T15796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2706'. [ 375.243581][T15797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 375.368123][T15812] tipc: Enabled bearer , priority 0 [ 375.382634][T15805] tipc: Enabling of bearer rejected, already enabled [ 375.411708][T15812] syzkaller0: entered promiscuous mode [ 375.425059][T15812] syzkaller0: entered allmulticast mode [ 375.443107][T15805] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 375.483561][T15805] tipc: Resetting bearer [ 375.494199][T15803] tipc: Resetting bearer [ 375.532372][T15803] tipc: Disabling bearer [ 375.636547][T15833] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2713'. [ 375.827393][T15833] macvtap1: entered promiscuous mode [ 375.840692][T15833] vlan0: entered promiscuous mode [ 375.848787][T15833] macvtap1: entered allmulticast mode [ 376.254170][T15864] __nla_validate_parse: 2 callbacks suppressed [ 376.254191][T15864] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2723'. [ 376.272123][T15863] TCP: TCP_TX_DELAY enabled [ 376.358302][T15869] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2725'. [ 377.203278][T15917] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2738'. [ 377.213552][T15917] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 377.299052][T15922] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2740'. [ 377.366637][T15928] dvmrp0: entered allmulticast mode [ 377.454810][T15937] RDS: rds_bind could not find a transport for fe80::2d, load rds_tcp or rds_rdma? [ 377.595077][T15949] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2746'. [ 377.974164][T15982] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2754'. [ 378.054180][T15990] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2756'. [ 378.104758][T15990] netlink: 'syz.2.2756': attribute type 3 has an invalid length. [ 378.442556][T16014] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 378.526494][T16014] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 378.608652][T16023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 378.781565][T16034] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2769'. [ 378.893559][T16039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2772'. [ 378.894442][T16037] C: left allmulticast mode [ 378.927387][T16037] tunl0: left allmulticast mode [ 378.960675][T16037] gre0: left allmulticast mode [ 378.967971][T16041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2772'. [ 378.977404][T16037] gretap0: left allmulticast mode [ 379.015346][T16037] erspan0: left allmulticast mode [ 379.025574][T16050] netlink: 'syz.4.2775': attribute type 2 has an invalid length. [ 379.044113][T16037] ip_vti0: left allmulticast mode [ 379.061826][T16037] ip6_vti0: left allmulticast mode [ 379.078543][T16037] sit0: left allmulticast mode [ 379.117001][T16037] ip6tnl0: left allmulticast mode [ 379.137419][T16037] ip6gre0: left allmulticast mode [ 379.152277][T16037] syz_tun: left allmulticast mode [ 379.165748][T16037] ip6gretap0: left allmulticast mode [ 379.177428][T16037] bridge0: left allmulticast mode [ 379.186215][T16037] team0: left allmulticast mode [ 379.192450][T16037] bond0: left allmulticast mode [ 379.198423][T16037] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.207079][T16037] dummy0: left allmulticast mode [ 379.216757][T16037] nlmon0: left allmulticast mode [ 379.223448][T16037] caif0: left allmulticast mode [ 379.228457][T16037] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 379.404668][T16061] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 380.338832][T16123] netlink: 'syz.4.2790': attribute type 9 has an invalid length. [ 381.049953][T16118] hsr0 speed is unknown, defaulting to 1000 [ 381.068626][T16148] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 381.119546][T16118] lo speed is unknown, defaulting to 1000 [ 381.366284][T16162] __nla_validate_parse: 10 callbacks suppressed [ 381.366309][T16162] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2804'. [ 381.396703][T16162] netem: invalid attributes len -24 [ 381.402822][T16162] netem: change failed [ 381.407702][T16167] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 381.723009][T16182] delete_channel: no stack [ 382.160403][T16200] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2811'. [ 384.173965][T16198] tipc: Enabled bearer , priority 0 [ 384.247375][T16198] tipc: Disabling bearer [ 384.695003][T16244] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2822'. [ 384.758566][T16251] netlink: 'syz.2.2824': attribute type 11 has an invalid length. [ 384.768397][T16251] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2824'. [ 384.914507][T16259] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2827'. [ 385.297781][ T30] audit: type=1800 audit(1754064504.294:5): pid=16282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2834" name="memory.events" dev="tmpfs" ino=2794 res=0 errno=0 [ 385.339074][ T30] audit: type=1804 audit(1754064504.324:6): pid=16282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2834" name="/newroot/542/memory.events" dev="tmpfs" ino=2794 res=1 errno=0 [ 385.428988][T16285] netlink: 'syz.4.2835': attribute type 11 has an invalid length. [ 385.437352][T16285] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2835'. [ 385.493773][T16287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2836'. [ 385.737046][T16302] syzkaller1: entered promiscuous mode [ 385.754975][T16302] syzkaller1: entered allmulticast mode [ 386.015023][T16318] syzkaller0: entered promiscuous mode [ 386.035627][T16318] syzkaller0: entered allmulticast mode [ 386.073418][T16317] tipc: Enabled bearer , priority 0 [ 386.145442][T16317] tipc: Resetting bearer [ 386.234590][T16317] tipc: Disabling bearer [ 386.401264][T16346] netlink: 'syz.1.2849': attribute type 11 has an invalid length. [ 386.432369][T16346] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2849'. [ 386.455661][T16345] netlink: 'syz.2.2850': attribute type 4 has an invalid length. [ 386.507421][T16351] netlink: 'syz.2.2850': attribute type 4 has an invalid length. [ 386.545485][ T9565] lo speed is unknown, defaulting to 1000 [ 386.575429][T16345] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2850'. [ 386.588716][ T9565] lo speed is unknown, defaulting to 1000 [ 386.611168][ T5915] lo speed is unknown, defaulting to 1000 [ 387.127043][T16373] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2859'. [ 387.164732][T16378] netlink: 212388 bytes leftover after parsing attributes in process `syz.2.2860'. [ 387.188079][T16378] openvswitch: netlink: Message has 5 unknown bytes. [ 387.622150][T16391] syzkaller1: entered promiscuous mode [ 387.627773][T16391] syzkaller1: entered allmulticast mode [ 387.693687][T16398] netlink: 'syz.2.2866': attribute type 21 has an invalid length. [ 387.703266][T16398] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2866'. [ 387.756484][T16398] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2866'. [ 387.904969][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 387.917650][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 387.928261][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 387.941481][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 387.955277][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 388.167358][T16416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2870'. [ 388.378944][T16409] hsr0 speed is unknown, defaulting to 1000 [ 388.388601][T16409] lo speed is unknown, defaulting to 1000 [ 388.798338][T16433] netlink: 356 bytes leftover after parsing attributes in process `syz.2.2877'. [ 388.882834][T16437] netlink: 5212 bytes leftover after parsing attributes in process `syz.2.2877'. [ 389.054143][T11914] tipc: Disabling bearer [ 389.616365][T11914] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 389.626014][T11914] bridge_slave_1: left allmulticast mode [ 389.632410][T11914] bond0 (unregistering): Released all slaves [ 389.647980][T11914] bond1 (unregistering): Released all slaves [ 389.765324][T11914] bond2 (unregistering): Released all slaves [ 389.885650][T11914] bond3 (unregistering): Released all slaves [ 389.995406][T11914] bond4 (unregistering): Released all slaves [ 390.061952][ T5159] Bluetooth: hci2: command tx timeout [ 390.113542][T11914] bond5 (unregistering): Released all slaves [ 390.128690][T11914] bond6 (unregistering): Released all slaves [ 390.438407][T11914] tipc: Disabling bearer [ 390.448758][T11914] tipc: Left network mode [ 390.699012][T16476] netlink: 159784 bytes leftover after parsing attributes in process `syz.2.2887'. [ 390.807914][T16409] chnl_net:caif_netlink_parms(): no params data found [ 391.398542][T16409] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.428232][T16409] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.454679][T16409] bridge_slave_0: entered allmulticast mode [ 391.468113][T16409] bridge_slave_0: entered promiscuous mode [ 391.495651][T16409] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.504593][T16409] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.523008][T16409] bridge_slave_1: entered allmulticast mode [ 391.538505][T16409] bridge_slave_1: entered promiscuous mode [ 391.636273][T11914] hsr_slave_1: left promiscuous mode [ 391.834750][T16524] __nla_validate_parse: 6 callbacks suppressed [ 391.834771][T16524] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2899'. [ 391.852428][T16524] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2899'. [ 392.144671][ T5159] Bluetooth: hci2: command tx timeout [ 392.357342][T11916] smc: removing ib device syz! [ 392.945495][T16409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.014412][T16409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.194012][T16552] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2905'. [ 393.229916][T16544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2903'. [ 393.273610][T16409] team0: Port device team_slave_0 added [ 393.316618][T16409] team0: Port device team_slave_1 added [ 393.514028][T16559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2907'. [ 393.531508][T16560] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 393.604117][T16564] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2907'. [ 393.626831][T16563] netlink: 'syz.3.2909': attribute type 1 has an invalid length. [ 393.637720][T16409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.656206][T16409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.670122][T16563] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2909'. [ 393.702277][T16567] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2909'. [ 393.757863][T16569] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2910'. [ 393.764912][T16409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.808917][T16409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.816732][T16409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.847012][T16409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.212596][ T5159] Bluetooth: hci2: command tx timeout [ 394.237786][T16589] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 394.293909][T16409] hsr_slave_0: entered promiscuous mode [ 394.312363][T16409] hsr_slave_1: entered promiscuous mode [ 394.319126][T16409] debugfs: 'hsr0' already exists in 'hsr' [ 394.335840][T16409] Cannot create hsr debugfs directory [ 394.947415][T16606] tipc: Enabled bearer , priority 0 [ 395.068050][T16614] bridge0: entered promiscuous mode [ 395.088259][T16614] macsec1: entered promiscuous mode [ 395.103896][T16606] syzkaller0: entered promiscuous mode [ 395.112115][T16606] syzkaller0: entered allmulticast mode [ 395.248590][T16622] tipc: Resetting bearer [ 395.334939][T16604] tipc: Resetting bearer [ 395.365711][T16604] tipc: Disabling bearer [ 395.417001][T11914] IPVS: stop unused estimator thread 0... [ 395.661679][T16636] netlink: 'syz.2.2926': attribute type 4 has an invalid length. [ 395.737094][T16642] netlink: 'syz.2.2926': attribute type 4 has an invalid length. [ 395.803151][ T5915] lo speed is unknown, defaulting to 1000 [ 395.824956][ T5915] lo speed is unknown, defaulting to 1000 [ 395.836366][ T5901] lo speed is unknown, defaulting to 1000 [ 395.951942][T16650] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2931'. [ 396.078916][T16656] smc: net device erspan0 applied user defined pnetid SYZ0 [ 396.165531][T16409] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 396.196925][T16409] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 396.242499][T16409] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 396.288081][T16409] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 396.296994][ T5159] Bluetooth: hci2: command tx timeout [ 396.714083][T16409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.764931][T16409] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.812019][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.819410][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.884341][ T3026] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.891819][ T3026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.502557][T16727] __nla_validate_parse: 6 callbacks suppressed [ 397.502576][T16727] netlink: 344 bytes leftover after parsing attributes in process `syz.1.2948'. [ 397.528582][T16729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2950'. [ 397.622955][T16409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.775026][T16735] vxcan1: MTU too low for tipc bearer [ 397.796839][T16735] tipc: Enabling of bearer rejected, failed to enable media [ 397.825864][T16735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2951'. [ 397.863584][T16735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2951'. [ 397.902237][T16738] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2952'. [ 397.932870][T16738] netlink: 'syz.3.2952': attribute type 9 has an invalid length. [ 397.944015][T16738] netlink: 'syz.3.2952': attribute type 9 has an invalid length. [ 398.371753][ T5159] Bluetooth: hci2: command tx timeout [ 398.571648][T16768] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2958'. [ 398.605136][T16768] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 398.787731][T16409] veth0_vlan: entered promiscuous mode [ 398.857050][T16409] veth1_vlan: entered promiscuous mode [ 398.978840][T16409] veth0_macvtap: entered promiscuous mode [ 399.013764][T16409] veth1_macvtap: entered promiscuous mode [ 399.095315][T16409] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.135742][T16409] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 399.177790][T11907] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.203944][T11907] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.231408][T11907] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.242476][T11907] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.610857][T11907] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.618733][T11907] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.754231][T11903] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.769521][T11903] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.771103][T16821] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 399.794849][T16820] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2973'. [ 400.062505][T16837] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2856'. [ 400.327888][T16853] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2979'. [ 400.354565][T16856] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2975'. [ 400.905050][T16871] netlink: 'syz.4.2985': attribute type 2 has an invalid length. [ 401.014468][T16874] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20002 [ 401.295042][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 401.306072][T16888] sctp: [Deprecated]: syz.3.2989 (pid 16888) Use of struct sctp_assoc_value in delayed_ack socket option. [ 401.306072][T16888] Use struct sctp_sack_info instead [ 401.330555][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 401.350025][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 401.371273][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 401.386463][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 401.546314][T16884] hsr0 speed is unknown, defaulting to 1000 [ 401.575581][T16884] lo speed is unknown, defaulting to 1000 [ 401.602808][T16898] vxcan1: entered promiscuous mode [ 401.928815][T16909] netlink: 'syz.3.2995': attribute type 1 has an invalid length. [ 402.379758][T16919] netlink: 'syz.3.2999': attribute type 4 has an invalid length. [ 402.535577][T16884] chnl_net:caif_netlink_parms(): no params data found [ 402.745997][T16953] netlink: zone id is out of range [ 402.751983][T16953] netlink: zone id is out of range [ 402.762463][T16953] netlink: zone id is out of range [ 402.767852][T16953] netlink: zone id is out of range [ 402.774606][T16953] netlink: zone id is out of range [ 402.788957][T16953] netlink: zone id is out of range [ 402.794367][T16953] netlink: zone id is out of range [ 402.808059][T16953] netlink: zone id is out of range [ 402.810636][T16884] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.822994][T16884] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.829408][T16953] netlink: zone id is out of range [ 402.832215][T16884] bridge_slave_0: entered allmulticast mode [ 402.845213][T16884] bridge_slave_0: entered promiscuous mode [ 402.869045][T16884] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.879971][T16884] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.892654][T16884] bridge_slave_1: entered allmulticast mode [ 402.902259][T16884] bridge_slave_1: entered promiscuous mode [ 403.065628][T16965] __nla_validate_parse: 6 callbacks suppressed [ 403.065649][T16965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3009'. [ 403.163135][T16884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.204544][T16884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.312681][T16978] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3014'. [ 403.363614][T16978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3014'. [ 403.383278][T16978] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3014'. [ 403.398279][T16884] team0: Port device team_slave_0 added [ 403.407100][T16976] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3013'. [ 403.445363][T16884] team0: Port device team_slave_1 added [ 403.490228][ T5159] Bluetooth: hci1: command tx timeout [ 403.577179][T16884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.592565][T16884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.628650][T16884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.669402][T16884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.684550][T16884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.715671][T16884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.878251][T16884] hsr_slave_0: entered promiscuous mode [ 403.885430][T16884] hsr_slave_1: entered promiscuous mode [ 403.897780][T16884] debugfs: 'hsr0' already exists in 'hsr' [ 403.904984][T16884] Cannot create hsr debugfs directory [ 404.060444][T17013] netlink: 'syz.4.3023': attribute type 32 has an invalid length. [ 404.081222][T17013] netlink: 776 bytes leftover after parsing attributes in process `syz.4.3023'. [ 404.203880][T17022] netlink: 'syz.2.3026': attribute type 83 has an invalid length. [ 404.328724][T17028] netlink: 'syz.4.3029': attribute type 5 has an invalid length. [ 404.990810][T17056] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3039'. [ 405.097422][T17065] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3039'. [ 405.117204][T17066] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3040'. [ 405.143849][T17066] netlink: 'syz.0.3040': attribute type 1 has an invalid length. [ 405.153039][T16884] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 405.190555][T17066] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3040'. [ 405.211900][T17065] gretap0: entered promiscuous mode [ 405.228728][T16884] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 405.255917][T16884] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 405.284818][T16884] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 405.490861][T17087] FAULT_INJECTION: forcing a failure. [ 405.490861][T17087] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 405.530141][T17087] CPU: 1 UID: 0 PID: 17087 Comm: syz.0.3043 Not tainted 6.16.0-syzkaller-06589-g010510128873 #0 PREEMPT(full) [ 405.530175][T17087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 405.530188][T17087] Call Trace: [ 405.530197][T17087] [ 405.530207][T17087] dump_stack_lvl+0x189/0x250 [ 405.530234][T17087] ? __pfx____ratelimit+0x10/0x10 [ 405.530265][T17087] ? __pfx_dump_stack_lvl+0x10/0x10 [ 405.530288][T17087] ? __pfx__printk+0x10/0x10 [ 405.530314][T17087] ? __might_fault+0xb0/0x130 [ 405.530359][T17087] should_fail_ex+0x414/0x560 [ 405.530398][T17087] _copy_from_user+0x2d/0xb0 [ 405.530430][T17087] ___sys_sendmsg+0x158/0x2a0 [ 405.530457][T17087] ? __pfx____sys_sendmsg+0x10/0x10 [ 405.530520][T17087] ? __fget_files+0x2a/0x420 [ 405.530540][T17087] ? __fget_files+0x3a0/0x420 [ 405.530581][T17087] __x64_sys_sendmsg+0x19b/0x260 [ 405.530608][T17087] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 405.530640][T17087] ? __pfx_ksys_write+0x10/0x10 [ 405.530669][T17087] ? rcu_is_watching+0x15/0xb0 [ 405.530707][T17087] ? do_syscall_64+0xbe/0x3b0 [ 405.530743][T17087] do_syscall_64+0xfa/0x3b0 [ 405.530773][T17087] ? lockdep_hardirqs_on+0x9c/0x150 [ 405.530803][T17087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.530825][T17087] ? clear_bhb_loop+0x60/0xb0 [ 405.530852][T17087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.530873][T17087] RIP: 0033:0x7fed49f8eb69 [ 405.530892][T17087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 405.530911][T17087] RSP: 002b:00007fed4ad94038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 405.530937][T17087] RAX: ffffffffffffffda RBX: 00007fed4a1b6160 RCX: 00007fed49f8eb69 [ 405.530952][T17087] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000007 [ 405.530966][T17087] RBP: 00007fed4ad94090 R08: 0000000000000000 R09: 0000000000000000 [ 405.530979][T17087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.530992][T17087] R13: 0000000000000000 R14: 00007fed4a1b6160 R15: 00007ffd38050df8 [ 405.531025][T17087] [ 405.600908][ T5159] Bluetooth: hci1: command tx timeout [ 405.920169][T16884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.062563][T16884] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.078462][T11903] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.086036][T11903] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.154993][T11903] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.162256][T11903] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.316868][T17122] netlink: 'syz.4.3053': attribute type 2 has an invalid length. [ 406.985315][T16884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.156840][T16884] veth0_vlan: entered promiscuous mode [ 407.198752][T16884] veth1_vlan: entered promiscuous mode [ 407.354770][T16884] veth0_macvtap: entered promiscuous mode [ 407.413426][T16884] veth1_macvtap: entered promiscuous mode [ 407.534742][T16884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.623889][T16884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.641234][T17173] syzkaller0: entered promiscuous mode [ 407.647063][T17173] syzkaller0: entered allmulticast mode [ 407.672574][T11912] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.692786][T11912] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.725242][T11912] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.803222][T11912] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.812801][ T5159] Bluetooth: hci1: command tx timeout [ 408.111316][T17190] __nla_validate_parse: 8 callbacks suppressed [ 408.111336][T17190] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3069'. [ 408.140403][ T3026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.148459][ T3026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.167643][T17190] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3069'. [ 408.254956][T17200] netlink: 'syz.0.3071': attribute type 1 has an invalid length. [ 408.274122][T11907] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.274523][T17200] netlink: 204 bytes leftover after parsing attributes in process `syz.0.3071'. [ 408.300546][T11907] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.475376][T17212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3075'. [ 408.504485][T17210] pim6reg1: entered promiscuous mode [ 408.511191][T17210] pim6reg1: entered allmulticast mode [ 408.622234][T17217] veth0_to_team: entered promiscuous mode [ 408.648817][T17217] veth0_to_team: entered allmulticast mode [ 408.851990][T17224] macvlan0: entered promiscuous mode [ 408.857726][T17224] macvlan0: entered allmulticast mode [ 409.371888][T17251] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3083'. [ 409.731977][ T5842] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 409.764601][ T5842] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 409.780162][ T5842] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 409.807285][ T5842] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 409.825695][ T5842] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 409.891517][ T5159] Bluetooth: hci1: command tx timeout [ 409.908758][T17277] netlink: 'syz.4.3092': attribute type 1 has an invalid length. [ 409.943312][T17277] netlink: 'syz.4.3092': attribute type 11 has an invalid length. [ 409.954000][T17277] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3092'. [ 410.022791][T17279] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3091'. [ 410.096953][T17264] hsr0 speed is unknown, defaulting to 1000 [ 410.127471][T17264] lo speed is unknown, defaulting to 1000 [ 410.365803][T17299] netlink: 64720 bytes leftover after parsing attributes in process `syz.2.3094'. [ 410.638445][T17298] syzkaller0: entered promiscuous mode [ 410.648609][T17298] syzkaller0: entered allmulticast mode [ 411.894073][ T5159] Bluetooth: hci5: command tx timeout [ 412.653496][T17327] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3100'. [ 413.035597][T17264] chnl_net:caif_netlink_parms(): no params data found [ 413.187792][T17264] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.195733][T17264] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.203615][T17264] bridge_slave_0: entered allmulticast mode [ 413.212734][T17264] bridge_slave_0: entered promiscuous mode [ 413.222990][T17264] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.231212][T17264] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.239282][T17264] bridge_slave_1: entered allmulticast mode [ 413.246810][T17264] bridge_slave_1: entered promiscuous mode [ 413.286527][T17264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.300405][T17264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.345796][T17264] team0: Port device team_slave_0 added [ 413.355418][T17264] team0: Port device team_slave_1 added [ 413.394230][T17264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.402308][T17264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.430442][T17264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.443855][T17264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.451231][T17264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.478671][T17264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.537089][T17264] hsr_slave_0: entered promiscuous mode [ 413.544162][T17264] hsr_slave_1: entered promiscuous mode [ 413.551123][T17264] debugfs: 'hsr0' already exists in 'hsr' [ 413.556988][T17264] Cannot create hsr debugfs directory [ 413.970303][ T5159] Bluetooth: hci5: command tx timeout [ 414.018070][T17264] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 414.028961][T17264] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 414.042815][T17264] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 414.055185][T17264] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 414.148452][T17264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.173481][T17264] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.187400][T11916] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.195620][T11916] bridge0: port 1(bridge_slave_0) entered forwarding state [ 414.216546][T11912] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.223866][T11912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.463732][T17264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.514332][T17264] veth0_vlan: entered promiscuous mode [ 414.528366][T17264] veth1_vlan: entered promiscuous mode [ 414.566093][T17264] veth0_macvtap: entered promiscuous mode [ 414.577550][T17264] veth1_macvtap: entered promiscuous mode [ 414.602041][T17264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.616211][T17264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.636912][T11914] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.647903][T11914] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.661019][T11914] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.671208][T11914] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.752009][T11916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.774322][T11916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.805007][T11909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.813303][T11909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.938126][T17365] tipc: Started in network mode [ 414.947223][T17365] tipc: Node identity 6a2b4f0304, cluster identity 4711 [ 414.956913][T17365] tipc: Enabled bearer , priority 0 [ 414.968989][T17362] syzkaller0: entered promiscuous mode [ 414.977250][T17362] syzkaller0: entered allmulticast mode [ 414.999010][T17362] tipc: Resetting bearer [ 415.013235][T17361] tipc: Resetting bearer [ 415.030753][T17361] tipc: Disabling bearer [ 416.050048][ T5159] Bluetooth: hci5: command tx timeout [ 418.130412][ T5159] Bluetooth: hci5: command tx timeout [ 446.102345][ T1090] bond3 (unregistering): (slave bridge4): Releasing backup interface [ 446.434051][ T1090] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 446.446257][ T1090] bond0 (unregistering): Released all slaves [ 446.464417][ T1090] bond1 (unregistering): Released all slaves [ 446.587416][ T1090] bond2 (unregistering): Released all slaves [ 446.709092][ T1090] bond3 (unregistering): Released all slaves [ 446.725565][ T1090] bond4 (unregistering): Released all slaves [ 446.739858][ T1090] bond5 (unregistering): Released all slaves [ 446.762125][ T1090] bond6 (unregistering): Released all slaves [ 446.916169][ T1090] tipc: Left network mode [ 448.687157][ T1090] hsr_slave_0: left promiscuous mode [ 448.693901][ T1090] hsr_slave_1: left promiscuous mode [ 449.675518][ T1090] IPVS: stop unused estimator thread 0... [ 468.381295][T17382] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3112'. [ 468.439890][T17382] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3112'. [ 468.464787][T17383] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3111'. [ 468.727977][T17388] syzkaller1: entered promiscuous mode [ 468.741191][T17388] syzkaller1: entered allmulticast mode [ 469.087040][T17402] veth0_to_team: entered promiscuous mode [ 469.093550][T17402] veth0_to_team: entered allmulticast mode [ 469.156733][T17375] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3108'. [ 469.242121][T17414] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3117'. [ 469.267941][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 469.291584][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 469.301210][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 469.311334][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 469.324112][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 469.599484][T17413] hsr0 speed is unknown, defaulting to 1000 [ 469.621965][T17413] lo speed is unknown, defaulting to 1000 [ 470.021078][T17445] syzkaller1: entered promiscuous mode [ 470.026637][T17445] syzkaller1: entered allmulticast mode [ 470.294344][T17455] tun0: tun_chr_ioctl cmd 1074025673 [ 470.336398][T17454] tun0: tun_chr_ioctl cmd 1074025675 [ 470.350033][T17454] tun0: persist disabled [ 470.562435][T17459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3129'. [ 470.808280][T17413] chnl_net:caif_netlink_parms(): no params data found [ 471.116599][T17413] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.138878][T17413] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.148249][T17413] bridge_slave_0: entered allmulticast mode [ 471.157374][T17413] bridge_slave_0: entered promiscuous mode [ 471.173943][T17413] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.186398][T17413] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.195750][T17413] bridge_slave_1: entered allmulticast mode [ 471.204525][T17413] bridge_slave_1: entered promiscuous mode [ 471.310717][T17413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 471.409881][ T5159] Bluetooth: hci0: command tx timeout [ 473.361585][T17413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 473.388453][T17485] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3132'. [ 473.404037][T17499] lo: entered promiscuous mode [ 473.416540][T17499] netlink: 'syz.1.3135': attribute type 2 has an invalid length. [ 473.429870][T17499] net_ratelimit: 16 callbacks suppressed [ 473.429892][T17499] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 473.489897][ T5159] Bluetooth: hci0: command tx timeout [ 473.531179][T17517] netlink: 'syz.1.3139': attribute type 1 has an invalid length. [ 473.577691][T17520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3140'. [ 473.593997][T17521] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3140'. [ 473.607998][T17515] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3138'. [ 473.622972][T17515] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 473.694263][T17523] bond1 (unregistering): Released all slaves [ 473.775589][T17524] netlink: 'syz.4.3138': attribute type 3 has an invalid length. [ 473.789459][T17413] team0: Port device team_slave_0 added [ 473.806256][T17517] ip6tnl1: entered promiscuous mode [ 473.814674][T17517] ip6tnl1: entered allmulticast mode [ 473.847046][T17413] team0: Port device team_slave_1 added [ 473.867636][T17530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3142'. [ 474.049553][ T3026] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.074260][T17413] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.098998][T17413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.154299][T17413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.173627][ T3026] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.192252][ T3026] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.208614][T17413] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.221195][T17413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.276896][T17413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.349816][ T3026] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.528169][T17413] hsr_slave_0: entered promiscuous mode [ 474.541227][T17413] hsr_slave_1: entered promiscuous mode [ 474.586401][T17551] Bluetooth: MGMT ver 1.23 [ 474.616954][T17549] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3147'. [ 474.628712][T17549] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3147'. [ 474.641946][T17549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3147'. [ 474.660499][T17549] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3147'. [ 474.712749][T17555] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3147'. [ 474.844187][T17557] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 474.940873][T17413] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.969316][T17413] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.077530][T17413] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 475.110513][T17413] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.130174][T17571] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3152'. [ 475.178203][T17569] gtp0: entered promiscuous mode [ 475.185348][T17569] gtp0: entered allmulticast mode [ 475.223246][T17413] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 475.246030][T17413] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.375765][T17413] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 475.397989][T17413] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.570923][ T5159] Bluetooth: hci0: command tx timeout [ 475.864707][T17413] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 475.896440][T17413] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 475.961977][T17602] netlink: 'syz.4.3163': attribute type 15 has an invalid length. [ 475.979063][T17413] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 476.047263][T17413] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 476.232636][T17622] netlink: 'syz.1.3167': attribute type 29 has an invalid length. [ 476.267446][T17622] netlink: 'syz.1.3167': attribute type 29 has an invalid length. [ 476.341447][T17624] netlink: 'syz.1.3167': attribute type 29 has an invalid length. [ 476.632737][T17413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.701933][T17413] 8021q: adding VLAN 0 to HW filter on device team0 [ 476.761576][T11907] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.768913][T11907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.826133][T11907] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.833509][T11907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.257326][T17413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 477.358082][T17413] veth0_vlan: entered promiscuous mode [ 477.387185][T17413] veth1_vlan: entered promiscuous mode [ 477.451347][T17413] veth0_macvtap: entered promiscuous mode [ 477.485464][T17413] veth1_macvtap: entered promiscuous mode [ 477.583050][T17413] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 477.636080][T17413] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 477.654019][ T5159] Bluetooth: hci0: command tx timeout [ 477.697832][T11907] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.721824][T17669] Unsupported ieee802154 address type: 0 [ 477.728045][T11907] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.772127][T17669] netlink: 'syz.4.3178': attribute type 7 has an invalid length. [ 477.808031][T11907] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.978074][T11907] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.351232][T11909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.360490][T11909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.580489][T11912] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.606584][T11912] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.954431][T17724] Bluetooth: MGMT ver 1.23 [ 479.026042][T17727] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 479.053912][T17727] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 479.127859][T17735] tipc: Enabled bearer , priority 10 [ 479.297090][T17744] __nla_validate_parse: 8 callbacks suppressed [ 479.297112][T17744] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3195'. [ 480.174151][T17768] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3202'. [ 480.247488][T17771] hsr0: entered promiscuous mode [ 480.250787][ T5934] tipc: Node number set to 1848332035 [ 480.268296][T17771] hsr0: entered allmulticast mode [ 480.276738][T17773] delete_channel: no stack [ 480.288014][T17771] hsr_slave_0: entered allmulticast mode [ 480.330307][T17771] hsr_slave_1: entered allmulticast mode [ 480.480615][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 480.492996][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 480.512761][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 480.526857][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 480.536129][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 480.605491][T17784] hsr0 speed is unknown, defaulting to 1000 [ 480.616292][T17784] lo speed is unknown, defaulting to 1000 [ 481.122375][T17813] netlink: 'syz.4.3215': attribute type 75 has an invalid length. [ 481.242074][T17821] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3216'. [ 481.587982][T17831] bond1: entered promiscuous mode [ 481.602374][T17831] bond1: entered allmulticast mode [ 481.612349][T17831] 8021q: adding VLAN 0 to HW filter on device bond1 [ 481.676601][T17835] pim6reg1: entered promiscuous mode [ 481.686792][T17835] pim6reg1: entered allmulticast mode [ 481.814358][T17848] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3222'. [ 481.823732][T17784] chnl_net:caif_netlink_parms(): no params data found [ 481.936426][T17856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3225'. [ 482.015218][T17856] netlink: 'syz.0.3225': attribute type 12 has an invalid length. [ 482.122482][T17784] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.150776][T17784] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.186511][T17784] bridge_slave_0: entered allmulticast mode [ 482.233008][T17784] bridge_slave_0: entered promiscuous mode [ 482.256566][T17784] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.278926][T17784] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.301688][T17784] bridge_slave_1: entered allmulticast mode [ 482.313705][T17784] bridge_slave_1: entered promiscuous mode [ 482.334098][T17870] macvlan2: entered promiscuous mode [ 482.348614][T17870] macvlan2: entered allmulticast mode [ 482.357048][T17870] syz_tun: entered promiscuous mode [ 482.370624][T17870] syz_tun: entered allmulticast mode [ 482.388073][T17870] team0: Port device macvlan2 added [ 482.593211][T17784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 482.609332][ T5159] Bluetooth: hci3: command tx timeout [ 482.634105][T17784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 482.693128][T17891] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3236'. [ 482.828047][T17784] team0: Port device team_slave_0 added [ 482.881515][T17784] team0: Port device team_slave_1 added [ 483.006238][T17784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 483.015487][T17784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 483.043124][T17784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 483.088030][T17784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 483.116082][T17784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 483.150844][T17784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 483.192106][T17921] wg1: entered promiscuous mode [ 483.201199][T17921] wg1: entered allmulticast mode [ 483.311257][T17923] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3244'. [ 483.946497][T17923] bond0: entered promiscuous mode [ 483.980243][T17923] bond_slave_0: entered promiscuous mode [ 483.986208][T17923] bond_slave_1: entered promiscuous mode [ 484.013105][T17923] batadv0: entered promiscuous mode [ 484.021580][T17923] hsr1: entered allmulticast mode [ 484.031603][T17923] bond0: entered allmulticast mode [ 484.033573][T17927] netlink: 'syz.1.3246': attribute type 11 has an invalid length. [ 484.039050][T17923] bond_slave_0: entered allmulticast mode [ 484.049550][T17927] netlink: 149476 bytes leftover after parsing attributes in process `syz.1.3246'. [ 484.052127][T17923] bond_slave_1: entered allmulticast mode [ 484.068183][T17923] batadv0: entered allmulticast mode [ 484.074578][T17923] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 484.097973][T17784] hsr_slave_0: entered promiscuous mode [ 484.125164][T17784] hsr_slave_1: entered promiscuous mode [ 484.157364][T17784] debugfs: 'hsr0' already exists in 'hsr' [ 484.173615][T17784] Cannot create hsr debugfs directory [ 484.253721][T17926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 484.690822][ T5159] Bluetooth: hci3: command tx timeout [ 485.495563][T17956] netlink: 'syz.2.3253': attribute type 3 has an invalid length. [ 485.698641][T17784] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.766194][T17972] netlink: 'syz.1.3260': attribute type 1 has an invalid length. [ 485.776340][T17972] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3260'. [ 485.822200][T17784] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.827937][T17972] netlink: 'syz.1.3260': attribute type 1 has an invalid length. [ 485.841940][T17972] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3260'. [ 486.007554][T17784] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.164779][T17784] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.293681][T17997] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3264'. [ 486.567186][T18006] netlink: 'syz.1.3266': attribute type 2 has an invalid length. [ 486.603227][T18006] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3266'. [ 486.632700][T17784] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 486.696298][T17784] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 486.769320][ T5159] Bluetooth: hci3: command tx timeout [ 486.773757][T17784] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 486.875700][T17784] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 487.032275][T18032] veth0: entered promiscuous mode [ 487.042554][T18032] veth0: left promiscuous mode [ 487.250532][T18044] netlink: 'syz.1.3275': attribute type 1 has an invalid length. [ 487.347535][T18052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3278'. [ 487.358169][T18044] bond1: (slave gretap1): making interface the new active one [ 487.368243][T18044] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 487.424585][T18044] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3275'. [ 487.488803][T18044] 8021q: adding VLAN 0 to HW filter on device bond1 [ 487.603509][T17784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.683620][T18065] syzkaller0: entered promiscuous mode [ 487.701103][T18065] syzkaller0: entered allmulticast mode [ 487.732717][T17784] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.771788][T11901] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.779140][T11901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.892577][T11912] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.899926][T11912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.036200][T18083] netlink: 'syz.2.3286': attribute type 6 has an invalid length. [ 488.074822][T18083] tipc: Started in network mode [ 488.085621][T18083] tipc: Node identity 6ed7a8ee908b, cluster identity 4711 [ 488.094732][T18083] tipc: Enabled bearer , priority 0 [ 488.114596][T18083] syzkaller0: entered promiscuous mode [ 488.131574][T18083] syzkaller0: entered allmulticast mode [ 488.263147][T18083] tipc: Resetting bearer [ 488.300798][T18082] tipc: Resetting bearer [ 488.365706][T18082] tipc: Disabling bearer [ 488.716185][T18100] team_slave_0: entered promiscuous mode [ 488.718687][T18115] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3294'. [ 488.722095][T18100] team_slave_1: entered promiscuous mode [ 488.754887][T18109] veth0_to_team: entered promiscuous mode [ 488.762336][T18109] veth0_to_team: entered allmulticast mode [ 488.849894][ T5159] Bluetooth: hci3: command tx timeout [ 488.881917][T18107] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3292'. [ 488.925431][T17784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 489.076684][T18127] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3296'. [ 489.108010][T18126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3297'. [ 489.195760][T17784] veth0_vlan: entered promiscuous mode [ 489.228598][T17784] veth1_vlan: entered promiscuous mode [ 489.348743][T17784] veth0_macvtap: entered promiscuous mode [ 489.396139][T17784] veth1_macvtap: entered promiscuous mode [ 489.542404][T17784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 489.557955][T17784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 489.571792][T18149] tipc: Started in network mode [ 489.596511][T18149] tipc: Node identity 7, cluster identity 4711 [ 489.620850][T18149] tipc: Node number set to 7 [ 489.665630][T11903] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.704240][T11903] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.753297][T18154] vlan1: mtu greater than device maximum [ 489.764266][T11903] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.797870][T11903] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.839796][T18159] netlink: 'syz.0.3308': attribute type 1 has an invalid length. [ 489.912689][T18163] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 489.925993][T18163] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 490.071396][ T3026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.103004][ T3026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.254275][T11907] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.304062][T11907] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.544760][T18185] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 490.601789][T18186] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 490.933271][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 490.935200][ T5159] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 490.997671][T18200] __nla_validate_parse: 4 callbacks suppressed [ 490.997692][T18200] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3320'. [ 491.021014][T18200] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3320'. [ 491.050694][T18200] 8021q: VLANs not supported on ip6_vti0 [ 491.322629][T18217] netlink: 'syz.4.3326': attribute type 58 has an invalid length. [ 491.358729][T18222] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3325'. [ 491.374715][T18217] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3326'. [ 491.447095][T18225] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 491.822442][T18247] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3334'. [ 491.837473][T18243] macvlan3: entered promiscuous mode [ 491.888442][T18243] macvlan3: entered allmulticast mode [ 491.934247][T18243] team0: Port device macvlan3 added [ 491.948083][T18252] netlink: 232 bytes leftover after parsing attributes in process `syz.4.3335'. [ 491.996922][T18252] netlink: 232 bytes leftover after parsing attributes in process `syz.4.3335'. [ 492.064702][T18254] tipc: Started in network mode [ 492.081554][T18254] tipc: Node identity 12f77a9efa9f, cluster identity 4711 [ 492.110623][T18254] tipc: Enabled bearer , priority 0 [ 492.143419][T18260] syzkaller0: entered promiscuous mode [ 492.160036][T18260] syzkaller0: entered allmulticast mode [ 492.283556][T18253] tipc: Resetting bearer [ 492.343059][T18253] tipc: Disabling bearer [ 492.381629][T18269] veth0_to_team: entered promiscuous mode [ 492.388194][T18269] veth0_to_team: entered allmulticast mode [ 492.502761][T18275] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3340'. [ 492.541208][T18283] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3343'. [ 492.971902][T18298] tipc: Started in network mode [ 492.976980][T18298] tipc: Node identity 7a49c767a1cf, cluster identity 4711 [ 493.007369][T18298] tipc: Enabled bearer , priority 0 [ 493.051122][T18298] syzkaller0: entered promiscuous mode [ 493.057169][T18298] syzkaller0: entered allmulticast mode [ 493.066013][T18305] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3348'. [ 493.128320][T18298] tipc: Resetting bearer [ 493.162366][T18297] tipc: Resetting bearer [ 493.206454][T18297] tipc: Disabling bearer [ 493.452875][T18322] team_slave_0: entered promiscuous mode [ 493.458991][T18322] team_slave_1: entered promiscuous mode [ 493.601463][T18326] macvtap1: entered promiscuous mode [ 493.607287][T18326] vlan0: entered promiscuous mode [ 493.613848][T18326] macvtap1: entered allmulticast mode [ 493.620189][T18326] vlan0: entered allmulticast mode [ 493.625754][T18326] veth0_vlan: entered allmulticast mode [ 493.797550][T18337] hsr0: entered promiscuous mode [ 493.803501][T18337] hsr0: entered allmulticast mode [ 493.811664][T18337] hsr_slave_0: entered allmulticast mode [ 493.822558][T18337] hsr_slave_1: entered allmulticast mode [ 493.838921][T18304] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 494.187119][T18354] sctp: [Deprecated]: syz.1.3367 (pid 18354) Use of struct sctp_assoc_value in delayed_ack socket option. [ 494.187119][T18354] Use struct sctp_sack_info instead [ 494.414554][T18363] tipc: Can't bind to reserved service type 2 [ 495.090960][ T5159] Bluetooth: hci1: command 0x0401 tx timeout [ 495.287096][T18419] netlink: 'syz.3.3389': attribute type 1 has an invalid length. [ 495.326778][T18425] netlink: 'syz.0.3391': attribute type 10 has an invalid length. [ 495.342408][T18419] netlink: 'syz.3.3389': attribute type 1 has an invalid length. [ 495.353808][T18419] netlink: 'syz.3.3389': attribute type 2 has an invalid length. [ 495.402785][T18425] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 495.478782][T18430] netlink: 'syz.2.3393': attribute type 1 has an invalid length. [ 495.614575][T18435] 8021q: adding VLAN 0 to HW filter on device bond3 [ 495.625286][T18435] bond2: (slave bond3): making interface the new active one [ 495.634443][T18435] bond2: (slave bond3): Enslaving as an active interface with an up link [ 495.657964][T18430] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 495.704056][T18435] 8021q: adding VLAN 0 to HW filter on device bond2 [ 495.732393][T18441] netlink: 'syz.2.3393': attribute type 1 has an invalid length. [ 495.824642][T18435] 8021q: adding VLAN 0 to HW filter on device bond4 [ 495.840896][T18435] bond2: (slave bond4): Enslaving as a backup interface with an up link [ 495.870273][T18451] veth1_macvtap: left promiscuous mode [ 496.087424][T18459] netlink: 'syz.4.3401': attribute type 1 has an invalid length. [ 496.155709][T18459] __nla_validate_parse: 11 callbacks suppressed [ 496.155733][T18459] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3401'. [ 496.673407][T18475] syzkaller1: entered promiscuous mode [ 496.697778][T18475] syzkaller1: entered allmulticast mode [ 496.985121][T18489] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 497.079957][T18494] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3408'. [ 497.185026][T18498] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3409'. [ 497.202331][T18495] tap0: tun_chr_ioctl cmd 2150131490 [ 497.208323][T18495] tap0: tun_chr_ioctl cmd 1074025676 [ 497.215055][T18495] tap0: owner set to 0 [ 497.616587][T18522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3414'. [ 497.633485][T18522] netlink: 'syz.0.3414': attribute type 30 has an invalid length. [ 497.716013][T18522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3414'. [ 497.725022][T11914] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.765740][T11914] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.783061][T18522] netlink: 'syz.0.3414': attribute type 30 has an invalid length. [ 497.836003][T11914] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.861974][T11914] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.998090][T18538] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3420'. [ 498.042542][T18542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3419'. [ 498.058040][T18538] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3420'. [ 498.260537][T18551] netlink: 'syz.0.3422': attribute type 1 has an invalid length. [ 498.351198][T18551] pimreg: entered allmulticast mode [ 498.445561][T18561] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3426'. [ 498.487700][T18561] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 498.545464][T18556] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3424'. [ 499.427523][T18622] dvmrp1: entered allmulticast mode [ 500.157379][T18654] vxcan1: tx drop: invalid da for name 0x0000000000000003 [ 500.646936][T18677] erspan0: entered allmulticast mode [ 500.986176][T18699] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 500.998422][T18699] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 501.333390][T18713] __nla_validate_parse: 12 callbacks suppressed [ 501.333410][T18713] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3473'. [ 501.358598][T18713] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3473'. [ 501.522810][T18730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3476'. [ 501.565391][T18730] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3476'. [ 501.623671][T18730] validate_nla: 3 callbacks suppressed [ 501.623691][T18730] netlink: 'syz.2.3476': attribute type 5 has an invalid length. [ 501.670408][T18736] netlink: 'syz.1.3477': attribute type 33 has an invalid length. [ 501.700561][T18730] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3476'. [ 501.703302][T18736] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3477'. [ 501.747111][T18730] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3476'. [ 501.753873][T18739] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3478'. [ 501.807587][T11901] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 501.848281][T11901] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 501.862247][T11901] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 501.874694][T11901] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 501.938108][T18746] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3480'. [ 503.064023][T18792] netlink: 'syz.2.3492': attribute type 29 has an invalid length. [ 503.168570][T18792] netlink: 'syz.2.3492': attribute type 29 has an invalid length. [ 503.190252][T18795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3493'. [ 503.374893][T18792] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 504.193225][T18851] netlink: 'syz.1.3512': attribute type 39 has an invalid length. [ 504.702119][T18876] pim6reg: entered allmulticast mode [ 504.714230][T18879] netlink: 'syz.1.3518': attribute type 1 has an invalid length. [ 504.931662][T18882] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.940377][T18882] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.224880][T18901] netlink: 'syz.2.3523': attribute type 1 has an invalid length. [ 505.266692][T18902] netlink: zone id is out of range [ 505.278078][T18902] netlink: zone id is out of range [ 505.286406][T18902] netlink: zone id is out of range [ 505.292467][T18902] netlink: get zone limit has 8 unknown bytes [ 505.392452][T18909] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 505.659360][T18923] netlink: 'syz.0.3533': attribute type 21 has an invalid length. [ 505.680382][T18923] netlink: 'syz.0.3533': attribute type 5 has an invalid length. [ 505.774543][T18932] geneve2: entered promiscuous mode [ 505.782175][T18929] netlink: 'syz.1.3535': attribute type 4 has an invalid length. [ 505.791790][T18932] geneve2: entered allmulticast mode [ 505.831484][ T3026] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 505.851816][ T3026] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 505.882356][ T3026] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 505.898475][ T3026] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 505.916566][T18936] dummy0: entered promiscuous mode [ 505.924899][T18936] bridge0: port 3(dummy0) entered blocking state [ 505.931809][T18936] bridge0: port 3(dummy0) entered disabled state [ 505.941015][T18936] dummy0: entered allmulticast mode [ 506.027360][T18938] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 506.470634][T18967] __nla_validate_parse: 18 callbacks suppressed [ 506.470668][T18967] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3547'. [ 506.772313][T18984] openvswitch: netlink: IP tunnel dst address not specified [ 507.204137][T19000] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3555'. [ 507.462800][T19009] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3558'. [ 507.487739][T19015] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3561'. [ 507.616954][T19015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3561'. [ 507.693330][T19027] validate_nla: 2 callbacks suppressed [ 507.693352][T19027] netlink: 'syz.2.3563': attribute type 1 has an invalid length. [ 507.728381][T19027] netlink: 784 bytes leftover after parsing attributes in process `syz.2.3563'. [ 508.198536][T19053] tc_dump_action: action bad kind [ 508.242498][T19061] openvswitch: netlink: Message has 8 unknown bytes. [ 508.288659][T19053] bridge0: port 3(dummy0) entered blocking state [ 508.295333][T19053] bridge0: port 3(dummy0) entered forwarding state [ 508.302401][T19053] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.309922][T19053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 508.318006][T19053] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.325537][T19053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 508.426775][T19053] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 508.511564][T19076] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3577'. [ 508.734219][T19069] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3578'. [ 508.747080][T19069] netem: invalid attributes len -24 [ 508.757425][T19069] netem: change failed [ 508.859610][T19089] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3581'. [ 509.023207][T19096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3582'. [ 511.669979][ T3026] nci: nci_ntf_packet: unknown ntf opcode 0x206 [ 511.700116][ T5934] IPVS: starting estimator thread 0... [ 511.806588][T19153] IPVS: using max 24 ests per chain, 57600 per kthread [ 511.846117][T19159] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 511.908347][T19160] __nla_validate_parse: 2 callbacks suppressed [ 511.908372][T19160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3599'. [ 511.926500][T19163] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3601'. [ 512.052536][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 512.116687][T19174] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3603'. [ 512.295974][T19176] netdevsim netdevsim0: Direct firmware load for /tun failed with error -2 [ 512.360335][T19176] netdevsim netdevsim0: Falling back to sysfs fallback for: /tun [ 512.405996][T19180] netlink: 'syz.0.3604': attribute type 6 has an invalid length. [ 512.842251][T19207] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3614'. [ 512.858473][T19205] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 512.930053][T19208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 512.939035][T19208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 513.010938][T19208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 513.052439][T19208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 513.233423][T19219] IPVS: set_ctl: invalid protocol: 33 224.0.0.2:20003 [ 513.772763][ T3026] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x4 [ 515.076227][T19321] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 515.099491][T19314] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3644'. [ 515.167997][T19323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3645'. [ 515.296592][T19330] netlink: 'syz.1.3647': attribute type 4 has an invalid length. [ 515.379934][T19336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3651'. [ 515.394117][T19336] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 515.407382][T19336] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 515.455445][T19335] netdevsim netdevsim2: Firmware load for '..' refused, path contains '..' component [ 518.043520][ T5915] IPVS: starting estimator thread 0... [ 518.049317][T19366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.106754][T19366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.143253][T19376] netlink: 'syz.4.3662': attribute type 1 has an invalid length. [ 518.155382][T19376] netlink: 15 bytes leftover after parsing attributes in process `syz.4.3662'. [ 518.181078][T19370] IPVS: using max 25 ests per chain, 60000 per kthread [ 518.222539][T19377] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 518.231601][T19366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.438785][T19391] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3665'. [ 518.490263][T19392] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3665'. [ 518.734395][T19406] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 519.005661][T19425] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.3678'. [ 519.007959][T19429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3679'. [ 519.050536][T19429] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3679'. [ 519.130069][T19429] geneve2: entered promiscuous mode [ 519.135426][T19429] geneve2: entered allmulticast mode [ 519.250537][ T5159] Bluetooth: hci2: command 0x0406 tx timeout [ 519.881684][T19471] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3687'. [ 519.943207][T19474] veth0: entered promiscuous mode [ 519.956077][T19474] veth0: left promiscuous mode [ 519.976388][T19439] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 519.978884][T19476] netlink: 'syz.3.3692': attribute type 1 has an invalid length. [ 520.055237][T19479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3693'. [ 520.723324][T19507] geneve1: mtu less than device minimum [ 520.745655][T19508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3701'. [ 521.179255][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 521.316055][T19548] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3711'. [ 521.601927][T19559] tipc: Enabled bearer , priority 0 [ 521.636497][T19559] syzkaller0: entered promiscuous mode [ 521.651448][T19559] syzkaller0: entered allmulticast mode [ 521.709123][T19561] ip6_tunnel: non-ECT from fc00:0000:0000:0080:0000:0000:0000:0001 with DS=0x2 [ 521.727352][T19559] tipc: Resetting bearer [ 521.760421][T19557] tipc: Resetting bearer [ 521.847664][T19557] tipc: Disabling bearer [ 521.898450][T19572] netlink: 'syz.4.3720': attribute type 10 has an invalid length. [ 521.939424][T19572] veth0_vlan: entered allmulticast mode [ 522.085411][T19572] veth0_vlan: left promiscuous mode [ 522.112155][T19572] veth0_vlan: entered promiscuous mode [ 522.172981][T19572] team0: Device veth0_vlan failed to register rx_handler [ 522.396959][T11907] bond2: left promiscuous mode [ 522.410548][T11907] bridge0: port 2(bond2) entered disabled state [ 522.448120][T11907] bridge_slave_0: left promiscuous mode [ 522.486886][T11907] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.583304][T11907] tipc: Resetting bearer [ 522.618044][T11907] tipc: Resetting bearer [ 522.662496][T19604] netlink: 'syz.3.3725': attribute type 10 has an invalid length. [ 522.686466][T19600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 522.860448][T11907] tipc: Disabling bearer [ 523.192298][T11907] tipc: Disabling bearer [ 523.537516][T19629] netlink: 'syz.1.3731': attribute type 1 has an invalid length. [ 523.915514][T11907] team0: Port device bond0 removed [ 523.923319][T11907] bond0 (unregistering): Released all slaves [ 523.943170][T11907] bond1 (unregistering): Released all slaves [ 524.083770][T11907] bond2 (unregistering): Released all slaves [ 524.099040][T11907] bond3 (unregistering): Released all slaves [ 524.115409][T11907] bond4 (unregistering): Released all slaves [ 524.157138][T19590] syzkaller1: entered promiscuous mode [ 524.167396][T19590] syzkaller1: entered allmulticast mode [ 524.213372][T19608] __nla_validate_parse: 2 callbacks suppressed [ 524.213395][T19608] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3727'. [ 524.324871][T11907] tipc: Left network mode [ 524.369348][ T5159] Bluetooth: hci1: command 0x0401 tx timeout [ 524.400510][T11907] IPVS: stopping master sync thread 6817 ... [ 524.647565][T19645] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 525.084914][T19662] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3739'. [ 525.194383][T19675] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3739'. [ 525.213969][T19674] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3742'. [ 525.585985][T11907] hsr_slave_0: left promiscuous mode [ 525.604142][T11907] hsr_slave_1: left promiscuous mode [ 525.624505][T11907] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 525.716417][T11907] vlan0: left promiscuous mode [ 526.578541][T19737] netlink: 'syz.1.3755': attribute type 6 has an invalid length. [ 527.567870][T11907] team0 (unregistering): Port device team_slave_1 removed [ 527.625157][T11907] team0 (unregistering): Port device team_slave_0 removed [ 528.530857][T19776] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3766'. [ 528.823784][T19784] netlink: 'syz.3.3768': attribute type 18 has an invalid length. [ 528.832057][T11907] IPVS: stop unused estimator thread 0... [ 529.035255][T19794] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3771'. [ 529.089685][T19799] netlink: 'syz.1.3771': attribute type 10 has an invalid length. [ 529.112404][T19796] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3772'. [ 529.131311][T19799] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3771'. [ 529.227400][T19799] team0: Port device geneve0 added [ 529.368444][T19805] netlink: zone id is out of range [ 529.534336][T19817] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.3779'. [ 529.558431][T19818] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 529.779002][T19829] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3781'. [ 529.980709][T19838] geneve1: entered promiscuous mode [ 530.127638][T19846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3788'. [ 530.177313][T19850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3788'. [ 530.349062][T19854] lo: entered allmulticast mode [ 530.358875][T19854] tunl0: entered allmulticast mode [ 530.374212][T19854] gre0: entered allmulticast mode [ 530.392472][T19854] gretap0: entered allmulticast mode [ 530.399049][T19860] netlink: 159784 bytes leftover after parsing attributes in process `syz.4.3790'. [ 530.418890][T19854] erspan0: entered allmulticast mode [ 530.430877][T19854] ip_vti0: entered allmulticast mode [ 530.442624][T19854] ip6_vti0: entered allmulticast mode [ 530.452515][T19854] sit0: entered allmulticast mode [ 530.464608][T19854] ip6tnl0: entered allmulticast mode [ 530.475232][T19854] ip6gre0: entered allmulticast mode [ 530.489062][T19854] ip6gretap0: entered allmulticast mode [ 530.502965][T19854] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.510877][T19854] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.523851][T19854] bridge0: entered allmulticast mode [ 530.535006][T19854] vcan0: entered allmulticast mode [ 530.546118][T19854] bond0: entered allmulticast mode [ 530.551669][T19854] bond_slave_0: entered allmulticast mode [ 530.557724][T19854] bond_slave_1: entered allmulticast mode [ 530.574436][T19854] team0: entered allmulticast mode [ 530.580198][T19854] team_slave_0: entered allmulticast mode [ 530.586087][T19854] team_slave_1: entered allmulticast mode [ 530.597316][T19854] dummy0: entered allmulticast mode [ 530.611595][T19854] nlmon0: entered allmulticast mode [ 530.620496][T19854] caif0: entered allmulticast mode [ 530.626381][T19854] batadv0: entered allmulticast mode [ 530.636659][T19854] vxcan0: entered allmulticast mode [ 530.645736][T19854] vxcan1: entered allmulticast mode [ 530.654058][T19854] veth0: entered allmulticast mode [ 530.664490][T19854] veth1: entered allmulticast mode [ 530.677171][T19854] wg0: entered allmulticast mode [ 530.686635][T19854] wg1: entered allmulticast mode [ 530.695963][T19854] wg2: entered allmulticast mode [ 530.705187][T19854] veth0_to_bridge: entered allmulticast mode [ 530.722115][T19854] veth1_to_bridge: entered allmulticast mode [ 530.736241][T19854] veth0_to_bond: entered allmulticast mode [ 530.747933][T19854] veth1_to_bond: entered allmulticast mode [ 530.758647][T19854] veth0_to_team: left promiscuous mode [ 530.768012][T19854] veth1_to_team: entered allmulticast mode [ 530.783948][T19854] veth0_to_batadv: entered allmulticast mode [ 530.794243][T19854] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 530.804530][T19854] batadv_slave_0: entered allmulticast mode [ 530.816296][T19854] veth1_to_batadv: entered allmulticast mode [ 530.826474][T19854] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 530.835836][T19854] batadv_slave_1: entered allmulticast mode [ 530.846404][T19854] xfrm0: entered allmulticast mode [ 530.856766][T19854] veth0_to_hsr: entered allmulticast mode [ 530.867140][T19854] hsr_slave_0: entered allmulticast mode [ 530.876129][T19854] veth1_to_hsr: entered allmulticast mode [ 530.886922][T19854] hsr_slave_1: entered allmulticast mode [ 530.899725][T19854] hsr0: entered allmulticast mode [ 530.908594][T19854] veth1_virt_wifi: entered allmulticast mode [ 530.921490][T19854] veth0_virt_wifi: entered allmulticast mode [ 530.933428][T19854] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 530.943522][T19854] veth1_vlan: entered allmulticast mode [ 530.972714][T19854] vlan1: entered allmulticast mode [ 530.981105][T19854] macvlan0: entered allmulticast mode [ 530.996436][T19854] macvlan1: entered allmulticast mode [ 531.007965][T19854] ipvlan0: entered allmulticast mode [ 531.016228][T19854] ipvlan1: entered allmulticast mode [ 531.028063][T19854] veth1_macvtap: entered allmulticast mode [ 531.042305][T19854] veth0_macvtap: entered allmulticast mode [ 531.052748][T19868] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3793'. [ 531.064404][T19854] macvtap0: entered allmulticast mode [ 531.079902][T19854] macsec0: entered allmulticast mode [ 531.093971][T19854] geneve0: entered allmulticast mode [ 531.107863][T19854] geneve1: entered allmulticast mode [ 531.118497][T19854] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 531.137488][T19854] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 531.157690][T19854] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 531.195867][T19854] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 531.237123][ T5159] non-paged memory [ 531.241500][ T5159] list_del corruption, ffff888075a3bd80->next is LIST_POISON1 (dead000000000100) [ 531.255846][ T5159] ------------[ cut here ]------------ [ 531.261450][ T5159] kernel BUG at lib/list_debug.c:58! [ 531.267156][ T5159] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 531.272221][T19854] mac80211_hwsim hwsim34 wlan0: entered allmulticast mode [ 531.273538][ T5159] CPU: 0 UID: 0 PID: 5159 Comm: kworker/u9:1 Not tainted 6.16.0-syzkaller-06589-g010510128873 #0 PREEMPT(full) [ 531.292882][ T5159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 531.293095][T19873] netlink: 'syz.4.3795': attribute type 4 has an invalid length. [ 531.303071][ T5159] Workqueue: hci3 hci_conn_timeout [ 531.303111][ T5159] RIP: 0010:__list_del_entry_valid_or_report+0x10e/0x190 [ 531.303149][ T5159] Code: 80 0d e3 8b 48 89 de e8 50 56 5a fc 90 0f 0b 4c 89 e7 e8 a5 c0 34 fd 48 c7 c7 e0 0d e3 8b 48 89 de 4c 89 e2 e8 33 56 5a fc 90 <0f> 0b 4c 89 e7 e8 88 c0 34 fd 48 c7 c7 40 0e e3 8b 48 89 de 4c 89 [ 531.303170][ T5159] RSP: 0018:ffffc9000e457980 EFLAGS: 00010246 [ 531.303190][ T5159] RAX: 000000000000004e RBX: ffff888075a3bd80 RCX: 1bd5955a1d5ad600 [ 531.303207][ T5159] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 531.303221][ T5159] RBP: ffffffff8a7d7390 R08: 0000000000000003 R09: 0000000000000004 [ 531.303235][ T5159] R10: dffffc0000000000 R11: fffffbfff1bfa5cc R12: dead000000000100 [ 531.303252][ T5159] R13: dffffc0000000000 R14: dead000000000100 R15: dead000000000122 [ 531.303269][ T5159] FS: 0000000000000000(0000) GS:ffff888125c80000(0000) knlGS:0000000000000000 [ 531.303288][ T5159] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 531.303303][ T5159] CR2: 000020000000c900 CR3: 000000007cb62000 CR4: 00000000003526f0 [ 531.303323][ T5159] Call Trace: [ 531.303334][ T5159] [ 531.303347][ T5159] hci_cmd_sync_dequeue_once+0x24a/0x370 [ 531.303380][ T5159] hci_cancel_connect_sync+0xc8/0x120 [ 531.303402][ T5159] hci_abort_conn+0x191/0x330 [ 531.303433][ T5159] ? process_scheduled_works+0x9ef/0x17b0 [ 531.303468][ T5159] process_scheduled_works+0xae1/0x17b0 [ 531.303515][ T5159] ? __pfx_process_scheduled_works+0x10/0x10 [ 531.303558][ T5159] worker_thread+0x8a0/0xda0 [ 531.303592][ T5159] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 531.303626][ T5159] ? __kthread_parkme+0x7b/0x200 [ 531.303652][ T5159] kthread+0x70e/0x8a0 [ 531.303678][ T5159] ? __pfx_worker_thread+0x10/0x10 [ 531.303710][ T5159] ? __pfx_kthread+0x10/0x10 [ 531.303735][ T5159] ? _raw_spin_unlock_irq+0x23/0x50 [ 531.303772][ T5159] ? lockdep_hardirqs_on+0x9c/0x150 [ 531.303800][ T5159] ? __pfx_kthread+0x10/0x10 [ 531.303824][ T5159] ret_from_fork+0x3fc/0x770 [ 531.303856][ T5159] ? __pfx_ret_from_fork+0x10/0x10 [ 531.303891][ T5159] ? __switch_to_asm+0x39/0x70 [ 531.303915][ T5159] ? __switch_to_asm+0x33/0x70 [ 531.523161][ T5159] ? __pfx_kthread+0x10/0x10 [ 531.527957][ T5159] ret_from_fork_asm+0x1a/0x30 [ 531.532767][ T5159] [ 531.536161][ T5159] Modules linked in: [ 531.542219][ T5159] ---[ end trace 0000000000000000 ]--- [ 531.550498][ T5159] RIP: 0010:__list_del_entry_valid_or_report+0x10e/0x190 [ 531.557804][ T5159] Code: 80 0d e3 8b 48 89 de e8 50 56 5a fc 90 0f 0b 4c 89 e7 e8 a5 c0 34 fd 48 c7 c7 e0 0d e3 8b 48 89 de 4c 89 e2 e8 33 56 5a fc 90 <0f> 0b 4c 89 e7 e8 88 c0 34 fd 48 c7 c7 40 0e e3 8b 48 89 de 4c 89 [ 531.560416][T19854] mac80211_hwsim hwsim35 wlan1: entered allmulticast mode [ 531.578934][ T5159] RSP: 0018:ffffc9000e457980 EFLAGS: 00010246 [ 531.592955][ T5159] RAX: 000000000000004e RBX: ffff888075a3bd80 RCX: 1bd5955a1d5ad600 [ 531.592988][T19854] bond1: left promiscuous mode [ 531.601800][ T5159] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 531.615306][ T5159] RBP: ffffffff8a7d7390 R08: 0000000000000003 R09: 0000000000000004 [ 531.615338][T19854] macvlan2: left promiscuous mode [ 531.624685][ T5159] R10: dffffc0000000000 R11: fffffbfff1bfa5cc R12: dead000000000100 [ 531.624712][ T5159] R13: dffffc0000000000 R14: dead000000000100 R15: dead000000000122 [ 531.624730][ T5159] FS: 0000000000000000(0000) GS:ffff888125d80000(0000) knlGS:0000000000000000 [ 531.624750][ T5159] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 531.624766][ T5159] CR2: 00007fca36a24f98 CR3: 000000005fee0000 CR4: 00000000003526f0 [ 531.624798][ T5159] Kernel panic - not syncing: Fatal exception [ 531.625134][ T5159] Kernel Offset: disabled