last executing test programs: 1m37.613183457s ago: executing program 1 (id=892): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000002060500000000000000000000000000050004000a0000000900020073797a30000000001400078008001340000000000800124000001800050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) 1m23.795041653s ago: executing program 1 (id=892): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000002060500000000000000000000000000050004000a0000000900020073797a30000000001400078008001340000000000800124000001800050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) 1m7.581728847s ago: executing program 1 (id=892): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000002060500000000000000000000000000050004000a0000000900020073797a30000000001400078008001340000000000800124000001800050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) 49.875406345s ago: executing program 1 (id=892): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000002060500000000000000000000000000050004000a0000000900020073797a30000000001400078008001340000000000800124000001800050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) 39.838393115s ago: executing program 3 (id=1388): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001a000100000000000000000002000000000000000000000008000400", @ANYRES32=0x0, @ANYBLOB="140007"], 0x38}}, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001fc0)={0x0}, &(0x7f0000002000)=0xc) sendmmsg$unix(r2, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000240)="af", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@cred={{0x1c, 0x1, 0x2, {r4}}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x38}}], 0x2, 0x801) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, r6, 0x10, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001a000100000000000000000002000000000000000000000008000400", @ANYRES32=0x0, @ANYBLOB="140007"], 0x38}}, 0x0) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) (async) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) (async) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001fc0), &(0x7f0000002000)=0xc) (async) sendmmsg$unix(r2, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000240)="af", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@cred={{0x1c, 0x1, 0x2, {r4}}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x38}}], 0x2, 0x801) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, r6, 0x10, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) (async) 39.455280357s ago: executing program 3 (id=1390): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000300)='GPL\x00', 0x80040005, 0x0, 0x0, 0x40f00, 0x10}, 0x94) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async, rerun: 32) r0 = socket$kcm(0x10, 0x2, 0x4) (rerun: 32) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006b47880000d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003680601000008000300ff000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 38.756753514s ago: executing program 3 (id=1396): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000640)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="02"], 0x10) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(r0) (async, rerun: 64) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000006c0)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYBLOB="0200"], 0x10) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9}, 0x48) 38.392911765s ago: executing program 3 (id=1398): socket$alg(0x26, 0x5, 0x0) close(0x3) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000080)=ANY=[@ANYRESOCT], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32=0x1, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000030000000500000000000000000000000300000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r2) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f00000000c0)={'veth1_virt_wifi\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3c}}}) ioctl$SIOCSIFHWADDR(r2, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) setsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f0000000100)=0x1, 0x4) ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) listen(0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000010000000000ea00"/28], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r3, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6}, 0x20) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)=""/256, 0x100}], 0x1, 0x0, 0x0, 0xf5ffffff}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000000080)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'ip6gre0\x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='freezer.parent_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x52, r5, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x8, 0x0}, 0x8) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)=@generic={&(0x7f0000000540)='./file0\x00', 0x0, 0x10}, 0x18) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000018c0)=ANY=[@ANYBLOB="540000001200010300"/56, @ANYRES32=0x0, @ANYBLOB="0000000000000080fffffff0000000000800030011"], 0x54}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000001840)=[{&(0x7f0000001500)=""/19, 0x13}], 0x1) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)='%pS \x00'}, 0x20) socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)={0x1b, 0x0, 0x0, 0x14, 0x0, r4, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x4}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x1d, 0x2b, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000004000000000000000900000018110000", @ANYRES32=r1, @ANYRESHEX=r0, @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a500000018180000", @ANYRES32=r2, @ANYBLOB="0000000000000000055e06007700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000d30c00007b8af8ff00000000bda200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018280000", @ANYRES32, @ANYBLOB="00000000080000008500000002000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x22, &(0x7f0000000200)=""/34, 0x41000, 0x35, '\x00', 0x0, 0x1b, r5, 0x8, &(0x7f0000000240)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0x0, 0xb, 0xf88}, 0x10, r6, 0x0, 0x4, &(0x7f0000000700)=[r7, r9, r10], &(0x7f0000000740)=[{0x4, 0x5, 0x3, 0x6}, {0x3, 0x2, 0xd, 0xc}, {0x2, 0x2, 0xa, 0xb}, {0x2, 0x2, 0xc, 0x5}], 0x10, 0x8}, 0x94) 37.886534438s ago: executing program 3 (id=1403): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="05000000000000007b113400000000008510000002000000850000000000000095003300000000009500a5660e0000209f3be7f40752ed289350a3b5257dfc7e5429619ce459a63169ccb691d1a8f1ab83013d"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) 36.306939299s ago: executing program 1 (id=892): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000002060500000000000000000000000000050004000a0000000900020073797a30000000001400078008001340000000000800124000001800050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) 13.10780205s ago: executing program 3 (id=1403): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="05000000000000007b113400000000008510000002000000850000000000000095003300000000009500a5660e0000209f3be7f40752ed289350a3b5257dfc7e5429619ce459a63169ccb691d1a8f1ab83013d"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) 10.463241131s ago: executing program 1 (id=892): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000002060500000000000000000000000000050004000a0000000900020073797a30000000001400078008001340000000000800124000001800050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) 2.712369489s ago: executing program 2 (id=1590): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x30, r1, 0x1, 0x10100, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_TDLS_PEER={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008814}, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) (async) write$bt_hci(r4, &(0x7f0000000040)=ANY=[], 0x6) r5 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), r3) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000fc0)={'team0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'erspan0\x00', &(0x7f00000000c0)={'syztnl2\x00', r6, 0x8000, 0x8, 0x0, 0xb, {{0x1a, 0x4, 0x0, 0x29, 0x68, 0x64, 0x0, 0x3d, 0x4, 0x0, @multicast1, @rand_addr=0x64010102, {[@generic={0x86, 0x9, "b099befd601393"}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x14, 0xff, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}]}, @cipso={0x86, 0x31, 0x2, [{0x1, 0x7, "62e81f6fb2"}, {0x6, 0x3, 'G'}, {0x2, 0x11, "c22518415fea52f9d753314c2f4470"}, {0x6, 0x10, "9f4bd508bf0bfb006a2251576734"}]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000240)={0x294, r5, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r6}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r6}, {0x1fc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}]}, 0x294}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000000000)={0x60, r5, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r6}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r6}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 2.563939205s ago: executing program 4 (id=1593): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @private, @broadcast}, &(0x7f0000000080)=0xc) sendmsg$can_j1939(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1d, r1, 0x3, {0x863e85a4aa8d22df, 0xf0}, 0xff}, 0x18, &(0x7f0000000100)={&(0x7f0000000280)="02f1b759efba22fb1d8437139423d0d324407362b7cd3437de4aff99585f37c0d2cb255ad783d4724062f9ed005b9faa7f51b7d6e5741be4fd0e5c5f472283c8088132c96d275aab005af0553b0edaab0f0c44bc704a6504c3ac5e8a33714950b46839e45465489ed1e42cf8c033f5873db943cd0f91614ce763b3555cb8ddcd9d07b1502ab316f06c7478caa40d3ad0b07d", 0x92}, 0x1, 0x0, 0x0, 0x24000000}, 0x40001) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002abd700017bc50de759c76a908000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2.381371727s ago: executing program 2 (id=1595): r0 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x11, 0xd, r1, 0x1, 0xda, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=@ethtool_sset_info={0x37, 0xe, 0xffffffff}}) r4 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, 0x0, 0x20) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_xfrm(r2, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000bc0)=@newspdinfo={0x24, 0x24, 0x10, 0x70bd28, 0x25dfdbfd, 0x7, [@XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x24}}, 0x0) 2.310473476s ago: executing program 4 (id=1596): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x78, r1, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xff, 0x1b}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0xcb}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x243}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r2}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xfffffffc, 0x7ff}}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x8000}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x2c, &(0x7f0000000200)=[@in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffffff}]}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000002c0)={r4, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}}, 0x6, 0x8000, 0x0, 0x9, 0xc4, 0x2, 0x3}, &(0x7f0000000380)=0x9c) r6 = getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000400)={{{@in=@multicast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@empty}}, &(0x7f0000000500)=0xe8) sendmsg$nl_generic(r0, &(0x7f0000000b00)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000540)={0x560, 0x21, 0x200, 0x70bd26, 0x25dfdbfe, {0x1e}, [@nested={0x223, 0x99, 0x0, 0x1, [@generic="8e81384117c2313290d2e3770bbd16abda653a33f284fa718ebf2fc3efe908d3dc6de189a7d88685609e1372da7a23648a37fdfb5ea50e25e7078a94403ac98dda98e2e8055eedd1d9f27d2f8fbe105088f82c2cae76792c72742cc372b9a5f2b290fb8a8317975c5581d48c6b0b05e0b4ecb55dcb021cf81eb3c78f3d6382083c9a08897033c8a226d25e33ffc0304a94207bf68a766a237bf06811f3259188fe1790681216a518f5f9f772a33ecd96861c9e153ab44c6269be8781402507fd7a2f7f0161b78bdfb74b7b4bcab4685dba1550d9fb16e400876b1df7c69686d3057a7bb8e3209e7e1ac92f9394c52bb08246915e6b2a0ed88295fa0933d5", @generic="1cfd5175f8854efb7346b08d648fe1c4d3e8037ff4589fb0822c6e10a3f022f208ca65999e1df38cd7b7c9ba7199346f43d3a15ba45f9dc53734fd3fcf31f52194e40365c351436a355501ecd3db14e393b85d4987bda678a7a6c019b40dbbb91abd268e04575c9ffd7850b726b573bd7d5d01e5b8d5fc9172ce1e248c90cbd95b436e7654919c407c5ea3ae56644a", @generic="8a8d79777b2552b9d6b7f3e18c0f4210eaad1a324596ba4dc0fb5a25d37fd3eaed121b6fbce47b241454ab35140fe43f76ebc278b6c586a1369a9944916468e35c3f573324ebc81f8652f1c16ab9f92079f7220b24cc9a46da7979b950043e20ae129442018d7df90b3fe928022f4aafe83399cfc2f82e8d64d634d78835", @typed={0x8, 0xbe, 0x0, 0x0, @pid=r6}, @nested={0x4, 0x10c}, @typed={0x8, 0x2, 0x0, 0x0, @ipv4=@multicast1}]}, @typed={0x8, 0xca, 0x0, 0x0, @uid=r8}, @typed={0x4, 0x4f}, @nested={0x219, 0x12e, 0x0, 0x1, [@generic="02d657a214857a79a3ca109fde77e43ee3723a83e87a4a506da382", @generic="446a853b6fbf612746a5bac37ebf79a14dd8637b5d6e04a977c53db8088f205a8be901c4410b7807ba976a8c16df9a1da1802b6df1538f07fa5af74afc1f46823c568b35f0aaf06145871534ab39000b02b76894a633c5b7ad37fa84ef9c490c7fae1ecd5fea9c7ffc39817fb0ce89dd3152b8b504e5979a3470d5b34ad2b0d3df5c15267f4e761b2201139022b890e58696037079bc5a1e1ec1acd2b2deda775b39fafb23d907183027364cf0299b560af200e556c90a5684d03f93c4a8ae31f1953d7e1f54c4", @nested={0x4, 0x121}, @generic="59e74ec87b02bcd3987cdad3f468d4b44061a93909036ccfa22377c93d12b0e7d9bd6565c8e4aff8cbfc72b98bc8d29bcf830aa621c3f814639cfda283fd844362fdc4b884e5a3331335e52f140a55c07c4226d9a609370bd62c1cb02564454533b85f0aa3fb13c82fc435fe6732d2aaf77ecc068220adb120b412280f4c989c1f9ec423a7dc4262f5a79326de828a5282b94e347491b31f9944487e218f925e444aad1536c1bf22b64b67ce6f96ba9b11433ccabf2038f5399dc4723e995635a076718240ef9b596b9c3249368bd5241f8b519c20ab3ea6ddf2c802798a84a9e35773d6db2956c4b0c75e", @generic="f585c5661ec3e0bccf488f2f2a5030c73b91de56773e208d94c29f29e3e8f74814c925d987f4ab1f2106e8e42691875d2d43914bb94ed95aea6395af8fdbae24", @nested={0x4, 0x141}, @generic]}, @typed={0x4, 0x115}, @generic="d2f30d863a9da0b4649b4ef4dec0f5a95bc556ae640f41ae1cb46e740ccb283a9de7473ed98447c624670d3c1a3c4aa40c2de0f81757f0c32ffab57c56929487085b81c50ac8619fc0226e48e1fe42fde8c08663c5fab149bcafb99ed3682354d469bd5268ada04dd5015068094f9a04abeea04a3725b76a3414802000c9c9ce47df90d7b609562447936ba734019e1f7b57e443fed41b302e4327fe48b19858e39480d76f0f5ca806933aa490c697f5f96a5c015233b6701a1a3f020aad45edbae055729a40331db67a300f6a7efab88e8580f8a5b558f1d4e5c25b82ca8158511d9864ea7610a6db8d310599cdaf096e", @nested={0x8, 0xb6, 0x0, 0x1, [@nested={0x4, 0x134}]}]}, 0x560}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendto$inet(r0, &(0x7f0000000b40)="38b21f7b10135a4cad06bd33409120d9c7c8e20ee5739038861adb500427cbf857ff5416d8ea051f3949f06b", 0x2c, 0x80, &(0x7f0000000b80)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r10 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r10, 0x84, 0x6, &(0x7f0000000bc0)={r5, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r10, 0x84, 0x66, &(0x7f0000000c80)={r5, 0xee}, &(0x7f0000000cc0)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000d00)={r11, 0xfffd}, 0x8) r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000d80), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x90, r12, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_team\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:inetd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0}]}, 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x4040051) bind$bt_hci(r9, &(0x7f0000000f00)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000f40)=@assoc_value={r11}, &(0x7f0000000f80)=0x8) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001000)=@security={'security\x00', 0xe, 0x4, 0x450, 0xffffffff, 0x270, 0x380, 0x140, 0xffffffff, 0xffffffff, 0x380, 0x380, 0x380, 0xffffffff, 0x4, &(0x7f0000000fc0), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xffffff00, 0xff], [0xff000000, 0x0, 0xff000000], 'veth0_to_hsr\x00', 'macsec0\x00', {}, {}, 0x90, 0x0, 0x2, 0x40}, 0x0, 0x100, 0x140, 0x0, {}, [@common=@icmp6={{0x28}, {0x11, "1233"}}, @common=@srh={{0x30}, {0x21, 0x0, 0x7, 0x5, 0x3e9b, 0x80d, 0x42}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x38, 0x3, 0x3, 0x4, 0x5e, 0x7, 0x2, 0x8]}}}, {{@uncond, 0x0, 0x100, 0x130, 0x0, {}, [@common=@frag={{0x30}, {[0x1, 0x2], 0xff, 0x9, 0x1}}, @common=@mh={{0x28}, {"56dd", 0x1}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x4, 0x1, 0x2}, {0xffffffffffffffff, 0x4, 0x4}, 0x3}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0xff000000, 0xffffffff, 0xffffffff], [0xff, 0xffffff00, 0xff, 0xff000000], 'veth1_vlan\x00', 'ip6gretap0\x00', {0xff}, {0xff}, 0xc, 0x4, 0x1, 0x3}, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@ipv6header={{0x28}, {0x2, 0x4}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7f, 0x735, 0x4353, 0x1, 0x7, 0x2ea9, 0x2, 0x100]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r13, &(0x7f0000001580)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x102000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x14, r1, 0x2, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x24, r1, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r10, 0x84, 0x15, &(0x7f00000016c0)={0x7}, 0x1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001780)={'syztnl1\x00', &(0x7f0000001700)={'ip6gre0\x00', r7, 0x29, 0x8, 0x7, 0x400, 0x20, @empty, @empty, 0x40, 0x1, 0x1000, 0x4}}) r14 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f00000017c0)={'wlan0\x00'}) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f0000001800)={r5, @in6={{0xa, 0x4e22, 0x6, @mcast1, 0x3929c44a}}, 0xf4, 0x7, 0x55c, 0xff, 0x28, 0x8a76, 0x40}, 0x9c) 2.135963723s ago: executing program 4 (id=1597): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0xfff, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="e8020000000000002900000004000000005a"], 0x2e8}}], 0x2, 0x0) 2.135253148s ago: executing program 2 (id=1598): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = epoll_create(0x4) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, &(0x7f00000000c0)=0x1c) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000280)={0x2000}) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x34}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x98}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) setsockopt$sock_int(r3, 0x1, 0x31, &(0x7f0000001600), 0x4) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r5 = socket$netlink(0x10, 0x3, 0x0) getsockname(r2, &(0x7f0000000940)=@x25, &(0x7f00000009c0)=0x80) sendmsg$nl_generic(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)={0x14, 0x2a, 0x229, 0x70bd2b, 0x0, {0xa}}, 0x14}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x40, 0x7f00, 0x6, 0x0, {{0x16, 0x4, 0x0, 0x34, 0x58, 0x65, 0x0, 0xff, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010102, {[@rr={0x7, 0x7, 0x8, [@broadcast]}, @timestamp={0x44, 0x1c, 0x75, 0x0, 0x8, [0x2, 0x8, 0x2, 0x6, 0x7fffffff, 0x800]}, @ssrr={0x89, 0x1f, 0xc9, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @rand_addr=0x64010101, @multicast1, @broadcast, @multicast2, @rand_addr=0x64010102]}]}}}}}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@initdev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000000640)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000000900)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="08020000200000032cbd7000fddb8b253c000000000000000000000000000000b7aa0001fc0100130000000000000000000000014e2300004e240001020000a03f000000", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="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"], 0x208}, 0x1, 0x0, 0x0, 0x80010}, 0x24040480) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@updsa={0x154, 0x1a, 0x1, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x1a}, @in6=@mcast2, 0x4e22, 0x0, 0x0, 0x0, 0x2, 0xa0}, {@in, 0x0, 0x6c}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0xffffffff}}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x154}}, 0x0) 2.064134641s ago: executing program 4 (id=1599): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000018007b18e00212ba0d8105040a601100fe0f040b067c55a1bc00090009000500000000001500150005000000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbecbf29d746e7372f2a00001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fa", 0x95}], 0x1, 0x0, 0x0, 0x2663}, 0x4004840) r0 = socket$nl_crypto(0x10, 0x3, 0x15) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000080)=@phonet, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/33, 0x21}, {&(0x7f0000000200)=""/198, 0xc6}, {&(0x7f0000000300)=""/176, 0xb0}], 0x3, &(0x7f0000000400)=""/251, 0xfb}, 0x2) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000180)=ANY=[@ANYRES16=r0], 0xe0}], 0x1, 0x0, 0x0, 0x20040844}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x38, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xf4, 0x2e}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xb2906db99edbd243}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x50}]}, 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) 1.980638826s ago: executing program 0 (id=1600): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x8800) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000001c0)={0x6, &(0x7f0000000180)=[{0x8, 0x0, 0xd8, 0x5}, {0xffff, 0x2, 0x0, 0x1}, {0x8, 0x9, 0x10, 0x8}, {0x0, 0x0, 0x6, 0x2}, {0xf, 0x2, 0xf}, {0x0, 0xa, 0xb, 0x1}]}, 0x10) (async) socket$netlink(0x10, 0x3, 0x13) (async) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r5 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r5, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c068c0a7d2eaebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838029f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x14, 0x29, 0x43}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x9fc) ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000140)) (async) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newqdisc={0x28, 0x24, 0x0, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0x9}}, [@TCA_STAB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000880}, 0x20008000) 1.893133038s ago: executing program 2 (id=1601): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt(0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000000) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8dde", "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) recvmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000) shutdown(r0, 0x1) 1.773707955s ago: executing program 0 (id=1602): r0 = socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bridge_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x18, 0x71, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x18}, 0x1, 0x0, 0x0, 0x2000818}, 0x40) socket$pppl2tp(0x18, 0x1, 0x1) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x18, 0x4, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_CHAIN_HOOK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20044084}, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x4}}, 0x74}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x4}}, 0x74}}, 0x0) recvmmsg(r3, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) 1.319968343s ago: executing program 0 (id=1603): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000003e0007010300000000000000017c0000040042800c00018006000600843b0000100002800c0009"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newsa={0x140, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4}, {0x0, 0x2}, 0x0, 0x0, 0x2, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @tfcpad={0x8}]}, 0x140}}, 0x0) 1.177181163s ago: executing program 2 (id=1604): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200048000000007020000f8ffffffb703000008000000b704000000000000850000001e00000085000000a000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.160689549s ago: executing program 4 (id=1605): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x22, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x6, 0xd], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x226, 0x0, 0xfffc, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) (async, rerun: 32) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x28, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000800)=@security={'security\x00', 0xe, 0x4, 0x478, 0xffffffff, 0x0, 0xf8, 0x1c8, 0xffffffff, 0xffffffff, 0x3e0, 0x3e0, 0x3e0, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@ip={@multicast1, @loopback, 0x0, 0xffffffff, 'vlan1\x00', 'pim6reg0\x00', {}, {0xff}, 0x67, 0x0, 0x20}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@addrtype={{0x30}, {0x8, 0xd263e867bb396667, 0x2, 0x1}}, @common=@socket0={{0x20}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x0, 0x4}, {0x0, 0x3, 0x2}, {0x1, 0x0, 0x4}, 0x4d, 0x9}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x6, 0x1, 0x0, 0x2, 0x1, 0x4], 0x4, 0x5}, {0x3, [0x3, 0x1, 0x2, 0x2, 0x7, 0x1], 0x6, 0x6}}}}, {{@ip={@empty, @empty, 0xff, 0xffffff00, 'lo\x00', 'veth0_to_hsr\x00', {0xff}, {}, 0x6, 0x0, 0x69}, 0x0, 0x1b8, 0x218, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[0x4e22, 0x4e21], [0x4e22, 0x4e22], [0x4, 0xfffffffb, 0x8, 0x2, 0xdd, 0x9, 0x7, 0x9, 0xfffffff9, 0x4, 0x5, 0x7, 0x3, 0x6, 0x5, 0x0, 0x1000, 0x14d, 0x68df, 0x400, 0x9, 0x6, 0x40, 0xfce6, 0x2, 0x5, 0x3, 0x8a, 0xfffffff7, 0x2, 0x0, 0x1, 0x9, 0x5, 0x8000, 0x76b4, 0x7f, 0x412, 0x4, 0x8, 0x9, 0xffffffff, 0x2, 0x1b5, 0x21b6, 0x8, 0x2, 0x9, 0x8, 0x2, 0x9, 0x110, 0x2ab, 0x5, 0x101, 0x9, 0xbdc2, 0x200, 0x2, 0x5, 0x3, 0x1, 0x7, 0xbee], 0x6, [{0x9, 0x8b}, {}, {0x3, 0x2, 0x6b}, {0xad, 0x9, 0x2}], 0x0, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x0, 0x1, 0x2, 0x0, 0x0, 0x2], 0x3, 0x2}, {0xffffffffffffffff, [0x0, 0x2, 0x5, 0x0, 0x2, 0x1], 0x1, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d8) 1.145402019s ago: executing program 0 (id=1606): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x30}], {0x95, 0x0, 0x700}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3b, 0x0, &(0x7f00000000c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, r2, 0x4, 0x70bd2d, 0x80, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c810}, 0x4048080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x30}], {0x95, 0x0, 0x700}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) (async) socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$sock_buf(r0, 0x1, 0x3b, 0x0, &(0x7f00000000c0)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, r2, 0x4, 0x70bd2d, 0x80, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c810}, 0x4048080) (async) 1.017111556s ago: executing program 2 (id=1607): r0 = socket$rds(0x15, 0x5, 0x0) connect$rds(r0, &(0x7f00000001c0)={0x2, 0x0, @empty}, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x19, 0x4, 0x8, 0x6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000fbffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01032cbd7000fedbdf2501000000080001005300000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099002100000057000000"], 0x30}, 0x1, 0x0, 0x0, 0x11}, 0x10000000) (async) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01032cbd7000fedbdf2501000000080001005300000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099002100000057000000"], 0x30}, 0x1, 0x0, 0x0, 0x11}, 0x10000000) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000070000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="10000180"], 0x28}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000070000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="10000180"], 0x28}}, 0x0) 1.016589246s ago: executing program 0 (id=1608): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x206, 0x8, 0x9, 0x95, 0x0, @broadcast}, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'nr0\x00', 0x2000}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'nr0\x00', 0x1}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r1) 59.963908ms ago: executing program 4 (id=1609): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000140)=0xa84, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0xfff, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="e8020000000000002900000004000000005a"], 0x2e8}}], 0x2, 0x0) 0s ago: executing program 0 (id=1610): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003800010324bd7002fa0000ca07"], 0x14}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10800}, 0x1) (async) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10800}, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) socket(0xa, 0x2400000001, 0x0) (async) r3 = socket(0xa, 0x2400000001, 0x0) getsockopt$inet6_buf(r3, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x3b, 0x0, &(0x7f00000000c0)=0xe00) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x5, @none, 0x0, 0x2}, 0xe) (async) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x5, @none, 0x0, 0x2}, 0xe) listen(r6, 0xa1) accept4$bt_l2cap(r6, 0x0, 0x0, 0x0) setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f0000000080), 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x24, r8, 0x1, 0x0, 0x40000, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x51}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r8, 0x108, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) (async) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r8, 0x108, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r9, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYBLOB='\t\x00'], 0x9) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r8, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x491}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) kernel console output (not intermixed with test programs): an invalid length. [ 112.976852][ T6612] netlink: 24 bytes leftover after parsing attributes in process `syz.3.201'. [ 114.105920][ T6673] openvswitch: netlink: Multiple metadata blocks provided [ 114.179821][ T6677] netlink: 12 bytes leftover after parsing attributes in process `syz.0.219'. [ 114.286677][ T6682] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 114.658007][ T6698] x_tables: duplicate underflow at hook 2 [ 114.802702][ T6703] netlink: 'syz.3.228': attribute type 29 has an invalid length. [ 114.982318][ T6707] veth0: entered promiscuous mode [ 114.992905][ T6711] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.188862][ T6718] netlink: 'syz.2.235': attribute type 1 has an invalid length. [ 115.195311][ T6717] netlink: 'syz.4.234': attribute type 1 has an invalid length. [ 115.216714][ T6706] veth0: left promiscuous mode [ 115.241875][ T6717] netlink: 'syz.4.234': attribute type 3 has an invalid length. [ 115.270381][ T6717] netlink: 'syz.4.234': attribute type 235 has an invalid length. [ 115.473893][ T6727] netlink: 'syz.1.237': attribute type 1 has an invalid length. [ 115.719253][ T6744] netlink: 'syz.1.242': attribute type 21 has an invalid length. [ 115.737683][ T6744] netlink: 'syz.1.242': attribute type 6 has an invalid length. [ 115.818009][ T6746] netlink: 'syz.0.240': attribute type 21 has an invalid length. [ 116.381151][ T6764] __nla_validate_parse: 10 callbacks suppressed [ 116.381170][ T6764] netlink: 8 bytes leftover after parsing attributes in process `syz.3.248'. [ 116.910481][ T30] audit: type=1107 audit(1750839270.566:2): pid=6777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 117.319096][ T6791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.259'. [ 117.375816][ T6799] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 117.695413][ T6807] netlink: 12 bytes leftover after parsing attributes in process `syz.4.262'. [ 118.150558][ T6826] netlink: 36 bytes leftover after parsing attributes in process `syz.4.269'. [ 118.209975][ T6826] netlink: 12 bytes leftover after parsing attributes in process `syz.4.269'. [ 118.338066][ T6833] netlink: 'syz.3.270': attribute type 10 has an invalid length. [ 118.397830][ T6833] veth1_vlan: entered allmulticast mode [ 118.419729][ T6833] team0: Device veth1_vlan failed to register rx_handler [ 118.953758][ T6858] x_tables: duplicate underflow at hook 3 [ 119.231497][ T6881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.279'. [ 119.405481][ T6901] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 119.883619][ T6910] rdma_op ffff88801c39d9f0 conn xmit_rdma 0000000000000000 [ 120.064359][ T6921] lo: entered promiscuous mode [ 120.069210][ T6921] lo: entered allmulticast mode [ 120.107435][ T6921] tunl0: entered promiscuous mode [ 120.145039][ T6921] tunl0: entered allmulticast mode [ 120.157704][ T6930] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 120.163256][ T6921] gre0: entered promiscuous mode [ 120.226566][ T6921] gre0: entered allmulticast mode [ 120.248396][ T6921] gretap0: entered promiscuous mode [ 120.282891][ T6921] gretap0: entered allmulticast mode [ 120.311999][ T6921] erspan0: entered promiscuous mode [ 120.328913][ T6921] erspan0: entered allmulticast mode [ 120.362844][ T6921] ip_vti0: entered promiscuous mode [ 120.368126][ T6921] ip_vti0: entered allmulticast mode [ 120.398635][ T6921] ip6_vti0: entered promiscuous mode [ 120.445084][ T6921] ip6_vti0: entered allmulticast mode [ 120.481550][ T6921] sit0: entered promiscuous mode [ 120.486578][ T6921] sit0: entered allmulticast mode [ 120.511893][ T6921] ip6tnl0: entered promiscuous mode [ 120.517164][ T6921] ip6tnl0: entered allmulticast mode [ 120.555840][ T6921] ip6gre0: entered promiscuous mode [ 120.580519][ T6921] ip6gre0: entered allmulticast mode [ 120.601665][ T6921] syz_tun: entered promiscuous mode [ 120.606963][ T6921] syz_tun: entered allmulticast mode [ 120.649519][ T6921] ip6gretap0: entered promiscuous mode [ 120.656978][ T6921] ip6gretap0: entered allmulticast mode [ 120.674329][ T6921] bridge0: entered promiscuous mode [ 120.679621][ T6921] bridge0: entered allmulticast mode [ 120.722174][ T6921] vcan0: entered promiscuous mode [ 120.747514][ T6921] vcan0: entered allmulticast mode [ 120.765001][ T6921] bond0: entered promiscuous mode [ 120.770094][ T6921] bond_slave_0: entered promiscuous mode [ 120.794019][ T6921] bond_slave_1: entered promiscuous mode [ 120.799913][ T6921] batadv0: entered promiscuous mode [ 120.814334][ T6921] bond0: entered allmulticast mode [ 120.823159][ T6921] bond_slave_0: entered allmulticast mode [ 120.838280][ T6921] bond_slave_1: entered allmulticast mode [ 120.852092][ T6921] batadv0: entered allmulticast mode [ 120.865575][ T6921] team0: entered promiscuous mode [ 120.872534][ T6921] team_slave_0: entered promiscuous mode [ 120.879562][ T6921] team_slave_1: entered promiscuous mode [ 120.895570][ T6921] team0: entered allmulticast mode [ 120.909915][ T6921] team_slave_0: entered allmulticast mode [ 120.927427][ T6921] team_slave_1: entered allmulticast mode [ 121.041782][ T6921] dummy0: entered promiscuous mode [ 121.054773][ T6921] dummy0: entered allmulticast mode [ 121.112330][ T6921] nlmon0: entered promiscuous mode [ 121.117538][ T6921] nlmon0: entered allmulticast mode [ 121.275504][ T6921] caif0: entered promiscuous mode [ 121.290514][ T6921] caif0: entered allmulticast mode [ 121.320837][ T6921] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 121.737502][ T6993] netlink: 4 bytes leftover after parsing attributes in process `syz.3.295'. [ 121.748797][ T6991] netlink: 'syz.1.297': attribute type 10 has an invalid length. [ 121.778074][ T6991] netlink: 40 bytes leftover after parsing attributes in process `syz.1.297'. [ 121.869085][ T6991] team0: Port device geneve0 added [ 122.249367][ T7010] netlink: 28 bytes leftover after parsing attributes in process `syz.3.299'. [ 122.272219][ T7010] netlink: 4 bytes leftover after parsing attributes in process `syz.3.299'. [ 122.368369][ T7010] macvtap1: entered promiscuous mode [ 122.377215][ T7010] vlan0: entered promiscuous mode [ 122.384236][ T7010] macvtap1: entered allmulticast mode [ 122.389859][ T7010] vlan0: entered allmulticast mode [ 122.561139][ T7018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.302'. [ 122.587395][ T7018] netlink: 16 bytes leftover after parsing attributes in process `syz.4.302'. [ 122.770909][ T7026] netlink: 16 bytes leftover after parsing attributes in process `syz.1.305'. [ 122.838284][ T7032] netlink: 16 bytes leftover after parsing attributes in process `syz.1.305'. [ 122.866542][ T7033] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.307'. [ 122.904366][ T7033] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 123.079569][ T7035] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 123.268917][ T7047] netlink: 'syz.4.311': attribute type 23 has an invalid length. [ 123.664846][ T7063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.317'. [ 124.077987][ T7080] netlink: 'syz.1.322': attribute type 8 has an invalid length. [ 124.102347][ T7084] netlink: 'syz.1.322': attribute type 8 has an invalid length. [ 124.323129][ T7091] batadv1: entered allmulticast mode [ 124.787687][ T7109] netlink: 'syz.4.328': attribute type 12 has an invalid length. [ 125.499382][ T7138] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 125.790441][ T7151] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 125.802100][ T754] bond0: (slave bond_slave_0): interface is now down [ 125.809085][ T754] bond0: (slave bond_slave_1): interface is now down [ 125.877608][ T754] bond0: now running without any active interface! [ 125.900402][ T7149] FAULT_INJECTION: forcing a failure. [ 125.900402][ T7149] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 125.936957][ T7147] pim6reg1: entered promiscuous mode [ 125.958089][ T7147] pim6reg1: entered allmulticast mode [ 125.981385][ T7149] CPU: 0 UID: 0 PID: 7149 Comm: syz.0.340 Not tainted 6.16.0-rc2-syzkaller-00179-g9caca6ac0e26 #0 PREEMPT(full) [ 125.981416][ T7149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 125.981428][ T7149] Call Trace: [ 125.981436][ T7149] [ 125.981445][ T7149] dump_stack_lvl+0x189/0x250 [ 125.981482][ T7149] ? __pfx____ratelimit+0x10/0x10 [ 125.981513][ T7149] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.981551][ T7149] ? __pfx__printk+0x10/0x10 [ 125.981575][ T7149] ? fs_reclaim_acquire+0x7d/0x100 [ 125.981608][ T7149] should_fail_ex+0x414/0x560 [ 125.981639][ T7149] prepare_alloc_pages+0x213/0x610 [ 125.981671][ T7149] __alloc_frozen_pages_noprof+0x123/0x370 [ 125.981701][ T7149] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 125.981746][ T7149] alloc_pages_mpol+0x232/0x4a0 [ 125.981773][ T7149] alloc_pages_noprof+0xa9/0x190 [ 125.981797][ T7149] pte_alloc_one+0x21/0x170 [ 125.981829][ T7149] __pte_alloc+0x25/0x1a0 [ 125.981858][ T7149] __handle_mm_fault+0x4b8a/0x5620 [ 125.981887][ T7149] ? __lock_acquire+0xab9/0xd20 [ 125.981935][ T7149] ? __pfx___handle_mm_fault+0x10/0x10 [ 125.981967][ T7149] ? lock_vma_under_rcu+0xf8/0x710 [ 125.981999][ T7149] ? lock_vma_under_rcu+0xf8/0x710 [ 125.982020][ T7149] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 125.982049][ T7149] handle_mm_fault+0x40a/0x8e0 [ 125.982092][ T7149] do_user_addr_fault+0xa81/0x1390 [ 125.982126][ T7149] ? rcu_is_watching+0x15/0xb0 [ 125.982157][ T7149] ? trace_page_fault_user+0x84/0x1e0 [ 125.982187][ T7149] exc_page_fault+0x76/0xf0 [ 125.982220][ T7149] asm_exc_page_fault+0x26/0x30 [ 125.982239][ T7149] RIP: 0033:0x7f142af4a21f [ 125.982256][ T7149] Code: f6 48 89 df e8 e2 47 04 00 85 c0 0f 85 4a 01 00 00 48 8b 05 1b aa 23 00 48 83 e8 01 4c 39 f0 0f 82 c6 00 00 00 66 0f 6f 0c 24 <4c> 89 6b 20 0f 11 4b 10 48 83 c4 18 48 89 d8 5b 5d 41 5c 41 5d 41 [ 125.982278][ T7149] RSP: 002b:00007f142bdf4c00 EFLAGS: 00010286 [ 125.982296][ T7149] RAX: ffffffffffffffff RBX: 00007f141c000000 RCX: 00007f142af8e9e7 [ 125.982311][ T7149] RDX: 0000000000000003 RSI: 0000000000021000 RDI: 00007f141c000000 [ 125.982324][ T7149] RBP: 0000000004000000 R08: 00000000ffffffff R09: 0000000000000000 [ 125.982336][ T7149] R10: 0000000000004022 R11: 0000000000000217 R12: 00007f1420000000 [ 125.982349][ T7149] R13: 0000000000001000 R14: 0000000000021000 R15: 0000000000000000 [ 125.982382][ T7149] [ 125.983987][ T7149] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 126.033159][ T7151] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 127.038103][ T7194] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 127.131361][ T7182] "syz.4.352" (7182) uses obsolete ecb(arc4) skcipher [ 127.146918][ T7200] __nla_validate_parse: 11 callbacks suppressed [ 127.146937][ T7200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.357'. [ 127.231221][ T7200] veth1_to_bond: entered promiscuous mode [ 127.470270][ T7208] No such timeout policy "syz0" [ 127.559600][ T7208] ip6gre1: entered allmulticast mode [ 127.636012][ T7217] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 127.669669][ T7211] netlink: 24 bytes leftover after parsing attributes in process `syz.0.363'. [ 127.719947][ T7217] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 127.785487][ T7221] netlink: 8 bytes leftover after parsing attributes in process `syz.2.366'. [ 128.136243][ T7237] Cannot find add_set index 0 as target [ 128.224555][ T7238] netlink: 56 bytes leftover after parsing attributes in process `syz.1.371'. [ 128.433186][ T7234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.371'. [ 128.626640][ T7253] netlink: 12 bytes leftover after parsing attributes in process `syz.1.378'. [ 128.880099][ T7256] netlink: 72 bytes leftover after parsing attributes in process `syz.3.380'. [ 129.800373][ T7297] netlink: 72 bytes leftover after parsing attributes in process `syz.4.394'. [ 129.933521][ T7300] pimreg: entered allmulticast mode [ 130.153794][ T7309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.398'. [ 130.325731][ T7312] netlink: 156 bytes leftover after parsing attributes in process `syz.0.400'. [ 131.115721][ T7349] netlink: 'syz.0.412': attribute type 33 has an invalid length. [ 131.776483][ T7382] team0: Device gtp0 is of different type [ 131.793532][ T7386] Cannot find del_set index 17 as target [ 131.872190][ T7363] delete_channel: no stack [ 131.910450][ T7386] tipc: Started in network mode [ 131.916924][ T7386] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 131.952167][ T7386] tipc: Enabled bearer , priority 0 [ 132.256449][ T7400] __nla_validate_parse: 5 callbacks suppressed [ 132.256472][ T7400] netlink: 16 bytes leftover after parsing attributes in process `syz.2.426'. [ 132.679769][ T7424] netlink: 72 bytes leftover after parsing attributes in process `syz.0.434'. [ 132.806685][ T7427] netlink: 24 bytes leftover after parsing attributes in process `syz.3.435'. [ 132.955760][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.964067][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.079856][ T5926] tipc: Node number set to 11578026 [ 133.801329][ T7456] netlink: 5 bytes leftover after parsing attributes in process `syz.4.447'. [ 133.848398][ T7456] 0ªX¹¦D: renamed from gretap0 (while UP) [ 133.884404][ T7456] 0ªX¹¦D: left promiscuous mode [ 133.917458][ T7456] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 134.013343][ T7464] netlink: 72 bytes leftover after parsing attributes in process `syz.1.448'. [ 134.588663][ T7485] netlink: 12 bytes leftover after parsing attributes in process `syz.0.456'. [ 134.733756][ T7489] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 134.765909][ T7489] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 134.781979][ T7489] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 134.789301][ T7489] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 134.831801][ T7496] netlink: 28 bytes leftover after parsing attributes in process `syz.3.461'. [ 134.842922][ T7496] netlink: 20 bytes leftover after parsing attributes in process `syz.3.461'. [ 134.852345][ T7489] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 134.863382][ T7496] netlink: 40 bytes leftover after parsing attributes in process `syz.3.461'. [ 134.881071][ T7489] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 134.894391][ T7489] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 134.923410][ T7496] sit0: entered promiscuous mode [ 134.941066][ T7489] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 134.948350][ T7489] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 134.965008][ T7496] sit0: entered allmulticast mode [ 135.383007][ T7519] xt_hashlimit: size too large, truncated to 1048576 [ 135.632891][ T7525] netlink: 'syz.0.470': attribute type 11 has an invalid length. [ 136.600990][ T7574] netlink: 104 bytes leftover after parsing attributes in process `syz.0.483'. [ 136.833997][ T7579] veth0_to_team: entered allmulticast mode [ 136.873643][ T7582] 8021q: VLANs not supported on ipvlan0 [ 136.979317][ T7590] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20004 [ 137.885987][ T7628] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 138.086294][ T7639] netlink: 'syz.2.509': attribute type 4 has an invalid length. [ 138.160038][ T7597] netlink: 'syz.1.494': attribute type 2 has an invalid length. [ 138.232798][ T7597] __nla_validate_parse: 1 callbacks suppressed [ 138.232831][ T7597] netlink: 32 bytes leftover after parsing attributes in process `syz.1.494'. [ 138.310290][ T7649] dvmrp1: entered allmulticast mode [ 138.354048][ T7658] dvmrp1: left allmulticast mode [ 138.708720][ T7669] netlink: 'syz.4.517': attribute type 21 has an invalid length. [ 138.754473][ T7669] netlink: 128 bytes leftover after parsing attributes in process `syz.4.517'. [ 138.773487][ T7672] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.518'. [ 138.793477][ T7669] netlink: 'syz.4.517': attribute type 5 has an invalid length. [ 138.848735][ T7669] netlink: 3 bytes leftover after parsing attributes in process `syz.4.517'. [ 138.868674][ T7676] netlink: 32 bytes leftover after parsing attributes in process `syz.1.519'. [ 138.924785][ T7679] netlink: 'syz.1.519': attribute type 4 has an invalid length. [ 139.547872][ T7709] syz.0.531 (7709) used obsolete PPPIOCDETACH ioctl [ 139.570096][ T7708] netlink: 8 bytes leftover after parsing attributes in process `syz.3.532'. [ 139.587113][ T7708] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 139.603696][ T7708] netlink: 168 bytes leftover after parsing attributes in process `syz.3.532'. [ 139.619081][ T7711] ieee802154 phy0 wpan0: encryption failed: -22 [ 140.072045][ T7736] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 140.158707][ T7740] netlink: 12 bytes leftover after parsing attributes in process `syz.1.541'. [ 140.188405][ T7741] netlink: 4 bytes leftover after parsing attributes in process `syz.1.541'. [ 140.300076][ T7746] netlink: 'syz.0.540': attribute type 2 has an invalid length. [ 140.433720][ T7745] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 140.528259][ T7756] x_tables: duplicate underflow at hook 1 [ 140.563511][ T7760] netlink: 4 bytes leftover after parsing attributes in process `syz.4.546'. [ 140.801602][ T7768] netlink: 'syz.0.545': attribute type 3 has an invalid length. [ 141.376849][ T7789] IPVS: length: 206 != 8 [ 141.559555][ T7802] pimreg: left allmulticast mode [ 141.598981][ T7796] xt_CT: No such helper "snmp" [ 141.860130][ T7822] netlink: 'syz.4.562': attribute type 1 has an invalid length. [ 141.890344][ T7821] x_tables: duplicate underflow at hook 1 [ 142.378247][ T7838] netlink: 'syz.1.569': attribute type 1 has an invalid length. [ 143.006490][ T7868] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 143.218440][ T7877] netlink: 'syz.0.580': attribute type 1 has an invalid length. [ 143.251732][ T7877] netlink: 'syz.0.580': attribute type 1 has an invalid length. [ 143.273245][ T7877] netlink: 'syz.0.580': attribute type 1 has an invalid length. [ 143.311271][ T7877] netlink: 'syz.0.580': attribute type 2 has an invalid length. [ 143.347382][ T7877] __nla_validate_parse: 10 callbacks suppressed [ 143.347402][ T7877] netlink: 76 bytes leftover after parsing attributes in process `syz.0.580'. [ 143.829594][ T7907] netlink: 16 bytes leftover after parsing attributes in process `syz.2.588'. [ 143.893809][ T7911] netlink: 'syz.2.588': attribute type 39 has an invalid length. [ 143.925113][ T7913] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 143.932425][ T7913] IPv6: NLM_F_CREATE should be set when creating new route [ 143.986594][ T7916] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.591'. [ 144.013624][ T7916] netlink: 96 bytes leftover after parsing attributes in process `syz.3.591'. [ 144.025539][ T7916] netlink: 96 bytes leftover after parsing attributes in process `syz.3.591'. [ 144.233280][ T7924] netlink: 16 bytes leftover after parsing attributes in process `syz.3.593'. [ 144.260951][ T7924] netlink: 16 bytes leftover after parsing attributes in process `syz.3.593'. [ 144.295052][ T7927] netlink: 12 bytes leftover after parsing attributes in process `syz.2.594'. [ 144.310207][ T7924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.593'. [ 144.782420][ T7956] netlink: 68 bytes leftover after parsing attributes in process `syz.3.599'. [ 145.798133][ T7984] raw_sendmsg: syz.2.606 forgot to set AF_INET. Fix it! [ 146.102788][ T7999] netlink: 'syz.3.612': attribute type 11 has an invalid length. [ 146.244605][ T8007] netlink: 'syz.4.615': attribute type 3 has an invalid length. [ 146.301404][ T8006] netlink: 'syz.4.615': attribute type 3 has an invalid length. [ 146.807037][ T8034] xt_ecn: cannot match TCP bits for non-tcp packets [ 146.830182][ T8037] xt_ecn: cannot match TCP bits for non-tcp packets [ 146.837444][ T8041] IPVS: ip_vs_add_dest(): server weight less than zero [ 147.288822][ T8060] netem: incorrect gi model size [ 147.306944][ T8060] netem: change failed [ 147.328521][ T8060] netem: incorrect gi model size [ 147.345539][ T8060] netem: change failed [ 147.867894][ T8092] netlink: 'syz.0.646': attribute type 1 has an invalid length. [ 148.018576][ T8094] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 148.276799][ T8111] wg1: entered promiscuous mode [ 148.863594][ T8129] netlink: 'syz.2.656': attribute type 1 has an invalid length. [ 148.895891][ T8130] netlink: 'syz.2.656': attribute type 1 has an invalid length. [ 149.246531][ T8142] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 150.264470][ T8183] __nla_validate_parse: 10 callbacks suppressed [ 150.264491][ T8183] netlink: 40 bytes leftover after parsing attributes in process `syz.3.673'. [ 150.387449][ T8186] TCP: TCP_TX_DELAY enabled [ 150.560423][ T8193] netlink: 12 bytes leftover after parsing attributes in process `syz.3.677'. [ 150.995751][ T8210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.683'. [ 151.423233][ T8231] netlink: 'syz.4.691': attribute type 10 has an invalid length. [ 151.475801][ T8231] netlink: 40 bytes leftover after parsing attributes in process `syz.4.691'. [ 151.600679][ T8231] geneve0: entered promiscuous mode [ 151.687688][ T8231] geneve0: entered allmulticast mode [ 151.722418][ T8231] team0: Port device geneve0 added [ 151.801546][ T8250] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.810179][ T8250] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.926572][ T8254] net_ratelimit: 24 callbacks suppressed [ 151.926593][ T8254] openvswitch: netlink: EtherType 0 is less than min 600 [ 152.050305][ T8254] netlink: 16 bytes leftover after parsing attributes in process `syz.0.700'. [ 152.176675][ T8266] netlink: 8 bytes leftover after parsing attributes in process `syz.4.703'. [ 152.249091][ T8272] nbd: must specify at least one socket [ 152.579086][ T8280] xt_CT: No such helper "snmp" [ 153.068003][ T8308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.715'. [ 153.091866][ T8309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.715'. [ 153.465915][ T8335] netlink: 36 bytes leftover after parsing attributes in process `syz.0.720'. [ 153.833953][ T8355] bond1: entered promiscuous mode [ 153.839170][ T8355] bond1: entered allmulticast mode [ 153.845285][ T8355] 8021q: adding VLAN 0 to HW filter on device bond1 [ 153.994455][ T5844] Bluetooth: hci4: command 0x0405 tx timeout [ 154.009922][ T8359] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.021376][ T8359] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.117327][ T8371] netlink: 44 bytes leftover after parsing attributes in process `syz.0.732'. [ 154.807086][ T30] audit: type=1800 audit(1750839308.466:3): pid=8404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.745" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 154.807566][ T8404] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 154.879614][ T8404] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 154.898366][ T8404] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 154.997926][ T8404] syz.2.745 (8404) used greatest stack depth: 16696 bytes left [ 155.115193][ T8423] trusted_key: syz.2.750 sent an empty control message without MSG_MORE. [ 155.455310][ T8436] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 155.496171][ T8436] sock: sock_timestamping_bind_phc: sock not bind to device [ 155.511745][ T8436] __nla_validate_parse: 11 callbacks suppressed [ 155.511764][ T8436] netlink: 20 bytes leftover after parsing attributes in process `syz.0.755'. [ 155.540867][ T8436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.755'. [ 155.553309][ T8436] (unnamed net_device) (uninitialized): option arp_validate: invalid value (1025) [ 155.923794][ C1] Illegal XDP return value 16128 on prog (id 179) dev lo, expect packet loss! [ 155.990627][ T8455] netlink: 'syz.2.763': attribute type 10 has an invalid length. [ 156.014430][ T8455] tipc: Resetting bearer [ 156.063510][ T8455] tipc: Resetting bearer [ 156.085579][ T8455] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.108047][ T8455] bond0: (slave team0): Enslaving as an active interface with an up link [ 156.225305][ T8472] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.307969][ T8470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.768'. [ 156.325041][ T8470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.768'. [ 156.334856][ T8470] openvswitch: netlink: nsh attribute has 13 unknown bytes. [ 156.385453][ T8470] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.414483][ T8478] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 156.434381][ T8478] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 157.513490][ T5844] Bluetooth: hci0: command tx timeout [ 158.186690][ T8547] netlink: 8 bytes leftover after parsing attributes in process `syz.4.790'. [ 158.264875][ T8547] netlink: 16 bytes leftover after parsing attributes in process `syz.4.790'. [ 158.507056][ T8561] netlink: 4 bytes leftover after parsing attributes in process `syz.1.797'. [ 158.534559][ T8563] netlink: 20 bytes leftover after parsing attributes in process `syz.4.796'. [ 158.542223][ T8561] bridge_slave_1: left allmulticast mode [ 158.575035][ T8561] bridge_slave_1: left promiscuous mode [ 158.577517][ T8563] netlink: 8 bytes leftover after parsing attributes in process `syz.4.796'. [ 158.611353][ T8561] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.658414][ T8561] bridge_slave_0: left allmulticast mode [ 158.666882][ T8561] bridge_slave_0: left promiscuous mode [ 158.703012][ T8561] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.185800][ T8597] netlink: 'syz.0.806': attribute type 4 has an invalid length. [ 159.456282][ T8607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.810'. [ 159.580462][ T8616] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 159.602740][ T8616] netlink: 'syz.3.815': attribute type 4 has an invalid length. [ 159.798072][ T8624] Unsupported ieee802154 address type: 0 [ 159.993899][ T8635] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20003 [ 160.038560][ T8635] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20003 [ 160.275870][ T8648] bridge0: entered allmulticast mode [ 160.286361][ T8648] bridge_slave_1: left allmulticast mode [ 160.292850][ T8648] bridge_slave_1: left promiscuous mode [ 160.298979][ T8648] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.315785][ T8648] bridge_slave_0: left allmulticast mode [ 160.325602][ T8648] bridge_slave_0: left promiscuous mode [ 160.351204][ T8648] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.408830][ T8648] bridge0 (unregistering): left allmulticast mode [ 160.436999][ T8657] netlink: 'syz.2.829': attribute type 1 has an invalid length. [ 160.543861][ T8657] 8021q: adding VLAN 0 to HW filter on device bond3 [ 160.629318][ T8661] bond3: (slave veth3): Enslaving as an active interface with a down link [ 160.687961][ T8657] vlan1: entered allmulticast mode [ 160.697815][ T8667] __nla_validate_parse: 3 callbacks suppressed [ 160.697833][ T8667] netlink: 24 bytes leftover after parsing attributes in process `syz.3.831'. [ 160.714765][ T8657] veth1: entered allmulticast mode [ 160.720709][ T8657] veth1: entered promiscuous mode [ 160.731857][ T8657] veth1: left promiscuous mode [ 160.760668][ T8657] bond3: (slave vlan1): making interface the new active one [ 160.787168][ T8657] veth1: entered promiscuous mode [ 160.791238][ T8671] netlink: 16 bytes leftover after parsing attributes in process `syz.0.833'. [ 160.796968][ T8657] vlan1: entered promiscuous mode [ 160.807239][ T8657] bond3: (slave vlan1): Enslaving as an active interface with an up link [ 160.898345][ T8675] delete_channel: no stack [ 160.961016][ T8675] netlink: 40 bytes leftover after parsing attributes in process `syz.4.835'. [ 161.004521][ T8680] netlink: 'syz.0.837': attribute type 4 has an invalid length. [ 161.013324][ T8679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.836'. [ 161.032831][ T8681] netlink: 40 bytes leftover after parsing attributes in process `syz.4.835'. [ 161.061616][ T8681] delete_channel: no stack [ 161.233045][ T8690] netlink: 'syz.0.838': attribute type 4 has an invalid length. [ 161.313774][ T8696] sit0: entered promiscuous mode [ 161.342490][ T8696] netlink: 'syz.1.840': attribute type 1 has an invalid length. [ 161.368678][ T8696] netlink: 1 bytes leftover after parsing attributes in process `syz.1.840'. [ 161.456477][ T8699] xt_TPROXY: Can be used only with -p tcp or -p udp [ 161.615693][ T8706] netlink: 44 bytes leftover after parsing attributes in process `syz.3.843'. [ 161.636917][ T8706] netlink: 43 bytes leftover after parsing attributes in process `syz.3.843'. [ 161.651087][ T8706] netlink: 'syz.3.843': attribute type 6 has an invalid length. [ 161.659485][ T8706] netlink: 'syz.3.843': attribute type 5 has an invalid length. [ 161.668328][ T8706] netlink: 43 bytes leftover after parsing attributes in process `syz.3.843'. [ 161.923119][ T8722] netlink: 'syz.2.848': attribute type 4 has an invalid length. [ 161.948300][ T8726] netlink: 10 bytes leftover after parsing attributes in process `syz.1.850'. [ 162.359301][ T8743] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 162.378444][ T8743] macsec1: entered allmulticast mode [ 162.392438][ T8743] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 162.401975][ T8747] ieee802154 phy1 wpan1: encryption failed: -22 [ 162.434079][ T8743] mac80211_hwsim hwsim3 wlan0: left allmulticast mode [ 162.442728][ T8743] mac80211_hwsim hwsim3 wlan0: left promiscuous mode [ 162.528920][ T8756] ieee802154 phy1 wpan1: encryption failed: -22 [ 163.508240][ T8805] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 163.769041][ T8821] netlink: 'syz.4.877': attribute type 1 has an invalid length. [ 163.779888][ T8821] netlink: 'syz.4.877': attribute type 3 has an invalid length. [ 163.803064][ T8821] NCSI netlink: No device for ifindex 813332851 [ 163.848114][ T8823] rdma_op ffff88806d5cf1f0 conn xmit_rdma 0000000000000000 [ 163.890063][ T8823] netem: change failed [ 164.230696][ T8843] netlink: 'syz.3.885': attribute type 4 has an invalid length. [ 164.442184][ T8852] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 164.546386][ T8863] xt_hashlimit: size too large, truncated to 1048576 [ 165.050443][ T6976] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.275289][ T6976] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.441711][ T6976] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.511736][ T8880] bpq0: entered promiscuous mode [ 165.525344][ T8880] bpq0: entered allmulticast mode [ 165.664102][ T6976] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.787137][ T8889] netlink: 'syz.3.899': attribute type 1 has an invalid length. [ 165.841689][ T8888] ieee802154 phy1 wpan1: encryption failed: -22 [ 166.233277][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 166.255437][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 166.264310][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 166.277341][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 166.295912][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 166.458889][ T6976] bond1 (unregistering): (slave geneve2): Releasing active interface [ 166.467421][ T6976] geneve2 (unregistering): left promiscuous mode [ 166.503623][ T6976] team0: Port device geneve0 removed [ 166.588849][ T6976] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.600336][ T6976] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.612938][ T6976] bond0 (unregistering): Released all slaves [ 166.707264][ T6976] bond1 (unregistering): Released all slaves [ 166.722643][ T6976] bond2 (unregistering): Released all slaves [ 166.742569][ T8915] netlink: 'syz.0.906': attribute type 4 has an invalid length. [ 167.375379][ T8940] netlink: 'syz.2.911': attribute type 12 has an invalid length. [ 167.383464][ T8940] __nla_validate_parse: 8 callbacks suppressed [ 167.383481][ T8940] netlink: 132 bytes leftover after parsing attributes in process `syz.2.911'. [ 168.003464][ T8910] chnl_net:caif_netlink_parms(): no params data found [ 168.353035][ T8994] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.397106][ T5845] Bluetooth: hci0: command tx timeout [ 168.429313][ T8994] netlink: 112 bytes leftover after parsing attributes in process `syz.4.923'. [ 168.526026][ T8998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.927'. [ 168.580641][ T8999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.927'. [ 168.603317][ T9004] netlink: 12 bytes leftover after parsing attributes in process `syz.2.928'. [ 168.717512][ T8910] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.726200][ T8910] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.738013][ T8910] bridge_slave_0: entered allmulticast mode [ 168.755976][ T8910] bridge_slave_0: entered promiscuous mode [ 168.767118][ T9004] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 168.799787][ T9004] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 168.808713][ T9004] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 168.901809][ T8910] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.909223][ T8910] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.925899][ T8910] bridge_slave_1: entered allmulticast mode [ 168.940883][ T8910] bridge_slave_1: entered promiscuous mode [ 169.129199][ T30] audit: type=1107 audit(1750839322.786:4): pid=9017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='žØAµÍEOØO›ßZ‘„ü½Ä!\:ÌÐƨ¦âà|ãoƒóÝF*EOt*%9òri“ÑÚƒÇbÙ?LH$„ó¦͈šK¨žtEÔhêÇgõ_„bl³Â›#£MÄåRÉr ‹²^ÐSxá„+(Øš ?­yÙ1‰Zí]|]ÚB%ôÅSðD¨Á´¤†±Ð ÌwIK–⻇ "F;s®Šÿÿ¾w«©²ó—…­üÛc÷d·®ýå ÍÁ(y‡t%' [ 169.243957][ T8910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.274488][ T9026] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.933'. [ 169.303654][ T8910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.385718][ T9022] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.933'. [ 169.401990][ T9030] netlink: 20 bytes leftover after parsing attributes in process `syz.4.934'. [ 169.597009][ T8910] team0: Port device team_slave_0 added [ 169.635546][ T8910] team0: Port device team_slave_1 added [ 169.981571][ T9030] netlink: 12 bytes leftover after parsing attributes in process `syz.4.934'. [ 170.007766][ T6976] hsr_slave_0: left promiscuous mode [ 170.025852][ T6976] hsr_slave_1: left promiscuous mode [ 170.042049][ T6976] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.088496][ T6976] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.162636][ T6976] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.180808][ T6976] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.267699][ T6976] veth1_macvtap: left promiscuous mode [ 170.275521][ T6976] veth0_macvtap: left promiscuous mode [ 170.482791][ T5845] Bluetooth: hci0: command tx timeout [ 170.755764][ T6976] team0 (unregistering): Port device team_slave_1 removed [ 170.797341][ T6976] team0 (unregistering): Port device team_slave_0 removed [ 171.136002][ T8910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.143457][ T8910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.171111][ T8910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.270326][ T8910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.304365][ T8910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.378417][ T8910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.403817][ T9073] netlink: 104 bytes leftover after parsing attributes in process `syz.0.946'. [ 171.798765][ T8910] hsr_slave_0: entered promiscuous mode [ 171.826457][ T8910] hsr_slave_1: entered promiscuous mode [ 172.159241][ T6976] IPVS: stop unused estimator thread 0... [ 172.401362][ T2949] vlan1: left promiscuous mode [ 172.551905][ T5845] Bluetooth: hci0: command tx timeout [ 172.888485][ T9135] IPVS: nq: UDP 224.0.0.2:20004 - no destination available [ 172.889677][ T5984] IPVS: starting estimator thread 0... [ 173.016048][ T9141] IPVS: using max 31 ests per chain, 74400 per kthread [ 173.906407][ T8910] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 173.938500][ T8910] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 174.000915][ T8910] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 174.057944][ T9182] xt_CT: You must specify a L4 protocol and not use inversions on it [ 174.107407][ T8910] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 174.211922][ T9185] __nla_validate_parse: 3 callbacks suppressed [ 174.211941][ T9185] netlink: 32 bytes leftover after parsing attributes in process `syz.0.977'. [ 174.519497][ T8910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.573830][ T9202] netlink: 'syz.3.980': attribute type 75 has an invalid length. [ 174.596549][ T8910] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.632793][ T5845] Bluetooth: hci0: command tx timeout [ 174.810046][ T6976] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.817283][ T6976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.022393][ T2949] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.029604][ T2949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.577286][ T9238] netlink: 'syz.2.988': attribute type 58 has an invalid length. [ 175.602700][ T9238] netlink: 20 bytes leftover after parsing attributes in process `syz.2.988'. [ 175.672088][ T9242] netlink: 45 bytes leftover after parsing attributes in process `syz.2.988'. [ 176.208903][ T8910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.520138][ T8910] veth0_vlan: entered promiscuous mode [ 176.573503][ T9273] netlink: 20 bytes leftover after parsing attributes in process `syz.3.994'. [ 176.642355][ T9275] netlink: 96 bytes leftover after parsing attributes in process `syz.2.996'. [ 176.700400][ T9275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.996'. [ 176.702747][ T8910] veth1_vlan: entered promiscuous mode [ 176.856783][ T9281] netlink: 'syz.0.999': attribute type 1 has an invalid length. [ 176.865741][ T9281] netlink: 'syz.0.999': attribute type 1 has an invalid length. [ 177.082118][ T8910] veth0_macvtap: entered promiscuous mode [ 177.157258][ T8910] veth1_macvtap: entered promiscuous mode [ 177.238236][ T8910] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.291261][ T8910] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.346462][ T8910] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.382579][ T8910] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.419481][ T8910] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.439137][ T8910] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.667357][ T9309] netlink: 'syz.4.1006': attribute type 1 has an invalid length. [ 177.675055][ T9307] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1005'. [ 177.693065][ T9309] netlink: 'syz.4.1006': attribute type 1 has an invalid length. [ 177.797694][ T6882] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.826217][ T6882] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.987786][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.019310][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.217253][ T9327] netlink: 165 bytes leftover after parsing attributes in process `syz.3.1011'. [ 178.304758][ T9335] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1014'. [ 178.323515][ T9329] vlan2: entered allmulticast mode [ 178.352762][ T9329] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 178.798298][ T9351] IPv6: sit1: Disabled Multicast RS [ 178.821026][ T9358] netlink: 'syz.2.1018': attribute type 10 has an invalid length. [ 178.834873][ T9351] sit1: entered allmulticast mode [ 178.990407][ T9358] bond0: (slave team0): Releasing backup interface [ 179.024352][ T9360] nbd2: detected capacity change from 0 to 63 [ 179.072830][ T9363] block nbd2: NBD_DISCONNECT [ 179.093321][ T9358] tipc: Resetting bearer [ 179.101725][ T9363] block nbd2: Disconnected due to user request. [ 179.150583][ T9363] block nbd2: shutting down sockets [ 179.151721][ T6920] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 179.169905][ T9358] tipc: Resetting bearer [ 179.178517][ T6920] Buffer I/O error on dev nbd2, logical block 3, async page read [ 179.195020][ T9358] bridge0: port 3(team0) entered blocking state [ 179.206949][ T9358] bridge0: port 3(team0) entered disabled state [ 179.215447][ T9358] team0: entered allmulticast mode [ 179.220626][ T9358] team_slave_0: entered allmulticast mode [ 179.227227][ C1] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 179.232048][ T9358] team_slave_1: entered allmulticast mode [ 179.236495][ C1] Buffer I/O error on dev nbd2, logical block 0, async page read [ 179.248293][ T9358] team0: entered promiscuous mode [ 179.249942][ C1] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 179.256773][ T9358] team_slave_0: entered promiscuous mode [ 179.264009][ C1] Buffer I/O error on dev nbd2, logical block 1, async page read [ 179.264084][ C1] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 179.264108][ C1] Buffer I/O error on dev nbd2, logical block 2, async page read [ 179.301857][ T6920] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 179.318197][ T6920] Buffer I/O error on dev nbd2, logical block 0, async page read [ 179.331098][ T9358] team_slave_1: entered promiscuous mode [ 179.348331][ T6920] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 179.398385][ T6920] Buffer I/O error on dev nbd2, logical block 1, async page read [ 179.421201][ T6920] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 179.453440][ T754] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.454616][ T6920] Buffer I/O error on dev nbd2, logical block 2, async page read [ 179.507163][ T6920] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 179.601118][ T6920] Buffer I/O error on dev nbd2, logical block 3, async page read [ 179.650903][ T6920] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 179.692495][ T6920] Buffer I/O error on dev nbd2, logical block 0, async page read [ 179.747242][ T6920] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 179.797746][ T6920] Buffer I/O error on dev nbd2, logical block 1, async page read [ 179.852554][ T754] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.885602][ T6920] ldm_validate_partition_table(): Disk read failed. [ 179.926385][ T6920] Dev nbd2: unable to read RDB block 0 [ 179.957075][ T9380] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1021'. [ 179.973600][ T6920] nbd2: unable to read partition table [ 180.053451][ T6920] ldm_validate_partition_table(): Disk read failed. [ 180.094252][ T6920] Dev nbd2: unable to read RDB block 0 [ 180.146446][ T6920] nbd2: unable to read partition table [ 180.218190][ T9396] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1025'. [ 180.295996][ T754] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.394553][ T9399] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1027'. [ 180.410425][ T9384] netlink: 'syz.3.1022': attribute type 3 has an invalid length. [ 180.448186][ T9402] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1026'. [ 180.715481][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 180.728385][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 180.741456][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 180.750511][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 180.758868][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 180.832298][ T754] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.848277][ T9416] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1030'. [ 180.974026][ T9416] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1030'. [ 180.984042][ T9416] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1030'. [ 181.207659][ T9427] x_tables: duplicate underflow at hook 1 [ 181.546054][ T754] bridge_slave_1: left allmulticast mode [ 181.582967][ T754] bridge_slave_1: left promiscuous mode [ 181.602205][ T754] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.636691][ T9439] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1036'. [ 181.703899][ T754] bridge_slave_0: left allmulticast mode [ 181.719845][ T754] bridge_slave_0: left promiscuous mode [ 181.730181][ T754] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.029486][ T9462] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1042'. [ 182.399292][ T754] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 182.412100][ T754] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.423203][ T754] bond0 (unregistering): Released all slaves [ 182.476512][ T9457] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 182.791105][ T5844] Bluetooth: hci0: command tx timeout [ 183.295238][ T9506] No such timeout policy "syz0" [ 183.319721][ T9507] unsupported nlmsg_type 40 [ 183.411417][ T9409] chnl_net:caif_netlink_parms(): no params data found [ 183.495083][ T9514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1053'. [ 183.798942][ T754] hsr_slave_0: left promiscuous mode [ 183.816789][ T9532] netlink: 'syz.0.1057': attribute type 7 has an invalid length. [ 183.840876][ T9532] netlink: 'syz.0.1057': attribute type 8 has an invalid length. [ 183.859192][ T754] hsr_slave_1: left promiscuous mode [ 183.871625][ T754] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.879103][ T754] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.907299][ T754] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.929413][ T754] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.993822][ T754] veth1_macvtap: left promiscuous mode [ 184.017810][ T754] veth0_macvtap: left promiscuous mode [ 184.034334][ T754] veth1_vlan: left promiscuous mode [ 184.046609][ T754] veth0_vlan: left promiscuous mode [ 184.860455][ T754] team0 (unregistering): Port device team_slave_1 removed [ 184.883347][ T5844] Bluetooth: hci0: command tx timeout [ 184.907775][ T754] team0 (unregistering): Port device team_slave_0 removed [ 185.329224][ T9532] erspan0: entered promiscuous mode [ 185.365937][ T9532] gretap0: entered promiscuous mode [ 185.781704][ T9409] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.811021][ T9409] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.844769][ T9409] bridge_slave_0: entered allmulticast mode [ 185.877393][ T9409] bridge_slave_0: entered promiscuous mode [ 185.905983][ T9409] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.922036][ T9409] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.976351][ T9409] bridge_slave_1: entered allmulticast mode [ 185.985880][ T9409] bridge_slave_1: entered promiscuous mode [ 186.324739][ T9409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.375282][ T9409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.381870][ T9618] netlink: 'syz.4.1076': attribute type 11 has an invalid length. [ 186.430584][ T9618] __nla_validate_parse: 7 callbacks suppressed [ 186.430601][ T9618] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1076'. [ 186.501192][ T9624] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1078'. [ 186.700431][ T9409] team0: Port device team_slave_0 added [ 186.756013][ T9409] team0: Port device team_slave_1 added [ 186.773158][ T9636] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1081'. [ 186.856948][ T9643] netlink: 'syz.2.1082': attribute type 23 has an invalid length. [ 186.962487][ T5844] Bluetooth: hci0: command tx timeout [ 186.974836][ T9647] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1083'. [ 187.062250][ T9409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.069287][ T9409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.185030][ T9409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.237014][ T9409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.282346][ T9409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.349627][ T9409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.384680][ T9664] tipc: MTU too low for tipc bearer [ 187.458525][ T9669] Unsupported ieee802154 address type: 0 [ 187.617595][ T9409] hsr_slave_0: entered promiscuous mode [ 187.636544][ T9409] hsr_slave_1: entered promiscuous mode [ 188.549150][ T9720] netlink: 512 bytes leftover after parsing attributes in process `syz.4.1099'. [ 188.848015][ T9720] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1099'. [ 188.873073][ T9720] netem: invalid attributes len -24 [ 188.885127][ T9720] netem: change failed [ 189.030945][ T5844] Bluetooth: hci0: command tx timeout [ 189.155791][ T9734] veth5: entered allmulticast mode [ 189.383477][ T9741] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 189.665491][ T9764] x_tables: duplicate entry at hook 1 [ 190.289147][ T9409] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 190.393982][ T9409] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 190.469710][ T9409] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 190.595110][ T9789] mac80211_hwsim hwsim7 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 190.635164][ T9409] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 190.670373][ T9793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1118'. [ 191.020600][ T9409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.022105][ T9811] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1123'. [ 191.088459][ T9409] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.116674][ T9816] netlink: 'syz.4.1122': attribute type 12 has an invalid length. [ 191.161069][ T9816] netlink: 'syz.4.1122': attribute type 29 has an invalid length. [ 191.188859][ T9816] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1122'. [ 191.231475][ T9816] netlink: 'syz.4.1122': attribute type 1 has an invalid length. [ 191.271416][ T9816] netlink: 47 bytes leftover after parsing attributes in process `syz.4.1122'. [ 191.362178][ T6879] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.369361][ T6879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.416191][ T6879] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.423461][ T6879] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.446410][ T9829] 8021q: VLANs not supported on ip6_vti0 [ 191.758471][ T9409] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 192.244189][ T9866] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1135'. [ 192.497845][ T9409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.669348][ T9409] veth0_vlan: entered promiscuous mode [ 192.728398][ T9409] veth1_vlan: entered promiscuous mode [ 192.838767][ T9881] netlink: 'syz.0.1138': attribute type 1 has an invalid length. [ 192.873068][ T9409] veth0_macvtap: entered promiscuous mode [ 192.888775][ T9881] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1138'. [ 192.930432][ T9409] veth1_macvtap: entered promiscuous mode [ 192.939945][ T9888] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 193.039724][ T9409] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.087206][ T9409] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.157538][ T9409] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.200834][ T9409] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.209690][ T9409] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.241154][ T9409] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.467791][ T9898] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1143'. [ 193.468265][ T9909] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 193.477280][ T9898] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.602029][ T9912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1146'. [ 193.627973][ T9898] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.722342][ T2949] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.730029][ T9923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1146'. [ 193.730213][ T2949] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.928040][ T9927] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1148'. [ 193.939615][ T754] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.980767][ T754] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.398121][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.441015][ T9946] netlink: 'syz.0.1153': attribute type 2 has an invalid length. [ 194.497232][ T9946] netlink: 'syz.0.1153': attribute type 8 has an invalid length. [ 194.531319][ T9946] netlink: 1148 bytes leftover after parsing attributes in process `syz.0.1153'. [ 194.948601][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.143509][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.284308][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.522622][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.067535][ T36] bridge_slave_1: left allmulticast mode [ 196.097821][ T36] bridge_slave_1: left promiscuous mode [ 196.130673][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.184229][ T36] bridge_slave_0: left allmulticast mode [ 196.197602][ T36] bridge_slave_0: left promiscuous mode [ 196.210942][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.538009][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 196.548919][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 196.559031][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 196.567891][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 196.576695][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 196.987785][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.999659][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 197.016015][ T36] bond0 (unregistering): Released all slaves [ 197.489304][T10052] xt_socket: unknown flags 0x3c [ 197.736166][T10058] Cannot find del_set index 17 as target [ 197.835853][T10068] netlink: 'syz.3.1179': attribute type 39 has an invalid length. [ 197.845099][ T36] hsr_slave_0: left promiscuous mode [ 197.881836][ T36] hsr_slave_1: left promiscuous mode [ 197.887981][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.945898][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.968266][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.975618][T10076] SET target dimension over the limit! [ 197.976995][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.004807][T10079] SET target dimension over the limit! [ 198.025358][ T36] veth1_macvtap: left promiscuous mode [ 198.037159][ T36] veth0_macvtap: left promiscuous mode [ 198.063109][ T36] veth1_vlan: left promiscuous mode [ 198.068544][ T36] veth0_vlan: left promiscuous mode [ 198.256521][T10087] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 198.634127][ T5844] Bluetooth: hci0: command tx timeout [ 198.808390][ T36] team0 (unregistering): Port device team_slave_1 removed [ 198.852344][ T36] team0 (unregistering): Port device team_slave_0 removed [ 199.517186][T10105] tipc: Started in network mode [ 199.527571][T10105] tipc: Node identity e0000002, cluster identity 4711 [ 199.535529][T10105] tipc: Enabling of bearer rejected, failed to enable media [ 199.746868][T10113] netlink: 'syz.3.1188': attribute type 7 has an invalid length. [ 200.124906][T10024] chnl_net:caif_netlink_parms(): no params data found [ 200.318572][T10133] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 200.370106][T10141] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 200.598626][T10153] netlink: 'syz.2.1197': attribute type 83 has an invalid length. [ 200.711294][ T5844] Bluetooth: hci0: command tx timeout [ 200.777912][T10161] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 201.042665][T10024] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.058334][T10024] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.091563][T10024] bridge_slave_0: entered allmulticast mode [ 201.104575][T10024] bridge_slave_0: entered promiscuous mode [ 201.116264][T10169] tipc: MTU too low for tipc bearer [ 201.238809][T10024] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.258836][T10024] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.284398][T10024] bridge_slave_1: entered allmulticast mode [ 201.329474][T10024] bridge_slave_1: entered promiscuous mode [ 201.772546][T10024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.804774][T10024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.975425][T10216] syz.4.1216 uses old SIOCAX25GETINFO [ 202.044099][T10024] team0: Port device team_slave_0 added [ 202.101386][T10024] team0: Port device team_slave_1 added [ 202.162471][T10220] netlink: 'syz.2.1217': attribute type 5 has an invalid length. [ 202.312525][T10024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.364314][T10024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.421474][T10024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.444836][T10227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1220'. [ 202.456152][T10227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1220'. [ 202.482808][T10233] netlink: 'syz.4.1222': attribute type 1 has an invalid length. [ 202.489538][T10024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.533937][T10024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.624992][T10024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.650241][T10240] tipc: Enabled bearer , priority 0 [ 202.868419][T10233] syzkaller0: entered promiscuous mode [ 202.896517][T10233] syzkaller0: entered allmulticast mode [ 202.935079][T10233] tipc: Resetting bearer [ 203.183703][ T13] tipc: Resetting bearer [ 203.201750][T10231] tipc: Resetting bearer [ 203.774333][ T5884] tipc: Node number set to 1835347501 [ 204.728402][T10231] tipc: Disabling bearer [ 204.779945][T10024] hsr_slave_0: entered promiscuous mode [ 204.789085][T10024] hsr_slave_1: entered promiscuous mode [ 204.911610][T10286] netlink: 'syz.4.1232': attribute type 13 has an invalid length. [ 205.067429][T10286] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 205.928668][T10328] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1243'. [ 206.379208][T10347] netlink: 'syz.4.1248': attribute type 2 has an invalid length. [ 206.730628][T10358] x_tables: duplicate underflow at hook 1 [ 207.260291][T10369] 8021q: adding VLAN 0 to HW filter on device bond5 [ 207.287836][T10369] bridge0: port 3(bond5) entered blocking state [ 207.295027][T10369] bridge0: port 3(bond5) entered disabled state [ 207.302288][T10369] bond5: entered allmulticast mode [ 207.311969][T10369] bond5: entered promiscuous mode [ 207.318084][T10369] bridge0: port 3(bond5) entered blocking state [ 207.324844][T10369] bridge0: port 3(bond5) entered forwarding state [ 207.371066][T10369] sctp: [Deprecated]: syz.0.1255 (pid 10369) Use of int in max_burst socket option. [ 207.371066][T10369] Use struct sctp_assoc_value instead [ 207.457410][T10383] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1257'. [ 207.495409][T10024] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 207.513738][T10383] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1257'. [ 207.583835][T10024] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 207.601711][T10383] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1257'. [ 207.631278][T10383] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1257'. [ 207.653172][T10024] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 207.658968][T10383] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1257'. [ 207.696518][T10383] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1257'. [ 207.709824][T10024] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 207.731712][T10389] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1258'. [ 207.732152][T10383] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1257'. [ 207.774014][T10383] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1257'. [ 207.788316][T10383] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1257'. [ 207.988615][T10411] sctp: [Deprecated]: syz.3.1260 (pid 10411) Use of int in maxseg socket option. [ 207.988615][T10411] Use struct sctp_assoc_value instead [ 208.110629][ T6976] bridge0: port 3(bond5) entered disabled state [ 208.280342][T10024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.287268][T10422] netlink: 'syz.0.1264': attribute type 2 has an invalid length. [ 208.386077][T10024] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.442996][ T2949] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.450299][ T2949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.526214][ T6879] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.533493][ T6879] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.823474][T10024] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 208.873887][T10449] netlink: 'syz.3.1269': attribute type 1 has an invalid length. [ 209.727171][T10024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.985006][T10024] veth0_vlan: entered promiscuous mode [ 210.285800][T10024] veth1_vlan: entered promiscuous mode [ 210.497760][T10024] veth0_macvtap: entered promiscuous mode [ 210.553529][T10024] veth1_macvtap: entered promiscuous mode [ 210.638961][T10024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.738062][T10024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.809226][T10024] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.853436][T10024] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.881651][T10024] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.900984][T10024] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.950676][T10524] syzkaller0: entered promiscuous mode [ 210.967905][T10524] syzkaller0: entered allmulticast mode [ 210.982709][T10531] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 211.568373][ T754] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.627132][ T754] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.828054][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.842956][ T5155] Bluetooth: hci2: command 0x0406 tx timeout [ 211.849413][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 211.858603][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 211.891328][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.740455][ T3519] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.745177][T10602] x_tables: duplicate underflow at hook 1 [ 212.857236][T10597] __nla_validate_parse: 32 callbacks suppressed [ 212.857261][T10597] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1307'. [ 213.128893][ T3519] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.228915][ T3519] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.316086][ T3519] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.490331][ T3519] bridge_slave_1: left allmulticast mode [ 213.506264][ T3519] bridge_slave_1: left promiscuous mode [ 213.513811][ T3519] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.525547][ T3519] bridge_slave_0: left allmulticast mode [ 213.532113][ T3519] bridge_slave_0: left promiscuous mode [ 213.537834][ T3519] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.068140][T10632] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1316'. [ 214.186318][ T3519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.198877][ T3519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.213980][ T3519] bond0 (unregistering): Released all slaves [ 214.247134][T10624] dvmrp1: entered allmulticast mode [ 214.257119][T10628] dvmrp1: left allmulticast mode [ 214.357945][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 214.371783][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 214.380012][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 214.389926][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 214.400878][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 214.543351][T10645] IPVS: set_ctl: invalid protocol: 92 172.20.20.187:20002 [ 215.202473][T10678] openvswitch: netlink: Multiple metadata blocks provided [ 215.263754][T10676] Bluetooth: MGMT ver 1.23 [ 215.319034][T10684] netlink: 788 bytes leftover after parsing attributes in process `syz.2.1325'. [ 215.437696][T10641] chnl_net:caif_netlink_parms(): no params data found [ 215.714756][ T3519] hsr_slave_0: left promiscuous mode [ 215.734904][ T3519] hsr_slave_1: left promiscuous mode [ 215.758323][ T3519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.790356][ T3519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.827332][ T3519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.852083][ T3519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.925597][ T3519] veth1_macvtap: left promiscuous mode [ 215.951573][ T3519] veth0_macvtap: left promiscuous mode [ 215.957319][ T3519] veth1_vlan: left promiscuous mode [ 215.982681][T10709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1332'. [ 215.988795][ T3519] veth0_vlan: left promiscuous mode [ 216.183275][T10717] ip6t_srh: unknown srh invflags 5F00 [ 216.236833][T10724] sctp: [Deprecated]: syz.0.1336 (pid 10724) Use of struct sctp_assoc_value in delayed_ack socket option. [ 216.236833][T10724] Use struct sctp_sack_info instead [ 216.336235][T10727] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1337'. [ 216.432375][T10729] sctp: [Deprecated]: syz.0.1336 (pid 10729) Use of struct sctp_assoc_value in delayed_ack socket option. [ 216.432375][T10729] Use struct sctp_sack_info instead [ 216.484155][ T5845] Bluetooth: hci0: command tx timeout [ 216.739302][ T3519] team0 (unregistering): Port device team_slave_1 removed [ 216.779597][ T3519] team0 (unregistering): Port device team_slave_0 removed [ 217.273882][T10727] dvmrp0: entered allmulticast mode [ 217.454231][T10732] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1338'. [ 217.492496][T10740] xt_TCPMSS: Only works on TCP SYN packets [ 217.600838][T10749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1340'. [ 217.643175][T10742] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1340'. [ 217.684124][T10641] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.703753][T10641] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.721292][T10641] bridge_slave_0: entered allmulticast mode [ 217.735957][T10641] bridge_slave_0: entered promiscuous mode [ 217.760219][T10641] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.780989][T10641] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.788262][T10641] bridge_slave_1: entered allmulticast mode [ 217.835540][T10641] bridge_slave_1: entered promiscuous mode [ 217.843476][T10756] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1340'. [ 217.974076][T10641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.023630][T10641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.177473][T10771] netlink: 'syz.3.1345': attribute type 11 has an invalid length. [ 218.226449][T10641] team0: Port device team_slave_0 added [ 218.293606][T10641] team0: Port device team_slave_1 added [ 218.402524][T10777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1346'. [ 218.448317][T10641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.473673][T10641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.553983][T10641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.561169][ T5845] Bluetooth: hci0: command tx timeout [ 218.638235][T10641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.693361][T10641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.735352][T10641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.025770][T10800] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1353'. [ 219.047345][T10641] hsr_slave_0: entered promiscuous mode [ 219.065784][T10641] hsr_slave_1: entered promiscuous mode [ 219.088780][T10799] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1352'. [ 219.110325][T10799] netem: invalid attributes len -24 [ 219.126246][T10799] netem: change failed [ 219.393176][T10815] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.443228][T10811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1355'. [ 219.453098][T10815] netlink: 1036 bytes leftover after parsing attributes in process `syz.3.1356'. [ 219.472941][T10811] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.482645][T10815] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 219.824484][T10830] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1362'. [ 220.561482][T10881] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1374'. [ 220.633531][ T5836] Bluetooth: hci0: command tx timeout [ 221.037808][T10897] ieee802154 phy1 wpan1: encryption failed: -22 [ 221.102442][T10897] ieee802154 phy1 wpan1: encryption failed: -22 [ 221.428253][T10909] syz.4.1380: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 221.475164][T10641] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 221.475958][T10909] CPU: 1 UID: 0 PID: 10909 Comm: syz.4.1380 Not tainted 6.16.0-rc2-syzkaller-00179-g9caca6ac0e26 #0 PREEMPT(full) [ 221.475989][T10909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 221.476005][T10909] Call Trace: [ 221.476014][T10909] [ 221.476024][T10909] dump_stack_lvl+0x189/0x250 [ 221.476103][T10909] ? __pfx_dump_stack_lvl+0x10/0x10 [ 221.476141][T10909] ? __pfx__printk+0x10/0x10 [ 221.476168][T10909] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 221.476196][T10909] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 221.476222][T10909] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 221.476253][T10909] warn_alloc+0x214/0x310 [ 221.476280][T10909] ? stack_depot_save_flags+0x40/0x900 [ 221.476318][T10909] ? __pfx_warn_alloc+0x10/0x10 [ 221.476347][T10909] ? kasan_save_track+0x4f/0x80 [ 221.476381][T10909] ? xskq_create+0x56/0x170 [ 221.476414][T10909] ? xsk_init_queue+0xb0/0x110 [ 221.476443][T10909] ? xsk_setsockopt+0x43f/0x710 [ 221.476483][T10909] ? do_sock_setsockopt+0x257/0x3e0 [ 221.476508][T10909] ? __x64_sys_setsockopt+0x18b/0x220 [ 221.476531][T10909] ? do_syscall_64+0xfa/0x3b0 [ 221.476552][T10909] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.476584][T10909] __vmalloc_node_range_noprof+0x125/0x12f0 [ 221.476655][T10909] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 221.476684][T10909] ? xskq_create+0x56/0x170 [ 221.476719][T10909] ? __kasan_kmalloc+0x93/0xb0 [ 221.476748][T10909] vmalloc_user_noprof+0xad/0xf0 [ 221.476773][T10909] ? xskq_create+0xbf/0x170 [ 221.476809][T10909] xskq_create+0xbf/0x170 [ 221.476847][T10909] xsk_init_queue+0xb0/0x110 [ 221.476882][T10909] xsk_setsockopt+0x43f/0x710 [ 221.476917][T10909] ? __pfx_xsk_setsockopt+0x10/0x10 [ 221.476946][T10909] ? __lock_acquire+0xab9/0xd20 [ 221.476990][T10909] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 221.477018][T10909] ? __pfx_xsk_setsockopt+0x10/0x10 [ 221.477050][T10909] do_sock_setsockopt+0x257/0x3e0 [ 221.477081][T10909] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 221.477115][T10909] ? __fget_files+0x2a/0x420 [ 221.477151][T10909] __x64_sys_setsockopt+0x18b/0x220 [ 221.477190][T10909] do_syscall_64+0xfa/0x3b0 [ 221.477213][T10909] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.477234][T10909] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 221.477258][T10909] ? clear_bhb_loop+0x60/0xb0 [ 221.477285][T10909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.477307][T10909] RIP: 0033:0x7fab0dd8e929 [ 221.477334][T10909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.477353][T10909] RSP: 002b:00007fab0ec4c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 221.477414][T10909] RAX: ffffffffffffffda RBX: 00007fab0dfb5fa0 RCX: 00007fab0dd8e929 [ 221.477432][T10909] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 221.477446][T10909] RBP: 00007fab0de10b39 R08: 0000000000000004 R09: 0000000000000000 [ 221.477461][T10909] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.477475][T10909] R13: 0000000000000000 R14: 00007fab0dfb5fa0 R15: 00007ffffae31f98 [ 221.477512][T10909] [ 221.500458][T10909] Mem-Info: [ 221.553659][T10918] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1379'. [ 221.553714][T10918] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1379'. [ 221.553728][T10918] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1379'. [ 221.843082][T10909] active_anon:5485 inactive_anon:0 isolated_anon:0 [ 221.843082][T10909] active_file:1402 inactive_file:39888 isolated_file:0 [ 221.843082][T10909] unevictable:768 dirty:37 writeback:0 [ 221.843082][T10909] slab_reclaimable:10399 slab_unreclaimable:112038 [ 221.843082][T10909] mapped:31348 shmem:1369 pagetables:1475 [ 221.843082][T10909] sec_pagetables:0 bounce:0 [ 221.843082][T10909] kernel_misc_reclaimable:0 [ 221.843082][T10909] free:1315263 free_pcp:13619 free_cma:0 [ 221.847878][T10641] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 221.896560][T10909] Node 0 active_anon:21940kB inactive_anon:0kB active_file:5608kB inactive_file:159352kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125392kB dirty:144kB writeback:0kB shmem:3940kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12348kB pagetables:5744kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 221.934495][T10909] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 221.977329][T10641] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 222.014531][T10641] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 222.057328][T10909] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 222.131392][T10909] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 222.160286][T10909] Node 0 DMA32 free:1344164kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22036kB inactive_anon:0kB active_file:5608kB inactive_file:157532kB unevictable:1536kB writepending:148kB present:3129332kB managed:2561020kB mlocked:0kB bounce:0kB free_pcp:36364kB local_pcp:20192kB free_cma:0kB [ 222.297796][T10909] lowmem_reserve[]: 0 0 1 1 1 [ 222.324326][T10909] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1820kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 222.410054][T10909] lowmem_reserve[]: 0 0 0 0 0 [ 222.431334][T10909] Node 1 Normal free:3901756kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:17024kB local_pcp:8992kB free_cma:0kB [ 222.497494][T10909] lowmem_reserve[]: 0 0 0 0 0 [ 222.556767][T10909] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 222.614354][T10909] Node 0 DMA32: 127*4kB (M) 293*8kB (UM) 172*16kB (ME) 570*32kB (UM) 660*64kB (UME) 557*128kB (UME) 428*256kB (UME) 285*512kB (UM) 155*1024kB (UE) 1*2048kB (U) 193*4096kB (M) = 1344164kB [ 222.690389][T10909] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 222.692514][T10641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.712383][ T5845] Bluetooth: hci0: command tx timeout [ 222.719377][T10954] netlink: 'syz.3.1388': attribute type 7 has an invalid length. [ 222.749192][T10641] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.770213][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.777462][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.801449][T10909] Node 1 Normal: 197*4kB (UME) 51*8kB (UME) 45*16kB (UME) 126*32kB (UME) 22*64kB (UME) 7*128kB (UME) 5*256kB (UM) 4*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 948*4096kB (M) = 3901756kB [ 222.855198][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.862464][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.883553][T10909] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 222.896477][T10909] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 222.913321][T10959] netlink: 'syz.2.1389': attribute type 4 has an invalid length. [ 222.931759][T10909] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 222.955797][T10909] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 222.981635][T10959] netlink: 'syz.2.1389': attribute type 4 has an invalid length. [ 223.031709][T10909] 42651 total pagecache pages [ 223.039953][T10909] 0 pages in swap cache [ 223.064735][T10909] Free swap = 124996kB [ 223.068969][T10909] Total swap = 124996kB [ 223.097825][T10909] 2097051 pages RAM [ 223.107618][T10909] 0 pages HighMem/MovableOnly [ 223.145347][T10909] 424690 pages reserved [ 223.149586][T10909] 0 pages cma reserved [ 223.581565][T10984] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.031001][T10641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.213911][T10641] veth0_vlan: entered promiscuous mode [ 224.450436][T10641] veth1_vlan: entered promiscuous mode [ 224.564332][T10641] veth0_macvtap: entered promiscuous mode [ 224.605554][T10641] veth1_macvtap: entered promiscuous mode [ 224.707865][T10641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.805349][T10641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.855037][T10641] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.911626][T10641] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.920495][T10641] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.940246][T10641] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.245957][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.257034][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.319749][ T6882] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.364842][ T6882] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.629008][T11039] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1406'. [ 226.334537][T11057] netlink: 'syz.0.1410': attribute type 10 has an invalid length. [ 226.343025][T11057] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1410'. [ 226.356194][ T754] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.411212][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 226.430864][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 226.441947][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 226.449686][T11057] dummy0: entered promiscuous mode [ 226.458151][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 226.466878][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 226.472183][T11057] bridge0: port 4(dummy0) entered blocking state [ 226.521761][T11057] bridge0: port 4(dummy0) entered disabled state [ 226.528363][T11057] dummy0: entered allmulticast mode [ 226.705278][ T754] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.966048][ T754] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.072455][ T754] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.314241][ T754] bridge_slave_1: left allmulticast mode [ 227.320046][ T754] bridge_slave_1: left promiscuous mode [ 227.327514][ T754] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.343852][ T754] bridge_slave_0: left allmulticast mode [ 227.349572][ T754] bridge_slave_0: left promiscuous mode [ 227.359354][ T754] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.733475][T11097] netlink: 'syz.4.1414': attribute type 5 has an invalid length. [ 228.292210][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 228.312383][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 228.327919][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 228.336498][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 228.345865][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 228.377262][ T754] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.400517][ T754] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.413998][ T754] bond0 (unregistering): Released all slaves [ 228.472262][T11058] chnl_net:caif_netlink_parms(): no params data found [ 228.550885][ T5836] Bluetooth: hci0: command tx timeout [ 228.837472][T11122] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 229.018599][T11058] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.041237][T11058] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.050110][T11058] bridge_slave_0: entered allmulticast mode [ 229.064089][T11058] bridge_slave_0: entered promiscuous mode [ 229.078773][T11058] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.095545][T11058] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.104516][T11058] bridge_slave_1: entered allmulticast mode [ 229.116341][T11058] bridge_slave_1: entered promiscuous mode [ 229.394393][T11058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.477187][ T754] hsr_slave_0: left promiscuous mode [ 229.485265][ T754] hsr_slave_1: left promiscuous mode [ 229.498469][ T754] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.507063][ T754] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.524546][ T754] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.549322][ T754] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.603985][ T754] veth1_macvtap: left promiscuous mode [ 229.619865][ T754] veth0_macvtap: left promiscuous mode [ 229.636426][ T754] veth1_vlan: left promiscuous mode [ 229.647747][ T754] veth0_vlan: left promiscuous mode [ 229.747870][T11155] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1428'. [ 230.329543][T11169] netlink: 'syz.4.1433': attribute type 25 has an invalid length. [ 230.391310][ T5836] Bluetooth: hci1: command tx timeout [ 230.630926][ T5836] Bluetooth: hci0: command tx timeout [ 230.955327][ T754] team0 (unregistering): Port device team_slave_1 removed [ 231.015708][ T754] team0 (unregistering): Port device team_slave_0 removed [ 231.456480][T11058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.503550][T11163] tipc: Enabling of bearer rejected, failed to enable media [ 231.530295][T11170] netlink: 'syz.4.1433': attribute type 11 has an invalid length. [ 231.531359][T11165] netlink: 'syz.0.1431': attribute type 1 has an invalid length. [ 231.570434][T11165] netlink: 'syz.0.1431': attribute type 1 has an invalid length. [ 231.582612][T11169] netlink: 'syz.4.1433': attribute type 1 has an invalid length. [ 231.635225][T11058] team0: Port device team_slave_0 added [ 231.665766][T11058] team0: Port device team_slave_1 added [ 231.839129][T11181] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1435'. [ 231.852791][T11058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.871813][T11058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.919667][T11058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.972173][T11058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.004987][T11058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.086270][T11058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.391393][T11191] team0 (unregistering): left allmulticast mode [ 232.397715][T11191] team_slave_0: left allmulticast mode [ 232.405035][T11191] team_slave_1: left allmulticast mode [ 232.410653][T11191] team0 (unregistering): left promiscuous mode [ 232.417428][T11191] team_slave_0: left promiscuous mode [ 232.423321][T11191] team_slave_1: left promiscuous mode [ 232.429816][T11191] bridge0: port 3(team0) entered disabled state [ 232.438986][T11191] tipc: Disabling bearer [ 232.466185][T11191] team0 (unregistering): Port device team_slave_0 removed [ 232.474151][ T5836] Bluetooth: hci1: command tx timeout [ 232.491128][T11191] team0 (unregistering): Port device team_slave_1 removed [ 232.700354][T11207] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1442'. [ 232.715956][ T5836] Bluetooth: hci0: command tx timeout [ 232.746814][T11058] hsr_slave_0: entered promiscuous mode [ 232.764853][T11058] hsr_slave_1: entered promiscuous mode [ 233.048639][T11113] chnl_net:caif_netlink_parms(): no params data found [ 233.082013][T11222] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1445'. [ 233.190169][T11222] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1445'. [ 233.257125][ T754] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.350085][T11230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1445'. [ 233.571951][ T754] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.699139][ T6976] syzkaller0: tun_net_xmit 76 [ 233.707918][ T6976] syzkaller0: tun_net_xmit 48 [ 233.721671][ T5927] syzkaller0: tun_net_xmit 76 [ 233.741253][ T977] syzkaller0: tun_net_xmit 76 [ 233.770631][T11250] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1449'. [ 233.825337][T11251] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1449'. [ 234.556097][ T5836] Bluetooth: hci1: command tx timeout [ 234.791984][ T5836] Bluetooth: hci0: command tx timeout [ 235.214164][ T754] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.320083][ T754] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.561569][T11266] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1451'. [ 235.722245][T11113] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.752726][T11113] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.771852][T11113] bridge_slave_0: entered allmulticast mode [ 235.816604][T11113] bridge_slave_0: entered promiscuous mode [ 235.856313][T11113] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.866220][T11113] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.876542][T11113] bridge_slave_1: entered allmulticast mode [ 235.887450][T11113] bridge_slave_1: entered promiscuous mode [ 236.058753][T11113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.153256][T11282] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 236.197314][T11113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.403162][T11294] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1459'. [ 236.546852][T11113] team0: Port device team_slave_0 added [ 236.646487][ T5836] Bluetooth: hci1: command tx timeout [ 236.937794][T11318] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 237.412003][ T754] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.426567][ T754] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.435657][T11330] blkio.reset_stats is deprecated [ 237.449101][ T754] bond0 (unregistering): Released all slaves [ 237.466969][ T754] bond1 (unregistering): Released all slaves [ 237.483572][ T754] bond2 (unregistering): Released all slaves [ 237.502735][ T754] bond3 (unregistering): Released all slaves [ 237.521743][ T754] bond4 (unregistering): Released all slaves [ 237.571946][T11113] team0: Port device team_slave_1 added [ 237.983026][T11113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.006977][T11113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.039921][T11113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.052734][T11338] netlink: 'syz.0.1469': attribute type 1 has an invalid length. [ 238.138679][T11113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.180810][T11113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.213796][T11113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.278641][T11349] netlink: 'syz.4.1471': attribute type 4 has an invalid length. [ 238.398037][T11351] netlink: 'syz.4.1471': attribute type 4 has an invalid length. [ 238.761604][T11356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1473'. [ 239.927551][T11347] netlink: 'syz.0.1472': attribute type 4 has an invalid length. [ 240.227421][ T754] hsr_slave_0: left promiscuous mode [ 240.235715][T11367] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 240.243035][T11367] IPv6: NLM_F_CREATE should be set when creating new route [ 240.262243][ T754] hsr_slave_1: left promiscuous mode [ 240.277331][ T754] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.287045][ T754] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.313243][ T754] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.332854][ T754] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.356622][T11371] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1476'. [ 240.369577][ T754] vlan0: left allmulticast mode [ 240.377401][ T754] vlan0: left promiscuous mode [ 240.384211][ T754] veth1_macvtap: left promiscuous mode [ 240.389988][ T754] veth0_macvtap: left promiscuous mode [ 240.390347][T11373] netlink: 'syz.2.1477': attribute type 7 has an invalid length. [ 240.397010][ T754] veth0_vlan: left promiscuous mode [ 240.413302][T11373] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1477'. [ 241.193193][ T754] team0 (unregistering): Port device team_slave_1 removed [ 241.237624][ T754] team0 (unregistering): Port device team_slave_0 removed [ 241.624408][T11113] hsr_slave_0: entered promiscuous mode [ 241.633261][T11113] hsr_slave_1: entered promiscuous mode [ 241.639521][T11113] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 241.647690][T11113] Cannot create hsr debugfs directory [ 241.654826][T11367] lo: left promiscuous mode [ 241.673393][T11367] tunl0: left promiscuous mode [ 241.686138][T11367] gre0: left promiscuous mode [ 241.699412][T11367] erspan0: left promiscuous mode [ 241.709456][T11367] ip_vti0: left promiscuous mode [ 241.719412][T11367] ip6_vti0: left promiscuous mode [ 241.727863][T11367] sit0: left promiscuous mode [ 241.737920][T11367] ip6tnl0: left promiscuous mode [ 241.746304][T11367] ip6gre0: left promiscuous mode [ 241.754280][T11367] ip6gretap0: left promiscuous mode [ 241.763707][T11367] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.772210][T11367] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.782574][T11367] bridge0: left promiscuous mode [ 241.797256][T11367] bond0: left promiscuous mode [ 241.803472][T11367] bond_slave_0: left promiscuous mode [ 241.809101][T11367] bond_slave_1: left promiscuous mode [ 241.815548][T11367] batadv0: left promiscuous mode [ 241.824233][T11367] team0: left promiscuous mode [ 241.829040][T11367] team_slave_0: left promiscuous mode [ 241.835862][T11367] team_slave_1: left promiscuous mode [ 241.842958][T11367] geneve0: left promiscuous mode [ 241.850604][T11367] dummy0: left promiscuous mode [ 241.862507][T11367] nlmon0: left promiscuous mode [ 241.868917][T11367] caif0: left promiscuous mode [ 241.877983][T11367] vxcan0: entered allmulticast mode [ 241.885820][T11367] vxcan1: entered allmulticast mode [ 241.893385][T11367] veth0: entered allmulticast mode [ 241.901933][T11367] veth1: entered allmulticast mode [ 241.910219][T11367] wg0: entered allmulticast mode [ 241.920016][T11367] wg1: entered allmulticast mode [ 241.927614][T11367] wg2: entered allmulticast mode [ 241.935823][T11367] veth0_to_bridge: entered allmulticast mode [ 241.947031][T11367] veth1_to_bridge: entered allmulticast mode [ 241.959677][T11367] veth0_to_bond: entered allmulticast mode [ 241.970529][T11367] veth1_to_bond: entered allmulticast mode [ 241.980352][T11367] veth0_to_team: entered allmulticast mode [ 241.994963][T11367] veth1_to_team: entered allmulticast mode [ 242.006070][T11367] veth0_to_batadv: entered allmulticast mode [ 242.015713][T11367] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.025138][T11367] batadv_slave_0: entered allmulticast mode [ 242.036344][T11367] veth1_to_batadv: entered allmulticast mode [ 242.046006][T11367] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.054371][T11367] batadv_slave_1: entered allmulticast mode [ 242.064074][T11367] xfrm0: entered allmulticast mode [ 242.073307][T11367] veth0_to_hsr: entered allmulticast mode [ 242.081798][T11367] hsr_slave_0: entered allmulticast mode [ 242.089449][T11367] veth1_to_hsr: entered allmulticast mode [ 242.098342][T11367] hsr_slave_1: entered allmulticast mode [ 242.108568][T11367] hsr0: entered allmulticast mode [ 242.118611][T11367] veth1_virt_wifi: entered allmulticast mode [ 242.129207][T11367] veth0_virt_wifi: entered allmulticast mode [ 242.139165][T11367] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 242.148184][T11367] veth1_vlan: entered allmulticast mode [ 242.156934][T11367] veth0_vlan: entered allmulticast mode [ 242.174943][T11367] vlan0: entered allmulticast mode [ 242.180284][T11367] vlan1: entered allmulticast mode [ 242.186232][T11367] macvlan0: left promiscuous mode [ 242.193610][T11367] macvlan1: entered allmulticast mode [ 242.202608][T11367] ipvlan0: entered allmulticast mode [ 242.208212][T11367] ipvlan1: entered allmulticast mode [ 242.215032][T11367] veth1_macvtap: entered allmulticast mode [ 242.224469][T11367] veth0_macvtap: entered allmulticast mode [ 242.234522][T11367] macvtap0: entered allmulticast mode [ 242.244630][T11367] macsec0: entered allmulticast mode [ 242.256244][T11367] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.265408][T11367] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.275445][T11367] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.284553][T11367] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.294517][T11367] geneve1: entered allmulticast mode [ 242.303290][T11367] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 242.310456][T11367] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 242.319302][T11367] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 242.330101][T11367] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 242.344140][T11367] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 242.359483][T11367] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 242.368972][T11367] syztnl1: entered allmulticast mode [ 242.375099][T11367] batadv0.5: entered allmulticast mode [ 242.382068][T11367] bridge1: entered allmulticast mode [ 242.387743][T11367] gre1: entered allmulticast mode [ 242.394440][T11367] mac80211_hwsim hwsim13 wlan2: entered allmulticast mode [ 242.404982][T11367] bridge2: entered allmulticast mode [ 242.413020][T11367] ip6gre1: entered allmulticast mode [ 242.418847][T11367] gre2: entered allmulticast mode [ 242.447255][T11367] veth2: entered allmulticast mode [ 242.453234][T11367] veth3: entered allmulticast mode [ 242.458565][T11367] ip6tnl1: entered allmulticast mode [ 242.464731][T11367] bridge3: entered allmulticast mode [ 242.470183][T11367] macvlan2: entered allmulticast mode [ 242.476523][T11367] macvlan3: entered allmulticast mode [ 242.483183][T11367] macsec1: entered allmulticast mode [ 242.567620][ T5927] syz2: Port: 1 Link DOWN [ 242.722582][ T12] tipc: Subscription rejected, illegal request [ 242.732769][T11378] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1478'. [ 243.078781][T11058] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 243.195314][T11058] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 243.269959][T11058] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 243.356601][T11058] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 243.399800][T11403] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1486'. [ 243.595179][T11416] netlink: 'syz.0.1488': attribute type 4 has an invalid length. [ 244.007833][T11058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.046137][T11435] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1493'. [ 244.246413][T11058] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.290604][T11443] netlink: 'syz.0.1495': attribute type 9 has an invalid length. [ 244.310135][ T6879] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.317406][ T6879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.460193][ T2949] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.467465][ T2949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.597431][T11456] sctp: [Deprecated]: syz.2.1498 (pid 11456) Use of int in max_burst socket option. [ 244.597431][T11456] Use struct sctp_assoc_value instead [ 244.825592][T11113] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 244.875803][T11113] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 244.909018][T11113] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 244.936569][T11113] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 245.104421][T11469] tap0: tun_chr_ioctl cmd 1074025677 [ 245.110180][T11469] tap0: linktype set to 771 [ 245.123823][T11472] tap0: tun_chr_ioctl cmd 35108 [ 245.486508][T11113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.669551][T11501] veth5: entered allmulticast mode [ 245.712148][T11113] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.905145][ T6879] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.912462][ T6879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.418955][ T6879] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.426216][ T6879] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.456759][T11058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.665711][T11113] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 247.692912][T11058] veth0_vlan: entered promiscuous mode [ 247.745063][T11058] veth1_vlan: entered promiscuous mode [ 247.859364][T11058] veth0_macvtap: entered promiscuous mode [ 247.884803][T11058] veth1_macvtap: entered promiscuous mode [ 247.903900][T11539] bpq0: left promiscuous mode [ 247.925764][T11539] bpq0: left allmulticast mode [ 247.967693][T11058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.008246][T11058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.046106][T11058] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.064525][T11058] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.141615][T11058] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.150605][T11058] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.284713][T11113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.410508][ T6879] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.421593][ T6879] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.687900][ T754] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.714967][T11113] veth0_vlan: entered promiscuous mode [ 248.744426][ T754] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.794208][T11564] netlink: 'syz.0.1522': attribute type 3 has an invalid length. [ 248.803019][T11564] netlink: 'syz.0.1522': attribute type 3 has an invalid length. [ 248.853136][T11113] veth1_vlan: entered promiscuous mode [ 248.907291][T11569] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1524'. [ 248.968641][T11569] netlink: 'syz.4.1524': attribute type 3 has an invalid length. [ 249.013710][T11113] veth0_macvtap: entered promiscuous mode [ 249.144013][T11573] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1525'. [ 249.167277][T11113] veth1_macvtap: entered promiscuous mode [ 249.198554][T11576] IPv6: sit2: Disabled Multicast RS [ 249.206828][T11576] sit2: entered allmulticast mode [ 249.247935][T11581] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1526'. [ 249.276650][T11573] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.1525'. [ 249.299211][T11113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.393760][T11113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.566854][ T6879] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.594277][T11113] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.604351][T11113] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.617317][T11113] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.626790][T11113] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.666654][ T6879] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.780117][ T6879] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.133806][T11601] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1534'. [ 250.138343][ T6879] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.341857][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.400912][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.553887][T11612] xt_connbytes: Forcing CT accounting to be enabled [ 250.595533][T11612] --map-set only usable from mangle table [ 250.627886][ T6976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.680076][ T6976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.688570][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 250.697688][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 250.707249][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 250.717846][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 250.726947][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 251.104488][ T6879] bridge_slave_1: left allmulticast mode [ 251.110251][ T6879] bridge_slave_1: left promiscuous mode [ 251.141750][ T6879] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.188080][ T6879] bridge_slave_0: left allmulticast mode [ 251.205064][ T6879] bridge_slave_0: left promiscuous mode [ 251.221244][ T6879] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.695074][ T6879] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.707352][ T6879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.721042][ T6879] bond0 (unregistering): Released all slaves [ 252.375790][ T6879] hsr_slave_0: left promiscuous mode [ 252.383105][ T6879] hsr_slave_1: left promiscuous mode [ 252.388980][ T6879] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.397672][ T6879] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.407326][ T6879] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.415601][ T6879] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.436630][ T6879] veth1_macvtap: left promiscuous mode [ 252.442366][ T6879] veth0_macvtap: left promiscuous mode [ 252.447986][ T6879] veth1_vlan: left promiscuous mode [ 252.454439][ T6879] veth0_vlan: left promiscuous mode [ 252.805466][ T5836] Bluetooth: hci0: command tx timeout [ 252.918596][ T6879] team0 (unregistering): Port device team_slave_1 removed [ 253.007659][ T6879] team0 (unregistering): Port device team_slave_0 removed [ 253.114864][T11653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1546'. [ 253.141949][T11653] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1546'. [ 253.596488][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 253.609192][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 253.623063][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 253.632561][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 253.640570][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 253.983165][T11670] Bluetooth: MGMT ver 1.23 [ 254.425234][T11684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1553'. [ 254.435112][T11684] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1553'. [ 254.598580][T11613] chnl_net:caif_netlink_parms(): no params data found [ 254.748781][T11696] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1556'. [ 254.872177][ T5836] Bluetooth: hci0: command tx timeout [ 255.213856][T11613] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.226944][T11613] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.237595][T11613] bridge_slave_0: entered allmulticast mode [ 255.247112][T11613] bridge_slave_0: entered promiscuous mode [ 255.305259][T11613] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.318848][T11613] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.326603][T11613] bridge_slave_1: entered allmulticast mode [ 255.336191][T11613] bridge_slave_1: entered promiscuous mode [ 255.495625][T11613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.554484][T11661] chnl_net:caif_netlink_parms(): no params data found [ 255.597498][T11613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.617433][T11736] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1566'. [ 255.642423][ T6879] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.673186][T11731] bridge_slave_0: left allmulticast mode [ 255.679115][T11731] bridge_slave_0: left promiscuous mode [ 255.686694][T11731] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.707287][T11731] bridge_slave_1: left allmulticast mode [ 255.718993][T11731] bridge_slave_1: left promiscuous mode [ 255.727788][T11731] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.749922][T11731] bond0: (slave bond_slave_0): Releasing backup interface [ 255.764330][ T5845] Bluetooth: hci1: command tx timeout [ 255.779453][T11731] bond0: (slave bond_slave_1): Releasing backup interface [ 255.799280][T11731] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.814629][T11731] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.836825][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.844500][T11731] bond3: (slave veth3): Releasing active interface [ 255.858139][T11731] bond3: (slave veth3): the permanent HWaddr of slave - 5e:64:40:2b:4c:e5 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 255.877312][T11731] vlan1: entered promiscuous mode [ 255.891990][T11731] bond3: (slave vlan1): Releasing active interface [ 255.899428][T11731] vlan1: left promiscuous mode [ 255.907181][T11731] veth1: left promiscuous mode [ 255.989121][ T6879] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.057653][T11740] netlink: 'syz.4.1568': attribute type 4 has an invalid length. [ 256.115077][T11744] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1569'. [ 256.206272][ T6879] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.376402][T11754] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1575'. [ 256.376433][T11613] team0: Port device team_slave_0 added [ 256.530911][ T6879] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.632255][T11613] team0: Port device team_slave_1 added [ 256.763055][T11766] netlink: 'syz.0.1577': attribute type 28 has an invalid length. [ 256.869019][T11661] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.879728][T11661] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.888030][T11661] bridge_slave_0: entered allmulticast mode [ 256.896485][T11661] bridge_slave_0: entered promiscuous mode [ 256.907235][T11613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.914577][T11613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.951086][ T5845] Bluetooth: hci0: command tx timeout [ 256.959339][T11780] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1581'. [ 256.961240][T11613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.012337][T11661] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.019548][T11661] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.045015][T11661] bridge_slave_1: entered allmulticast mode [ 257.070625][T11661] bridge_slave_1: entered promiscuous mode [ 257.105288][T11776] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1580'. [ 257.115732][T11613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.126582][T11613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.161371][T11613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.162214][T11788] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1583'. [ 257.190206][T11788] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1583'. [ 257.833586][ T5845] Bluetooth: hci1: command tx timeout [ 258.756893][T11661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.769792][T11661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.900467][T11661] team0: Port device team_slave_0 added [ 258.962051][T11613] hsr_slave_0: entered promiscuous mode [ 258.985308][T11613] hsr_slave_1: entered promiscuous mode [ 258.996160][T11661] team0: Port device team_slave_1 added [ 259.010429][ T6879] bridge_slave_1: left allmulticast mode [ 259.020038][ T6879] bridge_slave_1: left promiscuous mode [ 259.029262][ T6879] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.040953][ T5845] Bluetooth: hci0: command tx timeout [ 259.092816][ T6879] bridge_slave_0: left allmulticast mode [ 259.109829][ T6879] bridge_slave_0: left promiscuous mode [ 259.139884][ T6879] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.578919][ T6879] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.595501][ T6879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.606619][ T6879] bond0 (unregistering): Released all slaves [ 259.726704][T11661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.739980][T11661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.818707][T11661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.840449][T11661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.853081][T11661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.897593][T11661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.921382][ T5845] Bluetooth: hci1: command tx timeout [ 259.999091][T11830] __nla_validate_parse: 1 callbacks suppressed [ 259.999113][T11830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1594'. [ 260.169720][T11836] x_tables: duplicate underflow at hook 2 [ 260.215066][T11661] hsr_slave_0: entered promiscuous mode [ 260.239427][T11661] hsr_slave_1: entered promiscuous mode [ 260.257975][T11661] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 260.285568][T11661] Cannot create hsr debugfs directory [ 260.554386][ T6879] hsr_slave_0: left promiscuous mode [ 260.561842][ T6879] hsr_slave_1: left promiscuous mode [ 260.570433][ T6879] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.579646][ T6879] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.589050][ T6879] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.597735][ T6879] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.677643][T11856] siw: device registration error -23 [ 261.053019][ T6879] veth1_macvtap: left promiscuous mode [ 261.058665][ T6879] veth0_macvtap: left promiscuous mode [ 261.091705][ T6879] veth1_vlan: left promiscuous mode [ 261.097158][ T6879] veth0_vlan: left promiscuous mode [ 261.149986][T11859] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.809631][ T6879] team0 (unregistering): Port device team_slave_1 removed [ 261.852422][ T6879] team0 (unregistering): Port device team_slave_0 removed [ 261.991824][ T5845] Bluetooth: hci1: command tx timeout [ 262.309782][T11875] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1607'. [ 263.048456][T11905] netlink: 'syz.2.1617': attribute type 10 has an invalid length. [ 263.185997][T11661] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 263.196462][T11912] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1619'. [ 263.224075][T11661] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 263.244765][T11661] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 263.301647][T11661] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 263.326184][T11914] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1619'. [ 263.449035][T11613] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 263.467144][T11613] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 263.484347][T11613] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 263.496478][T11613] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 263.604081][T11661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.638271][T11661] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.657250][ T2949] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.664469][ T2949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.682320][T11613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.706139][ T6879] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.713338][ T6879] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.752435][T11613] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.767873][ T6884] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.775105][ T6884] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.799359][ T6884] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.806583][ T6884] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.099986][T11661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.148501][T11613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.195782][T11661] veth0_vlan: entered promiscuous mode [ 264.214521][T11661] veth1_vlan: entered promiscuous mode [ 264.247222][T11613] veth0_vlan: entered promiscuous mode [ 264.267675][T11613] veth1_vlan: entered promiscuous mode [ 264.284738][T11661] veth0_macvtap: entered promiscuous mode [ 264.298613][T11661] veth1_macvtap: entered promiscuous mode [ 264.330481][T11661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.349645][T11661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.372106][T11661] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.384349][T11661] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.394208][T11661] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.403365][T11661] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.428454][T11613] veth0_macvtap: entered promiscuous mode [ 264.441996][T11613] veth1_macvtap: entered promiscuous mode [ 264.514599][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.523375][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.537740][T11613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.569043][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.578732][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.583578][T11613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.606140][T11613] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.615103][T11613] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.624949][T11613] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.634058][T11613] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.716211][T11661] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 264.728165][T11661] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 264.736598][T11661] CPU: 1 UID: 0 PID: 11661 Comm: syz-executor Not tainted 6.16.0-rc2-syzkaller-00179-g9caca6ac0e26 #0 PREEMPT(full) [ 264.748862][T11661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 264.758923][T11661] RIP: 0010:klist_remove+0x14a/0x340 [ 264.764230][T11661] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 d9 41 c7 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 ba 41 c7 f6 49 8b 44 24 58 48 89 44 24 08 [ 264.784032][T11661] RSP: 0018:ffffc90003ad7840 EFLAGS: 00010202 [ 264.790120][T11661] RAX: 000000000000000b RBX: ffff88802a618000 RCX: 0000000000000000 [ 264.798104][T11661] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 264.806093][T11661] RBP: ffffc90003ad7928 R08: ffffffff8f8798c3 R09: 1ffffffff1f0f318 [ 264.814256][T11661] R10: dffffc0000000000 R11: fffffbfff1f0f319 R12: 0000000000000000 [ 264.822247][T11661] R13: 1ffff1100b65c40c R14: ffff88805b2e2060 R15: dffffc0000000000 [ 264.830229][T11661] FS: 0000000000000000(0000) GS:ffff888125d51000(0000) knlGS:0000000000000000 [ 264.839168][T11661] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 264.845763][T11661] CR2: 00007ffe954a4ce0 CR3: 000000000df38000 CR4: 00000000003526f0 [ 264.853753][T11661] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 264.861733][T11661] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 264.869717][T11661] Call Trace: [ 264.873004][T11661] [ 264.875957][T11661] ? __pfx_klist_remove+0x10/0x10 [ 264.881005][T11661] ? __pfx_kobject_move+0x10/0x10 [ 264.886041][T11661] ? get_device_parent+0x366/0x3a0 [ 264.891184][T11661] device_move+0x193/0x700 [ 264.895616][T11661] hci_conn_del_sysfs+0xb8/0x170 [ 264.900573][T11661] hci_conn_del+0x8ff/0xcb0 [ 264.905100][T11661] hci_conn_hash_flush+0x191/0x230 [ 264.910265][T11661] hci_dev_close_sync+0xaef/0x1330 [ 264.915406][T11661] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 264.920972][T11661] ? up_write+0x1c4/0x420 [ 264.925344][T11661] hci_unregister_dev+0x21a/0x510 [ 264.930386][T11661] vhci_release+0x80/0xd0 [ 264.934762][T11661] ? __pfx_vhci_release+0x10/0x10 [ 264.939804][T11661] __fput+0x44c/0xa70 [ 264.943810][T11661] task_work_run+0x1d1/0x260 [ 264.948415][T11661] ? __pfx_task_work_run+0x10/0x10 [ 264.953630][T11661] ? kmem_cache_free+0x18f/0x400 [ 264.958578][T11661] do_exit+0x6ad/0x22e0 [ 264.962769][T11661] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 264.968154][T11661] ? __pfx_do_exit+0x10/0x10 [ 264.972768][T11661] ? _raw_spin_unlock_irq+0x23/0x50 [ 264.977986][T11661] ? lockdep_hardirqs_on+0x9c/0x150 [ 264.983203][T11661] do_group_exit+0x21c/0x2d0 [ 264.987811][T11661] __x64_sys_exit_group+0x3f/0x40 [ 264.992845][T11661] x64_sys_call+0x21ba/0x21c0 [ 264.997558][T11661] do_syscall_64+0xfa/0x3b0 [ 265.002087][T11661] ? lockdep_hardirqs_on+0x9c/0x150 [ 265.007310][T11661] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.013395][T11661] ? clear_bhb_loop+0x60/0xb0 [ 265.018089][T11661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.023992][T11661] RIP: 0033:0x7f436718e929 [ 265.028427][T11661] Code: Unable to access opcode bytes at 0x7f436718e8ff. [ 265.035449][T11661] RSP: 002b:00007ffe954a6eb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 265.043887][T11661] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f436718e929 [ 265.051872][T11661] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 265.059851][T11661] RBP: 00007f43671ee8f0 R08: 00007ffe954a4c57 R09: 0000000000000003 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 265.067835][T11661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.075815][T11661] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007ffe954a7070 [ 265.083911][T11661] [ 265.086973][T11661] Modules linked in: [ 265.093025][T11661] ---[ end trace 0000000000000000 ]--- [ 265.151524][T11661] RIP: 0010:klist_remove+0x14a/0x340 [ 265.194615][T11661] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 d9 41 c7 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 ba 41 c7 f6 49 8b 44 24 58 48 89 44 24 08 [ 265.302637][T11661] RSP: 0018:ffffc90003ad7840 EFLAGS: 00010202 [ 265.308807][T11661] RAX: 000000000000000b RBX: ffff88802a618000 RCX: 0000000000000000 [ 265.360823][T11661] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 265.368944][T11661] RBP: ffffc90003ad7928 R08: ffffffff8f8798c3 R09: 1ffffffff1f0f318 [ 265.400827][T11661] R10: dffffc0000000000 R11: fffffbfff1f0f319 R12: 0000000000000000 [ 265.408900][T11661] R13: 1ffff1100b65c40c R14: ffff88805b2e2060 R15: dffffc0000000000 [ 265.431239][T11661] FS: 0000000000000000(0000) GS:ffff888125c51000(0000) knlGS:0000000000000000 [ 265.440263][T11661] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 265.470741][T11661] CR2: 000055e14cd68000 CR3: 000000007f81c000 CR4: 00000000003526f0 [ 265.478826][T11661] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 265.511275][T11661] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 265.519638][T11661] Kernel panic - not syncing: Fatal exception [ 265.525893][T11661] Kernel Offset: disabled [ 265.530236][T11661] Rebooting in 86400 seconds..