last executing test programs: 1m6.329305629s ago: executing program 3 (id=478): socket$inet6(0xa, 0x6, 0xce) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0xa) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100), 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x91, @remote, 0x1}}, 0x0, 0x0, 0x32, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x2}}, 0x0, 0x0, 0x4, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542c90bc21470e441225642855b5f2faed4a18d67efd5f2fdf98328de94410300"}, 0xd8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x1, @mcast2, 0x4}}, 0x0, 0x0, 0x11, 0x0, "2b20a9a47cddc63b223be606d7fa19f22a369ae751de81ca4d11e10450d766feb63b382d54ba4bb57a219cad5ddfc1e4fe760a1ce2ca64196953e92a07b3937730a33b6deca160d8c2fbff48eb964283"}, 0xd8) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) socket$inet6(0xa, 0x6, 0xce) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) listen(r0, 0xa) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) listen(r1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) listen(r2, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r3, &(0x7f0000000100), 0x1c) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) listen(r4, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x91, @remote, 0x1}}, 0x0, 0x0, 0x32, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x2}}, 0x0, 0x0, 0x4, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542c90bc21470e441225642855b5f2faed4a18d67efd5f2fdf98328de94410300"}, 0xd8) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) listen(r5, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x1, @mcast2, 0x4}}, 0x0, 0x0, 0x11, 0x0, "2b20a9a47cddc63b223be606d7fa19f22a369ae751de81ca4d11e10450d766feb63b382d54ba4bb57a219cad5ddfc1e4fe760a1ce2ca64196953e92a07b3937730a33b6deca160d8c2fbff48eb964283"}, 0xd8) (async) listen(r6, 0x0) (async) socket$netlink(0x10, 0x3, 0x8000000004) (async) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) (async) 1m6.01615323s ago: executing program 3 (id=483): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r2, 0xffffffffffffc000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x4, 0x9, 0xef, 0x1ff, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, 0x40, 0x78a0, 0x1, 0x6}}) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.throttle.io_serviced\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xb, 0x15, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0xfffffe00}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x487, 0x0, 0x0, 0x0, 0x3}, @alu={0x7, 0x1, 0xd, 0x4, 0x6, 0x0, 0xfffffffffffffffc}, @ldst={0x2, 0x0, 0x4, 0x4, 0x4, 0xffffffffffffffe0, 0xfffffffffffffffc}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @alu={0x7, 0x1, 0xc, 0x6, 0x7, 0x0, 0x4c8808a4d17fa30b}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x8, '\x00', r3, @fallback=0xa7cc229dcc1cfdac, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0x338, 0x1ff, 0xc}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, &(0x7f0000000300)=[r4], &(0x7f0000000400)=[{0x1, 0x3, 0xf, 0x1}, {0x1, 0x3, 0x1, 0xc}, {0x1, 0x3, 0x5, 0xc}, {0x0, 0x4, 0x1, 0x3}, {0x4, 0x2, 0x8, 0x4}, {0x1, 0x1, 0x2, 0x6}], 0x10, 0xf5}, 0x94) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x3, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r1, 0x301, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) 51.021924891s ago: executing program 3 (id=483): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r2, 0xffffffffffffc000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x4, 0x9, 0xef, 0x1ff, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, 0x40, 0x78a0, 0x1, 0x6}}) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.throttle.io_serviced\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xb, 0x15, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0xfffffe00}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x487, 0x0, 0x0, 0x0, 0x3}, @alu={0x7, 0x1, 0xd, 0x4, 0x6, 0x0, 0xfffffffffffffffc}, @ldst={0x2, 0x0, 0x4, 0x4, 0x4, 0xffffffffffffffe0, 0xfffffffffffffffc}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @alu={0x7, 0x1, 0xc, 0x6, 0x7, 0x0, 0x4c8808a4d17fa30b}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x8, '\x00', r3, @fallback=0xa7cc229dcc1cfdac, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0x338, 0x1ff, 0xc}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, &(0x7f0000000300)=[r4], &(0x7f0000000400)=[{0x1, 0x3, 0xf, 0x1}, {0x1, 0x3, 0x1, 0xc}, {0x1, 0x3, 0x5, 0xc}, {0x0, 0x4, 0x1, 0x3}, {0x4, 0x2, 0x8, 0x4}, {0x1, 0x1, 0x2, 0x6}], 0x10, 0xf5}, 0x94) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x3, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r1, 0x301, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) 33.400377897s ago: executing program 3 (id=483): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r2, 0xffffffffffffc000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x4, 0x9, 0xef, 0x1ff, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, 0x40, 0x78a0, 0x1, 0x6}}) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.throttle.io_serviced\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xb, 0x15, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0xfffffe00}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x487, 0x0, 0x0, 0x0, 0x3}, @alu={0x7, 0x1, 0xd, 0x4, 0x6, 0x0, 0xfffffffffffffffc}, @ldst={0x2, 0x0, 0x4, 0x4, 0x4, 0xffffffffffffffe0, 0xfffffffffffffffc}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @alu={0x7, 0x1, 0xc, 0x6, 0x7, 0x0, 0x4c8808a4d17fa30b}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x8, '\x00', r3, @fallback=0xa7cc229dcc1cfdac, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0x338, 0x1ff, 0xc}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, &(0x7f0000000300)=[r4], &(0x7f0000000400)=[{0x1, 0x3, 0xf, 0x1}, {0x1, 0x3, 0x1, 0xc}, {0x1, 0x3, 0x5, 0xc}, {0x0, 0x4, 0x1, 0x3}, {0x4, 0x2, 0x8, 0x4}, {0x1, 0x1, 0x2, 0x6}], 0x10, 0xf5}, 0x94) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x3, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r1, 0x301, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) 15.809667955s ago: executing program 3 (id=483): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r2, 0xffffffffffffc000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x4, 0x9, 0xef, 0x1ff, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, 0x40, 0x78a0, 0x1, 0x6}}) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.throttle.io_serviced\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xb, 0x15, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0xfffffe00}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x487, 0x0, 0x0, 0x0, 0x3}, @alu={0x7, 0x1, 0xd, 0x4, 0x6, 0x0, 0xfffffffffffffffc}, @ldst={0x2, 0x0, 0x4, 0x4, 0x4, 0xffffffffffffffe0, 0xfffffffffffffffc}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @alu={0x7, 0x1, 0xc, 0x6, 0x7, 0x0, 0x4c8808a4d17fa30b}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x8, '\x00', r3, @fallback=0xa7cc229dcc1cfdac, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0x338, 0x1ff, 0xc}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, &(0x7f0000000300)=[r4], &(0x7f0000000400)=[{0x1, 0x3, 0xf, 0x1}, {0x1, 0x3, 0x1, 0xc}, {0x1, 0x3, 0x5, 0xc}, {0x0, 0x4, 0x1, 0x3}, {0x4, 0x2, 0x8, 0x4}, {0x1, 0x1, 0x2, 0x6}], 0x10, 0xf5}, 0x94) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x3, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r1, 0x301, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) 4.337020932s ago: executing program 4 (id=1001): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f00000001c0)=0x9, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'vlan1\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000004c0)) (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x800) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000005c0)={@loopback}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000700)={@dev, @initdev}, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r0, 0x0, 0x20000851) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000140)=0x1, 0x4) (async) r5 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e0, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x148, 0x358, 0x358, 0x148, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @empty, 0xff000000, 0x0, 'xfrm0\x00', 'team_slave_1\x00', {}, {}, 0x33}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x1, 0xd, 0x3, 'syz0\x00', {0x17}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x240) write$tun(0xffffffffffffffff, 0x0, 0x4e) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1a, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x20, '\x00', r2, @tracing=0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffc01}, 0x94) (async) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x2c}}, 0x0) (async) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0xe, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) 4.006862081s ago: executing program 4 (id=1003): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f00000000c0)=0x8004, 0x4) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000580)=[{&(0x7f0000000a40)=ANY=[@ANYBLOB="1c0000005600010600000000000000000700000000010000f4000000"], 0x1c}], 0x1}, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r4, r2, 0x4, r2}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000002940)=@newtfilter={0xa9c, 0x2c, 0xa00, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x4}, {0xb, 0x1}, {0xd, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0xa40, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_ACT={0xa2c, 0x2, [@m_skbmod={0x70, 0x1d, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x8}]}, {0x32, 0x6, "b3268ad7e9a38c3c0db4d8d4045f39071a304c7b5f91f987eb515ffa7f95f8764d58286a0bd68667ab028f6ada4a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_police={0x900, 0x14, 0x0, 0x0, {{0xb}, {0x890, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x7fffffff, 0xfff, 0x2, 0x401, 0x6, 0x101, 0x9, 0x7, 0x1, 0x7, 0x253f99a0, 0xa44c04ea, 0x11, 0x37, 0x0, 0x7fffffff, 0x1, 0x2, 0xb950, 0x4, 0x0, 0x4, 0xe, 0xa845, 0xbf, 0x6, 0x2, 0x82b, 0xae, 0x1, 0x5, 0x8001, 0x10000, 0xfffffff8, 0x100, 0x2, 0xd, 0x2, 0xf13, 0x80000001, 0x1000, 0xfffff655, 0x7, 0xf, 0x0, 0xc4, 0xf, 0xfffffff4, 0x401, 0x8, 0x7, 0xfffffffe, 0x9, 0x8, 0x5, 0xe6b, 0x8, 0x3, 0x4f, 0x9, 0x7, 0x9, 0x0, 0x3, 0x4830a4d2, 0x5, 0x1, 0x9, 0xc, 0x9, 0x12, 0x2, 0xd24, 0x4, 0x9, 0x6, 0x0, 0x7fffffff, 0x8, 0x7, 0x800, 0x3, 0xd7, 0x3, 0x7, 0x2, 0x5, 0x2, 0x0, 0x1, 0x8, 0x9, 0x16, 0x8, 0x800000, 0x6, 0x9, 0x3, 0x4, 0x8000, 0x87f, 0x3, 0xb18e, 0x3, 0x7, 0x3, 0x3, 0xfffffff8, 0xc, 0x0, 0x4, 0x9, 0xfffffff7, 0x9, 0x6, 0x2, 0x8001, 0x1000, 0x2, 0xfffff145, 0x5, 0xffffffff, 0x4b2, 0x437961a2, 0x77, 0x101, 0xfffffffe, 0x0, 0xfffffff9, 0xd, 0xfffffffa, 0x8236, 0x9, 0x5, 0x5, 0xffffd8b8, 0x4, 0x7, 0x50d, 0x1e4ba2ff, 0x80, 0x8, 0x1, 0x1, 0x81, 0x2, 0xc, 0x1, 0xffffffff, 0x1, 0x1, 0x6, 0x7, 0xfffffffc, 0x7, 0x1, 0x2, 0xffff, 0x6, 0x8, 0x80000000, 0x2, 0x3, 0x0, 0x9, 0xa77, 0x6, 0x6, 0x6, 0x22, 0xffff, 0x8a, 0xb, 0x2, 0x5, 0x1, 0x5, 0xf, 0x5, 0x0, 0x6f90, 0x8, 0x7f, 0x5, 0xcc05, 0x7, 0x0, 0x1, 0x9, 0x6, 0x3, 0x6, 0xa7, 0x4562, 0x1, 0xb, 0x7, 0x5, 0x7, 0xfffffffb, 0x7, 0xb, 0x6, 0xfffffff9, 0x8af, 0x8001, 0x9, 0x664, 0x3, 0x0, 0x10000, 0x7, 0x6dc3, 0x9, 0x0, 0x1, 0x77, 0x4, 0x742, 0x1, 0x3, 0x6, 0xb, 0x1, 0x6768, 0x967, 0x812, 0x40, 0x1, 0x8000, 0x0, 0xd, 0x1, 0x18d, 0xe2b5, 0x4, 0x2, 0xfffffff8, 0x6, 0x5, 0xc6ea, 0x2, 0xaf, 0xcf4, 0x36e, 0x6, 0x2, 0xffffff07, 0x6, 0x8b22, 0xc14, 0x6, 0x80, 0x81, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x8, 0xa5bb, 0x7, 0xffff, {0x14, 0x1, 0x9, 0x3, 0x6, 0x8001}, {0x81, 0x2, 0x101, 0xc, 0x1000, 0x80}, 0x8, 0x2, 0x7}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x57}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x5, 0x4, 0x2, 0x6, {0xc0, 0x0, 0x1ff, 0xc9f5, 0x2, 0x7}, {0x4, 0x2, 0x3ff, 0x9, 0x3e, 0x2}, 0x9, 0x7, 0x80}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xf3, 0x100, 0x1cdf, 0x4, 0x401, 0x9, 0xfff, 0x296000, 0x401, 0x6, 0x4, 0x400, 0x0, 0x5, 0x10, 0x80000001, 0xfffffffe, 0x3, 0xffffffff, 0x5, 0xeed, 0x44a, 0x1ff, 0x5539, 0x5, 0xfffffff9, 0x4, 0x400, 0x1, 0x3, 0xd0e, 0x7, 0x2, 0x6, 0x8, 0x7, 0x7, 0xea8d, 0x9, 0x9, 0x91, 0xa, 0x7, 0x9, 0xffffff7f, 0xfe79, 0xd, 0x6, 0x9e53, 0x40, 0x8, 0x2, 0x0, 0x80000001, 0xfffffffa, 0x0, 0x622d, 0x7, 0xe, 0xffffffd2, 0xf, 0x2, 0x5, 0x6, 0x5, 0x2, 0x6, 0x5, 0x8000000, 0xcf74, 0x8, 0x3, 0x1, 0x3058, 0x81e, 0x6, 0x2, 0xfffffffe, 0x4, 0x7, 0x100, 0xbab, 0x9, 0x6, 0xa, 0x2b45, 0x7, 0x1, 0xffff7fff, 0x4, 0x5, 0x0, 0x81, 0x8000, 0xfffffffa, 0x5, 0x1, 0x5, 0x1, 0x2, 0x7fffffff, 0xfffffffc, 0x6f6, 0x800, 0x0, 0x5, 0x7, 0x13b3, 0x4, 0x57, 0x6, 0x2, 0x9, 0xfffffc0f, 0x2, 0x6, 0x6a58, 0x7, 0x4199, 0x25d43aa0, 0x3, 0x3, 0x7ecc, 0x23, 0x2, 0x4, 0x3ff, 0x4, 0x4, 0x1, 0x6, 0x4, 0x0, 0xb, 0x3b7, 0x6, 0xfff, 0x3, 0x31, 0x4, 0xe6, 0x1, 0x8, 0x101, 0x1, 0x5a, 0x200, 0x8000, 0x4a, 0x9, 0x4, 0x4eeb, 0x1, 0x9, 0x1, 0x3, 0x0, 0x3, 0xd, 0x9, 0xd93, 0x2, 0x5, 0x81, 0x6, 0xbb9, 0x2, 0x1, 0x3, 0xa1, 0xafa, 0x5, 0x4, 0x1, 0xb, 0x5, 0x9, 0x1, 0xb05, 0x5, 0x3, 0x7, 0x4, 0x3, 0x6, 0xb, 0x1, 0xc, 0x8, 0x5, 0x0, 0x82159b08, 0x8, 0x10001, 0x6, 0x4, 0xc0, 0x8, 0x8, 0x5, 0x8, 0x7749, 0x1, 0x81, 0x7c1f1512, 0x0, 0x6, 0x5, 0x0, 0x80000001, 0x4, 0x2, 0x4, 0x8, 0xfffffffb, 0x7, 0x4, 0xc3c, 0x6, 0x7ebee9f2, 0x5, 0xfffffff7, 0x2, 0x6, 0x7, 0x4d80, 0x8001, 0xfffff76b, 0x9, 0x40000000, 0x35e510c2, 0x6, 0x40000000, 0x0, 0x4, 0x7fff, 0x5, 0x6, 0x7, 0x3, 0x2, 0x0, 0xa05, 0x3, 0xf1, 0x8, 0xfffff7b1, 0x2, 0x2, 0x100, 0x3, 0x9, 0x4, 0x5, 0x5, 0x6]}]]}, {0x47, 0x6, "f77c6b25f2a23857dd04f4150360db952289f1a4de1a8707db7887154c13f0fbddf34145e3c389f380b667cf989afe1a7fb320135c3508354c5561b57e5ba8aedcf943"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbmod={0xb8, 0x18, 0x0, 0x0, {{0xb}, {0x38, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x4}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x5}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}]}, {0x58, 0x6, "20c765078b0686f736f773fcd3016bcedb80e970738dbe04e32e031a84f2e3ce4c2f3ce7636cfaa2bcd5b1fb85357ef9fc4a3f73a9758e1b8e68cc5dd1db7d8579c2737d8e5b1886d4d272fc789e33a89acfff29"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}, @TCA_RATE={0x6, 0x5, {0xa, 0xf9}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_route={{0xa}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x7, 0x9}}]}, 0xa9c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r6) sendmsg$TIPC_CMD_SET_NETID(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r7, 0x9, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x124}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4040000) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) r8 = socket$xdp(0x2c, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r10, 0x111, 0x4, 0x0, 0x4) r11 = socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) setsockopt$inet_MCAST_MSFILTER(r11, 0x0, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="000000000000000002004e24ac1414bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002004e22ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/273], 0x110) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@bridge_dellink={0x20, 0x11, 0x5, 0x0, 0xfffffffe, {0x7, 0x0, 0x0, r12, 0x3000}}, 0x20}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) r13 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r13, 0x89a2, &(0x7f0000000000)='bridge0\x00') r14 = socket(0x40000000015, 0x5, 0x0) connect$inet(r14, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) bind$inet(r14, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r14, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="04975697413104474cdfb598", 0xc}, {&(0x7f0000000240)="89d3c05e2f60dd8c0682db12", 0xc}, {&(0x7f0000001940)="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", 0xfe9}], 0x3, 0x0, 0x0, 0x805}, 0x0) bind$xdp(r8, &(0x7f00000001c0)={0x2c, 0x0, r12, 0x3b, r13}, 0x10) 3.636693608s ago: executing program 4 (id=1008): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x0, 0x21, 0xffffffff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, 0x48) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) (async) r0 = socket$xdp(0x2c, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16}, 0x6b) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) (async) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) sendto$inet(r2, &(0x7f0000002040)="17", 0x1, 0x40804, 0x0, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000340)=[@window, @mss={0x2, 0x8}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @timestamp, @mss={0x2, 0x1}, @window={0x3, 0x7, 0xceca}], 0x20000000000002b5) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) r3 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000100)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback, 0x0, 0x0, 0xffff, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x3}}, 0xe8) (async) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r6, 0x890c, &(0x7f0000000080)={0x0, @bcast, @bpq0, 0x2, 'syz1\x00', @bcast, 0x5, 0x8, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) (async) socket$tipc(0x1e, 0x5, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x1c, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x5, 0xf}, {0xffe0, 0x8}}}, 0x24}}, 0x4040850) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x67, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, @address_reply={0x12, 0x0, 0x0, 0x400}}}}}, 0x0) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r5, 0x0, r0}, 0x10) 3.202157613s ago: executing program 1 (id=1013): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events.local\x00', 0x275a, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x3}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000080)={r1, @in6={{0xa, 0x4e21, 0x3, @remote, 0x6}}, 0x200, 0x8, 0x3, 0x1, 0x15, 0x5, 0xff}, &(0x7f0000000140)=0x9c) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x600000a, 0x8032, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8915, &(0x7f0000000300)={'syz_tun\x00', {0x2, 0x4e27, @initdev={0xac, 0x1e, 0x4, 0x0}}}) 3.036607815s ago: executing program 1 (id=1015): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) 2.849888032s ago: executing program 2 (id=1018): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x34, r2, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x2048080}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r4) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r4) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRESOCT=r5, @ANYRES16=r5, @ANYRES8=r4, @ANYRESDEC=r4, @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="e46951b54543077f2bc41463a1e00c85d6aba6c85f8d437e77e124c9d07a778565cded9e56ef7fd32775763e5aa7c2dc0b7ca8dbe9ecad70e6e5d0d776e33fd978432982df335c97534ae439331c17da4b65f9a9f0c72c2ccf10dae0832c9d1d02f823300a5500cffbdf89977f113825ee2478017ce320d33346f1095595c492e06b3f9ddb87332e850cafb15d1e870aa9fafe438d084a2274c70cef51ed964a7b01774996af72b0fea74f679a26b375d52356d99f8da125cedcbcfa3051c920daea05257186a0fcf0479262d78578f689657831206bfe", @ANYRES32=r0], 0x14}}, 0x10004010) 2.503564383s ago: executing program 2 (id=1019): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x13c, 0x18, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x3b}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x6, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x880}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1_macvtap\x00'}) socket$pppoe(0x18, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000200)=@gcm_128={{0x303, 0x39}, 'UeE\x00', "27000200005a6f0940b151634357ea00", "fbff00", "de3f106b925ded4d"}, 0x28) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)={0x1c, 0x18, 0x1, 0x0, 0x3, {0x2, 0x3}, [@typed={0x8, 0x1, 0x0, 0x0, @binary="feffffff"}]}, 0x1c}}, 0x0) 2.420373547s ago: executing program 2 (id=1020): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000100)={'filter\x00', 0x0, 0x0, 0x0, [0x85, 0x4, 0x800, 0x8, 0x1]}, &(0x7f0000000040)=0x78) syz_emit_ethernet(0x78, &(0x7f0000000080)={@remote, @multicast, @val={@val={0x88a8, 0x2, 0x1, 0x2}, {0x8100, 0x1}}, {@x25={0x805, {0x3, 0x2, 0xfb, "63b25e5ffd7d4c0766af850d0d60f314686c55df72ffa6d7a789dd193b7c23f369475c57f139b783efa4a63584c236624b55d184a73846a5760a6539fc521cb52e59dfe427079496da024e6b1c698fb21a0c8c9bd335dc71817e2e1214e4e9"}}}}, &(0x7f0000000200)={0x1, 0x1, [0x1e0, 0xb76, 0xd3e, 0xa23]}) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200040001400400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r2 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r2, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x16, &(0x7f00000002c0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @tail_call, @func={0x85, 0x0, 0x1, 0x0, 0xfffffff1}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffe}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x401}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}], &(0x7f0000000380)='syzkaller\x00', 0x7, 0x23, &(0x7f00000003c0)=""/35, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x1, 0xe, 0x3fd, 0x7}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000440)=[{0x1, 0x2, 0xe, 0x2}, {0x5, 0x3, 0x7}, {0x2, 0x2, 0xb, 0x2}, {0x2, 0x3, 0x2, 0xb}, {0x0, 0x5, 0x8, 0xc}], 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r3, 0x0, 0x79, 0xfc, &(0x7f0000000580)="03d7f5a10608cac356480c24ce39645e4273a3dafb5ec186ce69e02877aaf171745db4b8bae265ffc324b5d08562a348dde22d3b94b120e9771c3f22e20874628c2d7e882fa444286958414a5570c425e546384ea32badf53ebc9242b060a2c01287e0acf45ba5932b1e833a84373fb02a5897eefefca58110", &(0x7f0000000600)=""/252, 0x1000, 0x0, 0xa9, 0xc, &(0x7f0000000700)="f79ea5706698f1913383e23efdb57da7b460722868f1e14ae548ac053e4e18b62f00ba39f3d17cce42d0ae063994c620b6944369635290c580d98050238f3baaccf9de74ab54f4e31d5555c77a26bcd8f4e91b187b029e516a44dc332d2406adc7e21d34a42e817dac695545288131ced61e9d3e05b05cb4f22f662defdcd359bec4aeda83563be17ab29215cd4d559d324a30edf72d888742573b2e2c29cbb00d4ce761987bf1a669", &(0x7f00000007c0)="eae3bc5d849a564165e36b24", 0x7, 0x0, 0x1}, 0x50) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet_tcp_buf(r2, 0x6, 0x21, &(0x7f0000000240)="cb4e7b99418e5adee9fb302fa5954539d3967c35e679e0d0892ae1fd696579875e1160ba6d412a450e0eadec077fc91ea0c7869b7fbda5780c8269a99b9b504a40d18c1156cddd5ab29196a1a89cc9755ffb2c426629a0e57b63741dd6d0eab627d611ed26dbc911107e", 0x6a) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={@remote, 0x35, r4}) recvmmsg(0xffffffffffffffff, &(0x7f0000003700)=[{{&(0x7f0000000880)=@qipcrtr, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000900)=""/255, 0xff}, {&(0x7f0000000a00)=""/86, 0x56}, {&(0x7f0000000a80)=""/129, 0x81}], 0x3}, 0x8}, {{&(0x7f0000000b80)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000c00)}, {&(0x7f0000000c40)=""/127, 0x7f}, {&(0x7f0000000cc0)=""/77, 0x4d}, {&(0x7f0000000d40)=""/148, 0x94}, {&(0x7f0000000e00)=""/234, 0xea}, {&(0x7f0000000f00)=""/131, 0x83}, {&(0x7f0000000fc0)=""/48, 0x30}], 0x7, &(0x7f0000001080)=""/4096, 0x1000}, 0x4}, {{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000002080)=""/117, 0x75}, {&(0x7f0000002100)=""/196, 0xc4}], 0x2, &(0x7f0000002240)=""/139, 0x8b}, 0xe5d}, {{&(0x7f0000002300)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f00000035c0)=[{&(0x7f0000002380)=""/183, 0xb7}, {&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000003440)=""/51, 0x33}, {&(0x7f0000003480)=""/25, 0x19}, {&(0x7f00000034c0)=""/205, 0xcd}], 0x5, &(0x7f0000003640)=""/129, 0x81}, 0x9}], 0x4, 0x40000101, &(0x7f0000003800)={0x77359400}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYRES32=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0xc}, 0x94) 2.178901918s ago: executing program 2 (id=1022): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) tee(r1, r0, 0xffffffffffffffff, 0x2) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000400)=""/38, &(0x7f0000000440)=0x26) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cryptd(ecb-camellia-aesni-avx2)\x00'}, 0x58) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000000, 0x3032, 0xffffffffffffffff, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040), 0x10) listen(r3, 0x5) r4 = socket$netlink(0x10, 0x3, 0x15) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r4) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xe4, r5, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xd}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xee7e}]}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2226}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x55}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x32}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6c}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x14}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3}}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) sendmsg$netlink(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000001d40)={0x10, 0x13, 0x1}, 0x10}], 0x1}, 0x0) r6 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r6, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x8}, 0x8) sendmmsg(r6, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0x2ea}, 0x8) 2.073748383s ago: executing program 1 (id=1023): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000380)={0x0, 0x1c, &(0x7f0000000340)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f00000003c0)=0x10) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x19, &(0x7f0000000000), 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x300000d, 0x13, r1, 0xd7735000) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0x11, &(0x7f0000000100)=0xfffffffe, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='freezer.parent_freezing\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x2d, 'perf_event'}]}, 0xc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x52, r3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x40, &(0x7f0000000380)={'raw\x00'}, &(0x7f0000003240)=0x54) 2.026087408s ago: executing program 0 (id=1024): r0 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22, 0x100, 0xffffffffffffffff, 0x4}, 0x48) sendmsg(r0, 0x0, 0x40000) 1.912274602s ago: executing program 0 (id=1025): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) (async) listen(r0, 0x4) (async) accept4$unix(r0, 0x0, 0x0, 0x0) (async, rerun: 32) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) (rerun: 32) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) splice(r1, 0x0, r3, 0x0, 0x1140000000f336, 0x9) (async) close(0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c00000011000100000000000000000007000000", @ANYRES32=r10, @ANYBLOB="100a0600090901000c001a800800048004000480"], 0x2c}, 0x1, 0x0, 0x0, 0xc0c0}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000426bd7000fedbdf250a003e00", @ANYRES32=r10, @ANYBLOB="01000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x804) r11 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r11, &(0x7f00000000c0), 0x10) (async) sendmmsg$inet(r11, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}], 0x1, 0x0) (async) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0xca02}) close(r6) socket$inet_mptcp(0x2, 0x1, 0x106) (async) socket$nl_netfilter(0x10, 0x3, 0xc) preadv(r7, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0x3}], 0x3e8, 0x0, 0x0) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0x42, 0x4, 0x398, 0xffffffff, 0x0, 0xd0, 0x1f0, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0, 0x0, {0x100000000000000}}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x6, 0xc, [0x31, 0x36, 0x34, 0xc, 0x24, 0x2c, 0x22, 0x24, 0x39, 0x2d, 0x3e, 0x1b, 0x35, 0x33, 0x12, 0xc], 0x0, 0x9, 0x8000000003}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x4ca, 0xb, [0x10, 0x2a, 0x36, 0xe, 0x6, 0xf, 0xb, 0x22, 0x39, 0x12, 0x17, 0x36, 0x6, 0xe, 0xa, 0x10], 0x0, 0xb, 0x681}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00', {0xff}, {}, 0x0, 0x0, 0x58}, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x4, 0x4, 0x4, 0x1, 0x4, 0x7], 0x0, 0x2}}}, @common=@ttl={{0x28}, {0x0, 0x80}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x5, 0x5}, {0xffffffffffffffff, 0x3, 0x2}, {0x2, 0x5, 0x6}, 0x2, 0x4}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) (async) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) 1.818428757s ago: executing program 1 (id=1026): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xfffffffffffffd74, 0x40004, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) sendmsg$NFNL_MSG_ACCT_GET(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)={0x14, 0x1, 0x7, 0x5}, 0x14}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x30, r7, 0x1, 0x3, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x81}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x1, 0x0, 0x2, {0x0, 0x0, 0x0, r8, 0x18f40, 0x2200a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6}]}}}]}, 0x40}}, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x28, r1, 0x2, 0x1, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bb00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20}, 0x90) 1.733670981s ago: executing program 4 (id=1027): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1b400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r6, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x9}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x80000000}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0xfffffff5}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000040) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'netpci0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'netpci0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r7, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xa4, r8, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}]}, 0xa4}}, 0x8800) (async) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r7, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xa4, r8, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}]}, 0xa4}}, 0x8800) 1.593461308s ago: executing program 2 (id=1028): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 64) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_tracing={0x1a, 0xd, &(0x7f0000000000)=@raw=[@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @map_val={0x18, 0x7, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5409}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f00000000c0)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0xa, 0x9, 0x7}, 0x10, 0x15384, 0xffffffffffffffff, 0x4, &(0x7f0000000240)=[0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000280)=[{0x3, 0x2, 0x2, 0x9}, {0x1, 0x4, 0x10, 0x6}, {0x5, 0x2, 0xf}, {0x5, 0x1, 0x8, 0x2}], 0x10, 0x400}, 0x94) (async) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@fallback=0xffffffffffffffff, 0x34, 0x0, 0x10000, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0), &(0x7f0000000100), 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@fallback, 0xffffffffffffffff, 0x8, 0x200d, r3, @value, @void, @void, @void, r5}, 0x20) (async, rerun: 32) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 32) openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0], 0x0, 0x11, &(0x7f0000000480)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x44, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@cgroup=r6, r2, 0x8, 0x20, 0x0, @void, @void, @void, @value=r7, r5}, 0x20) (async) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000e40)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0xf, '\x00', r8, r4, 0x5, 0x5, 0x4}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=@bloom_filter={0x1e, 0x1, 0x10000, 0x8, 0x804, r9, 0x4b0, '\x00', r8, r4, 0x2, 0x2, 0x1, 0x1}, 0x50) (async) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000740)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x490, 0x148, 0x2a8, 0x2a8, 0x2a8, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, &(0x7f00000006c0), {[{{@ipv6={@local, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffffff, 0x0, 0x577e4be940ba6f6a, 0xff000000], [0xff, 0xffffff00, 0xff000000, 0xffffffff], 'veth0_to_team\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0x29, 0xe, 0x2, 0x4}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ah={{0x30}, {[0x4d2, 0x4d4], 0x8, 0x2, 0x2}}, @common=@hl={{0x28}, {0x2, 0x2}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@broadcast, 0x37, 0x13, 0x5}}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0xe6, 0x5, 0xf, 0xfff8, @mcast1, @empty, @empty, [0xff], [0xffffff00, 0x0, 0xff, 0xffffff00], [0x0, 0xff000000, 0xffffff00, 0xffffffff], 0x2, 0x600}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x3f}}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffff00, 0x0, 0xffffff00, 0xffffff00], [0x0, 0xff, 0x0, 0xffffff00], 'veth1_vlan\x00', 'pimreg1\x00', {}, {0xff}, 0xa, 0x6, 0x1, 0x8}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@loopback, @ipv4=@multicast2, 0x32, 0x0, 0x3}}}, {{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@srh={{0x30}, {0x87, 0x81, 0x5, 0xb, 0xd, 0xc, 0x1446}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@broadcast, @ipv4=@remote, 0x17, 0x18, 0x10}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x1, 0x0, 0x0, 0x2}}}}, 0x30}}, 0x0) 1.553865987s ago: executing program 0 (id=1029): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000001340)=@hci={0x1f, 0x8100, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000100)="b8b2cc1e00c1dba49d785144fc08d56d5c5329ce2dbc7ad0f2bb66ca88fb", 0x1e}], 0x1}, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r3 = socket$packet(0x11, 0x0, 0x300) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newqdisc={0x48, 0x24, 0xf0b, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x7c, 0x81}}, @TCA_RATE={0x6, 0x5, {0x1, 0x7}}, @qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0xc30}]}}]}, 0x48}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r6, 0x84, 0x72, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.391445577s ago: executing program 3 (id=483): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r2, 0xffffffffffffc000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x4, 0x9, 0xef, 0x1ff, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, 0x40, 0x78a0, 0x1, 0x6}}) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.throttle.io_serviced\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xb, 0x15, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0xfffffe00}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x487, 0x0, 0x0, 0x0, 0x3}, @alu={0x7, 0x1, 0xd, 0x4, 0x6, 0x0, 0xfffffffffffffffc}, @ldst={0x2, 0x0, 0x4, 0x4, 0x4, 0xffffffffffffffe0, 0xfffffffffffffffc}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @alu={0x7, 0x1, 0xc, 0x6, 0x7, 0x0, 0x4c8808a4d17fa30b}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x8, '\x00', r3, @fallback=0xa7cc229dcc1cfdac, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0x338, 0x1ff, 0xc}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, &(0x7f0000000300)=[r4], &(0x7f0000000400)=[{0x1, 0x3, 0xf, 0x1}, {0x1, 0x3, 0x1, 0xc}, {0x1, 0x3, 0x5, 0xc}, {0x0, 0x4, 0x1, 0x3}, {0x4, 0x2, 0x8, 0x4}, {0x1, 0x1, 0x2, 0x6}], 0x10, 0xf5}, 0x94) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x3, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r1, 0x301, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) 1.321174971s ago: executing program 0 (id=1030): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r1, &(0x7f0000000780)}, 0x20) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25017c0000100036800c00020004000600000000000c000180060006008e"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0x3, 0x2}, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r4, 0x800448d2, &(0x7f00000000c0)={0x6, &(0x7f00000002c0)=[{}, {}, {}, {@none}, {@fixed}, {@fixed}]}) openat$cgroup_int(r4, &(0x7f0000000100)='cgroup.max.depth\x00', 0x2, 0x0) 267.727829ms ago: executing program 0 (id=1031): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x380000, 0x7fff, 0xf32, 0x0, 0x1}, 0x50) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f00000009c0)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x3f}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async, rerun: 32) syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @local, @val, {@ipv6={0x86dd, @generic={0x0, 0x6, "008c04", 0x18, 0x0, 0x0, @rand_addr=' \x01\x00', @remote, {[@hopopts={0x0, 0x1, '\x00', [@ra={0x5, 0x2, 0x7f}, @pad1, @padn]}]}}}}}, 0x0) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071121e000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x18}}, 0x0) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x76}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) (async, rerun: 32) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) 267.080424ms ago: executing program 1 (id=1032): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) close(r1) sendmsg$can_raw(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@canfd={{0x0, 0x1}, 0x2d, 0x1, 0x0, 0x0, "859329b4454bea1091cd9cd4cda7ebd91e19cf43956a4bd97202337b63e1c74747dd3bb232ef743649568787976034bf0e0cfd32cbc8aa9540b109c4ce77d624"}, 0x48}, 0x1, 0x0, 0x0, 0x400e0}, 0x4004010) 266.266634ms ago: executing program 2 (id=1033): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="1400010000000000f00000000000ffff81"], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448dd, &(0x7f0000000240)={0x0, 0x0, "ebff00"}) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2f, 0x0, &(0x7f0000000040)=0x700) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000200}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x8c, 0x1, 0x9, 0x3, 0x0, 0x0, {0xec458b75d4abf806, 0x0, 0x5}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x11}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_TUPLE={0x50, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 262.514592ms ago: executing program 4 (id=1034): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/96, 0x60, 0x0, &(0x7f00000001c0)=""/176, 0xb0}, &(0x7f0000000100)=0x40) (async) syz_emit_ethernet(0x82, &(0x7f0000000940)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x1b, 0x4, 0x1, 0x6, 0x74, 0x65, 0x0, 0x0, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0xe}, @broadcast, {[@timestamp_addr={0x44, 0xc, 0xab, 0x1, 0xe, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x1}]}, @timestamp_addr={0x44, 0x24, 0x2a, 0x1, 0xa, [{@private=0xa010101, 0xc}, {@remote, 0x4}, {@multicast2, 0x4}, {@rand_addr=0x64010101, 0xfffffff4}]}, @timestamp_addr={0x44, 0x24, 0x88, 0x1, 0x2, [{@local, 0x2}, {@remote, 0x210}, {@private=0xa010101, 0x7f}, {@multicast2, 0x1000}]}, @noop, @end]}}, @info_request={0xf, 0x0, 0x0, 0xcead, 0x9}}}}}, &(0x7f0000000a00)={0x1, 0x2, [0x77, 0x93, 0x936, 0xf30]}) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/177, 0xb1, 0x1, &(0x7f0000000480)=""/185, 0xb9}, &(0x7f0000000040)=0x40) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000f40), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001300)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x0) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = accept4(r1, &(0x7f0000000a40)=@ethernet={0x0, @random}, &(0x7f0000000ac0)=0x80, 0x800) (async) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000b40), r2) sendmsg$GTP_CMD_ECHOREQ(r5, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="2800fdff", @ANYRES16=r6, @ANYBLOB="000229bd7000fcdbdf250300000014000c00ff010000000000000000000000000001"], 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x20000080) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r7) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) (async) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r9, r10, 0x5}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r9, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r8}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r11}, &(0x7f0000000100), &(0x7f0000000140)=r7}, 0x20) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r13, @ANYRES32=r12, @ANYBLOB='&'], 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r13}, &(0x7f0000000000), &(0x7f0000000080)=r7}, 0x20) (async) r14 = socket$netlink(0x10, 0x3, 0x12) sendmsg$NFT_BATCH(r14, &(0x7f0000000900)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10020309}, 0xc, &(0x7f0000000300)={&(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x3a0}, 0x1, 0x0, 0x0, 0x400}, 0x4008004) (async) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @NHA_FDB={0x4}]}, 0x30}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@mcast2, 0x0, 0x32}, @in=@multicast1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}}, 0x0) (async) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000140)=0x1, 0x4) 161.326212ms ago: executing program 0 (id=1035): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r1, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) connect$rose(r1, &(0x7f00000000c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @null]}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff08000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000cc0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) listen(r0, 0xf831) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@deltaction={0x24, 0x32, 0x533, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x24}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001e00010000000000fddbdf250a000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00\a\x00'], 0x24}}, 0x0) setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x5, &(0x7f0000000040)=0x1, 0x4) 85.958993ms ago: executing program 1 (id=1036): unshare(0x20000400) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r1]}, 0x90) (async, rerun: 64) openat$cgroup_ro(r0, &(0x7f0000000980)='io.stat\x00', 0x0, 0x0) (async, rerun: 64) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r3, @ANYRES64=r3, @ANYBLOB="1d4323764f99c884d1ec11b66a9f4cd7ca5c396490ddb2de97decd6fabe64f0b78a61b99fcde0e0bdfcbd66215e17c72265f0d856ec588d8f9c9ffc7175a2008f17456f692b6be822f89a5f939288ea73fa95c1166ebd82f57e2c51084972f219305da2c829fd2be25802ca1d4c4b43fe1b4318d4426258e93b2342e"], 0x2c}, 0x1, 0x0, 0x0, 0x28008014}, 0x4886) 0s ago: executing program 4 (id=1037): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX=0x0, @ANYRES32=r0], 0x5c}}, 0x20000000) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x3, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x44084) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX=0x0, @ANYRES32=r0], 0x5c}}, 0x20000000) (async) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x3, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x44084) (async) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.55' (ED25519) to the list of known hosts. [ 72.856372][ T5818] cgroup: Unknown subsys name 'net' [ 72.986848][ T5818] cgroup: Unknown subsys name 'cpuset' [ 72.995125][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.448310][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.618995][ T5152] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.641418][ T5152] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.649338][ T5152] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.684932][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.692822][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.704012][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.712395][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.743590][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.752444][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.760809][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.769136][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.777467][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.794286][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.801456][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.823727][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.843796][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.855218][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.855404][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.873482][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.878211][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.894318][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.902646][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.926314][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.956729][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.973387][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.368182][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 79.626228][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.633644][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.641020][ T5835] bridge_slave_0: entered allmulticast mode [ 79.651172][ T5835] bridge_slave_0: entered promiscuous mode [ 79.687941][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 79.707801][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.716491][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.725662][ T5835] bridge_slave_1: entered allmulticast mode [ 79.733733][ T5835] bridge_slave_1: entered promiscuous mode [ 79.740964][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 79.846576][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.867588][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 79.883931][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.989825][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.998214][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.006155][ T5828] bridge_slave_0: entered allmulticast mode [ 80.013086][ T5828] bridge_slave_0: entered promiscuous mode [ 80.078879][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.086468][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.095537][ T5828] bridge_slave_1: entered allmulticast mode [ 80.102519][ T5828] bridge_slave_1: entered promiscuous mode [ 80.112472][ T5835] team0: Port device team_slave_0 added [ 80.121419][ T5835] team0: Port device team_slave_1 added [ 80.194894][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.202087][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.212586][ T5840] bridge_slave_0: entered allmulticast mode [ 80.219700][ T5840] bridge_slave_0: entered promiscuous mode [ 80.228294][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.235726][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.242876][ T5840] bridge_slave_1: entered allmulticast mode [ 80.250033][ T5840] bridge_slave_1: entered promiscuous mode [ 80.271034][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 80.310006][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.317903][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.345100][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.406687][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.420219][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.427917][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.453937][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.501802][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.528662][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.542677][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.550015][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.557468][ T5844] bridge_slave_0: entered allmulticast mode [ 80.565311][ T5844] bridge_slave_0: entered promiscuous mode [ 80.597434][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.611585][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.618887][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.626325][ T5844] bridge_slave_1: entered allmulticast mode [ 80.633440][ T5844] bridge_slave_1: entered promiscuous mode [ 80.642374][ T5828] team0: Port device team_slave_0 added [ 80.666461][ T5835] hsr_slave_0: entered promiscuous mode [ 80.672849][ T5835] hsr_slave_1: entered promiscuous mode [ 80.724503][ T5828] team0: Port device team_slave_1 added [ 80.752264][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.759537][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.766780][ T5832] bridge_slave_0: entered allmulticast mode [ 80.774463][ T5832] bridge_slave_0: entered promiscuous mode [ 80.819969][ T5840] team0: Port device team_slave_0 added [ 80.830013][ T5840] team0: Port device team_slave_1 added [ 80.836207][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.843957][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.851198][ T5832] bridge_slave_1: entered allmulticast mode [ 80.858452][ T5832] bridge_slave_1: entered promiscuous mode [ 80.868018][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.880766][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.966646][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.974281][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.984175][ T5842] Bluetooth: hci0: command tx timeout [ 81.000544][ T5846] Bluetooth: hci1: command tx timeout [ 81.006035][ T5841] Bluetooth: hci3: command tx timeout [ 81.006312][ T5841] Bluetooth: hci2: command tx timeout [ 81.013397][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.056966][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.063981][ T5841] Bluetooth: hci4: command tx timeout [ 81.069450][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.083821][ T5844] team0: Port device team_slave_0 added [ 81.090481][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.097624][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.123921][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.149794][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.156832][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.182775][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.196236][ T5844] team0: Port device team_slave_1 added [ 81.202856][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.209865][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.236240][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.273560][ T5832] team0: Port device team_slave_0 added [ 81.307713][ T5832] team0: Port device team_slave_1 added [ 81.374261][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.381237][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.407218][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.453736][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.460707][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.488819][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.507652][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.514678][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.540904][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.562598][ T5828] hsr_slave_0: entered promiscuous mode [ 81.568896][ T5828] hsr_slave_1: entered promiscuous mode [ 81.575797][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.583837][ T5828] Cannot create hsr debugfs directory [ 81.602952][ T5840] hsr_slave_0: entered promiscuous mode [ 81.609280][ T5840] hsr_slave_1: entered promiscuous mode [ 81.615910][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.623966][ T5840] Cannot create hsr debugfs directory [ 81.630225][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.638095][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.664555][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.875133][ T5844] hsr_slave_0: entered promiscuous mode [ 81.881843][ T5844] hsr_slave_1: entered promiscuous mode [ 81.888883][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.896767][ T5844] Cannot create hsr debugfs directory [ 81.932915][ T5832] hsr_slave_0: entered promiscuous mode [ 81.945022][ T5832] hsr_slave_1: entered promiscuous mode [ 81.951399][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.959877][ T5832] Cannot create hsr debugfs directory [ 82.230267][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.278325][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.318666][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.332821][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.518669][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.529966][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.546987][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.570711][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.645236][ T5840] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.656798][ T5840] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.669300][ T5840] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.683891][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.707897][ T5840] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.752568][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.809909][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.817136][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.828250][ T5832] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.841602][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.848763][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.884193][ T5832] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.896974][ T5832] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.925575][ T5832] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.022803][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.031212][ T5844] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.046220][ T5844] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.054010][ T5842] Bluetooth: hci0: command tx timeout [ 83.054340][ T5846] Bluetooth: hci1: command tx timeout [ 83.059416][ T5842] Bluetooth: hci3: command tx timeout [ 83.070707][ T5841] Bluetooth: hci2: command tx timeout [ 83.103947][ T5844] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.114787][ T5844] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.134346][ T5841] Bluetooth: hci4: command tx timeout [ 83.153104][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.219779][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.227097][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.266455][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.273636][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.351434][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.445150][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.491755][ T1040] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.498931][ T1040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.510587][ T1040] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.518107][ T1040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.570411][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.636972][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.651526][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.722420][ T3462] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.729756][ T3462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.768421][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.775620][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.801349][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.860186][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.889869][ T5835] veth0_vlan: entered promiscuous mode [ 83.916067][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.923360][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.956861][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.984628][ T1040] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.991790][ T1040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.051586][ T5835] veth1_vlan: entered promiscuous mode [ 84.221100][ T5828] veth0_vlan: entered promiscuous mode [ 84.232985][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.272730][ T5835] veth0_macvtap: entered promiscuous mode [ 84.287089][ T5828] veth1_vlan: entered promiscuous mode [ 84.308540][ T5835] veth1_macvtap: entered promiscuous mode [ 84.426019][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.449779][ T5828] veth0_macvtap: entered promiscuous mode [ 84.460637][ T5840] veth0_vlan: entered promiscuous mode [ 84.475883][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.499709][ T5840] veth1_vlan: entered promiscuous mode [ 84.516959][ T5835] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.527412][ T5835] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.537794][ T5835] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.547078][ T5835] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.559327][ T5828] veth1_macvtap: entered promiscuous mode [ 84.590086][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.662308][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.717990][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.750087][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.790403][ T5828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.805765][ T5828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.816179][ T5828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.825840][ T5828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.867260][ T5840] veth0_macvtap: entered promiscuous mode [ 84.901358][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.929425][ T5840] veth1_macvtap: entered promiscuous mode [ 84.935445][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.010406][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.022335][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.070126][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.100362][ T5844] veth0_vlan: entered promiscuous mode [ 85.111921][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.112883][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 85.134279][ T5842] Bluetooth: hci0: command tx timeout [ 85.135038][ T5841] Bluetooth: hci1: command tx timeout [ 85.147679][ T5842] Bluetooth: hci2: command tx timeout [ 85.147763][ T5846] Bluetooth: hci3: command tx timeout [ 85.196539][ T5840] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.209568][ T5840] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.220944][ T5840] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.223683][ T5846] Bluetooth: hci4: command tx timeout [ 85.230481][ T5840] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.257526][ T5832] veth0_vlan: entered promiscuous mode [ 85.268929][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.288602][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.374665][ T5844] veth1_vlan: entered promiscuous mode [ 85.389909][ T5832] veth1_vlan: entered promiscuous mode [ 85.409305][ T3462] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.423060][ T3462] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.444509][ T30] audit: type=1800 audit(1751123372.856:2): pid=5953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1" name="memory.events" dev="tmpfs" ino=18 res=0 errno=0 [ 85.488474][ T30] audit: type=1804 audit(1751123372.856:3): pid=5953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1" name="/newroot/0/memory.events" dev="tmpfs" ino=18 res=1 errno=0 [ 85.585627][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.609380][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.651698][ T5844] veth0_macvtap: entered promiscuous mode [ 85.711332][ T5832] veth0_macvtap: entered promiscuous mode [ 85.738827][ T5844] veth1_macvtap: entered promiscuous mode [ 85.765891][ T3462] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.777748][ T5832] veth1_macvtap: entered promiscuous mode [ 85.788858][ T3462] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.838717][ T5960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6'. [ 85.838733][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.870958][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.901278][ T5960] macsec0: entered promiscuous mode [ 85.915201][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.951545][ T5844] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.963842][ T5844] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.972579][ T5844] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.983071][ T5844] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.029707][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.068692][ T5832] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.095276][ T5832] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.113549][ T5832] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.133732][ T5832] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.167190][ T5970] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4'. [ 86.252966][ T5970] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4'. [ 86.392028][ T5982] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 86.608802][ T5989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.622955][ T5990] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11'. [ 86.640911][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.670626][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.764843][ T120] cfg80211: failed to load regulatory.db [ 86.774721][ T5994] Zero length message leads to an empty skb [ 86.839893][ T5996] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14'. [ 87.028577][ T5999] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.037434][ T5999] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.124419][ T6010] syz.1.13 uses obsolete (PF_INET,SOCK_PACKET) [ 87.213434][ T5846] Bluetooth: hci1: command tx timeout [ 87.219420][ T5841] Bluetooth: hci2: command tx timeout [ 87.225436][ T5846] Bluetooth: hci0: command tx timeout [ 87.230893][ T5842] Bluetooth: hci3: command tx timeout [ 87.245338][ T6016] xt_HMARK: proto mask must be zero with L3 mode [ 87.281942][ T6017] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.295189][ T5842] Bluetooth: hci4: command tx timeout [ 87.346002][ T5999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.371582][ T5999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.529103][ T5999] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.546439][ T5999] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.556125][ T5999] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.567418][ T5999] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.612070][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.628637][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.653321][ T3485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.661168][ T3485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.877174][ T1040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.907163][ T1040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.244727][ T6043] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 88.282657][ T5894] IPVS: starting estimator thread 0... [ 88.304283][ T6044] raw_sendmsg: syz.4.5 forgot to set AF_INET. Fix it! [ 88.359710][ T6044] netlink: 'syz.4.5': attribute type 21 has an invalid length. [ 88.383392][ T6047] IPVS: using max 33 ests per chain, 79200 per kthread [ 88.414545][ T6044] netlink: 'syz.4.5': attribute type 6 has an invalid length. [ 88.452673][ T6044] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5'. [ 88.599805][ T6061] netlink: 64 bytes leftover after parsing attributes in process `syz.2.29'. [ 88.643103][ T6060] netlink: 'syz.0.28': attribute type 3 has an invalid length. [ 88.673412][ T6060] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.28'. [ 88.745655][ T6070] netlink: 24 bytes leftover after parsing attributes in process `syz.0.28'. [ 88.797340][ T6060] netlink: 'syz.0.28': attribute type 2 has an invalid length. [ 88.853359][ T6060] netlink: 'syz.0.28': attribute type 8 has an invalid length. [ 88.887595][ T6060] netlink: 132 bytes leftover after parsing attributes in process `syz.0.28'. [ 88.936766][ T6076] openvswitch: netlink: Message has 4 unknown bytes. [ 89.663671][ T6110] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 90.044022][ T6134] xt_CT: You must specify a L4 protocol and not use inversions on it [ 90.050866][ T6134] netlink: 'syz.1.53': attribute type 2 has an invalid length. [ 90.090205][ T6134] xt_CT: You must specify a L4 protocol and not use inversions on it [ 90.267750][ T6143] Illegal XDP return value 4294967274 on prog (id 18) dev N/A, expect packet loss! [ 90.456379][ T6159] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.118781][ T6193] Cannot find map_set index 0 as target [ 91.179906][ T6197] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 91.272752][ T6198] __nla_validate_parse: 3 callbacks suppressed [ 91.272769][ T6198] netlink: 156 bytes leftover after parsing attributes in process `syz.0.71'. [ 91.408593][ T6208] netlink: 144 bytes leftover after parsing attributes in process `syz.1.74'. [ 91.411568][ T6207] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 91.488386][ T6208] netlink: 60 bytes leftover after parsing attributes in process `syz.1.74'. [ 91.498505][ T6205] netlink: 60 bytes leftover after parsing attributes in process `syz.1.74'. [ 91.910895][ T6215] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 92.206591][ T6224] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 92.465883][ T6235] netlink: 12 bytes leftover after parsing attributes in process `syz.3.85'. [ 92.478588][ T6235] netlink: 12 bytes leftover after parsing attributes in process `syz.3.85'. [ 92.505765][ T6235] netlink: 28 bytes leftover after parsing attributes in process `syz.3.85'. [ 92.514806][ T6235] netlink: 'syz.3.85': attribute type 7 has an invalid length. [ 92.527046][ T6235] netlink: 'syz.3.85': attribute type 8 has an invalid length. [ 92.539588][ T6235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.85'. [ 93.084591][ T6229] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 93.334753][ T6242] netlink: 20 bytes leftover after parsing attributes in process `syz.0.88'. [ 93.374358][ T5842] Bluetooth: hci4: command tx timeout [ 93.535635][ T6253] netlink: 20 bytes leftover after parsing attributes in process `syz.3.90'. [ 93.722645][ T6266] ip6t_srh: unknown srh match flags 4001 [ 93.936270][ T6277] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 93.993544][ T6276] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 94.593837][ T6300] syz.4.106 (6300) used greatest stack depth: 17992 bytes left [ 94.851957][ T6310] sctp: [Deprecated]: syz.4.110 (pid 6310) Use of int in max_burst socket option deprecated. [ 94.851957][ T6310] Use struct sctp_assoc_value instead [ 94.883621][ T6313] netlink: 'syz.3.111': attribute type 21 has an invalid length. [ 94.932886][ T6315] pim6reg: entered allmulticast mode [ 94.970331][ T6319] netlink: 'syz.0.113': attribute type 1 has an invalid length. [ 95.241884][ T6336] warning: `syz.2.116' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 95.507184][ T6347] netlink: 'syz.2.119': attribute type 58 has an invalid length. [ 95.942632][ C1] Unknown status report in ack skb [ 96.148893][ T30] audit: type=1107 audit(1751123383.556:4): pid=6372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 96.406060][ T6381] __nla_validate_parse: 14 callbacks suppressed [ 96.406078][ T6381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.134'. [ 96.411208][ T6383] netlink: 'syz.0.133': attribute type 4 has an invalid length. [ 96.435965][ T6381] netlink: 12 bytes leftover after parsing attributes in process `syz.3.134'. [ 96.467426][ T6381] netlink: 12 bytes leftover after parsing attributes in process `syz.3.134'. [ 96.618397][ T6394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.133'. [ 96.749585][ T6402] hsr0: entered promiscuous mode [ 96.783395][ T6402] hsr0: entered allmulticast mode [ 96.788481][ T6402] hsr_slave_0: entered allmulticast mode [ 96.847353][ T6402] hsr_slave_1: entered allmulticast mode [ 97.047762][ T6417] netlink: 20 bytes leftover after parsing attributes in process `syz.0.141'. [ 97.067924][ T6417] netlink: 20 bytes leftover after parsing attributes in process `syz.0.141'. [ 97.126548][ T6413] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.385533][ T6413] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.397391][ T6432] Cannot find add_set index 0 as target [ 97.460675][ T6414] infiniband syz!: set down [ 97.470254][ T6414] infiniband syz!: added team_slave_0 [ 97.648434][ T6414] RDS/IB: syz!: added [ 97.654297][ T6414] smc: adding ib device syz! with port count 1 [ 97.660843][ T6413] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.682021][ T6414] smc: ib device syz! port 1 has pnetid [ 97.698757][ T6445] netlink: 20 bytes leftover after parsing attributes in process `syz.4.151'. [ 97.996847][ T6413] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.025120][ T6455] sctp: [Deprecated]: syz.4.153 (pid 6455) Use of int in maxseg socket option. [ 98.025120][ T6455] Use struct sctp_assoc_value instead [ 98.256027][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.341519][ T6413] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.401550][ T6413] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.498273][ T6413] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.611175][ T6413] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.661898][ T6474] netlink: 4 bytes leftover after parsing attributes in process `syz.3.157'. [ 98.857300][ T6480] netlink: 28 bytes leftover after parsing attributes in process `syz.0.158'. [ 98.902665][ T6480] netlink: 28 bytes leftover after parsing attributes in process `syz.0.158'. [ 99.593651][ T6514] Bluetooth: MGMT ver 1.23 [ 100.295555][ T6533] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.710239][ T6533] bridge_slave_1 (unregistering): left allmulticast mode [ 100.717832][ T6533] bridge_slave_1 (unregistering): left promiscuous mode [ 100.731825][ T6533] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.364135][ T6539] vlan2: entered allmulticast mode [ 102.369288][ T6539] geneve0: entered allmulticast mode [ 102.383353][ T6557] __nla_validate_parse: 3 callbacks suppressed [ 102.383370][ T6557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.177'. [ 102.677522][ T6573] netlink: 'syz.3.180': attribute type 8 has an invalid length. [ 102.732299][ T6580] netlink: 'syz.3.180': attribute type 10 has an invalid length. [ 102.795450][ T6580] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 102.852227][ T6589] IPVS: set_ctl: invalid protocol: 1 172.20.20.187:20003 [ 102.922505][ T6591] netlink: 'syz.4.185': attribute type 29 has an invalid length. [ 102.946304][ T6591] netlink: 596 bytes leftover after parsing attributes in process `syz.4.185'. [ 103.049907][ T6593] netlink: 'syz.0.186': attribute type 3 has an invalid length. [ 103.069932][ T6593] netlink: 'syz.0.186': attribute type 1 has an invalid length. [ 103.109225][ T6595] netlink: 12 bytes leftover after parsing attributes in process `syz.3.187'. [ 103.142138][ T6595] xfrm1: entered promiscuous mode [ 103.155468][ T6595] xfrm1: entered allmulticast mode [ 103.168064][ T6598] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 103.544011][ T6612] netlink: 'syz.4.192': attribute type 1 has an invalid length. [ 104.263274][ T6648] netlink: 'syz.1.206': attribute type 83 has an invalid length. [ 104.448593][ T6654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.208'. [ 104.506815][ T6655] netlink: 1196 bytes leftover after parsing attributes in process `syz.0.209'. [ 104.690620][ T6665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.213'. [ 104.711361][ T6666] netlink: 24 bytes leftover after parsing attributes in process `syz.4.214'. [ 104.868397][ T6667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.214'. [ 104.907815][ T6675] netlink: 12 bytes leftover after parsing attributes in process `syz.0.215'. [ 104.931169][ T6675] netlink: 12 bytes leftover after parsing attributes in process `syz.0.215'. [ 105.187294][ T6685] gretap1: entered promiscuous mode [ 105.198116][ T6685] gretap1: entered allmulticast mode [ 105.612613][ T6706] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 105.754624][ T6706] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 105.949889][ T6723] netlink: 'syz.1.228': attribute type 6 has an invalid length. [ 106.967153][ T6776] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 107.472136][ T6799] __nla_validate_parse: 5 callbacks suppressed [ 107.472154][ T6799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.251'. [ 107.508101][ T6799] netlink: 4 bytes leftover after parsing attributes in process `syz.3.251'. [ 107.525184][ T6799] netlink: 52 bytes leftover after parsing attributes in process `syz.3.251'. [ 107.576006][ T6796] team0 (unregistering): Port device team_slave_0 removed [ 107.588743][ T6796] team0 (unregistering): Port device team_slave_1 removed [ 107.635559][ T6808] sit1: entered promiscuous mode [ 107.656690][ T6808] sit1: entered allmulticast mode [ 107.726428][ T6812] netlink: 252 bytes leftover after parsing attributes in process `syz.2.253'. [ 108.052078][ T6827] netlink: 28 bytes leftover after parsing attributes in process `syz.2.258'. [ 108.054924][ T6824] netlink: 'syz.0.257': attribute type 10 has an invalid length. [ 108.115893][ T6830] netlink: 4 bytes leftover after parsing attributes in process `syz.4.259'. [ 108.128292][ T6824] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.162595][ T6824] bridge_slave_1: left allmulticast mode [ 108.205513][ T6824] bridge_slave_1: left promiscuous mode [ 108.241889][ T6824] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.275068][ T6824] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 108.288841][ T6830] bridge_slave_1: left allmulticast mode [ 108.295234][ T6830] bridge_slave_1: left promiscuous mode [ 108.301206][ T6830] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.317432][ T6830] bridge_slave_0: left allmulticast mode [ 108.333370][ T6830] bridge_slave_0: left promiscuous mode [ 108.344083][ T6830] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.996705][ T6874] netlink: 4 bytes leftover after parsing attributes in process `syz.4.270'. [ 109.044147][ T6874] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 109.370400][ T6897] netlink: 'syz.4.277': attribute type 1 has an invalid length. [ 109.517385][ T6902] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 109.598098][ T6906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.281'. [ 109.615046][ T6908] netlink: 'syz.4.280': attribute type 7 has an invalid length. [ 109.639591][ T6907] netlink: 'syz.4.280': attribute type 7 has an invalid length. [ 109.648406][ T6906] netlink: 224 bytes leftover after parsing attributes in process `syz.0.281'. [ 109.664447][ T6908] netlink: 140 bytes leftover after parsing attributes in process `syz.4.280'. [ 110.372622][ T6942] x_tables: duplicate entry at hook 1 [ 111.543389][ T5842] Bluetooth: hci0: command tx timeout [ 111.837737][ T6970] netlink: 'syz.2.294': attribute type 1 has an invalid length. [ 112.023035][ T6970] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.124763][ T6979] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 112.134370][ T13] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 112.176951][ T6992] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 112.243676][ T13] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 112.271566][ T6992] netlink: zone id is out of range [ 112.276035][ T6996] netlink: 'syz.1.300': attribute type 1 has an invalid length. [ 112.310824][ T6992] netlink: zone id is out of range [ 112.341763][ T6992] netlink: zone id is out of range [ 112.360934][ T6992] netlink: zone id is out of range [ 112.392775][ T6992] netlink: zone id is out of range [ 112.401652][ T6992] netlink: zone id is out of range [ 112.446990][ T6992] netlink: zone id is out of range [ 112.546842][ T7008] __nla_validate_parse: 3 callbacks suppressed [ 112.546859][ T7008] netlink: 8 bytes leftover after parsing attributes in process `syz.4.303'. [ 112.780312][ T7015] netlink: 28 bytes leftover after parsing attributes in process `syz.0.306'. [ 112.813108][ T7018] netlink: 20 bytes leftover after parsing attributes in process `syz.3.308'. [ 112.838129][ T7015] veth0: entered promiscuous mode [ 112.865024][ T7013] veth0: left promiscuous mode [ 113.001031][ T7023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.310'. [ 113.177056][ T7037] netlink: 'syz.1.313': attribute type 13 has an invalid length. [ 113.192308][ T7040] netlink: 'syz.0.315': attribute type 1 has an invalid length. [ 113.206272][ T7040] netlink: 2716 bytes leftover after parsing attributes in process `syz.0.315'. [ 113.231067][ T7040] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 113.365322][ T7049] netlink: 24 bytes leftover after parsing attributes in process `syz.3.316'. [ 113.405943][ T7051] netlink: 20 bytes leftover after parsing attributes in process `syz.4.317'. [ 113.780915][ T7072] netlink: 28 bytes leftover after parsing attributes in process `syz.2.323'. [ 113.805036][ T7075] netlink: 28 bytes leftover after parsing attributes in process `syz.2.323'. [ 113.842148][ T7068] netlink: 60 bytes leftover after parsing attributes in process `syz.4.321'. [ 114.028411][ T7036] delete_channel: no stack [ 114.105237][ T7090] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 115.410319][ T7167] netlink: 'syz.0.342': attribute type 1 has an invalid length. [ 115.784164][ T7186] netlink: 'syz.1.349': attribute type 1 has an invalid length. [ 115.840387][ T7190] ipt_REJECT: ECHOREPLY no longer supported. [ 115.850841][ T7191] netlink: 'syz.4.348': attribute type 8 has an invalid length. [ 116.241587][ T7213] netlink: 'syz.2.356': attribute type 8 has an invalid length. [ 116.271896][ T7213] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.280461][ T7213] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.328615][ T7213] bridge0: entered allmulticast mode [ 116.334438][ T7219] netlink: 'syz.2.356': attribute type 1 has an invalid length. [ 116.342158][ T7219] nbd: error processing sock list [ 116.697504][ T7240] netlink: 'syz.2.364': attribute type 25 has an invalid length. [ 116.777937][ T7240] netlink: 'syz.2.364': attribute type 12 has an invalid length. [ 116.812886][ T7240] netlink: 'syz.2.364': attribute type 11 has an invalid length. [ 117.360772][ T7260] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.375547][ T7260] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.388296][ T7260] bond0 (unregistering): Released all slaves [ 117.640189][ T7277] __nla_validate_parse: 21 callbacks suppressed [ 117.640208][ T7277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.372'. [ 117.698675][ T7274] netlink: 12 bytes leftover after parsing attributes in process `syz.4.371'. [ 117.906940][ T7294] netlink: 132 bytes leftover after parsing attributes in process `syz.2.376'. [ 118.388327][ T7321] sctp: [Deprecated]: syz.2.382 (pid 7321) Use of int in max_burst socket option. [ 118.388327][ T7321] Use struct sctp_assoc_value instead [ 118.418068][ T7320] sctp: [Deprecated]: syz.2.382 (pid 7320) Use of int in max_burst socket option. [ 118.418068][ T7320] Use struct sctp_assoc_value instead [ 119.011289][ T7344] netlink: 4 bytes leftover after parsing attributes in process `syz.2.388'. [ 119.295412][ T7356] netlink: 12 bytes leftover after parsing attributes in process `syz.3.392'. [ 119.459008][ T7367] netlink: 'syz.1.395': attribute type 1 has an invalid length. [ 119.584348][ T7372] netlink: 12 bytes leftover after parsing attributes in process `syz.4.394'. [ 119.780846][ T120] net_ratelimit: 223 callbacks suppressed [ 119.780864][ T120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.920549][ T30] audit: type=1800 audit(1751123407.326:5): pid=7396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.403" name="memory.events" dev="tmpfs" ino=461 res=0 errno=0 [ 119.949841][ T7396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.961206][ T30] audit: type=1804 audit(1751123407.356:6): pid=7396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.403" name="/newroot/87/memory.events" dev="tmpfs" ino=461 res=1 errno=0 [ 119.987504][ T7396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.010862][ T7396] x_tables: duplicate underflow at hook 1 [ 120.312176][ T7409] netlink: 44 bytes leftover after parsing attributes in process `syz.0.408'. [ 120.331832][ T7410] netlink: 'syz.1.407': attribute type 1 has an invalid length. [ 120.339864][ T7410] netlink: 4 bytes leftover after parsing attributes in process `syz.1.407'. [ 120.522035][ T7417] trusted_key: syz.1.410 sent an empty control message without MSG_MORE. [ 120.585754][ T7418] netlink: 64 bytes leftover after parsing attributes in process `syz.2.412'. [ 120.621304][ T7426] netlink: 64 bytes leftover after parsing attributes in process `syz.2.412'. [ 120.893625][ T120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.894363][ T7438] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 121.501456][ T7469] atomic_op ffff888021f5f998 conn xmit_atomic 0000000000000000 [ 121.836999][ T7479] netlink: 'syz.4.429': attribute type 2 has an invalid length. [ 122.198099][ T7501] openvswitch: netlink: Missing key (keys=40, expected=80) [ 123.961455][ T7584] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 124.073816][ T7591] __nla_validate_parse: 3 callbacks suppressed [ 124.073833][ T7591] netlink: 12 bytes leftover after parsing attributes in process `syz.3.447'. [ 124.200376][ T7598] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.449'. [ 124.215876][ T7598] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 124.242919][ T7598] openvswitch: netlink: Duplicate key (type 0). [ 124.279706][ T7607] netlink: 28 bytes leftover after parsing attributes in process `syz.4.449'. [ 124.656089][ T7630] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 124.740323][ T7630] netlink: 12 bytes leftover after parsing attributes in process `syz.3.456'. [ 124.784288][ T7624] bridge_slave_0: left allmulticast mode [ 124.804499][ T7568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.823284][ T7624] bridge_slave_0: left promiscuous mode [ 124.885181][ T7624] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.044478][ T7624] bond0: (slave bond_slave_0): Releasing backup interface [ 125.065950][ T7624] bond0: (slave bond_slave_1): Releasing backup interface [ 125.080927][ T7650] netlink: 'syz.0.462': attribute type 1 has an invalid length. [ 125.100560][ T7650] netlink: 224 bytes leftover after parsing attributes in process `syz.0.462'. [ 125.142835][ T7624] team0: Port device team_slave_0 removed [ 125.201276][ T7624] team0: Port device team_slave_1 removed [ 125.211100][ T7624] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.232250][ T7624] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.256724][ T7624] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.264792][ T7568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.274792][ T7624] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.337131][ T7644] netlink: 72 bytes leftover after parsing attributes in process `syz.2.460'. [ 125.573918][ T7667] netlink: 12 bytes leftover after parsing attributes in process `syz.0.467'. [ 125.670317][ T7669] bridge0: port 1(gretap0) entered blocking state [ 125.695029][ T7669] bridge0: port 1(gretap0) entered disabled state [ 125.750065][ T7669] gretap0: entered allmulticast mode [ 125.771310][ T7669] gretap0: entered promiscuous mode [ 125.806525][ T7669] bridge0: port 1(gretap0) entered blocking state [ 125.813642][ T7669] bridge0: port 1(gretap0) entered forwarding state [ 125.835312][ T7678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.470'. [ 125.873639][ T7681] block nbd0: server does not support multiple connections per device. [ 125.905147][ T7681] block nbd0: shutting down sockets [ 125.979045][ T7690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.473'. [ 126.221128][ T7696] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 126.256053][ T7696] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.475'. [ 126.440680][ T7707] hsr_slave_0: left promiscuous mode [ 126.451676][ T7707] hsr_slave_1: left promiscuous mode [ 126.635016][ T7715] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 126.682420][ T3485] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.817717][ T3485] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.936496][ T3485] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.237699][ T3485] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.609252][ T7743] syzkaller0: entered promiscuous mode [ 127.615058][ T7743] syzkaller0: entered allmulticast mode [ 127.697483][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 127.716220][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 127.728961][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 127.740554][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 127.748558][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 129.221197][ T3485] gretap0: left allmulticast mode [ 129.226479][ T3485] gretap0: left promiscuous mode [ 129.232428][ T3485] bridge0: port 1(gretap0) entered disabled state [ 129.779368][ T3485] bond0 (unregistering): Released all slaves [ 129.794177][ T3485] bond1 (unregistering): Released all slaves [ 129.853330][ T5842] Bluetooth: hci3: command tx timeout [ 129.906123][ T7801] __nla_validate_parse: 8 callbacks suppressed [ 129.906141][ T7801] netlink: 16 bytes leftover after parsing attributes in process `syz.4.501'. [ 130.239122][ T7813] netlink: 'syz.1.505': attribute type 10 has an invalid length. [ 130.414417][ T7824] netlink: 12 bytes leftover after parsing attributes in process `syz.0.507'. [ 130.493076][ T7813] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 130.567909][ T7823] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 130.609216][ T7823] mac80211_hwsim hwsim9 wlan0: left promiscuous mode [ 131.096352][ T7853] netlink: zone id is out of range [ 131.101514][ T7853] netlink: zone id is out of range [ 131.136953][ T7853] netlink: zone id is out of range [ 131.150938][ T7853] netlink: zone id is out of range [ 131.152134][ T7861] netlink: 'syz.1.514': attribute type 11 has an invalid length. [ 131.164241][ T7853] netlink: zone id is out of range [ 131.183586][ T7853] netlink: zone id is out of range [ 131.200221][ T7853] netlink: zone id is out of range [ 131.236405][ T7853] netlink: zone id is out of range [ 131.241698][ T7861] netlink: 'syz.1.514': attribute type 11 has an invalid length. [ 131.258000][ T7853] netlink: zone id is out of range [ 131.268215][ T7853] netlink: zone id is out of range [ 131.280742][ T7861] netlink: 224 bytes leftover after parsing attributes in process `syz.1.514'. [ 131.616017][ T7875] netlink: 24 bytes leftover after parsing attributes in process `syz.4.518'. [ 131.778035][ T7875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.518'. [ 131.864163][ T7878] bridge0: left allmulticast mode [ 131.874611][ T7879] tls_set_device_offload: netdev not found [ 131.891980][ T3485] hsr_slave_0: left promiscuous mode [ 131.897645][ T7892] netlink: 12 bytes leftover after parsing attributes in process `syz.1.521'. [ 131.910847][ T3485] hsr_slave_1: left promiscuous mode [ 131.931114][ T3485] veth1_vlan: left promiscuous mode [ 131.937892][ T3485] veth0_vlan: left promiscuous mode [ 131.943327][ T5842] Bluetooth: hci3: command 0x041b tx timeout [ 132.833906][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.965355][ T7760] chnl_net:caif_netlink_parms(): no params data found [ 133.165520][ T7919] netlink: 20 bytes leftover after parsing attributes in process `syz.4.527'. [ 133.177119][ T7920] 8021q: adding VLAN 0 to HW filter on device bond3 [ 133.187032][ T7920] bond0: (slave bond3): Enslaving as an active interface with an up link [ 133.577051][ T7760] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.597981][ T7942] netlink: 12 bytes leftover after parsing attributes in process `syz.0.531'. [ 133.612000][ T7760] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.651038][ T7760] bridge_slave_0: entered allmulticast mode [ 133.677969][ T7760] bridge_slave_0: entered promiscuous mode [ 133.826755][ T7760] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.845415][ T7760] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.871215][ T7760] bridge_slave_1: entered allmulticast mode [ 133.893484][ T7760] bridge_slave_1: entered promiscuous mode [ 134.013961][ T5846] Bluetooth: hci3: command 0x041b tx timeout [ 134.074336][ T7967] netlink: 'syz.2.535': attribute type 1 has an invalid length. [ 134.121254][ T7967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.535'. [ 134.181941][ T7760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.234062][ T7760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.461751][ T7760] team0: Port device team_slave_0 added [ 134.500018][ T7760] team0: Port device team_slave_1 added [ 134.744053][ T7760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.764693][ T7760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.830569][ T7760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.842900][ T8006] netlink: 'syz.2.549': attribute type 12 has an invalid length. [ 134.852091][ T8006] netlink: 132 bytes leftover after parsing attributes in process `syz.2.549'. [ 134.872297][ T7760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.896295][ T7760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.933572][ T7760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.950483][ T8008] netlink: 60 bytes leftover after parsing attributes in process `syz.4.548'. [ 134.979164][ T8006] veth1_macvtap: left promiscuous mode [ 135.124883][ T8013] netlink: 'syz.2.549': attribute type 12 has an invalid length. [ 135.132668][ T8013] netlink: 132 bytes leftover after parsing attributes in process `syz.2.549'. [ 135.209703][ T8022] netlink: 20 bytes leftover after parsing attributes in process `syz.4.553'. [ 135.351894][ T7760] hsr_slave_0: entered promiscuous mode [ 135.375988][ T7760] hsr_slave_1: entered promiscuous mode [ 135.393965][ T7760] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 135.402707][ T7760] Cannot create hsr debugfs directory [ 135.680866][ T8048] netlink: 'syz.0.558': attribute type 25 has an invalid length. [ 136.095342][ T5846] Bluetooth: hci3: command 0x041b tx timeout [ 136.148696][ T8066] netlink: 32 bytes leftover after parsing attributes in process `syz.2.563'. [ 136.177880][ T8066] bridge0: port 1(bridge_slave_0) entered listening state [ 136.274193][ T8080] netlink: 'syz.4.567': attribute type 10 has an invalid length. [ 136.382787][ T8086] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 136.477318][ T8092] netlink: 12 bytes leftover after parsing attributes in process `syz.0.570'. [ 136.498307][ T8092] netlink: 24 bytes leftover after parsing attributes in process `syz.0.570'. [ 136.582853][ T8094] netlink: 28 bytes leftover after parsing attributes in process `syz.1.571'. [ 136.599149][ T8094] netlink: 28 bytes leftover after parsing attributes in process `syz.1.571'. [ 136.832920][ T8116] netlink: 164 bytes leftover after parsing attributes in process `syz.2.575'. [ 136.986073][ T8119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.577'. [ 137.253364][ T8133] netlink: 'syz.1.581': attribute type 1 has an invalid length. [ 137.261059][ T8133] netlink: 'syz.1.581': attribute type 3 has an invalid length. [ 137.378322][ T7760] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 137.402224][ T7760] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 137.476361][ T8141] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 137.547559][ T7760] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 137.571539][ T8151] syzkaller0: entered promiscuous mode [ 137.577647][ T8151] syzkaller0: entered allmulticast mode [ 137.599112][ T7760] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 137.669851][ T8156] gtp0: entered promiscuous mode [ 137.691346][ T8156] gtp0: entered allmulticast mode [ 137.901751][ T8169] syzkaller1: entered promiscuous mode [ 137.908240][ T8169] syzkaller1: entered allmulticast mode [ 138.048109][ T7760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.145591][ T7760] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.179654][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.186831][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.195495][ T5842] Bluetooth: hci3: command 0x041b tx timeout [ 138.255596][ T3462] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.262784][ T3462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.432779][ T8198] netlink: 'syz.4.596': attribute type 1 has an invalid length. [ 138.570722][ T8202] bond1: (slave gretap1): making interface the new active one [ 138.588426][ T8202] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 138.589136][ T8213] netlink: 'syz.0.600': attribute type 10 has an invalid length. [ 138.683911][ T8213] veth0_vlan: entered allmulticast mode [ 138.745845][ T8213] veth0_vlan: left promiscuous mode [ 138.771885][ T8213] veth0_vlan: entered promiscuous mode [ 138.799227][ T8213] team0: Device veth0_vlan failed to register rx_handler [ 139.082446][ T8234] tipc: Started in network mode [ 139.109622][ T8234] tipc: Node identity 0e52e49d0782, cluster identity 4711 [ 139.127424][ T8234] tipc: Enabled bearer , priority 10 [ 139.439434][ T7760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.582175][ T8266] netlink: 'syz.4.611': attribute type 1 has an invalid length. [ 139.797029][ T7760] veth0_vlan: entered promiscuous mode [ 139.835665][ T7760] veth1_vlan: entered promiscuous mode [ 140.027383][ T7760] veth0_macvtap: entered promiscuous mode [ 140.063594][ T7760] veth1_macvtap: entered promiscuous mode [ 140.131301][ T7760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.173122][ T7760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.205334][ T7760] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.218772][ T7760] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.230421][ T7760] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.244411][ T7760] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.244577][ T7566] tipc: Node number set to 164684957 [ 140.263620][ T5846] Bluetooth: hci3: command 0x041b tx timeout [ 140.367069][ T8301] __nla_validate_parse: 12 callbacks suppressed [ 140.367088][ T8301] netlink: 100 bytes leftover after parsing attributes in process `syz.0.617'. [ 140.486651][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.545934][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.671052][ T3485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.712166][ T3485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.778748][ T8310] netlink: 24 bytes leftover after parsing attributes in process `syz.1.619'. [ 140.801719][ T8310] IPv6: NLM_F_CREATE should be specified when creating new route [ 141.113310][ T8331] netlink: 16 bytes leftover after parsing attributes in process `syz.0.627'. [ 141.162804][ T8336] xt_hashlimit: overflow, try lower: 4294967295/0 [ 141.403394][ T8347] netlink: 288 bytes leftover after parsing attributes in process `syz.2.631'. [ 141.618433][ T8358] netlink: 36 bytes leftover after parsing attributes in process `syz.2.633'. [ 141.651121][ T63] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.710670][ T8358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.633'. [ 141.792249][ T8365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.633'. [ 141.856142][ T63] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.168936][ T30] audit: type=1107 audit(1751123429.566:7): pid=8374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='[N% gfx3#AWWR5&v'|H1xdl{_:t -~Cw[' [ 142.215019][ T63] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.282501][ T8383] netlink: 16 bytes leftover after parsing attributes in process `syz.0.635'. [ 142.437510][ T63] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.625718][ T8357] infiniband syz0: set active [ 142.647540][ T8357] infiniband syz0: added bond_slave_0 [ 142.687782][ T8357] syz0: rxe_create_cq: returned err = -12 [ 142.706303][ T8357] infiniband syz0: Couldn't create ib_mad CQ [ 142.725895][ T8357] infiniband syz0: Couldn't open port 1 [ 142.747294][ T8393] pimreg3: entered allmulticast mode [ 142.820530][ T8357] RDS/IB: syz0: added [ 142.842014][ T8357] smc: adding ib device syz0 with port count 1 [ 142.853294][ T8357] smc: ib device syz0 port 1 has pnetid [ 142.862030][ T63] bridge_slave_1: left allmulticast mode [ 142.886330][ T63] bridge_slave_1: left promiscuous mode [ 142.892143][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.924026][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 142.933591][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 142.942161][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 142.950321][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 142.958219][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 142.985578][ T63] bridge_slave_0: left allmulticast mode [ 143.004669][ T63] bridge_slave_0: left promiscuous mode [ 143.010696][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.849394][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.861498][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.872851][ T63] bond0 (unregistering): Released all slaves [ 143.991727][ T8430] netlink: 'syz.1.646': attribute type 1 has an invalid length. [ 144.128016][ T8435] netlink: 12 bytes leftover after parsing attributes in process `syz.0.647'. [ 144.151614][ T8430] bond1: entered promiscuous mode [ 144.160276][ T8430] 8021q: adding VLAN 0 to HW filter on device bond1 [ 144.161129][ T8435] netlink: 48 bytes leftover after parsing attributes in process `syz.0.647'. [ 144.635035][ T8456] net_ratelimit: 14 callbacks suppressed [ 144.635052][ T8456] openvswitch: netlink: Actions may not be safe on all matching packets [ 144.742399][ T8453] bridge0: port 3(gretap0) entered blocking state [ 144.784699][ T8453] bridge0: port 3(gretap0) entered disabled state [ 144.791331][ T8453] gretap0: entered allmulticast mode [ 144.838024][ T8453] gretap0: entered promiscuous mode [ 144.929505][ T8464] macvtap1: entered promiscuous mode [ 144.963286][ T8464] vlan0: entered promiscuous mode [ 144.968761][ T8464] macvtap1: entered allmulticast mode [ 144.986010][ T5846] Bluetooth: hci3: command tx timeout [ 144.993812][ T8464] vlan0: entered allmulticast mode [ 145.011646][ T8464] veth0_vlan: entered allmulticast mode [ 145.586233][ T8495] __nla_validate_parse: 4 callbacks suppressed [ 145.586252][ T8495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.661'. [ 145.720954][ T8502] netlink: 'syz.4.663': attribute type 13 has an invalid length. [ 145.739612][ T8502] netlink: 'syz.4.663': attribute type 17 has an invalid length. [ 145.865558][ T8502] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 146.522587][ T8537] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 147.053579][ T5846] Bluetooth: hci3: command tx timeout [ 148.000210][ T8591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.427281][ T8609] netlink: 'syz.1.687': attribute type 4 has an invalid length. [ 148.438756][ T8608] netlink: 'syz.1.687': attribute type 4 has an invalid length. [ 148.506877][ T8605] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.834520][ T8622] Bluetooth: MGMT ver 1.23 [ 148.855263][ T8605] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.995297][ T63] hsr_slave_0: left promiscuous mode [ 149.021011][ T63] hsr_slave_1: left promiscuous mode [ 149.034098][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.059989][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.090289][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.104726][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.135000][ T5846] Bluetooth: hci3: command tx timeout [ 149.172769][ T63] veth1_macvtap: left promiscuous mode [ 149.186690][ T63] veth0_macvtap: left promiscuous mode [ 149.193456][ T63] veth1_vlan: left promiscuous mode [ 149.198817][ T63] veth0_vlan: left promiscuous mode [ 150.477571][ T63] team0 (unregistering): Port device team_slave_1 removed [ 150.573866][ T63] team0 (unregistering): Port device team_slave_0 removed [ 151.213540][ T5846] Bluetooth: hci3: command tx timeout [ 151.645479][ T8605] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.719819][ T8401] chnl_net:caif_netlink_parms(): no params data found [ 151.839290][ T8605] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.924675][ T8703] netlink: 28 bytes leftover after parsing attributes in process `syz.0.696'. [ 152.040742][ T8710] netlink: 12 bytes leftover after parsing attributes in process `syz.1.697'. [ 152.142605][ T8714] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.698'. [ 152.186088][ T8711] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.698'. [ 152.195642][ T8706] veth0: entered promiscuous mode [ 152.259054][ T8706] veth0: left promiscuous mode [ 152.275915][ T8711] gtp0: entered promiscuous mode [ 152.323292][ T8711] gtp0: entered allmulticast mode [ 152.330573][ T8718] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.698'. [ 152.417049][ T8401] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.433638][ T8401] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.437782][ T8724] netlink: 'syz.1.699': attribute type 9 has an invalid length. [ 152.451051][ T8401] bridge_slave_0: entered allmulticast mode [ 152.462802][ T8401] bridge_slave_0: entered promiscuous mode [ 152.481295][ T8724] netlink: 211988 bytes leftover after parsing attributes in process `syz.1.699'. [ 152.485182][ T8401] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.505675][ T8401] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.525240][ T8401] bridge_slave_1: entered allmulticast mode [ 152.569340][ T8401] bridge_slave_1: entered promiscuous mode [ 152.642139][ T8605] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.861714][ T8605] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.902252][ T8401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.927862][ T8401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.026246][ T8605] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.087960][ T8605] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.155555][ T8401] team0: Port device team_slave_0 added [ 153.190196][ T8401] team0: Port device team_slave_1 added [ 153.483391][ T8401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.490386][ T8401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.541492][ T8401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.558694][ T8756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.705'. [ 153.570367][ T8762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.708'. [ 153.581725][ T8762] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 153.589599][ T8401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.610708][ T8401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.612131][ T8762] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.649019][ T8401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.855932][ T63] wlan1: Trigger new scan to find an IBSS to join [ 153.879167][ T8401] hsr_slave_0: entered promiscuous mode [ 153.895929][ T8401] hsr_slave_1: entered promiscuous mode [ 153.918022][ T8401] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 153.935131][ T8401] Cannot create hsr debugfs directory [ 154.240801][ T8791] ieee802154 phy0 wpan0: encryption failed: -22 [ 154.640280][ T8805] : entered promiscuous mode [ 155.171119][ T8836] IPVS: length: 157 != 24 [ 155.180311][ T8837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.723'. [ 155.200522][ T8836] netlink: 40 bytes leftover after parsing attributes in process `syz.1.724'. [ 155.206130][ T8831] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 155.282178][ T8836] dvmrp0: entered allmulticast mode [ 155.523698][ T8401] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 155.542830][ T8401] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 155.566651][ T8401] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 155.611726][ T8401] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 155.681487][ T8862] netlink: 'syz.2.732': attribute type 13 has an invalid length. [ 155.691285][ T8862] lo: entered promiscuous mode [ 155.699904][ T8865] Unsupported ieee802154 address type: 0 [ 155.708448][ T8862] lo: entered allmulticast mode [ 155.714581][ T8862] tunl0: entered promiscuous mode [ 155.719841][ T8862] tunl0: entered allmulticast mode [ 155.725937][ T8862] gre0: entered promiscuous mode [ 155.731053][ T8862] gre0: entered allmulticast mode [ 155.737482][ T8862] gretap0: entered promiscuous mode [ 155.742857][ T8862] gretap0: entered allmulticast mode [ 155.748990][ T8862] gretap0: refused to change device tx_queue_len [ 155.770559][ T8862] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 156.049401][ T8401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.165600][ T8401] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.178992][ T1040] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.186216][ T1040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.246403][ T1040] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.253686][ T1040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.564312][ T8893] netlink: 'syz.0.738': attribute type 3 has an invalid length. [ 156.581565][ T8893] netlink: 'syz.0.738': attribute type 3 has an invalid length. [ 156.602272][ T8893] netlink: 'syz.0.738': attribute type 3 has an invalid length. [ 156.611280][ T8893] netlink: 'syz.0.738': attribute type 3 has an invalid length. [ 156.619386][ T8893] netlink: 'syz.0.738': attribute type 3 has an invalid length. [ 156.628307][ T8893] netlink: 'syz.0.738': attribute type 3 has an invalid length. [ 156.638866][ T8893] netlink: 'syz.0.738': attribute type 3 has an invalid length. [ 156.662491][ T8893] netlink: 'syz.0.738': attribute type 3 has an invalid length. [ 156.897307][ T12] wlan1: Trigger new scan to find an IBSS to join [ 157.074160][ T8884] team0: Port device geneve0 added [ 157.104821][ T8916] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.155988][ T8401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.369915][ T8401] veth0_vlan: entered promiscuous mode [ 157.410504][ T8401] veth1_vlan: entered promiscuous mode [ 157.533080][ T8401] veth0_macvtap: entered promiscuous mode [ 157.585032][ T8401] veth1_macvtap: entered promiscuous mode [ 157.655146][ T8401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.699879][ T8401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.795022][ T8401] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.837174][ T8401] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.874841][ T8401] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.903704][ T8401] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.169739][ T8962] __nla_validate_parse: 3 callbacks suppressed [ 158.169759][ T8962] netlink: 116 bytes leftover after parsing attributes in process `syz.1.756'. [ 158.275596][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.294219][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.432854][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.470964][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.544612][ T8983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.759'. [ 158.665739][ T8989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.760'. [ 158.967689][ T8998] Unsupported ieee802154 address type: 0 [ 159.399121][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.584594][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.858406][ T1040] wlan1: Creating new IBSS network, BSSID d2:26:13:3c:9a:bc [ 159.936053][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.988183][ T9038] tipc: Enabled bearer , priority 0 [ 160.055027][ T9043] netlink: 48 bytes leftover after parsing attributes in process `syz.1.771'. [ 160.099367][ T9038] syzkaller0: entered promiscuous mode [ 160.107786][ T9038] syzkaller0: entered allmulticast mode [ 160.116756][ T9038] tipc: Resetting bearer [ 160.132934][ T9046] netlink: 12 bytes leftover after parsing attributes in process `syz.0.773'. [ 160.223068][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.278688][ T9051] netlink: 516 bytes leftover after parsing attributes in process `syz.0.775'. [ 160.292285][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 160.302206][ T9051] validate_nla: 41 callbacks suppressed [ 160.302232][ T9051] netlink: 'syz.0.775': attribute type 4 has an invalid length. [ 160.308765][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 160.324057][ T9037] tipc: Resetting bearer [ 160.332304][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 160.341438][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 160.349324][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 160.359182][ T9051] netlink: 152 bytes leftover after parsing attributes in process `syz.0.775'. [ 161.554893][ T9037] tipc: Disabling bearer [ 162.154577][ T12] bridge_slave_1: left allmulticast mode [ 162.160274][ T12] bridge_slave_1: left promiscuous mode [ 162.186886][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.255392][ T12] bridge_slave_0: left allmulticast mode [ 162.285715][ T12] bridge_slave_0: left promiscuous mode [ 162.309024][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.417131][ T5842] Bluetooth: hci3: command tx timeout [ 163.087392][ T9129] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.202051][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.218676][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.238021][ T12] bond0 (unregistering): Released all slaves [ 163.285840][ T9100] vlan2: entered allmulticast mode [ 163.305891][ T9100] dummy0: entered allmulticast mode [ 163.339261][ T9140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.793'. [ 163.354576][ T9140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.793'. [ 163.402562][ T9109] team0: Device gtp1 is of different type [ 164.255465][ T9166] netlink: 'syz.2.801': attribute type 4 has an invalid length. [ 164.326337][ T9178] netlink: 596 bytes leftover after parsing attributes in process `syz.2.801'. [ 164.493540][ T5842] Bluetooth: hci3: command tx timeout [ 164.759389][ T9200] netlink: 4 bytes leftover after parsing attributes in process `syz.4.807'. [ 165.073128][ T9217] netlink: 32 bytes leftover after parsing attributes in process `syz.2.808'. [ 165.108501][ T9212] netlink: 32 bytes leftover after parsing attributes in process `syz.2.808'. [ 165.159069][ T12] hsr_slave_0: left promiscuous mode [ 165.169981][ T12] hsr_slave_1: left promiscuous mode [ 165.177622][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.185473][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.193836][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.202115][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.231478][ T12] veth1_macvtap: left promiscuous mode [ 165.237268][ T12] veth0_macvtap: left promiscuous mode [ 165.242947][ T12] veth1_vlan: left promiscuous mode [ 165.250282][ T12] veth0_vlan: left promiscuous mode [ 165.692871][ T12] team0 (unregistering): Port device team_slave_1 removed [ 165.737347][ T12] team0 (unregistering): Port device team_slave_0 removed [ 166.117270][ T9217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.808'. [ 166.242092][ T9052] chnl_net:caif_netlink_parms(): no params data found [ 166.574534][ T5842] Bluetooth: hci3: command tx timeout [ 166.730437][ T9258] netlink: 'syz.1.815': attribute type 1 has an invalid length. [ 166.774318][ T9052] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.807599][ T9052] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.840676][ T9052] bridge_slave_0: entered allmulticast mode [ 166.865236][ T9052] bridge_slave_0: entered promiscuous mode [ 166.903795][ T9258] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 166.922585][ T9052] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.967683][ T9052] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.004886][ T9052] bridge_slave_1: entered allmulticast mode [ 167.025353][ T9052] bridge_slave_1: entered promiscuous mode [ 167.177936][ T9052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.223698][ T9269] netlink: 92 bytes leftover after parsing attributes in process `syz.4.818'. [ 167.279639][ T9052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.304138][ T9294] netlink: 'syz.1.823': attribute type 142 has an invalid length. [ 167.352830][ T9298] x_tables: duplicate underflow at hook 1 [ 167.524019][ T9289] tipc: Started in network mode [ 167.528943][ T9289] tipc: Node identity ca0a5baf9f53, cluster identity 4711 [ 167.540062][ T9289] tipc: Enabled bearer , priority 0 [ 167.628480][ T9295] syzkaller0: entered promiscuous mode [ 167.634306][ T9295] syzkaller0: entered allmulticast mode [ 167.640731][ T9305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.826'. [ 167.651309][ T9295] tipc: Resetting bearer [ 167.677037][ T9052] team0: Port device team_slave_0 added [ 167.696311][ T9052] team0: Port device team_slave_1 added [ 167.721878][ T9305] lo: entered promiscuous mode [ 167.744086][ T9305] lo: entered allmulticast mode [ 167.768796][ T9305] tunl0: entered promiscuous mode [ 167.779107][ T9305] tunl0: entered allmulticast mode [ 167.792142][ T9305] gre0: entered promiscuous mode [ 167.800785][ T9305] gre0: entered allmulticast mode [ 167.812724][ T9305] bridge0: port 3(gretap0) entered blocking state [ 167.819356][ T9305] bridge0: port 3(gretap0) entered forwarding state [ 167.828146][ T9305] erspan0: entered promiscuous mode [ 167.833884][ T9305] erspan0: entered allmulticast mode [ 167.840526][ T9305] ip_vti0: entered promiscuous mode [ 167.846050][ T9305] ip_vti0: entered allmulticast mode [ 167.852432][ T9305] ip6_vti0: entered promiscuous mode [ 167.858290][ T9305] ip6_vti0: entered allmulticast mode [ 167.868031][ T9305] sit0: entered promiscuous mode [ 167.872991][ T9305] sit0: entered allmulticast mode [ 167.882308][ T9305] ip6tnl0: entered promiscuous mode [ 167.889965][ T9305] ip6tnl0: entered allmulticast mode [ 167.896708][ T9305] ip6gre0: entered promiscuous mode [ 167.901927][ T9305] ip6gre0: entered allmulticast mode [ 167.910708][ T9305] syz_tun: entered promiscuous mode [ 167.915989][ T9305] syz_tun: entered allmulticast mode [ 167.922039][ T9305] ip6gretap0: entered promiscuous mode [ 167.930280][ T9305] ip6gretap0: entered allmulticast mode [ 167.937720][ T9305] bridge0: entered promiscuous mode [ 167.942937][ T9305] bridge0: entered allmulticast mode [ 167.951182][ T9305] vcan0: entered promiscuous mode [ 167.956374][ T9305] vcan0: entered allmulticast mode [ 167.962379][ T9305] bond0: entered promiscuous mode [ 167.969706][ T9305] bond_slave_0: entered promiscuous mode [ 167.975628][ T9305] bond_slave_1: entered promiscuous mode [ 167.981496][ T9305] bond0: entered allmulticast mode [ 167.988902][ T9305] bond_slave_0: entered allmulticast mode [ 167.994700][ T9305] bond_slave_1: entered allmulticast mode [ 168.001799][ T9305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.009867][ T9305] team0: entered promiscuous mode [ 168.015147][ T9305] team_slave_0: entered promiscuous mode [ 168.022325][ T9305] team_slave_1: entered promiscuous mode [ 168.028363][ T9305] team0: entered allmulticast mode [ 168.033710][ T9305] team_slave_0: entered allmulticast mode [ 168.039460][ T9305] team_slave_1: entered allmulticast mode [ 168.047211][ T9305] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.054665][ T9305] dummy0: entered promiscuous mode [ 168.060736][ T9305] dummy0: entered allmulticast mode [ 168.068484][ T9305] nlmon0: entered promiscuous mode [ 168.074737][ T9305] nlmon0: entered allmulticast mode [ 168.081380][ T9305] caif0: entered promiscuous mode [ 168.086725][ T9305] caif0: entered allmulticast mode [ 168.091858][ T9305] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 168.155931][ T9288] tipc: Resetting bearer [ 168.589385][ T7566] tipc: Node number set to 1431919535 [ 168.663743][ T5842] Bluetooth: hci3: command tx timeout [ 169.529375][ T9288] tipc: Disabling bearer [ 169.557126][ T9052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.564181][ T9052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.591843][ T9052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.634166][ T9052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.641225][ T9052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.670904][ T9052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.769558][ T9335] netlink: 36 bytes leftover after parsing attributes in process `syz.0.832'. [ 169.784367][ T9335] openvswitch: netlink: Flow key attr not present in new flow. [ 169.834999][ T9052] hsr_slave_0: entered promiscuous mode [ 169.841682][ T9052] hsr_slave_1: entered promiscuous mode [ 169.866960][ T9052] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.878334][ T9052] Cannot create hsr debugfs directory [ 169.909545][ T9339] netlink: 24 bytes leftover after parsing attributes in process `syz.4.833'. [ 169.990971][ T9342] netlink: 96 bytes leftover after parsing attributes in process `syz.0.835'. [ 170.025619][ T9342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.835'. [ 170.770143][ T9353] team_slave_0: left promiscuous mode [ 170.778723][ T9353] team_slave_0: left allmulticast mode [ 170.792040][ T9353] team0 (unregistering): Port device team_slave_0 removed [ 170.814790][ T9353] team_slave_1: left promiscuous mode [ 170.827843][ T9353] team_slave_1: left allmulticast mode [ 170.847513][ T9353] team0 (unregistering): Port device team_slave_1 removed [ 171.479540][ T9410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.845'. [ 171.500154][ T9410] netlink: 4 bytes leftover after parsing attributes in process `syz.4.845'. [ 171.708875][ T9417] netlink: 'syz.2.847': attribute type 41 has an invalid length. [ 172.089579][ T9431] netlink: 12 bytes leftover after parsing attributes in process `syz.4.851'. [ 172.121432][ T9435] netlink: 12 bytes leftover after parsing attributes in process `syz.1.853'. [ 172.162087][ T9439] netlink: 12 bytes leftover after parsing attributes in process `syz.4.851'. [ 172.217880][ T9442] netlink: 'syz.4.851': attribute type 1 has an invalid length. [ 172.268646][ T9431] xfrm2: entered promiscuous mode [ 172.293437][ T9431] xfrm2: entered allmulticast mode [ 172.679165][ T9456] netlink: 12 bytes leftover after parsing attributes in process `syz.4.856'. [ 172.748339][ T9458] syz_tun: entered promiscuous mode [ 172.756578][ T9458] batadv_slave_0: entered promiscuous mode [ 172.764041][ T9458] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 172.781265][ T9458] Cannot create hsr debugfs directory [ 172.789311][ T9458] hsr0: entered allmulticast mode [ 172.794718][ T9458] syz_tun: entered allmulticast mode [ 172.800179][ T9458] batadv_slave_0: entered allmulticast mode [ 172.961980][ T9052] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 173.020987][ T9052] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 173.144738][ T9052] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 173.172059][ T9052] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 173.575918][ T9052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.659693][ T9052] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.729445][ T3485] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.736673][ T3485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.771977][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.779202][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.898496][ T9500] netlink: 'syz.4.863': attribute type 10 has an invalid length. [ 174.029001][ T9505] netlink: 'syz.1.865': attribute type 29 has an invalid length. [ 174.534304][ T9052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.728866][ T9052] veth0_vlan: entered promiscuous mode [ 174.768737][ T9052] veth1_vlan: entered promiscuous mode [ 174.866392][ T9052] veth0_macvtap: entered promiscuous mode [ 174.917187][ T9052] veth1_macvtap: entered promiscuous mode [ 174.978942][ T9547] __nla_validate_parse: 2 callbacks suppressed [ 174.978961][ T9547] netlink: 104 bytes leftover after parsing attributes in process `syz.4.874'. [ 175.010381][ T9052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.075719][ T9052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.121087][ T9052] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.151763][ T9052] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.167229][ T9052] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.180569][ T9052] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.195531][ T9552] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 175.521910][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.564220][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.669942][ T3485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.712092][ T3485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.784236][ T9579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.880'. [ 175.845723][ T9583] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.882'. [ 175.872606][ T9579] netlink: 12 bytes leftover after parsing attributes in process `syz.1.880'. [ 176.362700][ T9609] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 176.825335][ T1147] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.938509][ T9631] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 176.962630][ T9631] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 176.998488][ T9599] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 177.019986][ T1147] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.249148][ T1147] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.329432][ T1147] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.522461][ T1147] bridge_slave_1: left allmulticast mode [ 177.529569][ T1147] bridge_slave_1: left promiscuous mode [ 177.536843][ T1147] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.546973][ T1147] bridge_slave_0: left allmulticast mode [ 177.552657][ T1147] bridge_slave_0: left promiscuous mode [ 177.560782][ T1147] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.678733][ T9658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.896'. [ 177.703348][ T9658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.896'. [ 177.879666][ T9666] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.901'. [ 178.346483][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 178.359676][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 178.370377][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 178.378623][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 178.388344][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 178.512918][ T1147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.535739][ T1147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.558538][ T1147] bond0 (unregistering): Released all slaves [ 178.762900][ T9699] netlink: 'syz.1.904': attribute type 1 has an invalid length. [ 178.780548][ T9702] netlink: 'syz.2.906': attribute type 1 has an invalid length. [ 178.835669][ T9702] netlink: 'syz.2.906': attribute type 11 has an invalid length. [ 178.859850][ T9702] netlink: 220 bytes leftover after parsing attributes in process `syz.2.906'. [ 179.004117][ T9716] netlink: 28 bytes leftover after parsing attributes in process `syz.1.908'. [ 179.128805][ T9722] netlink: 'syz.4.909': attribute type 2 has an invalid length. [ 179.186876][ T9722] netlink: 'syz.4.909': attribute type 1 has an invalid length. [ 179.247983][ T9726] x_tables: duplicate underflow at hook 2 [ 179.533989][ T9738] netlink: 'syz.0.913': attribute type 1 has an invalid length. [ 179.583269][ T9738] netlink: 224 bytes leftover after parsing attributes in process `syz.0.913'. [ 179.957135][ T9761] dvmrp1: entered allmulticast mode [ 180.066568][ T9766] xt_TPROXY: Can be used only with -p tcp or -p udp [ 180.199750][ T9768] __nla_validate_parse: 2 callbacks suppressed [ 180.199768][ T9768] netlink: 16 bytes leftover after parsing attributes in process `syz.1.922'. [ 180.266679][ T9772] netlink: 104 bytes leftover after parsing attributes in process `syz.1.922'. [ 180.343321][ T9772] netlink: 12 bytes leftover after parsing attributes in process `syz.1.922'. [ 180.352433][ T9772] netlink: 20 bytes leftover after parsing attributes in process `syz.1.922'. [ 180.406402][ T9768] batman_adv: batadv0: Adding interface: ipvlan2 [ 180.471547][ T9768] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.493504][ T5842] Bluetooth: hci3: command tx timeout [ 180.521875][ T9787] netlink: 'syz.2.927': attribute type 21 has an invalid length. [ 180.581681][ T9785] netlink: 36 bytes leftover after parsing attributes in process `syz.4.925'. [ 180.604260][ T9768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.651512][ T9768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.683493][ T9768] batman_adv: batadv0: Interface activated: ipvlan2 [ 180.691801][ T9787] netlink: 156 bytes leftover after parsing attributes in process `syz.2.927'. [ 181.056087][ T9820] IPVS: set_ctl: invalid protocol: 2 100.1.1.2:20000 [ 181.288435][ T9830] erspan0: entered promiscuous mode [ 181.337503][ T9830] erspan0: entered allmulticast mode [ 181.364729][ T9830] netlink: 32 bytes leftover after parsing attributes in process `syz.0.934'. [ 181.419557][ T1147] hsr_slave_0: left promiscuous mode [ 181.459537][ T1147] hsr_slave_1: left promiscuous mode [ 181.488697][ T9839] netlink: 'syz.2.938': attribute type 1 has an invalid length. [ 181.498040][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.513365][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.522758][ T9839] netlink: 'syz.2.938': attribute type 3 has an invalid length. [ 181.546365][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.583520][ T9839] netlink: 216 bytes leftover after parsing attributes in process `syz.2.938'. [ 181.595042][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.613702][ T9839] NCSI netlink: No device for ifindex 813332851 [ 181.646280][ T1147] veth1_macvtap: left promiscuous mode [ 181.659760][ T1147] veth0_macvtap: left promiscuous mode [ 181.666365][ T1147] veth1_vlan: left promiscuous mode [ 181.671790][ T1147] veth0_vlan: left promiscuous mode [ 181.687124][ T9854] netlink: 'syz.0.939': attribute type 1 has an invalid length. [ 181.848917][ T9862] netlink: 24 bytes leftover after parsing attributes in process `syz.2.941'. [ 182.525497][ T1147] team0 (unregistering): Port device team_slave_1 removed [ 182.570972][ T1147] team0 (unregistering): Port device team_slave_0 removed [ 182.579304][ T5842] Bluetooth: hci3: command tx timeout [ 183.314934][ T9905] netlink: 12 bytes leftover after parsing attributes in process `syz.0.944'. [ 183.518936][ T9691] chnl_net:caif_netlink_parms(): no params data found [ 183.662498][ T9921] IPVS: set_ctl: invalid protocol: 47 172.30.1.2:20003 [ 183.955584][ T9691] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.962922][ T9691] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.970484][ T9691] bridge_slave_0: entered allmulticast mode [ 183.978496][ T9691] bridge_slave_0: entered promiscuous mode [ 183.987875][ T9691] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.995469][ T9691] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.007170][ T9691] bridge_slave_1: entered allmulticast mode [ 184.051349][ T9691] bridge_slave_1: entered promiscuous mode [ 184.297054][ T9691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.622372][ T9954] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.641841][ T9954] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.653974][ T5842] Bluetooth: hci3: command tx timeout [ 184.664382][ T9954] bond0 (unregistering): Released all slaves [ 184.695092][ T9691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.737386][ T7575] syz0: Port: 1 Link DOWN [ 184.873469][ T9980] openvswitch: netlink: Actions may not be safe on all matching packets [ 185.108972][ T9691] team0: Port device team_slave_0 added [ 185.140743][ T9691] team0: Port device team_slave_1 added [ 185.160973][ T9998] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 185.394618][ T9691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.416560][ T9691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.457764][ T9691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.524089][ T9691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.531455][ T9691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.566847][ T9691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.757925][T10037] __nla_validate_parse: 4 callbacks suppressed [ 185.757943][T10037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.973'. [ 185.778227][T10037] openvswitch: netlink: Unknown nsh attribute 0 [ 185.785405][T10037] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 185.823982][T10032] netlink: 4 bytes leftover after parsing attributes in process `syz.4.972'. [ 185.889208][T10046] netlink: 'syz.4.972': attribute type 21 has an invalid length. [ 185.918380][T10046] netlink: 'syz.4.972': attribute type 22 has an invalid length. [ 185.961153][T10046] netlink: 'syz.4.972': attribute type 23 has an invalid length. [ 185.984096][T10046] netlink: 'syz.4.972': attribute type 25 has an invalid length. [ 185.984651][T10040] netlink: 84 bytes leftover after parsing attributes in process `syz.4.972'. [ 185.992646][T10046] netlink: 'syz.4.972': attribute type 26 has an invalid length. [ 186.004844][ T9691] hsr_slave_0: entered promiscuous mode [ 186.035102][ T9691] hsr_slave_1: entered promiscuous mode [ 186.044183][ T9691] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 186.060689][ T9691] Cannot create hsr debugfs directory [ 186.063071][T10046] netlink: 16 bytes leftover after parsing attributes in process `syz.4.972'. [ 186.126577][T10061] netlink: 788 bytes leftover after parsing attributes in process `syz.0.978'. [ 186.318960][T10069] netlink: 36 bytes leftover after parsing attributes in process `syz.2.980'. [ 186.733655][ T5842] Bluetooth: hci3: command tx timeout [ 186.837649][T10092] tipc: Started in network mode [ 186.842563][T10092] tipc: Node identity 4, cluster identity 4711 [ 186.866835][T10092] tipc: Node number set to 4 [ 187.154748][T10107] netlink: 20 bytes leftover after parsing attributes in process `syz.2.988'. [ 187.367845][T10115] netlink: 16 bytes leftover after parsing attributes in process `syz.0.990'. [ 187.385291][T10114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.991'. [ 187.548291][T10122] netlink: 'syz.2.993': attribute type 11 has an invalid length. [ 187.555576][ T9691] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 187.619062][T10124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.992'. [ 187.653925][ T9691] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 187.825721][ T9691] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 187.841531][T10136] netlink: 'syz.1.997': attribute type 4 has an invalid length. [ 187.871911][ T9691] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 187.893418][T10141] netlink: 'syz.1.997': attribute type 4 has an invalid length. [ 188.321714][T10169] xt_CT: No such helper "syz0" [ 188.332123][ T9691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.444507][ T9691] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.521267][ T3462] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.528507][ T3462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.562160][ T3462] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.569396][ T3462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.889177][T10192] netlink: 'syz.2.1005': attribute type 5 has an invalid length. [ 188.957022][T10200] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 189.098533][T10203] netlink: 'syz.2.1009': attribute type 12 has an invalid length. [ 189.219017][T10209] IPVS: set_ctl: invalid protocol: 58 172.30.1.2:20001 [ 189.290811][ T9691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.359018][T10211] : renamed from bridge_slave_1 (while UP) [ 189.549702][ T9691] veth0_vlan: entered promiscuous mode [ 189.582935][ T9691] veth1_vlan: entered promiscuous mode [ 189.709527][ T9691] veth0_macvtap: entered promiscuous mode [ 189.731259][ T9691] veth1_macvtap: entered promiscuous mode [ 189.800653][ T9691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.874646][ T9691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.919424][ T9691] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.948418][ T9691] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.977738][ T9691] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.008768][ T9691] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.252878][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.257329][T10247] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 190.287542][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.402299][ T1040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.449575][ T1040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.043783][T10281] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 191.050525][T10281] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 191.089108][T10270] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 191.210410][T10276] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 191.321324][T10274] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 191.368183][T10290] __nla_validate_parse: 7 callbacks suppressed [ 191.368202][T10290] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1030'. [ 191.419651][T10290] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1030'. [ 191.449206][T10290] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.636176][ T63] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.781743][ T63] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.199753][ T63] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.333885][ T1040] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 192.359962][T10322] netlink: 212296 bytes leftover after parsing attributes in process `syz.2.1033'. [ 192.446828][T10325] ================================================================== [ 192.454946][T10325] BUG: KASAN: slab-use-after-free in rose_get_neigh+0x391/0x990 [ 192.462614][T10325] Read of size 1 at addr ffff88801c7ee030 by task syz.0.1035/10325 [ 192.470513][T10325] [ 192.472867][T10325] CPU: 0 UID: 0 PID: 10325 Comm: syz.0.1035 Not tainted 6.16.0-rc3-syzkaller-00117-g8550821a1535 #0 PREEMPT(full) [ 192.472891][T10325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 192.472908][T10325] Call Trace: [ 192.472916][T10325] [ 192.472923][T10325] dump_stack_lvl+0x189/0x250 [ 192.472952][T10325] ? __virt_addr_valid+0x1c8/0x5c0 [ 192.472971][T10325] ? rcu_is_watching+0x15/0xb0 [ 192.472995][T10325] ? __kasan_check_byte+0x12/0x40 [ 192.473014][T10325] ? __pfx_dump_stack_lvl+0x10/0x10 [ 192.473038][T10325] ? rcu_is_watching+0x15/0xb0 [ 192.473062][T10325] ? lock_release+0x4b/0x3e0 [ 192.473088][T10325] ? __virt_addr_valid+0x1c8/0x5c0 [ 192.473104][T10325] ? __virt_addr_valid+0x4a5/0x5c0 [ 192.473122][T10325] print_report+0xd2/0x2b0 [ 192.473144][T10325] ? rose_get_neigh+0x391/0x990 [ 192.473165][T10325] kasan_report+0x118/0x150 [ 192.473181][T10325] ? rose_get_neigh+0x391/0x990 [ 192.473207][T10325] rose_get_neigh+0x391/0x990 [ 192.473234][T10325] rose_connect+0x416/0x10a0 [ 192.473253][T10325] ? __pfx_current_check_access_socket+0x10/0x10 [ 192.473277][T10325] ? aa_sk_perm+0x81e/0x950 [ 192.473295][T10325] ? __might_fault+0xb0/0x130 [ 192.473311][T10325] ? __pfx_rose_connect+0x10/0x10 [ 192.473331][T10325] ? aa_af_perm+0x210/0x2b0 [ 192.473349][T10325] ? tomoyo_socket_connect_permission+0x164/0x290 [ 192.473377][T10325] ? bpf_lsm_socket_connect+0x9/0x20 [ 192.473399][T10325] __sys_connect+0x313/0x440 [ 192.473416][T10325] ? __pfx___sys_connect+0x10/0x10 [ 192.473438][T10325] ? rcu_is_watching+0x15/0xb0 [ 192.473463][T10325] __x64_sys_connect+0x7a/0x90 [ 192.473481][T10325] do_syscall_64+0xfa/0x3b0 [ 192.473504][T10325] ? lockdep_hardirqs_on+0x9c/0x150 [ 192.473525][T10325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.473542][T10325] ? clear_bhb_loop+0x60/0xb0 [ 192.473560][T10325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.473576][T10325] RIP: 0033:0x7f1473d8e929 [ 192.473599][T10325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.473615][T10325] RSP: 002b:00007f1474b48038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 192.473637][T10325] RAX: ffffffffffffffda RBX: 00007f1473fb5fa0 RCX: 00007f1473d8e929 [ 192.473651][T10325] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000005 [ 192.473662][T10325] RBP: 00007f1473e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 192.473673][T10325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.473684][T10325] R13: 0000000000000000 R14: 00007f1473fb5fa0 R15: 00007ffe3fca5048 [ 192.473714][T10325] [ 192.473721][T10325] [ 192.733228][T10325] Allocated by task 9703: [ 192.737540][T10325] kasan_save_track+0x3e/0x80 [ 192.742214][T10325] __kasan_kmalloc+0x93/0xb0 [ 192.746826][T10325] __kmalloc_cache_noprof+0x230/0x3d0 [ 192.752192][T10325] rose_add_node+0x23a/0xde0 [ 192.756780][T10325] rose_rt_ioctl+0xa48/0xfb0 [ 192.761363][T10325] rose_ioctl+0x3ce/0x8b0 [ 192.765688][T10325] sock_do_ioctl+0xd9/0x300 [ 192.770186][T10325] sock_ioctl+0x576/0x790 [ 192.774505][T10325] __se_sys_ioctl+0xf9/0x170 [ 192.779086][T10325] do_syscall_64+0xfa/0x3b0 [ 192.783583][T10325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.789460][T10325] [ 192.791770][T10325] Freed by task 10010: [ 192.795824][T10325] kasan_save_track+0x3e/0x80 [ 192.800492][T10325] kasan_save_free_info+0x46/0x50 [ 192.805505][T10325] __kasan_slab_free+0x62/0x70 [ 192.810254][T10325] kfree+0x18e/0x440 [ 192.814142][T10325] rose_rt_device_down+0x66d/0x6c0 [ 192.819247][T10325] rose_device_event+0x603/0x6a0 [ 192.824175][T10325] notifier_call_chain+0x1b3/0x3e0 [ 192.829282][T10325] __dev_notify_flags+0x18d/0x2e0 [ 192.834295][T10325] netif_change_flags+0xe8/0x1a0 [ 192.839221][T10325] dev_change_flags+0x130/0x260 [ 192.844062][T10325] dev_ioctl+0x7b4/0x1150 [ 192.848377][T10325] sock_do_ioctl+0x22c/0x300 [ 192.852960][T10325] sock_ioctl+0x576/0x790 [ 192.857281][T10325] __se_sys_ioctl+0xf9/0x170 [ 192.861865][T10325] do_syscall_64+0xfa/0x3b0 [ 192.866362][T10325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.872242][T10325] [ 192.874554][T10325] The buggy address belongs to the object at ffff88801c7ee000 [ 192.874554][T10325] which belongs to the cache kmalloc-512 of size 512 [ 192.888591][T10325] The buggy address is located 48 bytes inside of [ 192.888591][T10325] freed 512-byte region [ffff88801c7ee000, ffff88801c7ee200) [ 192.902286][T10325] [ 192.904595][T10325] The buggy address belongs to the physical page: [ 192.910989][T10325] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1c7ec [ 192.919732][T10325] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 192.928224][T10325] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 192.936200][T10325] page_type: f5(slab) [ 192.940169][T10325] raw: 00fff00000000040 ffff88801a441c80 0000000000000000 dead000000000001 [ 192.948739][T10325] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 192.957747][T10325] head: 00fff00000000040 ffff88801a441c80 0000000000000000 dead000000000001 [ 192.966407][T10325] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 192.975065][T10325] head: 00fff00000000002 ffffea000071fb01 00000000ffffffff 00000000ffffffff [ 192.983720][T10325] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 192.992370][T10325] page dumped because: kasan: bad access detected [ 192.998776][T10325] page_owner tracks the page as allocated [ 193.004472][T10325] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5209, tgid 5209 (udevd), ts 43580531173, free_ts 38862505137 [ 193.025211][T10325] post_alloc_hook+0x240/0x2a0 [ 193.029966][T10325] get_page_from_freelist+0x21e4/0x22c0 [ 193.035500][T10325] __alloc_frozen_pages_noprof+0x181/0x370 [ 193.041291][T10325] alloc_pages_mpol+0x232/0x4a0 [ 193.046129][T10325] allocate_slab+0x8a/0x3b0 [ 193.050623][T10325] ___slab_alloc+0xbfc/0x1480 [ 193.055293][T10325] __kmalloc_cache_noprof+0x296/0x3d0 [ 193.060654][T10325] kernfs_fop_open+0x397/0xca0 [ 193.065414][T10325] do_dentry_open+0xdf0/0x1970 [ 193.070167][T10325] vfs_open+0x3b/0x340 [ 193.074225][T10325] path_openat+0x2ee5/0x3830 [ 193.078806][T10325] do_filp_open+0x1fa/0x410 [ 193.083298][T10325] do_sys_openat2+0x121/0x1c0 [ 193.087962][T10325] __x64_sys_openat+0x138/0x170 [ 193.092803][T10325] do_syscall_64+0xfa/0x3b0 [ 193.097320][T10325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.103222][T10325] page last free pid 5398 tgid 5398 stack trace: [ 193.109544][T10325] __free_frozen_pages+0xc71/0xe70 [ 193.114660][T10325] __slab_free+0x326/0x400 [ 193.119075][T10325] qlist_free_all+0x97/0x140 [ 193.123660][T10325] kasan_quarantine_reduce+0x148/0x160 [ 193.129110][T10325] __kasan_slab_alloc+0x22/0x80 [ 193.133950][T10325] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 193.139405][T10325] proc_reg_open+0x20d/0x560 [ 193.143989][T10325] do_dentry_open+0xdf0/0x1970 [ 193.148741][T10325] vfs_open+0x3b/0x340 [ 193.152800][T10325] path_openat+0x2ee5/0x3830 [ 193.157381][T10325] do_filp_open+0x1fa/0x410 [ 193.161883][T10325] do_sys_openat2+0x121/0x1c0 [ 193.166554][T10325] __x64_sys_openat+0x138/0x170 [ 193.171403][T10325] do_syscall_64+0xfa/0x3b0 [ 193.175902][T10325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.181781][T10325] [ 193.184090][T10325] Memory state around the buggy address: [ 193.189707][T10325] ffff88801c7edf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 193.197757][T10325] ffff88801c7edf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 193.205805][T10325] >ffff88801c7ee000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 193.213849][T10325] ^ [ 193.219473][T10325] ffff88801c7ee080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 193.227522][T10325] ffff88801c7ee100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 193.235569][T10325] ================================================================== [ 193.243728][T10325] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 193.250932][T10325] CPU: 0 UID: 0 PID: 10325 Comm: syz.0.1035 Not tainted 6.16.0-rc3-syzkaller-00117-g8550821a1535 #0 PREEMPT(full) [ 193.263008][T10325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 193.273073][T10325] Call Trace: [ 193.276348][T10325] [ 193.279269][T10325] dump_stack_lvl+0x99/0x250 [ 193.283857][T10325] ? __asan_memcpy+0x40/0x70 [ 193.288444][T10325] ? __pfx_dump_stack_lvl+0x10/0x10 [ 193.293642][T10325] ? __pfx__printk+0x10/0x10 [ 193.298230][T10325] panic+0x2db/0x790 [ 193.302123][T10325] ? __pfx_panic+0x10/0x10 [ 193.306534][T10325] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 193.312423][T10325] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 193.318311][T10325] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 193.324633][T10325] ? print_memory_metadata+0x314/0x400 [ 193.330089][T10325] ? rose_get_neigh+0x391/0x990 [ 193.334938][T10325] check_panic_on_warn+0x89/0xb0 [ 193.339875][T10325] ? rose_get_neigh+0x391/0x990 [ 193.344718][T10325] end_report+0x78/0x160 [ 193.348965][T10325] kasan_report+0x129/0x150 [ 193.353474][T10325] ? rose_get_neigh+0x391/0x990 [ 193.358343][T10325] rose_get_neigh+0x391/0x990 [ 193.363031][T10325] rose_connect+0x416/0x10a0 [ 193.367627][T10325] ? __pfx_current_check_access_socket+0x10/0x10 [ 193.373954][T10325] ? aa_sk_perm+0x81e/0x950 [ 193.378452][T10325] ? __might_fault+0xb0/0x130 [ 193.383117][T10325] ? __pfx_rose_connect+0x10/0x10 [ 193.388134][T10325] ? aa_af_perm+0x210/0x2b0 [ 193.392626][T10325] ? tomoyo_socket_connect_permission+0x164/0x290 [ 193.399038][T10325] ? bpf_lsm_socket_connect+0x9/0x20 [ 193.404317][T10325] __sys_connect+0x313/0x440 [ 193.408895][T10325] ? __pfx___sys_connect+0x10/0x10 [ 193.413999][T10325] ? rcu_is_watching+0x15/0xb0 [ 193.418761][T10325] __x64_sys_connect+0x7a/0x90 [ 193.423513][T10325] do_syscall_64+0xfa/0x3b0 [ 193.428010][T10325] ? lockdep_hardirqs_on+0x9c/0x150 [ 193.433201][T10325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.439256][T10325] ? clear_bhb_loop+0x60/0xb0 [ 193.443926][T10325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.449808][T10325] RIP: 0033:0x7f1473d8e929 [ 193.454210][T10325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.473807][T10325] RSP: 002b:00007f1474b48038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 193.482215][T10325] RAX: ffffffffffffffda RBX: 00007f1473fb5fa0 RCX: 00007f1473d8e929 [ 193.490178][T10325] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000005 [ 193.498137][T10325] RBP: 00007f1473e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 193.506098][T10325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.514057][T10325] R13: 0000000000000000 R14: 00007f1473fb5fa0 R15: 00007ffe3fca5048 [ 193.522040][T10325] [ 193.525279][T10325] Kernel Offset: disabled [ 193.529987][T10325] Rebooting in 86400 seconds..