last executing test programs: 57.502787964s ago: executing program 1 (id=1302): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc0241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) syz_emit_ethernet(0x52, &(0x7f00000007c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaac7aa86000000000000000000bbfe8000000000000000000000000000aa000000f60000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1f00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB="000000000000000000000000ec295d3b74", @ANYRES32], 0x50) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r2, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00'}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) connect$l2tp(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffffa1, 0x0) sendto$l2tp(r2, 0x0, 0xfffffffffffffebd, 0x844, &(0x7f00000000c0)={0x2, 0x0, @remote, 0x101}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000001000058000b480400945f64009400050028925a010000", 0x32}], 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="1502ffffffa100001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}, 0x1, 0xba01}, 0x0) 47.67056827s ago: executing program 1 (id=1302): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc0241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) syz_emit_ethernet(0x52, &(0x7f00000007c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaac7aa86000000000000000000bbfe8000000000000000000000000000aa000000f60000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1f00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB="000000000000000000000000ec295d3b74", @ANYRES32], 0x50) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r2, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00'}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) connect$l2tp(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffffa1, 0x0) sendto$l2tp(r2, 0x0, 0xfffffffffffffebd, 0x844, &(0x7f00000000c0)={0x2, 0x0, @remote, 0x101}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000001000058000b480400945f64009400050028925a010000", 0x32}], 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="1502ffffffa100001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}, 0x1, 0xba01}, 0x0) 39.62750292s ago: executing program 1 (id=1302): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc0241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) syz_emit_ethernet(0x52, &(0x7f00000007c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaac7aa86000000000000000000bbfe8000000000000000000000000000aa000000f60000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1f00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB="000000000000000000000000ec295d3b74", @ANYRES32], 0x50) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r2, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00'}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) connect$l2tp(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffffa1, 0x0) sendto$l2tp(r2, 0x0, 0xfffffffffffffebd, 0x844, &(0x7f00000000c0)={0x2, 0x0, @remote, 0x101}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000001000058000b480400945f64009400050028925a010000", 0x32}], 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="1502ffffffa100001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}, 0x1, 0xba01}, 0x0) 31.369566446s ago: executing program 1 (id=1302): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc0241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) syz_emit_ethernet(0x52, &(0x7f00000007c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaac7aa86000000000000000000bbfe8000000000000000000000000000aa000000f60000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1f00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB="000000000000000000000000ec295d3b74", @ANYRES32], 0x50) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r2, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00'}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) connect$l2tp(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffffa1, 0x0) sendto$l2tp(r2, 0x0, 0xfffffffffffffebd, 0x844, &(0x7f00000000c0)={0x2, 0x0, @remote, 0x101}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000001000058000b480400945f64009400050028925a010000", 0x32}], 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="1502ffffffa100001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}, 0x1, 0xba01}, 0x0) 17.856004971s ago: executing program 1 (id=1302): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc0241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) syz_emit_ethernet(0x52, &(0x7f00000007c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaac7aa86000000000000000000bbfe8000000000000000000000000000aa000000f60000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1f00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB="000000000000000000000000ec295d3b74", @ANYRES32], 0x50) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r2, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00'}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) connect$l2tp(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffffa1, 0x0) sendto$l2tp(r2, 0x0, 0xfffffffffffffebd, 0x844, &(0x7f00000000c0)={0x2, 0x0, @remote, 0x101}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000001000058000b480400945f64009400050028925a010000", 0x32}], 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="1502ffffffa100001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}, 0x1, 0xba01}, 0x0) 8.847714416s ago: executing program 1 (id=1302): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc0241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) syz_emit_ethernet(0x52, &(0x7f00000007c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaac7aa86000000000000000000bbfe8000000000000000000000000000aa000000f60000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1f00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB="000000000000000000000000ec295d3b74", @ANYRES32], 0x50) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r2, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00'}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) connect$l2tp(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffffa1, 0x0) sendto$l2tp(r2, 0x0, 0xfffffffffffffebd, 0x844, &(0x7f00000000c0)={0x2, 0x0, @remote, 0x101}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000001000058000b480400945f64009400050028925a010000", 0x32}], 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="1502ffffffa100001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}, 0x1, 0xba01}, 0x0) 6.287606713s ago: executing program 0 (id=1606): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='sys_enter\x00', r2}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000007000000050000000000000738b59faf5327d27d005f00"], 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x9, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xf, &(0x7f0000000040)=""/15, 0x0, 0x0, '\x00', 0x0, 0x25, r3, 0xa, &(0x7f0000000300), 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000)=0x8, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, 0x0, &(0x7f0000000080)) socket$rds(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f0000000280000012", 0x2d}], 0x1}, 0x0) 6.21255796s ago: executing program 0 (id=1607): unshare(0x68040200) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x350, 0xa8, 0x0, 0xfbffffff, 0x0, 0x140, 0x2b8, 0x2b8, 0xffffffff, 0x2b8, 0x2b8, 0x5, 0x0, {[{{@ip={@broadcast, @local, 0x0, 0x0, 'geneve1\x00', 'geneve0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x2, {0x3, @empty, @local, @port, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xa8}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @local, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000000540)={{'\x00', 0x2}, {0x70bd36ce}, 0x150, 0x0, 0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000400)="6ffdc42692d35683a94ede022673c76c939c09b7d03ede32d74453ac5828bdd10afc0cf67ce9e6d7d10785b34ec9f5f963f8d57584de6df706650dac816266dd1a7de360d170f24e2507d329aeb66b6f764d8efe3692672c6b566659c71ee9cf22b6af54fd68d7565833f8a0a1afb8f9d224e3ed26d5cb31eb2269513c14", 0x7e, 0x0, &(0x7f0000000900)={0x2, 0x137, {0x1, 0xc, 0xb4, "ad1e445aff93062bfa780a7b86bec3c289a99bb19eb5f51cfa6680dcb5922ec58de1122b8d035d60e57f2975d7a4dade2329444f4e63812797aa0c64a83d292363d4ef64d7d852d32e4852b51dd1f37835be60fbdac54aaf27942485b1abb072f6415de0dc09773976afb9c6c8387d81e345ab948bd6c1f9318aa880b946a8fa0f5ffd5cf0cebfe34c75c62b681a777d6e2eebca9c64c2b4ee2180ef0fd1ef054a5c8cb12ef06d7b95da4441b4d5daeb15eada5c", 0x76, "8b370e50c681706d8dd923ba0c9f3046de05e59e0d4f69cd1fc121d0a7334dd6f51ff84dbff551b3fd44fe27df3c94d26150e97516e27360c96df7ca966a9f714190c19b2b50a1eee493717fb8fe163fa65fb08f395ea48f924037fd1d39d1c0d67449aa94dd0efa0383f86ed31eb86931c3e109502a"}, 0x9d, "c1a7dcbbfd6e2ed7da404086bd804d36f94480454db00053e97b0466ff6ba306ac0bbf558718a3ce02cfe9d972a95e237413bc148e6c2e856524fffbd7221f812133c229ba4b4e6eb2ef996aeef91b1ff01ad37657c8dae7941b1387bfa73d061bc0e466bcb908a46c9e613ee98e6d371f7798c6e17a7dee8b870c7bcadf0b727f094343368d3c2b89c94b0b44024140c98c2214005a75bdfe599cebba"}, 0x1e0}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x3, &(0x7f0000000200)=0x3, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x8f}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendto$inet(r4, &(0x7f0000000640)="e0", 0x1, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002500)=@newlink={0x30, 0x10, 0x1, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r7}, [@IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}, @IFLA_MTU={0x8, 0x4, 0x1ff}]}, 0x30}}, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x3, &(0x7f00000001c0), 0x4) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x25dfdbfd, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x40002}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="ff0f0000000000006c0d3095ea25da2a85113150acb02b07da029b2a7e3213", @ANYRES16=r12, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r13, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)={0x1c, r9, 0x64fce33ba3dcdc5d, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24008001}, 0x4008810) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x48, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback={0xfec0ffff00000000}}]}}}]}, 0x48}}, 0x0) 4.485101152s ago: executing program 2 (id=1616): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000400", @ANYRES16=r1, @ANYBLOB="7f892cbd7000ffdbdf2509000000"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24000090) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) setsockopt$inet_dccp_buf(r2, 0x21, 0xf, &(0x7f0000001480)="6f81cb2b00e76a44f388e3b7024aee57248a37bd168dac4690a5ef55deda1b5719a8415d03c51559ca49549faf3c3e9fc012ea1891c1db1428c758a0365e433a1c1e83f0ef550211fcc2929d7b62bd26eecdc3e4f8f14f916a8c70aa7bc40760a59238a6a232238ff7", 0x69) write$cgroup_int(r2, &(0x7f0000001500)=0x9, 0x12) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x20, 0x82c4a1b3f3b0665f, 0x0, 0x9, {{0xc, 0x4, 0x0, 0x4, 0x30, 0x66, 0x0, 0x8, 0x2f, 0x0, @local, @loopback, {[@timestamp_prespec={0x44, 0x1c, 0xc9, 0x3, 0x2, [{@local, 0x6}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x500}, {@local, 0x8}]}]}}}}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001540)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="0100ffffffff000000008100000008000300", @ANYRES32=r4, @ANYBLOB="0a000600080211000001000006006600000000001c00330008010000505050505050080211000001ffffffffffff0000"], 0x4c}}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001400)={&(0x7f00000022c0)=ANY=[@ANYRES16, @ANYBLOB="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"], 0xc40}, 0x1, 0x0, 0x0, 0x10}, 0x4000) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={0xffffffffffffffff, 0x7, 0x10}, 0xc) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r5, 0x29, 0xc8, &(0x7f0000000340), 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r7) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r8) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000003a0007cfb1d62e960ef8380003"], 0x1c}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x88, r9, 0x1, 0x71bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x2c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x34, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x4}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4c804}, 0x800) sendmsg$NL802154_CMD_SET_LBT_MODE(r7, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000800)={'wpan0\x00'}) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) close(r5) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32=r2, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="00000000030000000500"/28], 0x50) 4.302822408s ago: executing program 3 (id=1618): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000040)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0x2a979d) ioctl$SIOCSIFHWADDR(r4, 0x401c5820, &(0x7f0000000080)={'macvlan1\x00', @link_local}) sendmsg$nl_route_sched(r4, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=@deltaction={0x180, 0x31, 0x300, 0x70bd2a, 0x0, {}, [@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8b90}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0x14, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x352b04eb}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x20}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0x14, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x88, 0x1, [{0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x14, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x80}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x4c, 0x0, "01deaba05ccc4fa00711be66bd584ecd190428efc9e569f4b222158b227692cebc00924f2deea371bafa061b8f2959b4b696b22e4881f40a0d8f4c2fdea78893bc2c160df3e41db4153cfd9221d01c79"}, 0xd8) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, "d9b0db7b77b7ea4df776f6b4061440d6ef44477d5b183973aa0ec402b72eed48529a44fe36e91a79344b777fd81334346ff64025e77fcfbc91e29ed9895d69d06e4dc56bbc6a4879d0b34d9b0f0069f9"}, 0xd8) ioctl$PPPIOCGFLAGS1(r4, 0x8004745a, &(0x7f0000000340)) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x28, r2, 0x483, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x14}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x34, r7, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x34, r7, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r6, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x0) 3.07927198s ago: executing program 2 (id=1621): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000080)=ANY=[], 0x57) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000008064b36efea6a800000000000000009500"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) r3 = socket$unix(0x1, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x400448de, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000040)="05000000010000", 0x7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r6 = epoll_create(0x800) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(r3) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x6c}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000780)=[{0x0}], 0x1) writev(r8, &(0x7f00000001c0), 0x0) 3.077941287s ago: executing program 3 (id=1622): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x0, 0x20, 0x80000001, 0x101, {{0x10, 0x4, 0x3, 0x9, 0x40, 0x66, 0x0, 0x0, 0x29, 0x0, @multicast2, @broadcast, {[@lsrr={0x83, 0x13, 0xef, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x30}, @local]}, @rr={0x7, 0x7, 0xcb, [@loopback]}, @generic={0x82, 0x6, "6c2aad43"}, @end, @generic={0xe, 0x9, "0c6f96e2f2064f"}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x9, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xa0, 0x15, 0x0, 0x0, 0x1}, [@call={0x45, 0x0, 0x0, 0xffffffff}]}, &(0x7f0000000100)='syzkaller\x00', 0x3, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, '\x00', r0, @fallback=0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) r2 = socket$inet(0x2, 0x80000, 0xf) r3 = socket(0x10, 0x80002, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r4, &(0x7f00000000c0)={0x11, 0xf8, r6, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000440)=0x8, 0x4) socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x9}}, 0x1c}}, 0x0) bind$packet(r5, &(0x7f0000000380)={0x11, 0x4, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000000480)=ANY=[@ANYRES64], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a0000", @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) r9 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r9, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r9, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r10, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r11 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r11, &(0x7f0000000300)={0x1f, @any, 0x8}, 0xa) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', r10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@gettfilter={0x3c, 0x2e, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r0, {0x7, 0x4}, {0x4, 0xfff3}, {0x4, 0x8}}, [{0x8, 0xb, 0x7f}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x3}]}, 0x3c}}, 0x41) 3.013985401s ago: executing program 0 (id=1623): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)="4dfaab404ca553dab03051b244e2f42a60eaf4c71c5a13273b8a78ff7c53158d3ba3cd6ba0deb17f814c3972f412696055807cdb29119aae56543501f7745dafa268", &(0x7f0000001a40), 0x1003, r3}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000080)={r3, &(0x7f0000001b80), &(0x7f0000001c40)=""/245}, 0x20) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) unshare(0x600) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x4, 0x7fe2, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000006c0)={r5, &(0x7f0000000500), &(0x7f0000000600)=""/155}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r5, &(0x7f0000000040), &(0x7f0000000480)=""/146}, 0x1d) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_HEADER(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, 0xc, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048804}, 0x50) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r8, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f00000009c0)=""/4090, 0xffa}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf20000000000000160005003f1b48013d030100000000009500000000000000bc26000000000000bf67000000000000070600000fff07006702000003000000360600000ee600f0bf052000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000200), 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) 2.774687166s ago: executing program 0 (id=1624): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@gettaction={0x34, 0x32, 0x800, 0x2000000, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x101, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4a0, 0x2b8, 0x9403, 0x3002, 0x0, 0x2c0, 0x3d0, 0x3d8, 0x3d8, 0x3d0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x10, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x80, 0x1, 0x0, 'syz0\x00', 0x1}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@loopback, @empty, [0xffffff00, 0xff000000, 0xff, 0xffffff00], [0x140b6964c6a3d8d0, 0x1fffffeff, 0xffffff00, 0xff], 'gre0\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x2e, 0x3, 0x2, 0x64}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xfffffff4, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b70300e0000000088500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000dc4c9500000000000000dc3668b87b6ee4c1c46d47650bd028fc7c774eeb6fa6a4180b6b82291205c12902f381cc0e42939e06"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000900)=r5, 0x4) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x781b00, 0x0) ioctl$TUNSETNOCSUM(r7, 0x400454c8, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r8 = epoll_create1(0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000a40)={0x0, 0x1000, "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"}, &(0x7f00000002c0)=0x1008) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f00000004c0)={r10, 0x200}, &(0x7f0000000500)=0x8) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r2, &(0x7f0000000040)={0xb000001c}) epoll_pwait(r8, &(0x7f0000000180)=[{}], 0x1, 0xa2c, 0x0, 0x0) epoll_pwait(r8, &(0x7f00000000c0)=[{}], 0x1, 0xfff, 0x0, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x8, &(0x7f0000000a00)=@framed={{}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0x25}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_xfrm(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES16=r2, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414bb0000000000000000000000000000000032000000fe88000000000000000000000000000100"/65], 0x160}}, 0x0) r12 = socket$packet(0x11, 0x3, 0x300) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9000000000010104000000000000000002000000240001801400018008000100ac14140008000200ac1414bb0c00028005000100000000002400028014000180080001007f00000108000200ac1414aa0c000280050001000000000008000740000000002c000e800c0002800500"], 0x90}}, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r13, @ANYBLOB="000000000000000014001a80100004"], 0x34}}, 0x0) close(r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000008000000b703000000000000850000002d0000009500"/81], &(0x7f0000000000)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.773236429s ago: executing program 2 (id=1625): unshare(0x42000000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'vlan0\x00'}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond_slave={{0xf}, {0xc, 0x5, 0x0, 0x1, @IFLA_BOND_SLAVE_QUEUE_ID={0x6, 0x5, 0x81}}}}, @IFLA_LINK_NETNSID={0x8}, @IFLA_LINKMODE={0x5, 0x11, 0x5}]}, 0x7c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f0000050000", @ANYRES32, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) r4 = socket(0x40000000002, 0x3, 0x6) ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000000080)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r7}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x1008}, 0x1f00) sendmsg$tipc(r2, 0x0, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r1, 0x10f, 0x84, &(0x7f00000001c0), &(0x7f0000000280)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x50, 0x140a, 0x408, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x50}, 0x8000) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) unshare(0x22020400) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000080000000000000064ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r9, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001440)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffcac, 0xfffffffffffffffd}}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 2.731647361s ago: executing program 3 (id=1626): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$netlink(r3, 0x10e, 0x3, &(0x7f0000000300)=""/117, &(0x7f0000000000)=0x75) socket$inet6(0xa, 0x2, 0x40) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_TC={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0xffff}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x5, 0x0, 0x5, 0x0}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0xd0}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f00000001c0)) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}]]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCGNPMODE(r7, 0xc008744c, &(0x7f0000000000)={0x802b, 0x1}) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r8, 0x6, 0x5, &(0x7f00000003c0), &(0x7f0000000400)=0x4) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000080)={@remote, @initdev}, &(0x7f00000000c0)=0xc) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00'}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000680), 0x4) write$tun(r10, &(0x7f0000000340)={@val, @void, @eth={@broadcast, @remote, @val, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0xa00, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x86dd, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "3532f52517ba86dee7cd24c95eb3fea0dea82bcbe720dbd4619e9d953a70e6b5", "3e286b47cd0ff7f441ce4393df7f84fcfb3cdba1f737cf62b9bf6cdfc3d1c3041651bada49ac6e56ff7bc74836ac5641", "5f3aa4553b72beab86a0a0f5c6e121fe1acdfce66d8bf4c7fdb581cb", {"89dd3985c0ed2aefac3b7dac96809166", "6cfcd6109a67520cf91028a971008368"}}}}}}}}, 0xca) 2.288783676s ago: executing program 0 (id=1628): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$pppl2tp(0x18, 0x1, 0x1) socket$kcm(0x10, 0x2, 0x10) socket(0x1d, 0x2, 0x6) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa10000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='kfree\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5}, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000020301010000000000000000f20000000800010001"], 0x1c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNGETVNETBE(r5, 0x800454df, &(0x7f0000000080)) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x6, 0x0, 0x0, 0x280, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 2.258394869s ago: executing program 4 (id=1629): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000580)={@private0, @mcast1, @loopback, 0x0, 0x0, 0x80, 0x0, 0x0, 0x10200}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @remote, @mcast1, 0x0, 0x0, 0x40, 0x100, 0x0, 0x10200}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000730130000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x10}]}}}]}, 0x3c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r2) r3 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f00000003c0)={0x20000000, {{0x2, 0x4e24, @multicast1}}, 0x1}, 0x90) r4 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r4, 0x0, 0x0) setsockopt$RXRPC_SECURITY_KEY(r4, 0x110, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x20, 0x13, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="310300000000000000000b00000008000300db99a0"], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r8, 0x106, 0x1, &(0x7f0000000000)=0x1, 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x40, 0x700, 0x6, 0x7, {{0x9, 0x4, 0x0, 0xe, 0x24, 0x64, 0x0, 0x9, 0x2f, 0x0, @private=0xa010100, @empty, {[@lsrr={0x83, 0xf, 0x6f, [@dev={0xac, 0x14, 0x14, 0x2b}, @multicast1, @empty]}]}}}}}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)=ANY=[], 0x20) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20, 0x0, 0xff, 0x0, 0xff, 0x0, 0x600}, [@RTA_EXPIRES={0x8, 0x17, 0x4f}]}, 0x24}}, 0x40004) 2.173516405s ago: executing program 3 (id=1630): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000060000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007050000f8ffffffb702000008000000b70300000d0f0000850000000600000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.078707288s ago: executing program 4 (id=1631): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000400)={0x9, {{0x2, 0x0, @multicast2}}, 0x1}, 0x90) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="09000000000000000200002bcd9b91940157c475c5e000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000075015dbccb6a21e200000000"], 0x90) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r5}, 0x10) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x8}, {}, {0x5}}, [@filter_kind_options=@f_route={{0xa}, {0x8, 0x2, [@TCA_ROUTE4_POLICE={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000140)="d3d850055e10d9850d44da85b000bf1f", 0x10) r7 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r7, 0x8983, &(0x7f0000000040)={0x6, 'bridge_slave_0\x00'}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f00000008c0)={0x0, 'veth0_vlan\x00', {0x3}}) syz_emit_ethernet(0x76, &(0x7f0000000080)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "5e15b1", 0x40, 0x3a, 0x0, @dev, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "f96959", 0x0, 0x88, 0x0, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@routing, @dstopts={0x6c}]}}}}}}}, 0x0) sendmmsg(r2, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x2, 0x0) 1.993190739s ago: executing program 3 (id=1632): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x8a, &(0x7f0000000040), 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$FITHAW(r1, 0xc0045878) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb911"], 0xfdef) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r6, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r6) connect$x25(r5, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 1.982952564s ago: executing program 2 (id=1633): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x2b}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0x2a979d) ioctl$SIOCSIFHWADDR(r4, 0x401c5820, &(0x7f0000000080)={'macvlan1\x00', @link_local}) sendmsg$nl_route_sched(r4, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=@deltaction={0x180, 0x31, 0x300, 0x70bd2a, 0x0, {}, [@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8b90}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0x14, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x352b04eb}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x20}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0x14, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x88, 0x1, [{0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x14, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x80}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x4c, 0x0, "01deaba05ccc4fa00711be66bd584ecd190428efc9e569f4b222158b227692cebc00924f2deea371bafa061b8f2959b4b696b22e4881f40a0d8f4c2fdea78893bc2c160df3e41db4153cfd9221d01c79"}, 0xd8) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, "d9b0db7b77b7ea4df776f6b4061440d6ef44477d5b183973aa0ec402b72eed48529a44fe36e91a79344b777fd81334346ff64025e77fcfbc91e29ed9895d69d06e4dc56bbc6a4879d0b34d9b0f0069f9"}, 0xd8) ioctl$PPPIOCGFLAGS1(r4, 0x8004745a, &(0x7f0000000340)) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x28, r2, 0x483, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x14}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x34, r7, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x34, r7, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r6, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x0) 1.70501558s ago: executing program 4 (id=1634): syz_emit_ethernet(0x32, &(0x7f0000000200)={@local, @link_local, @void, {@ipv4={0x800, @igmp={{0x7, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0xd3, 0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, {[@cipso={0x86, 0x8, 0x3, [{0x1, 0x2}]}]}}, {0x15, 0x3, 0x0, @rand_addr=0x64010100}}}}}, 0x0) 1.58253131s ago: executing program 4 (id=1635): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x30, 0xffffffffffffffff, 0x99e3c000) 1.55977474s ago: executing program 4 (id=1636): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FICLONE(r2, 0x40049409, r1) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f00000001002700000000000800"], 0x6c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r4) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newae={0x48, 0x1e, 0x101, 0x70bd2b, 0x25dfdbfb, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d5, 0xa, 0x2b}, @in6=@private2, 0xb413, 0x3501}, [@etimer_thresh={0x8, 0xc, 0xa56}]}, 0x48}}, 0x20008000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x34, r5, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x34}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x30, r10, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3b}]}, 0x30}, 0x1, 0x0, 0x0, 0xc858}, 0x8000) r13 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r13, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x230, 0xb8, 0x25, 0x148, 0xb8, 0x60, 0x1c8, 0x2a8, 0x2a8, 0x1c8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x20c49a, 'syz0\x00', {0xfffffffffffffffd}}}}, {{@ip={@empty, @remote, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00', {0xff}}, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x20c49a, 'syz0\x00', {0x4}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x290) 135.846662ms ago: executing program 2 (id=1637): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x1, 0x30}]}, &(0x7f0000000040)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 80.415123ms ago: executing program 3 (id=1638): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001b40)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001a00000007002100626204001c002280040000800000040003000000000004000d00000004000080040000800400008024fc008004000080"], 0x38}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000080)=ANY=[], 0x57) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000008064b36efea6a800000000000000009500"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x400448de, &(0x7f00000000c0)={0x0, 0x0, "a4cd91"}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000040)="05000000010000", 0x7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r7 = epoll_create(0x800) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r3, &(0x7f00000001c0)={0x10}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r3}, 0x10) close(r4) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) writev(r10, &(0x7f0000000780)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff010000000100000056000000250000001900040004e0144000000007fd17e5ffff0800040000000000", 0x39}], 0x1) writev(r10, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) 45.543755ms ago: executing program 2 (id=1639): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@gettaction={0x34, 0x32, 0x800, 0x2000000, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x101, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4a0, 0x2b8, 0x9403, 0x3002, 0x0, 0x2c0, 0x3d0, 0x3d8, 0x3d8, 0x3d0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x10, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x80, 0x1, 0x0, 'syz0\x00', 0x1}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@loopback, @empty, [0xffffff00, 0xff000000, 0xff, 0xffffff00], [0x140b6964c6a3d8d0, 0x1fffffeff, 0xffffff00, 0xff], 'gre0\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x2e, 0x3, 0x2, 0x64}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xfffffff4, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b70300e0000000088500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000dc4c9500000000000000dc3668b87b6ee4c1c46d47650bd028fc7c774eeb6fa6a4180b6b82291205c12902f381cc0e42939e06"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000900)=r5, 0x4) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x781b00, 0x0) ioctl$TUNSETNOCSUM(r7, 0x400454c8, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r8 = epoll_create1(0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000a40)={0x0, 0x1000, "2ecdde86d57c8e9b0554bf1b7582bb2e20c24396bad413026390f940c74bd95473a0a96d0424b213b16b34717a8b192c0c7062257265cc75df546c4957bee1ece17407d4b3f2b02753894f74444c4464035c6c9f96eb68701bbfb51e2c5664917a927ec47517beca3ebf2bf109c854ab122185a3206cbba4c0bd8b8fa10b1bbe041e142324f58bbc641d95f53e0ae83d7d086d1f07531ab2c8f81a992c8767ad3429ef804558809bc3c1eb7d2a998640b49434638b327e1ac9b451020d9d99f0599e4371ecf51f3f6959251631a8bb09bee3c0b138ecf385ebc72aa1daebbf512f2cf518fb6a9450126af031231bec346d727a0b299bc9d018758c6b7091403969bd24afd438910d37b821ddb9a76ac0897ffce35f48940fd8be2fb13793edb935e77858999bbdacf0d032a53026461fabb69774c265aba61a0fa066d9582937657f58ea9739f9a3e1a56095437c7f533638f52d29acbbc0d6678d94eadea1669570ef15d73f4e3a4d00ee666a6edb836fb7f26c40a6ba4da27bfa919b5b1697b0aab1c182199aeac03216f10a5074447c2222957f592ee0831f8c88b39783ca323bdd2df98513182bf36fc86afbc6efc0f892acd66a4457f213b78383fc4b2b772e45a41f7eb523a860a4a4a46d3d82ba4d88695fe584d7907adfbaf2681073842dc78276a5345890bbef26cbc139abc0d6d10d2467edbe62172b1a34169cb943af0519125f3db6c3ce0b3196ba870fa586a401089c3d9184f05f74f8898106d03f1d610d339337847d3e3023c39a610215b051cfdc5e0ac09ec7e894c02595b9db7e1e6f52d8fa8c590ad31b0cfd412bbdb28ff1b4f4806b274773454d66ad2014becaa9b848c01596830316a50cc129d906aae9ea41b1cb4640b5b243c24f231925f691f2b96cb8d6ec751db587230712d023274e8f793f2d7b6dafec3c56b983f7d68730818169d394d0d4f7fc86279fdb731861f62ed7e1119c1ece8c41813ebd08c4953582171d05c14bd8a85d4dfcd26511da2375e133ef45b0c02b42a0ce70ad5eeba1e8f426701dc5dba68d7cf24dced59058fc51aa541cae326f6ed5b0571666a503b0804e9455b3ba56514d7813914c9079066b15d019ce2fabe0ade9f890f727dba7ebaa07911cb39340e990f1554e01b87fffae1f181ce314c98ef72eacbc632d7075b0cfea0380f5920834e7a7b93922f06f19c47b645b4667ff4f6d86c882c12c388c04011baf0df02d1df81d123ec7207f4448ba96045f42a9a131a045a7973282feec70dcf9626e06ba8de75c3c99d37b583dc5cd46edeca360fd675c21f2701ea0c2beea2e3f728eaeb1208243f158e8f7677eae755d91f717b4b2b2679c432ec6487c0bfa51fcf874abfdae7fe2d7fe12afa11c626f5808febe557fabc5e3a7f725fa952405a864c264f0078ccb240881ae24b548a6d8c95a1f4753e8a983efc173bf1875213066675c2d81abfdf5c338d11752fee6ce80931d321001b421660fb975860bb1662e365257767cfe6c22ca65faf92d27176eb01368fb8259493befd5eada568ed59f5f055213a9228f87a0cb03009f3939420e4df907f7f0e6bf7b4a5a35eb6aebeda35175230614461d9701fd8b9db5de2f4a7f0651a6754b9ebd756b7e3165625759f3007da3b157d14ae68031018e1b4984d8fd3a3437262d862b58d2cb8719aa55efee1c51a15d976614070c50dc60874d785bd8cb0306ee6bfa7d24bb37866afec19e9df419688a6f7cfabfce4a74161e6a3df068eb9aaeea87cc56a485776bd821e5a30e2405102265d4e6d17bbe2c5c99ec20880e35f79c51831bb1cfcd77a4ce38a949178164015e928ea5b6a26f247021c2b72e1412c9f91df0fa5c33ca53f92e0d3376955556556935b24e52349ee3b1431864f39393e82bd59fbba40abc7fe8f8537eabf4900c831c4ac46385f6766bf8165aa2de1bf67ebe57f187b1559f9a8980fd5cfb8f95188ae1cc18d5e534499cffadfff125281db11ede9f6f219fcd07092575fabed6914f93faf35a8605b064aa132608a035e9002694974f302c92375d25a63ff10190b41832866817dcb870dd7ed9ea9c6730b71a40097d806b8b999fec824b3626918184fde0289c9e064534279c6676e058f4223c502fa306c77a893b66f3ebaf5512449029d768407e06967f43a5d2e14f032644096cdd7c1c2f11e0f62c5e1a00f87942c7e52b56819f458d4647ac7d698cdfa1af161a221ea0a48f2c26c16a167f5f53643188a879d9d2161e8d7a50eb8e3a5ab314998fea3e0f3c6d7441b79d737b7884fe2903d3d0a2d66d6c674f24f83e7a2acbe223f817f50b1ddab033487da525711bcf88af9b3ea2646cb5041b243b47fa4f283daac59b6bd0ca561f224ad8364c4f82899a4f61536164cfa8b1e7de689a535fd81859873a9ac7d3a435893a60d6a59d2933892843e4228a4c377c1f04202aba8c00be85249c70eb99f3cd6df87053fc87bc310feb8a40c0a2a5c2e7e6553a1b9d1ba9f78bf8e64cf61159833d85d408a140fbb1af69ec1f4481219a5d3a7fc7575cd0a7f316a9b9daeda0df86cc57e53955e73318ce6226dc3fbc2f00adc5a6caf475b9ad17b5c3a73d37d754b7cd815812868b3f3d16ae8ec1ba05d6be3d536e4b87fed72741f34f36bc09f8860fae85af724c443409c6c4d24e4349ef28cc61ac1de7233b6fcafaddc9afe0e94f3b04e6af450a1de7d4cd2343d9d8f0c415fd95e212d3f7bac11e3ace728d7c9932d981c22a8efe64b281f5c2057d4008cf6a82edcd0d47f17053c5fbab42ee90c9cbd02eb32918b6bd51638d7ac1122b4438b3b387843f73b7a2d6184838da065e0429ff6c8415c199094a11ac0c6792f3ca8fc65785e6481751f238bddb40db40cb02c6bd1e93991b35f738ed1a8db6009ad99e2158ef5bedb0f89a5421c6525b7fc83a4f80ddb311e99107e1e9044cc270d3f5d3b6630589b75ec3ba10284964ac0f289d55138d951b9b5f7327845bd349d29cc2f23329c503a1054a2eae277ed274e206417dfa2242525d011365648ccab5c15243719324c7bd4c910a2e1b7f4d01f2aa2d6ae8ed3487bd6a5ef704715aa48a3e7131df51ea4d83963e0a796c8ed768f93161720bacad742826a215281c1890ff9703401b4ff5713a8a7c6a0ca23a24c43b79af40944c0376d60dd1b4c1e2c639d104c8ea06ce08b3ecdce1b4f3d4f156ecf0f478d3c712604387024308cac46b3d4f6ce1bb532347f85cea1b8e19f119b8e9b5f1c838d0a1572ea0b45825890058e5673e51bf3198c4bf2be0342401e2057a79a7242c189f744c80de5c3e4d5fecf1c94c04b7fe00513d01d47ea1e2e15ef723a82e7a45aa0f4a44e67f5607b4963b6084a6751f9df9fb8cfd1444834c2bde536d47243c6285ae757edba21cd51dea36d410e332e3cd6a4a9de1b1e9d921a597706383ed4c3ed0d4e573c3baa0c2e22e902a6c5e12222b795c84e130ca7c87df6d12a45259557c5ee7b816d540207254c14169b76daf35519bd88f64d533a1ca05ee9e39bb29b249ccb8bf224700ab44a91e5dfbe45f2549d59a7027d057b8d8960e4aa8e1a4b0f2df49d6e6c54da6b213b3a13aa0dcdcb9dcc4caf4536aa102eed77d59a188012b549e7be7fe61a95909b7c4e3128fe7f76b8587d9b3180ea3b8a2df3af3abef046394e7ab852179321c7e3d7450797aaa84075caad275ae8ad29716630b68e330cb6344f867c7a70e759a673720ebeb8a10e9461325472f56967cdf63392ab0fc26d6b265dc3b87cc0366e2785d28d70af54616f29cb3d0fc206517c41ce81a2cba70d7859f3d262f4fce273dfd74883481f59c610fb35078492b89df85967effc22f20a422fda54de20e17ef81087cfa305c9a1c16bd1a9597139e6bcad313c11b519ae2a746c7c591c23a2f44e9453296cdab6a4fb2e8987931dcc85adc6397a37a25af99013709c3e391e0e6ec1e1d80b6b2cf1826bfb15ec028ca6043f205d6f455ca8c56aabd52e448b7e31df20ecd8fc240237811eaee55ba3aba1f619cb84e4bc1aab8e0f8aa87aa9326d08ca4f738863d977615f206e3919db7d77bbeb34eccc7e721e28f4526bb5e5c6752ffbee5545eb0517d98d7ae6a098e4e8b9fe33672466c0bae6ea855ae7827f95691304bd8946b57b52ef02f7e81eda9a9b666339475de8e7d1d00d864181659e9eeab5c53b8e39761cf5eca13d24d48b96fb4d8fc50f74b14d41fbf4b26d981237b1307b26cd000511295074a79752f7dfbd5d378703a01f4eea57a468239351eb1a3cd3a74034dde372915af876e15be2ba65a874b2c32e078c2e58feeeb8656c01b85aaef2b20e0a41c6736eb36624a06d6968bf2ef8a7b81f3c878967a95948ddd66592bfe2d20b0abf01d03e19666bec68db20a40cebdbb084c509f99df69363629761b1963907607f4308c37d7c26bedcd1e4c8b3e2828a5a81e3179949057837e431f328924d066c3805ce65e92a79e3acd53bf59ab864f9b927c987646f7246b0f265e7aaf67108790a12317fdba2518f65db5e489d1ad2ea4cefb68542dbec2de66ea8c184fb5173c6f80fa8ab552f054bb808aa5d669c60134bd38d2ca58faec219827a1aa51fe2284518a7e4a52c56d8fa857cc54797880a8a14d397342ebc515240afd1554bd3e626a5362d9217b52dab12a7d2e065153adfbf649402042bb97ff7caa2aa44cc51485698519ef3c29ccedd06ec3b33357b7f3b35d7b6271b3a1b0091f1294923443698e57afdf78480071c5f3b272e62062ed27c9fd8c72f701bc296636ece414aa7cfd760db05cd80f1d506d535a98d5177855f543219f9c37734bf087e9cd727e756b99674cd948d075dd4676b4af7b647ad96c6036607bf0ccd04499db0ad54c9cfa12fe45702cbade3f7359efbb1ab672afbbf4f2ac568ed3cbd690b53fcb5ca57626077c8a89c688cc1c5e76707599d7d2f9499aa74e050cfd237d84d3cf908349d7b600cb40582d47954900ff764a7da81bae952a5ad8e65d86bd84f7f96d524a03a0a6d761a3a3a128fdeeb9d555bb54420d357533367112fadbf81923a0f5b566fe191d92b3e21351c9e9ef739f95a8e59821a2a9f9cd3ee303cbfeadcce771af334edbe1eda3a5f8c58cdb156d78873ffb7d19ec4c4e50fd1dc8226d8e77ab526f5814bd23349ca1291c7bd3ff31d2bd92925b4c0430fdf589bb90830b7ac35bccd9ad928cc2eecce4506263ec1409f977cda50446fe968df266d2b25cfbe19833ede86bbbbf898b4ce52ca96f2b05304928bc8c461e6fb67a4d1f47528e341ba9c211f8e2cdfcf47b38d37045f136ceaa85c0a9bc4fac9d8222f6cd5cf76979978367fb0e5fb884721816506806c940fc2110f19fd3dcaea5d190a19a617b6341c78b8810bd702e33eb29c6f4d6a678c162853d4b30bcf1dd152a28554f460995fd8a30b4c117e863a2fa4ee1d9c87fbff8053f2ada84bda2c80c74c52913f2385e8f3151509a935c7b4ba74e1921e4f11e13f106f8a0ba4c82cb3d80c1da606176d0f39d77cc7f036e1bcf6985c1ec73b214abbc9fdec64675e18f5969b6ecadcfbb2839d59ec1a9bd124877bed73ebe3d8d4f4295e100617784a5cd7b6cb9d8f015a6760bf249ffd986359f84c4de24a5e4ea27e425c07731fad7256da212e1a500cba9968cc310132237c0a783783c485f486b2dbd83de49ab51e6b08b9d1b83cd911e99962252319d5a483664cab0f8ff58c7dea351607dee62ec6218c8866d4ecad0de47359e60eb47134a1c70"}, &(0x7f00000002c0)=0x1008) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f00000004c0)={r10, 0x200}, &(0x7f0000000500)=0x8) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r2, &(0x7f0000000040)={0xb000001c}) epoll_pwait(r8, &(0x7f0000000180)=[{}], 0x1, 0xa2c, 0x0, 0x0) epoll_pwait(r8, &(0x7f00000000c0)=[{}], 0x1, 0xfff, 0x0, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x8, &(0x7f0000000a00)=@framed={{}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0x25}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_xfrm(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES16=r2, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414bb0000000000000000000000000000000032000000fe88000000000000000000000000000100"/65], 0x160}}, 0x0) r12 = socket$packet(0x11, 0x3, 0x300) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9000000000010104000000000000000002000000240001801400018008000100ac14140008000200ac1414bb0c00028005000100000000002400028014000180080001007f00000108000200ac1414aa0c000280050001000000000008000740000000002c000e800c0002800500"], 0x90}}, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r13, @ANYBLOB="000000000000000014001a80100004"], 0x34}}, 0x0) close(r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000008000000b703000000000000850000002d0000009500"/81], &(0x7f0000000000)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 44.350715ms ago: executing program 4 (id=1640): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x34}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000100)="5985", 0x2, 0x0, &(0x7f00000000c0)={0x11, 0xd, r4, 0x1, 0x0, 0x6, @remote}, 0x14) r5 = socket(0x10, 0x803, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r10, 0x0, r12, 0x0, 0xf3a, 0x0) write(r8, &(0x7f0000001100)="94", 0x1) read$alg(r11, &(0x7f0000000140)=""/116, 0x74) tee(r7, r12, 0x8000000000081, 0x0) close(r9) bind$llc(r6, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) sendfile(r6, r13, 0x0, 0xffffffff000) recvmmsg(r6, &(0x7f0000005c00), 0x0, 0x100, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r14, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 0s ago: executing program 0 (id=1641): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0x4a, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000000c0)={0x0, 0xa5, "847411f6b50343207eda6c8e0361eee81a76ee5846bee707575ddced7660a08681cc27fb847e736e7b98fc3c31635495738a7b24155f6d30360dcd7af0f58cf9f047c1f8c24bf250d17984f7a87a2d49a40a255981ee0571080bf48553c4dcf5d95258d354cca77d2ead2223a163d75b66869f765908d17da8dd152502b1179c17413d8f127d9e2edfef93a5b699ef671792382cdf61d643d321dfc3db15a550d791f4eb4c"}, &(0x7f0000000180)=0xad) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=@assoc_id=r3, &(0x7f0000000200)=0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000780)={'vcan0\x00'}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000066000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0xa}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x1, 0x16, 0xb4, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB="540000000101010100000000000000000200000006001240000400002c0001800c0002800500010000000000060003400000000014000180080001007f00000108000200000000000c001980080001000d000000f06c8a01864843255fbcc641d8148a841ea40a9b9c8b28a030f58d66bd2e829d26d93898b214150bcddc9037c70c8cfac91869f7b3288e2ad1f3479ca267b0634d2c034f70cdbb6f024efc44c1e66a67fb920801c4d6616ba2cb143093036f648f45785fc8257e961b65b380f36cdedea3bf419904cf77c1ad26ae90f1a06aebdd437c7b4547d027b27646593575d34a145abcb7631b43a8"], 0x54}, 0x1, 0x0, 0x0, 0x20000844}, 0x2e2f76ab035b98ee) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$inet6(0xa, 0x80803, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x5}}, 0xe8) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write$bt_hci(r7, &(0x7f0000000140)=ANY=[@ANYBLOB="01"], 0x27) connect$inet6(r6, &(0x7f00000000c0), 0x1c) socket$kcm(0x2, 0xa, 0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_delroute={0x24, 0x18, 0x901, 0x70bd26, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x800) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_BINDTODEVICE_wg(r9, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4) connect$inet(r9, &(0x7f0000000000)={0x2, 0x20, @loopback}, 0x10) kernel console output (not intermixed with test programs): (ip6gretap0) entered blocking state [ 81.413496][ T6501] bridge0: port 3(ip6gretap0) entered forwarding state [ 81.446927][ T6513] netem: change failed [ 84.002669][ T6551] netlink: 'syz.1.163': attribute type 10 has an invalid length. [ 84.019567][ T6555] netlink: 20 bytes leftover after parsing attributes in process `syz.4.164'. [ 84.028870][ T6555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.164'. [ 84.207179][ T6570] netlink: 732 bytes leftover after parsing attributes in process `syz.0.168'. [ 84.265055][ T6570] netlink: 732 bytes leftover after parsing attributes in process `syz.0.168'. [ 84.317955][ T6574] xt_SECMARK: invalid mode: 0 [ 84.365996][ T6570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.168'. [ 84.403766][ T6578] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 84.511516][ T6578] hsr0: entered allmulticast mode [ 84.516614][ T6578] hsr_slave_0: entered allmulticast mode [ 84.549684][ T6578] hsr_slave_1: entered allmulticast mode [ 84.877650][ T6592] netlink: 36 bytes leftover after parsing attributes in process `syz.2.173'. [ 84.907474][ T6592] netlink: 16 bytes leftover after parsing attributes in process `syz.2.173'. [ 84.921550][ T6592] netlink: 36 bytes leftover after parsing attributes in process `syz.2.173'. [ 84.934735][ T6592] netlink: 36 bytes leftover after parsing attributes in process `syz.2.173'. [ 85.137902][ T6609] netlink: 20 bytes leftover after parsing attributes in process `syz.1.178'. [ 85.293937][ C1] Unknown status report in ack skb [ 85.484150][ T6621] xt_TPROXY: Can be used only with -p tcp or -p udp [ 85.933766][ T6641] syz.4.188 (6641) used greatest stack depth: 19088 bytes left [ 85.938179][ T6646] netlink: 'syz.0.190': attribute type 1 has an invalid length. [ 86.000874][ T6649] ipt_rpfilter: unknown options [ 86.658607][ T6683] netlink: 'syz.4.200': attribute type 21 has an invalid length. [ 86.671078][ T6683] IPv6: NLM_F_CREATE should be specified when creating new route [ 86.694665][ T6683] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 86.702387][ T6683] IPv6: NLM_F_CREATE should be set when creating new route [ 86.709657][ T6683] IPv6: NLM_F_CREATE should be set when creating new route [ 86.716975][ T6683] IPv6: NLM_F_CREATE should be set when creating new route [ 86.856541][ T6686] netlink: 'syz.3.202': attribute type 1 has an invalid length. [ 87.801498][ T6729] netlink: 'syz.2.214': attribute type 1 has an invalid length. [ 87.993252][ T6734] netlink: 'syz.2.214': attribute type 1 has an invalid length. [ 89.127596][ T6733] netlink: 'syz.4.215': attribute type 10 has an invalid length. [ 89.164811][ T6733] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 89.258027][ T6739] __nla_validate_parse: 12 callbacks suppressed [ 89.258046][ T6739] netlink: 16 bytes leftover after parsing attributes in process `syz.4.218'. [ 89.285316][ T6737] netlink: 'syz.3.216': attribute type 4 has an invalid length. [ 89.368826][ T6737] netlink: 'syz.3.216': attribute type 4 has an invalid length. [ 89.406008][ T6737] netlink: 52 bytes leftover after parsing attributes in process `syz.3.216'. [ 89.464554][ T6750] netlink: 8 bytes leftover after parsing attributes in process `syz.4.221'. [ 89.538832][ T6755] netlink: 20 bytes leftover after parsing attributes in process `syz.4.223'. [ 89.570754][ T6755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.223'. [ 89.628414][ T6753] netlink: 12 bytes leftover after parsing attributes in process `syz.1.222'. [ 89.847808][ T6765] netlink: 'syz.4.225': attribute type 32 has an invalid length. [ 91.589304][ T6773] netlink: 'syz.4.228': attribute type 10 has an invalid length. [ 91.717379][ T6793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.233'. [ 91.751264][ T6793] netlink: 28 bytes leftover after parsing attributes in process `syz.0.233'. [ 91.807461][ T6801] netlink: 20 bytes leftover after parsing attributes in process `syz.3.236'. [ 91.826770][ T6801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.236'. [ 91.846870][ T6795] lo speed is unknown, defaulting to 1000 [ 91.869595][ T6795] lo speed is unknown, defaulting to 1000 [ 91.882886][ T6795] lo speed is unknown, defaulting to 1000 [ 91.902007][ T6797] syz.2.235 (6797) used obsolete PPPIOCDETACH ioctl [ 91.918692][ T6795] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 91.973814][ T6795] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 92.070047][ T6795] lo speed is unknown, defaulting to 1000 [ 92.116772][ T6795] lo speed is unknown, defaulting to 1000 [ 92.137592][ T6795] lo speed is unknown, defaulting to 1000 [ 92.172233][ T6795] lo speed is unknown, defaulting to 1000 [ 92.198180][ T6795] lo speed is unknown, defaulting to 1000 [ 92.445969][ T6823] netlink: 'syz.0.245': attribute type 10 has an invalid length. [ 94.271684][ T6847] __nla_validate_parse: 5 callbacks suppressed [ 94.271704][ T6847] netlink: 12 bytes leftover after parsing attributes in process `syz.4.252'. [ 94.317726][ T6847] netlink: 36 bytes leftover after parsing attributes in process `syz.4.252'. [ 94.429495][ T6862] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 94.511128][ T6862] vlan2: entered allmulticast mode [ 94.529348][ T6862] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 94.575113][ T6862] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 94.620189][ T6868] netlink: 'syz.2.258': attribute type 10 has an invalid length. [ 94.702505][ T6874] netlink: 4 bytes leftover after parsing attributes in process `syz.3.261'. [ 94.765277][ T6876] netlink: 12 bytes leftover after parsing attributes in process `syz.2.262'. [ 94.785342][ T6876] netlink: 'syz.2.262': attribute type 1 has an invalid length. [ 94.793273][ T6876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.262'. [ 94.824929][ T6878] xt_l2tp: v2 tid > 0xffff: 150994944 [ 94.832162][ T6878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.263'. [ 94.841601][ T6878] netlink: 12 bytes leftover after parsing attributes in process `syz.4.263'. [ 94.852146][ T6878] netlink: 'syz.4.263': attribute type 15 has an invalid length. [ 94.871821][ T6880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.264'. [ 94.886742][ T6880] netlink: 28 bytes leftover after parsing attributes in process `syz.2.264'. [ 94.929549][ T6882] netlink: 12 bytes leftover after parsing attributes in process `syz.4.265'. [ 95.001282][ T6884] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 95.245672][ T6898] netlink: 'syz.1.271': attribute type 1 has an invalid length. [ 95.390511][ T6903] netlink: 'syz.4.273': attribute type 10 has an invalid length. [ 95.575339][ T6911] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 95.595890][ T6917] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 95.865281][ T6932] sctp: [Deprecated]: syz.3.282 (pid 6932) Use of struct sctp_assoc_value in delayed_ack socket option. [ 95.865281][ T6932] Use struct sctp_sack_info instead [ 98.008825][ T6947] netlink: 'syz.2.285': attribute type 10 has an invalid length. [ 98.049508][ T6955] lo speed is unknown, defaulting to 1000 [ 98.169862][ T3544] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.276949][ T6970] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 99.505817][ T7036] __nla_validate_parse: 13 callbacks suppressed [ 99.505837][ T7036] netlink: 28 bytes leftover after parsing attributes in process `syz.3.308'. [ 99.558593][ T7036] netlink: 28 bytes leftover after parsing attributes in process `syz.3.308'. [ 99.589880][ T7036] team0: entered promiscuous mode [ 99.640652][ T7036] team_slave_0: entered promiscuous mode [ 99.646686][ T7036] team_slave_1: entered promiscuous mode [ 99.745885][ T7036] bridge0: entered promiscuous mode [ 99.791171][ T7058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.313'. [ 99.819412][ T7058] netlink: 28 bytes leftover after parsing attributes in process `syz.4.313'. [ 100.688636][ T7102] lo speed is unknown, defaulting to 1000 [ 100.906278][ T7121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.328'. [ 100.984377][ T7121] netlink: 28 bytes leftover after parsing attributes in process `syz.1.328'. [ 101.305720][ T7128] lo speed is unknown, defaulting to 1000 [ 101.462392][ T7150] netlink: 12 bytes leftover after parsing attributes in process `syz.1.334'. [ 101.704195][ T7106] netlink: 'syz.0.323': attribute type 9 has an invalid length. [ 101.947069][ T7177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.342'. [ 101.997925][ T7177] netlink: 28 bytes leftover after parsing attributes in process `syz.2.342'. [ 102.197858][ T7185] trusted_key: syz.4.344 sent an empty control message without MSG_MORE. [ 102.335066][ T7185] netlink: 'syz.4.344': attribute type 12 has an invalid length. [ 102.355234][ T7190] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 102.640316][ T7215] netlink: 'syz.1.349': attribute type 10 has an invalid length. [ 102.667902][ T7217] netlink: 12 bytes leftover after parsing attributes in process `syz.3.350'. [ 103.482751][ T7245] lo speed is unknown, defaulting to 1000 [ 103.615661][ T7255] lo speed is unknown, defaulting to 1000 [ 103.836049][ T7244] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 104.028640][ T7261] netlink: 'syz.1.362': attribute type 10 has an invalid length. [ 104.061922][ T7259] xt_recent: Unsupported userspace flags (00000042) [ 104.953534][ T7301] Cannot find set identified by id 632 to match [ 105.033056][ T7301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 105.055376][ T7301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.129249][ T7307] netlink: 'syz.0.373': attribute type 10 has an invalid length. [ 105.193549][ T7313] __nla_validate_parse: 3 callbacks suppressed [ 105.193569][ T7313] netlink: 12 bytes leftover after parsing attributes in process `syz.4.374'. [ 105.237563][ T7315] rdma_rxe: rxe_newlink: failed to add lo [ 105.278640][ T7317] lo speed is unknown, defaulting to 1000 [ 105.392317][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout [ 105.512096][ T7324] netlink: 4 bytes leftover after parsing attributes in process `syz.3.381'. [ 105.547896][ T7324] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.556579][ T7324] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.575752][ T7324] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.584680][ T7324] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.598702][ T7324] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 105.606371][ T7324] batman_adv: batadv0: Removing interface: ipvlan2 [ 105.704842][ T7338] netlink: 'syz.1.387': attribute type 10 has an invalid length. [ 105.872814][ T7346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.389'. [ 106.248061][ T7360] netlink: 56 bytes leftover after parsing attributes in process `syz.1.393'. [ 106.861445][ T7378] netlink: 'syz.0.399': attribute type 1 has an invalid length. [ 106.893956][ T7381] netlink: 'syz.2.400': attribute type 10 has an invalid length. [ 107.333806][ T7393] netlink: 'syz.2.405': attribute type 2 has an invalid length. [ 107.404845][ T7396] netlink: 'syz.2.406': attribute type 10 has an invalid length. [ 107.661202][ T7405] tap0: tun_chr_ioctl cmd 1074025677 [ 107.675619][ T7405] tap0: linktype set to 821 [ 107.710896][ T7406] wg2: entered promiscuous mode [ 107.744899][ T7406] team0: Device wg2 is of different type [ 107.787111][ T7406] lo speed is unknown, defaulting to 1000 [ 107.947526][ T7422] netlink: 24 bytes leftover after parsing attributes in process `syz.0.416'. [ 108.007139][ T7422] netlink: 'syz.0.416': attribute type 7 has an invalid length. [ 108.024201][ T7424] netlink: 4 bytes leftover after parsing attributes in process `syz.3.417'. [ 108.079935][ T7426] team0: entered promiscuous mode [ 108.087781][ T7426] team_slave_0: entered promiscuous mode [ 108.104257][ T7426] team_slave_1: entered promiscuous mode [ 108.130301][ T7425] team0: left promiscuous mode [ 108.145078][ T7425] team_slave_0: left promiscuous mode [ 108.164527][ T7425] team_slave_1: left promiscuous mode [ 108.185703][ T7430] netlink: 'syz.0.420': attribute type 10 has an invalid length. [ 108.566856][ T7448] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.575280][ T7448] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.785506][ T7462] netlink: 12 bytes leftover after parsing attributes in process `syz.4.432'. [ 108.824609][ T7455] bridge0: port 3(vlan0) entered blocking state [ 108.872097][ T7455] bridge0: port 3(vlan0) entered disabled state [ 108.905024][ T7462] Cannot find del_set index 286 as target [ 108.913238][ T7455] vlan0: entered allmulticast mode [ 108.928923][ T7455] batadv0: entered allmulticast mode [ 108.965739][ T7455] vlan0: entered promiscuous mode [ 108.977576][ T7455] batadv0: entered promiscuous mode [ 109.030359][ T7468] netlink: 'syz.3.433': attribute type 10 has an invalid length. [ 109.513662][ T7486] netlink: 'syz.2.441': attribute type 1 has an invalid length. [ 109.521966][ T7486] netlink: 'syz.2.441': attribute type 4 has an invalid length. [ 109.529799][ T7486] netlink: 15334 bytes leftover after parsing attributes in process `syz.2.441'. [ 109.569197][ T7486] netlink: 'syz.2.441': attribute type 58 has an invalid length. [ 109.589173][ T7486] netlink: 20 bytes leftover after parsing attributes in process `syz.2.441'. [ 109.621327][ T7493] netlink: get zone limit has 8 unknown bytes [ 109.630780][ T5855] Bluetooth: hci4: command 0x0405 tx timeout [ 109.710962][ T7489] netlink: 'syz.3.442': attribute type 3 has an invalid length. [ 109.864304][ T7495] netlink: 'syz.4.444': attribute type 1 has an invalid length. [ 109.944716][ T7504] netlink: 'syz.0.446': attribute type 10 has an invalid length. [ 109.996917][ T7500] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 110.030365][ T7500] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 110.157677][ T7515] netlink: 12 bytes leftover after parsing attributes in process `syz.1.450'. [ 110.227704][ T7520] batman_adv: batadv0: Adding interface: dummy0 [ 110.234341][ T7520] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.276876][ T7520] batman_adv: batadv0: Interface activated: dummy0 [ 110.325149][ T7525] batadv0: mtu less than device minimum [ 110.350226][ T7525] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 110.362801][ T7525] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 110.375250][ T7525] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 110.387746][ T7525] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 110.400332][ T7525] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 110.412878][ T7525] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 110.473999][ T7521] netlink: 'syz.2.452': attribute type 4 has an invalid length. [ 110.491313][ T8] lo speed is unknown, defaulting to 1000 [ 110.508398][ T7521] netlink: 'syz.2.452': attribute type 4 has an invalid length. [ 110.548804][ T969] lo speed is unknown, defaulting to 1000 [ 110.573206][ T7521] lo speed is unknown, defaulting to 1000 [ 110.602919][ T7531] netlink: 'syz.0.454': attribute type 10 has an invalid length. [ 110.833356][ T7541] netlink: 4 bytes leftover after parsing attributes in process `syz.0.456'. [ 110.864016][ T7524] xt_recent: Unsupported userspace flags (00000042) [ 111.070125][ T7552] netlink: 'syz.1.459': attribute type 10 has an invalid length. [ 111.121231][ T7548] lo speed is unknown, defaulting to 1000 [ 111.710813][ T5855] Bluetooth: hci4: command 0x0405 tx timeout [ 113.221222][ T7569] team0: Port device macvlan1 added [ 113.252251][ T7571] team0: Port device macvlan1 removed [ 113.258057][ T7576] netlink: 36 bytes leftover after parsing attributes in process `syz.0.468'. [ 113.271061][ T7580] netlink: 6 bytes leftover after parsing attributes in process `syz.3.470'. [ 113.338829][ T7588] netlink: 16 bytes leftover after parsing attributes in process `syz.0.472'. [ 113.447248][ T7588] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.548843][ T7593] bond1: (slave bridge2): making interface the new active one [ 113.562739][ T7593] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 113.595175][ T7607] Bluetooth: MGMT ver 1.23 [ 113.614076][ T7604] netlink: 12 bytes leftover after parsing attributes in process `syz.4.477'. [ 113.680137][ T7588] vlan2: entered promiscuous mode [ 113.700996][ T7588] bond1: entered promiscuous mode [ 113.706240][ T7588] bridge2: entered promiscuous mode [ 113.713946][ T7588] vlan2: entered allmulticast mode [ 113.719306][ T7588] bond1: entered allmulticast mode [ 113.724880][ T7588] bridge2: entered allmulticast mode [ 113.892813][ T7619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.483'. [ 113.904473][ T7619] lo speed is unknown, defaulting to 1000 [ 114.087089][ T7625] lo speed is unknown, defaulting to 1000 [ 114.125908][ T7630] netlink: 28 bytes leftover after parsing attributes in process `syz.2.486'. [ 114.232242][ T7636] netlink: 12 bytes leftover after parsing attributes in process `syz.4.489'. [ 114.414660][ T7642] netlink: 76 bytes leftover after parsing attributes in process `syz.0.492'. [ 114.721181][ T7657] Bluetooth: MGMT ver 1.23 [ 114.753611][ T7660] netlink: 12 bytes leftover after parsing attributes in process `syz.0.498'. [ 114.940075][ T7665] siw: device registration error -23 [ 115.268252][ T7684] x_tables: duplicate underflow at hook 3 [ 115.359598][ T7684] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 115.744343][ T7684] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 116.184665][ T7703] __nla_validate_parse: 2 callbacks suppressed [ 116.184684][ T7703] netlink: 12 bytes leftover after parsing attributes in process `syz.2.513'. [ 116.272841][ T7707] netlink: 32 bytes leftover after parsing attributes in process `syz.1.515'. [ 116.308571][ T7710] netlink: 12 bytes leftover after parsing attributes in process `syz.4.516'. [ 116.349916][ T7714] netlink: 24 bytes leftover after parsing attributes in process `syz.1.515'. [ 116.396499][ T2934] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.416206][ T2934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.498496][ T7724] vlan3: entered promiscuous mode [ 116.782518][ T7736] IPVS: length: 60 != 8 [ 116.788910][ T7742] netlink: 76 bytes leftover after parsing attributes in process `syz.3.526'. [ 116.968404][ T7745] netlink: 12 bytes leftover after parsing attributes in process `syz.4.527'. [ 117.439562][ T7761] validate_nla: 4 callbacks suppressed [ 117.439582][ T7761] netlink: 'syz.2.531': attribute type 10 has an invalid length. [ 117.739019][ T7776] netlink: 'syz.3.538': attribute type 29 has an invalid length. [ 117.747708][ T7776] netlink: 4 bytes leftover after parsing attributes in process `syz.3.538'. [ 118.032671][ T7790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.544'. [ 118.053742][ T7790] netlink: 44 bytes leftover after parsing attributes in process `syz.2.544'. [ 118.335595][ T7804] netlink: 256 bytes leftover after parsing attributes in process `syz.2.549'. [ 118.892420][ T7844] netlink: 'syz.3.565': attribute type 1 has an invalid length. [ 118.926887][ T7841] Cannot find del_set index 286 as target [ 119.275112][ T7864] pim6reg: entered allmulticast mode [ 119.323418][ T7864] pim6reg: left allmulticast mode [ 119.433205][ T7875] netlink: 'syz.1.577': attribute type 10 has an invalid length. [ 120.619659][ T7929] netlink: 'syz.4.599': attribute type 1 has an invalid length. [ 120.639106][ T7929] pimreg3: entered allmulticast mode [ 120.655435][ T7929] netlink: 'syz.4.599': attribute type 1 has an invalid length. [ 120.678181][ T7929] pimreg3: left allmulticast mode [ 121.652876][ T7963] __nla_validate_parse: 4 callbacks suppressed [ 121.652894][ T7963] netlink: 12 bytes leftover after parsing attributes in process `syz.0.609'. [ 121.788521][ T7969] syz.1.613[7969] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.788622][ T7969] syz.1.613[7969] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.812113][ T7969] syz.1.613[7969] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.906662][ T7972] netlink: 'syz.3.615': attribute type 12 has an invalid length. [ 122.106690][ T7984] netlink: 'syz.4.618': attribute type 4 has an invalid length. [ 122.200257][ T7984] netlink: 'syz.4.618': attribute type 4 has an invalid length. [ 122.234811][ T7984] netlink: 52 bytes leftover after parsing attributes in process `syz.4.618'. [ 122.315666][ T7989] xt_l2tp: v2 tid > 0xffff: 150994944 [ 122.316707][ T7984] lo speed is unknown, defaulting to 1000 [ 122.335277][ T7989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.620'. [ 122.345335][ T7989] netlink: 12 bytes leftover after parsing attributes in process `syz.2.620'. [ 122.355946][ T7989] netlink: 'syz.2.620': attribute type 15 has an invalid length. [ 122.452517][ T7997] netlink: 12 bytes leftover after parsing attributes in process `syz.2.625'. [ 122.831742][ C0] net_ratelimit: 15 callbacks suppressed [ 122.831757][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 123.059649][ T8032] 8021q: adding VLAN 0 to HW filter on device bond2 [ 123.091055][ T8032] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 123.163594][ T8039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.636'. [ 123.375681][ T8039] bond2 (unregistering): (slave gretap1): Releasing backup interface [ 123.394324][ T8039] bond2 (unregistering): Released all slaves [ 123.447011][ T8042] netlink: 12 bytes leftover after parsing attributes in process `syz.0.639'. [ 123.559628][ T8035] delete_channel: no stack [ 123.730170][ T8056] netlink: 'syz.2.643': attribute type 10 has an invalid length. [ 123.803894][ T8058] netlink: 48 bytes leftover after parsing attributes in process `syz.1.644'. [ 124.019886][ T8076] 8021q: adding VLAN 0 to HW filter on device bond2 [ 124.036499][ T8077] openvswitch: netlink: Key 0 has unexpected len 8 expected 0 [ 124.052934][ T8076] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 124.200964][ T8091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.652'. [ 124.406584][ T8091] bond2 (unregistering): (slave gretap1): Releasing backup interface [ 124.427499][ T8091] bond2 (unregistering): Released all slaves [ 124.468679][ T8100] netlink: 'syz.2.658': attribute type 10 has an invalid length. [ 124.868508][ T8122] netlink: 12 bytes leftover after parsing attributes in process `syz.4.663'. [ 124.891816][ T8129] ip6t_srh: unknown srh match flags 5294 [ 124.957723][ T8129] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 124.976984][ T8130] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 125.125357][ T8143] netlink: 'syz.4.670': attribute type 10 has an invalid length. [ 125.498941][ T8157] geneve2: entered promiscuous mode [ 125.506349][ T8157] geneve2: entered allmulticast mode [ 125.882122][ T8179] netlink: 'syz.4.683': attribute type 10 has an invalid length. [ 126.692228][ T2975] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.751288][ T8208] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.759656][ T8210] xt_CT: No such helper "snmp" [ 126.784367][ T8218] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 126.849700][ T8223] netlink: 'syz.3.695': attribute type 10 has an invalid length. [ 126.907630][ T8218] __nla_validate_parse: 9 callbacks suppressed [ 126.907650][ T8218] netlink: 4 bytes leftover after parsing attributes in process `syz.2.692'. [ 127.165284][ T8218] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 127.186875][ T8218] bond1 (unregistering): Released all slaves [ 127.256963][ T8238] siw: device registration error -23 [ 127.359509][ T8243] netlink: 'syz.3.700': attribute type 12 has an invalid length. [ 127.718510][ T8256] vlan3: entered promiscuous mode [ 127.740692][ T8256] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 127.774369][ T8256] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 127.869275][ T8265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.717'. [ 127.944171][ T8260] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 128.196960][ T8272] lo speed is unknown, defaulting to 1000 [ 128.238156][ T8274] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.246850][ T8274] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.395517][ T8274] bridge0: port 3(vlan3) entered blocking state [ 128.420795][ T8274] bridge0: port 3(vlan3) entered disabled state [ 128.438095][ T8274] vlan3: entered allmulticast mode [ 128.455563][ T8274] batadv0: entered allmulticast mode [ 128.478833][ T8274] vlan3: entered promiscuous mode [ 128.490798][ T8274] batadv0: entered promiscuous mode [ 128.497916][ T8282] netlink: 'syz.1.709': attribute type 10 has an invalid length. [ 128.713030][ T8288] 8021q: adding VLAN 0 to HW filter on device bond1 [ 128.739432][ T8287] team0: Port device macvlan1 added [ 128.798640][ T8287] team0: Port device macvlan1 removed [ 128.818195][ T8288] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 128.828511][ T8292] netlink: 28 bytes leftover after parsing attributes in process `syz.0.713'. [ 128.838009][ T8292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.713'. [ 128.884218][ T8294] netlink: 4 bytes leftover after parsing attributes in process `syz.4.712'. [ 129.027848][ T8302] netlink: 16 bytes leftover after parsing attributes in process `syz.3.726'. [ 129.183748][ T8294] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 129.218576][ T8294] bond1 (unregistering): Released all slaves [ 129.409156][ T8312] netlink: 'syz.0.718': attribute type 4 has an invalid length. [ 129.442903][ T8312] netlink: 'syz.0.718': attribute type 4 has an invalid length. [ 129.500453][ T8316] vlan2: entered promiscuous mode [ 129.510407][ T8316] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 129.523333][ T8316] mac80211_hwsim hwsim5 wlan0: left promiscuous mode [ 129.601107][ T8312] lo speed is unknown, defaulting to 1000 [ 129.816645][ T8326] netlink: 'syz.0.723': attribute type 10 has an invalid length. [ 129.960940][ T8337] netlink: 8 bytes leftover after parsing attributes in process `syz.3.728'. [ 129.999599][ T8337] Dead loop on virtual device ipvlan1, fix it urgently! [ 130.009443][ T47] Dead loop on virtual device ipvlan1, fix it urgently! [ 130.034106][ T8338] wg2: entered promiscuous mode [ 130.045225][ T8338] team0: Device wg2 is of different type [ 130.056717][ T8340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.727'. [ 130.089917][ T8338] lo speed is unknown, defaulting to 1000 [ 130.483027][ T47] Dead loop on virtual device ipvlan1, fix it urgently! [ 130.639333][ T8353] netlink: 16 bytes leftover after parsing attributes in process `syz.2.732'. [ 130.861464][ T8356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.734'. [ 130.968358][ T8356] lo speed is unknown, defaulting to 1000 [ 131.096245][ T8337] syz.3.728 (8337) used greatest stack depth: 7128 bytes left [ 131.244229][ T8367] netlink: 'syz.1.736': attribute type 10 has an invalid length. [ 131.289052][ T8370] siw: device registration error -23 [ 131.409822][ T8380] pim6reg: entered allmulticast mode [ 131.435099][ T8380] pim6reg: left allmulticast mode [ 131.574425][ T8388] vlan3: entered allmulticast mode [ 131.580847][ T8388] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 131.592130][ T8388] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 131.951892][ T5855] Bluetooth: hci4: command 0x0405 tx timeout [ 133.458928][ T8417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.747'. [ 133.463245][ T8415] netlink: 12 bytes leftover after parsing attributes in process `syz.3.748'. [ 133.665445][ T8423] siw: device registration error -23 [ 133.992075][ T8444] netlink: 'syz.2.757': attribute type 1 has an invalid length. [ 134.042864][ T5855] Bluetooth: hci4: command 0x0405 tx timeout [ 134.064866][ T8447] pim6reg: entered allmulticast mode [ 134.088183][ T8447] pim6reg: left allmulticast mode [ 134.663605][ T8466] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 136.624273][ T8457] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 136.648908][ T8466] vlan2: entered allmulticast mode [ 136.666871][ T8466] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 136.680358][ T8466] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 136.700267][ T8472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.763'. [ 136.709599][ T8472] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.717181][ T8472] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.725333][ T8472] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.734157][ T8472] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.771307][ C0] Unknown status report in ack skb [ 136.786496][ T8467] netlink: 288 bytes leftover after parsing attributes in process `syz.1.762'. [ 136.903496][ T8493] netlink: 20 bytes leftover after parsing attributes in process `syz.4.766'. [ 136.950857][ T8493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.766'. [ 137.050499][ T8491] netlink: 'syz.0.765': attribute type 12 has an invalid length. [ 137.317195][ T8513] pim6reg: entered allmulticast mode [ 137.362620][ T8513] pim6reg: left allmulticast mode [ 137.992002][ T8546] netlink: 'syz.0.784': attribute type 10 has an invalid length. [ 138.210021][ T8551] netlink: 'syz.3.785': attribute type 1 has an invalid length. [ 138.878048][ T8581] netlink: 'syz.1.797': attribute type 10 has an invalid length. [ 139.231333][ T8596] netlink: 'syz.4.801': attribute type 10 has an invalid length. [ 139.257713][ T8596] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 139.493736][ T8602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.804'. [ 139.567901][ T8604] IPVS: length: 60 != 8 [ 139.757455][ T8610] netlink: 'syz.0.808': attribute type 10 has an invalid length. [ 139.944055][ T8615] netlink: 'syz.1.810': attribute type 10 has an invalid length. [ 139.966626][ T8615] netlink: 132 bytes leftover after parsing attributes in process `syz.1.810'. [ 140.084423][ T8621] netlink: 'syz.2.812': attribute type 10 has an invalid length. [ 140.138456][ T8621] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 140.228654][ T8627] netlink: 'syz.1.813': attribute type 21 has an invalid length. [ 140.239473][ T8627] IPv6: NLM_F_CREATE should be specified when creating new route [ 140.253651][ T8627] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 140.260984][ T8627] IPv6: NLM_F_CREATE should be set when creating new route [ 140.268241][ T8627] IPv6: NLM_F_CREATE should be set when creating new route [ 140.275522][ T8627] IPv6: NLM_F_CREATE should be set when creating new route [ 140.614726][ T8639] IPVS: length: 60 != 8 [ 140.644910][ T8637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.817'. [ 140.719676][ T8641] netlink: 'syz.4.819': attribute type 10 has an invalid length. [ 141.938432][ T8657] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.508382][ T8667] pim6reg: entered allmulticast mode [ 142.514131][ T8667] pim6reg: left allmulticast mode [ 144.455529][ T8703] x_tables: duplicate underflow at hook 3 [ 144.494189][ T8703] netlink: 20 bytes leftover after parsing attributes in process `syz.0.833'. [ 144.546027][ T8703] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 144.564804][ T8703] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 144.768954][ T8718] lo speed is unknown, defaulting to 1000 [ 145.263607][ T8725] pim6reg: entered allmulticast mode [ 145.282725][ T8725] pim6reg: left allmulticast mode [ 147.456830][ T8752] lo speed is unknown, defaulting to 1000 [ 148.189071][ T8788] lo speed is unknown, defaulting to 1000 [ 148.566442][ T8798] netlink: 16 bytes leftover after parsing attributes in process `syz.0.864'. [ 148.917554][ T8801] lo speed is unknown, defaulting to 1000 [ 149.308858][ T8828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.874'. [ 149.488400][ T8838] pimreg: entered allmulticast mode [ 149.536860][ T8838] hsr0: left allmulticast mode [ 149.543918][ T8838] hsr_slave_0: left allmulticast mode [ 149.558738][ T8838] hsr_slave_1: left allmulticast mode [ 149.566013][ T8838] pimreg: left allmulticast mode [ 149.575855][ T8844] ip6t_srh: unknown srh match flags 5294 [ 149.651823][ T8844] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 149.785344][ T8852] netlink: 12 bytes leftover after parsing attributes in process `syz.3.877'. [ 149.839524][ T8844] netlink: 12 bytes leftover after parsing attributes in process `syz.4.876'. [ 150.334617][ T8877] validate_nla: 1 callbacks suppressed [ 150.334635][ T8877] netlink: 'syz.1.888': attribute type 10 has an invalid length. [ 150.363924][ T8877] batman_adv: batadv0: Interface deactivated: dummy0 [ 150.391884][ T8877] batman_adv: batadv0: Removing interface: dummy0 [ 150.431912][ T8877] team0: Port device dummy0 added [ 150.451463][ T8876] lo speed is unknown, defaulting to 1000 [ 150.451496][ T8882] netlink: 148 bytes leftover after parsing attributes in process `syz.4.887'. [ 150.492870][ T8884] netlink: 12 bytes leftover after parsing attributes in process `syz.2.889'. [ 151.598343][ T8915] netlink: 12 bytes leftover after parsing attributes in process `syz.0.901'. [ 151.659952][ T8920] netlink: 'syz.4.903': attribute type 10 has an invalid length. [ 151.694825][ T8920] team0: Port device dummy0 added [ 152.077412][ T8935] netlink: 20 bytes leftover after parsing attributes in process `syz.4.908'. [ 152.093330][ T8935] netlink: 'syz.4.908': attribute type 21 has an invalid length. [ 152.101936][ T8935] netlink: 132 bytes leftover after parsing attributes in process `syz.4.908'. [ 152.168550][ T8940] netlink: 56 bytes leftover after parsing attributes in process `syz.2.909'. [ 152.255612][ T8937] infiniband syz1: set down [ 152.260794][ T8937] infiniband syz1: added ipvlan1 [ 152.304313][ T8937] RDS/IB: syz1: added [ 152.309243][ T8937] smc: adding ib device syz1 with port count 1 [ 152.322813][ T8937] smc: ib device syz1 port 1 has pnetid [ 153.000149][ T8965] x_tables: duplicate underflow at hook 3 [ 153.065899][ T8965] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 153.079826][ T8965] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 153.298269][ T8971] netlink: 'syz.1.923': attribute type 4 has an invalid length. [ 153.317064][ T8971] hsr_slave_0: left promiscuous mode [ 153.330013][ T8971] hsr_slave_1: left promiscuous mode [ 154.005341][ T9002] __nla_validate_parse: 3 callbacks suppressed [ 154.005355][ T9002] netlink: 4 bytes leftover after parsing attributes in process `syz.3.934'. [ 154.125175][ T9002] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 154.173581][ T9002] netlink: 76 bytes leftover after parsing attributes in process `syz.3.934'. [ 154.399742][ T9011] syzkaller0: entered promiscuous mode [ 154.405484][ T9011] syzkaller0: entered allmulticast mode [ 154.417918][ T9014] lo speed is unknown, defaulting to 1000 [ 154.475965][ T9011] hsr0: entered promiscuous mode [ 157.800467][ T9056] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 157.830705][ T9059] netlink: 'syz.2.945': attribute type 10 has an invalid length. [ 157.887954][ T9056] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 157.972160][ T9064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.949'. [ 158.035278][ T47] IPVS: starting estimator thread 0... [ 158.047222][ T9067] IPVS: wrr: SCTP 127.0.0.1:0 - no destination available [ 158.066761][ T9067] netlink: 'syz.2.950': attribute type 4 has an invalid length. [ 158.163036][ T9069] IPVS: using max 20 ests per chain, 48000 per kthread [ 158.272694][ T9079] netlink: 32 bytes leftover after parsing attributes in process `syz.1.953'. [ 158.292151][ T9082] netlink: 76 bytes leftover after parsing attributes in process `syz.2.954'. [ 158.337780][ T9085] netlink: 'syz.0.956': attribute type 10 has an invalid length. [ 158.527859][ T9097] bridge0: port 3(ip6gretap0) entered disabled state [ 158.534819][ T9097] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.570270][ T9100] netlink: 12 bytes leftover after parsing attributes in process `syz.1.961'. [ 158.587465][ T9097] vxcan0: entered promiscuous mode [ 158.593297][ T9097] vlan0: entered promiscuous mode [ 158.600342][ T9097] vxcan0: left promiscuous mode [ 158.678912][ T9104] netlink: 12 bytes leftover after parsing attributes in process `syz.1.964'. [ 158.775580][ T9111] netlink: 12 bytes leftover after parsing attributes in process `syz.2.965'. [ 158.804778][ T9111] netlink: 16 bytes leftover after parsing attributes in process `syz.2.965'. [ 158.936526][ T9122] set match dimension is over the limit! [ 158.976562][ T9122] pim6reg: entered allmulticast mode [ 158.992463][ T9122] pim6reg: left allmulticast mode [ 159.188878][ T9125] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 159.275768][ T9130] netlink: 'syz.2.968': attribute type 14 has an invalid length. [ 159.388426][ T9132] netlink: 76 bytes leftover after parsing attributes in process `syz.4.970'. [ 159.426113][ T9133] lo speed is unknown, defaulting to 1000 [ 159.758873][ T9146] pim6reg: entered allmulticast mode [ 159.804727][ T9138] pim6reg: left allmulticast mode [ 160.105804][ T9165] netlink: 4 bytes leftover after parsing attributes in process `syz.2.977'. [ 160.131968][ T9163] GUP no longer grows the stack in syz.1.976 (9163): 20006000-2000a000 (20005000) [ 160.147320][ T9165] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 160.158643][ T9163] CPU: 0 UID: 0 PID: 9163 Comm: syz.1.976 Not tainted 6.12.0-rc5-syzkaller-01187-ga84e8c05f583 #0 [ 160.169286][ T9163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 160.170781][ T9165] netlink: 76 bytes leftover after parsing attributes in process `syz.2.977'. [ 160.179357][ T9163] Call Trace: [ 160.191587][ T9163] [ 160.194547][ T9163] dump_stack_lvl+0x241/0x360 [ 160.199284][ T9163] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.204514][ T9163] ? __pfx__printk+0x10/0x10 [ 160.209112][ T9163] ? find_vma+0xf9/0x170 [ 160.213369][ T9163] ? vma_is_secretmem+0xd/0x50 [ 160.218132][ T9163] ? check_vma_flags+0x52b/0x5a0 [ 160.223077][ T9163] __get_user_pages+0x4385/0x49e0 [ 160.228107][ T9163] ? __kernel_text_address+0xd/0x40 [ 160.233312][ T9163] ? mark_lock+0x9a/0x360 [ 160.237657][ T9163] ? __pfx___get_user_pages+0x10/0x10 [ 160.243065][ T9163] ? __pfx_lock_acquire+0x10/0x10 [ 160.248102][ T9163] __gup_longterm_locked+0x3ba/0x17d0 [ 160.253488][ T9163] pin_user_pages+0x137/0x1f0 [ 160.258177][ T9163] ? __pfx_pin_user_pages+0x10/0x10 [ 160.263377][ T9163] ? __kmalloc_node_noprof+0x247/0x440 [ 160.268844][ T9163] xdp_umem_create+0x978/0xf30 [ 160.273706][ T9163] xsk_setsockopt+0x732/0x950 [ 160.278385][ T9163] ? __pfx_xsk_setsockopt+0x10/0x10 [ 160.283583][ T9163] ? __pfx_lock_acquire+0x10/0x10 [ 160.288615][ T9163] ? __fget_files+0x29/0x470 [ 160.293208][ T9163] ? aa_sock_opt_perm+0x79/0x120 [ 160.298156][ T9163] ? __pfx_xsk_setsockopt+0x10/0x10 [ 160.303359][ T9163] do_sock_setsockopt+0x3af/0x720 [ 160.308392][ T9163] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 160.313944][ T9163] ? __fget_files+0x29/0x470 [ 160.318536][ T9163] ? __fget_files+0x3f3/0x470 [ 160.323211][ T9163] ? __fget_files+0x29/0x470 [ 160.327819][ T9163] __sys_setsockopt+0x1a2/0x250 [ 160.332676][ T9163] __x64_sys_setsockopt+0xb5/0xd0 [ 160.337727][ T9163] do_syscall_64+0xf3/0x230 [ 160.342284][ T9163] ? clear_bhb_loop+0x35/0x90 [ 160.346978][ T9163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.352892][ T9163] RIP: 0033:0x7f75ea17e719 [ 160.357313][ T9163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.376927][ T9163] RSP: 002b:00007f75eaef9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 160.385353][ T9163] RAX: ffffffffffffffda RBX: 00007f75ea335f80 RCX: 00007f75ea17e719 [ 160.393354][ T9163] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000006 [ 160.401349][ T9163] RBP: 00007f75ea1f139e R08: 0000000000000020 R09: 0000000000000000 [ 160.409332][ T9163] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 160.417300][ T9163] R13: 0000000000000000 R14: 00007f75ea335f80 R15: 00007ffc623ea418 [ 160.425286][ T9163] [ 160.440454][ T9165] infiniband syz1: set active [ 160.446106][ T9165] infiniband syz1: set active [ 160.640506][ T9171] bridge5: entered promiscuous mode [ 160.645922][ T9171] bridge5: entered allmulticast mode [ 160.658509][ T9171] team0: Port device bridge5 added [ 160.666710][ T9174] netlink: 'syz.2.979': attribute type 10 has an invalid length. [ 160.773933][ T9184] netlink: 76 bytes leftover after parsing attributes in process `syz.4.983'. [ 161.200455][ T9205] pim6reg: entered allmulticast mode [ 161.207387][ T9205] pim6reg: left allmulticast mode [ 161.502076][ T9216] IPVS: length: 60 != 8 [ 161.681409][ T9224] netlink: 76 bytes leftover after parsing attributes in process `syz.0.997'. [ 161.749148][ T9230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.998'. [ 161.777394][ T9230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.998'. [ 162.127456][ T9249] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1005'. [ 162.255360][ T9255] vlan4: entered allmulticast mode [ 162.271242][ T9255] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 162.291034][ T9255] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 162.823858][ T9270] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1012'. [ 163.195729][ T9285] set match dimension is over the limit! [ 163.266433][ T9285] pim6reg: entered allmulticast mode [ 163.291145][ T9285] pim6reg: left allmulticast mode [ 163.339960][ T9288] IPv6: sit1: Disabled Multicast RS [ 163.380763][ T29] audit: type=1107 audit(1730890116.207:2): pid=9287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 163.462236][ T9290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1017'. [ 164.864000][ T9330] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1028'. [ 165.875542][ T9309] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1026'. [ 165.906097][ T9311] lo speed is unknown, defaulting to 1000 [ 165.918858][ T9328] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1028'. [ 165.941382][ T9328] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1028'. [ 166.061717][ T9339] netlink: 'syz.3.1029': attribute type 9 has an invalid length. [ 166.070000][ T9339] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1029'. [ 166.959978][ T9365] netlink: 'syz.3.1038': attribute type 10 has an invalid length. [ 167.066426][ T9371] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1039'. [ 167.208714][ T9381] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1041'. [ 170.223510][ T9388] tipc: Started in network mode [ 170.228574][ T9388] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 170.240411][ T9388] tipc: Enabled bearer , priority 10 [ 170.467438][ T9414] lo speed is unknown, defaulting to 1000 [ 170.551000][ T9422] netlink: 'syz.1.1051': attribute type 10 has an invalid length. [ 170.594865][ T9424] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1052'. [ 170.652924][ T9427] dvmrp5: entered allmulticast mode [ 170.678661][ T9427] dvmrp5: left allmulticast mode [ 170.941760][ T9439] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1055'. [ 171.374056][ T25] tipc: Node number set to 4269801488 [ 172.529182][ T9439] netlink: 'syz.4.1055': attribute type 1 has an invalid length. [ 172.541927][ T9439] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 172.957601][ T9470] netlink: 'syz.1.1063': attribute type 10 has an invalid length. [ 173.068746][ T9477] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1065'. [ 173.370346][ T9487] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1066'. [ 173.486778][ T9491] pim6reg: entered allmulticast mode [ 173.507088][ T9491] pim6reg: left allmulticast mode [ 176.466731][ T9530] netlink: 'syz.2.1075': attribute type 10 has an invalid length. [ 176.536216][ T9532] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 176.604527][ T9532] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1076'. [ 176.623395][ T9532] macsec0: entered promiscuous mode [ 176.651766][ T9532] veth1_macvtap: left promiscuous mode [ 176.766162][ T9545] netlink: 'syz.2.1079': attribute type 12 has an invalid length. [ 176.985212][ T9550] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 177.103919][ T9550] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 177.587527][ T9553] netlink: 'syz.2.1081': attribute type 10 has an invalid length. [ 177.614518][ T9555] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1083'. [ 177.732122][ T9561] siw: device registration error -23 [ 178.085797][ T9576] netpci0: renamed from team0 (while UP) [ 178.100766][ T9576] netpci0: Cannot enslave team device to itself [ 178.108388][ T9576] A link change request failed with some changes committed already. Interface netpci0 may have been left with an inconsistent configuration, please check. [ 178.138754][ T9573] netpci0: Cannot enslave team device to itself [ 178.145520][ T9573] A link change request failed with some changes committed already. Interface netpci0 may have been left with an inconsistent configuration, please check. [ 178.162940][ T9578] netlink: 'syz.3.1089': attribute type 10 has an invalid length. [ 178.265313][ T9580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1090'. [ 178.291344][ T9580] lo speed is unknown, defaulting to 1000 [ 178.650327][ T9598] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1096'. [ 178.663436][ T9598] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1096'. [ 178.673834][ T9598] netlink: 'syz.1.1096': attribute type 4 has an invalid length. [ 178.797886][ T9606] IPVS: wrr: SCTP 127.0.0.1:0 - no destination available [ 178.924213][ T9615] pim6reg: entered allmulticast mode [ 178.950913][ T9615] pim6reg: left allmulticast mode [ 179.195232][ T9622] netlink: 'syz.1.1102': attribute type 10 has an invalid length. [ 180.071426][ T9644] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1108'. [ 180.653736][ T9649] ipip0: entered promiscuous mode [ 180.761374][ T9656] pim6reg: entered allmulticast mode [ 180.777901][ T9656] pim6reg: left allmulticast mode [ 180.938390][ T9658] netlink: 'syz.2.1113': attribute type 10 has an invalid length. [ 181.230891][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 181.247235][ T55] Bluetooth: hci0: command 0x0c1a tx timeout [ 181.248669][ T5840] Bluetooth: hci3: command 0x0406 tx timeout [ 181.254513][ T5855] Bluetooth: hci1: command 0x0406 tx timeout [ 181.725178][ T9684] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1119'. [ 183.147822][ T9705] netlink: 'syz.0.1126': attribute type 10 has an invalid length. [ 183.590790][ T9725] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1130'. [ 183.644582][ T9723] IPVS: wrr: SCTP 127.0.0.1:0 - no destination available [ 183.809201][ T9730] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1135'. [ 184.135039][ T9740] lo speed is unknown, defaulting to 1000 [ 184.200764][ T9744] lo speed is unknown, defaulting to 1000 [ 184.235090][ T9748] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 184.595564][ T9756] netlink: 'syz.3.1141': attribute type 10 has an invalid length. [ 184.967546][ T9763] netlink: 'syz.3.1142': attribute type 7 has an invalid length. [ 185.553703][ T9786] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.565505][ T9786] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 185.610271][ T9788] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1150'. [ 185.696530][ T9786] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.710911][ T9786] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 185.741231][ T9793] lo speed is unknown, defaulting to 1000 [ 185.788750][ T9786] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.810997][ T9786] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 185.993260][ T9786] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.034645][ T9786] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 186.118250][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout [ 186.143110][ T9800] netlink: 'syz.3.1153': attribute type 10 has an invalid length. [ 186.194303][ T9801] lo speed is unknown, defaulting to 1000 [ 186.239951][ T9802] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1152'. [ 186.277407][ T9786] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 186.286459][ T9786] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 186.325353][ T9786] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 186.343565][ T9786] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 186.378124][ T9786] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 186.386889][ T9786] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 186.405576][ T9786] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 186.414379][ T9786] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 187.116834][ T9837] pim6reg: entered allmulticast mode [ 187.137600][ T9837] pim6reg: left allmulticast mode [ 187.265487][ T9834] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 187.276935][ T9834] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 187.680406][ T9854] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1166'. [ 187.706637][ T9854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1166'. [ 187.766112][ T9856] pim6reg: entered allmulticast mode [ 187.787661][ T9856] pim6reg: left allmulticast mode [ 188.270195][ T9878] lo speed is unknown, defaulting to 1000 [ 188.464138][ T9890] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1176'. [ 188.693369][ T9898] pim6reg: entered allmulticast mode [ 188.743441][ T9898] pim6reg: left allmulticast mode [ 189.011152][ T9902] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1179'. [ 189.020165][ T9902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1179'. [ 189.341888][ T9914] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.351203][ T9914] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.359992][ T9914] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.369034][ T9914] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.405048][ T9914] vxlan0: entered promiscuous mode [ 189.410460][ T9914] vxlan0: entered allmulticast mode [ 189.428405][ T9914] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.437927][ T9914] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.447262][ T9914] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.456836][ T9914] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.797831][ T9937] pim6reg: entered allmulticast mode [ 189.809993][ T9937] pim6reg: left allmulticast mode [ 190.144126][ T9948] lo speed is unknown, defaulting to 1000 [ 190.837914][ T9963] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1196'. [ 190.872128][ T9967] lo speed is unknown, defaulting to 1000 [ 191.403852][ T9984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1203'. [ 191.490048][ T9980] pim6reg: entered allmulticast mode [ 191.517218][ T9980] pim6reg: left allmulticast mode [ 191.913432][T10008] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1210'. [ 192.374568][T10021] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1215'. [ 192.436550][T10025] netlink: 'syz.4.1217': attribute type 1 has an invalid length. [ 192.529340][T10029] pim6reg: entered allmulticast mode [ 192.545819][T10029] netlink: 'syz.4.1218': attribute type 4 has an invalid length. [ 192.575875][T10029] netlink: 'syz.4.1218': attribute type 4 has an invalid length. [ 192.623563][T10029] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1218'. [ 192.841848][T10042] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1223'. [ 193.181752][T10060] IPv6: sit1: Disabled Multicast RS [ 193.197580][T10060] netlink: 'syz.4.1230': attribute type 4 has an invalid length. [ 193.223591][ T29] audit: type=1107 audit(1730890146.047:3): pid=10058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 193.229815][T10060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1230'. [ 193.879800][T10083] netlink: 'syz.0.1236': attribute type 10 has an invalid length. [ 194.054303][T10085] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1237'. [ 194.231558][T10092] netlink: 'syz.0.1239': attribute type 11 has an invalid length. [ 194.258739][T10092] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1239'. [ 194.418142][T10098] lo speed is unknown, defaulting to 1000 [ 194.783458][T10115] ebtables: ebtables: counters copy to user failed while replacing table [ 194.902165][T10122] netlink: 'syz.2.1247': attribute type 10 has an invalid length. [ 194.943369][T10124] lo speed is unknown, defaulting to 1000 [ 195.119890][T10132] can: request_module (can-proto-0) failed. [ 196.049040][T10162] netlink: 'syz.2.1256': attribute type 12 has an invalid length. [ 196.256238][T10166] netlink: 'syz.3.1257': attribute type 10 has an invalid length. [ 196.441325][T10170] netlink: 'syz.3.1259': attribute type 10 has an invalid length. [ 196.595045][T10179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1263'. [ 196.633292][T10179] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 196.685941][T10179] xt_CT: You must specify a L4 protocol and not use inversions on it [ 196.897110][T10193] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1267'. [ 197.694517][T10210] netlink: 'syz.0.1273': attribute type 10 has an invalid length. [ 198.227147][T10234] lo speed is unknown, defaulting to 1000 [ 198.235302][T10236] IPVS: length: 60 != 8 [ 198.795822][T10249] netlink: 'syz.2.1284': attribute type 10 has an invalid length. [ 198.954068][T10255] ip6t_srh: unknown srh match flags 5294 [ 199.087187][T10256] netlink: 'syz.1.1285': attribute type 10 has an invalid length. [ 199.182023][T10255] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1283'. [ 199.318388][T10267] macvlan2: entered promiscuous mode [ 199.334754][T10267] macvlan2: entered allmulticast mode [ 199.358901][T10271] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 199.421014][ T2975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.430173][ T2975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.742289][T10291] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1295'. [ 199.817671][T10285] xt_hashlimit: Unknown mode mask EB0D38F6, kernel too old? [ 199.907104][T10297] netlink: 'syz.3.1298': attribute type 10 has an invalid length. [ 200.080039][T10301] lo speed is unknown, defaulting to 1000 [ 200.472946][ T2975] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.513738][ T2975] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 200.665770][ T2975] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.699819][ T2975] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 200.841123][T10312] netlink: 'syz.0.1303': attribute type 12 has an invalid length. [ 200.915247][T10312] netlink: 'syz.0.1303': attribute type 29 has an invalid length. [ 200.933663][T10312] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1303'. [ 201.050038][ T2975] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.077549][ T2975] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 201.153038][T10316] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1303'. [ 201.186624][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 201.200407][ T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 201.209905][ T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 201.221460][ T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 201.231131][ T55] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 201.250965][ T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 201.262634][ T2975] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.322296][ T2975] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 201.366484][T10326] lo speed is unknown, defaulting to 1000 [ 201.427986][T10335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1308'. [ 201.469572][T10327] lo speed is unknown, defaulting to 1000 [ 201.654539][ T2975] bridge_slave_1: left allmulticast mode [ 201.674664][ T2975] bridge_slave_1: left promiscuous mode [ 201.695072][ T2975] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.728916][ T2975] bridge_slave_0: left allmulticast mode [ 201.737126][ T2975] bridge_slave_0: left promiscuous mode [ 201.747059][ T2975] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.238290][ T2975] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.250049][ T2975] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.263228][ T2975] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 202.286018][ T2975] bond0 (unregistering): Released all slaves [ 202.296909][ T2975] bond1 (unregistering): Released all slaves [ 202.315439][T10347] netlink: 'syz.2.1310': attribute type 10 has an invalid length. [ 202.615488][T10362] lo: entered promiscuous mode [ 203.310740][ T55] Bluetooth: hci1: command tx timeout [ 203.346627][ T2975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.360741][ T2975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.386910][ T2975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.414969][ T2975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.457665][ T2975] veth1_macvtap: left promiscuous mode [ 203.478751][ T2975] veth0_macvtap: left promiscuous mode [ 203.494440][ T2975] veth1_vlan: left promiscuous mode [ 204.272102][ T2975] team0 (unregistering): Port device team_slave_1 removed [ 204.337567][ T2975] team0 (unregistering): Port device team_slave_0 removed [ 204.827619][T10395] Cannot find del_set index 3 as target [ 204.890130][ T2975] team0 (unregistering): Port device dummy0 removed [ 204.951436][T10354] lo: left promiscuous mode [ 204.983697][T10394] lo speed is unknown, defaulting to 1000 [ 205.018380][T10327] chnl_net:caif_netlink_parms(): no params data found [ 205.384580][T10408] netlink: 'syz.4.1322': attribute type 10 has an invalid length. [ 205.392995][ T55] Bluetooth: hci1: command tx timeout [ 205.479168][T10327] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.501625][T10327] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.520781][T10327] bridge_slave_0: entered allmulticast mode [ 205.527768][T10327] bridge_slave_0: entered promiscuous mode [ 205.557414][T10327] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.569738][T10327] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.578243][T10327] bridge_slave_1: entered allmulticast mode [ 205.586568][T10327] bridge_slave_1: entered promiscuous mode [ 205.664133][T10327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.677690][T10327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.719911][T10327] team0: Port device team_slave_0 added [ 205.728477][T10415] netpci0: renamed from team0 (while UP) [ 205.747653][T10415] netpci0: Cannot enslave team device to itself [ 205.757745][T10415] A link change request failed with some changes committed already. Interface netpci0 may have been left with an inconsistent configuration, please check. [ 205.781754][T10327] team0: Port device team_slave_1 added [ 205.788678][T10417] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1327'. [ 205.798858][T10418] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1326'. [ 205.829132][T10415] netpci0: Cannot enslave team device to itself [ 205.835791][T10415] A link change request failed with some changes committed already. Interface netpci0 may have been left with an inconsistent configuration, please check. [ 205.885064][T10327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.908076][T10327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.934673][T10327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.995187][T10327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.016940][T10327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.047647][T10327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.177227][T10327] hsr_slave_0: entered promiscuous mode [ 206.209849][T10327] hsr_slave_1: entered promiscuous mode [ 206.217016][T10327] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.235757][T10327] Cannot create hsr debugfs directory [ 206.297923][T10429] IPVS: length: 60 != 8 [ 206.613932][T10442] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1337'. [ 206.624483][T10442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1337'. [ 206.650583][T10437] lo speed is unknown, defaulting to 1000 [ 206.927451][T10451] ebt_among: wrong size: 2080 against expected 2280, rounded to 2280 [ 207.150224][T10327] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 207.194566][T10327] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 207.229447][T10327] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 207.245156][T10327] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 207.437738][T10327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.481238][ T55] Bluetooth: hci1: command tx timeout [ 207.505111][T10327] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.529945][T10463] IPVS: wrr: SCTP 127.0.0.1:0 - no destination available [ 207.588181][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.595346][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.622808][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.629958][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.995142][T10327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.001172][T10475] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1346'. [ 208.098868][T10327] veth0_vlan: entered promiscuous mode [ 208.134256][T10327] veth1_vlan: entered promiscuous mode [ 208.151009][T10489] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1348'. [ 208.218910][T10327] veth0_macvtap: entered promiscuous mode [ 208.229139][T10327] veth1_macvtap: entered promiscuous mode [ 208.259091][T10493] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1351'. [ 208.268905][T10327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.293217][T10327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.306330][T10327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.320185][T10496] rdma_op ffff88805f6071f0 conn xmit_rdma 0000000000000000 [ 208.329761][T10327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.345869][T10327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.373945][T10327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.394826][T10327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.406121][T10327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.417159][T10327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.430270][T10327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.449779][T10327] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.460327][T10327] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.498883][T10327] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.521249][T10327] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.679027][ T2986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.688145][ T2986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.761752][ T2986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.769614][ T2986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.869585][T10513] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1356'. [ 208.911881][T10515] tipc: Started in network mode [ 208.916813][T10515] tipc: Node identity 002e0000000000000000000000000001, cluster identity 4711 [ 208.944299][T10515] tipc: Enabling of bearer rejected, failed to enable media [ 209.024570][T10520] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1358'. [ 209.169584][T10529] netlink: 312 bytes leftover after parsing attributes in process `syz.0.1362'. [ 209.186637][T10529] batman_adv: batadv0: Interface deactivated: dummy0 [ 209.196664][T10529] batman_adv: batadv0: Removing interface: dummy0 [ 209.206988][T10529] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.224323][T10529] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.249202][T10533] Cannot find set identified by id 0 to match [ 209.267704][T10529] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.281654][T10529] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.324045][T10529] batadv0: left allmulticast mode [ 209.329150][T10529] batadv0: left promiscuous mode [ 209.376622][T10529] vlan0 (unregistering): left allmulticast mode [ 209.385547][T10529] vlan0 (unregistering): left promiscuous mode [ 209.393848][T10529] bridge0: port 3(vlan0) entered disabled state [ 209.888865][T10561] ax25_connect(): syz.4.1371 uses autobind, please contact jreuter@yaina.de [ 209.914731][T10563] batadv_slave_1: entered promiscuous mode [ 209.942500][T10563] batadv_slave_1 (unregistering): left promiscuous mode [ 209.976094][T10561] lo speed is unknown, defaulting to 1000 [ 210.134685][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.508924][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 210.521135][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 210.532252][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 210.543460][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 210.555110][ T5846] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 210.563471][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 210.622495][T10583] lo speed is unknown, defaulting to 1000 [ 210.954920][T10583] chnl_net:caif_netlink_parms(): no params data found [ 211.051665][T10583] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.060766][T10583] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.068728][T10583] bridge_slave_0: entered allmulticast mode [ 211.082572][T10583] bridge_slave_0: entered promiscuous mode [ 211.099775][T10583] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.108070][T10583] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.115852][T10583] bridge_slave_1: entered allmulticast mode [ 211.122975][T10583] bridge_slave_1: entered promiscuous mode [ 211.161781][T10583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.180034][T10583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.238406][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.266566][T10583] team0: Port device team_slave_0 added [ 211.277495][T10583] team0: Port device team_slave_1 added [ 211.356048][T10583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.369568][T10583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.410762][T10583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.427256][T10583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.434567][T10583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.460942][T10583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.537246][T10583] hsr_slave_0: entered promiscuous mode [ 211.556434][T10583] hsr_slave_1: entered promiscuous mode [ 211.563077][T10583] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 211.570772][T10583] Cannot create hsr debugfs directory [ 211.605380][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.660026][T10610] __nla_validate_parse: 5 callbacks suppressed [ 211.660051][T10610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1383'. [ 211.684525][T10610] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1383'. [ 211.719537][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.914501][ T12] bridge_slave_1: left allmulticast mode [ 211.920292][ T12] bridge_slave_1: left promiscuous mode [ 211.926912][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.938538][ T12] bridge_slave_0: left allmulticast mode [ 211.944988][ T12] bridge_slave_0: left promiscuous mode [ 211.957369][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.318368][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.329695][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.342161][ T12] bond0 (unregistering): Released all slaves [ 212.558531][T10628] netlink: 'syz.4.1386': attribute type 16 has an invalid length. [ 212.570648][T10628] netlink: 'syz.4.1386': attribute type 17 has an invalid length. [ 212.591097][ T55] Bluetooth: hci1: command tx timeout [ 212.604402][T10628] netlink: 'syz.4.1386': attribute type 27 has an invalid length. [ 212.621592][ T969] IPVS: starting estimator thread 0... [ 212.710746][T10635] IPVS: using max 33 ests per chain, 79200 per kthread [ 212.738875][T10640] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1389'. [ 212.775299][T10640] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1389'. [ 212.802621][T10628] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 212.818793][T10628] tipc: Enabled bearer , priority 10 [ 212.940814][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 213.080634][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 213.132928][T10647] netlink: 'syz.2.1389': attribute type 15 has an invalid length. [ 213.208089][ T12] hsr_slave_0: left promiscuous mode [ 213.220622][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 213.239496][ T12] hsr_slave_1: left promiscuous mode [ 213.252633][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.261501][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.282271][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.290199][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.332580][ T12] veth1_macvtap: left promiscuous mode [ 213.344472][ T12] veth0_macvtap: left promiscuous mode [ 213.358323][ T12] veth1_vlan: left promiscuous mode [ 213.363866][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 213.374584][ T12] veth0_vlan: left promiscuous mode [ 213.500631][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 213.640682][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 213.780622][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 213.920794][ T969] tipc: Node number set to 3014657 [ 214.060692][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 214.330729][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 214.430217][ T12] team0 (unregistering): Port device team_slave_1 removed [ 214.487420][ T12] team0 (unregistering): Port device team_slave_0 removed [ 214.674088][ T55] Bluetooth: hci1: command tx timeout [ 215.030741][T10673] lo speed is unknown, defaulting to 1000 [ 215.044199][T10583] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 215.068049][T10583] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 215.132603][T10583] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 215.172876][T10583] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 215.534096][T10691] netlink: 'syz.0.1400': attribute type 10 has an invalid length. [ 215.602308][T10691] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.609443][T10691] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.617959][T10691] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.625065][T10691] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.673946][T10691] bridge0: entered promiscuous mode [ 215.679474][T10691] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 215.725395][T10583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.750223][T10583] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.822192][ T2986] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.829379][ T2986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.851069][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.858252][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.369423][T10583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.442052][T10583] veth0_vlan: entered promiscuous mode [ 216.468269][T10583] veth1_vlan: entered promiscuous mode [ 216.515135][T10583] veth0_macvtap: entered promiscuous mode [ 216.518003][T10718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1407'. [ 216.526070][T10583] veth1_macvtap: entered promiscuous mode [ 216.579353][T10583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.595519][T10583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.608720][T10583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.633759][T10583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.659420][T10583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.676064][T10583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.703334][T10583] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.713966][T10583] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.723618][T10583] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.734118][T10583] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.751663][ T55] Bluetooth: hci1: command tx timeout [ 216.883713][ T2986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.908028][ T2986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.958534][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.979006][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.999810][T10729] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1409'. [ 217.122318][T10736] pim6reg: entered allmulticast mode [ 217.203162][T10736] pim6reg: left allmulticast mode [ 217.258755][T10737] lo speed is unknown, defaulting to 1000 [ 217.353971][T10749] IPVS: sync thread started: state = MASTER, mcast_ifn = vlan1, syncid = 3, id = 0 [ 217.554511][T10757] lo speed is unknown, defaulting to 1000 [ 217.852145][T10737] Cannot find del_set index 3 as target [ 217.950641][ C0] net_ratelimit: 3 callbacks suppressed [ 217.950660][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 218.267483][T10772] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 218.320848][T10772] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 218.659686][T10781] xt_ipvs: protocol family 7 not supported [ 218.666792][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 218.732634][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 218.741217][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 218.750300][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 218.759911][ T5846] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 218.767857][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 218.880267][T10791] rdma_op ffff88805e6441f0 conn xmit_rdma 0000000000000000 [ 218.894881][ T53] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.966761][T10783] lo speed is unknown, defaulting to 1000 [ 218.990598][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 219.054760][T10795] netlink: 332 bytes leftover after parsing attributes in process `syz.3.1426'. [ 219.072709][T10795] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1426'. [ 219.085361][T10795] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1426'. [ 219.173509][T10797] netlink: 'syz.3.1426': attribute type 1 has an invalid length. [ 219.460985][T10783] chnl_net:caif_netlink_parms(): no params data found [ 219.551920][T10783] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.559223][T10783] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.569502][T10783] bridge_slave_0: entered allmulticast mode [ 219.577412][T10783] bridge_slave_0: entered promiscuous mode [ 219.590111][T10783] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.598106][T10783] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.626754][T10783] bridge_slave_1: entered allmulticast mode [ 219.651986][T10783] bridge_slave_1: entered promiscuous mode [ 219.716391][ T53] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.769428][T10783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.829068][ T53] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.861472][T10783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.948978][ T53] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.972725][T10783] team0: Port device team_slave_0 added [ 219.982334][T10783] team0: Port device team_slave_1 added [ 220.017691][T10783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.028404][T10783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.054524][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 220.067827][T10783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.094746][T10783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.105345][T10783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.175027][T10783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.268301][T10834] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1434'. [ 220.288896][T10783] hsr_slave_0: entered promiscuous mode [ 220.304951][T10783] hsr_slave_1: entered promiscuous mode [ 220.317308][T10783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 220.335848][T10783] Cannot create hsr debugfs directory [ 220.461027][ T53] bridge_slave_1: left allmulticast mode [ 220.466829][ T53] bridge_slave_1: left promiscuous mode [ 220.474081][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.483844][ T53] bridge_slave_0: left allmulticast mode [ 220.489746][ T53] bridge_slave_0: left promiscuous mode [ 220.496707][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.830985][ T55] Bluetooth: hci1: command tx timeout [ 220.878072][T10847] Cannot find del_set index 286 as target [ 221.070576][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 221.145015][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.169724][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.194583][ T53] bond0 (unregistering): Released all slaves [ 221.236780][T10847] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1438'. [ 221.402229][T10861] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 221.412592][T10861] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 221.511083][T10860] pim6reg: entered allmulticast mode [ 221.575430][T10860] pim6reg: left allmulticast mode [ 221.900158][T10872] lo speed is unknown, defaulting to 1000 [ 222.018812][T10879] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1446'. [ 222.110611][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 222.182791][ T53] hsr_slave_0: left promiscuous mode [ 222.195894][ T53] hsr_slave_1: left promiscuous mode [ 222.202573][T10870] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1444'. [ 222.214079][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.222617][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.230895][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.238858][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.289400][ T53] veth1_macvtap: left promiscuous mode [ 222.295259][ T53] veth0_macvtap: left promiscuous mode [ 222.304890][ T53] veth1_vlan: left promiscuous mode [ 222.310290][ T53] veth0_vlan: left promiscuous mode [ 222.761358][ T53] team0 (unregistering): Port device team_slave_1 removed [ 222.800860][ T53] team0 (unregistering): Port device team_slave_0 removed [ 222.920901][ T55] Bluetooth: hci1: command tx timeout [ 223.150594][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 223.158309][T10884] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1447'. [ 223.167656][T10884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1447'. [ 223.245821][T10783] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 223.271715][T10783] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 223.305629][T10783] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 223.325404][T10783] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 223.675983][T10896] sch_tbf: burst 0 is lower than device veth1_to_bridge mtu (1514) ! [ 223.693819][T10900] netlink: 'syz.4.1452': attribute type 10 has an invalid length. [ 223.719636][T10783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.812041][T10783] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.853424][ T2975] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.860619][ T2975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.902509][ T2975] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.909652][ T2975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.925930][T10904] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xee [ 223.978678][T10783] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 224.000741][T10783] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 224.034262][T10907] gretap0: entered promiscuous mode [ 224.051279][T10907] macsec1: entered promiscuous mode [ 224.089902][T10907] gretap0: left promiscuous mode [ 224.190689][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 224.243176][T10913] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1458'. [ 224.252735][T10913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1458'. [ 224.401789][T10917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1457'. [ 224.457706][T10783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.598156][T10783] veth0_vlan: entered promiscuous mode [ 224.615180][T10783] veth1_vlan: entered promiscuous mode [ 224.727030][T10783] veth0_macvtap: entered promiscuous mode [ 224.737281][T10783] veth1_macvtap: entered promiscuous mode [ 224.769591][T10783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.788759][T10783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.801977][T10783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.822793][T10783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.834396][T10783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.852612][T10783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.873854][T10783] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.883025][T10783] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.893081][T10783] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.907589][T10783] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.000877][ T55] Bluetooth: hci1: command tx timeout [ 225.060399][T10949] lo speed is unknown, defaulting to 1000 [ 225.069384][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.081672][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.115597][ T2934] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.143823][ T2934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.230859][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 225.442553][T10959] netlink: 'syz.4.1470': attribute type 1 has an invalid length. [ 225.460295][T10961] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1471'. [ 225.490363][T10961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1471'. [ 226.043330][T10992] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1479'. [ 226.235829][T10998] netlink: 'syz.0.1479': attribute type 15 has an invalid length. [ 226.270610][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 226.318804][T10999] ip6gretap0: left allmulticast mode [ 226.334992][T10999] ip6gretap0: left promiscuous mode [ 226.349772][T10999] bridge0: port 3(ip6gretap0) entered disabled state [ 226.384066][T10999] bridge_slave_0: left allmulticast mode [ 226.414629][T10999] bridge_slave_0: left promiscuous mode [ 226.431828][T10999] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.455627][T10999] bridge_slave_1: left allmulticast mode [ 226.467661][T10999] bridge_slave_1: left promiscuous mode [ 226.494628][T10999] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.553997][T10999] bond0: (slave bond_slave_0): Releasing backup interface [ 226.654736][T10999] bond0: (slave bond_slave_1): Releasing backup interface [ 226.769244][T10999] team0: Port device team_slave_0 removed [ 226.921905][T10999] team0: Port device team_slave_1 removed [ 226.945602][T10999] infiniband syz1: set active [ 226.991446][T10999] bond0: (slave netdevsim0): Releasing backup interface [ 227.014047][T10999] bond0: (slave wlan1): Releasing backup interface [ 227.076433][T10999] team0: Port device bridge2 removed [ 227.108367][T10999] team0: Port device bridge5 removed [ 227.122175][T11000] wg2: left promiscuous mode [ 227.143492][T11000] team0: Port device wg2 added [ 227.149143][T11002] __nla_validate_parse: 1 callbacks suppressed [ 227.149168][T11002] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1481'. [ 227.188274][T11011] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1483'. [ 227.233901][T11011] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1483'. [ 227.310608][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 227.366579][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.455800][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 227.473055][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 227.490648][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 227.506277][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 227.516334][ T5846] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 227.525221][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 227.546527][T11026] rdma_op ffff88814dc171f0 conn xmit_rdma 0000000000000000 [ 227.603977][T11022] lo speed is unknown, defaulting to 1000 [ 227.975777][T11022] chnl_net:caif_netlink_parms(): no params data found [ 228.353761][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 229.390597][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 229.552452][ T55] Bluetooth: hci1: command tx timeout [ 229.584400][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.734558][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.775711][T11064] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1497'. [ 229.805694][T11069] IPVS: length: 60 != 8 [ 229.853803][T11064] tipc: Started in network mode [ 229.858729][T11064] tipc: Node identity 4, cluster identity 4711 [ 229.876154][T11064] tipc: Node number set to 4 [ 229.944783][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.049491][T11022] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.059267][T11022] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.083153][T11022] bridge_slave_0: entered allmulticast mode [ 230.089766][T11022] bridge_slave_0: entered promiscuous mode [ 230.107783][T11022] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.119194][T11022] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.131771][T11022] bridge_slave_1: entered allmulticast mode [ 230.138989][T11022] bridge_slave_1: entered promiscuous mode [ 230.158019][T11085] bridge8: entered promiscuous mode [ 230.160761][T11088] rdma_op ffff88805e9d89f0 conn xmit_rdma 0000000000000000 [ 230.163618][T11085] bridge8: entered allmulticast mode [ 230.180831][T11081] netlink: 'syz.4.1501': attribute type 10 has an invalid length. [ 230.254342][T11081] bridge0: port 4(ip6gretap0) entered blocking state [ 230.273943][T11081] bridge0: port 4(ip6gretap0) entered disabled state [ 230.310857][T11081] ip6gretap0: entered allmulticast mode [ 230.332386][T11081] ip6gretap0: entered promiscuous mode [ 230.361518][T11022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.383299][T11022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.431533][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 230.460795][ T12] bridge_slave_1: left allmulticast mode [ 230.466469][ T12] bridge_slave_1: left promiscuous mode [ 230.478486][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.487975][ T12] bridge_slave_0: left allmulticast mode [ 230.493918][ T12] bridge_slave_0: left promiscuous mode [ 230.499625][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.915108][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.927854][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.939680][ T12] bond0 (unregistering): Released all slaves [ 230.959350][T11022] team0: Port device team_slave_0 added [ 230.983072][T11022] team0: Port device team_slave_1 added [ 231.125166][T11022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.152285][T11022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.193474][T11022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.213793][T11125] xt_CT: You must specify a L4 protocol and not use inversions on it [ 231.232183][T11022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.239428][T11022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.267356][T11022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.348404][T11022] hsr_slave_0: entered promiscuous mode [ 231.358885][T11022] hsr_slave_1: entered promiscuous mode [ 231.367395][T11022] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 231.375130][T11022] Cannot create hsr debugfs directory [ 231.451180][T11135] netlink: 'syz.0.1509': attribute type 10 has an invalid length. [ 231.459635][T11135] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.467550][T11135] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.475067][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 231.630949][ T55] Bluetooth: hci1: command tx timeout [ 231.734119][T11142] IPVS: length: 60 != 8 [ 232.359908][T11153] rdma_op ffff888074f041f0 conn xmit_rdma 0000000000000000 [ 232.510614][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 233.555107][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 233.710825][ T55] Bluetooth: hci1: command tx timeout [ 233.727146][ T12] hsr_slave_0: left promiscuous mode [ 233.734838][ T12] hsr_slave_1: left promiscuous mode [ 233.741637][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.749161][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.758723][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.766295][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.784427][ T12] veth1_macvtap: left promiscuous mode [ 233.789962][ T12] veth0_macvtap: left promiscuous mode [ 233.796127][ T12] veth1_vlan: left promiscuous mode [ 233.802876][ T12] veth0_vlan: left promiscuous mode [ 234.197821][ T12] team0 (unregistering): Port device team_slave_1 removed [ 234.239275][ T12] team0 (unregistering): Port device team_slave_0 removed [ 234.590619][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 234.652665][T11157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1515'. [ 234.754909][T11168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1516'. [ 234.764012][T11168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1516'. [ 235.355194][T11022] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 235.373596][T11022] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 235.386868][T11022] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 235.399899][T11022] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 235.493120][T11195] vlan1: entered promiscuous mode [ 235.545773][T11022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.564049][T11022] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.587278][T11195] vlan1: left promiscuous mode [ 235.595283][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.602476][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.613700][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.620822][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.630654][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 235.658817][T11202] bridge7: entered promiscuous mode [ 235.664130][T11202] bridge7: entered allmulticast mode [ 235.675575][T11202] team0: Port device bridge7 added [ 235.691534][T11201] netlink: 'syz.3.1526': attribute type 10 has an invalid length. [ 235.733790][T11201] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 235.756404][T11201] bridge0: port 3(ip6gretap0) entered blocking state [ 235.776882][T11201] bridge0: port 3(ip6gretap0) entered disabled state [ 235.787161][T11201] ip6gretap0: entered allmulticast mode [ 235.793957][ T55] Bluetooth: hci1: command tx timeout [ 235.802018][T11201] ip6gretap0: entered promiscuous mode [ 235.808142][T11201] bridge0: port 3(ip6gretap0) entered blocking state [ 235.815079][T11201] bridge0: port 3(ip6gretap0) entered forwarding state [ 236.670785][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 237.699541][T11022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.710588][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 237.738835][T11213] lo speed is unknown, defaulting to 1000 [ 237.809911][T11230] rdma_op ffff88802ed031f0 conn xmit_rdma 0000000000000000 [ 237.828805][T11233] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1533'. [ 237.838698][T11233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1533'. [ 237.878664][T11022] veth0_vlan: entered promiscuous mode [ 237.904769][T11234] lo speed is unknown, defaulting to 1000 [ 237.923189][T11022] veth1_vlan: entered promiscuous mode [ 237.981431][T11022] veth0_macvtap: entered promiscuous mode [ 237.990331][T11022] veth1_macvtap: entered promiscuous mode [ 238.011295][T11022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.022093][T11022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.035121][T11022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.045526][T11022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.056205][T11022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.067607][T11022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.093591][T11022] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.110827][T11022] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.119575][T11022] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.130544][T11022] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.148789][T11240] Bluetooth: hci0: Opcode 0x0c20 failed: -112 [ 238.217479][T11240] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1535'. [ 238.303645][T11246] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1536'. [ 238.376126][T11243] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1536'. [ 238.472619][ T2986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.485872][ T2986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.673264][ T2975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.684478][ T2975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.699694][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.727421][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.750761][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 239.130744][T11268] tipc: Enabling of bearer rejected, failed to enable media [ 239.183107][T11270] ip6gretap0: left allmulticast mode [ 239.192309][T11270] ip6gretap0: left promiscuous mode [ 239.203102][T11270] bridge0: port 4(ip6gretap0) entered disabled state [ 239.216056][T11270] bond0: (slave bridge0): Releasing backup interface [ 239.255356][T11270] netpci0: Port device dummy0 removed [ 239.265778][T11270] bridge_slave_0: left allmulticast mode [ 239.272992][T11270] bridge_slave_0: left promiscuous mode [ 239.279036][T11270] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.290791][T11270] bridge_slave_1: left allmulticast mode [ 239.296482][T11270] bridge_slave_1: left promiscuous mode [ 239.305012][T11270] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.319097][T11270] bond0: (slave bond_slave_0): Releasing backup interface [ 239.343445][T11270] bond0: (slave bond_slave_1): Releasing backup interface [ 239.369221][T11270] netpci0: Port device team_slave_0 removed [ 239.407389][T11270] netpci0: Port device team_slave_1 removed [ 239.414865][ T25] IPVS: starting estimator thread 0... [ 239.419038][T11270] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.429393][T11270] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.439656][T11270] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.448481][T11270] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.477385][T11270] bond0: (slave netdevsim0): Releasing backup interface [ 239.490196][T11270] bond0: (slave wlan1): Releasing backup interface [ 239.501169][T11285] IPVS: using max 18 ests per chain, 43200 per kthread [ 239.516727][T11270] vlan3: left allmulticast mode [ 239.525438][T11270] batadv0: left allmulticast mode [ 239.532058][T11270] vlan3: left promiscuous mode [ 239.537606][T11270] batadv0: left promiscuous mode [ 239.547876][T11270] bridge0: port 3(vlan3) entered disabled state [ 239.571621][T11275] wg2: entered promiscuous mode [ 239.599987][T11266] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1542'. [ 239.686068][T11279] lo speed is unknown, defaulting to 1000 [ 239.790751][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 239.837319][T11296] rdma_op ffff888074f811f0 conn xmit_rdma 0000000000000000 [ 239.986740][T11299] xt_CT: You must specify a L4 protocol and not use inversions on it [ 240.009286][ T1148] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.111332][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout [ 240.118777][ T55] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 240.310926][ T1148] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.579325][ T1148] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.659186][ T1148] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.734526][T11304] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 240.767652][T11307] lo speed is unknown, defaulting to 1000 [ 240.830588][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 240.915350][ T1148] bridge_slave_1: left allmulticast mode [ 240.930667][ T1148] bridge_slave_1: left promiscuous mode [ 240.937705][ T1148] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.002238][ T1148] bridge_slave_0: left allmulticast mode [ 241.014694][ T1148] bridge_slave_0: left promiscuous mode [ 241.041535][ T1148] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.095971][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 241.107302][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 241.121726][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 241.132635][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 241.141116][ T5846] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 241.148589][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 241.817319][ T1148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.831943][ T1148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.846059][ T1148] bond0 (unregistering): Released all slaves [ 241.870616][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 241.992445][T11329] rdma_op ffff888071bc09f0 conn xmit_rdma 0000000000000000 [ 242.043461][T11331] rdma_op ffff888022f749f0 conn xmit_rdma 0000000000000000 [ 242.177169][T11319] lo speed is unknown, defaulting to 1000 [ 242.198147][ T55] Bluetooth: hci0: command 0x0c1a tx timeout [ 242.222305][T11337] rdma_op ffff888020eea9f0 conn xmit_rdma 0000000000000000 [ 242.430444][T11343] rdma_op ffff8880723191f0 conn xmit_rdma 0000000000000000 [ 242.646685][T11348] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1559'. [ 242.823716][ T1148] hsr_slave_0: left promiscuous mode [ 242.830148][ T1148] hsr_slave_1: left promiscuous mode [ 242.837485][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.851815][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.861514][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.869359][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.888655][ T1148] veth1_macvtap: left promiscuous mode [ 242.895713][ T1148] veth0_macvtap: left promiscuous mode [ 242.902255][ T1148] veth1_vlan: left promiscuous mode [ 242.907615][ T1148] veth0_vlan: left promiscuous mode [ 242.910591][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 243.232428][ T55] Bluetooth: hci1: command tx timeout [ 243.385175][ T1148] team0 (unregistering): Port device team_slave_1 removed [ 243.430130][ T1148] team0 (unregistering): Port device team_slave_0 removed [ 243.935937][T11359] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1561'. [ 243.950578][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 244.010981][T11362] sctp: [Deprecated]: syz.0.1562 (pid 11362) Use of int in maxseg socket option. [ 244.010981][T11362] Use struct sctp_assoc_value instead [ 244.140985][T11319] chnl_net:caif_netlink_parms(): no params data found [ 244.213296][T11370] batadv_slave_0: entered promiscuous mode [ 244.245509][T11380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1562'. [ 244.298286][T11370] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1564'. [ 244.427620][T11319] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.463803][T11319] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.483223][T11319] bridge_slave_0: entered allmulticast mode [ 244.499512][T11319] bridge_slave_0: entered promiscuous mode [ 244.514858][T11370] lo speed is unknown, defaulting to 1000 [ 244.516303][T11319] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.537882][T11319] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.545996][T11319] bridge_slave_1: entered allmulticast mode [ 244.556315][T11397] rdma_op ffff8880284661f0 conn xmit_rdma 0000000000000000 [ 244.563015][T11319] bridge_slave_1: entered promiscuous mode [ 244.578415][T11398] sctp: [Deprecated]: syz.4.1567 (pid 11398) Use of struct sctp_assoc_value in delayed_ack socket option. [ 244.578415][T11398] Use struct sctp_sack_info instead [ 244.669492][T11319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.739869][T11319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.847108][T11319] team0: Port device team_slave_0 added [ 244.881881][T11319] team0: Port device team_slave_1 added [ 244.888001][T11404] rdma_op ffff88807f6249f0 conn xmit_rdma 0000000000000000 [ 244.990700][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 245.003113][T11319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.030893][T11319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.081488][T11319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.103793][T11319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.120689][T11319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.162701][T11413] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1572'. [ 245.171246][T11319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.238609][T11416] netlink: 'syz.3.1573': attribute type 10 has an invalid length. [ 245.241974][T11410] netlink: 'syz.4.1571': attribute type 11 has an invalid length. [ 245.256081][T11410] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1571'. [ 245.310837][ T55] Bluetooth: hci1: command tx timeout [ 245.359474][T11319] hsr_slave_0: entered promiscuous mode [ 245.385557][T11319] hsr_slave_1: entered promiscuous mode [ 245.415590][T11319] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.424076][T11319] Cannot create hsr debugfs directory [ 245.432323][T11421] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1574'. [ 245.550771][T11425] lo speed is unknown, defaulting to 1000 [ 245.739744][T11432] pim6reg: entered allmulticast mode [ 245.752111][T11432] pim6reg: left allmulticast mode [ 245.934857][T11439] rdma_op ffff88805e6461f0 conn xmit_rdma 0000000000000000 [ 246.030725][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 246.295933][T11319] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 246.297482][T11444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1580'. [ 246.336216][T11319] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 246.378342][T11319] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 246.400235][T11319] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 246.497307][T11448] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1582'. [ 246.542670][T11448] netlink: 'syz.3.1582': attribute type 10 has an invalid length. [ 246.560786][T11448] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1582'. [ 246.585525][T11448] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 246.746156][T11319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.775942][T11460] netlink: 'syz.0.1585': attribute type 10 has an invalid length. [ 246.797851][T11463] lo speed is unknown, defaulting to 1000 [ 246.800040][T11319] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.818264][ T2986] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.825472][ T2986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.851778][ T2975] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.858971][ T2975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.070650][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 247.140425][T11319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.255331][T11319] veth0_vlan: entered promiscuous mode [ 247.336847][T11319] veth1_vlan: entered promiscuous mode [ 247.391187][ T55] Bluetooth: hci1: command tx timeout [ 247.417201][T11483] xt_CT: You must specify a L4 protocol and not use inversions on it [ 247.432063][T11319] veth0_macvtap: entered promiscuous mode [ 247.453068][T11319] veth1_macvtap: entered promiscuous mode [ 247.492394][T11319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.503707][T11319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.523606][T11319] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.533022][T11319] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.543359][T11319] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.552763][T11319] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.779977][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.801936][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.895235][ T2986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.919542][ T2986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.934238][T11493] lo speed is unknown, defaulting to 1000 [ 248.110691][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 248.349695][T11507] __nla_validate_parse: 2 callbacks suppressed [ 248.349714][T11507] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1594'. [ 248.937340][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.150629][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 249.978321][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 249.991799][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 250.001842][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 250.009856][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 250.018320][ T5846] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 250.032113][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 250.190726][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 250.289459][T11545] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1602'. [ 250.430976][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 251.203642][T11540] pim6reg: entered allmulticast mode [ 251.211067][T11530] lo speed is unknown, defaulting to 1000 [ 251.230594][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 251.266977][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.313400][T11540] pim6reg: left allmulticast mode [ 251.376661][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.406778][T11538] lo speed is unknown, defaulting to 1000 [ 251.498418][T11556] Bluetooth: hci0: Opcode 0x0c20 failed: -112 [ 251.525292][T11556] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1605'. [ 251.590712][T11559] netlink: 'syz.3.1605': attribute type 4 has an invalid length. [ 251.656335][T11562] lo speed is unknown, defaulting to 1000 [ 251.728572][T11556] netlink: 'syz.3.1605': attribute type 4 has an invalid length. [ 251.881541][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.110970][ T55] Bluetooth: hci1: command tx timeout [ 252.134889][T11573] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 252.235755][T11582] xt_CT: You must specify a L4 protocol and not use inversions on it [ 252.270698][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 252.293867][T11538] chnl_net:caif_netlink_parms(): no params data found [ 252.314221][ T12] bridge_slave_1: left allmulticast mode [ 252.320009][ T12] bridge_slave_1: left promiscuous mode [ 252.326848][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.338977][ T12] bridge_slave_0: left allmulticast mode [ 252.345431][ T12] bridge_slave_0: left promiscuous mode [ 252.352687][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.702355][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.727018][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.738214][ T12] bond0 (unregistering): Released all slaves [ 252.970016][T11538] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.983281][T11538] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.991159][T11538] bridge_slave_0: entered allmulticast mode [ 253.015012][T11538] bridge_slave_0: entered promiscuous mode [ 253.080347][T11538] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.091603][T11538] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.099170][T11538] bridge_slave_1: entered allmulticast mode [ 253.109658][T11538] bridge_slave_1: entered promiscuous mode [ 253.243366][T11538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.283518][T11538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.310568][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 253.366139][ T12] hsr_slave_0: left promiscuous mode [ 253.382519][ T12] hsr_slave_1: left promiscuous mode [ 253.389413][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.397727][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.412786][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.420402][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.440089][ T12] veth1_macvtap: left promiscuous mode [ 253.445925][ T12] veth0_macvtap: left promiscuous mode [ 253.451947][ T12] veth1_vlan: left promiscuous mode [ 253.457425][ T12] veth0_vlan: left promiscuous mode [ 253.470603][ T55] Bluetooth: hci0: command 0x0c1a tx timeout [ 253.476714][ T5846] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 253.880147][ T12] team0 (unregistering): Port device team_slave_1 removed [ 253.922569][ T12] team0 (unregistering): Port device team_slave_0 removed [ 254.200672][ T5846] Bluetooth: hci1: command tx timeout [ 254.299426][T11538] team0: Port device team_slave_0 added [ 254.308798][T11538] team0: Port device team_slave_1 added [ 254.322772][T11608] pim6reg: entered allmulticast mode [ 254.356094][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 254.410914][T11617] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1620'. [ 254.424728][T11608] pim6reg: left allmulticast mode [ 254.459216][T11538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.470591][T11538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.552868][T11538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.565409][T11538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.580702][T11538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.607153][T11538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.767418][T11538] hsr_slave_0: entered promiscuous mode [ 254.768793][T11628] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 254.792506][T11538] hsr_slave_1: entered promiscuous mode [ 254.804430][T11538] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 254.819924][T11538] Cannot create hsr debugfs directory [ 254.866182][T11621] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1622'. [ 255.003434][T11633] xt_CT: You must specify a L4 protocol and not use inversions on it [ 255.039182][T11635] lo speed is unknown, defaulting to 1000 [ 255.390596][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 255.538495][T11538] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 255.557175][ T55] Bluetooth: hci0: command 0x0c1a tx timeout [ 255.565572][ T5846] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 255.709713][T11538] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 255.759412][T11538] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 255.816050][T11538] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 256.280724][ T55] Bluetooth: hci1: command tx timeout [ 256.435548][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 257.473623][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 257.544150][T11677] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1636'. [ 257.554024][T11677] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1636'. [ 257.635456][ T55] Bluetooth: hci0: command 0x0c1a tx timeout [ 257.747065][T11685] xt_CT: You must specify a L4 protocol and not use inversions on it [ 257.759061][T11684] Bluetooth: hci0: Opcode 0x0c20 failed: -112 [ 257.769435][T11538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.791645][T11538] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.799412][T11689] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1638'. [ 257.814082][ T2986] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.821263][ T2986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.834062][ T55] ================================================================== [ 257.836053][ T2986] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.842127][ T55] BUG: KASAN: slab-use-after-free in set_powered_sync+0x3a/0xc0 [ 257.842172][ T55] Read of size 8 at addr ffff888024782c98 by task kworker/u9:0/55 [ 257.842188][ T55] [ 257.842201][ T55] CPU: 1 UID: 0 PID: 55 Comm: kworker/u9:0 Not tainted 6.12.0-rc5-syzkaller-01187-ga84e8c05f583 #0 [ 257.849333][ T2986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.856890][ T55] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 257.856907][ T55] Workqueue: hci0 hci_cmd_sync_work [ 257.856932][ T55] Call Trace: [ 257.856939][ T55] [ 257.856947][ T55] dump_stack_lvl+0x241/0x360 [ 257.856975][ T55] ? __pfx_dump_stack_lvl+0x10/0x10 [ 257.872247][T11684] netlink: 'syz.3.1638': attribute type 4 has an invalid length. [ 257.877720][ T55] ? __pfx__printk+0x10/0x10 [ 257.877753][ T55] ? _printk+0xd5/0x120 [ 257.932680][ T55] ? __virt_addr_valid+0x183/0x530 [ 257.937783][ T55] ? __virt_addr_valid+0x183/0x530 [ 257.942972][ T55] print_report+0x169/0x550 [ 257.947468][ T55] ? __virt_addr_valid+0x183/0x530 [ 257.952566][ T55] ? __virt_addr_valid+0x183/0x530 [ 257.957665][ T55] ? __virt_addr_valid+0x45f/0x530 [ 257.962765][ T55] ? __phys_addr+0xba/0x170 [ 257.967284][ T55] ? set_powered_sync+0x3a/0xc0 [ 257.972128][ T55] kasan_report+0x143/0x180 [ 257.976625][ T55] ? set_powered_sync+0x3a/0xc0 [ 257.981467][ T55] set_powered_sync+0x3a/0xc0 [ 257.986134][ T55] ? __pfx_set_powered_sync+0x10/0x10 [ 257.991510][ T55] hci_cmd_sync_work+0x22b/0x400 [ 257.996463][ T55] ? process_scheduled_works+0x976/0x1850 [ 258.002181][ T55] process_scheduled_works+0xa63/0x1850 [ 258.007730][ T55] ? __pfx_process_scheduled_works+0x10/0x10 [ 258.013711][ T55] ? assign_work+0x364/0x3d0 [ 258.018297][ T55] worker_thread+0x870/0xd30 [ 258.022882][ T55] ? __kthread_parkme+0x169/0x1d0 [ 258.027899][ T55] ? __pfx_worker_thread+0x10/0x10 [ 258.033002][ T55] kthread+0x2f0/0x390 [ 258.037060][ T55] ? __pfx_worker_thread+0x10/0x10 [ 258.042167][ T55] ? __pfx_kthread+0x10/0x10 [ 258.046747][ T55] ret_from_fork+0x4b/0x80 [ 258.051171][ T55] ? __pfx_kthread+0x10/0x10 [ 258.055767][ T55] ret_from_fork_asm+0x1a/0x30 [ 258.060538][ T55] [ 258.063557][ T55] [ 258.065870][ T55] Allocated by task 11689: [ 258.070266][ T55] kasan_save_track+0x3f/0x80 [ 258.074929][ T55] __kasan_kmalloc+0x98/0xb0 [ 258.079504][ T55] __kmalloc_cache_noprof+0x19c/0x2c0 [ 258.084864][ T55] mgmt_pending_new+0x65/0x250 [ 258.089622][ T55] mgmt_pending_add+0x36/0x120 [ 258.094403][ T55] set_powered+0x3cd/0x5e0 [ 258.098813][ T55] hci_mgmt_cmd+0xc47/0x11d0 [ 258.103396][ T55] hci_sock_sendmsg+0x7b8/0x11c0 [ 258.108319][ T55] __sock_sendmsg+0x221/0x270 [ 258.113033][ T55] sock_write_iter+0x2d7/0x3f0 [ 258.117784][ T55] vfs_write+0xaeb/0xd30 [ 258.122027][ T55] ksys_write+0x183/0x2b0 [ 258.126361][ T55] do_syscall_64+0xf3/0x230 [ 258.130856][ T55] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.136745][ T55] [ 258.139069][ T55] Freed by task 11688: [ 258.143123][ T55] kasan_save_track+0x3f/0x80 [ 258.147878][ T55] kasan_save_free_info+0x40/0x50 [ 258.152892][ T55] __kasan_slab_free+0x59/0x70 [ 258.157654][ T55] kfree+0x1a0/0x440 [ 258.161557][ T55] settings_rsp+0x2bc/0x390 [ 258.166067][ T55] mgmt_pending_foreach+0xd1/0x130 [ 258.171191][ T55] __mgmt_power_off+0x106/0x430 [ 258.176031][ T55] hci_dev_close_sync+0x6c4/0x11c0 [ 258.181131][ T55] hci_dev_close+0x112/0x210 [ 258.185717][ T55] sock_do_ioctl+0x158/0x460 [ 258.190386][ T55] sock_ioctl+0x626/0x8e0 [ 258.194707][ T55] __se_sys_ioctl+0xf9/0x170 [ 258.199316][ T55] do_syscall_64+0xf3/0x230 [ 258.203811][ T55] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.209696][ T55] [ 258.212005][ T55] The buggy address belongs to the object at ffff888024782c80 [ 258.212005][ T55] which belongs to the cache kmalloc-96 of size 96 [ 258.225901][ T55] The buggy address is located 24 bytes inside of [ 258.225901][ T55] freed 96-byte region [ffff888024782c80, ffff888024782ce0) [ 258.239619][ T55] [ 258.242026][ T55] The buggy address belongs to the physical page: [ 258.248513][ T55] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888024782f00 pfn:0x24782 [ 258.258561][ T55] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 258.265674][ T55] page_type: f5(slab) [ 258.269648][ T55] raw: 00fff00000000000 ffff88801ac41280 ffffea000082e600 dead000000000004 [ 258.278228][ T55] raw: ffff888024782f00 000000000020001f 00000001f5000000 0000000000000000 [ 258.286792][ T55] page dumped because: kasan: bad access detected [ 258.293198][ T55] page_owner tracks the page as allocated [ 258.298891][ T55] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 2934, tgid 2934 (kworker/u8:6), ts 59469327931, free_ts 59281101371 [ 258.318148][ T55] post_alloc_hook+0x1f3/0x230 [ 258.322908][ T55] get_page_from_freelist+0x303f/0x3190 [ 258.328613][ T55] __alloc_pages_noprof+0x292/0x710 [ 258.333819][ T55] alloc_pages_mpol_noprof+0x3e8/0x680 [ 258.339269][ T55] alloc_slab_page+0x6a/0x120 [ 258.343929][ T55] allocate_slab+0x5a/0x2f0 [ 258.348416][ T55] ___slab_alloc+0xcd1/0x14b0 [ 258.353083][ T55] __slab_alloc+0x58/0xa0 [ 258.357403][ T55] __kmalloc_cache_noprof+0x1d5/0x2c0 [ 258.362763][ T55] dst_cow_metrics_generic+0x56/0x1c0 [ 258.368128][ T55] icmp6_dst_alloc+0x270/0x420 [ 258.372879][ T55] ndisc_send_skb+0x32a/0x1380 [ 258.377630][ T55] ndisc_send_ns+0xcc/0x160 [ 258.382129][ T55] addrconf_dad_work+0xb45/0x16f0 [ 258.387139][ T55] process_scheduled_works+0xa63/0x1850 [ 258.392760][ T55] worker_thread+0x870/0xd30 [ 258.397340][ T55] page last free pid 25 tgid 25 stack trace: [ 258.403303][ T55] free_unref_page+0xcfb/0xf20 [ 258.408054][ T55] __put_partials+0xeb/0x130 [ 258.412636][ T55] put_cpu_partial+0x17c/0x250 [ 258.417388][ T55] __slab_free+0x2ea/0x3d0 [ 258.421791][ T55] qlist_free_all+0x9a/0x140 [ 258.426372][ T55] kasan_quarantine_reduce+0x14f/0x170 [ 258.431829][ T55] __kasan_slab_alloc+0x23/0x80 [ 258.436664][ T55] __kmalloc_cache_noprof+0x132/0x2c0 [ 258.442024][ T55] nsim_fib_event_work+0xe1a/0x4130 [ 258.447211][ T55] process_scheduled_works+0xa63/0x1850 [ 258.452744][ T55] worker_thread+0x870/0xd30 [ 258.457322][ T55] kthread+0x2f0/0x390 [ 258.461375][ T55] ret_from_fork+0x4b/0x80 [ 258.465784][ T55] ret_from_fork_asm+0x1a/0x30 [ 258.470545][ T55] [ 258.472867][ T55] Memory state around the buggy address: [ 258.478483][ T55] ffff888024782b80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 258.486529][ T55] ffff888024782c00: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 258.494575][ T55] >ffff888024782c80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 258.502632][ T55] ^ [ 258.507504][ T55] ffff888024782d00: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 258.510668][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 258.515558][ T55] ffff888024782d80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 258.515569][ T55] ================================================================== [ 258.525738][ T55] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 258.525754][ T55] CPU: 1 UID: 0 PID: 55 Comm: kworker/u9:0 Not tainted 6.12.0-rc5-syzkaller-01187-ga84e8c05f583 #0 [ 258.525777][ T55] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 258.525790][ T55] Workqueue: hci0 hci_cmd_sync_work [ 258.525817][ T55] Call Trace: [ 258.525824][ T55] [ 258.525832][ T55] dump_stack_lvl+0x241/0x360 [ 258.525859][ T55] ? __pfx_dump_stack_lvl+0x10/0x10 [ 258.525883][ T55] ? __pfx__printk+0x10/0x10 [ 258.525906][ T55] ? preempt_schedule+0xe1/0xf0 [ 258.525929][ T55] ? vscnprintf+0x5d/0x90 [ 258.525948][ T55] panic+0x349/0x880 [ 258.525970][ T55] ? check_panic_on_warn+0x21/0xb0 [ 258.525989][ T55] ? __pfx_panic+0x10/0x10 [ 258.526013][ T55] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 258.526036][ T55] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 258.526058][ T55] ? print_report+0x502/0x550 [ 258.526080][ T55] check_panic_on_warn+0x86/0xb0 [ 258.526098][ T55] ? set_powered_sync+0x3a/0xc0 [ 258.526118][ T55] end_report+0x77/0x160 [ 258.526137][ T55] kasan_report+0x154/0x180 [ 258.526157][ T55] ? set_powered_sync+0x3a/0xc0 [ 258.526180][ T55] set_powered_sync+0x3a/0xc0 [ 258.526200][ T55] ? __pfx_set_powered_sync+0x10/0x10 [ 258.526220][ T55] hci_cmd_sync_work+0x22b/0x400 [ 258.526243][ T55] ? process_scheduled_works+0x976/0x1850 [ 258.526265][ T55] process_scheduled_works+0xa63/0x1850 [ 258.526298][ T55] ? __pfx_process_scheduled_works+0x10/0x10 [ 258.526322][ T55] ? assign_work+0x364/0x3d0 [ 258.526345][ T55] worker_thread+0x870/0xd30 [ 258.526372][ T55] ? __kthread_parkme+0x169/0x1d0 [ 258.526395][ T55] ? __pfx_worker_thread+0x10/0x10 [ 258.526417][ T55] kthread+0x2f0/0x390 [ 258.526433][ T55] ? __pfx_worker_thread+0x10/0x10 [ 258.526455][ T55] ? __pfx_kthread+0x10/0x10 [ 258.526472][ T55] ret_from_fork+0x4b/0x80 [ 258.526494][ T55] ? __pfx_kthread+0x10/0x10 [ 258.526509][ T55] ret_from_fork_asm+0x1a/0x30 [ 258.526537][ T55] [ 258.530934][ T55] Kernel Offset: disabled