last executing test programs: 6.134048614s ago: executing program 3 (id=1125): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0x3}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x42, 0x1}, 0x10) sendmsg$tipc(r1, &(0x7f00000006c0)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20044094}, 0x0) (async) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x1e09aa98}], 0x1}, 0x1f00) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xa, 0x3032, 0xffffffffffffffff, 0xe08b8000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000010000000000000000000000791200000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}]}, 0x60}}, 0x0) 5.217061758s ago: executing program 3 (id=1139): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f00000001c0), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0x0, 0x51792e7248df3904}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}, @IFLA_GENEVE_COLLECT_METADATA={0x4, 0xe}]}}}]}, 0x40}}, 0x0) 5.05729184s ago: executing program 3 (id=1143): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r2, 0x8, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "64d4b486c5"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4801}, 0x8030) select(0x40, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffff4, 0x1, 0x1, 0x100000000000}, &(0x7f00000000c0)={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f0000000100)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000013000100000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00020000000000004c001a80480002804400018008001e005d03000008000b0074000000080020001cf4000043fd1d000000000008000500d5d9af1108001600090000000800150050000000080019000200000014003500b9026e0500"/104], 0x80}}, 0x0) 4.768129399s ago: executing program 3 (id=1148): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r2, &(0x7f00000002c0)="4aadf7c9f408b606864f817640f1d4ee51b040ffcb2daddd07085738e6bb3bd22eacf3f2b16b6aae9d25c8fdbde192476cf52d3b58325b131850b20302fd3b0520f29d662018412fc97dd4ec0094ad8af14c7a06556c622451b6592b3fea034fbe7b4582254033142f035bd0217b6f25051d31386ce647ac9dbdae3bd06f76fb90cd1af6e6f14ba806dbce8b53861d743681eba13c38e44e686c49d58008c52ffe92bdbec351d33a761702066e9a47d106612cf9b29e9108bd66", 0xba, 0x40, &(0x7f00000001c0)={0x2, 0x4e21, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r2, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="16ecaaaeb69ec105e9dd534f1bd77f8051db33a07055391264d230088248daa370b0bc75883a507be52e9744ca1479096e0a1d347324d779b5fe3167e722437570ee9c472c6399c49d1473a32016f512dee12a2f9dc3bd6060001c8139ae43a3cbf08d05c66712c9a0b2994264c8614da6c0251fdeb06bcb94139d6b3df7bd60ac9d53ac834c97388aa638bb50457e57f90b3e8e11975ebd2c81a2a13cb5dc9b7fae4411137ad278cf52dd8d32de5b07a396cd19a242b247d2ca16ce1a663064abfc1ba4", 0xc4}], 0x1}}], 0x1, 0x400c0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xf, &(0x7f0000000000)=0x2, &(0x7f0000000180)=0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4) sendto$inet(r2, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000fc0), r1) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="0103701b122a34bf6a0e04"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40440d0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) 4.76744991s ago: executing program 1 (id=1149): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) (async) close(r1) socket(0xa, 0x3, 0x3a) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r5 = epoll_create1(0x0) epoll_create1(0x0) (async) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)) (async) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000100)) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0x8c}}]}, &(0x7f0000001840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0x8c}}]}, &(0x7f0000001840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000030000000700000008000300", @ANYRES32=r4, @ANYBLOB="08000500010000001400040074"], 0x54}}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd"], 0x66) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32, @ANYBLOB="28000e00d4"], 0x64}}, 0x0) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r12 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r11}, 0x8) close(r12) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r11, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r11, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r13 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r13, r12, 0x0, 0x0, 0x0}, 0x30) unshare(0x6a040000) 3.826585998s ago: executing program 3 (id=1162): openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a0001, 0x0) (async, rerun: 32) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (rerun: 32) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) (async, rerun: 32) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) (async, rerun: 32) connect$inet(r0, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) (async) close(0x4) 3.781419387s ago: executing program 3 (id=1164): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x5c, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000008c0)={'gretap0\x00', &(0x7f00000007c0)={'syztnl0\x00', 0x0, 0x80, 0x7800, 0x9, 0xfffffffe, {{0x33, 0x4, 0x1, 0x6, 0xcc, 0x64, 0x0, 0x80, 0x4, 0x0, @multicast2, @multicast2, {[@ra={0x94, 0x4}, @generic={0x89, 0x10, "9c046c4abdabc98bf73c52a15877"}, @generic={0x83, 0x9, "7fb19e9fb60b40"}, @cipso={0x86, 0x61, 0x2, [{0x6, 0x9, "c51103ff9e3d7f"}, {0x1, 0xf, "0e9b71381ed4b295245ac4874d"}, {0x5, 0x8, "2c2f238df19f"}, {0x6, 0x2}, {0x1, 0xe, "c1372f367c746f190c4c4b77"}, {0x0, 0xb, "94d466c23a0250ca05"}, {0x0, 0xe, "21c85fce9e4fcddbf2e8e349"}, {0x6, 0x12, "f06ce9e1244da1c53beb5b457a03f825"}]}, @timestamp={0x44, 0xc, 0x94, 0x0, 0xc, [0x0, 0x8001]}, @timestamp_prespec={0x44, 0x2c, 0xc1, 0x3, 0xa, [{@private=0xa010101, 0x7fffffff}, {@multicast1, 0x80000001}, {@empty, 0x2}, {@empty, 0x7f}, {@empty, 0x1400000}]}]}}}}}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ac0)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x118, 0x118, 0x3, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x7, 0x2}]}, @typedef={0x10, 0x0, 0x0, 0x8, 0x1}, @datasec={0xf, 0x6, 0x0, 0xf, 0x2, [{0x1, 0x6, 0x1}, {0x2, 0x4, 0x8001}, {0x4, 0xcd4, 0x7}, {0x3, 0xfffffffa, 0x7}, {0x4, 0x1, 0xde}, {0x1, 0x1, 0x8}], "a068"}, @restrict={0xf, 0x0, 0x0, 0xb, 0x4}, @datasec={0xa, 0x1, 0x0, 0xf, 0x2, [{0x4, 0x5, 0xe8}], '\nP'}, @union={0x10, 0x7, 0x0, 0x5, 0x0, 0x10001, [{0xf, 0x0, 0x81}, {0x7, 0x4, 0x7ff}, {0x3, 0x1, 0x6}, {0x8, 0x3, 0x4}, {0xa, 0x0, 0x1ff}, {0x5, 0x4, 0x2}, {0x4, 0x2, 0x2}]}, @ptr={0xa, 0x0, 0x0, 0x2, 0x2}, @int={0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x79, 0x1}]}, {0x0, [0x61]}}, &(0x7f0000000a40)=""/103, 0x133, 0x67, 0x0, 0x801}, 0x28) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x11, 0x10, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@alu={0x7, 0x0, 0x3, 0x3, 0x3, 0x8, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2cd56bfa7ba319a2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000680)='GPL\x00', 0x6d, 0xf6, &(0x7f00000006c0)=""/246, 0x40f00, 0x3, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000b00)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x0, 0x4, 0x4, 0xfffffffc}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000c00)=[r4], &(0x7f0000000c40)=[{0x0, 0x3, 0xc, 0x7}], 0x10, 0x9}, 0x94) r5 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1c00a7aa00000000000000000a0006000000074000000001"], 0x44}}, 0x4000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$packet(r6, &(0x7f0000000040)={0x10, 0x6}, 0x14) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000000010104000000000000000002000005240001801400018008000100e000000108000200000000000c0002800500010000000000240002801400018008000100e000000108000200ac1e00010c00028005000100000000000800074000000000100016"], 0x74}}, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011809ed61b77d9f16a96c594a1961ed189d63c3391c4854d66a1452ed6b21920c796c4fb58a76f04811e8a7bda7af3bdb21fcab2d6ca22909ed50d079f0b7120f9b5cb852eaa3c6ad1b9be"], 0xb4}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112da000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127", 0xf}], 0x2}], 0x1, 0x40800) r8 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r8, 0x6180, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x21}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a00030000060a010400000000000000000a0000010900010073797a3100000000d4020480d00201800a0001006d61746368000000c00202800e000100636f6e6e6c696d69740000000a00010071756f746100000053000300524fe5f7bfa25e1e47f1c3117c2eae4a49645f9b7406df29429e67f9ddc94aa356735e7babefb4578cf664e11b402b55e7b9d16bfca2d8afc172001988423a8762760891d68cab90ac84fe41a3e116000800024000000001da0003002409bb5468e4f70765c9bcb52a477bfaf974f96d6b0a7833dec945cb62643cfbd9bbd4e3d37640a10fb588a4caba4e8ae63304e3e6bac6df94b98fa8d712744782b3dc22a002194edfe83c86e6b1c50590a0975f5258a81f2d96486c39fb026106a671c9c4c094bb27be60c53487eba7a5ef3c093f5ae446e8883d13fb259f717d516b3c61db4901277716024c2967992f9031459766cf4f9507759a687b2f3c908c2c061e0b5de8e1275832ffcd0f8f412b97c22b44b6dfcd244617fe50403668ab8f0783f9daf2c9472129661f69fc56b067f25d8b00000800024000000003c2000300c26a1f0623dee8c8edb605bce29840447a3d0e5bf1ff02a634342f0ab3ae0b89bebcdd0fe8e052a8151ab5ca6fe43472c04f01ef85eab6e87f3821f3fc408f9a9908b36b403e446e9b71f50bb21242fb44bd35081e7cc810d01928fe186571372a179088eddac0ea62b8cabf01e1b069b405ee87a2d510f7d111d8ed2dc26bbe5260a5e6386db6d6e02feaa0d5317eebcc6196b4acf373f00169b4c03b4a90cf42da9fc310c300aab79a7658fbfc6e8977bf4f96fc2ae8e939ed007228d50000080002400000000094000300c167cc561df986b646e75dc4ec1f875c52562e49ccc52f75c319802ca24b7f96e049c940178515da05c344eb9b67eb75d3fd3d8c4b85bb4ed940e5aca75b286b9e82f06e1fa93d0954a1d958e2a39985001f027b30557f7d94694e221768e7fe7c77e2bd1bf2b8712829eb90242718dbf8546705f613d520dac4673c327248ca266b59c787a922d46c1444e9cfa7d5690900020073797a3200"], 0x328}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 2.2038233s ago: executing program 1 (id=1172): syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x68, 0x0, 0x0, 0x2, 0x0, @private=0xa010101, @broadcast}, @timestamp_reply={0x11, 0xe0, 0x0, 0x0, 0x0, 0x62ea0000}}}}}, 0x0) (async, rerun: 64) r0 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) (async, rerun: 32) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (rerun: 32) close(r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000400)="580000001200add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) (async, rerun: 32) socket$kcm(0x2, 0x3, 0x2) (rerun: 32) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x24, r2, 0x11, 0x70bd2d, 0x3, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c081}, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x24, r7, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008891}, 0x2000c810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) (async) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='block_bio_remap\x00', r10}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000023c0)={r11, 0x87, &(0x7f0000000800)}, 0x10) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x2c, 0x3e, 0x107, 0x0, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x18, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x2c}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x100, r7, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r9}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ee82c294eeb486c6f23854d61cc96cdbaa0e58251b359fef"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a7bd5bb6c99abc5492d9acbc53e964b73219bfc3532582da"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3b275c59c19a7ccb81fd3c8d421177a2d438804e9b942f4b"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}]}, 0x100}, 0x1, 0x0, 0x0, 0x40}, 0x40) 1.844039467s ago: executing program 1 (id=1175): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000002000000000000000003000000020000000000000d00000000000000f949e5e874a203b7215d2ec0816ab3c93b20d74555d70f453630e1c087b7b390472c8bcc7ea7c6a5db570694caab3dcf3d1403e3e224394fe09bcdd61d2e1e5c2086f3119eea95d8ede020971c7a537465444dfe88260c41586224ee4f2623a59ce8c3d0742f39d81e1c3d9f3f2ac406747ac865dc7e104b55aa44fd6b36ca6401826f400ad5a950750c"], 0x0, 0x27, 0x0, 0x1}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000880)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r4}, &(0x7f00000003c0), &(0x7f0000000080)}, 0x20) sendmsg$inet(r2, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$inet(r2, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x4000}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x4000}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00\"\x00'], 0x20}}, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00\"\x00'], 0x20}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007000b00000000000c000180060006008e"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0xefff, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl1\x00', r7, 0x29, 0x80, 0x2, 0x101, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @remote, 0x10, 0x40, 0x2, 0x9b36}}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x38, 0x2b, 0xb, 0x0, 0x0, {0x8}, [@typed={0x4, 0x3}, @nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@loopback}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd}]}, 0x38}}, 0x20004001) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002300)={0x1c, 0x15, 0x301, 0x70bd2d, 0x0, {0xc}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000000240)={0x2, 'macvlan0\x00', {0x1}, 0x2}) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000000240)={0x2, 'macvlan0\x00', {0x1}, 0x2}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 1.839785584s ago: executing program 2 (id=1176): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x5, 0x1, 0xe02, 0x0, 0x0, {0x1, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) (async, rerun: 64) socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) 1.733620379s ago: executing program 0 (id=1177): syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x7, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(r1, 0x800454d2, &(0x7f0000000340)={'veth1\x00'}) sendmmsg$inet(r0, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x0) 1.609830208s ago: executing program 1 (id=1179): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRESHEX=r1, @ANYRESOCT=r1], 0x60}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), r2) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r3, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20}, 0x8400) 1.547793458s ago: executing program 4 (id=1180): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0xbb}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6e2e12bede68ed35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.500270425s ago: executing program 2 (id=1181): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@int={0x4, 0x0, 0x0, 0x1, 0x0, 0x4e, 0x0, 0x6f, 0x1}]}, {0x0, [0x5f, 0x30, 0x30]}}, 0x0, 0x2d, 0x0, 0x3}, 0x20) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@delrng={0x10, 0x14, 0x400, 0x70bd2a, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x40091) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@int={0x4, 0x0, 0x0, 0x1, 0x0, 0x4e, 0x0, 0x6f, 0x1}]}, {0x0, [0x5f, 0x30, 0x30]}}, 0x0, 0x2d, 0x0, 0x3}, 0x20) (async) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@delrng={0x10, 0x14, 0x400, 0x70bd2a, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x40091) (async) 1.429507943s ago: executing program 1 (id=1182): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'veth0_to_team\x00', 0x400}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(0xffffffffffffffff) syz_init_net_socket$netrom(0x6, 0x5, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x5, 0x1, 0x0, 0xf, 0x0, 0x1000000, [{0xd, 0x4, 0x1000000}]}]}, {0x0, [0x5f, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x37, 0x0, 0xa}, 0x20) syz_80211_join_ibss(&(0x7f0000000080)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f00000004c0)="5f74a874eec639d0a431865ae40232b2c254da19197c3cca19", 0x19}], 0x1}, 0x4000000) setsockopt$sock_attach_bpf(r3, 0x84, 0x1e, &(0x7f0000000000), 0x10) r4 = socket$kcm(0x2, 0x3, 0x2) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8916, &(0x7f0000000040)={'wg1\x00', @random="0200ac7f7f00"}) ioctl$SIOCSIFHWADDR(r4, 0x8916, &(0x7f0000000040)={'veth1_macvtap\x00', @random="0200ac7f7f00"}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000440)={'veth1\x00', 0x600}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = socket$inet(0xa, 0x4, 0x84) connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r7, 0x8) r8 = accept4(r7, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x5}, &(0x7f0000000100)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.390392772s ago: executing program 2 (id=1183): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@newae={0x40, 0x1e, 0x468bbc8229e18b43, 0x0, 0x0, {{}, @in6=@empty}}, 0x40}}, 0x0) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_addrs=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x4000}}) ioctl$sock_netdev_private(r0, 0x89f0, &(0x7f0000000000)) 1.312028678s ago: executing program 4 (id=1184): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x11, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1}, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x26ffc86098878bdf}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmp}]}, 0x20}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', r6}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) getsockopt$SO_J1939_SEND_PRIO(r8, 0x6b, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000001000010027bd70000000000000000000", @ANYRES32=r7, @ANYBLOB="06000000000000001c0012800b00010067656e65766500000000008008000200ac1414bc08000400fdffffff0800040009000000080001"], 0x5c}, 0x1, 0x2}, 0x0) 1.311651781s ago: executing program 0 (id=1185): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x3c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_FLAGS={0x14, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079100000000000007a000000000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x23) 1.143010221s ago: executing program 4 (id=1186): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x401}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x26}, 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r4 = socket(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newtfilter={0x38, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r5, {0xd, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_EMATCHES={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x200008c0) recvfrom$rxrpc(r4, &(0x7f0000000180)=""/34, 0x22, 0x40, &(0x7f00000002c0)=@in6={0x21, 0x9, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @local, 0x7}}, 0x24) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000080000001100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="000000000100"], 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r2, r1, 0x5}, 0x10) socket$netlink(0x10, 0x3, 0x8) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000062010c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) 1.0808833s ago: executing program 2 (id=1187): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000005cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002b00)=[@timestamping={{0x14, 0x1, 0x25, 0x8d}}], 0x18}}], 0x1, 0x40081) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x18}, 0x18) (async) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x18}, 0x18) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x400000000000c2f9) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x9, 0xffff, 0x39fc0990, 0x2, r1, 0xe33, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4, 0xd}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETQUEUE(r4, 0x40086602, &(0x7f00000002c0)={'ipvlan0\x00'}) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa00000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x8c, r5, 0x8, 0x70bd2a, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xe9f}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x20014040) (async) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa00000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x8c, r5, 0x8, 0x70bd2a, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xe9f}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x20014040) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x1, "78f4078b4f89fe17fdf93b9d3998cbbdf916aa39811b277c49a5fc2cb11d132a", 0x800, 0x2, 0x4, 0x9}, 0x3c) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000100)=[@timestamp], 0x1) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_PRIMARY={0x8}]}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_PRIMARY={0x8}]}}}]}, 0x44}}, 0x0) 968.070948ms ago: executing program 0 (id=1188): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x90001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'bond0\x00', 0x1}) (async) r2 = socket(0x10, 0x803, 0x0) (async) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x11}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0xc, &(0x7f00000000c0), 0xfff1}, 0x90) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x70, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0x0, 0x7, 0x2}}}]}}]}]}]}}]}, 0x70}}, 0x20040054) 807.44622ms ago: executing program 4 (id=1189): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b70500000100001b6a0af2fe000000008500000044000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3efd9af115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b0600000016cb7fc20fb4791ec85823d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d394d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2ba9c29faa38c409d32b6b7d6cf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d2889ac04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e933119c5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc30000000000000000c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20ba82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818709e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247fa62fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120bed64069dcf82d3e5e0361e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a1000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec527c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f128ddfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0daca8d4c1090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac45f0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c607ef50a991c410f7c60e45b5c193f813a36d841165b91b5e170f6ba24558df57145eb8142a6ed87c6d5cbae3e52d569996604669a6e9ca1a3689c795970b4bcd00881faff52a6766fafa07ed7d4a49f47d34fd76a394adcb33a270b6a14e74bca7c2ea92dd845d3f774fde1bbea911c1ea76d52f7912e2597e6a33380647ed44956730b5b84662b8e659124379c0d86b1d28fdfa3cd2013103e3048c4ad4f5a4dcd133b2fc8fae3b51e4433cee7c08e67c7d7ed4432045e10f8718e5c163b1704fa2c707b61a1a9f63edfceff1a0cd7baf4a15b2fd607a09d398d73243bdcc664fbd5f582e48af2a18b02f0184a7bdd95ac78241e6749e74b152702333c56588375f806f10578eaae329c4f8dfb83e5524e2c9aa59ce7828bd1f146b2a4150fb2a8ced08e2ffac81e921e8a6f0071361a0acdbd125fb5f5e9ffe98e38509582a496afd30ca460dbfca77915a18b7b9ef6c1d6e13bc12fe43063cfecfafb05bf2339ad61533fbf3e410b403182742fa2d40c402cb83c2fef46a36f17c1abf97b0e2d114bd1472ab4207aa060f9e5d91c4a4911b1a1df47b858be141ab3386f26f561df35678489dc1b9f10eee1b2ab3dfdaedd7e06ff8a127f1743fcb32d7f80d40aebc1ea72edc348f5f9ba4bace97db948c24c679c6d6e7c9d49db1b2a6082bb0e8b013bd1ee3612cd43cd2a3cb83754bb34081599ce2a33600d4120353e477237c1dcf66b6a353aa1832d60179da56951d2b77e91c3e73fc7285d1ed2722a30c10f9cfd4a20ae6dc32f5d90a9290b393daff597ad7d5d3e5a73b25002ad928c92bd3d1be2444ff00f6b7719f06ddca6b48db95a746032d5ca0d4c460bb30a43ed735504192cb6ce50eed19a552101cb7bbf82c4924e2a862bd51ebaeb8e15e5428a87b56b81eff64a75baf33ae2b67b55a724cbbe788a8d8ece234a81e90186aca593260d559c0cb2f2be882288db291b231b8d"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x0, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x9ffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000300), &(0x7f0000000340)=0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="020026bd7000fbdbd6254900000008000300", @ANYRES32=r6, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x4008091) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e21, 0x8, @local, 0x8}}, 0x6, 0xfffc, 0x79, 0xfffffffa, 0x2, 0xaa, 0x5}, &(0x7f0000000440)=0x9c) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000b00)={0x0, @in={{0x2, 0x4e20, @multicast1}}, [0x8, 0x1, 0x400, 0xffffffffffffff4a, 0xe, 0x100000000, 0x8, 0x4, 0xfffffffffffffff8, 0x4, 0x3ff, 0x100000000, 0x2, 0x1, 0x7]}, &(0x7f0000000480)=0x100) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000c00)={r7, 0x6, 0x2, 0x9, 0x1, 0x8, 0x7, 0xb, {r8, @in6={{0xa, 0x4e23, 0x298, @empty, 0x80000000}}, 0x0, 0x1, 0x7, 0xfffffffc, 0x17}}, &(0x7f0000000cc0)=0xb0) sendmsg$alg(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x840}, 0x4040880) sendmsg$nl_route_sched(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@newchain={0x490, 0x64, 0xf09d2fbf8b68c555, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x8}, {0xfff1, 0xd}, {0x9, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0x41c, 0x2, [@TCA_FLOW_POLICE={0x418, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE={0x404, 0x2, [0x4e5a, 0x4, 0x7, 0x7ff, 0x0, 0x4, 0x6, 0x576, 0x1, 0x81, 0x1, 0x81, 0x95c, 0x1, 0x100, 0x2, 0xffff41dd, 0x0, 0x0, 0x1, 0x802c, 0x3, 0x920, 0xffffffff, 0x3, 0x3, 0xf6, 0x1, 0x9d, 0x800, 0x6, 0x37, 0x4, 0x800, 0xff, 0x6, 0x2, 0x81, 0x6, 0xfffff529, 0x2, 0x800, 0x94, 0x8001, 0x10000, 0x3dd, 0x76d0, 0xa65, 0x7, 0x23d8, 0x7, 0x7, 0x4, 0x7, 0x400, 0x7, 0x8, 0x2f, 0x2e, 0xc9, 0x2, 0x9, 0x5, 0x4, 0x0, 0xfffffffa, 0x1000, 0xb, 0x7f, 0x8, 0x3865, 0x7fff, 0x800, 0x7, 0x6, 0x3, 0x5c2d, 0x1, 0x100, 0xd, 0x7, 0x100, 0x5, 0x5, 0x5, 0x1, 0x3, 0x6, 0xddcb, 0x10000, 0xfffffff9, 0x6, 0x2, 0x36, 0x40, 0x9, 0x5, 0x44, 0x0, 0x7, 0x4, 0xffff, 0x3d99, 0xfffffff7, 0x2, 0x7, 0x7fffffff, 0x0, 0x8, 0x5, 0x92, 0x6, 0x14, 0xffffffff, 0x9, 0x8001, 0x2b, 0x8, 0x1, 0x3d, 0x4, 0x2, 0x100, 0x9c08, 0xf, 0x7f, 0x3, 0x401, 0xe0000, 0x7, 0xe17f, 0x0, 0x4, 0x101, 0x7, 0x9f12, 0xc14, 0x2, 0x3, 0x7, 0x7fffffff, 0x6, 0x7, 0x3, 0xe65, 0x9, 0x2, 0x3, 0x80, 0x3, 0xff, 0x5, 0xffffffff, 0x2, 0x8, 0x6, 0x6, 0x23, 0x2, 0x1, 0x2, 0x1ff, 0x6, 0x7, 0x6, 0x3, 0x5, 0xea5c, 0x7, 0x3, 0x6, 0x5, 0x57a8, 0x8, 0x400, 0x100, 0x4, 0xec9a, 0x6d7, 0x4, 0x4, 0x3, 0x36bb492e, 0x4a, 0x101, 0x2, 0xfffffffb, 0x72f, 0x200, 0xfffffffb, 0x1000, 0x6, 0x7, 0x0, 0x5, 0x6, 0x5, 0x7, 0x1, 0x1ff, 0x26, 0x6, 0x4b09, 0x8, 0x10, 0x3, 0x8, 0x7, 0x10001, 0x2, 0x6, 0x5, 0xeba7, 0x80000000, 0x8, 0x1, 0x2, 0x4c3, 0x25c8, 0x8, 0xfffff704, 0xd, 0x0, 0x7f, 0x6, 0x71e, 0x4, 0x5, 0x2, 0x7, 0x1000, 0x0, 0x7, 0xfffffffa, 0x9, 0x246, 0x9, 0x6, 0x3, 0x0, 0x2, 0x5, 0x6, 0x4, 0x6, 0x8, 0x25, 0xf, 0x57534994, 0x5, 0x1, 0xf, 0x2cc708c0, 0xc310, 0x3ff]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x78da}]}]}}, @filter_kind_options=@f_flower={{0xb}, {0x38, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @loopback}, @TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x5, [0xff, 0x0, 0xff]}, @TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xffffffff, 0x0, 0xffffff00, 0xffffff00]}]}}]}, 0x490}, 0x1, 0x0, 0x0, 0x80}, 0x44000) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000400)={0x10001, 0xa, 0xf6, 0x1, 0x2}, 0x14) 758.119978ms ago: executing program 0 (id=1190): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r5 = accept(r3, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a8"], 0x50) writev(r4, &(0x7f0000001a80)=[{&(0x7f0000000180)="bf", 0x1}], 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r5}, 0x20) recvmsg$can_bcm(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'vlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x503, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x15a11}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r7}]}}}]}, 0x40}}, 0x44) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) (async) listen(r3, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) connect$vsock_stream(r4, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) (async) accept(r3, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a8"], 0x50) (async) writev(r4, &(0x7f0000001a80)=[{&(0x7f0000000180)="bf", 0x1}], 0x1) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r5}, 0x20) (async) recvmsg$can_bcm(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'vlan0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x503, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x15a11}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r7}]}}}]}, 0x40}}, 0x44) (async) 623.806986ms ago: executing program 4 (id=1191): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000480)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast2}}}, 0x108) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300c26e473eb72a4c95c9dea0a29ee8bbfd0000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c000280050001000000000008000740000000001800068014000400"], 0xac}}, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000300)={0x1, 0x1000}, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000002c0)={'wpan0\x00'}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="05f82dbd7000fbdbdf25250000554e000100616e3400000000002d000202aaaaaaaaaa0000"], 0x28}, 0x1, 0x0, 0x0, 0x180d5}, 0x4) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0xfff3, 0x10}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x44080) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r8, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000b40)=ANY=[@ANYBLOB="240000002c000100000000000000000008000000", @ANYRES32=r10, @ANYBLOB="0b000080976b64087c603000f1fa6b1deecb2130b521f1ceccd9cbd6a9bd55fd86e6adc5ec51d8a532d0cddc519ca60b92e3fb4aeaefe47ba11fe4d1713daf213af3766696405c5b1ece15d501f70390478c6e57ed401b8536dc6d5529e8c18fbb33106b82d823ca6629a3078de234f846b5a442e72d054c607f5fa90da2f8ff0d000018ca9912e76b31481f6407ecfcd7bc5d882483"], 0x24}], 0x1}, 0x84) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000006c0)={{{@in=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000000100)=0xe8) sendmsg$nl_xfrm(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000007c0)=@newpolicy={0x2c8, 0x13, 0x200, 0x70bd27, 0x25dfdbfd, {{@in=@rand_addr=0x64010102, @in=@empty, 0x7, 0x8, 0x4e23, 0x4, 0x2, 0x80, 0x0, 0x0, r7, 0xffffffffffffffff}, {0x5, 0x4, 0x9, 0x3, 0x0, 0x2, 0x90, 0x7}, {0x3, 0xe8f2, 0x2953e043, 0xd}, 0xb, 0x6e6bb9, 0x0, 0x1, 0x2, 0x3}, [@address_filter={0x28, 0x1a, {@in=@dev={0xac, 0x14, 0x14, 0x3a}, @in=@broadcast, 0x0, 0x6, 0x8}}, @migrate={0x50, 0x11, [{@in=@broadcast, @in=@local, @in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@private2, 0xff, 0x1, 0x0, 0x3500, 0xa, 0xa}]}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0xa6c5}, @policy={0xac, 0x7, {{@in6=@mcast1, @in=@local, 0x4e22, 0x9, 0x4e24, 0x0, 0x2, 0xb0, 0xb0, 0x6c, 0x0, r10}, {0x5a, 0x6, 0x4, 0xfffffffffffffff9, 0xffffffffffff39f2, 0x1, 0x80000000, 0x585796be}, {0x7, 0x284f, 0xd, 0x5}, 0x5, 0x6e6bbd, 0x0, 0x1, 0x0, 0x1}}, @sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e21, 0x0, 0x4e22, 0x0, 0xa, 0x20, 0xf9e92de2da49dcf4, 0x4, 0x0, r11}, {@in=@rand_addr=0x64010102, 0x4d2, 0x6c}, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, {0x100000000000, 0x0, 0x3ff, 0x8001, 0x6, 0x8, 0x4, 0x1}, {0xfffffffffffffffc, 0x7ff, 0x10001, 0xffffffffffffffff}, {0x2, 0x6, 0x7ffe}, 0x70bd2a, 0x3501, 0x0, 0x0, 0xb, 0x118}}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x9000}, 0x48000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x5, 0x6a, 0x0, &(0x7f0000000ac0)="6b03a1e980f39b35bdffba65d54c322fc81cf9e13681bff7f56efa552da2727a203f0b2961f7993ab3fea4d142e64efd18d339fabda19d67e7ff6a8d5144e704dd239f521fcc478fde5b2e5be02bdfee5e85a122b58cd158b46578a016d060e6feaed9bd787cd02e9085", 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) recvmmsg(0xffffffffffffffff, &(0x7f0000000400), 0x0, 0x10000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) r13 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r13, &(0x7f0000000080)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1, 0x2, 0x5) 557.41572ms ago: executing program 2 (id=1192): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)={@map, r4, 0x36, 0x4, 0x0, @void, @value=r4}, 0x20) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0xbb}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14}, [], {0x14}}, 0x28}}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r6 = socket(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r7, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) setsockopt$inet_int(r1, 0x0, 0x15, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x101}, 0x14}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r8 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x4e22, 0x0, @mcast1, 0x1000003}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, &(0x7f00000002c0)={0x5, {{0xa, 0x0, 0x0, @mcast1, 0x1000000}}}, 0x88) getsockopt$inet6_buf(r8, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000002280)=0x90) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x64, r10, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0xfffffffffffffd50, 0xb, 0x444e}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x7fff}}]}, 0x64}, 0x1, 0x0, 0x0, 0x804}, 0x4000000) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c000380280000800800034000000002040002800c0004"], 0xec}}, 0x8050) syz_genetlink_get_family_id$wireguard(&(0x7f0000000940), r0) 232.672138ms ago: executing program 0 (id=1193): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="660a00000000000061114c000000000085000000cf00000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000440)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000400)='\b', 0x1}, {&(0x7f0000000040)="000000070020ac", 0x7}], 0x2}, 0x0) 176.050542ms ago: executing program 4 (id=1194): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x2c, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}]}]}, 0x46}}, 0x4004) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0xffffffffffffff0b}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0) (async, rerun: 32) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e0001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) (rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x54, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6230}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x21400}}}}}}, @IFLA_ADDRESS={0xa, 0x3, @random="3a712f0756b8"}]}, 0x54}}, 0x0) 111.853249ms ago: executing program 1 (id=1195): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000500000000000000b64f7110b5000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000c104000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008003a"], 0x3c}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @generic={0x8, 0x6, "e4177f", 0x28, 0x89, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], "bd4fb9e9cbae6d1c21edd9ff38ebd97386806c27d875482109e2185d6f15c9ee51b342066e552bce"}}}}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 75.451676ms ago: executing program 2 (id=1196): socket$inet6(0xa, 0x1, 0x100) (async, rerun: 32) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) (rerun: 32) r0 = socket$kcm(0x10, 0x2, 0x4) (async) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x10360000}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r1, 0x80000000}, 0x8) (async, rerun: 64) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) (rerun: 64) 0s ago: executing program 0 (id=1197): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0xb}]}]}}}]}, 0x68}}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_coalesce={0x3c}}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000054000000060a0104000000000045ba4fc38908a09d194d8d997d770000000500000008000b4000000000667764001c010280080002400000000d080001400000001608000340000000020900010073797a3000000000140000001100010000000000000000000000000a"], 0xc8}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.243' (ED25519) to the list of known hosts. [ 69.538148][ T5848] cgroup: Unknown subsys name 'net' [ 69.637208][ T5848] cgroup: Unknown subsys name 'cpuset' [ 69.646244][ T5848] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.059695][ T5848] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.357689][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.364206][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.452338][ T5862] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.481397][ T5871] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.489581][ T5871] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.490800][ T5869] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.497578][ T5871] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.513218][ T5871] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 73.514589][ T5869] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.521256][ T5871] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.535595][ T5869] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.543941][ T5869] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.545126][ T5871] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.551675][ T5869] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.568749][ T5869] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 73.574791][ T5871] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.576399][ T5869] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.590915][ T5869] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.599094][ T5869] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.619570][ T5869] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 73.621143][ T5877] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.627983][ T5869] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.644006][ T5869] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 73.651726][ T5869] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.665824][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.697572][ T5181] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.705639][ T5181] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.284730][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 74.296717][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 74.412389][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 74.495992][ T5859] chnl_net:caif_netlink_parms(): no params data found [ 74.588487][ T5858] chnl_net:caif_netlink_parms(): no params data found [ 74.650475][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.657983][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.666078][ T5865] bridge_slave_0: entered allmulticast mode [ 74.673081][ T5865] bridge_slave_0: entered promiscuous mode [ 74.692814][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.700100][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.708018][ T5867] bridge_slave_0: entered allmulticast mode [ 74.715832][ T5867] bridge_slave_0: entered promiscuous mode [ 74.749759][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.758586][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.766193][ T5865] bridge_slave_1: entered allmulticast mode [ 74.773137][ T5865] bridge_slave_1: entered promiscuous mode [ 74.780426][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.787767][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.795979][ T5867] bridge_slave_1: entered allmulticast mode [ 74.803073][ T5867] bridge_slave_1: entered promiscuous mode [ 74.965054][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.974397][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.981539][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.988980][ T5859] bridge_slave_0: entered allmulticast mode [ 74.995975][ T5859] bridge_slave_0: entered promiscuous mode [ 75.003382][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.011207][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.018859][ T5863] bridge_slave_0: entered allmulticast mode [ 75.026006][ T5863] bridge_slave_0: entered promiscuous mode [ 75.047653][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.061209][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.070953][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.078923][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.086183][ T5859] bridge_slave_1: entered allmulticast mode [ 75.093098][ T5859] bridge_slave_1: entered promiscuous mode [ 75.100355][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.107628][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.114859][ T5863] bridge_slave_1: entered allmulticast mode [ 75.121769][ T5863] bridge_slave_1: entered promiscuous mode [ 75.128645][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.136080][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.143201][ T5858] bridge_slave_0: entered allmulticast mode [ 75.150576][ T5858] bridge_slave_0: entered promiscuous mode [ 75.160726][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.220932][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.228352][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.236286][ T5858] bridge_slave_1: entered allmulticast mode [ 75.243195][ T5858] bridge_slave_1: entered promiscuous mode [ 75.278033][ T5867] team0: Port device team_slave_0 added [ 75.302602][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.337185][ T5867] team0: Port device team_slave_1 added [ 75.345590][ T5865] team0: Port device team_slave_0 added [ 75.354199][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.366149][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.414123][ T5865] team0: Port device team_slave_1 added [ 75.421636][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.446041][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.459162][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.505356][ T5863] team0: Port device team_slave_0 added [ 75.540160][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.547599][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.574582][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.600974][ T5863] team0: Port device team_slave_1 added [ 75.608669][ T5859] team0: Port device team_slave_0 added [ 75.617934][ T5859] team0: Port device team_slave_1 added [ 75.638103][ T5858] team0: Port device team_slave_0 added [ 75.644767][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.651718][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.678253][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.684652][ T5181] Bluetooth: hci0: command tx timeout [ 75.698036][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.705129][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.731162][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.753976][ T5181] Bluetooth: hci4: command tx timeout [ 75.754001][ T5876] Bluetooth: hci3: command tx timeout [ 75.754361][ T51] Bluetooth: hci2: command tx timeout [ 75.760044][ T5862] Bluetooth: hci1: command tx timeout [ 75.789638][ T5858] team0: Port device team_slave_1 added [ 75.823821][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.830779][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.858475][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.870615][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.879239][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.905573][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.937729][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.944856][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.971027][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.009646][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.016653][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.042852][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.063831][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.070803][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.097019][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.117254][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.124252][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.150189][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.180980][ T5867] hsr_slave_0: entered promiscuous mode [ 76.187711][ T5867] hsr_slave_1: entered promiscuous mode [ 76.223843][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.230801][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.257484][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.296437][ T5865] hsr_slave_0: entered promiscuous mode [ 76.303204][ T5865] hsr_slave_1: entered promiscuous mode [ 76.309525][ T5865] debugfs: 'hsr0' already exists in 'hsr' [ 76.315595][ T5865] Cannot create hsr debugfs directory [ 76.338205][ T5858] hsr_slave_0: entered promiscuous mode [ 76.344466][ T5858] hsr_slave_1: entered promiscuous mode [ 76.350613][ T5858] debugfs: 'hsr0' already exists in 'hsr' [ 76.356935][ T5858] Cannot create hsr debugfs directory [ 76.444291][ T5859] hsr_slave_0: entered promiscuous mode [ 76.450565][ T5859] hsr_slave_1: entered promiscuous mode [ 76.457025][ T5859] debugfs: 'hsr0' already exists in 'hsr' [ 76.462786][ T5859] Cannot create hsr debugfs directory [ 76.530410][ T5863] hsr_slave_0: entered promiscuous mode [ 76.538668][ T5863] hsr_slave_1: entered promiscuous mode [ 76.545229][ T5863] debugfs: 'hsr0' already exists in 'hsr' [ 76.550948][ T5863] Cannot create hsr debugfs directory [ 77.069246][ T5865] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.084997][ T5865] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.106652][ T5865] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.118012][ T5865] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.190069][ T5859] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.202133][ T5859] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.221811][ T5859] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.250496][ T5859] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.297762][ T5858] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.313082][ T5858] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.351004][ T5858] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.362557][ T5858] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.456121][ T5867] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.485135][ T5867] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.514659][ T5867] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.526306][ T5867] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 77.644926][ T5863] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.657935][ T5863] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.675350][ T5863] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.690925][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.702044][ T5863] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.735518][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.756519][ T5181] Bluetooth: hci0: command tx timeout [ 77.768019][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.823232][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.834593][ T5181] Bluetooth: hci4: command tx timeout [ 77.835310][ T5862] Bluetooth: hci2: command tx timeout [ 77.840024][ T51] Bluetooth: hci1: command tx timeout [ 77.845758][ T5876] Bluetooth: hci3: command tx timeout [ 77.857055][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.864274][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.890273][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.897457][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.927745][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.938189][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.945382][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.969350][ T1080] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.976535][ T1080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.049789][ T5858] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.067819][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.133219][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.153538][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.162923][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.170088][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.183229][ T1080] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.190429][ T1080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.214776][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.221961][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.259562][ T1080] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.266735][ T1080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.331004][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.427595][ T5858] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.452982][ T1080] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.460164][ T1080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.512439][ T1080] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.520057][ T1080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.602362][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.811990][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.970348][ T5859] veth0_vlan: entered promiscuous mode [ 78.997303][ T5865] veth0_vlan: entered promiscuous mode [ 79.061106][ T5865] veth1_vlan: entered promiscuous mode [ 79.098246][ T5859] veth1_vlan: entered promiscuous mode [ 79.122404][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.171315][ T5859] veth0_macvtap: entered promiscuous mode [ 79.198873][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.217549][ T5859] veth1_macvtap: entered promiscuous mode [ 79.238221][ T5865] veth0_macvtap: entered promiscuous mode [ 79.271147][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.283388][ T5865] veth1_macvtap: entered promiscuous mode [ 79.326750][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.349771][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.387074][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.403531][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.415759][ T5858] veth0_vlan: entered promiscuous mode [ 79.449919][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.462450][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.475026][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.522116][ T5863] veth0_vlan: entered promiscuous mode [ 79.539057][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.548675][ T5858] veth1_vlan: entered promiscuous mode [ 79.573238][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.588000][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.611595][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.620500][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.632969][ T5863] veth1_vlan: entered promiscuous mode [ 79.752641][ T5858] veth0_macvtap: entered promiscuous mode [ 79.780456][ T5863] veth0_macvtap: entered promiscuous mode [ 79.805253][ T5858] veth1_macvtap: entered promiscuous mode [ 79.824197][ T1080] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.832123][ T1080] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.836120][ T5876] Bluetooth: hci0: command tx timeout [ 79.849812][ T5863] veth1_macvtap: entered promiscuous mode [ 79.881643][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.900548][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.908606][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.917441][ T5876] Bluetooth: hci1: command tx timeout [ 79.917942][ T5862] Bluetooth: hci4: command tx timeout [ 79.929310][ T5862] Bluetooth: hci3: command tx timeout [ 79.934915][ T5876] Bluetooth: hci2: command tx timeout [ 79.961898][ T5867] veth0_vlan: entered promiscuous mode [ 79.971633][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.982714][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.990307][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.990321][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.999548][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.028502][ T1104] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.041200][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.065884][ T1104] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.088471][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.110232][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.119967][ T5867] veth1_vlan: entered promiscuous mode [ 80.121174][ T5859] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 80.142567][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.174833][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.226800][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.254493][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.301322][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.431168][ T5867] veth0_macvtap: entered promiscuous mode [ 80.461286][ T5867] veth1_macvtap: entered promiscuous mode [ 80.521697][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.559225][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.584449][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.639522][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.706086][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.716501][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.726677][ T5990] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.750100][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.759027][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.777804][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.786960][ T6000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9'. [ 80.802585][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.811127][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.842771][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.854357][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.016100][ T5990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.049537][ T5990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.118130][ T6006] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 81.140691][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.160392][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.575534][ T6022] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11'. [ 81.606877][ T6021] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 81.679202][ T6024] Zero length message leads to an empty skb [ 81.706055][ T6024] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13'. [ 81.913998][ T5876] Bluetooth: hci0: command tx timeout [ 81.995277][ T5876] Bluetooth: hci3: command tx timeout [ 82.001150][ T5862] Bluetooth: hci2: command tx timeout [ 82.001209][ T5869] Bluetooth: hci1: command tx timeout [ 82.015244][ T5181] Bluetooth: hci4: command tx timeout [ 82.323339][ T6059] netlink: 'syz.4.25': attribute type 1 has an invalid length. [ 82.331369][ T6059] netlink: 5624 bytes leftover after parsing attributes in process `syz.4.25'. [ 82.656102][ T6068] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20004 [ 82.681870][ T6067] tipc: Started in network mode [ 82.699536][ T6067] tipc: Node identity 46f2b81784c3, cluster identity 4711 [ 82.726227][ T6067] tipc: Enabled bearer , priority 0 [ 82.737649][ T6076] syzkaller0: entered promiscuous mode [ 82.747161][ T6076] syzkaller0: entered allmulticast mode [ 82.753362][ T6070] sctp: [Deprecated]: syz.1.27 (pid 6070) Use of int in maxseg socket option. [ 82.753362][ T6070] Use struct sctp_assoc_value instead [ 82.855196][ T6079] netlink: 44 bytes leftover after parsing attributes in process `syz.1.29'. [ 82.870119][ T6079] netlink: 43 bytes leftover after parsing attributes in process `syz.1.29'. [ 82.880905][ T6079] netlink: 'syz.1.29': attribute type 6 has an invalid length. [ 82.888826][ T6079] netlink: 'syz.1.29': attribute type 5 has an invalid length. [ 82.897845][ T6066] tipc: Resetting bearer [ 82.916212][ T6079] netlink: 43 bytes leftover after parsing attributes in process `syz.1.29'. [ 82.943436][ T6066] tipc: Disabling bearer [ 83.170429][ T6089] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.184563][ T6088] netlink: 'syz.2.33': attribute type 10 has an invalid length. [ 83.199505][ T6093] netlink: 12 bytes leftover after parsing attributes in process `syz.1.32'. [ 83.300861][ T6088] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 83.618436][ T6103] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.626179][ T6103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.737484][ T6114] netlink: 'syz.3.41': attribute type 1 has an invalid length. [ 83.856148][ T6121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.43'. [ 83.902075][ T6121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.43'. [ 84.025393][ T6121] macvtap1: entered allmulticast mode [ 84.048451][ T6121] veth0_macvtap: entered allmulticast mode [ 84.072898][ T6134] openvswitch: netlink: Tunnel attr 303 out of range max 16 [ 84.083847][ T5181] Bluetooth: hci4: command 0x0405 tx timeout [ 84.272351][ T6144] gtp0: entered promiscuous mode [ 84.310598][ T6144] gtp0: entered allmulticast mode [ 84.690057][ T6163] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 85.775459][ T6233] Bluetooth: MGMT ver 1.23 [ 85.874864][ T6241] team0: Device wireguard0 is of different type [ 85.981937][ T6251] netlink: 'syz.0.73': attribute type 4 has an invalid length. [ 86.032231][ T6251] netlink: 'syz.0.73': attribute type 5 has an invalid length. [ 86.262945][ T6267] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 86.281921][ T6267] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 86.292753][ T6267] gretap1: entered promiscuous mode [ 86.298317][ T6267] gretap1: entered allmulticast mode [ 86.471809][ T6275] __nla_validate_parse: 6 callbacks suppressed [ 86.471826][ T6275] netlink: 20 bytes leftover after parsing attributes in process `syz.4.80'. [ 86.632241][ T6280] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.652876][ T6280] netlink: 4 bytes leftover after parsing attributes in process `syz.0.84'. [ 86.662314][ T6280] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.716242][ T980] cfg80211: failed to load regulatory.db [ 86.716711][ T6286] netlink: 24 bytes leftover after parsing attributes in process `syz.0.84'. [ 86.957887][ T6280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.173295][ T6301] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 87.269267][ T6311] vlan2: entered promiscuous mode [ 87.279585][ T6311] vlan2: entered allmulticast mode [ 87.289169][ T6311] hsr_slave_1: entered allmulticast mode [ 87.301824][ T6313] netlink: 4 bytes leftover after parsing attributes in process `syz.3.93'. [ 87.334748][ T6313] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 87.407401][ T6319] netlink: 12 bytes leftover after parsing attributes in process `syz.4.94'. [ 87.422542][ T6313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.93'. [ 87.633131][ T6329] veth0: entered promiscuous mode [ 87.660605][ T6331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.98'. [ 87.686025][ T6335] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.100'. [ 87.700809][ T6337] netlink: 348 bytes leftover after parsing attributes in process `syz.0.101'. [ 87.710669][ T6335] openvswitch: netlink: Port -8 exceeds max allowable 65535 [ 87.763993][ T6339] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.101'. [ 87.787722][ T6341] openvswitch: netlink: nsh attr 6 is out of range max 3 [ 87.799840][ T6341] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 88.346604][ T6360] veth1: entered promiscuous mode [ 88.533286][ T6370] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 88.824128][ T6383] tipc: Started in network mode [ 88.840875][ T6383] tipc: Node identity 2a3ad5605c6f, cluster identity 4711 [ 88.857242][ T6383] tipc: Enabled bearer , priority 0 [ 88.914152][ T6384] syzkaller0: entered promiscuous mode [ 88.919687][ T6384] syzkaller0: entered allmulticast mode [ 89.028902][ T6383] tipc: Resetting bearer [ 89.111031][ T6382] tipc: Resetting bearer [ 89.153927][ T6382] tipc: Disabling bearer [ 89.221347][ T6395] tipc: Started in network mode [ 89.230867][ T6395] tipc: Node identity fad2ce2b80ab, cluster identity 4711 [ 89.243527][ T6395] tipc: Enabled bearer , priority 0 [ 89.261391][ T6408] syzkaller0: entered promiscuous mode [ 89.267366][ T6408] syzkaller0: entered allmulticast mode [ 89.278019][ T6408] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 89.324001][ T6393] tipc: Disabling bearer [ 89.499617][ T6415] openvswitch: netlink: IP tunnel TTL not specified. [ 90.258816][ T6454] trusted_key: syz.3.136 sent an empty control message without MSG_MORE. [ 90.450679][ T6448] "syz.3.136" (6448) uses obsolete ecb(arc4) skcipher [ 90.709020][ T6478] syz.1.145: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 90.783821][ T6478] CPU: 0 UID: 0 PID: 6478 Comm: syz.1.145 Not tainted 6.17.0-rc1-syzkaller-00127-g715c7a36d59f #0 PREEMPT(full) [ 90.783848][ T6478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 90.783865][ T6478] Call Trace: [ 90.783872][ T6478] [ 90.783880][ T6478] dump_stack_lvl+0x189/0x250 [ 90.783913][ T6478] ? __pfx_dump_stack_lvl+0x10/0x10 [ 90.783939][ T6478] ? __pfx__printk+0x10/0x10 [ 90.783968][ T6478] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 90.783990][ T6478] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 90.784012][ T6478] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 90.784035][ T6478] warn_alloc+0x214/0x310 [ 90.784062][ T6478] ? stack_depot_save_flags+0x40/0x860 [ 90.784086][ T6478] ? __pfx_warn_alloc+0x10/0x10 [ 90.784119][ T6478] ? kasan_save_track+0x4f/0x80 [ 90.784141][ T6478] ? xskq_create+0x56/0x170 [ 90.784163][ T6478] ? xsk_init_queue+0xb0/0x110 [ 90.784181][ T6478] ? xsk_setsockopt+0x4dc/0x8d0 [ 90.784199][ T6478] ? do_sock_setsockopt+0x17c/0x1b0 [ 90.784223][ T6478] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 90.784238][ T6478] ? do_syscall_64+0xfa/0x3b0 [ 90.784259][ T6478] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.784285][ T6478] __vmalloc_node_range_noprof+0x125/0x12f0 [ 90.784341][ T6478] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 90.784372][ T6478] ? __kasan_kmalloc+0x93/0xb0 [ 90.784394][ T6478] vmalloc_user_noprof+0xad/0xf0 [ 90.784412][ T6478] ? xskq_create+0xbf/0x170 [ 90.784429][ T6478] xskq_create+0xbf/0x170 [ 90.784448][ T6478] xsk_init_queue+0xb0/0x110 [ 90.784466][ T6478] xsk_setsockopt+0x4dc/0x8d0 [ 90.784483][ T6478] ? __pfx_xsk_setsockopt+0x10/0x10 [ 90.784498][ T6478] ? __pfx_aa_sk_perm+0x10/0x10 [ 90.784519][ T6478] ? aa_sock_opt_perm+0xff/0x1b0 [ 90.784534][ T6478] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 90.784548][ T6478] ? __pfx_xsk_setsockopt+0x10/0x10 [ 90.784564][ T6478] do_sock_setsockopt+0x17c/0x1b0 [ 90.784587][ T6478] __x64_sys_setsockopt+0x13f/0x1b0 [ 90.784604][ T6478] do_syscall_64+0xfa/0x3b0 [ 90.784620][ T6478] ? lockdep_hardirqs_on+0x9c/0x150 [ 90.784636][ T6478] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.784649][ T6478] ? clear_bhb_loop+0x60/0xb0 [ 90.784665][ T6478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.784677][ T6478] RIP: 0033:0x7fa392d8ebe9 [ 90.784695][ T6478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.784706][ T6478] RSP: 002b:00007fa393cdb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 90.784722][ T6478] RAX: ffffffffffffffda RBX: 00007fa392fb5fa0 RCX: 00007fa392d8ebe9 [ 90.784732][ T6478] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 90.784740][ T6478] RBP: 00007fa392e11e19 R08: 0000000000000004 R09: 0000000000000000 [ 90.784748][ T6478] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.784757][ T6478] R13: 00007fa392fb6038 R14: 00007fa392fb5fa0 R15: 00007ffcb0a458a8 [ 90.784780][ T6478] [ 90.784859][ T6478] Mem-Info: [ 90.806724][ T6485] netlink: 'syz.2.146': attribute type 1 has an invalid length. [ 90.954044][ T6478] active_anon:5360 inactive_anon:0 isolated_anon:0 [ 90.954044][ T6478] active_file:2508 inactive_file:39829 isolated_file:0 [ 90.954044][ T6478] unevictable:768 dirty:400 writeback:0 [ 90.954044][ T6478] slab_reclaimable:10373 slab_unreclaimable:96580 [ 90.954044][ T6478] mapped:29038 shmem:1356 pagetables:1114 [ 90.954044][ T6478] sec_pagetables:0 bounce:0 [ 90.954044][ T6478] kernel_misc_reclaimable:0 [ 90.954044][ T6478] free:1330679 free_pcp:15818 free_cma:0 [ 91.009484][ T6485] netlink: 'syz.2.146': attribute type 1 has an invalid length. [ 91.082060][ T6478] Node 0 active_anon:21540kB inactive_anon:0kB active_file:10032kB inactive_file:159116kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116152kB dirty:1588kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11920kB pagetables:4304kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 91.088831][ T6485] netlink: 'syz.2.146': attribute type 1 has an invalid length. [ 91.098144][ T6478] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:12kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 91.237256][ T6478] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 91.305147][ T6478] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 91.311093][ T6478] Node 0 DMA32 free:1419388kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21392kB inactive_anon:0kB active_file:10032kB inactive_file:157540kB unevictable:1536kB writepending:1580kB present:3129332kB managed:2557476kB mlocked:0kB bounce:0kB free_pcp:41860kB local_pcp:14092kB free_cma:0kB [ 91.369888][ T6478] lowmem_reserve[]: 0 0 1 1 1 [ 91.379178][ T6478] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:8kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 91.419604][ T6478] lowmem_reserve[]: 0 0 0 0 0 [ 91.426299][ T6478] Node 1 Normal free:3888360kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:12kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21536kB local_pcp:9600kB free_cma:0kB [ 91.463786][ T6478] lowmem_reserve[]: 0 0 0 0 0 [ 91.468639][ T6478] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 91.485731][ T6478] Node 0 DMA32: 1021*4kB (UM) 161*8kB (UME) 44*16kB (UME) 54*32kB (UME) 9*64kB (UME) 8*128kB (UME) 6*256kB (UM) 7*512kB (UM) 8*1024kB (ME) 4*2048kB (M) 339*4096kB (M) = 1419452kB [ 91.507875][ T6478] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB [ 91.515261][ T6500] netlink: 'syz.2.150': attribute type 17 has an invalid length. [ 91.529068][ T6478] 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 91.538776][ T6500] netlink: 'syz.2.150': attribute type 5 has an invalid length. [ 91.547346][ T6478] Node 1 Normal: 226*4kB (UME) 46*8kB (UME) 37*16kB (UME) 69*32kB (UME) 20*64kB (UME) 6*128kB (UME) 5*256kB (UM) 4*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 946*4096kB (M) = 3888360kB [ 91.570775][ T6478] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 91.583382][ T6478] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 91.598124][ T6478] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 91.609009][ T6478] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 91.609716][ T6499] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.622244][ T6478] 43689 total pagecache pages [ 91.673502][ T6478] 0 pages in swap cache [ 91.682808][ T6478] Free swap = 124996kB [ 91.693076][ T6478] Total swap = 124996kB [ 91.725753][ T6499] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.737631][ T6478] 2097051 pages RAM [ 91.759687][ T6478] 0 pages HighMem/MovableOnly [ 91.774163][ T6478] 425656 pages reserved [ 91.797401][ T6478] 0 pages cma reserved [ 91.950423][ T6527] xt_time: unknown flags 0xf4 [ 91.989351][ T6527] __nla_validate_parse: 12 callbacks suppressed [ 91.989368][ T6527] netlink: 40 bytes leftover after parsing attributes in process `syz.4.157'. [ 91.992569][ T6503] warning: `syz.2.150' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 92.045651][ T6531] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 92.060080][ T6533] netlink: 'syz.3.158': attribute type 10 has an invalid length. [ 92.065271][ T6503] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 92.176988][ T6533] team0: Port device dummy0 added [ 92.441103][ T6549] IPv6: sit1: Disabled Multicast RS [ 92.451487][ T6549] sit1: entered allmulticast mode [ 92.511569][ T6552] netlink: 32 bytes leftover after parsing attributes in process `syz.1.164'. [ 92.532212][ T6551] veth1: entered promiscuous mode [ 92.573299][ T6553] netlink: 28 bytes leftover after parsing attributes in process `syz.3.166'. [ 92.711201][ T6560] netlink: 12 bytes leftover after parsing attributes in process `syz.0.169'. [ 92.750897][ T6560] 8021q: adding VLAN 0 to HW filter on device bond1 [ 92.761307][ T2153] IPVS: starting estimator thread 0... [ 92.762058][ T6557] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 92.799372][ T6560] 8021q: adding VLAN 0 to HW filter on device bond1 [ 92.822563][ T6560] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 92.846265][ T6560] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 92.858748][ T6562] IPVS: using max 29 ests per chain, 69600 per kthread [ 93.040760][ T6575] netlink: 12 bytes leftover after parsing attributes in process `syz.4.172'. [ 93.197647][ T6580] netlink: 24 bytes leftover after parsing attributes in process `syz.0.173'. [ 93.305310][ T6587] netlink: 28 bytes leftover after parsing attributes in process `syz.4.176'. [ 93.471727][ T6597] netlink: 'syz.0.178': attribute type 10 has an invalid length. [ 93.502982][ T6597] netlink: 40 bytes leftover after parsing attributes in process `syz.0.178'. [ 93.557889][ T6597] team0: Port device geneve0 added [ 93.575843][ T6602] netlink: 24 bytes leftover after parsing attributes in process `syz.1.180'. [ 93.759176][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 93.961428][ T6619] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 93.991932][ T6623] netlink: 56 bytes leftover after parsing attributes in process `syz.2.186'. [ 94.071720][ T6632] veth0: entered promiscuous mode [ 94.089869][ T6633] netlink: 'syz.3.187': attribute type 1 has an invalid length. [ 94.100393][ T6633] netlink: 'syz.3.187': attribute type 10 has an invalid length. [ 94.125925][ T6633] netlink: 'syz.3.187': attribute type 1 has an invalid length. [ 94.320249][ T1104] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 94.401968][ T6645] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 94.518466][ T6642] veth0: left promiscuous mode [ 94.797216][ T49] wlan1: Trigger new scan to find an IBSS to join [ 94.961969][ T5962] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x4 [ 95.745899][ T6699] veth3: entered allmulticast mode [ 96.241642][ T6731] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 96.282939][ T6731] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 96.752092][ T6746] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20002 [ 97.202942][ T6761] validate_nla: 2 callbacks suppressed [ 97.202960][ T6761] netlink: 'syz.0.225': attribute type 6 has an invalid length. [ 97.226689][ T6762] __nla_validate_parse: 11 callbacks suppressed [ 97.226704][ T6762] netlink: 24 bytes leftover after parsing attributes in process `syz.1.224'. [ 97.509128][ T6768] netlink: 20 bytes leftover after parsing attributes in process `syz.2.227'. [ 97.794236][ T6778] netlink: 92 bytes leftover after parsing attributes in process `syz.3.230'. [ 98.048709][ T6783] netlink: 'syz.0.232': attribute type 1 has an invalid length. [ 98.062770][ T6783] netlink: 'syz.0.232': attribute type 3 has an invalid length. [ 98.144131][ T6783] netlink: 224 bytes leftover after parsing attributes in process `syz.0.232'. [ 98.153125][ T6783] NCSI netlink: No device for ifindex 131080 [ 98.234063][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 98.370631][ T6796] netlink: 'syz.1.237': attribute type 12 has an invalid length. [ 98.400133][ T6796] netlink: 132 bytes leftover after parsing attributes in process `syz.1.237'. [ 98.895022][ T6821] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 99.205167][ T6834] tipc: Started in network mode [ 99.220263][ T6834] tipc: Node identity 56aabd2a2934, cluster identity 4711 [ 99.254385][ T6834] tipc: Enabled bearer , priority 0 [ 99.279777][ T6837] syzkaller0: entered promiscuous mode [ 99.289373][ T6837] syzkaller0: entered allmulticast mode [ 99.390085][ T6834] tipc: Resetting bearer [ 99.438163][ T6830] tipc: Resetting bearer [ 99.471358][ T6830] tipc: Disabling bearer [ 99.669907][ T6854] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 99.688465][ T6855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.252'. [ 99.757087][ T6855] netlink: 'syz.1.252': attribute type 26 has an invalid length. [ 99.803232][ T6855] netlink: 4 bytes leftover after parsing attributes in process `syz.1.252'. [ 99.835210][ T1104] wlan1: Trigger new scan to find an IBSS to join [ 99.865555][ T6855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.252'. [ 99.897856][ T6855] netlink: 'syz.1.252': attribute type 26 has an invalid length. [ 99.928436][ T6855] netlink: 4 bytes leftover after parsing attributes in process `syz.1.252'. [ 100.153589][ T6873] netlink: 'syz.2.260': attribute type 30 has an invalid length. [ 100.500027][ T6875] netlink: 'syz.2.260': attribute type 30 has an invalid length. [ 100.977115][ T49] wlan1: Creating new IBSS network, BSSID f6:95:7a:01:5d:e1 [ 101.326278][ T6910] nft_compat: unsupported protocol 0 [ 101.334000][ T6903] netlink: 'syz.0.269': attribute type 11 has an invalid length. [ 101.447221][ T6914] netlink: 'syz.1.272': attribute type 6 has an invalid length. [ 101.458611][ T6915] netlink: 'syz.1.272': attribute type 6 has an invalid length. [ 101.527725][ T6916] tipc: Enabled bearer , priority 0 [ 101.559794][ T6916] syzkaller0: entered promiscuous mode [ 101.607450][ T6916] syzkaller0: entered allmulticast mode [ 101.647385][ T6916] tipc: Resetting bearer [ 101.685373][ T6916] tipc: Disabling bearer [ 101.905540][ T6688] Set syz1 is full, maxelem 65536 reached [ 102.114911][ T6943] netlink: 20 bytes leftover after parsing attributes in process `syz.0.280'. [ 102.538451][ T6961] netlink: 'syz.3.287': attribute type 1 has an invalid length. [ 102.564915][ T6961] __nla_validate_parse: 1 callbacks suppressed [ 102.564931][ T6961] netlink: 224 bytes leftover after parsing attributes in process `syz.3.287'. [ 102.588231][ T6963] netlink: 15930 bytes leftover after parsing attributes in process `syz.4.288'. [ 102.613619][ T6961] nbd: illegal input index 1048576 [ 102.640191][ T6962] Driver unsupported XDP return value 0 on prog (id 58) dev N/A, expect packet loss! [ 103.135784][ T6999] netlink: 'syz.4.292': attribute type 21 has an invalid length. [ 103.246441][ T6993] netlink: 24 bytes leftover after parsing attributes in process `syz.2.293'. [ 103.879693][ T7025] netlink: 'syz.3.299': attribute type 4 has an invalid length. [ 103.942521][ T7030] netlink: 'syz.3.299': attribute type 4 has an invalid length. [ 104.081197][ T7035] netlink: 60 bytes leftover after parsing attributes in process `syz.4.302'. [ 104.167371][ T7035] netlink: 60 bytes leftover after parsing attributes in process `syz.4.302'. [ 104.490018][ T7052] tipc: Invalid UDP bearer configuration [ 104.490076][ T7052] tipc: Enabling of bearer rejected, failed to enable media [ 105.347404][ T7091] netlink: 'syz.0.315': attribute type 11 has an invalid length. [ 105.356099][ T7091] netlink: 224 bytes leftover after parsing attributes in process `syz.0.315'. [ 105.590057][ T7094] netlink: 'syz.0.316': attribute type 1 has an invalid length. [ 105.617405][ T7094] netlink: 224 bytes leftover after parsing attributes in process `syz.0.316'. [ 105.913821][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 106.418009][ T7116] netlink: 60 bytes leftover after parsing attributes in process `syz.3.323'. [ 106.714642][ T7126] syz.3.326: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 106.758712][ T7126] CPU: 1 UID: 0 PID: 7126 Comm: syz.3.326 Not tainted 6.17.0-rc1-syzkaller-00127-g715c7a36d59f #0 PREEMPT(full) [ 106.758740][ T7126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 106.758751][ T7126] Call Trace: [ 106.758758][ T7126] [ 106.758767][ T7126] dump_stack_lvl+0x189/0x250 [ 106.758797][ T7126] ? __pfx_dump_stack_lvl+0x10/0x10 [ 106.758819][ T7126] ? __pfx__printk+0x10/0x10 [ 106.758843][ T7126] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 106.758864][ T7126] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 106.758887][ T7126] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 106.758911][ T7126] warn_alloc+0x214/0x310 [ 106.758938][ T7126] ? stack_depot_save_flags+0x40/0x860 [ 106.758970][ T7126] ? __pfx_warn_alloc+0x10/0x10 [ 106.758997][ T7126] ? kasan_save_track+0x4f/0x80 [ 106.759019][ T7126] ? xskq_create+0x56/0x170 [ 106.759040][ T7126] ? xsk_init_queue+0xb0/0x110 [ 106.759058][ T7126] ? xsk_setsockopt+0x4dc/0x8d0 [ 106.759077][ T7126] ? do_sock_setsockopt+0x17c/0x1b0 [ 106.759100][ T7126] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 106.759115][ T7126] ? do_syscall_64+0xfa/0x3b0 [ 106.759136][ T7126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.759162][ T7126] __vmalloc_node_range_noprof+0x125/0x12f0 [ 106.759217][ T7126] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 106.759248][ T7126] ? __kasan_kmalloc+0x93/0xb0 [ 106.759275][ T7126] vmalloc_user_noprof+0xad/0xf0 [ 106.759299][ T7126] ? xskq_create+0xbf/0x170 [ 106.759321][ T7126] xskq_create+0xbf/0x170 [ 106.759346][ T7126] xsk_init_queue+0xb0/0x110 [ 106.759370][ T7126] xsk_setsockopt+0x4dc/0x8d0 [ 106.759394][ T7126] ? __pfx_xsk_setsockopt+0x10/0x10 [ 106.759415][ T7126] ? __pfx_aa_sk_perm+0x10/0x10 [ 106.759443][ T7126] ? aa_sock_opt_perm+0xff/0x1b0 [ 106.759463][ T7126] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 106.759481][ T7126] ? __pfx_xsk_setsockopt+0x10/0x10 [ 106.759503][ T7126] do_sock_setsockopt+0x17c/0x1b0 [ 106.759534][ T7126] __x64_sys_setsockopt+0x13f/0x1b0 [ 106.759556][ T7126] do_syscall_64+0xfa/0x3b0 [ 106.759578][ T7126] ? lockdep_hardirqs_on+0x9c/0x150 [ 106.759600][ T7126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.759616][ T7126] ? clear_bhb_loop+0x60/0xb0 [ 106.759638][ T7126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.759654][ T7126] RIP: 0033:0x7f81e918ebe9 [ 106.759671][ T7126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.759685][ T7126] RSP: 002b:00007f81ea01e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 106.759707][ T7126] RAX: ffffffffffffffda RBX: 00007f81e93b5fa0 RCX: 00007f81e918ebe9 [ 106.759720][ T7126] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 106.759731][ T7126] RBP: 00007f81e9211e19 R08: 0000000000000004 R09: 0000000000000000 [ 106.759741][ T7126] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.759752][ T7126] R13: 00007f81e93b6038 R14: 00007f81e93b5fa0 R15: 00007ffded2f3be8 [ 106.759782][ T7126] [ 106.762050][ T7126] Mem-Info: [ 106.912866][ T7128] netlink: 16 bytes leftover after parsing attributes in process `syz.4.327'. [ 106.942360][ T7126] active_anon:5496 inactive_anon:0 isolated_anon:0 [ 106.942360][ T7126] active_file:2636 inactive_file:39836 isolated_file:0 [ 106.942360][ T7126] unevictable:768 dirty:49 writeback:0 [ 106.942360][ T7126] slab_reclaimable:10346 slab_unreclaimable:98941 [ 106.942360][ T7126] mapped:29141 shmem:1358 pagetables:1140 [ 106.942360][ T7126] sec_pagetables:0 bounce:0 [ 106.942360][ T7126] kernel_misc_reclaimable:0 [ 106.942360][ T7126] free:1329505 free_pcp:13843 free_cma:0 [ 107.031493][ T7128] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 107.036807][ T7126] Node 0 active_anon:21984kB inactive_anon:0kB active_file:10544kB inactive_file:159144kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116564kB dirty:192kB writeback:0kB shmem:3896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12324kB pagetables:4408kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 107.172901][ T7126] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 107.209344][ T7126] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 107.275472][ T7135] netlink: 'syz.0.329': attribute type 10 has an invalid length. [ 107.283964][ T7135] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.292425][ T7135] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.301845][ T7126] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 107.330522][ T7126] Node 0 DMA32 free:1413292kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21936kB inactive_anon:0kB active_file:10544kB inactive_file:157568kB unevictable:1536kB writepending:192kB present:3129332kB managed:2557476kB mlocked:0kB bounce:0kB free_pcp:34832kB local_pcp:15388kB free_cma:0kB [ 107.351334][ T7135] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.370723][ T7135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.378384][ T7135] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.385565][ T7135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.430982][ T7126] lowmem_reserve[]: 0 0 1 1 1 [ 107.441471][ T7135] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.448858][ T7135] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.455975][ T7126] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 107.528538][ T7126] lowmem_reserve[]: 0 0 0 0 0 [ 107.533356][ T7126] Node 1 Normal free:3889156kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20868kB local_pcp:11744kB free_cma:0kB [ 107.636963][ T7126] lowmem_reserve[]: 0 0 0 0 0 [ 107.641731][ T7126] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 107.658082][ T7126] Node 0 DMA32: 308*4kB (ME) 151*8kB (UME) 59*16kB (ME) 38*32kB (UME) 27*64kB (UME) 24*128kB (UM) 11*256kB (ME) 7*512kB (ME) 8*1024kB (UM) 6*2048kB (UM) 336*4096kB (M) = 1412536kB [ 107.705916][ T7126] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 107.730298][ T7126] Node 1 Normal: 225*4kB (UME) 46*8kB (UME) 37*16kB (UME) 82*32kB (UME) 24*64kB (UME) 7*128kB (UME) 5*256kB (UM) 4*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 946*4096kB (M) = 3889156kB [ 107.784033][ T7126] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 107.803587][ T7126] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 107.855934][ T7126] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 107.908619][ T7126] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 107.945475][ T7126] 43826 total pagecache pages [ 107.950586][ T7126] 0 pages in swap cache [ 107.962677][ T7126] Free swap = 124996kB [ 107.967309][ T7126] Total swap = 124996kB [ 107.971522][ T7126] 2097051 pages RAM [ 107.975801][ T7126] 0 pages HighMem/MovableOnly [ 107.980494][ T7126] 425656 pages reserved [ 108.033881][ T7126] 0 pages cma reserved [ 108.073893][ T7160] netlink: 28 bytes leftover after parsing attributes in process `syz.4.337'. [ 108.263466][ T7171] netlink: 'syz.4.341': attribute type 10 has an invalid length. [ 108.326337][ T7171] veth0_vlan: entered allmulticast mode [ 108.359433][ T7176] Bluetooth: MGMT ver 1.23 [ 108.405653][ T7182] netlink: 32 bytes leftover after parsing attributes in process `syz.2.340'. [ 108.472468][ T7185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.344'. [ 108.474909][ T7171] veth0_vlan: left promiscuous mode [ 108.500133][ T7169] netlink: 28 bytes leftover after parsing attributes in process `syz.2.340'. [ 108.516018][ T7171] veth0_vlan: entered promiscuous mode [ 108.527153][ T7171] team0: Device veth0_vlan failed to register rx_handler [ 108.905196][ T7198] Unsupported ieee802154 address type: 0 [ 109.757814][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 110.041542][ T7251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.361'. [ 110.061632][ T7250] bridge_slave_0: left allmulticast mode [ 110.072658][ T7250] bridge_slave_0: left promiscuous mode [ 110.096906][ T7250] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.109546][ T7250] bridge_slave_1: left allmulticast mode [ 110.133937][ T7250] bridge_slave_1: left promiscuous mode [ 110.139857][ T7250] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.291796][ T7250] bond0: (slave bond_slave_0): Releasing backup interface [ 110.589805][ T7250] bond0: (slave bond_slave_1): Releasing backup interface [ 110.657837][ T7250] team0: Port device team_slave_0 removed [ 110.677683][ T6925] Set syz1 is full, maxelem 65536 reached [ 110.697644][ T7250] team0: Port device team_slave_1 removed [ 110.724783][ T7250] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.754133][ T7250] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.819521][ T7289] netlink: 'syz.2.364': attribute type 10 has an invalid length. [ 110.843049][ T7250] team0: Port device geneve0 removed [ 110.914534][ T7291] bridge_slave_0: left allmulticast mode [ 110.920357][ T7291] bridge_slave_0: left promiscuous mode [ 110.927833][ T7291] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.941255][ T7291] bridge_slave_1: left allmulticast mode [ 110.947075][ T7291] bridge_slave_1: left promiscuous mode [ 110.952967][ T7291] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.969593][ T7291] bond0: (slave bond_slave_0): Releasing backup interface [ 110.994297][ T7291] bond0: (slave bond_slave_1): Releasing backup interface [ 111.026301][ T7291] team0: Port device team_slave_0 removed [ 111.052860][ T7291] team0: Port device team_slave_1 removed [ 111.061878][ T7291] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.070521][ T7291] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.080701][ T7291] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.088730][ T7291] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.102829][ T7291] bond0: (slave wlan1): Releasing backup interface [ 111.152659][ T7280] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 111.193040][ T7289] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 111.235100][ T7289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.275530][ T7289] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 111.835086][ T7329] netlink: 32 bytes leftover after parsing attributes in process `syz.4.375'. [ 111.904705][ T7329] netlink: 'syz.4.375': attribute type 1 has an invalid length. [ 112.398678][ T7365] netlink: 12 bytes leftover after parsing attributes in process `syz.2.382'. [ 112.448136][ T7364] netlink: 12 bytes leftover after parsing attributes in process `syz.2.382'. [ 112.692509][ T7376] netlink: 12 bytes leftover after parsing attributes in process `syz.2.388'. [ 112.727693][ T7383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.389'. [ 112.836629][ T7374] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.980263][ T7398] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.988718][ T7398] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.010330][ T49] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.030693][ T49] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.131984][ T7374] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.139021][ T7403] __nla_validate_parse: 2 callbacks suppressed [ 113.139036][ T7403] netlink: 28 bytes leftover after parsing attributes in process `syz.3.393'. [ 113.180399][ T7402] netlink: 12 bytes leftover after parsing attributes in process `syz.4.394'. [ 113.235382][ T49] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.260856][ T49] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.386750][ T7409] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 113.399151][ T7409] bond1: (slave vcan1): Error -95 calling set_mac_address [ 113.451970][ T7374] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.701104][ T7374] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.766542][ T7433] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 114.033621][ T7444] wg1: entered promiscuous mode [ 114.051301][ T5990] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.204251][ T5990] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.337141][ T6980] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.391518][ T6980] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.481285][ T7465] netlink: 24 bytes leftover after parsing attributes in process `syz.4.410'. [ 114.889002][ T7497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.419'. [ 114.912853][ T7497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.419'. [ 114.946790][ T7497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.419'. [ 115.174982][ T7513] netlink: 32 bytes leftover after parsing attributes in process `syz.2.421'. [ 115.471696][ T7530] ip6tnl1: entered promiscuous mode [ 115.504623][ T7532] netlink: 'syz.4.425': attribute type 10 has an invalid length. [ 115.553217][ T7532] team0: Device hsr_slave_0 failed to register rx_handler [ 115.631280][ T7538] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.672824][ T7532] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 115.752116][ T7546] netlink: 12 bytes leftover after parsing attributes in process `syz.2.430'. [ 115.773789][ T7543] veth0: entered promiscuous mode [ 115.829804][ T7543] veth0: left promiscuous mode [ 116.116521][ T7559] netlink: 24 bytes leftover after parsing attributes in process `syz.1.432'. [ 116.729656][ T7592] netlink: 48 bytes leftover after parsing attributes in process `syz.2.440'. [ 117.174475][ T7617] netlink: 'syz.4.445': attribute type 2 has an invalid length. [ 117.204453][ T7617] wg1: entered allmulticast mode [ 118.397952][ T7648] veth0_to_team: entered promiscuous mode [ 118.425145][ T7648] veth0_to_team: entered allmulticast mode [ 118.445046][ T7657] syzkaller1: entered promiscuous mode [ 118.450656][ T7657] syzkaller1: entered allmulticast mode [ 118.531314][ T7657] __nla_validate_parse: 3 callbacks suppressed [ 118.531331][ T7657] netlink: 24 bytes leftover after parsing attributes in process `syz.1.453'. [ 119.249007][ T7697] lo: entered allmulticast mode [ 119.266806][ T7697] tunl0: entered allmulticast mode [ 119.313737][ T7697] gre0: entered allmulticast mode [ 119.383912][ T7704] netlink: 324 bytes leftover after parsing attributes in process `syz.2.464'. [ 119.400778][ T7697] gretap0: entered allmulticast mode [ 119.448015][ T7697] erspan0: entered allmulticast mode [ 119.493522][ T7697] ip_vti0: entered allmulticast mode [ 119.523374][ T7697] ip6_vti0: entered allmulticast mode [ 119.548542][ T7697] sit0: entered allmulticast mode [ 119.578145][ T7697] ip6tnl0: entered allmulticast mode [ 119.606764][ T7697] ip6gre0: entered allmulticast mode [ 119.616099][ T7712] netlink: 'syz.2.464': attribute type 1 has an invalid length. [ 119.631094][ T7697] syz_tun: entered allmulticast mode [ 119.664205][ T7697] ip6gretap0: entered allmulticast mode [ 119.673503][ T7697] bridge0: entered allmulticast mode [ 119.688613][ T7697] vcan0: entered allmulticast mode [ 119.720141][ T7697] bond0: entered allmulticast mode [ 119.733578][ T7697] bond_slave_0: entered allmulticast mode [ 119.748530][ T7697] bond_slave_1: entered allmulticast mode [ 119.782191][ T7697] team0: entered allmulticast mode [ 119.795813][ T7697] team_slave_0: entered allmulticast mode [ 119.812179][ T7697] team_slave_1: entered allmulticast mode [ 119.830797][ T7697] dummy0: entered allmulticast mode [ 119.855705][ T7697] nlmon0: entered allmulticast mode [ 119.870312][ T7697] caif0: entered allmulticast mode [ 119.880371][ T7697] batadv0: entered allmulticast mode [ 119.892623][ T7697] vxcan0: entered allmulticast mode [ 119.906734][ T7697] vxcan1: entered allmulticast mode [ 119.971915][ T7697] veth0: entered allmulticast mode [ 119.987901][ T7697] veth1: entered allmulticast mode [ 120.008154][ T7697] wg0: entered allmulticast mode [ 120.039265][ T7697] wg1: entered allmulticast mode [ 120.051891][ T7697] wg2: entered allmulticast mode [ 120.060302][ T7697] veth0_to_bridge: entered allmulticast mode [ 120.086713][ T7697] veth1_to_bridge: entered allmulticast mode [ 120.101963][ T7697] veth0_to_bond: entered allmulticast mode [ 120.135758][ T7697] veth1_to_bond: entered allmulticast mode [ 120.149951][ T7697] veth0_to_team: entered allmulticast mode [ 120.178619][ T7697] veth1_to_team: entered allmulticast mode [ 120.200425][ T7697] veth0_to_batadv: entered allmulticast mode [ 120.228506][ T7697] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.240412][ T7697] batadv_slave_0: entered allmulticast mode [ 120.259443][ T7697] veth1_to_batadv: entered allmulticast mode [ 120.273388][ T7697] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.281526][ T7697] batadv_slave_1: entered allmulticast mode [ 120.313572][ T7697] xfrm0: entered allmulticast mode [ 120.329616][ T7697] veth0_to_hsr: entered allmulticast mode [ 120.343432][ T7697] hsr_slave_0: entered allmulticast mode [ 120.352259][ T7697] veth1_to_hsr: entered allmulticast mode [ 120.365709][ T7697] hsr_slave_1: entered allmulticast mode [ 120.379547][ T7697] hsr0: entered allmulticast mode [ 120.389695][ T7697] veth1_virt_wifi: entered allmulticast mode [ 120.404758][ T7697] veth0_virt_wifi: entered allmulticast mode [ 120.422971][ T7697] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 120.444605][ T7697] veth1_vlan: entered allmulticast mode [ 120.459343][ T7697] veth0_vlan: entered allmulticast mode [ 120.489949][ T7697] vlan0: entered allmulticast mode [ 120.501433][ T7697] vlan1: entered allmulticast mode [ 120.520829][ T7697] macvlan0: entered allmulticast mode [ 120.554139][ T7697] macvlan1: entered allmulticast mode [ 120.565493][ T7697] ipvlan0: entered allmulticast mode [ 120.574011][ T7697] ipvlan1: entered allmulticast mode [ 120.580228][ T7697] veth1_macvtap: entered allmulticast mode [ 120.594253][ T7697] veth0_macvtap: entered allmulticast mode [ 120.658420][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 120.666392][ T7697] macvtap0: entered allmulticast mode [ 120.686917][ T7697] macsec0: entered allmulticast mode [ 120.735136][ T7697] geneve0: entered allmulticast mode [ 120.786868][ T7697] geneve1: entered allmulticast mode [ 120.852802][ T7697] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 120.869388][ T7697] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 120.881691][ T7697] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 120.893920][ T7697] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 120.914806][ T7697] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 120.933350][ T7697] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 120.943595][ T7697] mac80211_hwsim hwsim6 pim6reg0: entered allmulticast mode [ 120.952109][ T7697] veth0_vlan.2: entered allmulticast mode [ 120.960186][ T7697] bond1: entered allmulticast mode [ 120.966094][ T7697] erspan1: entered allmulticast mode [ 120.989744][ T7707] netlink: 8 bytes leftover after parsing attributes in process `syz.0.465'. [ 120.998830][ T7707] netlink: 4 bytes leftover after parsing attributes in process `syz.0.465'. [ 121.040470][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.072058][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.114343][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.123261][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.352548][ T7734] netlink: 'syz.1.471': attribute type 1 has an invalid length. [ 121.396548][ T7734] netlink: 'syz.1.471': attribute type 1 has an invalid length. [ 121.542906][ T7746] netlink: 256 bytes leftover after parsing attributes in process `syz.4.472'. [ 121.660173][ T7756] netlink: 12 bytes leftover after parsing attributes in process `syz.1.474'. [ 121.772378][ T7760] netlink: 64 bytes leftover after parsing attributes in process `syz.2.475'. [ 122.440405][ T7799] netlink: 40 bytes leftover after parsing attributes in process `syz.2.478'. [ 122.541828][ T7805] netlink: 216 bytes leftover after parsing attributes in process `syz.4.480'. [ 122.779172][ T7811] netlink: 256 bytes leftover after parsing attributes in process `syz.1.481'. [ 122.865500][ T7819] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 123.125821][ T7502] Set syz1 is full, maxelem 65536 reached [ 123.151191][ T7833] netlink: 'syz.4.485': attribute type 1 has an invalid length. [ 123.804448][ T7872] openvswitch: netlink: Actions may not be safe on all matching packets [ 123.883900][ T7870] veth0_to_team: entered promiscuous mode [ 123.925416][ T7870] veth0_to_team: entered allmulticast mode [ 124.782686][ T7915] __nla_validate_parse: 5 callbacks suppressed [ 124.782704][ T7915] netlink: 12 bytes leftover after parsing attributes in process `syz.4.508'. [ 124.823157][ T7928] netlink: 'syz.3.510': attribute type 2 has an invalid length. [ 124.846204][ T7926] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 124.865971][ T7928] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.510'. [ 124.875762][ T7928] nbd: must specify at least one socket [ 124.892213][ T7926] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 124.901313][ T7929] netlink: 4 bytes leftover after parsing attributes in process `syz.3.510'. [ 124.952510][ T7935] netlink: 20 bytes leftover after parsing attributes in process `syz.2.509'. [ 125.248929][ T7944] netlink: 'syz.3.513': attribute type 18 has an invalid length. [ 125.291969][ T7951] sctp: [Deprecated]: syz.1.515 (pid 7951) Use of int in max_burst socket option deprecated. [ 125.291969][ T7951] Use struct sctp_assoc_value instead [ 125.420145][ T7957] sctp: [Deprecated]: syz.2.518 (pid 7957) Use of int in max_burst socket option. [ 125.420145][ T7957] Use struct sctp_assoc_value instead [ 125.445969][ T7961] netlink: 12 bytes leftover after parsing attributes in process `syz.4.517'. [ 125.695238][ T5526] veth0_vlan: left promiscuous mode [ 125.705154][ T7970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.520'. [ 125.729660][ T5526] veth0_vlan: entered promiscuous mode [ 125.752074][ T7970] netlink: 12 bytes leftover after parsing attributes in process `syz.2.520'. [ 125.829854][ T30] audit: type=1800 audit(1755464517.203:2): pid=7972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.521" name="memory.events" dev="tmpfs" ino=495 res=0 errno=0 [ 126.081664][ T7990] netlink: 6040 bytes leftover after parsing attributes in process `syz.0.522'. [ 126.382239][ T8006] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.528'. [ 126.466062][ T8006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.528'. [ 126.699387][ T8023] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 127.766743][ T6979] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.784426][ T6175] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.848923][ T6175] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.863842][ T6978] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.919966][ T8088] netlink: 'syz.3.550': attribute type 7 has an invalid length. [ 128.042399][ T8088] : entered promiscuous mode [ 128.157391][ T8099] tipc: Enabling of bearer rejected, failed to enable media [ 128.380959][ T8109] netem: invalid attributes len -24 [ 128.418433][ T8109] netem: change failed [ 129.025348][ T8139] ip6erspan0 speed is unknown, defaulting to 1000 [ 129.093380][ T8139] ip6erspan0 speed is unknown, defaulting to 1000 [ 129.119036][ T8139] ip6erspan0 speed is unknown, defaulting to 1000 [ 129.228128][ T8139] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 129.272702][ T8139] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 129.317895][ T8146] ip6erspan0 speed is unknown, defaulting to 1000 [ 129.531175][ T8139] ip6erspan0 speed is unknown, defaulting to 1000 [ 129.621183][ T8139] ip6erspan0 speed is unknown, defaulting to 1000 [ 129.698709][ T8160] team1: entered promiscuous mode [ 129.723785][ T8160] team1: entered allmulticast mode [ 129.766805][ T8139] ip6erspan0 speed is unknown, defaulting to 1000 [ 129.785435][ T51] Bluetooth: hci4: link tx timeout [ 129.791086][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 129.800307][ T5181] Bluetooth: hci4: link tx timeout [ 129.805562][ T5181] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 129.813282][ T5181] Bluetooth: hci4: link tx timeout [ 129.818498][ T5181] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 129.898843][ T8181] __nla_validate_parse: 13 callbacks suppressed [ 129.898866][ T8181] netlink: 12 bytes leftover after parsing attributes in process `syz.0.576'. [ 130.000203][ T8139] ip6erspan0 speed is unknown, defaulting to 1000 [ 130.109484][ T8179] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 130.162290][ T8139] ip6erspan0 speed is unknown, defaulting to 1000 [ 130.285599][ T8199] sctp: [Deprecated]: syz.1.579 (pid 8199) Use of int in max_burst socket option deprecated. [ 130.285599][ T8199] Use struct sctp_assoc_value instead [ 130.375282][ T8205] netlink: 12 bytes leftover after parsing attributes in process `syz.1.579'. [ 130.399594][ T8201] netlink: 84 bytes leftover after parsing attributes in process `syz.0.582'. [ 130.401994][ T8205] netlink: 56 bytes leftover after parsing attributes in process `syz.1.579'. [ 130.422761][ T8205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.579'. [ 130.435016][ T8204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.581'. [ 130.453289][ T8198] tipc: Enabled bearer , priority 0 [ 130.461444][ T8198] syzkaller0: entered promiscuous mode [ 130.463249][ T8204] netlink: 20 bytes leftover after parsing attributes in process `syz.4.581'. [ 130.468290][ T8198] syzkaller0: entered allmulticast mode [ 130.559029][ T8198] tipc: Resetting bearer [ 130.569756][ T6973] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.590623][ T8197] tipc: Resetting bearer [ 130.632589][ T8197] tipc: Disabling bearer [ 130.651413][ T6973] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.694062][ T6978] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.702816][ T6978] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.467096][ T8254] netlink: 'syz.4.595': attribute type 29 has an invalid length. [ 131.495090][ T8261] netlink: 892 bytes leftover after parsing attributes in process `syz.1.596'. [ 131.657896][ T8268] netlink: 96 bytes leftover after parsing attributes in process `syz.3.597'. [ 131.749884][ T8268] vlan2: entered allmulticast mode [ 131.775752][ T8268] gretap0: entered allmulticast mode [ 131.802267][ T8278] netlink: 28 bytes leftover after parsing attributes in process `syz.2.599'. [ 131.837607][ T5181] Bluetooth: hci4: command 0x0405 tx timeout [ 131.898170][ T8277] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 131.906098][ T5989] IPVS: starting estimator thread 0... [ 132.014597][ T8284] IPVS: using max 26 ests per chain, 62400 per kthread [ 132.792612][ T8300] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.800374][ T8300] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.814910][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.976077][ T8300] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 133.136619][ T8340] netlink: 'syz.4.615': attribute type 33 has an invalid length. [ 133.388336][ T8357] netlink: 'syz.0.620': attribute type 23 has an invalid length. [ 133.585266][ T8370] pim6reg: entered allmulticast mode [ 133.879937][ T8386] netlink: 'syz.1.629': attribute type 1 has an invalid length. [ 134.026414][ T8401] bond2: (slave gretap1): making interface the new active one [ 134.040424][ T8401] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 134.331964][ T8420] netlink: 'syz.4.637': attribute type 4 has an invalid length. [ 135.117275][ T8440] netlink: 'syz.4.645': attribute type 1 has an invalid length. [ 135.746684][ T8473] ip6erspan0: entered promiscuous mode [ 136.023517][ T8493] tipc: Enabling of bearer rejected, failed to enable media [ 136.313268][ T8513] __nla_validate_parse: 9 callbacks suppressed [ 136.313287][ T8513] netlink: 24 bytes leftover after parsing attributes in process `syz.2.670'. [ 136.477589][ T8519] veth1_macvtap: left promiscuous mode [ 136.507713][ T8519] macsec0: entered promiscuous mode [ 136.521273][ T8519] macsec0: entered allmulticast mode [ 136.559241][ T8518] netlink: 32 bytes leftover after parsing attributes in process `syz.2.670'. [ 136.569116][ T8527] veth1_macvtap: entered promiscuous mode [ 136.602518][ T8527] veth1_macvtap: entered allmulticast mode [ 136.627343][ T8527] macsec0: left promiscuous mode [ 136.646198][ T8527] macsec0: left allmulticast mode [ 136.662311][ T8527] veth1_macvtap: left allmulticast mode [ 136.670520][ T8530] netlink: 12 bytes leftover after parsing attributes in process `syz.1.675'. [ 136.714811][ T8534] netlink: 12 bytes leftover after parsing attributes in process `syz.2.676'. [ 136.822871][ T8534] lo: entered allmulticast mode [ 136.892017][ T8534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.676'. [ 137.117451][ T8548] netlink: 'syz.2.679': attribute type 1 has an invalid length. [ 137.169057][ T8552] netlink: 28 bytes leftover after parsing attributes in process `syz.2.679'. [ 137.306245][ T8548] bond1: entered promiscuous mode [ 137.327725][ T8548] 8021q: adding VLAN 0 to HW filter on device bond1 [ 137.917515][ T8581] netlink: 'syz.0.686': attribute type 1 has an invalid length. [ 137.933247][ T8585] netlink: 12 bytes leftover after parsing attributes in process `syz.2.688'. [ 137.946123][ T8585] openvswitch: netlink: Flow actions attr not present in new flow. [ 137.981747][ T8581] netlink: 12 bytes leftover after parsing attributes in process `syz.0.686'. [ 138.025818][ T8581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.686'. [ 138.216434][ T8604] netlink: 'syz.4.690': attribute type 2 has an invalid length. [ 138.267683][ T8604] netlink: 'syz.4.690': attribute type 2 has an invalid length. [ 138.472639][ T8618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.694'. [ 138.575566][ T8620] netlink: 'syz.4.696': attribute type 29 has an invalid length. [ 138.586063][ T8620] netlink: 'syz.4.696': attribute type 1 has an invalid length. [ 138.769059][ T5962] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 138.915094][ T8639] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 139.082923][ T8609] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 139.287132][ T8660] openvswitch: netlink: Missing valid actions attribute. [ 139.294873][ T8660] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.534335][ T8649] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.192036][ T8678] infiniband syz!: set down [ 140.197084][ T8678] infiniband syz!: added team_slave_0 [ 140.271592][ T8678] RDS/IB: syz!: added [ 140.289640][ T8678] smc: adding ib device syz! with port count 1 [ 140.296544][ T8678] smc: ib device syz! port 1 has pnetid [ 140.319429][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 140.336054][ T8708] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 140.411165][ T8646] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 140.522973][ T8715] netlink: 'syz.2.722': attribute type 4 has an invalid length. [ 140.532721][ T8715] sctp: [Deprecated]: syz.2.722 (pid 8715) Use of struct sctp_assoc_value in delayed_ack socket option. [ 140.532721][ T8715] Use struct sctp_sack_info instead [ 140.670313][ T8725] veth0: entered promiscuous mode [ 140.784391][ T8726] veth0 (unregistering): left promiscuous mode [ 140.896411][ T8735] macvlan2: entered promiscuous mode [ 140.901764][ T8735] macvlan2: entered allmulticast mode [ 140.921226][ T8735] veth1_to_bond: entered promiscuous mode [ 140.944710][ T8735] veth1_to_bond: entered allmulticast mode [ 140.967397][ T8735] team0: Port device macvlan2 added [ 141.012383][ T8734] pim6reg1: entered promiscuous mode [ 141.022334][ T8734] pim6reg1: entered allmulticast mode [ 141.116617][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 141.130516][ T51] Bluetooth: hci3: command 0x0401 tx timeout [ 141.317457][ T8763] __nla_validate_parse: 9 callbacks suppressed [ 141.317474][ T8763] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.735'. [ 141.520897][ T8774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.737'. [ 141.860754][ T8787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.739'. [ 141.909038][ T8794] netlink: 8 bytes leftover after parsing attributes in process `syz.4.739'. [ 142.534234][ T8828] netlink: 12 bytes leftover after parsing attributes in process `syz.4.750'. [ 142.570084][ T8828] netlink: 4 bytes leftover after parsing attributes in process `syz.4.750'. [ 142.583929][ T8828] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.604552][ T8828] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.655840][ T8828] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.663791][ T8828] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.066618][ T8846] netlink: 24 bytes leftover after parsing attributes in process `syz.3.753'. [ 143.154499][ T8853] netlink: 4 bytes leftover after parsing attributes in process `syz.0.755'. [ 143.163308][ T8853] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 143.609189][ T8879] netlink: 24 bytes leftover after parsing attributes in process `syz.3.759'. [ 143.914885][ T8893] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 144.100260][ T8901] : renamed from hsr0 (while UP) [ 144.206146][ T8907] netlink: 'syz.3.767': attribute type 1 has an invalid length. [ 144.222899][ T8907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.767'. [ 144.506199][ T8930] ip6erspan0: entered promiscuous mode [ 144.511708][ T8930] ip6erspan0: entered allmulticast mode [ 144.923712][ T8946] syz.2.776 (8946) used greatest stack depth: 17864 bytes left [ 145.114000][ T8959] batadv_slave_0: entered promiscuous mode [ 145.300398][ T8955] batadv_slave_0: left promiscuous mode [ 145.673883][ T8997] netlink: 'syz.4.795': attribute type 4 has an invalid length. [ 145.898768][ T9010] ieee802154 phy0 wpan0: encryption failed: -22 [ 146.209847][ T9039] 8021q: VLANs not supported on lo [ 146.341029][ T9049] tipc: Started in network mode [ 146.352010][ T9049] tipc: Node identity 4, cluster identity 4711 [ 146.370281][ T9049] tipc: Node number set to 4 [ 146.668110][ T9064] __nla_validate_parse: 10 callbacks suppressed [ 146.668128][ T9064] netlink: 28 bytes leftover after parsing attributes in process `syz.1.815'. [ 146.818619][ T9075] netlink: 20 bytes leftover after parsing attributes in process `syz.2.816'. [ 147.061184][ T9080] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.819'. [ 147.110715][ T9080] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 147.193423][ T9080] openvswitch: netlink: Duplicate key (type 0). [ 147.293795][ T9092] netlink: 'syz.4.822': attribute type 16 has an invalid length. [ 147.340294][ T9092] netlink: 'syz.4.822': attribute type 17 has an invalid length. [ 147.354253][ T9094] netlink: 104 bytes leftover after parsing attributes in process `syz.1.821'. [ 147.687801][ T9092] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.695074][ T9092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.702828][ T9092] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.710050][ T9092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.758867][ T9092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.768168][ T9104] netlink: 32 bytes leftover after parsing attributes in process `syz.2.823'. [ 147.797029][ T9092] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.845377][ T9092] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 148.190411][ T9130] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 2, id = 0 [ 148.201183][ T9129] !: renamed from dummy0 (while UP) [ 148.399278][ T9133] netlink: 4 bytes leftover after parsing attributes in process `syz.4.829'. [ 148.765807][ T9149] x_tables: ip_tables: udp match: only valid for protocol 17 [ 148.778732][ T9150] x_tables: ip_tables: udp match: only valid for protocol 17 [ 148.793963][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 148.836124][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888057026800: rx timeout, send abort [ 148.846032][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888057026800: 0x1ff01: (3) A timeout occurred and this is the connection abort to close the session. [ 149.137136][ T9163] netlink: 216 bytes leftover after parsing attributes in process `syz.2.837'. [ 149.393886][ T9178] netlink: 'syz.1.841': attribute type 10 has an invalid length. [ 149.401851][ T9178] netlink: 12 bytes leftover after parsing attributes in process `syz.1.841'. [ 149.520375][ T9182] nftables ruleset with unbound set [ 149.588270][ T9188] netlink: 'syz.2.842': attribute type 13 has an invalid length. [ 149.749268][ T9188] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 149.771926][ T9198] netlink: 16 bytes leftover after parsing attributes in process `syz.4.844'. [ 149.781721][ T9198] netlink: 92 bytes leftover after parsing attributes in process `syz.4.844'. [ 150.197544][ T9221] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 150.223534][ T9221] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 151.816570][ T9316] __nla_validate_parse: 10 callbacks suppressed [ 151.816587][ T9316] netlink: 388 bytes leftover after parsing attributes in process `syz.3.878'. [ 152.094196][ T9320] ip6erspan0 speed is unknown, defaulting to 1000 [ 152.114764][ T9324] netlink: 24 bytes leftover after parsing attributes in process `syz.4.882'. [ 152.141824][ T9335] netlink: 232 bytes leftover after parsing attributes in process `syz.2.884'. [ 152.417723][ T9352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.890'. [ 152.440501][ T9352] netlink: 12 bytes leftover after parsing attributes in process `syz.2.890'. [ 152.542364][ T9354] netlink: 'syz.1.891': attribute type 1 has an invalid length. [ 152.561829][ T9352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.890'. [ 152.580776][ T9354] netlink: 736 bytes leftover after parsing attributes in process `syz.1.891'. [ 152.747461][ T9369] netlink: 'syz.1.894': attribute type 2 has an invalid length. [ 152.807341][ T9373] netlink: 'syz.1.894': attribute type 2 has an invalid length. [ 152.869058][ T9376] netlink: 'syz.1.894': attribute type 4 has an invalid length. [ 152.917463][ T9376] netlink: 152 bytes leftover after parsing attributes in process `syz.1.894'. [ 152.972792][ T9376] `: renamed from bond0 [ 153.131170][ T9385] netlink: 24 bytes leftover after parsing attributes in process `syz.2.898'. [ 153.303160][ T9394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.900'. [ 153.408908][ T9408] netlink: 'syz.3.902': attribute type 1 has an invalid length. [ 153.421209][ T9404] tipc: Enabled bearer , priority 0 [ 153.621857][ T9404] tipc: Disabling bearer [ 153.702814][ T9432] netlink: 'syz.3.908': attribute type 24 has an invalid length. [ 153.887722][ T9438] netlink: 'syz.4.910': attribute type 27 has an invalid length. [ 154.230188][ T9447] tipc: Enabled bearer , priority 0 [ 154.239335][ T9450] netlink: 'syz.1.916': attribute type 3 has an invalid length. [ 154.258269][ T9447] syzkaller0: entered promiscuous mode [ 154.283697][ T9447] syzkaller0: entered allmulticast mode [ 154.389798][ T9447] tipc: Resetting bearer [ 154.431237][ T9446] tipc: Resetting bearer [ 154.468826][ T9446] tipc: Disabling bearer [ 154.655962][ T9480] validate_nla: 1 callbacks suppressed [ 154.655980][ T9480] netlink: 'syz.3.923': attribute type 1 has an invalid length. [ 155.302845][ T9522] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 155.310394][ T9522] IPv6: NLM_F_CREATE should be set when creating new route [ 155.355973][ T9524] netlink: 'syz.3.936': attribute type 9 has an invalid length. [ 155.976886][ T9559] netlink: 'syz.2.946': attribute type 11 has an invalid length. [ 156.023957][ T9559] netlink: 'syz.2.946': attribute type 11 has an invalid length. [ 156.981485][ T9597] netlink: 'syz.1.958': attribute type 10 has an invalid length. [ 157.011528][ T9597] macvtap0: left allmulticast mode [ 157.651613][ T9633] __nla_validate_parse: 45 callbacks suppressed [ 157.651629][ T9633] netlink: 44 bytes leftover after parsing attributes in process `syz.3.970'. [ 157.687617][ T9633] netlink: 44 bytes leftover after parsing attributes in process `syz.3.970'. [ 157.862540][ T9648] atomic_op ffff888078202198 conn xmit_atomic 0000000000000000 [ 157.864293][ T9649] atomic_op ffff888023ce7998 conn xmit_atomic 0000000000000000 [ 158.360635][ T9681] netlink: 27 bytes leftover after parsing attributes in process `syz.2.985'. [ 158.652859][ T9691] syzkaller1: entered promiscuous mode [ 158.659337][ T9691] syzkaller1: entered allmulticast mode [ 158.667641][ T9695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.992'. [ 158.692920][ T9695] netlink: 12 bytes leftover after parsing attributes in process `syz.0.992'. [ 158.744628][ T9695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.992'. [ 158.758913][ T9695] netlink: 12 bytes leftover after parsing attributes in process `syz.0.992'. [ 158.882007][ T9704] netlink: 'syz.2.994': attribute type 1 has an invalid length. [ 158.931653][ T9704] netlink: 'syz.2.994': attribute type 2 has an invalid length. [ 158.940592][ T9704] netlink: 'syz.2.994': attribute type 1 has an invalid length. [ 158.963504][ T9706] netlink: 'syz.2.994': attribute type 1 has an invalid length. [ 158.972117][ T9706] netlink: 'syz.2.994': attribute type 2 has an invalid length. [ 158.990212][ T9706] netlink: 'syz.2.994': attribute type 1 has an invalid length. [ 159.013206][ T9710] netlink: 16 bytes leftover after parsing attributes in process `syz.0.996'. [ 159.023568][ T9710] netlink: 16 bytes leftover after parsing attributes in process `syz.0.996'. [ 159.431940][ T9718] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1000'. [ 159.528393][ T9718] netlink: 'syz.0.1000': attribute type 21 has an invalid length. [ 159.730125][ T9732] validate_nla: 2 callbacks suppressed [ 159.730142][ T9732] netlink: 'syz.0.1003': attribute type 1 has an invalid length. [ 159.999486][ T9751] netlink: 'syz.4.1006': attribute type 1 has an invalid length. [ 160.182221][ T9765] rdma_op ffff8880577d29f0 conn xmit_rdma 0000000000000000 [ 160.335200][ T9762] bond3: (slave bridge5): making interface the new active one [ 160.344520][ T9762] bond3: (slave bridge5): Enslaving as an active interface with an up link [ 160.416297][ T9770] netlink: 'syz.0.1009': attribute type 10 has an invalid length. [ 160.436987][ T9770] mac80211_hwsim hwsim4 wlan1: left allmulticast mode [ 160.464304][ T9774] nbd0: detected capacity change from 0 to 127 [ 160.495961][ T9770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.623240][ T51] block nbd0: Receive control failed (result -104) [ 160.932468][ T9802] netlink: 'syz.3.1017': attribute type 21 has an invalid length. [ 161.120729][ T9812] netlink: 'syz.3.1023': attribute type 1 has an invalid length. [ 161.230533][ T9823] vlan0: entered promiscuous mode [ 161.258481][ T9823] vlan0: entered allmulticast mode [ 161.303752][ T9823] hsr_slave_1: entered allmulticast mode [ 161.497822][ T9847] openvswitch: netlink: Duplicate or invalid key (type 0). [ 161.557426][ T9847] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 161.879958][ T9867] erspan0: entered allmulticast mode [ 162.021106][ T9852] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.4.1031:9852 [ 162.054488][ T9872] netlink: 'syz.3.1039': attribute type 7 has an invalid length. [ 162.081889][ T9872] team0: Device vti0 is of different type [ 162.182759][ T9880] tc_dump_action: action bad kind [ 162.364053][ T9892] openvswitch: netlink: Flow key attr not present in new flow. [ 162.700334][ T9911] netlink: 'syz.0.1049': attribute type 7 has an invalid length. [ 162.742214][ T9914] __nla_validate_parse: 17 callbacks suppressed [ 162.742232][ T9914] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1050'. [ 162.971350][ T9930] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1055'. [ 163.046165][ T9934] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1056'. [ 163.227783][ T9954] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1057'. [ 163.431513][ T9965] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1063'. [ 163.614607][ T9973] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 163.759450][ T9986] bond0: option mode: unable to set because the bond device has slaves [ 163.884384][ T9989] team0: Device wireguard0 is up. Set it down before adding it as a team port [ 163.897724][ T9985] IPVS: set_ctl: invalid protocol: 43 172.30.0.4:20000 [ 163.912938][ T9985] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1071'. [ 163.995556][ T9982] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1069'. [ 164.046205][ T9985] ip6_vti0: entered promiscuous mode [ 164.053025][ T9985] ip6_vti0: entered allmulticast mode [ 164.090629][ T9993] ip6erspan0 speed is unknown, defaulting to 1000 [ 164.289469][ T980] IPVS: starting estimator thread 0... [ 164.424026][T10009] IPVS: using max 30 ests per chain, 72000 per kthread [ 164.639949][T10019] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1080'. [ 164.658018][T10019] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1080'. [ 164.673504][T10019] ieee802154 phy0 wpan0: encryption failed: -22 [ 164.798411][T10034] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1083'. [ 165.045461][T10045] netlink: 'syz.4.1084': attribute type 10 has an invalid length. [ 165.202541][T10047] unsupported nlmsg_type 40 [ 165.671414][T10077] geneve2: entered promiscuous mode [ 165.686839][T10077] geneve2: entered allmulticast mode [ 165.711748][ T6980] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 165.803939][ T6980] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 165.833200][ T6980] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 165.896055][ T6980] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 166.082846][T10103] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 166.330844][T10112] pimreg: entered allmulticast mode [ 166.397444][T10118] netlink: 'syz.0.1105': attribute type 10 has an invalid length. [ 166.473425][T10120] tipc: Enabled bearer , priority 0 [ 166.519189][T10120] syzkaller0: entered promiscuous mode [ 166.524960][T10120] syzkaller0: entered allmulticast mode [ 166.602295][T10120] tipc: Resetting bearer [ 166.667024][T10119] tipc: Resetting bearer [ 166.693174][T10135] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 167.254577][T10163] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 167.517203][ T24] tipc: Node number set to 2141109546 [ 168.206624][T10119] tipc: Disabling bearer [ 168.520482][T10191] sctp: [Deprecated]: syz.4.1127 (pid 10191) Use of int in max_burst socket option deprecated. [ 168.520482][T10191] Use struct sctp_assoc_value instead [ 168.554150][T10192] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20002 [ 168.572648][T10193] __nla_validate_parse: 5 callbacks suppressed [ 168.572666][T10193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1126'. [ 168.777484][T10206] netlink: 'syz.1.1130': attribute type 1 has an invalid length. [ 168.860515][T10206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.931992][T10214] bond0: (slave ip6erspan0): making interface the new active one [ 168.997090][T10214] bond0: (slave ip6erspan0): Enslaving as an active interface with an up link [ 169.144963][T10227] netlink: 'syz.1.1135': attribute type 1 has an invalid length. [ 169.377265][T10235] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1138'. [ 169.403508][T10244] netlink: 'syz.2.1142': attribute type 1 has an invalid length. [ 169.411956][T10244] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1142'. [ 169.422631][T10244] nbd: couldn't find device at index 1048576 [ 169.433081][T10247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1138'. [ 169.444527][T10247] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1138'. [ 169.466896][T10241] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1140'. [ 169.521267][T10241] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1140'. [ 169.562126][T10241] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1140'. [ 169.637488][T10253] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 169.863839][T10262] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1149'. [ 169.877322][T10272] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1148'. [ 170.057778][T10262] ip6erspan0 speed is unknown, defaulting to 1000 [ 170.905803][T10319] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 171.927921][T10316] ip6erspan0 speed is unknown, defaulting to 1000 [ 172.331051][T10351] netlink: 'syz.2.1171': attribute type 21 has an invalid length. [ 172.772149][T10369] openvswitch: netlink: Actions may not be safe on all matching packets [ 173.446167][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.480809][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.880755][T10429] __nla_validate_parse: 10 callbacks suppressed [ 173.880772][T10429] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1191'. [ 173.907276][T10429] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1191'. [ 173.928788][T10429] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1191'. [ 173.963792][T10429] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1191'. [ 173.987966][T10433] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1191'. [ 174.159445][T10438] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1192'. [ 174.175564][T10438] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1192'. [ 174.193473][T10438] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1192'. [ 174.342007][T10446] netlink: 'syz.4.1194': attribute type 1 has an invalid length. [ 174.369762][T10446] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1194'. [ 174.410553][T10446] netlink: 'syz.4.1194': attribute type 1 has an invalid length. [ 174.437401][T10446] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1194'. [ 174.470390][T10446] netlink: 'syz.4.1194': attribute type 1 has an invalid length. [ 174.510926][T10456] Oops: general protection fault, probably for non-canonical address 0xfbd5a5d5a0000003: 0000 [#1] SMP KASAN PTI [ 174.513889][T10446] netlink: 'syz.4.1194': attribute type 1 has an invalid length. [ 174.522836][T10456] KASAN: maybe wild-memory-access in range [0xdead4ead00000018-0xdead4ead0000001f] [ 174.522865][T10456] CPU: 0 UID: 0 PID: 10456 Comm: syz.2.1196 Not tainted 6.17.0-rc1-syzkaller-00127-g715c7a36d59f #0 PREEMPT(full) [ 174.541170][T10446] netlink: 'syz.4.1194': attribute type 1 has an invalid length. [ 174.551960][T10456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 174.551973][T10456] RIP: 0010:smc_diag_dump_proto+0x4cd/0x1fb0 [ 174.552012][T10456] Code: 80 3c 2f 00 74 08 48 89 df e8 ef e3 fa f6 4c 8b 23 4d 85 e4 0f 84 22 02 00 00 48 89 5c 24 30 49 83 c4 18 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 c4 e3 fa f6 4d 8b 2c 24 49 83 c5 [ 174.552024][T10456] RSP: 0018:ffffc90005536f40 EFLAGS: 00010a06 [ 174.552044][T10456] RAX: 1bd5a9d5a0000003 RBX: ffff8880287e6e38 RCX: ffff8880245cda00 [ 174.552055][T10456] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000 [ 174.552065][T10456] RBP: ffffc900055372b0 R08: ffff8880287e685f R09: 1ffff110050fcd0b [ 174.561352][T10446] netlink: 'syz.4.1194': attribute type 1 has an invalid length. [ 174.569887][T10456] R10: dffffc0000000000 R11: ffffed10050fcd0c R12: dead4ead00000018 [ 174.569901][T10456] R13: dffffc0000000000 R14: ffff8880287e6800 R15: 1ffff110050fcdc7 [ 174.569913][T10456] FS: 00007fbd2ac446c0(0000) GS:ffff888125c1c000(0000) knlGS:0000000000000000 [ 174.569925][T10456] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 174.569936][T10456] CR2: 000020000000e000 CR3: 0000000026864000 CR4: 00000000003526f0 [ 174.569950][T10456] Call Trace: [ 174.569957][T10456] [ 174.569973][T10456] ? __pfx_smc_diag_dump_proto+0x10/0x10 [ 174.684180][T10456] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 174.689722][T10456] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 174.695251][T10456] ? __phys_addr+0xd3/0x180 [ 174.699735][T10456] ? __kasan_kmalloc_large+0x85/0xa0 [ 174.705003][T10456] ? rcu_is_watching+0x15/0xb0 [ 174.709748][T10456] ? rcu_is_watching+0x15/0xb0 [ 174.714498][T10456] ? trace_kmalloc+0x1f/0xd0 [ 174.719068][T10456] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 174.725668][T10456] ? __build_skb_around+0x257/0x3e0 [ 174.730855][T10456] smc_diag_dump+0x59/0xa0 [ 174.735257][T10456] netlink_dump+0x6e1/0xe90 [ 174.739746][T10456] ? __pfx_netlink_dump+0x10/0x10 [ 174.744751][T10456] ? __netlink_lookup+0x752/0x810 [ 174.749765][T10456] ? netlink_lookup+0x30/0x200 [ 174.754510][T10456] ? netlink_lookup+0x30/0x200 [ 174.759254][T10456] ? netlink_lookup+0x30/0x200 [ 174.764010][T10456] __netlink_dump_start+0x5cb/0x7e0 [ 174.769191][T10456] smc_diag_handler_dump+0x178/0x210 [ 174.774456][T10456] ? __pfx_smc_diag_handler_dump+0x10/0x10 [ 174.780242][T10456] ? __pfx_smc_diag_dump+0x10/0x10 [ 174.785333][T10456] ? sock_diag_lock_handler+0x19/0x290 [ 174.790772][T10456] ? sock_diag_lock_handler+0x19/0x290 [ 174.796214][T10456] sock_diag_rcv_msg+0x4cc/0x600 [ 174.801137][T10456] netlink_rcv_skb+0x208/0x470 [ 174.805889][T10456] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 174.811335][T10456] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 174.816610][T10456] ? netlink_deliver_tap+0x2e/0x1b0 [ 174.821794][T10456] netlink_unicast+0x82c/0x9e0 [ 174.826539][T10456] ? __pfx_netlink_unicast+0x10/0x10 [ 174.831806][T10456] ? netlink_sendmsg+0x642/0xb30 [ 174.836727][T10456] ? skb_put+0x11b/0x210 [ 174.840947][T10456] netlink_sendmsg+0x805/0xb30 [ 174.845695][T10456] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.850962][T10456] ? aa_sock_msg_perm+0xf1/0x1d0 [ 174.855885][T10456] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 174.861150][T10456] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.866415][T10456] __sock_sendmsg+0x219/0x270 [ 174.871073][T10456] ____sys_sendmsg+0x505/0x830 [ 174.875823][T10456] ? __pfx_____sys_sendmsg+0x10/0x10 [ 174.881093][T10456] ? import_iovec+0x74/0xa0 [ 174.885588][T10456] ___sys_sendmsg+0x21f/0x2a0 [ 174.890244][T10456] ? __pfx____sys_sendmsg+0x10/0x10 [ 174.895433][T10456] ? __fget_files+0x2a/0x420 [ 174.900000][T10456] ? __fget_files+0x3a0/0x420 [ 174.904656][T10456] __x64_sys_sendmsg+0x19b/0x260 [ 174.909576][T10456] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 174.915023][T10456] ? rcu_is_watching+0x15/0xb0 [ 174.919767][T10456] ? do_syscall_64+0xbe/0x3b0 [ 174.924426][T10456] do_syscall_64+0xfa/0x3b0 [ 174.928911][T10456] ? lockdep_hardirqs_on+0x9c/0x150 [ 174.934091][T10456] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.940135][T10456] ? clear_bhb_loop+0x60/0xb0 [ 174.944790][T10456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.950670][T10456] RIP: 0033:0x7fbd29d8ebe9 [ 174.955082][T10456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.974669][T10456] RSP: 002b:00007fbd2ac44038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 174.983082][T10456] RAX: ffffffffffffffda RBX: 00007fbd29fb6180 RCX: 00007fbd29d8ebe9 [ 174.991033][T10456] RDX: 0000000000000600 RSI: 0000200000000540 RDI: 0000000000000014 [ 174.998985][T10456] RBP: 00007fbd29e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 175.006954][T10456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.014908][T10456] R13: 00007fbd29fb6218 R14: 00007fbd29fb6180 R15: 00007ffce92df788 [ 175.022867][T10456] [ 175.025876][T10456] Modules linked in: [ 175.030767][T10456] ---[ end trace 0000000000000000 ]--- [ 175.037010][T10456] RIP: 0010:smc_diag_dump_proto+0x4cd/0x1fb0 [ 175.043004][T10456] Code: 80 3c 2f 00 74 08 48 89 df e8 ef e3 fa f6 4c 8b 23 4d 85 e4 0f 84 22 02 00 00 48 89 5c 24 30 49 83 c4 18 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 c4 e3 fa f6 4d 8b 2c 24 49 83 c5 [ 175.062636][T10456] RSP: 0018:ffffc90005536f40 EFLAGS: 00010a06 [ 175.068720][T10456] RAX: 1bd5a9d5a0000003 RBX: ffff8880287e6e38 RCX: ffff8880245cda00 [ 175.076781][T10456] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000 [ 175.084761][T10456] RBP: ffffc900055372b0 R08: ffff8880287e685f R09: 1ffff110050fcd0b [ 175.092715][T10456] R10: dffffc0000000000 R11: ffffed10050fcd0c R12: dead4ead00000018 [ 175.100966][T10456] R13: dffffc0000000000 R14: ffff8880287e6800 R15: 1ffff110050fcdc7 [ 175.109211][T10456] FS: 00007fbd2ac446c0(0000) GS:ffff888125c1c000(0000) knlGS:0000000000000000 [ 175.118181][T10456] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 175.124791][T10456] CR2: 000020000000e000 CR3: 0000000026864000 CR4: 00000000003526f0 [ 175.132750][T10456] Kernel panic - not syncing: Fatal exception [ 175.139029][T10456] Kernel Offset: disabled [ 175.143332][T10456] Rebooting in 86400 seconds..