last executing test programs: 1m10.071603852s ago: executing program 1 (id=702): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r5 = socket(0x11, 0xa, 0x0) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x24, 0x29, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0xe, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x40c4) 1m9.768087165s ago: executing program 1 (id=704): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f00000021c0), 0x8) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000001080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x3, [@var={0xd, 0x0, 0x0, 0xe, 0x3}, @const={0x8, 0x0, 0x0, 0xa, 0x1}, @enum={0x9, 0x1, 0x0, 0x6, 0x4, [{0xc, 0x9}]}, @union={0x7, 0x4, 0x0, 0x5, 0x0, 0x2, [{0x5, 0x1, 0x8}, {0x4, 0x3, 0xffff}, {0x3, 0x5, 0x8}, {0x0, 0x5, 0x5}]}]}, {0x0, [0x0]}}, &(0x7f0000001140)=""/4096, 0x87, 0x1000, 0x0, 0x4, 0x10000, @value=r0}, 0x28) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002300)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, r1, 0x5, 0x3, 0x1}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002140)={0x1b, 0x0, 0x0, 0x40000, 0x0, r2, 0x2000000, '\x00', 0x0, 0x0, 0x2, 0x0, 0xfffffffd}, 0x50) r4 = socket$inet6(0xa, 0x805, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0xa09d, 0x0, 0x200, 0x3}, 0x10) getsockopt$bt_hci(r4, 0x84, 0x70, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) ioctl$BTRFS_IOC_INO_PATHS(r4, 0xc0389423, &(0x7f0000002280)={0x6d, 0x48, [0x8, 0x784, 0x9, 0x200], &(0x7f0000002200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000700)={'dummy0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0xd}, {0x0, 0x2}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) bpf$PROG_LOAD(0x5, &(0x7f0000002440)={0xa, 0x10, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfad}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xffffff80}}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{0x5, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x83}}}, &(0x7f00000022c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000021c0), 0x8) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000001080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x3, [@var={0xd, 0x0, 0x0, 0xe, 0x3}, @const={0x8, 0x0, 0x0, 0xa, 0x1}, @enum={0x9, 0x1, 0x0, 0x6, 0x4, [{0xc, 0x9}]}, @union={0x7, 0x4, 0x0, 0x5, 0x0, 0x2, [{0x5, 0x1, 0x8}, {0x4, 0x3, 0xffff}, {0x3, 0x5, 0x8}, {0x0, 0x5, 0x5}]}]}, {0x0, [0x0]}}, &(0x7f0000001140)=""/4096, 0x87, 0x1000, 0x0, 0x4, 0x10000, @value=r0}, 0x28) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002300)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, r1, 0x5, 0x3, 0x1}, 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002140)={0x1b, 0x0, 0x0, 0x40000, 0x0, r2, 0x2000000, '\x00', 0x0, 0x0, 0x2, 0x0, 0xfffffffd}, 0x50) (async) socket$inet6(0xa, 0x805, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0xa09d, 0x0, 0x200, 0x3}, 0x10) (async) getsockopt$bt_hci(r4, 0x84, 0x70, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) (async) ioctl$BTRFS_IOC_INO_PATHS(r4, 0xc0389423, &(0x7f0000002280)={0x6d, 0x48, [0x8, 0x784, 0x9, 0x200], &(0x7f0000002200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000700)={'dummy0\x00'}) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0xd}, {0x0, 0x2}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) (async) bpf$PROG_LOAD(0x5, &(0x7f0000002440)={0xa, 0x10, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfad}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xffffff80}}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{0x5, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x83}}}, &(0x7f00000022c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 57.153782748s ago: executing program 0 (id=792): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="7c010000190001000000000000000000fe880000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000100000000000000c4000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000010000000000000000000000000000e0000002000000000000000000000000000000006c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fc00000000000000000000000000000000000000040004"], 0x17c}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newtfilter={0x38, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r4, {0xd, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_EMATCHES={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x200008c0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000080000000000000006ac0c1095d358ac869860bd7d69b82db99d35b33e42da245daae148139544487dd5cba4ce13f6874ea00226141bf3d750f8446763a4b6705245f2b3a3444aa47be446bf8489bd89f0421b6023dab91c1"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005345c0f63cdc2e82818254950ee03568b8809a1f04c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab66c1aae9314d7381fcfeb970bea672010000000000000043144648a07a975bd89dc398712376610faa54f12495b4659be8673086f6f3543205d4bc4ce05b8b961103673dff7f158052e62bfbdcddde6985f3f1ac5d9a94cc53207899762a07282a1914452d11858e795a3ca30a101af5574f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5ed44039aab46419496362e54cfad05b4004ac71a003d7b85d07191bed4e5a8908263722d4146f7ed569985439baa355cf3d8731f5e7a237bc06d035a8d601f21746d880819f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c5b9f87d988c9fbd2b9d9b4e2d71753b1549fa734f0b2e5fcf9549804cddad721971637f9c9730a9cc384eed30345979db9c93e1c52f42cad0a4d4f9436d3f39b0ed09c395dc6e970366087a8e4daeeb1b017006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f710c490ecd085d2811a7555c53030000007f00000000bfa6478eb96b079c277e2910b7ccdc3d672ed34aa65278c549e2abb549ad954884289130bc71cee2b7de62bf48129ae1af052a2d46a6165eb0954dac7265f1f425735acf6377793946b3229e861d8ea49806b3b533345d36ecef9df700000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c000000aaae37f044bcadeb0f6846582b7653665aa336db9f0384d3c7ddf79c2e0000000000000000000000000000000000000000000000e154aa0d3e41986a668ee1e5ef93a8ceac75f44aae95e26742f895f287111f8ee86f7e3ffb63cfb0e345cf7fc63dd2b0d30977899c6f03640040af4db71f7452bfc79a05118d8bb42b63b195771e42f9942ec626bd4b5461b74324012164e8"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000100)={@random="e10931d8640a", @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "014100", 0x10, 0x88, 0x0, @rand_addr=' \x01\x00', @local, {[], {0x0, 0x0, 0x8, 0x0, @gue={{0x2}}}}}}}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB="02"], 0x10) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000f00)=ANY=[@ANYRES32=r9, @ANYRES32=r6, @ANYBLOB="02"], 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0xdc0, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f0080048e0050000310000003377fbac141416e000000183070403b180008903040000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) connect$inet(r5, &(0x7f0000000f00)={0x2, 0x4e22, @empty}, 0x10) 56.15828802s ago: executing program 0 (id=808): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x7, @local, 0x3}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000a00)=0x4, 0x4) 55.764423096s ago: executing program 0 (id=813): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="380aa1abc2138fb23322e507fd8a0200000000000000000000000000000000eeff00e4ffff000055801e54b1d4820a6141052f1a75426bd6c90a793fdac6978b2b783941ae522e71f8850b0b000000000000002892cffca4c9a98f5f0063da9232b843b7824fc2ebd54bf300000000000000000000d9082fe7b009000000895a78ca165308e8cadce5770ad0755881bb081465de3314036f9916816619cd0e4afdf52550e25791016b86", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f00000011c0), 0x0, 0x0, 0xfffffffd}, 0xfffffffffffffe52) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 55.201144673s ago: executing program 1 (id=704): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f00000021c0), 0x8) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000001080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x3, [@var={0xd, 0x0, 0x0, 0xe, 0x3}, @const={0x8, 0x0, 0x0, 0xa, 0x1}, @enum={0x9, 0x1, 0x0, 0x6, 0x4, [{0xc, 0x9}]}, @union={0x7, 0x4, 0x0, 0x5, 0x0, 0x2, [{0x5, 0x1, 0x8}, {0x4, 0x3, 0xffff}, {0x3, 0x5, 0x8}, {0x0, 0x5, 0x5}]}]}, {0x0, [0x0]}}, &(0x7f0000001140)=""/4096, 0x87, 0x1000, 0x0, 0x4, 0x10000, @value=r0}, 0x28) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002300)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, r1, 0x5, 0x3, 0x1}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002140)={0x1b, 0x0, 0x0, 0x40000, 0x0, r2, 0x2000000, '\x00', 0x0, 0x0, 0x2, 0x0, 0xfffffffd}, 0x50) r4 = socket$inet6(0xa, 0x805, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0xa09d, 0x0, 0x200, 0x3}, 0x10) getsockopt$bt_hci(r4, 0x84, 0x70, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) ioctl$BTRFS_IOC_INO_PATHS(r4, 0xc0389423, &(0x7f0000002280)={0x6d, 0x48, [0x8, 0x784, 0x9, 0x200], &(0x7f0000002200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000700)={'dummy0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0xd}, {0x0, 0x2}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) bpf$PROG_LOAD(0x5, &(0x7f0000002440)={0xa, 0x10, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfad}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xffffff80}}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{0x5, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x83}}}, &(0x7f00000022c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000021c0), 0x8) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000001080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x3, [@var={0xd, 0x0, 0x0, 0xe, 0x3}, @const={0x8, 0x0, 0x0, 0xa, 0x1}, @enum={0x9, 0x1, 0x0, 0x6, 0x4, [{0xc, 0x9}]}, @union={0x7, 0x4, 0x0, 0x5, 0x0, 0x2, [{0x5, 0x1, 0x8}, {0x4, 0x3, 0xffff}, {0x3, 0x5, 0x8}, {0x0, 0x5, 0x5}]}]}, {0x0, [0x0]}}, &(0x7f0000001140)=""/4096, 0x87, 0x1000, 0x0, 0x4, 0x10000, @value=r0}, 0x28) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002300)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, r1, 0x5, 0x3, 0x1}, 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002140)={0x1b, 0x0, 0x0, 0x40000, 0x0, r2, 0x2000000, '\x00', 0x0, 0x0, 0x2, 0x0, 0xfffffffd}, 0x50) (async) socket$inet6(0xa, 0x805, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0xa09d, 0x0, 0x200, 0x3}, 0x10) (async) getsockopt$bt_hci(r4, 0x84, 0x70, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) (async) ioctl$BTRFS_IOC_INO_PATHS(r4, 0xc0389423, &(0x7f0000002280)={0x6d, 0x48, [0x8, 0x784, 0x9, 0x200], &(0x7f0000002200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000700)={'dummy0\x00'}) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0xd}, {0x0, 0x2}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) (async) bpf$PROG_LOAD(0x5, &(0x7f0000002440)={0xa, 0x10, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfad}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xffffff80}}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{0x5, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x83}}}, &(0x7f00000022c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 41.401380397s ago: executing program 0 (id=813): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="380aa1abc2138fb23322e507fd8a0200000000000000000000000000000000eeff00e4ffff000055801e54b1d4820a6141052f1a75426bd6c90a793fdac6978b2b783941ae522e71f8850b0b000000000000002892cffca4c9a98f5f0063da9232b843b7824fc2ebd54bf300000000000000000000d9082fe7b009000000895a78ca165308e8cadce5770ad0755881bb081465de3314036f9916816619cd0e4afdf52550e25791016b86", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f00000011c0), 0x0, 0x0, 0xfffffffd}, 0xfffffffffffffe52) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 39.656972322s ago: executing program 1 (id=704): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f00000021c0), 0x8) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000001080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x3, [@var={0xd, 0x0, 0x0, 0xe, 0x3}, @const={0x8, 0x0, 0x0, 0xa, 0x1}, @enum={0x9, 0x1, 0x0, 0x6, 0x4, [{0xc, 0x9}]}, @union={0x7, 0x4, 0x0, 0x5, 0x0, 0x2, [{0x5, 0x1, 0x8}, {0x4, 0x3, 0xffff}, {0x3, 0x5, 0x8}, {0x0, 0x5, 0x5}]}]}, {0x0, [0x0]}}, &(0x7f0000001140)=""/4096, 0x87, 0x1000, 0x0, 0x4, 0x10000, @value=r0}, 0x28) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002300)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, r1, 0x5, 0x3, 0x1}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002140)={0x1b, 0x0, 0x0, 0x40000, 0x0, r2, 0x2000000, '\x00', 0x0, 0x0, 0x2, 0x0, 0xfffffffd}, 0x50) r4 = socket$inet6(0xa, 0x805, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0xa09d, 0x0, 0x200, 0x3}, 0x10) getsockopt$bt_hci(r4, 0x84, 0x70, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) ioctl$BTRFS_IOC_INO_PATHS(r4, 0xc0389423, &(0x7f0000002280)={0x6d, 0x48, [0x8, 0x784, 0x9, 0x200], &(0x7f0000002200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000700)={'dummy0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0xd}, {0x0, 0x2}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) bpf$PROG_LOAD(0x5, &(0x7f0000002440)={0xa, 0x10, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfad}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xffffff80}}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{0x5, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x83}}}, &(0x7f00000022c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000021c0), 0x8) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000001080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x3, [@var={0xd, 0x0, 0x0, 0xe, 0x3}, @const={0x8, 0x0, 0x0, 0xa, 0x1}, @enum={0x9, 0x1, 0x0, 0x6, 0x4, [{0xc, 0x9}]}, @union={0x7, 0x4, 0x0, 0x5, 0x0, 0x2, [{0x5, 0x1, 0x8}, {0x4, 0x3, 0xffff}, {0x3, 0x5, 0x8}, {0x0, 0x5, 0x5}]}]}, {0x0, [0x0]}}, &(0x7f0000001140)=""/4096, 0x87, 0x1000, 0x0, 0x4, 0x10000, @value=r0}, 0x28) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002300)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, r1, 0x5, 0x3, 0x1}, 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002140)={0x1b, 0x0, 0x0, 0x40000, 0x0, r2, 0x2000000, '\x00', 0x0, 0x0, 0x2, 0x0, 0xfffffffd}, 0x50) (async) socket$inet6(0xa, 0x805, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0xa09d, 0x0, 0x200, 0x3}, 0x10) (async) getsockopt$bt_hci(r4, 0x84, 0x70, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) (async) ioctl$BTRFS_IOC_INO_PATHS(r4, 0xc0389423, &(0x7f0000002280)={0x6d, 0x48, [0x8, 0x784, 0x9, 0x200], &(0x7f0000002200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000700)={'dummy0\x00'}) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0xd}, {0x0, 0x2}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) (async) bpf$PROG_LOAD(0x5, &(0x7f0000002440)={0xa, 0x10, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfad}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xffffff80}}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{0x5, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x83}}}, &(0x7f00000022c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 26.753257466s ago: executing program 0 (id=813): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="380aa1abc2138fb23322e507fd8a0200000000000000000000000000000000eeff00e4ffff000055801e54b1d4820a6141052f1a75426bd6c90a793fdac6978b2b783941ae522e71f8850b0b000000000000002892cffca4c9a98f5f0063da9232b843b7824fc2ebd54bf300000000000000000000d9082fe7b009000000895a78ca165308e8cadce5770ad0755881bb081465de3314036f9916816619cd0e4afdf52550e25791016b86", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f00000011c0), 0x0, 0x0, 0xfffffffd}, 0xfffffffffffffe52) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 26.015753375s ago: executing program 1 (id=704): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f00000021c0), 0x8) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000001080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x3, [@var={0xd, 0x0, 0x0, 0xe, 0x3}, @const={0x8, 0x0, 0x0, 0xa, 0x1}, @enum={0x9, 0x1, 0x0, 0x6, 0x4, [{0xc, 0x9}]}, @union={0x7, 0x4, 0x0, 0x5, 0x0, 0x2, [{0x5, 0x1, 0x8}, {0x4, 0x3, 0xffff}, {0x3, 0x5, 0x8}, {0x0, 0x5, 0x5}]}]}, {0x0, [0x0]}}, &(0x7f0000001140)=""/4096, 0x87, 0x1000, 0x0, 0x4, 0x10000, @value=r0}, 0x28) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002300)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, r1, 0x5, 0x3, 0x1}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002140)={0x1b, 0x0, 0x0, 0x40000, 0x0, r2, 0x2000000, '\x00', 0x0, 0x0, 0x2, 0x0, 0xfffffffd}, 0x50) r4 = socket$inet6(0xa, 0x805, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0xa09d, 0x0, 0x200, 0x3}, 0x10) getsockopt$bt_hci(r4, 0x84, 0x70, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) ioctl$BTRFS_IOC_INO_PATHS(r4, 0xc0389423, &(0x7f0000002280)={0x6d, 0x48, [0x8, 0x784, 0x9, 0x200], &(0x7f0000002200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000700)={'dummy0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0xd}, {0x0, 0x2}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) bpf$PROG_LOAD(0x5, &(0x7f0000002440)={0xa, 0x10, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfad}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xffffff80}}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{0x5, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x83}}}, &(0x7f00000022c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000021c0), 0x8) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000001080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x3, [@var={0xd, 0x0, 0x0, 0xe, 0x3}, @const={0x8, 0x0, 0x0, 0xa, 0x1}, @enum={0x9, 0x1, 0x0, 0x6, 0x4, [{0xc, 0x9}]}, @union={0x7, 0x4, 0x0, 0x5, 0x0, 0x2, [{0x5, 0x1, 0x8}, {0x4, 0x3, 0xffff}, {0x3, 0x5, 0x8}, {0x0, 0x5, 0x5}]}]}, {0x0, [0x0]}}, &(0x7f0000001140)=""/4096, 0x87, 0x1000, 0x0, 0x4, 0x10000, @value=r0}, 0x28) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002300)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, r1, 0x5, 0x3, 0x1}, 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002140)={0x1b, 0x0, 0x0, 0x40000, 0x0, r2, 0x2000000, '\x00', 0x0, 0x0, 0x2, 0x0, 0xfffffffd}, 0x50) (async) socket$inet6(0xa, 0x805, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0xa09d, 0x0, 0x200, 0x3}, 0x10) (async) getsockopt$bt_hci(r4, 0x84, 0x70, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) (async) ioctl$BTRFS_IOC_INO_PATHS(r4, 0xc0389423, &(0x7f0000002280)={0x6d, 0x48, [0x8, 0x784, 0x9, 0x200], &(0x7f0000002200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000700)={'dummy0\x00'}) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0xd}, {0x0, 0x2}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) (async) bpf$PROG_LOAD(0x5, &(0x7f0000002440)={0xa, 0x10, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfad}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xffffff80}}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{0x5, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x83}}}, &(0x7f00000022c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 13.567844048s ago: executing program 0 (id=813): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="380aa1abc2138fb23322e507fd8a0200000000000000000000000000000000eeff00e4ffff000055801e54b1d4820a6141052f1a75426bd6c90a793fdac6978b2b783941ae522e71f8850b0b000000000000002892cffca4c9a98f5f0063da9232b843b7824fc2ebd54bf300000000000000000000d9082fe7b009000000895a78ca165308e8cadce5770ad0755881bb081465de3314036f9916816619cd0e4afdf52550e25791016b86", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000023000000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000001007d60b7030000010000006a0a00fe00000000850000000d0000009700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000000000639100000000000000000000ff7f0000292f17cee19d0001000000000000000000cb04fcbb0ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4852f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5d053bdec75dca3772be2c9d2d29db3d36dd01797bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67d4c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1b1b71b5f7ec6edc76609073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc972a3fd2c46f3c1cde71a19d1a2982492aba0883783d2831210e00d2bfea3bf97ff8836d000000000000946bdb747e416b3064edb4f5aea06eba207ddab9f9baf98bc5192f23d95d33357fc55f92e5937e10995059f3348f69667b9260d504ba96446e1437af6fa875d9d32fdaaae01e6c74f192a23572ef582b7dd867c163c8cedaa2a2c5baceb37d4a40244c9bdca541cc7e65e20f5b5b735e2f33df9bd0614431d7dc5e47bb31c5b827d51733b64ddad4de1cdadce076d19d62e821b435619fb89fc07f81938200b4ebce83db57a6f5e9b1c2cf4b6ee90772d4865bf448d200e5c4e1e044d3587498128273b65670c02ff5c3c3ca633c41324fdc09e0b2621087db26bb0553612f2be27579ede2344a809e6b27d0044f2337895323357caddb54642dac82ae25deb08e111e0b9fa133c9da85dc50c3454ee0ff915331bd7f32f96fb55c7990334b1a1bc4d5d817b82f9fc278cc4858fbfa4d0f32a863c1ce050caddc5ca3b10c3e63daebba039e9f80fdef113a145ace522e8379474aa8849dcc2501df3ffcb02d29d55a1a2cbe00e836db0e6b0a7ffd680dbcf7b982a956998df3dce0e9091a4d736db69038061e"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f00000011c0), 0x0, 0x0, 0xfffffffd}, 0xfffffffffffffe52) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 12.783981379s ago: executing program 1 (id=704): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f00000021c0), 0x8) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000001080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x3, [@var={0xd, 0x0, 0x0, 0xe, 0x3}, @const={0x8, 0x0, 0x0, 0xa, 0x1}, @enum={0x9, 0x1, 0x0, 0x6, 0x4, [{0xc, 0x9}]}, @union={0x7, 0x4, 0x0, 0x5, 0x0, 0x2, [{0x5, 0x1, 0x8}, {0x4, 0x3, 0xffff}, {0x3, 0x5, 0x8}, {0x0, 0x5, 0x5}]}]}, {0x0, [0x0]}}, &(0x7f0000001140)=""/4096, 0x87, 0x1000, 0x0, 0x4, 0x10000, @value=r0}, 0x28) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002300)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, r1, 0x5, 0x3, 0x1}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002140)={0x1b, 0x0, 0x0, 0x40000, 0x0, r2, 0x2000000, '\x00', 0x0, 0x0, 0x2, 0x0, 0xfffffffd}, 0x50) r4 = socket$inet6(0xa, 0x805, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0xa09d, 0x0, 0x200, 0x3}, 0x10) getsockopt$bt_hci(r4, 0x84, 0x70, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) ioctl$BTRFS_IOC_INO_PATHS(r4, 0xc0389423, &(0x7f0000002280)={0x6d, 0x48, [0x8, 0x784, 0x9, 0x200], &(0x7f0000002200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000700)={'dummy0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0xd}, {0x0, 0x2}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) bpf$PROG_LOAD(0x5, &(0x7f0000002440)={0xa, 0x10, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfad}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xffffff80}}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{0x5, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x83}}}, &(0x7f00000022c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000021c0), 0x8) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000001080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x3, [@var={0xd, 0x0, 0x0, 0xe, 0x3}, @const={0x8, 0x0, 0x0, 0xa, 0x1}, @enum={0x9, 0x1, 0x0, 0x6, 0x4, [{0xc, 0x9}]}, @union={0x7, 0x4, 0x0, 0x5, 0x0, 0x2, [{0x5, 0x1, 0x8}, {0x4, 0x3, 0xffff}, {0x3, 0x5, 0x8}, {0x0, 0x5, 0x5}]}]}, {0x0, [0x0]}}, &(0x7f0000001140)=""/4096, 0x87, 0x1000, 0x0, 0x4, 0x10000, @value=r0}, 0x28) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002300)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, r1, 0x5, 0x3, 0x1}, 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002140)={0x1b, 0x0, 0x0, 0x40000, 0x0, r2, 0x2000000, '\x00', 0x0, 0x0, 0x2, 0x0, 0xfffffffd}, 0x50) (async) socket$inet6(0xa, 0x805, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0xa09d, 0x0, 0x200, 0x3}, 0x10) (async) getsockopt$bt_hci(r4, 0x84, 0x70, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) (async) ioctl$BTRFS_IOC_INO_PATHS(r4, 0xc0389423, &(0x7f0000002280)={0x6d, 0x48, [0x8, 0x784, 0x9, 0x200], &(0x7f0000002200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000700)={'dummy0\x00'}) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0xd}, {0x0, 0x2}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) (async) bpf$PROG_LOAD(0x5, &(0x7f0000002440)={0xa, 0x10, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfad}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xffffff80}}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{0x5, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x83}}}, &(0x7f00000022c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 2.695396987s ago: executing program 2 (id=1247): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x5, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x24044010) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xfffffffffffffd38}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x0) 2.658908389s ago: executing program 4 (id=1248): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000a80)=0xffffffffffffffff, 0x4) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x2, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x1}], 0x18}, 0x4000000) (async) sendmsg$rds(r0, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x2, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x1}], 0x18}, 0x4000000) bpf$TOKEN_CREATE(0x24, &(0x7f00000006c0)={0x0, r0}, 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f00000006c0)={0x0, r0}, 0x8) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a00)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000c40)) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000300)={'nat\x00', 0x0, 0x3, 0xe8, [0x401, 0x3ff, 0x7, 0x101, 0x9, 0x7fffffffffffffff], 0x1, &(0x7f0000000040)=[{}], &(0x7f0000000080)=""/232}, &(0x7f0000000180)=0x78) socket$rxrpc(0x21, 0x2, 0xa) (async) r3 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x14, 0x110}}], 0x18, 0x4c00}, 0x12) r4 = socket$nl_crypto(0x10, 0x3, 0x15) r5 = socket$netlink(0x10, 0x3, 0x14) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000700)={'bond0\x00'}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000700)={'bond0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000000)={'bond0\x00', 0x1}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000000)={'bond0\x00', 0x1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c000000030601040000fcffffff0000070000080900020073797a3200000000050001"], 0x4c}}, 0x0) (async) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c000000030601040000fcffffff0000070000080900020073797a3200000000050001"], 0x4c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)={0x38, 0x1403, 0x1, 0x70bd24, 0x25dfdbf7, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="e000000015000000000000000000000061656769733132382d67656e657269"], 0xe0}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0xfb, 0x9a, &(0x7f0000000b00)="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", &(0x7f0000000500)=""/154, 0xc, 0x0, 0x45, 0x181, &(0x7f0000000400)="abd227a9f79b3c212a2364864d277eebbede490e361882e024112ffb8ddc68b90855cd6f7ad7a6293a5b9a92a213b20879333d3cdadc98450d1fd26e305314f8924e2ea9dd", &(0x7f0000000c80)="2304010a64d6da8e8f9ba859c818b7fa240ca5c7bdb711dec899ba65bef97f31553f32c15d75decd50fb182de375a2eccf2eaa03258904f3380fec1760dea1d88ad7c63a16173f2c11d5ca73ab84c09cbb0e4ae1f910199752b9db7285aba7687e8a1fd195869e19c6370c26a905a0bca3d40c3b3d36be7fd9dba3f68e84819884a51b9290b67ed6f1ad1f33a15361351c31e551da3494ccba6173ebbdca012ae5e51c8d13c26271e7fa718760d601af6251c6bcf89c6d5ba694706c706e2abe56e9dc5052d570d97db204cb7239bfb7c40f44a5c9f7a46b8f6e01cfdd0ce02c70c4fa5dad5571ee53af192eca2c5b45471743107455f1e56da1632941f8a1b2bec21dda93897f0b9be9d4bb3e132c501db404db9c88422a65d9e7cba282cea530cbd608bb97823702eca2a5fa6ec9a7daa5190187dac85bd9a0edec7ed988b4741dadc84857df6537789e37fd286901d113efa0650a43e929df55c4df3e5ab47dd0277038d369918d3e74d6c9674f13bd8104125f7b92300c6c79307a7069c308", 0x1, 0x0, 0x227c24be}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0xfb, 0x9a, &(0x7f0000000b00)="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", &(0x7f0000000500)=""/154, 0xc, 0x0, 0x45, 0x181, &(0x7f0000000400)="abd227a9f79b3c212a2364864d277eebbede490e361882e024112ffb8ddc68b90855cd6f7ad7a6293a5b9a92a213b20879333d3cdadc98450d1fd26e305314f8924e2ea9dd", &(0x7f0000000c80)="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", 0x1, 0x0, 0x227c24be}, 0x50) socket$inet6_sctp(0xa, 0x801, 0x84) (async) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r8, 0x84, 0x7c, &(0x7f00000010c0)=""/4111, &(0x7f0000000200)=0x100f) sendmsg$nl_crypto(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000100001"], 0xe8}}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r9, 0x0, 0x13, &(0x7f0000d10ffc), 0x4) accept(r9, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000780)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000080b70200ef13000000b7030000090000000000000008000000bf0908000002000055090100000000009500000000000000bc9110020000000056080000005bb99763d3368c3a24f147af0c4e0000008500000007000000b7000000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000780)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000080b70200ef13000000b7030000090000000000000008000000bf0908000002000055090100000000009500000000000000bc9110020000000056080000005bb99763d3368c3a24f147af0c4e0000008500000007000000b7000000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.536039527s ago: executing program 2 (id=1250): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4060039960000000000711124000000000085100000020000df84000000070000009500000000000000000000000000000007b21772fa06101331a60c5d60a712388e0ba08f2b0a6dbcc90c0f3e60db3c463a9b281bd6"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r0, 0xe8, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002d00210000000000000000000400008008000c"], 0x1c}], 0x1}, 0x0) 2.399480827s ago: executing program 3 (id=1251): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}]}]}], {0x14}}, 0xd4}}, 0x0) 2.358725366s ago: executing program 4 (id=1252): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) setsockopt$inet6_int(r1, 0x29, 0x46, 0x0, 0x0) (async) getsockopt$inet6_int(r1, 0x29, 0x46, 0x0, &(0x7f00000000c0)) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@gettaction={0xf0, 0x32, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x100}}]}, @action_gd=@TCA_ACT_TAB={0x64, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffa}}]}]}, 0xf0}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x90) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000300)={0x80, 0x9, 0x1, 0xb}, 0x10) (async) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) (async) r4 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r5 = socket(0x2, 0x80805, 0x0) (async) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async, rerun: 64) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) (rerun: 64) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x74, &(0x7f0000000500)={r7, 0x20, 0x30, 0x3, 0xa}, &(0x7f00000005c0)=0x18) getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000000)={r7, 0x80}, &(0x7f0000000040)=0x8) (async) write(r4, &(0x7f0000000140)="edd8018b2a93b40706020131158430f1268aefe065018e2a947294e58cd28a990601ee49de9f3e7cdf70e4ce3df7178c2c9b7371b51e6dff21d699b581d0a67aeb2fee8cadd415d604f5bc9ce6ab24b1b0362ed177a864ea38354c48b8ec681e681bfd77818859f0fbd4f60f8e12234a9790206e6e80afc5b936cb5e442c5a4ce0046bc80e01dea4d7432f1d3d408dfe2ac265ddd805a754cebda0b03e536014c7", 0xa1) 2.168181096s ago: executing program 2 (id=1253): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'bond_slave_0\x00', {0x2, 0x4e22, @multicast1}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040840}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFINDEX(r3, 0x400454da, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000300)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x6, 0x4, 0x0, 0x2, 0x34, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local, {[@generic={0x7, 0x4, "64ed"}]}}, @dest_unreach={0x4, 0x1, 0x0, 0x0, 0x0, 0x1400, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x11, 0x0, @local, @loopback}}}}, 0x42) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r6, 0x0, 0x8000, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0xfe1b) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000240)={'veth0_macvtap\x00', 0x400}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) write$tun(r3, &(0x7f0000000440)={@void, @val={0x3, 0x3, 0x563, 0x1000, 0x7, 0x9}, @ipv6=@tipc_packet={0x8, 0x6, "dd042c", 0x167, 0x6, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x3b}, {[@dstopts={0x2, 0xd, '\x00', [@hao={0xc9, 0x10, @empty}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x48, {0x3, 0x10, 0xb0, 0x5, [0x8000000000000001, 0x5, 0x7, 0xaee, 0x6155, 0x7fffffffffffffff, 0x3, 0x8]}}, @ra={0x5, 0x2, 0x2aa4}, @ra={0x5, 0x2, 0x4}]}, @fragment={0x2, 0x0, 0xed, 0x0, 0x0, 0x9, 0x64}, @srh={0x0, 0x2, 0x4, 0x1, 0xb, 0x60, 0x9, [@remote]}, @dstopts={0x67, 0x2, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}]}, @routing={0x1d, 0x8, 0x0, 0x7, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast2}, @empty, @mcast2, @remote]}, @srh={0x2b, 0x8, 0x4, 0x4, 0x8, 0xc, 0x40, [@dev={0xfe, 0x80, '\x00', 0x15}, @empty, @rand_addr=' \x01\x00', @mcast2]}], @payload_conn={{{0x1f, 0x0, 0x1, 0x1, 0x0, 0x6, 0x3, 0x2, 0xa, 0x0, 0x2, 0x9, 0x0, 0x0, 0x400, 0x906f, 0x0, 0x4e22, 0x4e21}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}, 0x199) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002b00)=ANY=[@ANYBLOB="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"/3910], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r10, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r12 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r11}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r12, 0x2f000000, 0xe, 0x0, &(0x7f0000000780)="5ceced9e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r9], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_getaddr={0x34, 0x16, 0x100, 0x70bd2c, 0x25dfdbfd, {0xa, 0x20, 0x82, 0xc8, r9}, [@IFA_FLAGS={0x8, 0x8, 0x208}, @IFA_CACHEINFO={0x14, 0x6, {0x8, 0x8, 0x3, 0xfffffffe}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x8000) 2.167749054s ago: executing program 3 (id=1254): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r0 = socket(0x2, 0x3, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=@bridge_setlink={0x44, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4, 0x5, 0x0, 0x0, [{0x8, 0x0, 0x0, 0x0, 0x123e}, {0x8, 0x6}, {0x8}]}}]}]}, 0x44}}, 0x0) r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000001c0)={[{0x2d, 'cpuacct'}, {0x2d, 'cpuset'}, {0x2b, 'net_prio'}, {0x2b, 'cpuacct'}]}, 0x24) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000240)={r1, 0x2}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, 0x0, 0x8000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r4) r8 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x1, 0x1c, 0x67, 0x0, 0x5, 0x2, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x22, 0x9, 0x0, @empty}}}}}, 0x0) sendmsg(r8, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x58, r7, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x801}, 0x4000004) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$IPSET_CMD_ADD(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140e00000020c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x240008c4) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x8000) 1.95314914s ago: executing program 4 (id=1255): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x4}, {}, {}, {}]}, @fwd, @volatile, @typedef={0x4, 0x0, 0x0, 0x8, 0x3}, @volatile={0x0, 0x0, 0x0, 0x9, 0x6}]}}, 0x0, 0x96}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_tracing={0x1a, 0xc, &(0x7f0000000700)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, 0x1}, @ringbuf_query, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x20800, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000007c0)={0x3, 0xb, 0xf5, 0x5}, 0x10, 0x975a, r1, 0x1, &(0x7f0000000800)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000840)=[{0x3, 0x3, 0x10, 0x1}], 0x10, 0x10001}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000240)=@raw=[@map_fd={0x18, 0x0, 0x1, 0x0, 0x1}], &(0x7f00000005c0)='GPL\x00', 0x200, 0xf4, &(0x7f0000000600)=""/244, 0x41100, 0x43, '\x00', 0x0, 0x17, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x29746, r2, 0x9, 0x0, &(0x7f0000000940)=[{0x2, 0x2, 0xc, 0xc}, {0x4, 0x4, 0x4, 0xe44a5a26bf3f19c5}, {0x3, 0x4, 0xb, 0x8}, {0x3, 0x3, 0x8}, {0x0, 0x5, 0x8, 0x8}, {0xfffffffe, 0x3, 0x1, 0xa}, {0x1, 0x2, 0x5, 0xc}, {0x4, 0x5, 0x4, 0x4}, {0x4, 0x3, 0xd, 0x7}], 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000200)={[{0x2b, 'devices'}, {0x2d, 'rlimit'}, {0x2b, 'net_cls'}, {0x2b, 'devices'}]}, 0x23) (async) write$cgroup_subtree(r4, &(0x7f0000000200)={[{0x2b, 'devices'}, {0x2d, 'rlimit'}, {0x2b, 'net_cls'}, {0x2b, 'devices'}]}, 0x23) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1}, 0x20) r6 = socket$key(0xf, 0x3, 0x2) r7 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r7, &(0x7f0000000ac0)="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", 0x1000, 0x8000, &(0x7f0000000400)={0x23, 0x2, 0xbc, 0x1}, 0x10) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300030f000000000700000000000005000900e000000001d78771b90bd8a3b4914783c58777003d5b9538a9d03e6e9bfdac550000000003000600000000000200000000000000000000000000000002000100000000000000020d00000000030005000000000002"], 0x78}, 0x1, 0x7}, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000001ac0)={{0x16, @broadcast, 0x4e22, 0x0, 'none\x00', 0x1b, 0xe8, 0x7b}, {@multicast2, 0x4e20, 0x3, 0xfffffffd, 0x4, 0x92}}, 0x44) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) (async) setsockopt$sock_int(r8, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) listen(r8, 0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x3}, 0x80) (async) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x3}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f0000001b40)={r7}) (async) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f0000001b40)={r7}) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000001b80)=0x0, &(0x7f0000001bc0)=0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f0000001c40)={'syztnl0\x00', &(0x7f0000001c00)={'syztnl0\x00', r11, 0x700, 0x7, 0x7fffffff, 0x9, {{0x7, 0x4, 0x1, 0x22, 0x1c, 0x65, 0x0, 0xf, 0x4, 0x0, @loopback, @local, {[@ssrr={0x89, 0x7, 0x34, [@loopback]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f0000001c40)={'syztnl0\x00', &(0x7f0000001c00)={'syztnl0\x00', r11, 0x700, 0x7, 0x7fffffff, 0x9, {{0x7, 0x4, 0x1, 0x22, 0x1c, 0x65, 0x0, 0xf, 0x4, 0x0, @loopback, @local, {[@ssrr={0x89, 0x7, 0x34, [@loopback]}]}}}}}) 1.731954513s ago: executing program 3 (id=1256): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000032, 0x0, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x33}}) syz_emit_ethernet(0x1b9, &(0x7f0000000580)=ANY=[@ANYBLOB="bbbbbbbbbbbbffff"], 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x300, 0xffffffff, 0xffffffff, 0x300, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, [], [], 'wg1\x00', 'gre0\x00', {0xff}}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r3, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r4, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) pselect6(0x40, &(0x7f0000000100)={0x9, 0x47f, 0x7, 0x7, 0x9, 0x10001, 0x1, 0xf8}, 0x0, 0x0, &(0x7f0000000200), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000180)=ANY=[@ANYRES64=r1], &(0x7f0000000040)='GPL\x00', 0x5, 0xb7, &(0x7f000000cf3d)=""/183, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, r4}, 0x94) 1.212408551s ago: executing program 3 (id=1257): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r4 = accept4(r2, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, r6, 0x1, 0x70bd28, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24011}, 0x6004084) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r4) sendmsg$alg(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x840}, 0x4040880) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x4c, &(0x7f0000000080)=0xcdb, 0x4) connect$unix(r1, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x114, 0x23, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r9, 0x118, 0x1, &(0x7f0000000000), 0x4) 1.211298358s ago: executing program 4 (id=1258): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xb, &(0x7f00000000c0)=0xa2daa4f2, 0x4) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) unshare(0x40100) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_getroute={0x28, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x9}, [@RTA_MULTIPATH={0xc, 0x1d, {0xb, 0x1, 0x60}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x14, 0x42, 0xb, 0x70bd23, 0x25dfdbfb, {0x3}}, 0x14}}, 0x24040084) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) pread64(r3, &(0x7f0000000b40)=""/4096, 0x1000, 0x3) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES8=r3], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a0b040000380000000000020000003c0004803800018007000100637400002c000280150002400000000708000240000000110800014000000014080001400000000d05000300030000000900010073797a30000000000900020073797a32"], 0x90}}, 0x0) 1.080644179s ago: executing program 2 (id=1259): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0xd, {0x0, 0x10}}]}}}]}, 0x60}}, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)) 1.033028082s ago: executing program 4 (id=1260): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x21, 0x7ff}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r9}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 496.178376ms ago: executing program 2 (id=1261): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000140)={'sit0\x00', 0x0}) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340), 0x8) r1 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x2e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7800000600"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00P'], 0x78}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r3, @ANYBLOB="40005200060010"], 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x48041) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r5, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r5, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x9, 0x2, 0x0, 0x0, 0x25dfdbfe}, 0x10}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000a80)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000004c0)=@getsadinfo={0x57c, 0x23, 0x1, 0x70bd28, 0x25dfdbfd, 0x0, [@policy_type={0xa}, @tmpl={0x144, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x4d3, 0xff}, 0x1e, @in=@rand_addr=0x64010102, 0x3504, 0x1, 0x1, 0x5, 0x861, 0x357, 0x3}, {{@in=@loopback, 0x4d4, 0x14}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3505, 0x2, 0x2, 0x4, 0x4, 0xfffffff7, 0x546d}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2e}, 0x4d4, 0x3c}, 0xa, @in=@private=0xa010102, 0x0, 0x2, 0x0, 0x8, 0xadc, 0x4, 0xfffffffd}, {{@in6=@private1, 0x4d6, 0xa3d0e914b305622f}, 0x2, @in6=@empty, 0x34ff, 0x0, 0x2, 0x4, 0x4, 0x7fffffff, 0x400}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x3c}, 0x2, @in=@broadcast, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2, 0x30ff}]}, @algo_comp={0x113, 0x3, {{'deflate\x00'}, 0x658, "7631bb62eb0b0cb77950f8635fb93b30d8a50e0ae26f99649eb58dcde33602e836ad0da122689a0d61e96071b9f68694c66fb896c7b50c77b8e9f4c7e802fe153bb622971cc67e755c72b7b50a80ba5d1d61779b62a98ef4ec16e1965064bdc794137df5f55a86697cf67f95f02a5aef9f01d32aea0a81435a408860ab7d47ce035258d891dcf03e9740c2a37672bb11bba8c83f8754610e10fbecda2fd04a5b89f80e6b946db391a51b26bcfa2eac40efc97f91408c41c7d4f9c455e74675df652ebe762d1dfec986179e"}}, @tmpl={0x144, 0x5, [{{@in6=@loopback, 0x4d3, 0x33}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3505, 0x3, 0x1, 0x72, 0x10000, 0x2, 0xfff}, {{@in6=@local, 0x4d5, 0x33}, 0xa, @in6=@remote, 0x3505, 0x1, 0x3, 0xf1, 0x8, 0xeb8, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d5, 0x6c}, 0xa, @in6=@remote, 0x3503, 0x3, 0x0, 0x1, 0xb, 0x7, 0x7}, {{@in=@private=0xa010101, 0x4d4, 0x3c}, 0x2, @in6=@mcast1, 0x0, 0x0, 0x3, 0x1, 0x8, 0x3, 0x7}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d2, 0x2b}, 0xd, @in=@loopback, 0x0, 0x3, 0x2, 0x2, 0xe9a, 0x2, 0x2}]}, @algo_auth={0xcc, 0x1, {{'ghash-ce-sync\x00'}, 0x420, "10312b21cd59a253ddd4e17eec3919dd676f42f80f10372ab9fe3beabf00afea3a34d3020964d4930fb1b9d08abb9bc26731ed59200a6628df3f71569ef033d0b8c1cba1fa5b25dbaaeb681406cd3953440dec782988e0ea571c606b9f20dccad609bb2557bf812a1384fe0cae4ad9aca71842776d11296a77975f6dd95ce753d8cf0ca6"}}, @migrate={0xe8, 0x11, [{@in6=@local, @in6=@ipv4={'\x00', '\xff\xff', @empty}, @in6=@remote, @in=@rand_addr=0x64010101, 0x32, 0x0, 0x0, 0x3504, 0x2, 0x2}, {@in=@multicast2, @in=@remote, @in6=@private1, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2b, 0x2, 0x0, 0x3504, 0xa, 0x2}, {@in=@loopback, @in=@private=0xa010101, @in6=@mcast1, @in6=@private2, 0x33, 0x3, 0x0, 0x3502, 0xa, 0xa}]}, @offload={0xc, 0x1c, {r6, 0x1}}]}, 0x57c}, 0x1, 0x0, 0x0, 0x4010}, 0x20004080) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d00000000000500010004000000050015"], 0x4c}}, 0x0) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r8, 0x8954, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f0000000000), 0x400000000000235, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="1400000048c4577b41a51ab64065a8355af84f647433bd306a00803e86f0ade5163327f6f5ec96c670ee6b64a7ff494cd2cbcc80dfd8a44c981467c8302675fca5cf640b17753771ad6239e7d5dfc88abb5526e802e74e6e6cbddfea1f9e7f678a0709dab58e9075f8f1dc832180fbecee053c439b7e2d53bc0f26951b6611c3", @ANYRES16=r7, @ANYBLOB="2503000000000000000008000000"], 0x14}}, 0x0) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r4) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="020025bd7000fddbdf250700000008003b000800000008003a000500000008003a000800000005002f000000000008053400c20700000500350009000000050029000000000005002e000000000008000600bc2d70cec51f888c218229d7997ec231a59fb9c59bbcc551d8d7307cff8d0c5ef06f7dddd8a7f398fdcba3cfa82e3c0f03e5caca0a74c3b08295e20d3f73ff25bf3f93df2993bb23b98ce2245049228010567b326b", @ANYRES32=0x0, @ANYBLOB="0500330000000000"], 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x80) 344.749905ms ago: executing program 3 (id=1262): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0xf, 0x7fff, @udp='udp:syz2\x00'}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044080) 240.366979ms ago: executing program 4 (id=1263): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001e00010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000000140009"], 0x30}, 0x1, 0x0, 0x0, 0x44080}, 0x20048800) 24.124844ms ago: executing program 2 (id=1264): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00'}, 0x11) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x4) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="9800000055000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="20000100", @ANYRES32=r1, @ANYBLOB="00010200ff0100000000000000000000000000019edd000020000100", @ANYRES32=r1, @ANYBLOB="000201000d00000100000000000000000000000086dd0000b3fe0100", @ANYRES32=0x0, @ANYBLOB="00020300ac1414aa0000000000000000000000001800000020000100", @ANYRES32=r1, @ANYBLOB="01030400ac1414aa0000000000000000000000008edd0000"], 0x98}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00'}, 0x11) (async) socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="9800000055000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="20000100", @ANYRES32=r1, @ANYBLOB="00010200ff0100000000000000000000000000019edd000020000100", @ANYRES32=r1, @ANYBLOB="000201000d00000100000000000000000000000086dd0000b3fe0100", @ANYRES32=0x0, @ANYBLOB="00020300ac1414aa0000000000000000000000001800000020000100", @ANYRES32=r1, @ANYBLOB="01030400ac1414aa0000000000000000000000008edd0000"], 0x98}}, 0x0) (async) 0s ago: executing program 3 (id=1265): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=@gettfilter={0x24, 0x2e, 0x301, 0x0, 0xffffff81, {0x0, 0x0, 0x0, r3, {0xfff2, 0xe}, {}, {0xfff3}}}, 0x24}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='freezer.self_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1d0000000000000000000000000002008500000000000000369fc4ebdb556572d0"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x5c}}, 0x0) kernel console output (not intermixed with test programs): et [1, 0] type 2 family 0 port 6081 - 0 [ 96.585271][ T5837] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.602525][ T5837] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.613635][ T5837] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.631699][ T5837] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.933002][ T5982] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12'. [ 96.933036][ T5983] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12'. [ 97.058463][ T5856] Bluetooth: hci2: command tx timeout [ 97.058481][ T5850] Bluetooth: hci1: command tx timeout [ 97.058503][ T51] Bluetooth: hci4: command tx timeout [ 97.064273][ T5847] Bluetooth: hci3: command tx timeout [ 97.069447][ T51] Bluetooth: hci0: command tx timeout [ 97.203379][ T2987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.238081][ T2987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.368391][ T4547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.388234][ T4547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.405189][ T2987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.431427][ T2987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.515417][ T2987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.537763][ T2987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.589296][ T2987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.622828][ T2987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.718163][ T2987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.726047][ T2987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.864076][ T5993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15'. [ 97.909276][ T5995] netlink: 48 bytes leftover after parsing attributes in process `syz.0.16'. [ 97.960730][ T5993] netlink: 104 bytes leftover after parsing attributes in process `syz.1.15'. [ 98.072654][ T5998] geneve2: entered promiscuous mode [ 98.082852][ T5998] geneve2: entered allmulticast mode [ 98.189284][ T6003] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.267782][ T6005] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18'. [ 98.279809][ T6003] Zero length message leads to an empty skb [ 98.783241][ T6030] netlink: 'syz.3.26': attribute type 1 has an invalid length. [ 98.802004][ T6030] netlink: 224 bytes leftover after parsing attributes in process `syz.3.26'. [ 98.827996][ T6030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.26'. [ 98.865346][ T6037] IPVS: set_ctl: invalid protocol: 98 172.20.20.187:20001 [ 99.447455][ T5905] IPVS: starting estimator thread 0... [ 99.540946][ T6063] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.541528][ T6059] syz.1.35 uses obsolete (PF_INET,SOCK_PACKET) [ 99.589105][ T6057] IPVS: using max 28 ests per chain, 67200 per kthread [ 99.710295][ T6059] netlink: 'syz.1.35': attribute type 1 has an invalid length. [ 100.253892][ T6088] trusted_key: syz.4.44 sent an empty control message without MSG_MORE. [ 100.427735][ T6096] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 100.502901][ T6096] warning: `syz.0.48' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 100.645563][ T6102] netlink: 'syz.0.48': attribute type 29 has an invalid length. [ 100.680347][ T6102] veth1_macvtap: left promiscuous mode [ 100.685892][ T6102] macsec0: entered promiscuous mode [ 100.717974][ T6102] macsec0: entered allmulticast mode [ 100.775503][ T6109] netlink: 'syz.2.52': attribute type 1 has an invalid length. [ 100.821015][ T6109] __nla_validate_parse: 5 callbacks suppressed [ 100.821033][ T6109] netlink: 28 bytes leftover after parsing attributes in process `syz.2.52'. [ 101.041074][ T6123] netlink: 'syz.1.58': attribute type 1 has an invalid length. [ 101.081518][ T6124] netlink: 'syz.1.58': attribute type 1 has an invalid length. [ 101.081941][ T6126] netlink: 'syz.4.57': attribute type 1 has an invalid length. [ 101.119340][ T6120] netlink: 'syz.3.56': attribute type 4 has an invalid length. [ 101.128121][ T6128] netlink: 1048 bytes leftover after parsing attributes in process `syz.2.59'. [ 101.137251][ T6128] netlink: 112 bytes leftover after parsing attributes in process `syz.2.59'. [ 101.145718][ T6120] netlink: 32 bytes leftover after parsing attributes in process `syz.3.56'. [ 101.159166][ T6128] netlink: 48 bytes leftover after parsing attributes in process `syz.2.59'. [ 101.456516][ T6140] netlink: 'syz.2.64': attribute type 3 has an invalid length. [ 101.475130][ T6145] netlink: 64 bytes leftover after parsing attributes in process `syz.1.65'. [ 101.535167][ T6150] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.65'. [ 101.584517][ T6150] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 101.593170][ T6150] openvswitch: netlink: Duplicate key (type 0). [ 101.814745][ T6161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.69'. [ 102.165969][ T6181] netlink: 28 bytes leftover after parsing attributes in process `syz.1.74'. [ 102.209256][ T6187] netlink: 4 bytes leftover after parsing attributes in process `syz.4.77'. [ 102.535103][ T6199] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 102.798937][ T6214] xt_CT: You must specify a L4 protocol and not use inversions on it [ 102.867269][ T6217] x_tables: duplicate underflow at hook 2 [ 103.102805][ T6223] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 103.336489][ T6232] netlink: 'syz.1.92': attribute type 3 has an invalid length. [ 104.465415][ T6291] netlink: 'syz.1.109': attribute type 1 has an invalid length. [ 104.614448][ T6295] delete_channel: no stack [ 104.650084][ T6295] delete_channel: no stack [ 104.769884][ T6306] netlink: zone id is out of range [ 104.970639][ T6313] openvswitch: netlink: Flow key attr not present in new flow. [ 105.024160][ T6320] openvswitch: netlink: Flow key attr not present in new flow. [ 105.514286][ T6335] unknown channel width for channel at 909000KHz? [ 105.572212][ T6335] unknown channel width for channel at 909000KHz? [ 105.989196][ T6358] __nla_validate_parse: 15 callbacks suppressed [ 105.989217][ T6358] netlink: 4 bytes leftover after parsing attributes in process `syz.4.128'. [ 106.066275][ T6354] bond1: entered promiscuous mode [ 106.124785][ T6354] bond1: entered allmulticast mode [ 106.145855][ T6354] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.193746][ T6359] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 106.767561][ T6397] netlink: 'syz.3.137': attribute type 4 has an invalid length. [ 106.927978][ T6400] netlink: 'syz.3.137': attribute type 4 has an invalid length. [ 107.668232][ T6430] SET target dimension over the limit! [ 108.526396][ T6466] Bluetooth: MGMT ver 1.23 [ 108.547558][ T6467] netlink: 12 bytes leftover after parsing attributes in process `syz.4.157'. [ 108.548086][ T6468] netlink: 12 bytes leftover after parsing attributes in process `syz.4.157'. [ 108.838427][ T6476] netlink: 'syz.4.160': attribute type 1 has an invalid length. [ 108.908744][ T6483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.161'. [ 108.918170][ T6483] netlink: 12 bytes leftover after parsing attributes in process `syz.3.161'. [ 108.927764][ T6483] netlink: 'syz.3.161': attribute type 11 has an invalid length. [ 108.930850][ T6482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.162'. [ 109.000768][ T6481] bond1: (slave gretap1): making interface the new active one [ 109.025497][ T6481] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 109.065692][ T6487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.163'. [ 109.074104][ T6481] syz.4.160 (6481) used greatest stack depth: 20040 bytes left [ 109.088183][ T6487] netlink: 'syz.2.163': attribute type 8 has an invalid length. [ 109.235656][ T6490] netlink: 12 bytes leftover after parsing attributes in process `syz.3.164'. [ 109.894194][ T6520] netlink: 20 bytes leftover after parsing attributes in process `syz.2.174'. [ 109.920014][ T6522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.173'. [ 110.111639][ T6536] netlink: 'syz.2.177': attribute type 21 has an invalid length. [ 110.112556][ T6537] netlink: 'syz.2.177': attribute type 21 has an invalid length. [ 110.157404][ T6537] netlink: 'syz.2.177': attribute type 4 has an invalid length. [ 110.183557][ T6537] netlink: 'syz.2.177': attribute type 5 has an invalid length. [ 110.211519][ T6536] netlink: 'syz.2.177': attribute type 4 has an invalid length. [ 110.233381][ T6537] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 110.517497][ T5919] IPVS: starting estimator thread 0... [ 110.523602][ T6551] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 110.621738][ T6556] IPVS: using max 26 ests per chain, 62400 per kthread [ 111.021023][ T6576] x_tables: duplicate underflow at hook 3 [ 111.073254][ T6577] xt_l2tp: missing protocol rule (udp|l2tpip) [ 111.139747][ T6583] __nla_validate_parse: 6 callbacks suppressed [ 111.139766][ T6583] netlink: 40 bytes leftover after parsing attributes in process `syz.0.188'. [ 111.391257][ T6591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.194'. [ 111.629075][ T6599] Bluetooth: MGMT ver 1.23 [ 111.849366][ T6607] netlink: 472 bytes leftover after parsing attributes in process `syz.4.200'. [ 112.045881][ T6618] xt_hashlimit: size too large, truncated to 1048576 [ 112.233025][ T6636] validate_nla: 2 callbacks suppressed [ 112.233043][ T6636] netlink: 'syz.3.208': attribute type 1 has an invalid length. [ 112.261981][ T6625] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.464261][ T6625] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.617689][ T6625] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.644797][ T6646] netlink: 'syz.1.210': attribute type 2 has an invalid length. [ 112.926734][ T6625] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.042006][ T6657] netlink: 'syz.2.215': attribute type 1 has an invalid length. [ 113.237374][ T6625] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.312377][ T6625] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.376069][ T6668] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 113.450462][ T6625] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.494930][ T6625] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.515634][ T6666] !: renamed from dummy0 (while UP) [ 113.590030][ T6670] netlink: 20 bytes leftover after parsing attributes in process `syz.0.219'. [ 113.600914][ T6670] netlink: 20 bytes leftover after parsing attributes in process `syz.0.219'. [ 113.724683][ T6674] netlink: 48 bytes leftover after parsing attributes in process `syz.0.220'. [ 114.102692][ T6683] netlink: 'syz.3.223': attribute type 1 has an invalid length. [ 114.188205][ T6683] 8021q: adding VLAN 0 to HW filter on device bond2 [ 114.240957][ T6689] netlink: 20 bytes leftover after parsing attributes in process `syz.4.226'. [ 114.248081][ T6691] raw_sendmsg: syz.0.227 forgot to set AF_INET. Fix it! [ 114.564584][ T6688] 8021q: adding VLAN 0 to HW filter on device bond2 [ 114.575573][ T6688] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 114.620126][ T6688] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 114.689081][ T6683] veth3: entered promiscuous mode [ 114.697079][ T6683] bond2: (slave veth3): Enslaving as an active interface with a down link [ 114.724262][ T6694] vlan2: entered allmulticast mode [ 114.730051][ T6694] bond2: entered allmulticast mode [ 115.010714][ T6708] netlink: 'syz.4.229': attribute type 7 has an invalid length. [ 115.259657][ T6715] macvtap1: entered allmulticast mode [ 115.265138][ T6715] veth0_macvtap: entered allmulticast mode [ 115.306011][ T30] audit: type=1107 audit(1750846220.281:2): pid=6720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='u,½&cEÄ['O›ŸLO0]£€9ƒ„ŽiÎC|•RÕ–ßkP—Îμ(¯nùòúŠ’ëéª\h–šÒ€Bѧw ×Ü!dW,”pKF,”­MòÃñdgÖ¶ŒàJ#…­MH¥˜ÛS ëEt/4ˆj•a\?½ú[^nˆ ßí®3–D“À]QbaÛ¯Un°D—äô±êÏýÉØ/7r3E@z}‰=K\¾gijÊ´bCA:{Ðñ¢(t' [ 115.306011][ T30] l°˜áx6B¢' [ 115.437356][ T30] audit: type=1107 audit(1750846220.281:3): pid=6720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='u,½&cEÄ['O›ŸLO0]£€9ƒ„ŽiÎC|•RÕ–ßkP—Îμ(¯nùòúŠ’ëéª\h–šÒ€Bѧw ×Ü!dW,”pKF,”­MòÃñdgÖ¶ŒàJ#…­MH¥˜ÛS ëEt/4ˆj•a\?½ú[^nˆ ßí®3–D“À]QbaÛ¯Un°D—äô±êÏýÉØ/7r3E@z}‰=K\¾gijÊ´bCA:{Ðñ¢(t' [ 115.437356][ T30] l°˜áx6B¢' [ 115.744612][ T6738] netlink: 'syz.3.237': attribute type 1 has an invalid length. [ 115.947733][ T6752] netlink: 'syz.2.240': attribute type 1 has an invalid length. [ 115.995684][ T6752] netlink: 'syz.2.240': attribute type 2 has an invalid length. [ 116.029147][ T6755] netlink: 'syz.2.240': attribute type 1 has an invalid length. [ 116.036882][ T6755] netlink: 'syz.2.240': attribute type 2 has an invalid length. [ 116.069487][ T6748] 8021q: adding VLAN 0 to HW filter on device bond4 [ 116.094942][ T6748] bond3: (slave bond4): making interface the new active one [ 116.123035][ T6748] bond3: (slave bond4): Enslaving as an active interface with an up link [ 116.507534][ T6766] ªªªªª8: renamed from veth0_vlan (while UP) [ 116.626060][ T6778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.247'. [ 116.678327][ T6778] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 116.689580][ T6778] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 116.724394][ T6781] bridge2: entered promiscuous mode [ 116.737485][ T6781] bridge2: entered allmulticast mode [ 116.905802][ T6789] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 117.033464][ T6791] netlink: 40 bytes leftover after parsing attributes in process `syz.2.252'. [ 117.215344][ T6797] ipvlan0: entered promiscuous mode [ 117.223994][ T6797] ipvlan0: entered allmulticast mode [ 117.229977][ T6797] veth0_vlan: entered allmulticast mode [ 117.743097][ T6828] Cannot find map_set index 0 as target [ 117.866600][ T6835] netlink: 12 bytes leftover after parsing attributes in process `syz.1.261'. [ 117.894356][ T6835] xfrm1: entered promiscuous mode [ 117.899578][ T6835] xfrm1: entered allmulticast mode [ 117.907446][ T6835] netlink: 12 bytes leftover after parsing attributes in process `syz.1.261'. [ 117.927250][ T6835] netlink: 12 bytes leftover after parsing attributes in process `syz.1.261'. [ 118.534816][ T6862] netlink: 232 bytes leftover after parsing attributes in process `syz.3.269'. [ 118.640694][ T6865] Can't find ip_set type hasиip [ 118.665761][ T6866] Can't find ip_set type hasиip [ 118.775431][ T6875] netlink: 24 bytes leftover after parsing attributes in process `syz.2.273'. [ 118.801452][ T6875] netlink: 272 bytes leftover after parsing attributes in process `syz.2.273'. [ 118.828355][ T6875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.273'. [ 118.960805][ T6883] validate_nla: 3 callbacks suppressed [ 118.960826][ T6883] netlink: 'syz.0.276': attribute type 1 has an invalid length. [ 119.009321][ T6883] netlink: 184 bytes leftover after parsing attributes in process `syz.0.276'. [ 119.355081][ T6900] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 119.589559][ T6910] Driver unsupported XDP return value 0 on prog (id 104) dev N/A, expect packet loss! [ 120.023507][ T6929] sit2: entered promiscuous mode [ 120.026863][ T6931] netlink: 'syz.2.294': attribute type 1 has an invalid length. [ 120.040738][ T6929] sit2: entered allmulticast mode [ 120.844655][ T6974] netlink: 'syz.4.303': attribute type 2 has an invalid length. [ 121.215311][ T6992] Cannot find add_set index 0 as target [ 121.258245][ T6992] netlink: 'syz.2.309': attribute type 15 has an invalid length. [ 121.806580][ T7017] netlink: 'syz.1.313': attribute type 1 has an invalid length. [ 121.825538][ T7018] openvswitch: netlink: Actions may not be safe on all matching packets [ 121.849205][ T7017] __nla_validate_parse: 10 callbacks suppressed [ 121.849223][ T7017] netlink: 224 bytes leftover after parsing attributes in process `syz.1.313'. [ 122.003898][ T7024] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 122.179275][ T7032] syz.3.316: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 122.251850][ T7032] CPU: 0 UID: 0 PID: 7032 Comm: syz.3.316 Not tainted 6.16.0-rc2-syzkaller-00179-g9caca6ac0e26 #0 PREEMPT(full) [ 122.251881][ T7032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 122.251901][ T7032] Call Trace: [ 122.251914][ T7032] [ 122.251924][ T7032] dump_stack_lvl+0x189/0x250 [ 122.251974][ T7032] ? __pfx_dump_stack_lvl+0x10/0x10 [ 122.252005][ T7032] ? __pfx__printk+0x10/0x10 [ 122.252027][ T7032] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 122.252050][ T7032] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 122.252081][ T7032] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 122.252107][ T7032] warn_alloc+0x214/0x310 [ 122.252130][ T7032] ? stack_depot_save_flags+0x40/0x900 [ 122.252162][ T7032] ? __pfx_warn_alloc+0x10/0x10 [ 122.252187][ T7032] ? kasan_save_track+0x4f/0x80 [ 122.252219][ T7032] ? xskq_create+0x56/0x170 [ 122.252246][ T7032] ? xsk_init_queue+0xb0/0x110 [ 122.252272][ T7032] ? xsk_setsockopt+0x43f/0x710 [ 122.252296][ T7032] ? do_sock_setsockopt+0x257/0x3e0 [ 122.252319][ T7032] ? __x64_sys_setsockopt+0x18b/0x220 [ 122.252341][ T7032] ? do_syscall_64+0xfa/0x3b0 [ 122.252357][ T7032] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.252387][ T7032] __vmalloc_node_range_noprof+0x125/0x12f0 [ 122.252443][ T7032] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 122.252474][ T7032] ? __kasan_kmalloc+0x93/0xb0 [ 122.252497][ T7032] vmalloc_user_noprof+0xad/0xf0 [ 122.252520][ T7032] ? xskq_create+0xbf/0x170 [ 122.252550][ T7032] xskq_create+0xbf/0x170 [ 122.252582][ T7032] xsk_init_queue+0xb0/0x110 [ 122.252614][ T7032] xsk_setsockopt+0x43f/0x710 [ 122.252646][ T7032] ? __pfx_xsk_setsockopt+0x10/0x10 [ 122.252671][ T7032] ? __lock_acquire+0xab9/0xd20 [ 122.252710][ T7032] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 122.252736][ T7032] ? __pfx_xsk_setsockopt+0x10/0x10 [ 122.252770][ T7032] do_sock_setsockopt+0x257/0x3e0 [ 122.252798][ T7032] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 122.252828][ T7032] ? __fget_files+0x2a/0x420 [ 122.252860][ T7032] __x64_sys_setsockopt+0x18b/0x220 [ 122.252892][ T7032] do_syscall_64+0xfa/0x3b0 [ 122.252909][ T7032] ? lockdep_hardirqs_on+0x9c/0x150 [ 122.252938][ T7032] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.252957][ T7032] ? clear_bhb_loop+0x60/0xb0 [ 122.252982][ T7032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.253001][ T7032] RIP: 0033:0x7f5b36b8e929 [ 122.253024][ T7032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.253040][ T7032] RSP: 002b:00007f5b3791b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 122.253071][ T7032] RAX: ffffffffffffffda RBX: 00007f5b36db5fa0 RCX: 00007f5b36b8e929 [ 122.253086][ T7032] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 122.253098][ T7032] RBP: 00007f5b36c10b39 R08: 0000000000000004 R09: 0000000000000000 [ 122.253110][ T7032] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.253121][ T7032] R13: 0000000000000000 R14: 00007f5b36db5fa0 R15: 00007ffeef332098 [ 122.253154][ T7032] [ 122.256643][ T7032] Mem-Info: [ 122.579087][ T7032] active_anon:5863 inactive_anon:0 isolated_anon:0 [ 122.579087][ T7032] active_file:1092 inactive_file:39835 isolated_file:0 [ 122.579087][ T7032] unevictable:768 dirty:73 writeback:0 [ 122.579087][ T7032] slab_reclaimable:9953 slab_unreclaimable:98625 [ 122.579087][ T7032] mapped:30229 shmem:1365 pagetables:1270 [ 122.579087][ T7032] sec_pagetables:0 bounce:0 [ 122.579087][ T7032] kernel_misc_reclaimable:0 [ 122.579087][ T7032] free:1333624 free_pcp:15444 free_cma:0 [ 122.660928][ T7032] Node 0 active_anon:23436kB inactive_anon:0kB active_file:4368kB inactive_file:159136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120908kB dirty:92kB writeback:200kB shmem:3928kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12792kB pagetables:4804kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 122.721473][ T7032] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 122.761067][ T7032] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 122.792321][ T7032] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 122.798498][ T7032] Node 0 DMA32 free:1420496kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23296kB inactive_anon:0kB active_file:4368kB inactive_file:157332kB unevictable:1536kB writepending:92kB present:3129332kB managed:2561020kB mlocked:0kB bounce:0kB free_pcp:39724kB local_pcp:18260kB free_cma:0kB [ 122.840720][ T7032] lowmem_reserve[]: 0 0 1 1 1 [ 122.845645][ T7032] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1812kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 122.884926][ T7032] lowmem_reserve[]: 0 0 0 0 0 [ 122.945134][ T7032] Node 1 Normal free:3899200kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:21792kB local_pcp:13536kB free_cma:0kB [ 122.982416][ T7032] lowmem_reserve[]: 0 0 0 0 0 [ 122.989382][ T7032] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 123.016059][ T7032] Node 0 DMA32: 935*4kB (UME) 717*8kB (UME) 251*16kB (UME) 108*32kB (UME) 40*64kB (UME) 30*128kB (UM) 16*256kB (UM) 10*512kB (UME) 8*1024kB (UM) 8*2048kB (ME) 333*4096kB (M) = 1421108kB [ 123.061661][ T7032] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 123.109687][ T7032] Node 1 Normal: 196*4kB (UME) 58*8kB (UME) 32*16kB (UME) 77*32kB (UME) 27*64kB (UME) 8*128kB (UME) 4*256kB (UME) 2*512kB (M) 3*1024kB (UME) 2*2048kB (UE) 948*4096kB (M) = 3899200kB [ 123.130136][ T7032] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 123.162554][ T7055] netlink: 'syz.4.322': attribute type 2 has an invalid length. [ 123.163696][ T7032] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 123.221645][ T7032] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 123.280316][ T7032] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 123.318329][ T7032] 42292 total pagecache pages [ 123.323168][ T7032] 0 pages in swap cache [ 123.327343][ T7032] Free swap = 124996kB [ 123.342667][ T7032] Total swap = 124996kB [ 123.350460][ T7032] 2097051 pages RAM [ 123.365622][ T7032] 0 pages HighMem/MovableOnly [ 123.370877][ T7032] 424690 pages reserved [ 123.375179][ T7032] 0 pages cma reserved [ 123.467537][ T7062] batadv_slave_1: entered promiscuous mode [ 123.509644][ T7068] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 123.716223][ T7061] batadv_slave_1: left promiscuous mode [ 123.867775][ T7080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.327'. [ 123.974101][ T7084] netlink: 'syz.0.329': attribute type 3 has an invalid length. [ 124.009544][ T7083] netlink: 'syz.0.329': attribute type 3 has an invalid length. [ 124.106928][ T7078] syz.2.328 (7078) used greatest stack depth: 15960 bytes left [ 124.374408][ T7099] netlink: 20 bytes leftover after parsing attributes in process `syz.1.332'. [ 124.456090][ T7112] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.504962][ T7113] netlink: 200 bytes leftover after parsing attributes in process `syz.1.332'. [ 125.428097][ T7157] netlink: 'syz.3.345': attribute type 1 has an invalid length. [ 125.474447][ T7160] netlink: 'syz.0.347': attribute type 1 has an invalid length. [ 125.501794][ T7163] netlink: 'syz.4.348': attribute type 2 has an invalid length. [ 125.525085][ T7157] netlink: 'syz.3.345': attribute type 4 has an invalid length. [ 125.567657][ T7157] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.345'. [ 125.952367][ T7179] netlink: 41 bytes leftover after parsing attributes in process `syz.1.352'. [ 126.466863][ T7213] netlink: 12 bytes leftover after parsing attributes in process `syz.0.360'. [ 126.494185][ T7214] dvmrp1: entered allmulticast mode [ 126.496671][ T7215] openvswitch: netlink: IP tunnel TTL not specified. [ 126.583821][ T7214] dvmrp1: left allmulticast mode [ 127.103370][ T7241] x_tables: duplicate underflow at hook 1 [ 127.109671][ T7238] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.354312][ T7256] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 127.511692][ T7263] netlink: 'syz.3.377': attribute type 23 has an invalid length. [ 127.854007][ T7273] xt_TPROXY: Can be used only with -p tcp or -p udp [ 128.155908][ T7292] openvswitch: netlink: Flow actions attr not present in new flow. [ 128.167147][ T7292] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.387'. [ 128.202661][ T7293] openvswitch: netlink: Flow actions attr not present in new flow. [ 128.325269][ T7297] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 128.496304][ T7309] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 128.607450][ T7314] netlink: 20 bytes leftover after parsing attributes in process `syz.0.394'. [ 128.623893][ T7314] netlink: 20 bytes leftover after parsing attributes in process `syz.0.394'. [ 128.635094][ T7314] netlink: 20 bytes leftover after parsing attributes in process `syz.0.394'. [ 128.660394][ T7315] netlink: 20 bytes leftover after parsing attributes in process `syz.0.394'. [ 128.669672][ T7315] netlink: 20 bytes leftover after parsing attributes in process `syz.0.394'. [ 128.943089][ T7327] netlink: 'syz.3.397': attribute type 1 has an invalid length. [ 129.243144][ T7341] netlink: 88 bytes leftover after parsing attributes in process `syz.1.400'. [ 129.455187][ T7356] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 129.839696][ T7373] netlink: 16 bytes leftover after parsing attributes in process `syz.4.410'. [ 129.885479][ T7376] netlink: 12 bytes leftover after parsing attributes in process `syz.0.411'. [ 130.055347][ T7376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.411'. [ 130.083977][ T7376] netlink: 'syz.0.411': attribute type 30 has an invalid length. [ 130.163415][ T7376] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.172072][ T7376] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.180582][ T7376] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.188929][ T7376] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.251017][ T7390] netlink: 'syz.3.415': attribute type 11 has an invalid length. [ 130.362196][ T7394] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 130.424679][ T7390] ipip0: entered promiscuous mode [ 130.457919][ T7390] ipip0: entered allmulticast mode [ 130.707649][ T7421] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan1, syncid = 1, id = 0 [ 130.992774][ T7431] tipc: Can't bind to reserved service type 0 [ 131.294925][ T7444] netlink: 'syz.3.429': attribute type 29 has an invalid length. [ 131.328175][ T7444] netlink: 'syz.3.429': attribute type 29 has an invalid length. [ 131.375418][ T7446] netlink: 'syz.0.430': attribute type 62 has an invalid length. [ 131.591115][ T7459] veth0: entered promiscuous mode [ 131.611858][ T7459] veth0: left promiscuous mode [ 132.273045][ T7488] netlink: 'syz.2.448': attribute type 21 has an invalid length. [ 132.316377][ T7488] netlink: 'syz.2.448': attribute type 1 has an invalid length. [ 132.455781][ T7496] openvswitch: netlink: Flow key attr not present in new flow. [ 132.669739][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.676330][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.973502][ T7527] openvswitch: netlink: IPv6 tunnel dst address is zero [ 133.518164][ T7545] __nla_validate_parse: 9 callbacks suppressed [ 133.518183][ T7545] netlink: 220 bytes leftover after parsing attributes in process `syz.4.463'. [ 133.873046][ T7527] infiniband syz0: set active [ 133.878192][ T7527] infiniband syz0: added bond_slave_0 [ 133.890602][ T7527] syz0: rxe_create_cq: returned err = -12 [ 133.918548][ T7527] infiniband syz0: Couldn't create ib_mad CQ [ 133.924815][ T7527] infiniband syz0: Couldn't open port 1 [ 134.125593][ T7527] RDS/IB: syz0: added [ 134.137500][ T7527] smc: adding ib device syz0 with port count 1 [ 134.147526][ T7527] smc: ib device syz0 port 1 has pnetid [ 134.615586][ T7575] netlink: 'syz.0.473': attribute type 9 has an invalid length. [ 134.923881][ T7575] xt_CT: No such helper "syz0" [ 134.962443][ T7591] netlink: 'syz.2.477': attribute type 1 has an invalid length. [ 134.973700][ T7591] netlink: 184 bytes leftover after parsing attributes in process `syz.2.477'. [ 134.986186][ T7591] netlink: 'syz.2.477': attribute type 1 has an invalid length. [ 136.038504][ T7615] netlink: 20 bytes leftover after parsing attributes in process `syz.0.485'. [ 136.197143][ T7623] netlink: 12 bytes leftover after parsing attributes in process `syz.0.486'. [ 136.521358][ T7639] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 136.548527][ T7639] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 136.693458][ T7650] syzkaller0: entered promiscuous mode [ 136.702071][ T7650] syzkaller0: entered allmulticast mode [ 136.731005][ T7650] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.491'. [ 136.741409][ T7643] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.491'. [ 136.992288][ T7659] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.494'. [ 137.565527][ T7681] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 137.630434][ T7683] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 138.213165][ T7713] netlink: 156 bytes leftover after parsing attributes in process `syz.2.505'. [ 138.344513][ T7719] netlink: 'syz.3.506': attribute type 21 has an invalid length. [ 138.378026][ T7719] netlink: 128 bytes leftover after parsing attributes in process `syz.3.506'. [ 138.418760][ T7719] netlink: 3 bytes leftover after parsing attributes in process `syz.3.506'. [ 138.526093][ T7727] IPVS: set_ctl: invalid protocol: 136 127.0.0.1:20001 [ 138.863295][ T7741] netlink: 20 bytes leftover after parsing attributes in process `syz.1.511'. [ 138.924718][ T7743] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 139.055379][ T7749] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.097458][ T7749] netlink: 20 bytes leftover after parsing attributes in process `syz.0.514'. [ 139.137283][ T7749] netlink: 40 bytes leftover after parsing attributes in process `syz.0.514'. [ 139.195892][ T7752] openvswitch: netlink: Missing key (keys=40, expected=80) [ 139.383998][ T7754] netlink: 12 bytes leftover after parsing attributes in process `syz.1.516'. [ 139.424675][ T7761] netlink: 'syz.2.517': attribute type 2 has an invalid length. [ 139.783845][ T7776] IPVS: set_ctl: invalid protocol: 33 127.0.0.1:20003 [ 139.957292][ T7787] IPVS: set_ctl: invalid protocol: 12 172.20.20.170:20003 [ 139.991830][ T7780] veth0: entered promiscuous mode [ 140.028099][ T7780] netlink: 4 bytes leftover after parsing attributes in process `syz.4.523'. [ 140.065363][ T7788] tap0: tun_chr_ioctl cmd 2148553947 [ 140.177551][ T7796] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 140.340655][ T7801] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.529'. [ 140.724270][ T7802] bridge0: port 3(vlan2) entered blocking state [ 140.751993][ T7802] bridge0: port 3(vlan2) entered disabled state [ 140.765679][ T7802] vlan2: entered allmulticast mode [ 140.771436][ T7802] bridge0: entered allmulticast mode [ 140.799734][ T7802] vlan2: left allmulticast mode [ 140.807110][ T7802] bridge0: left allmulticast mode [ 141.189603][ T7829] tipc: Failed to obtain node identity [ 141.204540][ T7829] tipc: Enabling of bearer rejected, failed to enable media [ 141.220438][ T7826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.535'. [ 141.509022][ T7856] netlink: 4 bytes leftover after parsing attributes in process `syz.4.540'. [ 141.528400][ T7856] netlink: 12 bytes leftover after parsing attributes in process `syz.4.540'. [ 141.783046][ T7872] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 141.818411][ T7872] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 141.878489][ T7880] netlink: 'syz.0.547': attribute type 1 has an invalid length. [ 141.882663][ T7872] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 141.894697][ T7880] netlink: 'syz.0.547': attribute type 4 has an invalid length. [ 141.923215][ T7880] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.547'. [ 141.956215][ T7889] netlink: 'syz.0.547': attribute type 1 has an invalid length. [ 141.981704][ T7889] netlink: 'syz.0.547': attribute type 4 has an invalid length. [ 142.044735][ T7880] tipc: Enabling of bearer rejected, failed to enable media [ 142.297495][ T9] IPVS: starting estimator thread 0... [ 142.401809][ T7907] netlink: 'syz.0.551': attribute type 10 has an invalid length. [ 142.428345][ T7908] IPVS: using max 27 ests per chain, 64800 per kthread [ 142.535728][ T7907] team0: Port device geneve0 added [ 143.147011][ T7948] netlink: 'syz.2.559': attribute type 2 has an invalid length. [ 143.637299][ T7971] syzkaller1: entered promiscuous mode [ 143.656673][ T7971] syzkaller1: entered allmulticast mode [ 143.685501][ T7969] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 143.703112][ T7977] ip6gre1: entered allmulticast mode [ 144.170202][ T7995] syzkaller1: entered promiscuous mode [ 144.177103][ T7995] syzkaller1: entered allmulticast mode [ 144.193593][ T7997] __nla_validate_parse: 48 callbacks suppressed [ 144.193611][ T7997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.574'. [ 144.370169][ T7992] netlink: 24 bytes leftover after parsing attributes in process `syz.4.571'. [ 145.302429][ T8046] netlink: 'syz.1.586': attribute type 30 has an invalid length. [ 145.330670][ T8046] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 145.353757][ T8046] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 145.770847][ T8074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.594'. [ 145.785703][ T8074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.594'. [ 145.794718][ T8074] netlink: 36 bytes leftover after parsing attributes in process `syz.0.594'. [ 145.856580][ T8077] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.870116][ T8077] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.890544][ T8077] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.919426][ T8077] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.973513][ T8082] netlink: 32 bytes leftover after parsing attributes in process `syz.2.597'. [ 146.072469][ T8085] tap0: tun_chr_ioctl cmd 1074025672 [ 146.103731][ T8085] tap0: ignored: set checksum disabled [ 146.245449][ T8090] tipc: Enabling of bearer rejected, failed to enable media [ 146.725742][ T8125] netlink: 4 bytes leftover after parsing attributes in process `syz.4.606'. [ 146.725751][ T8116] netlink: 4 bytes leftover after parsing attributes in process `syz.4.606'. [ 147.328256][ T8104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.958218][ T8144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.612'. [ 148.465771][ T8156] syzkaller0: refused to change device tx_queue_len [ 148.482856][ T8158] netlink: 'syz.1.616': attribute type 2 has an invalid length. [ 148.494956][ T8165] netlink: 16 bytes leftover after parsing attributes in process `syz.4.619'. [ 149.197034][ T8195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.198064][ T8198] __nla_validate_parse: 4 callbacks suppressed [ 149.198083][ T8198] netlink: 36 bytes leftover after parsing attributes in process `syz.1.627'. [ 149.293452][ T8198] netlink: 36 bytes leftover after parsing attributes in process `syz.1.627'. [ 149.331859][ T8198] netlink: 36 bytes leftover after parsing attributes in process `syz.1.627'. [ 149.368262][ T8198] netlink: 36 bytes leftover after parsing attributes in process `syz.1.627'. [ 149.452091][ T8209] netlink: 284 bytes leftover after parsing attributes in process `syz.0.632'. [ 149.490191][ T8210] netlink: 'syz.3.631': attribute type 1 has an invalid length. [ 149.510652][ T8198] netlink: 36 bytes leftover after parsing attributes in process `syz.1.627'. [ 149.568722][ T8210] vlan2: entered promiscuous mode [ 149.621803][ T8210] bridge0: entered promiscuous mode [ 149.652426][ T8198] netlink: 36 bytes leftover after parsing attributes in process `syz.1.627'. [ 149.687284][ T8198] netlink: 36 bytes leftover after parsing attributes in process `syz.1.627'. [ 149.748199][ T8198] netlink: 36 bytes leftover after parsing attributes in process `syz.1.627'. [ 149.804832][ T8198] netlink: 36 bytes leftover after parsing attributes in process `syz.1.627'. [ 150.466061][ T8255] pimreg: entered allmulticast mode [ 150.957487][ T8271] bridge0: port 3(gretap0) entered blocking state [ 150.971343][ T8271] bridge0: port 3(gretap0) entered disabled state [ 150.992525][ T8271] gretap0: entered allmulticast mode [ 151.001083][ T8271] gretap0: entered promiscuous mode [ 151.008831][ T8271] bridge0: port 3(gretap0) entered blocking state [ 151.016192][ T8271] bridge0: port 3(gretap0) entered forwarding state [ 151.919675][ T8321] netlink: 'syz.3.661': attribute type 1 has an invalid length. [ 152.660682][ T3537] wlan0: Trigger new scan to find an IBSS to join [ 152.895725][ T8365] netlink: 'syz.2.680': attribute type 10 has an invalid length. [ 152.928784][ T8365] dummy0: entered promiscuous mode [ 152.936128][ T8365] bridge0: port 3(dummy0) entered blocking state [ 152.955109][ T8365] bridge0: port 3(dummy0) entered disabled state [ 152.961952][ T8365] dummy0: entered allmulticast mode [ 152.978960][ T8365] bridge0: port 3(dummy0) entered blocking state [ 152.985805][ T8365] bridge0: port 3(dummy0) entered forwarding state [ 153.094501][ T8377] openvswitch: netlink: Key type 71 is out of range max 32 [ 153.871765][ T8420] xt_hashlimit: size too large, truncated to 1048576 [ 154.351552][ T8423] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.363169][ T8423] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.373890][ T8423] bond0 (unregistering): Released all slaves [ 154.640344][ T8448] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20003 [ 154.668076][ T8448] xt_bpf: check failed: parse error [ 155.041910][ T8465] __nla_validate_parse: 89 callbacks suppressed [ 155.041928][ T8465] netlink: 24 bytes leftover after parsing attributes in process `syz.4.710'. [ 155.344473][ T8476] netlink: 'syz.4.712': attribute type 10 has an invalid length. [ 155.539226][ T8482] syz_tun: tun_net_xmit 42 [ 155.544893][ T8482] syz_tun: tun_net_xmit 42 [ 155.549904][ T8482] syz_tun: tun_net_xmit 42 [ 155.554525][ T8482] syz_tun: tun_net_xmit 42 [ 155.559233][ T8482] syz_tun: tun_net_xmit 42 [ 155.564060][ T8482] syz_tun: tun_net_xmit 42 [ 155.578124][ T8482] syz_tun: tun_net_xmit 42 [ 155.582706][ T8482] syz_tun: tun_net_xmit 42 [ 155.587305][ T8482] syz_tun: tun_net_xmit 42 [ 155.624143][ T8482] IPVS: nq: UDP 224.0.0.2:20004 - no destination available [ 155.658563][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 155.669489][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 155.678076][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 155.688731][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 155.696492][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 155.707673][ T4547] wlan0: Trigger new scan to find an IBSS to join [ 155.858472][ T8495] netlink: 20 bytes leftover after parsing attributes in process `syz.2.717'. [ 157.781431][ T5856] Bluetooth: hci0: command tx timeout [ 157.965506][ T8517] vlan3: entered allmulticast mode [ 157.971180][ T8517] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 158.529120][ T8546] syzkaller1: entered promiscuous mode [ 158.553027][ T8546] syzkaller1: entered allmulticast mode [ 158.567150][ T8484] chnl_net:caif_netlink_parms(): no params data found [ 158.618257][ T8557] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 26 [ 158.705610][ T8557] xt_nat: multiple ranges no longer supported [ 158.742960][ T49] wlan0: Trigger new scan to find an IBSS to join [ 158.855761][ T8561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.737'. [ 158.865491][ T8561] netlink: 50 bytes leftover after parsing attributes in process `syz.3.737'. [ 158.877527][ T8561] netlink: 50 bytes leftover after parsing attributes in process `syz.3.737'. [ 158.886722][ T8567] netlink: 12 bytes leftover after parsing attributes in process `syz.0.739'. [ 158.895967][ T8567] netlink: 12 bytes leftover after parsing attributes in process `syz.0.739'. [ 159.089659][ T8484] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.104740][ T8484] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.131385][ T8484] bridge_slave_0: entered allmulticast mode [ 159.165837][ T8484] bridge_slave_0: entered promiscuous mode [ 159.176692][ T8484] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.189468][ T8484] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.208785][ T8484] bridge_slave_1: entered allmulticast mode [ 159.219928][ T8577] netlink: 36 bytes leftover after parsing attributes in process `syz.3.743'. [ 159.231497][ T8582] netlink: 32 bytes leftover after parsing attributes in process `syz.0.742'. [ 159.242527][ T8484] bridge_slave_1: entered promiscuous mode [ 159.250558][ T8580] netlink: 'syz.3.743': attribute type 3 has an invalid length. [ 159.252125][ T8577] netlink: 26 bytes leftover after parsing attributes in process `syz.3.743'. [ 159.360302][ T8484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.397437][ T8484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.506265][ T8484] team0: Port device team_slave_0 added [ 159.529721][ T8484] team0: Port device team_slave_1 added [ 159.640770][ T8484] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.661382][ T8484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.689440][ T2972] wlan0: Creating new IBSS network, BSSID a2:cd:ae:78:8c:ec [ 159.702760][ T8484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.772857][ T8484] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.802960][ T8484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.874380][ T8484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.878969][ T5856] Bluetooth: hci0: command tx timeout [ 160.197717][ T8615] netlink: 44 bytes leftover after parsing attributes in process `syz.3.750'. [ 160.250234][ T8615] ksmbd: Unknown IPC event: 3, ignore. [ 160.253471][ T8484] hsr_slave_0: entered promiscuous mode [ 160.269593][ T8484] hsr_slave_1: entered promiscuous mode [ 160.289915][ T8484] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 160.338142][ T8484] Cannot create hsr debugfs directory [ 161.208775][ T8484] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.224984][ T8656] netlink: 8 bytes leftover after parsing attributes in process `syz.4.759'. [ 161.279494][ T8660] syz_tun: tun_net_xmit 42 [ 161.292886][ T8658] netlink: 24 bytes leftover after parsing attributes in process `syz.3.760'. [ 161.329676][ T8661] netlink: 24 bytes leftover after parsing attributes in process `syz.4.759'. [ 161.338749][ T8656] netlink: 'syz.4.759': attribute type 1 has an invalid length. [ 161.338774][ T8656] netlink: 'syz.4.759': attribute type 2 has an invalid length. [ 161.399999][ T8664] netlink: 8 bytes leftover after parsing attributes in process `syz.4.759'. [ 161.433323][ T8664] netlink: 12 bytes leftover after parsing attributes in process `syz.4.759'. [ 161.446166][ T8484] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.661327][ T8484] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.800846][ T8484] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.853832][ T8685] netlink: 28 bytes leftover after parsing attributes in process `syz.3.770'. [ 161.937988][ T5856] Bluetooth: hci0: command tx timeout [ 162.047596][ T8690] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 162.068505][ T8690] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 162.266477][ T5954] IPVS: starting estimator thread 0... [ 162.268447][ T8695] netlink: 192 bytes leftover after parsing attributes in process `syz.4.773'. [ 162.316921][ T8484] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 162.338071][ C0] syz_tun: tun_net_xmit 42 [ 162.380763][ T8484] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 162.388810][ T8697] IPVS: using max 24 ests per chain, 57600 per kthread [ 162.481608][ T8484] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 163.137188][ T8484] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 163.379451][ C0] syz_tun: tun_net_xmit 42 [ 164.023558][ T5856] Bluetooth: hci0: command tx timeout [ 165.956842][ T8484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.150235][ T8484] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.204208][ T2972] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.211433][ T2972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.306632][ T2972] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.313851][ T2972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.354093][ T8739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.783'. [ 166.494033][ T8484] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 166.516051][ T8484] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 166.641328][ T8748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.785'. [ 166.700686][ T8748] dummy0: left allmulticast mode [ 166.748321][ T8748] bridge0: port 3(dummy0) entered disabled state [ 166.768727][ T8748] bridge_slave_1: left allmulticast mode [ 166.774541][ T8748] bridge_slave_1: left promiscuous mode [ 166.795429][ T8748] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.819729][ T8748] bridge_slave_0: left allmulticast mode [ 166.825446][ T8748] bridge_slave_0: left promiscuous mode [ 166.839537][ T8748] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.095576][ T8769] netlink: 4 bytes leftover after parsing attributes in process `syz.4.790'. [ 167.126480][ T8484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.215946][ T8778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.792'. [ 167.393051][ T8784] gtp0: entered promiscuous mode [ 167.399031][ T8784] gtp0: entered allmulticast mode [ 167.419055][ T8786] openvswitch: netlink: VXLAN extension 173 out of range max 1 [ 167.430106][ T8484] veth0_vlan: entered promiscuous mode [ 167.471942][ T8484] veth1_vlan: entered promiscuous mode [ 167.570504][ T8484] veth0_macvtap: entered promiscuous mode [ 167.601927][ T8484] veth1_macvtap: entered promiscuous mode [ 167.659003][ T8484] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.701744][ T8484] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.742240][ T8484] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.763210][ T8484] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.784565][ T8484] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.814783][ T8484] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.865098][ T8803] xt_TPROXY: Can be used only with -p tcp or -p udp [ 167.997002][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.017470][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.085274][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.128910][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.385640][ T8830] openvswitch: netlink: Port 10289156 exceeds max allowable 65535 [ 168.510930][ T2987] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.525425][ T2987] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.606854][ T2987] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.622190][ T2987] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.693089][ T2987] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.709432][ T2987] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.805980][ T2987] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.824643][ T2987] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.958914][ T8843] netlink: 'syz.4.815': attribute type 1 has an invalid length. [ 168.988426][ T8843] netlink: 244 bytes leftover after parsing attributes in process `syz.4.815'. [ 169.111538][ T2987] bridge_slave_1: left allmulticast mode [ 169.117524][ T2987] bridge_slave_1: left promiscuous mode [ 169.130583][ T8848] netlink: 144 bytes leftover after parsing attributes in process `syz.3.816'. [ 169.139606][ T2987] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.219962][ T2987] bridge_slave_0: left allmulticast mode [ 169.225892][ T2987] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.264534][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 169.276921][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 169.285198][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 169.294626][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 169.302840][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 169.902023][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 169.912496][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 169.924818][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 169.935819][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 169.949722][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 169.974013][ T2987] team0: Port device geneve0 removed [ 170.195131][ T2987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.207072][ T2987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.218937][ T2987] bond0 (unregistering): Released all slaves [ 170.234095][ T2987] bond1 (unregistering): Released all slaves [ 170.252309][ T2987] bond2 (unregistering): Released all slaves [ 170.269911][ T2987] bond3 (unregistering): Released all slaves [ 170.292854][ T2987] bond4 (unregistering): Released all slaves [ 170.311898][ T2987] bond5 (unregistering): Released all slaves [ 170.330358][ T2987] bond6 (unregistering): Released all slaves [ 170.350209][ T2987] bond7 (unregistering): Released all slaves [ 170.369389][ T2987] bond8 (unregistering): Released all slaves [ 170.390564][ T2987] bond9 (unregistering): Released all slaves [ 170.925665][ T8887] netlink: 112 bytes leftover after parsing attributes in process `syz.3.824'. [ 171.203426][ T8896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.827'. [ 171.227498][ T8897] netlink: 'syz.3.828': attribute type 1 has an invalid length. [ 171.268555][ T8897] netlink: 'syz.3.828': attribute type 2 has an invalid length. [ 171.282914][ T8897] netlink: 'syz.3.828': attribute type 1 has an invalid length. [ 171.292899][ T8897] netlink: 1156 bytes leftover after parsing attributes in process `syz.3.828'. [ 171.334776][ T8903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.829'. [ 171.346896][ T8903] x_tables: duplicate underflow at hook 3 [ 171.568226][ T8908] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20003 [ 171.715779][ T8871] chnl_net:caif_netlink_parms(): no params data found [ 171.774248][ T8914] netlink: 'syz.2.834': attribute type 1 has an invalid length. [ 172.019172][ T5856] Bluetooth: hci1: command tx timeout [ 172.103449][ T8929] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 172.210953][ T8850] chnl_net:caif_netlink_parms(): no params data found [ 172.263352][ T8871] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.281119][ T8871] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.288894][ T8940] netlink: 'syz.3.839': attribute type 11 has an invalid length. [ 172.296678][ T8940] netlink: 224 bytes leftover after parsing attributes in process `syz.3.839'. [ 172.305463][ T8871] bridge_slave_0: entered allmulticast mode [ 172.320648][ T8871] bridge_slave_0: entered promiscuous mode [ 172.337707][ T8871] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.345552][ T8871] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.353133][ T8871] bridge_slave_1: entered allmulticast mode [ 172.361275][ T8871] bridge_slave_1: entered promiscuous mode [ 172.537700][ T8871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.663309][ T8962] netlink: 12 bytes leftover after parsing attributes in process `syz.2.844'. [ 172.711079][ T8948] erspan0: entered allmulticast mode [ 172.728892][ T8871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.801491][ T8962] geneve2: entered promiscuous mode [ 172.913172][ T8972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.847'. [ 172.974446][ T8871] team0: Port device team_slave_0 added [ 173.037136][ T8871] team0: Port device team_slave_1 added [ 173.105826][ T8977] netlink: 4 bytes leftover after parsing attributes in process `syz.4.849'. [ 173.176681][ T8980] netlink: 'syz.3.850': attribute type 30 has an invalid length. [ 173.430033][ T8871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.437044][ T8871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.501628][ T8871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.535165][ T2987] hsr_slave_0: left promiscuous mode [ 173.544237][ T2987] hsr_slave_1: left promiscuous mode [ 173.551440][ T2987] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.559154][ T2987] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.572293][ T2987] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.580077][ T2987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.609606][ T2987] veth0_macvtap: left promiscuous mode [ 173.615466][ T2987] veth1_vlan: left promiscuous mode [ 173.623898][ T2987] veth0_vlan: left promiscuous mode [ 174.044255][ T2987] team0 (unregistering): Port device team_slave_1 removed [ 174.082322][ T2987] team0 (unregistering): Port device team_slave_0 removed [ 174.108490][ T5856] Bluetooth: hci1: command tx timeout [ 174.505951][ T8850] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.513774][ T8850] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.538707][ T8850] bridge_slave_0: entered allmulticast mode [ 174.546150][ T8850] bridge_slave_0: entered promiscuous mode [ 174.555401][ T8871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.566911][ T8871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.594654][ T8871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.606944][ T8989] tipc: Failed to obtain node identity [ 174.612912][ T8989] tipc: Enabling of bearer rejected, failed to enable media [ 174.629399][ T8850] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.636652][ T8850] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.658493][ T8850] bridge_slave_1: entered allmulticast mode [ 174.666691][ T8850] bridge_slave_1: entered promiscuous mode [ 174.832121][ T8850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.860296][ T8850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.957298][ T9008] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 175.061435][ T8871] hsr_slave_0: entered promiscuous mode [ 175.068695][ T8871] hsr_slave_1: entered promiscuous mode [ 175.079576][ T8871] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 175.087347][ T8871] Cannot create hsr debugfs directory [ 175.115576][ T9011] netlink: 72 bytes leftover after parsing attributes in process `syz.2.859'. [ 175.143136][ T9014] netlink: 72 bytes leftover after parsing attributes in process `syz.2.859'. [ 175.210738][ T8850] team0: Port device team_slave_0 added [ 175.267411][ T8850] team0: Port device team_slave_1 added [ 175.471955][ T8850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.490052][ T8850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.525811][ T8850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.553531][ T8850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.562262][ T8850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.588664][ T8850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.756472][ T8850] hsr_slave_0: entered promiscuous mode [ 175.763424][ T8850] hsr_slave_1: entered promiscuous mode [ 175.771162][ T8850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 175.779184][ T8850] Cannot create hsr debugfs directory [ 175.937677][ T2987] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.007172][ T9042] netlink: 32 bytes leftover after parsing attributes in process `syz.4.869'. [ 176.018988][ T9044] netlink: 32 bytes leftover after parsing attributes in process `syz.4.869'. [ 176.074550][ T2987] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.179494][ T5856] Bluetooth: hci1: command tx timeout [ 176.214324][ T2987] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.278385][ T5905] syz_tun: tun_net_xmit 110 [ 176.315640][ T2987] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.583260][ T2987] bridge_slave_1: left allmulticast mode [ 176.590538][ T2987] bridge_slave_1: left promiscuous mode [ 176.596355][ T2987] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.659724][ T2987] bridge_slave_0: left allmulticast mode [ 176.681269][ T2987] bridge_slave_0: left promiscuous mode [ 176.687118][ T2987] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.978199][ T5954] syz_tun: tun_net_xmit 110 [ 177.148746][ T9101] netlink: 24 bytes leftover after parsing attributes in process `syz.3.883'. [ 177.362591][ T2987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.379552][ T2987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.390554][ T2987] bond0 (unregistering): Released all slaves [ 177.827161][ T9127] ieee802154 phy0 wpan0: encryption failed: -22 [ 177.850829][ T9133] netlink: 12 bytes leftover after parsing attributes in process `syz.3.891'. [ 178.070334][ T9142] syz_tun: tun_net_xmit 86 [ 178.258133][ T5856] Bluetooth: hci1: command tx timeout [ 178.427423][ T9154] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 178.486136][ T9156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.897'. [ 178.525490][ T2987] hsr_slave_0: left promiscuous mode [ 178.535183][ T2987] hsr_slave_1: left promiscuous mode [ 178.542642][ T2987] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.551005][ T2987] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.560157][ T2987] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.564077][ T9159] rdma_rxe: rxe_newlink: failed to add lo [ 178.567672][ T2987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.596605][ T2987] veth1_macvtap: left promiscuous mode [ 178.602501][ T2987] veth0_macvtap: left promiscuous mode [ 178.609056][ T2987] veth1_vlan: left promiscuous mode [ 178.614442][ T2987] veth0_vlan: left promiscuous mode [ 179.060376][ T2987] team0 (unregistering): Port device team_slave_1 removed [ 179.099822][ T2987] team0 (unregistering): Port device team_slave_0 removed [ 179.138188][ C1] syz_tun: tun_net_xmit 86 [ 179.473764][ T9167] Cannot find add_set index 0 as target [ 179.537401][ T9156] macvtap1: entered promiscuous mode [ 179.543388][ T9156] vlan0: entered promiscuous mode [ 179.549535][ T9156] macvtap1: entered allmulticast mode [ 179.554947][ T9156] vlan0: entered allmulticast mode [ 179.567082][ T9166] netlink: 28 bytes leftover after parsing attributes in process `syz.2.901'. [ 179.592654][ T9166] netlink: 28 bytes leftover after parsing attributes in process `syz.2.901'. [ 179.743343][ T8850] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 179.775463][ T8850] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 179.796080][ T8850] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 179.831195][ T8850] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 179.973169][ T8871] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 179.989414][ T8871] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 180.027179][ T8871] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 180.057341][ T8871] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 180.178032][ C1] syz_tun: tun_net_xmit 86 [ 180.207652][ T8850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.286729][ T8850] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.312313][ T1567] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.319566][ T1567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.382010][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.389250][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.506369][ T8871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.584628][ T8871] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.623186][ T2987] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.630403][ T2987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.702595][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.709780][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.720817][ T9220] netlink: 8 bytes leftover after parsing attributes in process `syz.4.912'. [ 181.095488][ T8850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.227452][ T8850] veth0_vlan: entered promiscuous mode [ 181.312278][ T9249] netlink: 36 bytes leftover after parsing attributes in process `syz.4.915'. [ 181.313468][ T8850] veth1_vlan: entered promiscuous mode [ 181.492441][ T8850] veth0_macvtap: entered promiscuous mode [ 181.564519][ T8850] veth1_macvtap: entered promiscuous mode [ 181.637747][ T8871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.654288][ T9264] netlink: 44 bytes leftover after parsing attributes in process `syz.2.920'. [ 181.674967][ T8850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.706402][ T8850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.750562][ T8850] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.797924][ T8850] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.806710][ T8850] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.827952][ T8850] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.855661][ T8871] veth0_vlan: entered promiscuous mode [ 181.947612][ T8871] veth1_vlan: entered promiscuous mode [ 181.969474][ T9281] netlink: 'syz.4.925': attribute type 6 has an invalid length. [ 181.976616][ T9277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.924'. [ 181.994034][ T9280] netlink: 56 bytes leftover after parsing attributes in process `syz.2.926'. [ 182.006788][ T9280] netlink: 56 bytes leftover after parsing attributes in process `syz.2.926'. [ 182.126626][ T8871] veth0_macvtap: entered promiscuous mode [ 182.143561][ T2954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.177372][ T2954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.230291][ T8871] veth1_macvtap: entered promiscuous mode [ 182.339446][ T2987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.357443][ T8871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.374569][ T2987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.389136][ T8871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.449060][ T8871] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.468758][ T9299] syz.2.931 uses old SIOCAX25GETINFO [ 182.475464][ T8871] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.499295][ T8871] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.518175][ T8871] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.786959][ T9318] netlink: 'syz.3.937': attribute type 10 has an invalid length. [ 182.909328][ T9318] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.947194][ T9318] bond0: (slave team0): Enslaving as an active interface with an up link [ 183.245703][ T2954] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.341725][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.362076][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.413023][ T2954] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.546382][ T9336] __nla_validate_parse: 2 callbacks suppressed [ 183.546401][ T9336] netlink: 28 bytes leftover after parsing attributes in process `syz.2.941'. [ 183.622578][ T2954] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.675176][ T9343] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 183.678788][ T9342] netlink: 'syz.4.943': attribute type 29 has an invalid length. [ 183.755253][ T9342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.943'. [ 183.834922][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.860814][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.934402][ T2954] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.067081][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 184.085740][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 184.095064][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 184.107184][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 184.118195][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 184.194454][ T9366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.948'. [ 184.203828][ T9366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.948'. [ 184.212182][ T9368] netlink: 'syz.2.947': attribute type 1 has an invalid length. [ 184.225334][ T9368] netlink: 'syz.2.947': attribute type 4 has an invalid length. [ 184.248736][ T9368] netlink: 188 bytes leftover after parsing attributes in process `syz.2.947'. [ 184.266034][ T9368] NCSI netlink: No device for ifindex 458760 [ 184.394115][ T2954] bridge_slave_1: left allmulticast mode [ 184.418676][ T2954] bridge_slave_1: left promiscuous mode [ 184.424475][ T2954] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.452551][ T2954] bridge_slave_0: left allmulticast mode [ 184.460330][ T2954] bridge_slave_0: left promiscuous mode [ 184.466190][ T2954] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.923903][ T2954] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.942272][ T2954] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.955911][ T2954] bond0 (unregistering): Released all slaves [ 184.977053][ T9375] tipc: Enabling of bearer rejected, failed to enable media [ 185.168301][ T9386] netlink: 456 bytes leftover after parsing attributes in process `syz.2.952'. [ 185.231629][ T9387] No such timeout policy "syz0" [ 185.421331][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 185.429925][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 185.437698][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 185.446460][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 185.454319][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 185.486246][ T9402] sctp: [Deprecated]: syz.2.958 (pid 9402) Use of struct sctp_assoc_value in delayed_ack socket option. [ 185.486246][ T9402] Use struct sctp_sack_info instead [ 185.715976][ T9411] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 185.820996][ T9361] chnl_net:caif_netlink_parms(): no params data found [ 186.124461][ T9426] netlink: 68 bytes leftover after parsing attributes in process `syz.4.964'. [ 186.196066][ T5847] Bluetooth: hci0: command tx timeout [ 186.436402][ T9448] team0: Device vlan4 is already an upper device of the team interface [ 186.544088][ T2954] hsr_slave_0: left promiscuous mode [ 186.552705][ T2954] hsr_slave_1: left promiscuous mode [ 186.561183][ T2954] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.583767][ T2954] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.610089][ T2954] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.617608][ T2954] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.656461][ T2954] veth1_macvtap: left promiscuous mode [ 186.668520][ T2954] veth0_macvtap: left promiscuous mode [ 186.684732][ T2954] veth1_vlan: left promiscuous mode [ 186.690641][ T2954] veth0_vlan: left promiscuous mode [ 186.712594][ T9457] xt_bpf: check failed: parse error [ 187.200443][ T2954] team0 (unregistering): Port device team_slave_1 removed [ 187.236252][ T2954] team0 (unregistering): Port device team_slave_0 removed [ 187.541076][ T5847] Bluetooth: hci1: command tx timeout [ 187.599269][ T9361] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.606613][ T9361] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.628133][ T9361] bridge_slave_0: entered allmulticast mode [ 187.636878][ T9361] bridge_slave_0: entered promiscuous mode [ 187.654591][ T9361] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.664447][ T9361] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.671931][ T9361] bridge_slave_1: entered allmulticast mode [ 187.680786][ T9361] bridge_slave_1: entered promiscuous mode [ 187.710544][ T9460] tipc: Started in network mode [ 187.715552][ T9460] tipc: Node identity ac14142f, cluster identity 4711 [ 187.726935][ T9460] tipc: New replicast peer: 0.0.0.0 [ 187.735061][ T9460] tipc: Enabled bearer , priority 10 [ 187.799747][ T9463] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 187.860953][ T9361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.879378][ T9361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.054370][ T9488] netlink: 88 bytes leftover after parsing attributes in process `syz.2.978'. [ 188.131347][ T9361] team0: Port device team_slave_0 added [ 188.172629][ T9361] team0: Port device team_slave_1 added [ 188.268724][ T5847] Bluetooth: hci0: command tx timeout [ 188.307127][ T9361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.315334][ T9361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.344852][ T9361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.361351][ T9361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.369139][ T9361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.396170][ T9361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.576202][ T9514] netlink: 56 bytes leftover after parsing attributes in process `syz.4.985'. [ 188.587627][ T9514] netlink: 12 bytes leftover after parsing attributes in process `syz.4.985'. [ 188.597567][ T9514] netlink: 31 bytes leftover after parsing attributes in process `syz.4.985'. [ 188.608655][ T9514] netlink: 'syz.4.985': attribute type 3 has an invalid length. [ 188.619282][ T9514] netlink: 'syz.4.985': attribute type 2 has an invalid length. [ 188.627080][ T9514] netlink: 31 bytes leftover after parsing attributes in process `syz.4.985'. [ 188.657076][ T9515] netlink: 4 bytes leftover after parsing attributes in process `syz.4.985'. [ 188.710366][ T9361] hsr_slave_0: entered promiscuous mode [ 188.740660][ T5928] tipc: Node number set to 2886997039 [ 188.770233][ T9361] hsr_slave_1: entered promiscuous mode [ 188.776824][ T9361] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 188.795388][ T9361] Cannot create hsr debugfs directory [ 188.856390][ T9525] SET target dimension over the limit! [ 188.884594][ T9398] chnl_net:caif_netlink_parms(): no params data found [ 189.004374][ T9532] netlink: 104 bytes leftover after parsing attributes in process `syz.3.989'. [ 189.101552][ T2954] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.132982][ T9538] netlink: 40 bytes leftover after parsing attributes in process `syz.3.992'. [ 189.263908][ T2954] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.370992][ T2954] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.589081][ T9398] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.596656][ T9566] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1000'. [ 189.605952][ T9398] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.613612][ T9398] bridge_slave_0: entered allmulticast mode [ 189.628946][ T5847] Bluetooth: hci1: command tx timeout [ 189.630038][ T9398] bridge_slave_0: entered promiscuous mode [ 189.676669][ T2954] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.712138][ T9398] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.719583][ T9398] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.727104][ T9398] bridge_slave_1: entered allmulticast mode [ 189.735738][ T9398] bridge_slave_1: entered promiscuous mode [ 189.897500][ T9571] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1002'. [ 189.927573][ T9398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.985718][ T9398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.172003][ T9398] team0: Port device team_slave_0 added [ 190.257572][ T9398] team0: Port device team_slave_1 added [ 190.339018][ T5847] Bluetooth: hci0: command tx timeout [ 190.623274][ T9398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.647998][ T9398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.692125][ T9398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.721383][ T9398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.730467][ T9398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.759192][ T9398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.774293][ T2954] bridge_slave_1: left allmulticast mode [ 190.780306][ T2954] bridge_slave_1: left promiscuous mode [ 190.786410][ T2954] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.808462][ T2954] bridge_slave_0: left allmulticast mode [ 190.814174][ T2954] bridge_slave_0: left promiscuous mode [ 190.826986][ T2954] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.842668][ T9622] netlink: 'syz.3.1015': attribute type 1 has an invalid length. [ 190.853251][ T9622] netlink: 'syz.3.1015': attribute type 1 has an invalid length. [ 190.862148][ T9622] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1015'. [ 191.237624][ T2954] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.254006][ T2954] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.264348][ T2954] bond0 (unregistering): Released all slaves [ 191.306816][ T9622] ipvlan2: entered promiscuous mode [ 191.313640][ T9622] bridge0: port 3(ipvlan2) entered blocking state [ 191.321790][ T9622] bridge0: port 3(ipvlan2) entered disabled state [ 191.349223][ T9622] ipvlan2: entered allmulticast mode [ 191.354806][ T9622] bridge0: entered allmulticast mode [ 191.378017][ T9622] ipvlan2: left allmulticast mode [ 191.383751][ T9622] bridge0: left allmulticast mode [ 191.427766][ T9627] geneve2: entered promiscuous mode [ 191.698353][ T5847] Bluetooth: hci1: command tx timeout [ 191.699232][ T9398] hsr_slave_0: entered promiscuous mode [ 191.716395][ T9398] hsr_slave_1: entered promiscuous mode [ 191.728314][ T9398] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 191.735930][ T9398] Cannot create hsr debugfs directory [ 191.799619][ T9640] Bluetooth: MGMT ver 1.23 [ 192.188880][ T1567] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 192.242202][ T9361] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 192.289228][ T9663] IPVS: set_ctl: invalid protocol: 41 172.20.20.170:20003 [ 192.395653][ T9361] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 192.418171][ T5847] Bluetooth: hci0: command tx timeout [ 192.453224][ T2954] hsr_slave_0: left promiscuous mode [ 192.460189][ T2954] hsr_slave_1: left promiscuous mode [ 192.466321][ T2954] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.475094][ T2954] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.484763][ T2954] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.495796][ T2954] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.523245][ T2954] veth1_macvtap: left promiscuous mode [ 192.528936][ T2954] veth0_macvtap: left promiscuous mode [ 192.534647][ T2954] veth1_vlan: left promiscuous mode [ 192.540830][ T2954] veth0_vlan: left promiscuous mode [ 193.004973][ T2954] team0 (unregistering): Port device team_slave_1 removed [ 193.053585][ T2954] team0 (unregistering): Port device team_slave_0 removed [ 193.447546][ T9361] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 193.535560][ T9361] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 193.780260][ T5847] Bluetooth: hci1: command tx timeout [ 194.104743][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.117056][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.131517][ T9698] geneve2: entered promiscuous mode [ 194.138211][ T9698] geneve2: entered allmulticast mode [ 194.151271][ T9700] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 194.209602][ T9705] __nla_validate_parse: 3 callbacks suppressed [ 194.209621][ T9705] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1033'. [ 194.281481][ T9361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.355700][ T9361] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.406272][ T4547] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.413577][ T4547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.445700][ T9712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1034'. [ 194.498015][ T5847] Bluetooth: hci0: command tx timeout [ 194.511582][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.518868][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.579776][ T9398] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 194.595322][ T9398] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 194.620926][ T9398] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 194.652620][ T9718] : entered promiscuous mode [ 194.674192][ T9398] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 195.003170][ T9398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.060881][ T9398] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.094887][ T4547] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.102209][ T4547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.136892][ T4547] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.144161][ T4547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.286244][ T9398] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 195.388570][ T9747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1040'. [ 195.463650][ T9751] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1040'. [ 195.637560][ T9361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.833520][ T9361] veth0_vlan: entered promiscuous mode [ 195.874166][ T9361] veth1_vlan: entered promiscuous mode [ 195.951023][ T9398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.029514][ T9361] veth0_macvtap: entered promiscuous mode [ 196.055328][ T9361] veth1_macvtap: entered promiscuous mode [ 196.132157][ T9361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.180140][ T9398] veth0_vlan: entered promiscuous mode [ 196.190821][ T9361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.223305][ T9779] xt_CT: You must specify a L4 protocol and not use inversions on it [ 196.224609][ T9398] veth1_vlan: entered promiscuous mode [ 196.233035][ T9779] xt_CT: You must specify a L4 protocol and not use inversions on it [ 196.249876][ T9779] xt_CT: You must specify a L4 protocol and not use inversions on it [ 196.270977][ T9361] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.323971][ T9361] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.351257][ T9361] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.365562][ T9361] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.436196][ T9786] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1052'. [ 196.465721][ T9398] veth0_macvtap: entered promiscuous mode [ 196.522648][ T9398] veth1_macvtap: entered promiscuous mode [ 196.684386][ T9398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.729535][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.754533][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.797293][ T9398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.872044][ T9804] syz_tun: tun_net_xmit 86 [ 196.885539][ T9398] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.903076][ T9804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1055'. [ 196.915785][ T9398] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.931550][ T9398] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.943189][ T9398] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.968202][ T9804] sit0: Master is either lo or non-ether device [ 197.014182][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.051673][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.239087][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.247076][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.436222][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.468800][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.653271][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.938142][ C0] syz_tun: tun_net_xmit 86 [ 198.013746][ T9840] netlink: 'syz.3.1064': attribute type 1 has an invalid length. [ 198.094508][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.277078][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.297407][ T9850] IPVS: nq: UDP 224.0.0.2:20004 - no destination available [ 198.483854][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.532415][ T5856] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 198.542066][ T5856] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 198.556824][ T5856] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 198.566017][ T5856] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 198.577096][ T5856] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 198.782043][ T12] bridge_slave_1: left allmulticast mode [ 198.787765][ T12] bridge_slave_1: left promiscuous mode [ 198.794631][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.823612][ T12] bridge_slave_0: left allmulticast mode [ 198.844739][ T12] bridge_slave_0: left promiscuous mode [ 198.851095][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.978082][ C0] syz_tun: tun_net_xmit 86 [ 199.175599][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.188140][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.198692][ T12] bond0 (unregistering): Released all slaves [ 199.414963][ T9860] syz_tun: tun_net_xmit 54 [ 199.644891][ T9869] x_tables: duplicate underflow at hook 4 [ 199.764135][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 199.781770][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 199.793067][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 199.803650][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 199.811546][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 199.812556][ T9880] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1071'. [ 200.045153][ T9853] chnl_net:caif_netlink_parms(): no params data found [ 200.566976][ T30] audit: type=1107 audit(1750846305.521:4): pid=9908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 200.649006][ T12] hsr_slave_0: left promiscuous mode [ 200.778491][ T5856] Bluetooth: hci0: command tx timeout [ 200.826755][ T9914] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1081'. [ 200.871269][ T12] hsr_slave_1: left promiscuous mode [ 200.881118][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.890313][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.899568][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.919374][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.942034][ T9924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1085'. [ 200.962698][ T12] veth1_macvtap: left promiscuous mode [ 200.968583][ T12] veth0_macvtap: left promiscuous mode [ 200.974216][ T12] veth1_vlan: left promiscuous mode [ 200.980408][ T12] veth0_vlan: left promiscuous mode [ 201.417954][ T12] team0 (unregistering): Port device team_slave_1 removed [ 201.456627][ T12] team0 (unregistering): Port device team_slave_0 removed [ 201.869100][ T5856] Bluetooth: hci1: command tx timeout [ 201.944984][ T9853] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.958721][ T9853] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.966021][ T9853] bridge_slave_0: entered allmulticast mode [ 201.976200][ T9853] bridge_slave_0: entered promiscuous mode [ 202.079969][ T9853] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.087184][ T9853] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.115909][ T9853] bridge_slave_1: entered allmulticast mode [ 202.130402][ T9853] bridge_slave_1: entered promiscuous mode [ 202.181498][ T9940] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1090'. [ 202.197198][ T9940] openvswitch: netlink: Flow actions attr not present in new flow. [ 202.215614][ T9938] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1089'. [ 202.224957][ T9938] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1089'. [ 202.250229][ T9940] netlink: 'syz.2.1090': attribute type 29 has an invalid length. [ 202.267558][ T9853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.290650][ T9853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.318098][ T9944] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1090'. [ 202.343563][ T9940] netlink: 'syz.2.1090': attribute type 29 has an invalid length. [ 202.415863][ T9853] team0: Port device team_slave_0 added [ 202.466081][ T9853] team0: Port device team_slave_1 added [ 202.543714][ T9952] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1094'. [ 202.583092][ T9853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.594178][ T9853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.621885][ T9853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.658267][ T9853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.665366][ T9853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.692033][ T9853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.775597][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.818881][ T5856] Bluetooth: hci0: command tx timeout [ 202.854224][ T9960] tipc: Enabling of bearer rejected, failed to enable media [ 202.877316][ T9853] hsr_slave_0: entered promiscuous mode [ 202.885179][ T9853] hsr_slave_1: entered promiscuous mode [ 202.894039][ T9853] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.902850][ T9853] Cannot create hsr debugfs directory [ 202.923013][ T9964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1097'. [ 202.935754][ T9962] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1096'. [ 202.966081][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.041223][ T9878] chnl_net:caif_netlink_parms(): no params data found [ 203.108894][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.185987][ T9971] veth1_macvtap: left promiscuous mode [ 203.192239][ T9971] macsec0: entered promiscuous mode [ 203.197573][ T9971] macsec0: entered allmulticast mode [ 203.262386][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.528778][ T9990] x_tables: duplicate underflow at hook 1 [ 203.536290][ T9990] x_tables: duplicate underflow at hook 1 [ 203.563012][ T9878] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.571795][ T9878] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.581863][ T9878] bridge_slave_0: entered allmulticast mode [ 203.592897][ T9878] bridge_slave_0: entered promiscuous mode [ 203.713332][ T9878] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.728191][ T9878] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.750707][ T9878] bridge_slave_1: entered allmulticast mode [ 203.765391][ T9878] bridge_slave_1: entered promiscuous mode [ 203.938201][ T5856] Bluetooth: hci1: command tx timeout [ 203.957652][ T9878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.987669][ T9878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.106083][T10014] netlink: 'syz.4.1111': attribute type 21 has an invalid length. [ 204.147608][ T12] bridge_slave_1: left allmulticast mode [ 204.162785][ T12] bridge_slave_1: left promiscuous mode [ 204.183591][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.205660][ T12] bridge_slave_0: left allmulticast mode [ 204.222138][ T12] bridge_slave_0: left promiscuous mode [ 204.247115][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.712237][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.726543][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.743882][ T12] bond0 (unregistering): Released all slaves [ 204.775137][ T9878] team0: Port device team_slave_0 added [ 204.787358][ T9878] team0: Port device team_slave_1 added [ 204.910500][ T5856] Bluetooth: hci0: command tx timeout [ 205.041157][ T9878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.067133][ T9878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.099578][ T9878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.128910][ T9878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.138099][ T9878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.170610][ T9878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.331346][T10054] netlink: 'syz.4.1120': attribute type 11 has an invalid length. [ 205.348882][T10054] __nla_validate_parse: 7 callbacks suppressed [ 205.348898][T10054] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1120'. [ 205.349183][T10056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1121'. [ 205.366241][T10054] netlink: 'syz.4.1120': attribute type 11 has an invalid length. [ 205.397434][T10054] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1120'. [ 205.625604][ T9878] hsr_slave_0: entered promiscuous mode [ 205.632599][ T9878] hsr_slave_1: entered promiscuous mode [ 205.653372][ T9878] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.683943][ T9878] Cannot create hsr debugfs directory [ 206.013063][ T12] hsr_slave_0: left promiscuous mode [ 206.024768][ T12] hsr_slave_1: left promiscuous mode [ 206.028226][ T5856] Bluetooth: hci1: command tx timeout [ 206.042908][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.050737][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.059416][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.067256][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.090001][ T12] veth1_macvtap: left promiscuous mode [ 206.095568][ T12] veth0_macvtap: left promiscuous mode [ 206.101536][ T12] veth1_vlan: left promiscuous mode [ 206.106849][ T12] veth0_vlan: left promiscuous mode [ 206.557765][ T12] team0 (unregistering): Port device team_slave_1 removed [ 206.601047][ T12] team0 (unregistering): Port device team_slave_0 removed [ 206.978902][ T5856] Bluetooth: hci0: command tx timeout [ 207.009291][T10093] batman_adv: batadv0: Adding interface: dummy0 [ 207.015616][T10093] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.050641][T10093] batman_adv: batadv0: Interface activated: dummy0 [ 207.092731][T10094] batadv0: mtu less than device minimum [ 207.101140][T10094] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 207.113403][T10094] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 207.125348][T10094] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 207.137286][T10094] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 207.148898][T10094] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 207.160320][T10094] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 207.171603][T10094] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 207.182883][T10094] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 207.194219][T10094] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 207.265072][ T9853] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 207.287408][ T9853] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 207.303364][ T9853] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 207.350904][T10100] netlink: 'syz.3.1132': attribute type 10 has an invalid length. [ 207.351677][ T9853] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 207.359443][T10100] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1132'. [ 207.420742][T10100] x_tables: duplicate underflow at hook 1 [ 207.480545][T10113] netlink: 'syz.3.1132': attribute type 21 has an invalid length. [ 207.752168][T10120] team0: Device vti0 is of different type [ 207.945101][ T9853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.964704][T10130] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1140'. [ 207.987667][ T9853] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.044348][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.051615][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.076547][ T2987] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.083777][ T2987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.102252][ T5856] Bluetooth: hci1: command tx timeout [ 208.250435][ T9878] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 208.271539][ T9878] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 208.288892][ T9878] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 208.312512][ T9878] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 208.554430][ T9878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.627068][ T9878] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.672009][ T1567] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.679244][ T1567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.750904][ T1567] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.758165][ T1567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.814821][ T9853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.975076][ T9853] veth0_vlan: entered promiscuous mode [ 209.015048][ T9853] veth1_vlan: entered promiscuous mode [ 209.111359][ T9853] veth0_macvtap: entered promiscuous mode [ 209.144305][ T9853] veth1_macvtap: entered promiscuous mode [ 209.190006][ T9853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.232603][ T9853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.264823][ T9853] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.286487][ T9853] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.295677][ T9853] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.305683][ T9853] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.433722][ T9878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.550388][ T1567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.564650][ T1567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.671036][T10176] netem: incorrect gi model size [ 209.692220][T10176] netem: change failed [ 209.715246][T10178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1150'. [ 209.740392][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.750520][ T9878] veth0_vlan: entered promiscuous mode [ 209.772055][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.805987][ T9878] veth1_vlan: entered promiscuous mode [ 209.942572][T10182] netlink: 'syz.2.1152': attribute type 11 has an invalid length. [ 209.962598][ T9878] veth0_macvtap: entered promiscuous mode [ 209.981051][T10182] netlink: 'syz.2.1152': attribute type 4 has an invalid length. [ 209.996190][T10184] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 210.005751][T10182] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1152'. [ 210.022230][T10184] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 210.036933][T10184] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 210.053905][T10184] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 210.063816][T10184] geneve3: entered promiscuous mode [ 210.073955][T10184] geneve3: entered allmulticast mode [ 210.085472][ T9878] veth1_macvtap: entered promiscuous mode [ 210.255466][ T9878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.315249][ T9878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.359693][ T9878] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.375918][ T9878] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.410093][ T9878] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.421081][ T9878] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.436685][T10198] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1157'. [ 210.523729][T10198] delete_channel: no stack [ 210.530113][T10203] syz_tun: tun_net_xmit 86 [ 210.559717][T10204] veth0: entered promiscuous mode [ 210.646902][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.669654][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.735748][ T1567] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.824596][T10202] veth0: left promiscuous mode [ 210.853984][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.878616][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.342101][ T1567] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.538073][ C1] syz_tun: tun_net_xmit 86 [ 211.543389][ T5850] Bluetooth: hci3: command 0x0406 tx timeout [ 211.549495][ T5857] Bluetooth: hci2: command 0x0406 tx timeout [ 211.655102][ T1567] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.753034][ T1567] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.771582][ T5856] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 211.781698][ T5856] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 211.789852][ T5856] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 211.802425][ T5856] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 211.810985][ T5856] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 211.910015][ T1567] bridge_slave_1: left allmulticast mode [ 211.915721][ T1567] bridge_slave_1: left promiscuous mode [ 211.924892][ T1567] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.936462][ T1567] bridge_slave_0: left allmulticast mode [ 211.951803][ T1567] bridge_slave_0: left promiscuous mode [ 211.957672][ T1567] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.499706][T10236] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1167'. [ 212.542129][T10228] netlink: 51 bytes leftover after parsing attributes in process `syz.3.1166'. [ 212.576065][ T1567] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.578437][ C1] syz_tun: tun_net_xmit 86 [ 212.611640][ T1567] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.636848][ T1567] bond0 (unregistering): Released all slaves [ 212.683042][T10234] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1166'. [ 212.900188][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 212.918803][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 212.927221][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 212.947299][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 212.954834][T10246] block nbd1: Unsupported socket: shutdown callout must be supported. [ 212.973345][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 213.148384][T10260] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1173'. [ 213.485950][T10273] xt_TCPMSS: Only works on TCP SYN packets [ 213.586235][T10218] chnl_net:caif_netlink_parms(): no params data found [ 213.665294][T10282] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1179'. [ 213.743337][T10280] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1180'. [ 213.758961][T10284] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1181'. [ 213.858699][ T5856] Bluetooth: hci0: command tx timeout [ 213.899335][T10291] netlink: 'syz.2.1182': attribute type 21 has an invalid length. [ 213.921659][T10291] tipc: Trying to set illegal importance in message [ 213.986360][T10298] net_ratelimit: 11 callbacks suppressed [ 213.986379][T10298] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 214.216610][T10308] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1187'. [ 214.246805][T10218] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.260480][T10218] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.267740][T10218] bridge_slave_0: entered allmulticast mode [ 214.279910][T10218] bridge_slave_0: entered promiscuous mode [ 214.287950][T10218] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.307905][T10218] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.315222][T10218] bridge_slave_1: entered allmulticast mode [ 214.324168][T10218] bridge_slave_1: entered promiscuous mode [ 214.370788][ T1567] hsr_slave_0: left promiscuous mode [ 214.386267][ T1567] hsr_slave_1: left promiscuous mode [ 214.393061][ T1567] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.401062][ T1567] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.414195][ T1567] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.425602][ T1567] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.451309][ T1567] veth1_macvtap: left promiscuous mode [ 214.456957][ T1567] veth0_macvtap: left promiscuous mode [ 214.463630][ T1567] veth1_vlan: left promiscuous mode [ 214.469166][ T1567] veth0_vlan: left promiscuous mode [ 214.907019][ T1567] team0 (unregistering): Port device team_slave_1 removed [ 214.946941][ T1567] team0 (unregistering): Port device team_slave_0 removed [ 215.058628][ T5856] Bluetooth: hci1: command tx timeout [ 215.490121][T10218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.591116][T10218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.726494][T10218] team0: Port device team_slave_0 added [ 215.758960][T10218] team0: Port device team_slave_1 added [ 215.911922][T10244] chnl_net:caif_netlink_parms(): no params data found [ 215.938359][ T5856] Bluetooth: hci0: command tx timeout [ 215.980411][T10218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.987529][T10218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.014298][T10218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.060820][T10218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.068308][T10218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.095483][T10218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.326655][T10218] hsr_slave_0: entered promiscuous mode [ 216.334408][T10218] hsr_slave_1: entered promiscuous mode [ 216.346137][T10218] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.354989][T10218] Cannot create hsr debugfs directory [ 216.389845][T10369] netlink: 'syz.3.1201': attribute type 4 has an invalid length. [ 216.399176][T10369] nft_compat: unsupported protocol 0 [ 216.404968][T10369] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1201'. [ 216.589199][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.627107][T10385] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1203'. [ 216.644288][T10244] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.652426][T10382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1203'. [ 216.666960][T10244] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.677943][T10244] bridge_slave_0: entered allmulticast mode [ 216.685661][T10244] bridge_slave_0: entered promiscuous mode [ 216.707489][ T30] audit: type=1800 audit(1750846321.681:5): pid=10388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1205" name="memory.events" dev="tmpfs" ino=1614 res=0 errno=0 [ 216.757124][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.797169][T10392] netlink: 'syz.3.1206': attribute type 5 has an invalid length. [ 216.799247][T10244] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.817172][T10244] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.827424][T10244] bridge_slave_1: entered allmulticast mode [ 216.841477][T10244] bridge_slave_1: entered promiscuous mode [ 216.951498][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.042519][T10397] SET target dimension over the limit! [ 217.050483][T10397] netlink: 165 bytes leftover after parsing attributes in process `syz.4.1208'. [ 217.065002][T10244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.129992][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.141226][ T5856] Bluetooth: hci1: command tx timeout [ 217.157885][T10244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.295752][T10244] team0: Port device team_slave_0 added [ 217.325304][T10244] team0: Port device team_slave_1 added [ 217.338416][T10416] netlink: 'syz.3.1213': attribute type 10 has an invalid length. [ 217.350048][T10416] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1213'. [ 217.355007][T10415] tipc: Enabling of bearer rejected, failed to enable media [ 217.401870][T10244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.413661][T10244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.449500][T10244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.486595][T10416] netlink: 'syz.3.1213': attribute type 12 has an invalid length. [ 217.496462][T10416] netlink: 'syz.3.1213': attribute type 29 has an invalid length. [ 217.509610][T10416] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1213'. [ 217.524460][T10421] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 217.534799][T10416] netlink: 'syz.3.1213': attribute type 1 has an invalid length. [ 217.546081][T10416] netlink: 'syz.3.1213': attribute type 2 has an invalid length. [ 217.555966][T10416] netlink: 39 bytes leftover after parsing attributes in process `syz.3.1213'. [ 217.573701][T10244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.583986][T10244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.634308][T10244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.867453][T10244] hsr_slave_0: entered promiscuous mode [ 217.887152][T10244] hsr_slave_1: entered promiscuous mode [ 217.907562][T10244] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.935727][T10244] Cannot create hsr debugfs directory [ 218.018180][ T5856] Bluetooth: hci0: command tx timeout [ 218.119998][ T49] bridge_slave_1: left allmulticast mode [ 218.126045][ T49] bridge_slave_1: left promiscuous mode [ 218.135713][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.145338][ T49] bridge_slave_0: left allmulticast mode [ 218.151689][ T49] bridge_slave_0: left promiscuous mode [ 218.158673][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.531102][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.542739][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.554010][ T49] bond0 (unregistering): Released all slaves [ 218.851455][T10453] netlink: 'syz.2.1225': attribute type 1 has an invalid length. [ 219.029818][T10463] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1228'. [ 219.044605][T10463] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1228'. [ 219.069631][T10463] netlink: 'syz.4.1228': attribute type 6 has an invalid length. [ 219.081486][T10463] netlink: 'syz.4.1228': attribute type 5 has an invalid length. [ 219.090631][T10463] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1228'. [ 219.218525][ T5856] Bluetooth: hci1: command tx timeout [ 219.310539][T10473] syz_tun: tun_net_xmit 42 [ 219.432611][T10218] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 219.583198][T10218] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 219.635180][T10218] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 219.764815][ T49] hsr_slave_0: left promiscuous mode [ 219.774524][ T49] hsr_slave_1: left promiscuous mode [ 219.790352][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.797630][T10492] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 219.811554][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.840415][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.848982][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.894205][ T49] veth1_macvtap: left promiscuous mode [ 219.903842][ T49] veth0_macvtap: left promiscuous mode [ 219.909994][ T49] veth1_vlan: left promiscuous mode [ 219.915553][ T49] veth0_vlan: left promiscuous mode [ 220.098423][ T5856] Bluetooth: hci0: command tx timeout [ 220.337911][ C1] syz_tun: tun_net_xmit 42 [ 220.478633][ T49] team0 (unregistering): Port device team_slave_1 removed [ 220.520470][ T49] team0 (unregistering): Port device team_slave_0 removed [ 221.039627][T10218] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 221.298199][ T5856] Bluetooth: hci1: command tx timeout [ 221.377920][ C1] syz_tun: tun_net_xmit 42 [ 221.424715][T10218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.553933][T10536] __nla_validate_parse: 13 callbacks suppressed [ 221.553955][T10536] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1247'. [ 221.574672][T10218] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.686555][T10539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.726012][T10244] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 221.742289][T10244] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 221.745565][T10539] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1248'. [ 221.750289][T10547] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1248'. [ 221.785479][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.792753][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.818627][T10244] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 221.832195][T10244] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 221.877666][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.884912][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.037466][T10218] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 222.073812][T10218] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 222.182076][T10571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1253'. [ 222.230542][T10571] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 222.259208][T10571] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.318929][T10574] syzkaller1: entered promiscuous mode [ 222.368144][T10574] syzkaller1: entered allmulticast mode [ 222.452929][T10244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.849752][T10571] team0 (unregistering): Port device team_slave_0 removed [ 222.898447][T10571] team0 (unregistering): Port device team_slave_1 removed [ 223.100126][T10604] validate_nla: 2 callbacks suppressed [ 223.100147][T10604] netlink: 'syz.4.1258': attribute type 29 has an invalid length. [ 223.126769][T10244] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.197334][T10602] bond0: (slave team0): Releasing backup interface [ 223.271006][T10602] bridge_slave_0: left allmulticast mode [ 223.276746][T10602] bridge_slave_0: left promiscuous mode [ 223.283684][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.293781][T10610] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1257'. [ 223.306300][T10610] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1257'. [ 223.316419][T10610] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1257'. [ 223.334977][T10602] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.347610][T10602] bridge_slave_1: left allmulticast mode [ 223.353726][T10602] bridge_slave_1: left promiscuous mode [ 223.360222][T10602] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.373134][T10602] bond0: (slave bond_slave_0): Releasing backup interface [ 223.393798][T10602] bond0: (slave bond_slave_1): Releasing backup interface [ 223.428810][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.442806][T10602] team0: Port device team_slave_0 removed [ 223.469622][T10602] team0: Port device team_slave_1 removed [ 223.506729][T10602] bond2: (slave veth3): Releasing active interface [ 223.535044][T10602] bond3: (slave bond4): Releasing backup interface [ 223.583136][T10613] vlan2: entered promiscuous mode [ 223.595851][T10613] vlan2: entered allmulticast mode [ 223.601010][T10616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1260'. [ 223.603132][T10613] hsr_slave_1: entered allmulticast mode [ 223.623572][ T2987] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.630828][ T2987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.653494][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.660733][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.935088][T10218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.101146][T10244] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 224.179946][ T12] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 224.243735][T10637] netlink: 'syz.4.1263': attribute type 9 has an invalid length. [ 224.268304][ T12] ------------[ cut here ]------------ [ 224.273837][ T12] UBSAN: array-index-out-of-bounds in net/mac80211/scan.c:1223:5 [ 224.331870][ T12] index 11 is out of range for type 'struct ieee80211_channel *[] __counted_by(n_channels)' (aka 'struct ieee80211_channel *[]') [ 224.380881][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.16.0-rc2-syzkaller-00179-g9caca6ac0e26 #0 PREEMPT(full) [ 224.380931][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 224.380946][ T12] Workqueue: events_unbound cfg80211_wiphy_work [ 224.380992][ T12] Call Trace: [ 224.381000][ T12] [ 224.381010][ T12] dump_stack_lvl+0x189/0x250 [ 224.381048][ T12] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.381080][ T12] ? __pfx__printk+0x10/0x10 [ 224.381112][ T12] ubsan_epilogue+0xa/0x40 [ 224.381134][ T12] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 224.381176][ T12] ieee80211_request_ibss_scan+0x600/0x8b0 [ 224.381225][ T12] ieee80211_ibss_work+0xd85/0x1060 [ 224.381255][ T12] ? lockdep_hardirqs_on+0x9c/0x150 [ 224.381288][ T12] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 224.381317][ T12] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 224.381359][ T12] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 224.381396][ T12] ? skb_dequeue+0x10e/0x150 [ 224.381413][ T12] ? ieee80211_iface_work+0xcdb/0xfe0 [ 224.381448][ T12] ? ieee80211_iface_work+0xf39/0xfe0 [ 224.381482][ T12] ? rcu_is_watching+0x15/0xb0 [ 224.381521][ T12] cfg80211_wiphy_work+0x2df/0x460 [ 224.381545][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 224.381579][ T12] process_scheduled_works+0xae1/0x17b0 [ 224.381645][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 224.381697][ T12] worker_thread+0x8a0/0xda0 [ 224.381748][ T12] kthread+0x70e/0x8a0 [ 224.381776][ T12] ? __pfx_worker_thread+0x10/0x10 [ 224.381807][ T12] ? __pfx_kthread+0x10/0x10 [ 224.381832][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 224.381861][ T12] ? lockdep_hardirqs_on+0x9c/0x150 [ 224.381893][ T12] ? __pfx_kthread+0x10/0x10 [ 224.381918][ T12] ret_from_fork+0x3f9/0x770 [ 224.381950][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 224.381987][ T12] ? __switch_to_asm+0x39/0x70 [ 224.382006][ T12] ? __switch_to_asm+0x33/0x70 [ 224.382025][ T12] ? __pfx_kthread+0x10/0x10 [ 224.382050][ T12] ret_from_fork_asm+0x1a/0x30 [ 224.382091][ T12] [ 224.384404][ T12] ---[ end trace ]--- [ 224.444824][T10218] veth0_vlan: entered promiscuous mode [ 224.478498][ T12] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 224.478528][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.16.0-rc2-syzkaller-00179-g9caca6ac0e26 #0 PREEMPT(full) [ 224.478559][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 224.478576][ T12] Workqueue: events_unbound cfg80211_wiphy_work [ 224.478610][ T12] Call Trace: [ 224.478623][ T12] [ 224.478634][ T12] dump_stack_lvl+0x99/0x250 [ 224.478676][ T12] ? __asan_memcpy+0x40/0x70 [ 224.478710][ T12] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.478749][ T12] ? __pfx__printk+0x10/0x10 [ 224.478793][ T12] panic+0x2db/0x790 [ 224.478836][ T12] ? __pfx_panic+0x10/0x10 [ 224.478869][ T12] ? _printk+0xcf/0x120 [ 224.478915][ T12] ? __pfx__printk+0x10/0x10 [ 224.478953][ T12] check_panic_on_warn+0x89/0xb0 [ 224.478985][ T12] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 224.479032][ T12] ieee80211_request_ibss_scan+0x600/0x8b0 [ 224.479096][ T12] ieee80211_ibss_work+0xd85/0x1060 [ 224.479131][ T12] ? lockdep_hardirqs_on+0x9c/0x150 [ 224.479169][ T12] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 224.479204][ T12] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 224.479240][ T12] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 224.479282][ T12] ? skb_dequeue+0x10e/0x150 [ 224.479302][ T12] ? ieee80211_iface_work+0xcdb/0xfe0 [ 224.479342][ T12] ? ieee80211_iface_work+0xf39/0xfe0 [ 224.479380][ T12] ? rcu_is_watching+0x15/0xb0 [ 224.479425][ T12] cfg80211_wiphy_work+0x2df/0x460 [ 224.479454][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 224.479492][ T12] process_scheduled_works+0xae1/0x17b0 [ 224.479567][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 224.479625][ T12] worker_thread+0x8a0/0xda0 [ 224.479682][ T12] kthread+0x70e/0x8a0 [ 224.479714][ T12] ? __pfx_worker_thread+0x10/0x10 [ 224.479750][ T12] ? __pfx_kthread+0x10/0x10 [ 224.479780][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 224.479813][ T12] ? lockdep_hardirqs_on+0x9c/0x150 [ 224.479842][ T12] ? __pfx_kthread+0x10/0x10 [ 224.794856][ T12] ret_from_fork+0x3f9/0x770 [ 224.799478][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 224.804639][ T12] ? __switch_to_asm+0x39/0x70 [ 224.809505][ T12] ? __switch_to_asm+0x33/0x70 [ 224.814312][ T12] ? __pfx_kthread+0x10/0x10 [ 224.818955][ T12] ret_from_fork_asm+0x1a/0x30 [ 224.823762][ T12] [ 224.827207][ T12] Kernel Offset: disabled [ 224.831622][ T12] Rebooting in 86400 seconds..