last executing test programs: 22.5765907s ago: executing program 3 (id=1384): r0 = socket(0x10, 0x80003, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlinkprop={0x20, 0x6c, 0xb21, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x34400, 0x10010}}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x10) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2b, 'cpuset'}, {0x2d, 'io'}, {0x2b, 'perf_event'}, {0x2d, 'io'}, {0x2b, 'devices'}, {0x2b, 'cpuacct'}, {0x6, 'cpuset'}, {0x2b, 'cpu'}, {0x2d, 'cpuacct'}, {0x2b, 'rdma'}]}, 0x4a) 22.436321183s ago: executing program 3 (id=1388): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004804) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x39b90}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x44}}, 0x0) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r0, 0x89f5, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000007c0)={0x4c, r3, 0x1, 0x70bd2a, 0x0, {0x4e}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xab, 0xfffffffc}}, {0x8, 0xb, 0x60a7}, {0x6, 0x11, 0x2}}]}, 0x4c}}, 0x4004880) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r2) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x68, r6, 0x20, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x10000, @media='udp\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x40800}, 0x8800) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000600)="1a425f3770b268af205c2096cf3a0b353c28019586fa75f943c682a9b3c128851c1c2fe1350a5b994766bce1e24b59d3262ec578e70cb8295b3cee57fb4c051429a2bff8fbf5647da75032c187832a049fea981c7b864465de6bce7661e604adc7fca93f6062578fb4719a710f8870b4586c893ae3d978e64922e14638584262c24a8af7b6ee9678504342d79a79485aef7f9d91896896ab776931d3550cc1612cfce723e6bb7388c60266fdd50525a3a53a0e", 0x3, r5, 0x4}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000840)="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"/297, &(0x7f00000006c0)="4a9d6ad929056f405c8de9290a95bae9eca017d4cd258608d4d0683a05daa43174d134c6443e0202c80691182e0b00000000000035908d26a9f6fb5d50ad4b3855899fa8612dbcb3a719ad10bafb9a11b50525f6229e98337286c882d96d0744b379be9ec66bece5764116925df8885386a5c7bec001fca09bf6bf341527118f8466f0e82960a927e6ded4ff869979c37ea3a70bb791106a2ee4d0ff50c30f22a92eb2532a58a83f048051d175a3a9756e6b2aa85b4e51d32dfeef96a8025538e1df6a045dcf6b4adbde288a71eb865528936fb416443486df881ac7", 0x1003, r5}, 0x38) write$bt_hci(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="01062075120f07003b0c0103042aaaaaaaaa10"], 0x13) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)={0x14, r8, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x4005c}, 0x400c084) sendto$inet6(0xffffffffffffffff, &(0x7f0000000500)="91a7fa4f094387c253a2d166f6279fa21e4cc85d536da04fe43429ebacd68bd26e30295e72e4ab937fd62b008fc8dab2c7556947d46fb9f8069d93b1a3400fce4f0c4135f7fd8e01009fde6d237a181b6fffc2fc336ad9169924efd75dd4fcf130c70647d625e107f7b330e0e20dbd2b572394641f41243ceee280fbb7811cb80f383840f5fabfb1c87debd393d3b58075ed7535fee627e7215791b1333b037006a2a6e69c1b6b583d059494a3041d7be9e75f75c847f67fe2181eaf6968f1721be7c55ab1d504879aee588afe88437d55c19615f581", 0xd6, 0x19d344b6f632f91f, &(0x7f0000000400)={0xa, 0x4e23, 0x4, @empty, 0x2}, 0x1c) 22.061789314s ago: executing program 3 (id=1394): ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, &(0x7f0000000000)=0xb) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x1000) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x33}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000001) syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)={0x204, r3, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x12}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_IE={0xaa, 0x2a, [@link_id={0x65, 0x12, {@initial, @device_b, @broadcast}}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @fast_bss_trans={0x37, 0x85, {0x7, 0x3, "5fa5ee04395cb4284b30f34322215c45", "f162a38d2f60d5d6cdc897bfb953f0dd228cc811d530e5037a8a9405d28d32d3", "11de1b7da40322ed780417837ea5311aa9992f9c85ff6ebb02df0b38e9bf7b9a", [{0x4, 0xb, "fba236e3b58cb73a83cd90"}, {0x1, 0x16, "91d0f8043af51c04a13b60f66679a8a23d089aa3bb3b"}, {0x1, 0xc, "2c8883a3e571bfa085c22cb3"}]}}, @mesh_chsw={0x76, 0x6, {0xb4, 0x99, 0x1d, 0x5}}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x106, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x1}, @random_vendor={0xdd, 0xfd, "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"}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) r4 = accept(r0, &(0x7f0000000540)=@ieee802154={0x24, @short}, &(0x7f00000005c0)=0x80) sendmsg$IPSET_CMD_PROTOCOL(r4, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, 0x1, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008885}, 0x4000800) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000700)={0x0, @in6={{0xa, 0x4e24, 0x2, @empty, 0xd63}}, 0x2}, &(0x7f00000007c0)=0x90) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000800)={r5, 0x6}, 0x8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000980)={'ip_vti0\x00', &(0x7f0000000880)={'syztnl0\x00', 0x0, 0x0, 0x7, 0x1000, 0x7fff, {{0x2e, 0x4, 0x3, 0x8, 0xb8, 0x67, 0x0, 0x0, 0x0, 0x0, @local, @broadcast, {[@timestamp={0x44, 0x1c, 0xfd, 0x0, 0x7, [0xb, 0x6, 0x0, 0xffffffff, 0x80000001, 0x8]}, @timestamp_addr={0x44, 0x34, 0x8, 0x1, 0x9, [{@empty, 0x4}, {@empty, 0x401}, {@rand_addr=0x64010100, 0xfffffffe}, {@private=0xa010100, 0xd6}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x8}, {@multicast2, 0xd5}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x8, 0x39, 0x0, 0x7, [0x2]}, @ra={0x94, 0x4}, @cipso={0x86, 0x42, 0x3, [{0x1, 0x12, "5db224941717ac3f2c82e3f10db33783"}, {0x7, 0xa, "3b548dc274003ced"}, {0x2, 0x2}, {0x2, 0x11, "17c9335a4e4575f213a06bddb535fa"}, {0x5, 0xd, "0188df9a9ab00e4d726502"}]}]}}}}}) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f00000009c0)=0x0, &(0x7f0000000a00)=0x4) getpeername$packet(r0, &(0x7f0000000a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000a80)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d80)={0xffffffffffffffff, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x0], 0x0, 0xf6, &(0x7f0000000b80)=[{}], 0x8, 0x10, &(0x7f0000000bc0), &(0x7f0000000c00), 0x8, 0xf0, 0x8, 0x8, &(0x7f0000000c40)}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000e40)={0xffffffffffffffff, 0x58, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000e80)=0x0, &(0x7f0000000ec0)=0x4) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000001040)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)={0xc4, r1, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x4e}, @ETHTOOL_A_CHANNELS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_CHANNELS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x7ff}, @ETHTOOL_A_CHANNELS_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000055) sendmsg$unix(r4, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000001080)="d67942371169008f37e63560438a5a2942c114118b01338418b587984ad1750a728769f7598b80e00432de612ca2b0cd0ea37138a4d361cf5c6fed19f101ae20ff26498827cb5475491b182c3b12f521f41028dff0c87a12", 0x58}, {&(0x7f0000001100)="2fe09b83e992d9f6d59c738a843a7f642ad7f8870f7a7c6d3e8725c9409e5a6e7ad7d34c0d5d408476724d34c905bfa20ac2b4bc8cadb19532c81cef376fb702628c16b361d91e511ca8efd09420e1c9d65013070098163f03", 0x59}, {&(0x7f0000001180)="7470e3e53967eb6e8d3e2d3d9f4602a6307f54f4c21e5d823578b4966076e85b41e8f88d3ee2282d4c65f8649593ad143ee924e354343ac1242048af7aca888370f851fbf04ee973f0707da0813bf695480c9d3e1cd4be1c386b77e520ed4664ff2de87fa7b9f38be309dc5cc420d97498862ebb31c33212afc86879afc861a776b89e0b5bbf896c94417d74b72bee529dfaf2e76a9902d5bc3a85e926645f2ed67a76c135618b63bbf7c9bce06da05578526750b165058cf6d11ee89140", 0xbe}, {&(0x7f0000001240)="9df5b5105bba6ad70e1a458cc19040c432619aa25b7d7c5923bcc722284f", 0x1e}, {&(0x7f0000001280)="a1717820937a7cad0a0cd433d28cc6582fa13d5a3a0a06449bca0a32d005783dfa25216e45ca638ebae032191385220142a4494b4a88b695784584bec8fbe30b3349b68b51cf4876317b2775bb440ca451bcb543911606d0db0ac0", 0x5b}, {&(0x7f0000001300)="57c299eb365db6121ff9ef07f1dd8eafa6e94063001404e1f3e998f3ffb501fcb1bbc8c597b51cda6cac98c2c5aafc750fb10e188440ef41d70872ed26e7510f60f99dc34c150225a523", 0x4a}, {&(0x7f0000001380)="bf381e0b4ffa2780853cc4b3807cc65d7335e326a7bd786012de5bab357dbdfa9064ee65bdafd605bfbcb5a57d0bdb47e2a0246d2edaff9b83da10fe7e3a15", 0x3f}], 0x7, 0x0, 0x0, 0x8081}, 0x8) r12 = socket$unix(0x1, 0x0, 0x0) recvmmsg$unix(r12, &(0x7f0000001700)=[{{&(0x7f0000001480)=@abs, 0x6e, &(0x7f00000015c0)=[{&(0x7f0000001500)=""/180, 0xb4}], 0x1, &(0x7f0000001600)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf0}}], 0x1, 0x400010c1, 0x0) r20 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) getpeername(r20, &(0x7f0000001740)=@caif=@util, &(0x7f00000017c0)=0x80) ioctl$sock_inet_SIOCGARP(r18, 0x8954, &(0x7f0000001800)={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306}, 0x24, {0x2, 0x4e20, @multicast2}, 'pimreg1\x00'}) r21 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg(r21, &(0x7f0000003000)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001880)="d4fc8ff885dcf1f886d72746eed26970c843a9165c4bea756af82c343020fd0154097defc3e6da4c1e2f17c6231a9eab41f4641c4d3d5790f94b9fbe82dacffb215639ab9ce90bc3ce968ad867f7eadea3c43806335dd6156c1fa0c9f6ef377ed8b3bf5b8f1b8b148e79c5d9026993a94d1c533f3171a92e38eed1ab3848b657", 0x80}, {&(0x7f0000001900)="3793f964c38765d5f6bbc8ccb2d40fdbf235aeb280b785cd625e2588b9f799a78685171218f999", 0x27}, {&(0x7f0000001940)="be3d17074388eda114265e9ee5c48a8806e09716d02b4be265e30e84d6fd388cf02d2b83b63786655fadde8114c84565156b0d0ee7be03632e18c5157439279865aaf602fd3f3daf4e671735c57fc9849c6a6df4f113e1afc4f5908dc3750c82da2ef7351f54529270134eae98f62036f6c347fe78ea9357bf4bff794bec16cc231fb30350ba39b8897d8f69f99bc35ee5e049a7b604162a66c1987f3b23a8317001b7", 0xa3}, {&(0x7f0000001a00)="32485f3521c5f43cadc60d37a916c1cf87005bde5c5230d22046bc4cabb4bbd96718077c9df3e925fb56bf64230e3c8211ee087769ebee944fb7149099f7c15f55119395e89e97635330d009e97422a42d6d8b91658c3eff48e2b20fe9dc5736dba600a3b622971670e7e8ac2b94ccff38616fc1b1745354516072027d46fbfdd4fd41e8bceca873dc72fe57abe8d8f62f288a5cc8d4d559a9415e7cc4ef620b3b7420a9355d6d5a3041871d7cea95fde2ebee5ad26012", 0xb7}], 0x4, &(0x7f0000001b00)=[{0x98, 0x1, 0x7, "81b49a2f7b8ddeb57e8a8ddf02ac5db465432c5929f026e301987462d18b37820b6a0c3c055e210e35ccbfe9446d72c7bc4cbc06561e8e4fe5140c5578626d06bbe2f3163af0d5b4dd293c0e3a57bbf8ec3b2b802f7dffecc0d82cd3ebd048557e64024144bea0b431ab9d4df3549bcc0ab04816f56ba5177358d04e459870b48aad1729860fb1"}], 0x98}}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001bc0)="56637e2870cb4b1aafadaeac28d78b44a1fd852c08f5381a30e89c9cb2", 0x1d}], 0x1, &(0x7f0000001c40)=[{0xf8, 0x111, 0x1ff, "0b31aa0a9efaa046ff8d9a17c99f6e6e3390cd62046f21c19e2ea43eb02bbac4ca2cdedb0b134da138b8ceca17745e97e890538638a2ce4de8feef7f9f24c072839ff7124df8b8259dcb80b680f77ffd32873d6c71919884b9408a5ca61195ec05f0ec8de12e727daba941c536ff0ea105fba37a97a0abbc320372e7fc601e4e737c0e505ba2384785d15970c4128062c7c3d04b08f0317cc865ce443125f5082fbbad22890654ee0d712144767c77d65330ec1eeb4a944195312660f7c2f16e6b6326cb82be9468cd0e2df73e125c1b8983360fdd17abd833de872b3e5de2a862b65b753e1c57bb"}, {0x40, 0x29, 0x1ff, "574d4eb285c5e5a47504cbce73cf081b55e3c7d83e9e9f37caf9f939217389e83596b6a12bb1c161cec4442463"}, {0x70, 0x0, 0xc, "f238b76f4098514cea1b6adeb3f4cb95738f91f63d5a3ae4bed0e69baa33f1bfaae40eb9c4c24c0d76fe3d8233c7f37cd130c825295e3a0c612b3ee1078fe98b1c2e7a4955b503cb26ec07be8a266119dd791c4caff40d06ed748a8f63e6"}, {0x90, 0x114, 0x2, "c15bb93a1f96f9253a4f26dd0c9072e517f7e05b22e7a480960ebe5a803d6c981a679b126a5a7d104bb50277556d55ff4ed136848206f7bd2e54a7933e4a7be025d4654b858ef77127dffb997de4d38ecb49197701f23a0be571f1b231360993e656665682b08648aa071403b2f572925a8e9270267a174f1352"}, {0xc8, 0x11, 0x101, "12909a473fd1922814954cbf3db1dca2f2cfc903617ac6c9cc775061e9ae5cd6d175367d7d596cc6c55a4223369bc650907e5c6ac1a6286d42aafd994b7796f31bfcf055eeacb364084b9a10160722a235260d9f92cd954b1fd83b066aef0dc253b4b8fa0a855ca3573c83f5b71f33e8be4aaa300055ef7e42f604dcf329b4245879bb2871b760dbe1524541123a329f942bac78bc976fa5142b26a253876cb8d3aa70839ba088f2bb18415c2dd21178fb820cee30"}, {0xf8, 0x10a, 0x6, "a0546b393ca50336769101b17e44295e05f1be34f72a048aae619bf3998d4b9df6fb69c693947ab985251605079bddd3fa87d9789625ff4e463707c481ef893318e882b3391d40e2a204e0dbcaf1fb5641d19c13d1561de93d004774d3eb7b0ebf4a55862479a0971e84a2ae29e4ae75cb54059e69e61d4d991d12a8f4a8fb806ac694492add90ae44c22672d6d8e917cdbe15f6297662369c9a9e023c3bc7c88471fa6b3102dd719cd035a83ab592145b2145ec6f694b1eaef04258edd36b13ff7e31da3b263db0296301c6ea779e5da5e4025ecae2357aade8575183c34601251c655b75"}, {0x70, 0x0, 0x3, "165644efd9ebccf1558cbee104491bb7f97392d8fc283be08e260716fc8d501c18dcbc85caa4a4c8bfebf1525c6bb964c0572a2b0e5bd53794fc937892d4f5b0324277917885ed14b8261e407ea0190637500bd38f7a0e7b6da345"}, {0xa0, 0x0, 0x2118, "5d8329b4401676894db2f87c0f6bd301bccbcc908e4bec6e48ca30c777d7aad7a0b16bf91580665efb13ff0cb36d9913bf2b78a13b65cf7697bad9e7074eec2cc11160212e19bc9f2a5d585d36fb088b4a32e65e3fed186abb533afecdacc9a63d14219692e91168e5d157c269c9d511e30832658e899abba47dda9b9be24fabf3d4609a11620d9179a2d4"}, {0x78, 0x10d, 0x4, "8ae6e8374c2a05ed4332311682ec7cc254911d6a0afceae3712894adc941d7bc684ea0b7bd3c09fc7d2a5ed11c0cf3efb70541715578ae3b5c05a3a13e37936ea6eb045482d7a4cbf245dca928b91ae55b626805ede81414257607733e609dab732b7e33d317c1"}], 0x580}}, {{&(0x7f00000021c0)=@pppol2tpin6={0x18, 0x1, {0x0, r19, 0x2, 0x0, 0x1, 0x0, {0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3e7}}}, 0x80, &(0x7f0000002480)=[{&(0x7f0000002240)}, {&(0x7f0000002280)="6d130448318f31a1ec2b122a70fd70c6702ab453e4468b92a7ba", 0x1a}, {&(0x7f00000022c0)="d7b410d95f776d44e82be0c34a7a405fdcbceb70c1a987166f2ef5b1270e8a09058239c705792c91946e19463672fa79db508e98feceafad323521fabfa42f536a5a32b75b08cbb5cf014b2a27315469ec3fb0f76c532e8fd685ef212fab277c4e1ee99778303a2d54c1d2e2f76a8e14aa2574b3429171d6b28cf88fba57b5a81120bade4d41b1e9ee8e1f801e9e4172b9acf5c6d3e0067b02c55543a9b9626d9e110ccf3ffd9fa34d84ae28d597ae46c7cf6a60b4f8441eefc46ebba1615e2acba6a61b41c5dfa8f216dae9935bce0b2c59fa2b16b06faab74d3d36578c9b29a46cb96406a4ad205f25d1a0eaff0355c3bd76f0c8e160d38f135b", 0xfb}, {&(0x7f00000023c0)="89b3bdb0684380958754a11257223506352944a1e4d751362144e59996dad8cbe19e5aefbbf7232f429bd69ba797ec8ddd00a1bf5b20ce53665952a5ce3b75502f", 0x41}, {&(0x7f0000002440)="a8eccffad73af7651b803aacbd9a0ebe94308408d171f2e423e2bd1143bc4ebd97736135293f72dfb755b0b845e320cbf885335a80e52028", 0x38}], 0x5, &(0x7f0000002500)=[{0x20, 0x10e, 0xfffffff8, "59ab1061f7453d9ee05d4ac0"}, {0x88, 0x1, 0x7, "2f5fddc3a8dfaa45099b28cc072cff120803255c4d15ccbd27fe746991a1188c9cf0b71d47199c10fee8bf2dfc022a474c627f4e7d4ae6340abc511bcff5cfefbe371119420f3f3b26761df5addae1cbb8195c77837b231bcb2ab88b6d173318eb153959ccca6c27e433efee48034f97b6052e"}, {0xd0, 0x113, 0xfffffff9, "410eef1893f632a73242c751419c51096fcb1e42852f7b522ad6ea22e79e8ba028b126c45fbb2d6f241784f58af492f94d9fc02d0a6aa9d3a022de1dc6890cd6caf5a8944e1f98f3a8f24db99dd3a86e5cfd701f793a2d581ce94c986e6890df633ac24b655a92fefe5feb14533a6f58e0eed354701de5f89bb0665a417ba6cf052799a8f81215a6c8974544e44a9ca2ce96dc1c9e8dbb1532d8d5e02018ee36d8278e56210ef4c54506eb7cbf474b880ca6a147152cd18aaa0de7b174b8"}, {0xa8, 0x3a, 0xf, "1df94a719bee93116277e406e016f046b6293c733857944438562b6847c378c3be18af66b443afe25fb3e5a3b981c3b145d4f85eaae965adc282abd5e5d91ec93c7e2092e2641a101a1b728e214958a2ec7f9f7ed2a8960af4c2af3e9482f6d8f74a47b83e75a02b06ea81d6acf55085ea1408e64abe3bd7537edd72ad29692877802f1eac42dc001fec3633f6e92ac936325334ae81393e"}, {0x28, 0x10d, 0x2, "ff7c6d403b630bc17a615164b83dba2275e4a80f88"}, {0x40, 0x87, 0x7f, "072d59b411532bda35001c4a5b1848bfd86d9eef1d0baf211a932720c5eb0ca5e1b53fe285c62f940f"}, {0x110, 0x74d50d2a0dfa7f0, 0x80000000, "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"}, {0x18, 0x118, 0x0, "9383aa2b5cbc02"}, {0xa0, 0x6, 0x0, "a2465f680768dc743ee00eccf6a2196331da01f7e4797860f8f2696ba73ec31a6c1c817bcdc914747194e743a2b7676378720ebebfabb9b42110937cfdf4ad642b22d0ff35de1bc3b6502c3115cb8ea73ca9557eada4edf8aca54fba81f7327b5cdab1168af87f54ed3e26e4fdcf63ca6209b139ac3a4e47177488572e4de962f97452c05b65f6fe6be78b4105b234cb"}, {0x70, 0xff, 0x80, "8f0d7e3420bcc924ff345754357e8671cb2d812563ea62297c0b589ad7e71a058f5f55d14e51c0d0950e10c7f5128e44bde8abb5c32ea7dabb53afc8f2f040029759157c8ab9279db0cc25101515743283156af73f499561bcf9e2a5b62b654f"}], 0x4c0}}, {{&(0x7f00000029c0)=@pppol2tp={0x18, 0x1, {0x0, r16, {0x2, 0x4e23, @remote}, 0x0, 0x3, 0x2}}, 0x80, &(0x7f0000002b40)=[{&(0x7f0000002a40)="62310dab993ba128f63b75fa387eb9cf93d974a85032f2cc6276f651aedf498d960c1340de34f68cba17a02688881b9f981ee60d89400a58c8389578d23d8f5cf21e58c9cc26040f53a053612563670aa699816c00575945b277fb5b12e8870e42470ebacf46961d40df6737b3e423e6065056c1234d9353631947ab4036cf927ff471c3e29675c2d512e449b6de3eedb31315614a77592f8fd0271d4b037ccac1ad8360dce1a8f5f720e7149dcf3bfd4c18d99f064814ebcc89f38188fef77ae6", 0xc1}], 0x1, &(0x7f0000002b80)=[{0x68, 0x117, 0x5, "837be27e807d4be2490d9b3c0006cc9620f1b7ed7fb9f73aaf05a58312f821b13fe742dd1fb7421e94cfc2d1ea198469032ae991345b1bffdcb1c89d92566a6445c0d59cc73b607371eea3fecef8a564db"}, {0xb0, 0x107, 0x4, "d73a87f3f43fb195fee8877fbf42c2835c300458628a1283129647067ca9760007fcafe5eebe0b2abc32cc3a600d47b20a07b7d9977126c95153368e11ebd542a624608735b986442163d2702073c8320b6e0e745c39a194aa3d4e6ec99d4dd55a4cc2071ae8e61d7874c5b021bc59c0a475aeabc0907799ee625c78beffb05eddba8916bf563d2627a382ccc36deafbaa54b22d0f89319f9aed02e12079"}, {0xc0, 0x115, 0x10001, "2d30379c2100dae548f22cb4adf7edd61b5432fd4f9cfb92d1551d56f086c6fe47ae09c8f3c38d2ec7bb50591aa2958ce7aa325f96661be767a43e90a1dab6b6457130740f35de088996b4f9a67dce7e6cf28cd9c145d2f8d467ae4f952eb5b9dcf07d35acfc0afc9720ce64a747f61bd64fe97985909649a580d1fd6477057b2db2ad902d75d06586b55eb0203c3767cc07dc89048327054036936604ff3efaa46981de4d4c39f8d340"}, {0xf0, 0x107, 0xf8, "d332f6978ffcd2c07bb8c78e792265866ad31e009677db04754140ecb53110fa14059b1113cb36111a5b63b4d203b1285a39cd729ecd998435e173c862e0adca62e2089751f59081f65c104f7474dc8ec285485e71d74710ecdd8dc3a5f97133e4249c26301968c00d4e2093ad628c20c318ddd5d1e8179e0a26da2857ffc014aaa1cb96f64ea6327c359330be1e2c20599c6f659bb877f5b3b16f5b21652173586d49da1a30db24fd4cca4f3c9a74fd45d9c56a87a00683ad6eb0179f82db2f0e031d495fb6a68466ae5df5e3b83b577ab0ce0f84fbe6f5ac61962c8f5f58cb"}, {0x90, 0x10e, 0x8, "cb2c025120aba4110838ecf88f383412577d2486c0ebc87f82594e7cdfe10148292f8a11d78a5922a27fe457c2be4438ef226c8319b80cbea2a19736417ca1f9fde41b02cbdf32833a95886550ea749fa746584dbac1032b2512bae80752933c2b13b938715665d1f38a3bbf44cadaedc24936da858c624757"}, {0xa8, 0x11, 0x1ff, "d05cb7a8b357236ac7de935ec16ada4d2f9c2c0e0f3f418cf29e9541fa6b685dcfda2028ee40207e16b3a933990627813eb42eb633919fe1e1a7f74365fc59a05f768fc728c9fa19a0fc4c8b366f8f172ee3c17827cd81f41dbadf9346685dd5be6ea37a583c114e5990547a1e563ee1540ca025d69dacf1d2c7a19e9436d391bd85e4a19c543b706655183b10fffb26875af3"}, {0x68, 0x0, 0x3, "87201ee0b92d26c94f6a532fca7aceb9c5d3b7585c568619855f84746cd46665f2d209cf17bddfded9ff0349592afd800b21420272998739d38209b96b53ecf47f5020fa92c77ab9691d2a0db83f690be7ec2f"}], 0x468}}], 0x4, 0x4880) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r17, &(0x7f0000003200)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000031c0)={&(0x7f0000003140)={0x58, r3, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xaf, 0x16}}}}, [@NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0x8}, @broadcast}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x9100}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004080}, 0x10) getsockname$netrom(r15, &(0x7f0000003240)={{0x3, @netrom}, [@null, @remote, @default, @bcast, @default, @remote, @rose]}, &(0x7f00000032c0)=0x48) sendmsg$L2TP_CMD_TUNNEL_CREATE(r14, &(0x7f0000003400)={&(0x7f0000003300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000033c0)={&(0x7f0000003380)={0x3c, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r13}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x40081) 20.574057868s ago: executing program 3 (id=1400): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f00000000000000", @ANYRES32, @ANYBLOB="00020000000000000000000000e4ffffff0000e2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000140), 0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x7, 'veth0_macvtap\x00', {0x6}, 0x4}) (async) r2 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYRES16=r1, @ANYRESHEX=r0, @ANYBLOB="000000000000000066000000000000001800000000000a3de8d5fae4000000000000000000009500000000000000260300000000000095b8a378b50706a10b1e21420abb954e299600c37e9bae3cc8ea445e89d58ab58f63bd15608b202aeb3730e52d00b9015e518be7297119831cfe16a922ce6cc95acbe6b1d631eef56a645645ac764091fe71f6f0d8c02bd3a7fa31e2a82f71c534dfbb4cbfee8cba90ade67934738a9289c8f033807549ffeed8049df544792689aef033703bc526e4a31476727d047c682b16a53986d439bda73d01caae90031763461936"], &(0x7f0000000000)='GPL\x00'}, 0x94) 20.336408656s ago: executing program 3 (id=1404): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$phonet(0x23, 0x2, 0x1) (async) socket$phonet(0x23, 0x2, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) socket$rds(0x15, 0x5, 0x0) write$tun(r1, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYRES32=r2], 0x50}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x8000}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x90) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@timestamp_addr={0x44, 0x14, 0xa, 0x2, 0x0, [{@remote}, {@loopback}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@timestamp_addr={0x44, 0x14, 0xa, 0x2, 0x0, [{@remote}, {@loopback}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 20.17547895s ago: executing program 3 (id=1410): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) (async) r2 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg(r2, &(0x7f0000000280)={&(0x7f0000000000)=@qipcrtr={0x2a, 0xffffffff, 0x1}, 0x80, 0x0}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8800) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) unshare(0x4000400) socket$tipc(0x1e, 0x5, 0x0) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) (async) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0) (async, rerun: 32) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000000e40)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB="001f233c3cdc6a09a3000000aa9689b2fa9c280ab4341d2da2b427eea11e9fbbf9e945b40b635c967c3cf21386b63021cb4e00b0d07c0170e093768e43c6a6142a2cdb360339157c9cf21b6a52d2b3e527c43e1540efbd6f7f0a69e40938f41dd175791f23f1"], 0x38}}], 0x2, 0x801) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='xdp_exception\x00', r7}, 0x10) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xb, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000000800000000000000000e5ff9a00000036000000850000002a000000958787051636bbbbb80054a01f8d1813e5ff65a5072d4cd8b13d34"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r10, r9}, 0x40) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[], 0x0) (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001740)={{{@in6=@mcast1, @in=@broadcast}}, {{@in6=@mcast2}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) getgid() connect$can_j1939(r1, &(0x7f0000000100)={0x1d, r5, 0x1, {0x1, 0xf0}, 0x1}, 0x18) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x74, r5, {0xb, 0xffeb}, {0xfff1, 0xfff2}, {0x7, 0xd}}}, 0xfffffffffffffd3b}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 5.053174163s ago: executing program 32 (id=1410): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) (async) r2 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg(r2, &(0x7f0000000280)={&(0x7f0000000000)=@qipcrtr={0x2a, 0xffffffff, 0x1}, 0x80, 0x0}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8800) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) unshare(0x4000400) socket$tipc(0x1e, 0x5, 0x0) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) (async) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0) (async, rerun: 32) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000000e40)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB="001f233c3cdc6a09a3000000aa9689b2fa9c280ab4341d2da2b427eea11e9fbbf9e945b40b635c967c3cf21386b63021cb4e00b0d07c0170e093768e43c6a6142a2cdb360339157c9cf21b6a52d2b3e527c43e1540efbd6f7f0a69e40938f41dd175791f23f1"], 0x38}}], 0x2, 0x801) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='xdp_exception\x00', r7}, 0x10) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xb, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000000800000000000000000e5ff9a00000036000000850000002a000000958787051636bbbbb80054a01f8d1813e5ff65a5072d4cd8b13d34"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r10, r9}, 0x40) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[], 0x0) (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001740)={{{@in6=@mcast1, @in=@broadcast}}, {{@in6=@mcast2}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) getgid() connect$can_j1939(r1, &(0x7f0000000100)={0x1d, r5, 0x1, {0x1, 0xf0}, 0x1}, 0x18) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x74, r5, {0xb, 0xffeb}, {0xfff1, 0xfff2}, {0x7, 0xd}}}, 0xfffffffffffffd3b}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 2.34850901s ago: executing program 2 (id=1632): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x28, r1, 0x5, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff4d}]}]}, 0x28}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="b60a000000000000611164000000000018000000000000000000000032c6220b1a0000000095000000000000006b9943653992c33b1e26dc2a75ff4b1fabedcf461768ca42b1a6b794da9a737d5d9460f65d28e1bb21ac191be9a8e00e20b34d6717a640b639310e01abbe53f63685a74d4d3e6e731a30ec55c2519e343f63456f74e2f77094b9858b4527cea64718649b3ff4f3b3be1ec51522fe70da0b692117c0b72e6ae841f559668c2ed215316fa0e2de127f575e"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc42}, 0x58) 2.228394735s ago: executing program 2 (id=1635): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002880), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000fddbdf2515009bb6000008000100000000000c000080010000000100"/50], 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x40080) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[], 0x3c}}, 0x4000090) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a", @ANYBLOB], 0x3c}}, 0x40000) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r10], 0x5c}}, 0x40) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32=r7], 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r11 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r11, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x0, @rand_addr=0xa9fe0000}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='r', 0x1}], 0x1}, 0xe0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r13, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r14 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r14, 0x8914, &(0x7f0000000000)) 1.784074084s ago: executing program 2 (id=1642): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ASSERT(r0, 0x0, 0xcf, &(0x7f0000000000), 0x4) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x1410, 0x800, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x8000}]}, 0x28}}, 0x8010) recvmsg(r0, &(0x7f0000000400)={&(0x7f0000000140)=@tipc, 0x80, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/166, 0xa6}, {&(0x7f0000000280)=""/240, 0xf0}], 0x2, &(0x7f00000003c0)=""/21, 0x15}, 0x20) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000440)={@mcast1, 0x0}, &(0x7f0000000480)=0x14) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000004c0)={r2, @multicast1, @multicast1}, 0xc) r3 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r3, &(0x7f0000000500)={0x1d, 0x0, 0x2, {0x1, 0xf1}, 0xff}, 0x18) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000540)={0x1, 0x401, 0x1}) socket$inet_sctp(0x2, 0x1, 0x84) (async) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000580)={0x0, 0x8, 0x10}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r6, 0x0, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff7db1}]}, 0x24}}, 0x4000040) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r6, 0x0, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff7db1}]}, 0x24}}, 0x4000040) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r5) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000780)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x60, r7, 0x300, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x0, 0xe}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000004}, 0x40080) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r10, 0x400454cd, 0x20) (async) ioctl$TUNSETLINK(r10, 0x400454cd, 0x20) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000900)) (async) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000900)) close(r0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000940)={0x0, 0xcfa}, &(0x7f0000000980)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r10, 0x84, 0x19, &(0x7f00000009c0)={r11, 0xa1}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f0000000a00)={0xa}) (async) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f0000000a00)={0xa}) ioctl$BTRFS_IOC_SEND(r3, 0x40489426, &(0x7f0000000a80)={{r5}, 0x1, &(0x7f0000000a40)=[0xe], 0xfff, 0x2}) (async) ioctl$BTRFS_IOC_SEND(r3, 0x40489426, &(0x7f0000000a80)={{r5}, 0x1, &(0x7f0000000a40)=[0xe], 0xfff, 0x2}) pwrite64(r5, &(0x7f0000000b00)="a887dfba64542513018c7ef898937abc9985556bf2d1ec6f52c85afdf7d1bc90d7452852c247a03239ad81abe014c9cba65c6d20a67f8f9cfbb5364e85536be7e19befc1508ece6a2403b5732ef50b45858320051b800c005d8be534c54e3f455b6061cb4ab8bb2f354c60d2927b4e7c9d1f127860a53412c8fd4210069badaad03bafba33d0cc504eda6b3a76a51c61dd1ec4562912fbca7b79207c09ee6d35b1b9ce1b345961ec", 0xa8, 0x6) setsockopt$inet6_tcp_TLS_TX(r10, 0x11a, 0x1, &(0x7f0000000bc0)=@ccm_128={{0x303}, "e4da5d733748f704", "cf47bf268b60a152db36bccd18ec9a43", "ebb73448", "9c73b0b201e15847"}, 0x28) (async) setsockopt$inet6_tcp_TLS_TX(r10, 0x11a, 0x1, &(0x7f0000000bc0)=@ccm_128={{0x303}, "e4da5d733748f704", "cf47bf268b60a152db36bccd18ec9a43", "ebb73448", "9c73b0b201e15847"}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r12, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) 1.766023561s ago: executing program 0 (id=1644): socketpair(0x200435fbec717a22, 0xa, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x7c, r2, 0x400, 0x70bd2d, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1ff}, {0x6, 0x11, 0xbd33}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0xa}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x81}, 0x24040001) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}}, 0x83, 0x3, 0x8, 0x0, 0x93, 0x6, 0x70}, &(0x7f0000000280)=0x9c) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000002c0)={r3, 0xf}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000340)={r4, 0xb8, 0x3}, 0x8) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r1, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)}, 0x20) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@float={0xa, 0x0, 0x0, 0x10, 0xe}]}, {0x0, [0x5f, 0x61, 0x0, 0x30, 0x97665bbee08356ab]}}, &(0x7f00000007c0)=""/226, 0x2b, 0xe2, 0x0, 0x4, 0x10000}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{0x1, 0xffffffffffffffff}, &(0x7f0000000980), &(0x7f00000009c0)}, 0x20) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a40)={0xffffffffffffffff, 0x7ff, 0x8}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000a80), &(0x7f0000000ac0)}, 0x20) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file0\x00', 0x0, 0x10}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000c40)={{0x1, 0xffffffffffffffff}, &(0x7f0000000bc0), &(0x7f0000000c00)='%pI4 \x00'}, 0x20) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000c80)={0x0, 0x1, 0x18}, 0xc) r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000cc0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5}, 0x50) r15 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x2a, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xf85}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_idx={0x18, 0x8}, @alu={0x7, 0x0, 0x3, 0x3, 0x3, 0xfffffffffffffff0, 0x1}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @generic={0xa, 0xc, 0x8, 0x7}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffff9}, @alu={0x4, 0x0, 0x1, 0xa, 0xa, 0x100, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000640)='GPL\x00', 0x7f, 0xe4, &(0x7f0000000680)=""/228, 0x40f00, 0x4, '\x00', 0x0, 0x25, r7, 0x8, &(0x7f0000000900)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000940)={0x0, 0xb, 0x95, 0x7}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000d40)=[r8, 0xffffffffffffffff, r9, r10, r11, r12, r13, r14], &(0x7f0000000d80)=[{0x5, 0x2, 0x9, 0x7}, {0x3, 0x3, 0x9, 0x7}, {0x3, 0x4, 0x0, 0x9}, {0x1, 0x1, 0x3, 0x2}, {0x0, 0x1, 0xf, 0xc}], 0x10, 0x8}, 0x94) r16 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001f00)={&(0x7f0000000ec0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@typedef={0xe}, @const={0x7, 0x0, 0x0, 0xa, 0x4}]}, {0x0, [0x0, 0x5f, 0x5f, 0x0, 0x5f]}}, &(0x7f0000000f00)=""/4096, 0x37, 0x1000, 0x1, 0xf000}, 0x28) r17 = bpf$PROG_LOAD(0x5, &(0x7f0000002200)={0x5, 0x1f, &(0x7f0000001f40)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x687c}, @call={0x85, 0x0, 0x0, 0x72}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000002040)='GPL\x00', 0x3ff, 0xea, &(0x7f0000002080)=""/234, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x38, r7, 0x8, &(0x7f0000002180)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f00000021c0)=[{0x0, 0x3, 0x7, 0x4}, {0x0, 0x1, 0xf, 0xa}, {0x5, 0x2, 0x2, 0x3}], 0x10, 0xfffffeab}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000023c0)={@fallback=r15, 0x20, 0x0, 0x6, &(0x7f00000022c0)=[0x0], 0x1, 0x0, &(0x7f0000002300)=[0x0, 0x0], &(0x7f0000002340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002380)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002400)={@fallback=r9, r15, 0x33, 0xe, r17, @void, @value=r15, @void, @void, r18}, 0x20) ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0x8000) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000035c0)={&(0x7f0000002440)="04d041abdb4c7c7e3bfb1a704bdbfcc0c9ed616cf7dbe8cd1a66e9a4690b6159f9f1a681ef0012e13b73c4a17e8877ad1afc8ac18f7541168d447bbd3cbf1f2b26ae725f88ca449c1f3742b7c70b39b00175ce12c82e8fa75e31e74e2ee18b62b06deb8c8e1130864997390d6c6aa21de71838d42331a2714557e8a48f24aa8c8b0d3c33a8c72fe004fefd8c62a0449ba1261ecaa833f6b5d5c24b2abe6797af35fe2c11fe83c87389a9cd9e2cc95ee492b37e91d1c3634d640bd7c79963c63e306db1e68e165e329e3d777fa99382ee00edb7dde9a5bf74db13eabfe98e93ac004699a8026660f3b32fd5b6d12913deecb827ac", &(0x7f0000002540)=""/4096, &(0x7f0000003540)="961939ecaeeade902956ae9adb35088a041b38366e6e04b1b42f", &(0x7f0000003580)="5a2e1eeeb37f", 0x2, r8, 0x19a017192f11dd73}, 0x38) setsockopt$MRT_DEL_VIF(r1, 0x0, 0xcb, &(0x7f0000003600)={0x0, 0x4, 0x5, 0xbf, @vifc_lcl_addr=@rand_addr=0x64010101, @broadcast}, 0x10) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000003640)={r4, 0x3}, 0x8) r19 = bpf$MAP_CREATE(0x0, &(0x7f0000003680)=@base={0x10, 0xffffffff, 0x4, 0xe0, 0x48000, r10, 0x69, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x3}, 0x50) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000003780)={'syztnl2\x00', &(0x7f0000003700)={'syztnl2\x00', 0x0, 0x2f, 0x3b, 0x1, 0x81, 0x31, @mcast2, @ipv4={'\x00', '\xff\xff', @empty}, 0x20, 0x7800, 0x9, 0xfffffffd}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000037c0)={0x2, 0x4, 0x8, 0x1, 0x80, r19, 0x0, '\x00', r20, r16, 0x1, 0x1, 0x4}, 0x50) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000003840)={r3, 0xa}, 0x8) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f00000038c0)) 1.678564492s ago: executing program 2 (id=1646): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xe5}]}, 0x2c}}, 0x20040084) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0x2, 0x5, 0x9, 0x7, 0xc, 0x2, 0x4, 0x2, 0xf, 0x6, 0x0, 0x3, 0x2, 0x6, 0x1, 0x4], 0x3, [0x8b, 0x101, 0x0, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x3, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x8, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f0000000040)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000600), 0x56) recvfrom(r0, &(0x7f0000000300)=""/86, 0x56, 0x2040, &(0x7f0000000440)=@pppol2tpin6={0x18, 0x1, {0x0, r10, 0x2, 0x3, 0x1, 0x2, {0xa, 0x4e22, 0xa4, @local, 0x4}}}, 0x80) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r11, 0x2f}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}, {&(0x7f0000000c00)="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", 0x252}], 0x2}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8c000000060a090400000000000000000200000060000480300001800e000100696d6d6564696174650000001c000280100002800c000280080001800000000108000140000000002c0001800b0001006e756d67656e00001c0002800800034000000001080001400000000408000240000000940900010073797a30000000000900020073797a32"], 0xb4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069002a000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 1.633283559s ago: executing program 0 (id=1647): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r1, &(0x7f0000000080)={0x11, 0x4, r2, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x14) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000000), &(0x7f0000000040)=0x8) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xd}, {0xfff1, 0xfff2}, {0xffe0}}}, 0x24}}, 0x40000) 1.224322928s ago: executing program 0 (id=1650): socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb6bba8839", 0x5}], 0x1}, 0x0) (async) recvmsg(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000340)=""/76, 0x4c}], 0x1}, 0x40fd) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r1}) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @default, @netrom={'nr', 0x0}, 0x7, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000019c0)=@bloom_filter={0x21, 0x0, 0x7}, 0xa6) (async) pipe(&(0x7f0000000000)) 1.136528895s ago: executing program 0 (id=1651): r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x31}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x401, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 1.108910994s ago: executing program 1 (id=1652): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r3, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x18, r5, 0x1, 0x70bd2b, 0x25dfdbfb, {0x23}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x4, 0x1, 0x0, 0x0}]}, 0x18}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000ac0)=@mangle={'mangle\x00', 0x2, 0x6, 0x598, 0x2e0, 0x120, 0x120, 0x3d0, 0x120, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x6, 0x0, {[{{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0xb}, [0x0, 0x0, 0xff], [], 'pimreg0\x00', 'virt_wifi0\x00', {}, {0xff}, 0x21}, 0x0, 0xf8, 0x120, 0x0, {0x7a00000010000000}, [@common=@unspec=@cpu={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}, {0xe}}]}, @HL={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x36}, [0x0, 0xffffffff, 0x0, 0xff], [0x0, 0x0, 0xffffff00, 0xffffffff], 'veth1_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast1, 0x36, 0xe, 0x5}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], '\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3d0}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@local, @ipv4=@multicast2}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f8) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002b40)=@delchain={0x3c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r9, {}, {0xfff2, 0xffff}, {0x3, 0xfff2}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xfff3, 0xfff2}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001800010000000000fddbdf251d01040008000a00", @ANYRES32=r11, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r11], 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000feffff3f000000000000000085100000060000008510000004000000660800000000000018000000000000000000009203000000950000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 1.012510649s ago: executing program 2 (id=1654): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x18, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}, 0x18}], 0x1}, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) listen(r1, 0x2) accept4(r1, 0x0, 0x0, 0x80800) poll(0x0, 0x0, 0xffffffffffbffff8) 987.848109ms ago: executing program 0 (id=1655): r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x24, r3, 0x1, 0xfffffffe, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0xfd}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000001a40)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x98, 0x8, 0xfa04, 0x1b0, 0x6c02, 0x1b0, 0x194, 0x194, 0x1b0, 0x194, 0x3, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x32}, 0x0, 0x0, 'veth0_to_hsr\x00', 'dvmrp1\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'vlan0\x00', {}, {}, 0x0, 0x1, 0x44}, 0x0, 0xb0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x4, 0x5, 0x3, 0x1, 0x2, 0x4], 0x4}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1b, 0x5, 0x1, 0x9, 'syz0\x00', 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) r4 = socket$netlink(0x10, 0x3, 0x4) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r6 = socket$igmp(0x2, 0x3, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="78000000000101040000000000000000020000002400018014000180080001007f00000108000200e00000020c000280050001000000000024000280ff000180080001000000000008000200ac1414bb0c000280050001000000000008000740000026bee4470deba89b0140000000000800024000000aa30000"], 0x78}}, 0x0) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0xfc, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001d40), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000400)={0x34, r9, 0x1, 0x10000001, 0x0, {}, [@TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x800}]}]}, 0x34}}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r10}, &(0x7f00000002c0), &(0x7f0000000300)=r10}, 0x20) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r11, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r11, &(0x7f0000000100)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10, &(0x7f00000003c0)=[{&(0x7f00000000c0)="fa", 0x1}], 0x1}}], 0x1, 0x20040804) setsockopt$sock_int(r11, 0x1, 0x12, &(0x7f0000000140)=0xffff0000, 0x4) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc000000850000000800000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r10}, &(0x7f0000000640), &(0x7f0000000680)=r12}, 0x20) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r4, 0x118, 0x1, &(0x7f0000000200)=0x3d, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x50}}, 0x0) 775.789143ms ago: executing program 4 (id=1656): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000140)='vegas', 0x5) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xfe3b) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@delchain={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0xfffffffffffffd4b, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xe}]}}}]}]}], {0x14}}, 0x78}}, 0x0) 720.537653ms ago: executing program 1 (id=1657): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}, [@FRA_DST={0x8, 0x1, @empty}]}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0xfffffffd, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x2, 0x7cf42ea025731f0b}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x1, 0x1d161108a18bb434, 0x4}}}}]}, 0x40}}, 0x0) 638.45637ms ago: executing program 1 (id=1658): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x58, 0x0, 0x9, 0x3, 0x0, 0x0, {0x7}, [@NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 629.995704ms ago: executing program 4 (id=1659): pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) ioctl$int_in(r1, 0x5421, &(0x7f0000000240)=0x1) (async) splice(r1, 0x0, r0, 0x0, 0xfea8, 0xa) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043b000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 492.562334ms ago: executing program 4 (id=1660): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000580)=@l2tp6={0xa, 0x0, 0xfffffffd, @mcast1, 0x4, 0x1}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000500)="dd9c1a", 0x3}], 0x1, &(0x7f0000001900)=ANY=[@ANYBLOB="189fb8f6689279c2fad333d83cadc400", @ANYRES32=r0, @ANYRES32=r0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="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"], 0x18}, 0x4008000) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x9, @remote}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000680)='9N', 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x0) 480.364885ms ago: executing program 1 (id=1661): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xd}, {0xfff1, 0xfff2}, {0xffe0}}}, 0x24}}, 0x40000) 429.557136ms ago: executing program 4 (id=1662): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="280000005f00013caf23b8000000000008"], 0x28}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4524a9fada3275b8032df1edc7fb1404ce009ca8e9c5948d70984130a387f49a24fae41c6b08401fe225c13f5f5bb1f1efb6fd5d602cbe209767e833fe30f2b041144970d7bcc291418dc9e62a4560a5feef1e32cdee432084b738717302fe90f65d7bda4746bc9949a06be93be474097a578469091d4c45c69928ce70f671f9fa295bbec70030829ac4b7482fbfe124572c6eb6a6", @ANYRES16=r2, @ANYBLOB="0100000000000000000002000000"], 0x14}}, 0x0) 252.606597ms ago: executing program 4 (id=1663): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="b408000000deff0073113a0000000000851000000200000018270000", @ANYRES32=r0, @ANYBLOB="00000000001000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x51bd8, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @value=r1}, 0x50) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) 209.551564ms ago: executing program 1 (id=1664): syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x2a, 0x65, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0x0, [0xff, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x7}}}, {}, {0x8, 0x6558, 0xfffffffd}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) r2 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x5, 0xfff3}, {0x0, 0xffe0}, {0xe, 0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xb, 0xffe0}}, @TCA_FW_INDEV={0x14, 0x3, 'veth0_to_batadv\x00'}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002080)={0x44, r1, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0x44}}, 0x0) 187.719459ms ago: executing program 4 (id=1665): bpf$MAP_CREATE(0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRESDEC=0x0, @ANYBLOB='\x00'/20, @ANYRESOCT=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4040850}, 0x40) r0 = socket(0x2c, 0x3, 0xe7) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, r0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, 0x0, 0x3d) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000001a40), 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0xa, 0x80000, 0x7) r1 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r1, 0x84, 0x85, &(0x7f0000000000)=""/4102, 0x0) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00', 0x0}) r4 = gettid() r5 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304f9fffffffedbdf2500007400", @ANYRES32=r3, @ANYBLOB="049c01000750050008001300", @ANYRES32=r4, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000001cc0), &(0x7f0000001d00)=0x8) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$packet(0x11, 0x2, 0x300) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001040)={0x6, 0x3, &(0x7f0000001040)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 40.580949ms ago: executing program 2 (id=1666): syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="b896a15f48052eec7bc7fe285f228824877bd9d7deef9ae32aa7eaa025f93fb406", 0x21}], 0x1}}], 0x1, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES64=r0, @ANYBLOB="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", @ANYRES16=r1, @ANYRES32=r1, @ANYRES64=r0], 0x54}}, 0x1) 872.563µs ago: executing program 0 (id=1667): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) (async, rerun: 32) sendmmsg$inet6(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xc400}], 0x7}}], 0x44, 0x0) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) socket$kcm(0x29, 0x1, 0x0) (async, rerun: 32) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x2, @local, 0x9}, 0x1c) (async) ioctl$sock_SIOCOUTQNSD(r5, 0x894b, 0x0) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd70000000000010000000180001801400020076657468315f746f5f626f6e6400000005000e"], 0x34}, 0x1, 0x0, 0x0, 0x20044804}, 0x40440d0) 0s ago: executing program 1 (id=1668): r0 = socket(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000003c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x7, &(0x7f00000000c0)="fdffffff", 0x4) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@typed={0xc, 0x6, 0x0, 0x0, @u64}]}, 0x20}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.132' (ED25519) to the list of known hosts. [ 83.086261][ T5817] cgroup: Unknown subsys name 'net' [ 83.282003][ T5817] cgroup: Unknown subsys name 'cpuset' [ 83.291183][ T5817] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.972512][ T5817] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.649887][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.667177][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.675469][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.686323][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.695058][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.750619][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.768487][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.777285][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.788601][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.800954][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.860124][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.869890][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.877599][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.886156][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.893989][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.935492][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.944369][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.952858][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.968565][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.975803][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.985932][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.994134][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.009756][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.018748][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.042379][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.625844][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 88.659014][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 88.696488][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 88.971112][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 89.029704][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.036871][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.044767][ T5832] bridge_slave_0: entered allmulticast mode [ 89.053834][ T5832] bridge_slave_0: entered promiscuous mode [ 89.068562][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.075719][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.083202][ T5828] bridge_slave_0: entered allmulticast mode [ 89.090297][ T5828] bridge_slave_0: entered promiscuous mode [ 89.103476][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.110783][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.118163][ T5828] bridge_slave_1: entered allmulticast mode [ 89.125354][ T5828] bridge_slave_1: entered promiscuous mode [ 89.143623][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.151887][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.159260][ T5832] bridge_slave_1: entered allmulticast mode [ 89.166413][ T5832] bridge_slave_1: entered promiscuous mode [ 89.182725][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 89.217228][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.224433][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.231753][ T5837] bridge_slave_0: entered allmulticast mode [ 89.239447][ T5837] bridge_slave_0: entered promiscuous mode [ 89.284841][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.292246][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.299697][ T5837] bridge_slave_1: entered allmulticast mode [ 89.306889][ T5837] bridge_slave_1: entered promiscuous mode [ 89.347014][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.372657][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.403299][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.428095][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.470431][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.524957][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.553536][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.561261][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.568549][ T5839] bridge_slave_0: entered allmulticast mode [ 89.576072][ T5839] bridge_slave_0: entered promiscuous mode [ 89.584951][ T5828] team0: Port device team_slave_0 added [ 89.604856][ T5832] team0: Port device team_slave_0 added [ 89.623354][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.630821][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.639045][ T5839] bridge_slave_1: entered allmulticast mode [ 89.646285][ T5839] bridge_slave_1: entered promiscuous mode [ 89.655035][ T5828] team0: Port device team_slave_1 added [ 89.676730][ T5832] team0: Port device team_slave_1 added [ 89.721264][ T5837] team0: Port device team_slave_0 added [ 89.751876][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.759380][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.766521][ T5842] bridge_slave_0: entered allmulticast mode [ 89.774261][ T5842] bridge_slave_0: entered promiscuous mode [ 89.796266][ T5837] team0: Port device team_slave_1 added [ 89.818796][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.825855][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.852578][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.876935][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.885077][ T5835] Bluetooth: hci0: command tx timeout [ 89.888073][ T5835] Bluetooth: hci1: command tx timeout [ 89.891141][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.904029][ T5842] bridge_slave_1: entered allmulticast mode [ 89.911568][ T5842] bridge_slave_1: entered promiscuous mode [ 89.935589][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.957538][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.958212][ T5835] Bluetooth: hci2: command tx timeout [ 89.964909][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.996673][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.008535][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.015495][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.041651][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.069375][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.079686][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.086648][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.112736][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.123854][ T5835] Bluetooth: hci3: command tx timeout [ 90.128260][ T5835] Bluetooth: hci4: command tx timeout [ 90.131862][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.141923][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.168046][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.186932][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.194172][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.220922][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.244092][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.299190][ T5839] team0: Port device team_slave_0 added [ 90.308742][ T5839] team0: Port device team_slave_1 added [ 90.316982][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.441891][ T5828] hsr_slave_0: entered promiscuous mode [ 90.450056][ T5828] hsr_slave_1: entered promiscuous mode [ 90.461506][ T5837] hsr_slave_0: entered promiscuous mode [ 90.468560][ T5837] hsr_slave_1: entered promiscuous mode [ 90.474709][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 90.480801][ T5837] Cannot create hsr debugfs directory [ 90.498766][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.505750][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.532181][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.545760][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.553624][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.579571][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.592452][ T5842] team0: Port device team_slave_0 added [ 90.612128][ T5832] hsr_slave_0: entered promiscuous mode [ 90.619018][ T5832] hsr_slave_1: entered promiscuous mode [ 90.625182][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 90.631163][ T5832] Cannot create hsr debugfs directory [ 90.643270][ T5842] team0: Port device team_slave_1 added [ 90.724062][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.731246][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.757820][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.810297][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.817548][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.847818][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.959379][ T5839] hsr_slave_0: entered promiscuous mode [ 90.965728][ T5839] hsr_slave_1: entered promiscuous mode [ 90.972689][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 90.979458][ T5839] Cannot create hsr debugfs directory [ 91.107659][ T5842] hsr_slave_0: entered promiscuous mode [ 91.114882][ T5842] hsr_slave_1: entered promiscuous mode [ 91.121334][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 91.127186][ T5842] Cannot create hsr debugfs directory [ 91.529800][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.542765][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.568325][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.590076][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.637376][ T5837] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.652393][ T5837] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.664513][ T5837] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.684681][ T5837] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.792830][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.810680][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.846092][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.860450][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.959070][ T5829] Bluetooth: hci0: command tx timeout [ 91.964676][ T5835] Bluetooth: hci1: command tx timeout [ 91.964797][ T938] cfg80211: failed to load regulatory.db [ 91.986827][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.997744][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.010367][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.021701][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.038543][ T5835] Bluetooth: hci2: command tx timeout [ 92.099873][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.149878][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.199201][ T5829] Bluetooth: hci3: command tx timeout [ 92.205109][ T5835] Bluetooth: hci4: command tx timeout [ 92.212170][ T5842] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.223121][ T5842] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.247386][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.256845][ T5842] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.280620][ T5842] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.293479][ T3515] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.300879][ T3515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.329846][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.351063][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.358354][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.390109][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.397242][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.406789][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.413956][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.436045][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.446375][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.525503][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.557603][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.585459][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.592618][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.630029][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.637315][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.655795][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.663207][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.701725][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.708967][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.896241][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.917713][ T5839] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.055367][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.076980][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.124989][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.132382][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.210281][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.217494][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.277374][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.503689][ T5828] veth0_vlan: entered promiscuous mode [ 93.576038][ T5828] veth1_vlan: entered promiscuous mode [ 93.650253][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.661767][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.821199][ T5828] veth0_macvtap: entered promiscuous mode [ 93.840401][ T5832] veth0_vlan: entered promiscuous mode [ 93.853184][ T5828] veth1_macvtap: entered promiscuous mode [ 93.869505][ T5839] veth0_vlan: entered promiscuous mode [ 93.887421][ T5839] veth1_vlan: entered promiscuous mode [ 93.914723][ T5832] veth1_vlan: entered promiscuous mode [ 93.939712][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.964496][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.982513][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.990133][ T5837] veth0_vlan: entered promiscuous mode [ 94.018461][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.029688][ T3515] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.039193][ T5835] Bluetooth: hci1: command tx timeout [ 94.039240][ T5829] Bluetooth: hci0: command tx timeout [ 94.048814][ T3515] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.069637][ T3515] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.082773][ T5837] veth1_vlan: entered promiscuous mode [ 94.128763][ T5829] Bluetooth: hci2: command tx timeout [ 94.143517][ T5839] veth0_macvtap: entered promiscuous mode [ 94.153230][ T5832] veth0_macvtap: entered promiscuous mode [ 94.165455][ T5832] veth1_macvtap: entered promiscuous mode [ 94.179591][ T5842] veth0_vlan: entered promiscuous mode [ 94.206800][ T5839] veth1_macvtap: entered promiscuous mode [ 94.245623][ T5842] veth1_vlan: entered promiscuous mode [ 94.279222][ T5829] Bluetooth: hci4: command tx timeout [ 94.279269][ T5835] Bluetooth: hci3: command tx timeout [ 94.313609][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.317411][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.328000][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.354925][ T5837] veth0_macvtap: entered promiscuous mode [ 94.375469][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.385251][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.404951][ T5837] veth1_macvtap: entered promiscuous mode [ 94.425870][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.431297][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.441614][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.452371][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.461259][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.496638][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.506122][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.534410][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.545486][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.561175][ T5842] veth0_macvtap: entered promiscuous mode [ 94.572055][ T5842] veth1_macvtap: entered promiscuous mode [ 94.592484][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.601160][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.603066][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.627155][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.700391][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.757270][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.784866][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.801168][ T5946] Zero length message leads to an empty skb [ 94.803659][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.834054][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.894713][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.915829][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.956711][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.975051][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.012632][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.044179][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.064750][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.082689][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.134530][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.143948][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.161032][ T5955] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7'. [ 95.203580][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.211838][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.284396][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.313001][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.355697][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.399483][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.473263][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.497704][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.561438][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.570208][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.639287][ T5960] syzkaller0: entered promiscuous mode [ 95.647990][ T5960] syzkaller0: entered allmulticast mode [ 95.766576][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.775310][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.119893][ T5835] Bluetooth: hci1: command tx timeout [ 96.125200][ T5829] Bluetooth: hci0: command tx timeout [ 96.136643][ T5976] netlink: 'syz.4.5': attribute type 10 has an invalid length. [ 96.150015][ T5975] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.199544][ T5829] Bluetooth: hci2: command tx timeout [ 96.340259][ T5975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11'. [ 96.359931][ T5829] Bluetooth: hci3: command tx timeout [ 96.365676][ T5829] Bluetooth: hci4: command tx timeout [ 96.409715][ T5986] netlink: 'syz.2.12': attribute type 7 has an invalid length. [ 96.468185][ T5986] netlink: 140 bytes leftover after parsing attributes in process `syz.2.12'. [ 96.521097][ T5988] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13'. [ 96.613949][ T5990] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.873809][ T6002] netlink: 'syz.3.15': attribute type 10 has an invalid length. [ 97.086889][ T6010] netlink: 40 bytes leftover after parsing attributes in process `syz.4.19'. [ 97.189045][ T6010] netlink: 64 bytes leftover after parsing attributes in process `syz.4.19'. [ 97.321051][ T6017] tipc: Started in network mode [ 97.326990][ T6017] tipc: Node identity 8e804fe6dd3b, cluster identity 4711 [ 97.360348][ T6019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22'. [ 97.369694][ T6017] tipc: Enabled bearer , priority 0 [ 97.386221][ T6019] netlink: 2 bytes leftover after parsing attributes in process `syz.0.22'. [ 97.503319][ T6030] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.25'. [ 97.518764][ T6017] syzkaller0: entered promiscuous mode [ 97.518805][ T6030] netlink: 116 bytes leftover after parsing attributes in process `syz.4.25'. [ 97.524441][ T6017] syzkaller0: entered allmulticast mode [ 97.541024][ T6017] tipc: Resetting bearer [ 97.677791][ T6016] tipc: Resetting bearer [ 97.746321][ T6034] ipt_ECN: cannot use operation on non-tcp rule [ 99.215146][ T6016] tipc: Disabling bearer [ 99.231367][ T10] tipc: Node number set to 1404784614 [ 99.499569][ T6078] netlink: 'syz.3.39': attribute type 1 has an invalid length. [ 99.933378][ T6098] netlink: 'syz.2.43': attribute type 1 has an invalid length. [ 100.073272][ T6104] netlink: 'syz.0.44': attribute type 4 has an invalid length. [ 100.124877][ T6104] netlink: 'syz.0.44': attribute type 4 has an invalid length. [ 100.560840][ T6123] tipc: Started in network mode [ 100.576132][ T6123] tipc: Node identity ac14140f, cluster identity 4711 [ 100.600761][ T6123] tipc: New replicast peer: 255.255.255.255 [ 100.632703][ T6123] tipc: Enabled bearer , priority 10 [ 100.681948][ T6127] netlink: 'syz.0.52': attribute type 1 has an invalid length. [ 100.701817][ T6127] tipc: Started in network mode [ 100.706761][ T6127] tipc: Node identity ba0e3d115dc2, cluster identity 4711 [ 100.714511][ T6127] tipc: Enabled bearer , priority 0 [ 100.729668][ T6127] syzkaller0: entered promiscuous mode [ 100.735195][ T6127] syzkaller0: entered allmulticast mode [ 100.778767][ T6127] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.808957][ T6127] tipc: Resetting bearer [ 100.830344][ T6133] __nla_validate_parse: 2 callbacks suppressed [ 100.830363][ T6133] netlink: 4 bytes leftover after parsing attributes in process `syz.3.54'. [ 100.863052][ T6122] tipc: Resetting bearer [ 100.928964][ T6122] tipc: Disabling bearer [ 100.937423][ T6145] netlink: 12 bytes leftover after parsing attributes in process `syz.3.54'. [ 101.255957][ T6158] syz.4.59 uses obsolete (PF_INET,SOCK_PACKET) [ 101.282703][ T5827] IPVS: starting estimator thread 0... [ 101.418302][ T6167] IPVS: using max 25 ests per chain, 60000 per kthread [ 101.753190][ T1226] tipc: Node number set to 2886997007 [ 101.807681][ T6188] netlink: 4 bytes leftover after parsing attributes in process `syz.4.66'. [ 101.934166][ T6194] geneve2: entered promiscuous mode [ 102.086936][ T6202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.70'. [ 102.184725][ T6202] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.195326][ T50] tipc: Subscription rejected, illegal request [ 102.272269][ T6202] bridge_slave_1 (unregistering): left allmulticast mode [ 102.316450][ T6202] bridge_slave_1 (unregistering): left promiscuous mode [ 102.349918][ T6202] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.673355][ T6225] warning: `syz.1.77' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 103.202516][ T6251] netlink: 36 bytes leftover after parsing attributes in process `syz.0.86'. [ 103.250787][ T6251] dvmrp0: entered allmulticast mode [ 103.284489][ T6251] tipc: Enabled bearer , priority 0 [ 103.354325][ T6255] xt_cgroup: xt_cgroup: no path or classid specified [ 103.496037][ T6251] syzkaller0: entered promiscuous mode [ 103.537146][ T6251] syzkaller0: entered allmulticast mode [ 103.550214][ T6271] netlink: 24 bytes leftover after parsing attributes in process `syz.3.89'. [ 103.552388][ T6251] tipc: Resetting bearer [ 103.593042][ T6250] tipc: Resetting bearer [ 103.888991][ T5829] Bluetooth: hci4: command 0x0405 tx timeout [ 104.725438][ T6250] tipc: Disabling bearer [ 104.736272][ T6259] netlink: 284 bytes leftover after parsing attributes in process `syz.2.88'. [ 104.787320][ T6283] netlink: 40 bytes leftover after parsing attributes in process `syz.1.92'. [ 104.878067][ T24] tipc: Node number set to 3888921873 [ 105.171281][ T6294] netlink: 28 bytes leftover after parsing attributes in process `syz.3.96'. [ 105.482405][ T6309] Driver unsupported XDP return value 0 on prog (id 20) dev N/A, expect packet loss! [ 105.499916][ T6309] netlink: 36 bytes leftover after parsing attributes in process `syz.1.100'. [ 105.623168][ T6312] IPVS: fo: FWM 3 0x00000003 - no destination available [ 105.626300][ T6318] ipt_ECN: cannot use operation on non-tcp rule [ 105.720775][ T6318] netlink: 'syz.3.104': attribute type 83 has an invalid length. [ 105.760086][ T6318] netlink: 'syz.3.104': attribute type 29 has an invalid length. [ 105.788263][ T6318] netlink: 'syz.3.104': attribute type 29 has an invalid length. [ 105.879803][ T6332] netlink: 'syz.0.107': attribute type 2 has an invalid length. [ 105.915679][ T6332] netlink: 'syz.0.107': attribute type 11 has an invalid length. [ 105.945304][ T6332] netlink: 132 bytes leftover after parsing attributes in process `syz.0.107'. [ 106.061898][ T6339] tipc: Enabled bearer , priority 0 [ 106.091607][ T6337] syzkaller0: entered promiscuous mode [ 106.110308][ T6337] syzkaller0: entered allmulticast mode [ 106.134488][ T6347] bond0: Error: Cannot enslave bond to itself. [ 106.172361][ T6337] tipc: Resetting bearer [ 106.222260][ T6337] tipc: Disabling bearer [ 106.342755][ T6347] syzkaller0: entered promiscuous mode [ 106.359088][ T6347] syzkaller0: entered allmulticast mode [ 106.387389][ T6352] netlink: 'syz.4.114': attribute type 21 has an invalid length. [ 106.529528][ T5201] udevd[5201]: worker [5979] terminated by signal 33 (Unknown signal 33) [ 106.687788][ T6370] xt_ecn: cannot match TCP bits for non-tcp packets [ 107.603048][ T6364] syz_tun: entered allmulticast mode [ 107.616855][ T6367] dvmrp6: entered allmulticast mode [ 107.625083][ T6375] netlink: 'syz.0.118': attribute type 12 has an invalid length. [ 107.640038][ T6364] syz_tun: left allmulticast mode [ 107.869125][ T6392] syz_tun: entered allmulticast mode [ 108.002692][ T6398] bridge_slave_0: invalid flags given to default FDB implementation [ 108.029368][ T6403] netlink: 16 bytes leftover after parsing attributes in process `syz.2.128'. [ 108.039813][ T6391] syz_tun: left allmulticast mode [ 108.039940][ T6403] netlink: 32 bytes leftover after parsing attributes in process `syz.2.128'. [ 108.046081][ T6399] netlink: 96 bytes leftover after parsing attributes in process `syz.4.125'. [ 108.075809][ T6399] netlink: 8 bytes leftover after parsing attributes in process `syz.4.125'. [ 108.186447][ T6408] netlink: 'syz.3.130': attribute type 1 has an invalid length. [ 108.314933][ T6417] netlink: 'syz.4.134': attribute type 21 has an invalid length. [ 108.351066][ T6417] bond1: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 108.370082][ T6417] bond1 (unregistering): Released all slaves [ 108.378433][ T6422] netlink: 4 bytes leftover after parsing attributes in process `syz.4.134'. [ 108.403465][ T6414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.133'. [ 108.414526][ T6414] netlink: 12 bytes leftover after parsing attributes in process `syz.3.133'. [ 108.417289][ T6421] pim6reg1: entered promiscuous mode [ 108.429983][ T6421] pim6reg1: entered allmulticast mode [ 108.651886][ T6429] netlink: 12 bytes leftover after parsing attributes in process `syz.4.136'. [ 108.673012][ T6429] netlink: 12 bytes leftover after parsing attributes in process `syz.4.136'. [ 108.952610][ T6440] ip6erspan0: entered promiscuous mode [ 108.969390][ T6440] ip6erspan0: entered allmulticast mode [ 109.201305][ T6450] erspan0: entered promiscuous mode [ 109.259276][ T6450] vlan2: entered promiscuous mode [ 109.545409][ T6479] xfrm1: entered promiscuous mode [ 109.570285][ T6483] ip6t_srh: unknown srh invflags 4000 [ 109.577430][ T6479] xfrm1: entered allmulticast mode [ 109.595525][ T6481] Bluetooth: MGMT ver 1.23 [ 109.726881][ T6489] syzkaller0: entered promiscuous mode [ 109.743134][ T6489] syzkaller0: entered allmulticast mode [ 110.249692][ T6525] openvswitch: netlink: Message has -2 unknown bytes. [ 110.439647][ T6535] syzkaller1: entered promiscuous mode [ 110.445185][ T6535] syzkaller1: entered allmulticast mode [ 110.526789][ T6547] netlink: 'syz.0.174': attribute type 1 has an invalid length. [ 110.884841][ T6569] syzkaller0: entered promiscuous mode [ 110.898307][ T6569] syzkaller0: entered allmulticast mode [ 110.945265][ T6574] openvswitch: netlink: Flow key attr not present in new flow. [ 111.118227][ T6581] netlink: 'syz.1.183': attribute type 1 has an invalid length. [ 111.267301][ T6589] __nla_validate_parse: 7 callbacks suppressed [ 111.267322][ T6589] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.186'. [ 111.308780][ T6596] netlink: 12 bytes leftover after parsing attributes in process `syz.4.189'. [ 111.392103][ T6596] netlink: 4 bytes leftover after parsing attributes in process `syz.4.189'. [ 111.396612][ T6602] tipc: Enabling of bearer rejected, failed to enable media [ 111.416811][ T6602] tipc: Started in network mode [ 111.422041][ T6602] tipc: Node identity ac14140f, cluster identity 4711 [ 111.432455][ T6602] tipc: New replicast peer: 255.255.255.255 [ 111.441624][ T6602] tipc: Enabled bearer , priority 10 [ 111.448847][ T6602] netlink: 12 bytes leftover after parsing attributes in process `syz.2.190'. [ 111.492091][ T6600] macsec1: entered promiscuous mode [ 111.519128][ T6600] macsec1: entered allmulticast mode [ 111.538251][ T6600] bond1: (slave macsec1): Error -34 calling dev_set_mtu [ 111.641796][ T5835] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 111.649997][ T5829] Bluetooth: hci0: command 0x0c1a tx timeout [ 111.755746][ T6611] tipc: Started in network mode [ 111.760888][ T6611] tipc: Node identity c6a89d5b03a, cluster identity 4711 [ 111.768366][ T6611] tipc: Enabled bearer , priority 0 [ 111.777126][ T6611] syzkaller0: entered promiscuous mode [ 111.786555][ T6611] syzkaller0: entered allmulticast mode [ 111.815713][ T6610] tipc: Resetting bearer [ 111.868658][ T6610] tipc: Disabling bearer [ 111.891915][ T6618] netlink: 4 bytes leftover after parsing attributes in process `syz.4.195'. [ 111.909124][ T6616] netlink: 156 bytes leftover after parsing attributes in process `syz.2.192'. [ 112.156934][ T6625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.197'. [ 112.247020][ T6628] netlink: 52 bytes leftover after parsing attributes in process `syz.4.198'. [ 112.382406][ T6634] netlink: 'syz.3.201': attribute type 10 has an invalid length. [ 112.394523][ T6634] netlink: 40 bytes leftover after parsing attributes in process `syz.3.201'. [ 112.424032][ T6634] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 112.448930][ T6634] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 112.486226][ T6634] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 112.528263][ T24] tipc: Node number set to 2886997007 [ 112.638311][ T6646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.204'. [ 112.819775][ T6654] bond1 (unregistering): Released all slaves [ 113.154179][ T6678] tipc: Enabling of bearer rejected, failed to enable media [ 113.365857][ T6692] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 114.333843][ T6742] openvswitch: netlink: Message has 8 unknown bytes. [ 114.341933][ T6742] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 114.350743][ T6751] netlink: 'syz.4.236': attribute type 1 has an invalid length. [ 114.435312][ T6756] tipc: Enabling of bearer rejected, failed to enable media [ 114.479878][ T6757] netlink: 'syz.2.237': attribute type 3 has an invalid length. [ 114.546578][ T6761] sctp: [Deprecated]: syz.1.238 (pid 6761) Use of int in maxseg socket option. [ 114.546578][ T6761] Use struct sctp_assoc_value instead [ 114.873054][ T6781] tipc: Enabled bearer , priority 0 [ 114.881902][ T6779] sctp: [Deprecated]: syz.2.246 (pid 6779) Use of int in max_burst socket option. [ 114.881902][ T6779] Use struct sctp_assoc_value instead [ 114.897648][ T6781] syzkaller0: entered promiscuous mode [ 114.903371][ T6781] syzkaller0: entered allmulticast mode [ 115.291057][ T6780] tipc: Resetting bearer [ 115.373458][ T6780] tipc: Disabling bearer [ 115.431142][ T6818] syzkaller1: entered promiscuous mode [ 115.451998][ T6818] syzkaller1: entered allmulticast mode [ 115.513607][ T6823] syzkaller1: entered promiscuous mode [ 115.524189][ T6823] syzkaller1: entered allmulticast mode [ 115.920493][ T6849] ieee802154 phy0 wpan0: encryption failed: -22 [ 115.929966][ T6853] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 116.317756][ T6871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.387514][ T6878] __nla_validate_parse: 43 callbacks suppressed [ 116.387534][ T6878] netlink: 20 bytes leftover after parsing attributes in process `syz.0.272'. [ 116.531319][ T6843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.261'. [ 116.544603][ T6882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.273'. [ 116.586288][ T6884] veth3: entered allmulticast mode [ 116.769963][ T6894] netlink: 'syz.0.277': attribute type 19 has an invalid length. [ 116.777857][ T6894] netlink: 4 bytes leftover after parsing attributes in process `syz.0.277'. [ 116.803199][ T50] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.803228][ T6894] netlink: 'syz.0.277': attribute type 19 has an invalid length. [ 116.803249][ T6894] netlink: 4 bytes leftover after parsing attributes in process `syz.0.277'. [ 116.818277][ T6896] netlink: 4 bytes leftover after parsing attributes in process `syz.3.279'. [ 116.825482][ T50] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.851629][ T3515] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.893197][ T3515] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.040064][ T6904] netlink: 48 bytes leftover after parsing attributes in process `syz.2.282'. [ 117.169722][ T6917] syz.0.281 uses old SIOCAX25GETINFO [ 117.828259][ T6954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.292'. [ 117.852560][ T6954] netlink: 24 bytes leftover after parsing attributes in process `syz.4.292'. [ 117.921633][ T1226] hid-generic 0005:0C45:1012.0001: unknown main item tag 0x1 [ 117.945683][ T1226] hid-generic 0005:0C45:1012.0001: ignoring exceeding usage max [ 117.974979][ T1226] hid-generic 0005:0C45:1012.0001: unknown main item tag 0x4 [ 117.992979][ T1226] hid-generic 0005:0C45:1012.0001: unknown main item tag 0x5 [ 118.014836][ T1226] hid-generic 0005:0C45:1012.0001: reserved main item tag 0xd [ 118.082645][ T1226] hid-generic 0005:0C45:1012.0001: unexpected long global item [ 118.096659][ T1226] hid-generic 0005:0C45:1012.0001: probe with driver hid-generic failed with error -22 [ 118.367753][ T6976] tipc: Enabled bearer , priority 0 [ 118.433181][ T6976] syzkaller0: entered promiscuous mode [ 118.452201][ T6976] syzkaller0: entered allmulticast mode [ 118.509371][ T6976] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 118.542476][ T6975] tipc: Resetting bearer [ 118.573231][ T6975] tipc: Disabling bearer [ 118.600922][ T6992] netlink: 'syz.1.301': attribute type 10 has an invalid length. [ 118.625276][ T6992] team0: Port device dummy0 added [ 118.652125][ T6995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.302'. [ 118.688293][ T6995] netlink: 'syz.2.302': attribute type 5 has an invalid length. [ 119.061883][ T7020] netlink: 'syz.3.310': attribute type 15 has an invalid length. [ 119.092752][ T7015] can: request_module (can-proto-0) failed. [ 119.105022][ T7026] delete_channel: no stack [ 119.259799][ T7031] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 119.385108][ T3515] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.394471][ T3515] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.407759][ T3515] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.417159][ T3515] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.504885][ T7038] tipc: Enabled bearer , priority 10 [ 120.220253][ T7075] netlink: 'syz.3.329': attribute type 21 has an invalid length. [ 120.621366][ T24] tipc: Node number set to 3305676123 [ 120.724972][ T7099] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 121.339814][ T7137] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 121.793735][ T7165] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 121.801906][ T7165] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 121.824609][ T7165] tipc: Enabling of bearer rejected, failed to enable media [ 132.922890][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.929379][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 149.104328][ T7197] bond1 (unregistering): Released all slaves [ 149.183698][ T7212] netlink: 'syz.4.369': attribute type 21 has an invalid length. [ 149.201741][ T7212] IPv6: NLM_F_CREATE should be specified when creating new route [ 149.218109][ T7212] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 149.225604][ T7212] IPv6: NLM_F_CREATE should be set when creating new route [ 149.233076][ T7212] IPv6: NLM_F_CREATE should be set when creating new route [ 149.240383][ T7212] IPv6: NLM_F_CREATE should be set when creating new route [ 149.449925][ T7229] __nla_validate_parse: 86 callbacks suppressed [ 149.449946][ T7229] netlink: 56 bytes leftover after parsing attributes in process `syz.4.374'. [ 149.516324][ T7235] netlink: 12 bytes leftover after parsing attributes in process `syz.0.377'. [ 149.546135][ T7235] netlink: 12 bytes leftover after parsing attributes in process `syz.0.377'. [ 149.767564][ T7253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.379'. [ 149.767659][ T7249] xt_l2tp: v2 doesn't support IP mode [ 149.854426][ T7253] : entered promiscuous mode [ 149.876918][ T7253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.379'. [ 149.914969][ T7253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.379'. [ 149.923600][ T7256] netlink: 4 bytes leftover after parsing attributes in process `syz.2.383'. [ 149.948814][ T7253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.379'. [ 149.952518][ T7256] bridge_slave_1: left allmulticast mode [ 149.976989][ T7256] bridge_slave_1: left promiscuous mode [ 149.983480][ T7256] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.001013][ T7256] bridge_slave_0: left allmulticast mode [ 150.010975][ T7256] bridge_slave_0: left promiscuous mode [ 150.016891][ T7256] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.091090][ T7253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.379'. [ 150.137430][ T7253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.379'. [ 150.462535][ T7277] ieee802154 phy0 wpan0: encryption failed: -22 [ 150.595309][ T7287] tipc: Enabled bearer , priority 0 [ 150.619839][ T7287] syzkaller0: entered promiscuous mode [ 150.640304][ T7287] syzkaller0: entered allmulticast mode [ 150.798328][ T7287] tipc: Resetting bearer [ 150.840405][ T7287] tipc: Disabling bearer [ 151.037134][ T7314] IPVS: Unknown mcast interface: vcan0 [ 151.059205][ T7314] netlink: 'syz.2.397': attribute type 39 has an invalid length. [ 151.112710][ T7321] tipc: Enabled bearer , priority 0 [ 151.120758][ T7322] netlink: 'syz.4.400': attribute type 1 has an invalid length. [ 151.131900][ T7317] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 151.240426][ T7327] bond2: (slave veth5): Enslaving as an active interface with a down link [ 151.252992][ T7321] tipc: Disabling bearer [ 151.283185][ T7322] 8021q: adding VLAN 0 to HW filter on device bond2 [ 151.391352][ T7335] netlink: 'syz.0.402': attribute type 1 has an invalid length. [ 151.517507][ T7342] bond1: (slave bridge2): making interface the new active one [ 151.567732][ T7342] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 151.623212][ T7336] bond1: (slave bridge3): Enslaving as an active interface with a down link [ 152.045493][ T7361] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.085699][ T7361] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.277502][ T7361] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.291160][ T7361] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.436511][ T7361] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.448989][ T7361] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.477379][ T7385] netlink: 'syz.2.416': attribute type 83 has an invalid length. [ 152.634227][ T7361] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.652136][ T7361] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.877374][ T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.893110][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.929765][ T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.948104][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.982810][ T7408] veth0: entered promiscuous mode [ 152.995470][ T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.013622][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.050994][ T1165] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.064262][ T1165] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.199809][ T7419] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20001 [ 153.222315][ T7419] netlink: 'syz.3.428': attribute type 1 has an invalid length. [ 153.273482][ T7414] syzkaller1: entered promiscuous mode [ 153.280297][ T7414] syzkaller1: entered allmulticast mode [ 153.424629][ T7429] netlink: 'syz.4.433': attribute type 10 has an invalid length. [ 153.524726][ T7429] team0: Port device geneve0 added [ 153.572350][ T7434] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 153.624190][ T7434] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 154.164369][ T7473] netlink: 'syz.4.445': attribute type 21 has an invalid length. [ 154.438760][ T5829] Bluetooth: hci4: command 0x0405 tx timeout [ 154.622829][ T7500] 8021q: VLANs not supported on tunl0 [ 154.741176][ T7512] tc_dump_action: action bad kind [ 154.750220][ T7513] __nla_validate_parse: 110 callbacks suppressed [ 154.750241][ T7513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.457'. [ 154.768996][ T7514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.457'. [ 154.782681][ T7512] netlink: 28 bytes leftover after parsing attributes in process `syz.4.457'. [ 154.794321][ T7512] netlink: 12 bytes leftover after parsing attributes in process `syz.4.457'. [ 154.841845][ T7512] block nbd4: not configured, cannot reconfigure [ 154.977432][ T7527] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.461'. [ 154.996635][ T7533] syz.4.462: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 155.016594][ T7533] CPU: 0 UID: 0 PID: 7533 Comm: syz.4.462 Not tainted syzkaller #0 PREEMPT(full) [ 155.016623][ T7533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 155.016632][ T7533] Call Trace: [ 155.016639][ T7533] [ 155.016645][ T7533] dump_stack_lvl+0x189/0x250 [ 155.016677][ T7533] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.016698][ T7533] ? __pfx__printk+0x10/0x10 [ 155.016714][ T7533] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 155.016736][ T7533] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 155.016758][ T7533] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 155.016781][ T7533] warn_alloc+0x214/0x310 [ 155.016803][ T7533] ? stack_depot_save_flags+0x40/0x860 [ 155.016830][ T7533] ? __pfx_warn_alloc+0x10/0x10 [ 155.016853][ T7533] ? kasan_save_track+0x3e/0x80 [ 155.016872][ T7533] ? __kasan_kmalloc+0x93/0xb0 [ 155.016893][ T7533] ? xsk_setsockopt+0x4dc/0x8d0 [ 155.016909][ T7533] ? do_sock_setsockopt+0x17c/0x1b0 [ 155.016923][ T7533] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 155.016936][ T7533] ? do_syscall_64+0xfa/0xfa0 [ 155.016955][ T7533] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.016980][ T7533] __vmalloc_node_range_noprof+0x125/0x12d0 [ 155.017040][ T7533] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 155.017072][ T7533] ? __kasan_kmalloc+0x93/0xb0 [ 155.017100][ T7533] vmalloc_user_noprof+0xad/0xf0 [ 155.017122][ T7533] ? xskq_create+0xbf/0x170 [ 155.017142][ T7533] xskq_create+0xbf/0x170 [ 155.017164][ T7533] xsk_init_queue+0xb0/0x110 [ 155.017185][ T7533] xsk_setsockopt+0x4dc/0x8d0 [ 155.017206][ T7533] ? __pfx_xsk_setsockopt+0x10/0x10 [ 155.017228][ T7533] ? __pfx_aa_sk_perm+0x10/0x10 [ 155.017251][ T7533] ? aa_sock_opt_perm+0xff/0x1b0 [ 155.017277][ T7533] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 155.017292][ T7533] ? __pfx_xsk_setsockopt+0x10/0x10 [ 155.017312][ T7533] do_sock_setsockopt+0x17c/0x1b0 [ 155.017332][ T7533] __x64_sys_setsockopt+0x13f/0x1b0 [ 155.017353][ T7533] do_syscall_64+0xfa/0xfa0 [ 155.017371][ T7533] ? lockdep_hardirqs_on+0x9c/0x150 [ 155.017392][ T7533] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.017406][ T7533] ? clear_bhb_loop+0x60/0xb0 [ 155.017424][ T7533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.017437][ T7533] RIP: 0033:0x7f5657f8f6c9 [ 155.017452][ T7533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.017464][ T7533] RSP: 002b:00007f5658eb3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 155.017481][ T7533] RAX: ffffffffffffffda RBX: 00007f56581e5fa0 RCX: 00007f5657f8f6c9 [ 155.017492][ T7533] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 155.017500][ T7533] RBP: 00007f5658011f91 R08: 0000000000000004 R09: 0000000000000000 [ 155.017509][ T7533] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.017518][ T7533] R13: 00007f56581e6038 R14: 00007f56581e5fa0 R15: 00007fff0efb87d8 [ 155.017545][ T7533] [ 155.017582][ T7533] Mem-Info: [ 155.325457][ T7533] active_anon:4755 inactive_anon:0 isolated_anon:0 [ 155.325457][ T7533] active_file:2885 inactive_file:39891 isolated_file:0 [ 155.325457][ T7533] unevictable:768 dirty:80 writeback:0 [ 155.325457][ T7533] slab_reclaimable:10506 slab_unreclaimable:95751 [ 155.325457][ T7533] mapped:29033 shmem:1356 pagetables:1105 [ 155.325457][ T7533] sec_pagetables:0 bounce:0 [ 155.325457][ T7533] kernel_misc_reclaimable:0 [ 155.325457][ T7533] free:1336142 free_pcp:15336 free_cma:0 [ 155.371360][ T7533] Node 0 active_anon:19020kB inactive_anon:0kB active_file:11540kB inactive_file:159364kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116132kB dirty:316kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11836kB pagetables:4320kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 155.406337][ T7533] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:100kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 155.443701][ T7533] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 155.474561][ T7533] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 155.484780][ T7533] Node 0 DMA32 free:1439252kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18920kB inactive_anon:0kB active_file:11540kB inactive_file:159364kB unevictable:1536kB writepending:316kB zspages:0kB present:3129332kB managed:2565160kB mlocked:0kB bounce:0kB free_pcp:40784kB local_pcp:20168kB free_cma:0kB [ 155.520882][ T7533] lowmem_reserve[]: 0 0 0 0 0 [ 155.525863][ T7533] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 155.565603][ T7533] lowmem_reserve[]: 0 0 0 0 0 [ 155.570652][ T7533] Node 1 Normal free:3890212kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21152kB local_pcp:11392kB free_cma:0kB [ 155.651533][ T7533] lowmem_reserve[]: 0 0 0 0 0 [ 155.656434][ T7533] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 155.732815][ T7533] Node 0 DMA32: 1754*4kB (UME) 602*8kB (UME) 244*16kB (UME) 1496*32kB (UME) 371*64kB (UME) 65*128kB (UME) 28*256kB (UM) 12*512kB (UME) 6*1024kB (M) 5*2048kB (UM) 321*4096kB (M) = 1440184kB [ 155.792920][ T7533] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 155.825186][ T7557] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.846239][ T7533] Node 1 Normal: 205*4kB (U) 46*8kB (UME) 42*16kB (UME) 61*32kB (UME) 23*64kB (UME) 11*128kB (UME) 6*256kB (UME) 2*512kB (M) 2*1024kB (ME) 2*2048kB (UE) 946*4096kB (M) = 3890212kB [ 155.879550][ T7533] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 155.890332][ T7533] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 155.899916][ T7533] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 155.911368][ T7533] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 155.924319][ T7533] 44128 total pagecache pages [ 155.929580][ T7533] 0 pages in swap cache [ 155.935223][ T7533] Free swap = 124996kB [ 155.942212][ T7533] Total swap = 124996kB [ 155.946480][ T7533] 2097051 pages RAM [ 155.952532][ T7533] 0 pages HighMem/MovableOnly [ 155.957256][ T7533] 424119 pages reserved [ 155.965840][ T7533] 0 pages cma reserved [ 156.078384][ T7570] netlink: 'syz.1.473': attribute type 11 has an invalid length. [ 156.104820][ T7572] netlink: 10 bytes leftover after parsing attributes in process `syz.2.474'. [ 156.119022][ T7570] netlink: 24 bytes leftover after parsing attributes in process `syz.1.473'. [ 156.164990][ T7574] batman_adv: batadv0: Adding interface: dummy0 [ 156.171545][ T7574] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 156.197549][ T7574] batman_adv: batadv0: Interface activated: dummy0 [ 156.216690][ T7574] batadv0: mtu less than device minimum [ 156.224916][ T7574] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 156.236475][ T7574] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 156.248225][ T7574] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 156.260416][ T7574] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 156.271883][ T7574] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 156.283394][ T7574] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 156.294924][ T7574] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 156.328072][ T7570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.473'. [ 156.418203][ T938] IPVS: starting estimator thread 0... [ 156.517361][ T7595] netlink: 'syz.4.477': attribute type 11 has an invalid length. [ 156.528323][ T7591] IPVS: using max 25 ests per chain, 60000 per kthread [ 157.007698][ T7615] tipc: Enabling of bearer rejected, failed to enable media [ 157.063433][ T7619] netlink: 4 bytes leftover after parsing attributes in process `syz.4.488'. [ 157.080592][ T7617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.487'. [ 157.158372][ T7617] 8021q: adding VLAN 0 to HW filter on device bond2 [ 157.283443][ T7635] unsupported nlmsg_type 40 [ 157.844104][ T7654] netlink: 'syz.1.499': attribute type 2 has an invalid length. [ 158.217841][ T7670] netlink: 'syz.4.506': attribute type 2 has an invalid length. [ 158.226438][ T7670] netlink: 'syz.4.506': attribute type 1 has an invalid length. [ 158.618857][ T7699] netlink: 'syz.4.517': attribute type 7 has an invalid length. [ 158.806150][ T7708] netlink: 'syz.4.523': attribute type 1 has an invalid length. [ 158.817769][ T7708] netlink: 'syz.4.523': attribute type 1 has an invalid length. [ 159.051301][ T7725] x_tables: unsorted entry at hook 3 [ 159.107674][ T7725] syzkaller0: entered promiscuous mode [ 159.113283][ T7725] syzkaller0: entered allmulticast mode [ 159.314858][ T7738] tipc: New replicast peer: 255.255.255.255 [ 159.331932][ T7738] tipc: Enabled bearer , priority 10 [ 159.740228][ T7768] netlink: 'syz.3.538': attribute type 4 has an invalid length. [ 159.818487][ T7774] __nla_validate_parse: 21 callbacks suppressed [ 159.818508][ T7774] netlink: 56 bytes leftover after parsing attributes in process `syz.4.541'. [ 159.921981][ T7780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.541'. [ 160.195433][ T1165] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x9e [ 160.417613][ T7813] netlink: 184 bytes leftover after parsing attributes in process `syz.4.549'. [ 160.520548][ T7824] netlink: 'syz.1.551': attribute type 21 has an invalid length. [ 160.530471][ T7824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.551'. [ 160.546959][ T7824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.551'. [ 160.607711][ T7826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.552'. [ 161.015189][ T7833] netlink: 10 bytes leftover after parsing attributes in process `syz.4.554'. [ 161.038232][ T7834] netlink: 10 bytes leftover after parsing attributes in process `syz.4.554'. [ 161.087214][ T7837] netlink: 4 bytes leftover after parsing attributes in process `syz.1.557'. [ 161.133884][ T7841] veth1_macvtap: left promiscuous mode [ 161.154958][ T7810] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 161.197350][ T7841] netlink: 60 bytes leftover after parsing attributes in process `syz.0.556'. [ 161.373573][ T7855] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 161.526995][ T7862] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 161.618124][ T7872] IPVS: set_ctl: invalid protocol: 47 10.1.1.1:20001 [ 162.069252][ T7889] netem: change failed [ 162.124407][ T7895] validate_nla: 1 callbacks suppressed [ 162.124427][ T7895] netlink: 'syz.1.572': attribute type 1 has an invalid length. [ 162.243427][ T7894] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 162.266358][ T7894] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 162.355259][ T7895] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 162.362353][ T5829] Bluetooth: hci0: command 0x0c1a tx timeout [ 162.387615][ T7895] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 162.398907][ T7912] xt_hashlimit: size too large, truncated to 1048576 [ 163.164640][ T7939] bridge_slave_0: left allmulticast mode [ 163.186735][ T7939] bridge_slave_0: left promiscuous mode [ 163.192813][ T7939] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.204991][ T7939] bridge_slave_1: left allmulticast mode [ 163.211119][ T7939] bridge_slave_1: left promiscuous mode [ 163.221653][ T7939] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.240012][ T7939] bond0: (slave bond_slave_0): Releasing backup interface [ 163.247233][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888020fb1c00: rx timeout, send abort [ 163.257369][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888020fb1c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 163.302899][ T7939] bond0: (slave bond_slave_1): Releasing backup interface [ 163.339423][ T7939] team0: Port device team_slave_0 removed [ 163.353624][ T7939] team0: Port device team_slave_1 removed [ 163.361440][ T7939] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.370172][ T7939] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.379544][ T7939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.386926][ T7939] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.396582][ T7939] net_ratelimit: 13 callbacks suppressed [ 163.396594][ T7939] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 163.444831][ T7942] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 163.723708][ T7967] tipc: Enabled bearer , priority 0 [ 163.739553][ T7967] syzkaller0: entered promiscuous mode [ 163.758224][ T7967] syzkaller0: entered allmulticast mode [ 163.870511][ T7977] netlink: zone id is out of range [ 163.953625][ T7981] netlink: 'syz.4.597': attribute type 1 has an invalid length. [ 163.974759][ T7966] tipc: Resetting bearer [ 164.084717][ T7977] netlink: set zone limit has 4 unknown bytes [ 164.111184][ T7966] tipc: Disabling bearer [ 164.415460][ T7981] 8021q: adding VLAN 0 to HW filter on device bond3 [ 164.532781][ T8002] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20004 [ 164.543931][ T8004] netlink: 'syz.3.601': attribute type 1 has an invalid length. [ 164.565277][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88807de7fc00: rx timeout, send abort [ 164.575321][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807de7fc00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 164.592006][ T8007] hsr_slave_0: left promiscuous mode [ 164.603617][ T8007] hsr_slave_1: left promiscuous mode [ 164.805889][ T8014] macvtap1: entered promiscuous mode [ 164.812587][ T8014] vlan0: entered promiscuous mode [ 164.821322][ T8014] macvtap1: entered allmulticast mode [ 164.839482][ T8014] vlan0: entered allmulticast mode [ 164.844660][ T8014] veth0_vlan: entered allmulticast mode [ 164.846051][ T8016] __nla_validate_parse: 14 callbacks suppressed [ 164.846066][ T8016] netlink: 28 bytes leftover after parsing attributes in process `syz.2.605'. [ 165.019584][ T8023] netlink: 80 bytes leftover after parsing attributes in process `syz.4.606'. [ 165.074427][ T8031] syzkaller0: entered promiscuous mode [ 165.092778][ T8034] netlink: 'syz.2.611': attribute type 1 has an invalid length. [ 165.103194][ T8031] syzkaller0: entered allmulticast mode [ 165.116604][ T8037] veth0_to_bridge: entered promiscuous mode [ 165.218782][ T8036] veth0_to_bridge: left promiscuous mode [ 165.348369][ T8048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.612'. [ 165.399587][ T8053] netlink: 'syz.2.612': attribute type 1 has an invalid length. [ 165.427587][ T8055] netlink: 'syz.1.617': attribute type 1 has an invalid length. [ 165.630602][ T8065] netlink: 28 bytes leftover after parsing attributes in process `syz.3.619'. [ 165.684597][ T8056] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.707707][ T8056] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.727426][ T8056] bond0 (unregistering): Released all slaves [ 165.776428][ T8058] bond2: (slave bridge2): making interface the new active one [ 165.784828][ T8058] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 165.799452][ T8076] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 166.099408][ T8089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.627'. [ 166.662038][ T8120] netlink: 'syz.2.637': attribute type 21 has an invalid length. [ 166.723212][ T8120] netlink: 128 bytes leftover after parsing attributes in process `syz.2.637'. [ 166.723475][ T8123] netlink: 'syz.2.637': attribute type 21 has an invalid length. [ 166.775308][ T8120] netlink: 'syz.2.637': attribute type 4 has an invalid length. [ 166.801517][ T8120] netlink: 'syz.2.637': attribute type 5 has an invalid length. [ 166.828097][ T8123] netlink: 128 bytes leftover after parsing attributes in process `syz.2.637'. [ 166.850878][ T8120] netlink: 3 bytes leftover after parsing attributes in process `syz.2.637'. [ 166.863272][ T8130] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 166.885304][ T8123] netlink: 3 bytes leftover after parsing attributes in process `syz.2.637'. [ 167.123771][ T8141] syzkaller0: entered promiscuous mode [ 167.129714][ T8141] syzkaller0: entered allmulticast mode [ 167.142368][ T8137] tipc: Enabled bearer , priority 0 [ 167.151643][ T8140] dvmrp6: left allmulticast mode [ 167.354567][ T8150] tipc: Resetting bearer [ 167.439701][ T8150] tipc: Disabling bearer [ 167.701178][ T8179] netlink: 12 bytes leftover after parsing attributes in process `syz.4.657'. [ 168.051191][ T8190] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 168.094214][ T8190] validate_nla: 4 callbacks suppressed [ 168.094233][ T8190] netlink: 'syz.2.660': attribute type 13 has an invalid length. [ 168.196526][ T8201] IPVS: persistence engine module ip_vs_pe_À not found [ 168.557279][ T8190] ip6erspan0: left promiscuous mode [ 168.578017][ T8190] ip6erspan0: left allmulticast mode [ 169.268510][ T8265] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 169.275820][ T8265] IPv6: NLM_F_CREATE should be set when creating new route [ 169.735571][ T8297] ieee802154 phy0 wpan0: encryption failed: -22 [ 169.811268][ T8297] IPVS: set_ctl: invalid protocol: 41 172.20.20.170:20002 [ 170.023285][ T8308] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 170.058046][ T8308] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 170.075084][ T8308] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 170.125256][ T8321] __nla_validate_parse: 11 callbacks suppressed [ 170.125274][ T8321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.693'. [ 170.186580][ T8329] netlink: 48 bytes leftover after parsing attributes in process `syz.4.697'. [ 170.225070][ T8329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.697'. [ 170.477654][ T8345] netlink: 28 bytes leftover after parsing attributes in process `syz.4.702'. [ 170.488545][ T8338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.700'. [ 170.724474][ T8357] netlink: 'syz.0.707': attribute type 6 has an invalid length. [ 170.740471][ T8358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.706'. [ 170.758838][ T8357] netlink: 'syz.0.707': attribute type 6 has an invalid length. [ 171.391154][ T8393] xt_CONNSECMARK: invalid mode: 0 [ 171.927832][ T8431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.728'. [ 171.949591][ T8434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.726'. [ 171.959044][ T8434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.726'. [ 171.968406][ T8434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.726'. [ 173.258577][ T8437] team0: Device ip6gre1 is of different type [ 173.375808][ T8440] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 173.556622][ T8461] netlink: 'syz.4.737': attribute type 1 has an invalid length. [ 173.664850][ T8461] bond4: entered promiscuous mode [ 173.677986][ T8461] bond4: entered allmulticast mode [ 173.685140][ T8461] 8021q: adding VLAN 0 to HW filter on device bond4 [ 173.739271][ T8471] netlink: 'syz.2.738': attribute type 1 has an invalid length. [ 173.842237][ T8471] 8021q: adding VLAN 0 to HW filter on device bond2 [ 173.886463][ T8461] bridge_slave_0: default FDB implementation only supports local addresses [ 173.921482][ T8465] bond2: (slave veth0_to_bond): making interface the new active one [ 173.960388][ T8465] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 174.316032][ T30] audit: type=1107 audit(1763443823.166:2): pid=8510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 174.657047][ T8533] xt_hashlimit: size too large, truncated to 1048576 [ 175.142521][ T8543] bridge: RTM_NEWNEIGH with invalid ether address [ 175.162091][ T8543] __nla_validate_parse: 5 callbacks suppressed [ 175.162111][ T8543] netlink: 60 bytes leftover after parsing attributes in process `syz.2.757'. [ 175.191517][ T8543] Bluetooth: MGMT ver 1.23 [ 175.455281][ T8558] netlink: 12 bytes leftover after parsing attributes in process `syz.1.763'. [ 175.496408][ T8562] netlink: 24 bytes leftover after parsing attributes in process `syz.3.765'. [ 175.511439][ T8560] netlink: 40 bytes leftover after parsing attributes in process `syz.4.762'. [ 175.733474][ T8571] tipc: Enabled bearer , priority 0 [ 175.743702][ T8571] syzkaller0: entered promiscuous mode [ 175.767399][ T8571] syzkaller0: entered allmulticast mode [ 175.827617][ T8583] netlink: 'syz.0.771': attribute type 8 has an invalid length. [ 175.847165][ T8583] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.855821][ T8583] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.869066][ T8585] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 175.948673][ T8570] tipc: Resetting bearer [ 175.996176][ T8570] tipc: Disabling bearer [ 176.127391][ T8599] netlink: 'syz.0.776': attribute type 2 has an invalid length. [ 176.141912][ T8598] netlink: 'syz.0.776': attribute type 2 has an invalid length. [ 176.249193][ T8609] netlink: 28 bytes leftover after parsing attributes in process `syz.1.778'. [ 176.294803][ T8610] team0: Device ip6gre1 is of different type [ 176.604489][ T8631] netlink: 24 bytes leftover after parsing attributes in process `syz.3.787'. [ 176.725787][ T8639] netlink: 28 bytes leftover after parsing attributes in process `syz.0.790'. [ 176.737811][ T8641] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 177.005983][ T8658] netlink: 4 bytes leftover after parsing attributes in process `syz.4.795'. [ 177.051375][ T8659] tipc: Enabled bearer , priority 0 [ 177.060098][ T8659] syzkaller0: entered promiscuous mode [ 177.066298][ T8659] syzkaller0: entered allmulticast mode [ 177.117110][ T8659] tipc: Resetting bearer [ 177.145266][ T8657] tipc: Resetting bearer [ 177.186440][ T8657] tipc: Disabling bearer [ 177.410662][ T8668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.798'. [ 177.437773][ T8672] netlink: 20 bytes leftover after parsing attributes in process `syz.1.799'. [ 178.124883][ T8710] : renamed from hsr0 (while UP) [ 178.377454][ T50] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 179.601351][ T8781] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 179.661720][ T8781] bond0: (slave lo): Enslaving as a backup interface with an up link [ 179.713909][ T8781] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 180.011953][ T8807] netlink: 'syz.2.834': attribute type 3 has an invalid length. [ 180.496637][ T8830] netlink: 'syz.2.839': attribute type 3 has an invalid length. [ 180.516280][ T8831] __nla_validate_parse: 13 callbacks suppressed [ 180.516302][ T8831] netlink: 208 bytes leftover after parsing attributes in process `syz.1.838'. [ 180.542039][ T8835] netlink: 'syz.4.840': attribute type 1 has an invalid length. [ 180.565783][ T8831] openvswitch: netlink: Flow key attr not present in new flow. [ 180.610323][ T8837] vlan3: entered promiscuous mode [ 180.631344][ T8837] vlan3: entered allmulticast mode [ 180.636623][ T8837] hsr_slave_1: entered allmulticast mode [ 180.697473][ T8845] netlink: 48 bytes leftover after parsing attributes in process `syz.1.844'. [ 181.141222][ T8869] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 181.229766][ T8882] netlink: 44 bytes leftover after parsing attributes in process `syz.3.852'. [ 181.259510][ T8882] netlink: 24 bytes leftover after parsing attributes in process `syz.3.852'. [ 181.425288][ T8887] netlink: 'syz.2.854': attribute type 5 has an invalid length. [ 181.489039][ T8891] pim6reg1: entered promiscuous mode [ 181.497273][ T8891] pim6reg1: entered allmulticast mode [ 181.572060][ T8896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.858'. [ 181.694807][ T8900] netlink: 64 bytes leftover after parsing attributes in process `syz.2.859'. [ 181.735834][ T8900] vetè0_virt_wifi: renamed from lo (while UP) [ 182.082320][ T8925] netlink: 'syz.0.866': attribute type 1 has an invalid length. [ 182.194815][ T8932] netlink: 'syz.3.867': attribute type 8 has an invalid length. [ 182.311857][ T8935] netlink: 84 bytes leftover after parsing attributes in process `syz.0.868'. [ 182.353264][ T8935] netlink: 84 bytes leftover after parsing attributes in process `syz.0.868'. [ 182.383520][ T5829] block nbd1: Receive control failed (result -32) [ 182.531115][ T8948] sctp: [Deprecated]: syz.0.871 (pid 8948) Use of struct sctp_assoc_value in delayed_ack socket option. [ 182.531115][ T8948] Use struct sctp_sack_info instead [ 182.659532][ T8955] netlink: 12 bytes leftover after parsing attributes in process `syz.3.872'. [ 182.691240][ T8952] netlink: 40 bytes leftover after parsing attributes in process `syz.1.869'. [ 182.725275][ T8955] xt_cluster: node mask cannot exceed total number of nodes [ 182.797030][ T8963] x_tables: duplicate underflow at hook 3 [ 183.546813][ T9012] netlink: 'syz.3.877': attribute type 7 has an invalid length. [ 183.571851][ T9012] netlink: 'syz.3.877': attribute type 8 has an invalid length. [ 183.651068][ T9012] erspan0: entered promiscuous mode [ 183.679245][ T9012] batadv_slave_1: entered promiscuous mode [ 183.700767][ T9012] batadv_slave_1: left promiscuous mode [ 183.722542][ T9012] erspan0: left promiscuous mode [ 184.174746][ T9046] 8021q: adding VLAN 0 to HW filter on device bond1 [ 184.332084][ T9062] netlink: 'syz.2.893': attribute type 6 has an invalid length. [ 185.250261][ T9122] trusted_key: syz.2.909 sent an empty control message without MSG_MORE. [ 185.436145][ T9130] ieee802154 phy0 wpan0: encryption failed: -22 [ 185.519728][ T9134] netlink: 'syz.3.913': attribute type 1 has an invalid length. [ 185.542773][ T9134] __nla_validate_parse: 7 callbacks suppressed [ 185.542794][ T9134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.913'. [ 185.633053][ T9140] netlink: 5 bytes leftover after parsing attributes in process `syz.3.915'. [ 185.643593][ T9140] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 185.655139][ T9140] netlink: 'syz.3.915': attribute type 1 has an invalid length. [ 185.679478][ T9140] bond2: entered promiscuous mode [ 185.684921][ T9140] 8021q: adding VLAN 0 to HW filter on device bond2 [ 185.739085][ T9143] netlink: 16 bytes leftover after parsing attributes in process `syz.3.916'. [ 185.783642][ T9143] netlink: 28 bytes leftover after parsing attributes in process `syz.3.916'. [ 185.797973][ T9143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.916'. [ 185.810909][ T9143] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.859768][ T9143] bridge_slave_1 (unregistering): left allmulticast mode [ 185.866986][ T9143] bridge_slave_1 (unregistering): left promiscuous mode [ 185.875568][ T9143] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.085822][ T9152] bond5: Removing last ns target with arp_interval on [ 186.148281][ T9158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.919'. [ 186.207646][ T9163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.922'. [ 186.406405][ T9171] tipc: Enabled bearer , priority 0 [ 186.432805][ T9171] netlink: 'syz.0.926': attribute type 53 has an invalid length. [ 186.443698][ T9171] tipc: Resetting bearer [ 186.469330][ T9169] tipc: Disabling bearer [ 186.613945][ T9184] netlink: 16 bytes leftover after parsing attributes in process `syz.4.929'. [ 186.893216][ T9201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.936'. [ 186.920419][ T9201] xt_CT: You must specify a L4 protocol and not use inversions on it [ 187.032014][ T9208] netlink: 28 bytes leftover after parsing attributes in process `syz.2.939'. [ 187.335558][ T9232] xt_nfacct: accounting object `\$‚9ZúM#íü¾mUµ|±^cÁ\F9YⳈ«ÃÖ' does not exist [ 187.614795][ T9252] erspan0: entered promiscuous mode [ 187.650963][ T9252] vlan2: entered promiscuous mode [ 188.080705][ T9289] netlink: 'syz.4.962': attribute type 6 has an invalid length. [ 188.236547][ T9305] bond3: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 188.250909][ T9305] bond3: entered promiscuous mode [ 188.255982][ T9305] bond3: entered allmulticast mode [ 188.261920][ T9305] 8021q: adding VLAN 0 to HW filter on device bond3 [ 188.800560][ T9290] tipc: Enabling of bearer rejected, media not registered [ 188.967720][ T9313] netlink: 'syz.0.968': attribute type 10 has an invalid length. [ 188.992094][ T9318] netlink: 'syz.2.969': attribute type 1 has an invalid length. [ 189.020751][ T9318] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 189.032810][ T9317] Bluetooth: MGMT ver 1.23 [ 189.078684][ T9317] Bluetooth: hci1: too big key_count value 32778 [ 189.096775][ T9326] syz_tun: entered allmulticast mode [ 189.130265][ T9325] syz_tun: left allmulticast mode [ 189.413991][ T9350] xfrm1: entered promiscuous mode [ 189.434225][ T9355] delete_channel: no stack [ 189.438989][ T9350] xfrm1: entered allmulticast mode [ 190.423836][ T9411] netlink: 'syz.0.997': attribute type 1 has an invalid length. [ 190.815274][ T9445] __nla_validate_parse: 17 callbacks suppressed [ 190.815297][ T9445] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1005'. [ 190.995860][ T9454] ip6gre1: entered allmulticast mode [ 191.256299][ T9470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1016'. [ 191.269536][ T9470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1016'. [ 191.280597][ T9471] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 191.396467][ T9477] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1018'. [ 191.522392][ T9491] dvmrp0: left allmulticast mode [ 191.887826][ T9506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1026'. [ 191.989417][ T9513] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1027'. [ 192.048624][ T9513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1027'. [ 192.296295][ T9534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1033'. [ 192.307042][ T9534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1033'. [ 192.316290][ T9534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1033'. [ 192.897103][ T9565] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 192.926814][ T9565] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 192.939822][ T9565] gretap1: entered promiscuous mode [ 192.951941][ T9565] gretap1: entered allmulticast mode [ 193.025648][ T9569] netlink: 'syz.3.1042': attribute type 6 has an invalid length. [ 193.154421][ T9579] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 194.365091][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.372008][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.401984][ T9705] netlink: 'syz.2.1080': attribute type 33 has an invalid length. [ 195.597256][ T9712] tipc: New replicast peer: 255.255.255.255 [ 195.617259][ T9712] tipc: Enabled bearer , priority 10 [ 195.671297][ T9722] tipc: Enabled bearer , priority 0 [ 195.679277][ T9722] syzkaller0: entered promiscuous mode [ 195.684781][ T9722] syzkaller0: entered allmulticast mode [ 195.769676][ T9722] tipc: Resetting bearer [ 195.835404][ T9721] tipc: Resetting bearer [ 195.880177][ T9721] tipc: Disabling bearer [ 195.985868][ T9739] netlink: 'syz.4.1090': attribute type 1 has an invalid length. [ 196.006042][ T9740] xt_cgroup: xt_cgroup: no path or classid specified [ 196.038925][ T9739] 8021q: adding VLAN 0 to HW filter on device bond6 [ 196.059234][ T9743] __nla_validate_parse: 13 callbacks suppressed [ 196.059265][ T9743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1092'. [ 196.110874][ T9739] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1090'. [ 196.357296][ T9760] netlink: 'syz.4.1099': attribute type 1 has an invalid length. [ 196.383965][ T9765] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1100'. [ 196.384234][ T9764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1098'. [ 196.393898][ T9768] netlink: 'syz.4.1099': attribute type 1 has an invalid length. [ 196.408575][ T9763] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1098'. [ 196.424707][ T9765] syzkaller0: entered promiscuous mode [ 196.431066][ T9765] syzkaller0: entered allmulticast mode [ 196.431560][ T9763] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1098'. [ 196.455212][ T9764] 8021q: VLANs not supported on ipvlan1 [ 196.504038][ T9772] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1101'. [ 196.552016][ T9772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1101'. [ 196.579587][ T9772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1101'. [ 196.605663][ T9772] netlink: 'syz.4.1101': attribute type 3 has an invalid length. [ 196.875091][ T9792] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 196.975245][ T9803] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1110'. [ 197.015703][ T9803] openvswitch: netlink: Flow key attr not present in new flow. [ 197.317452][ T9827] openvswitch: netlink: Message has 4 unknown bytes. [ 197.435050][ T9837] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 197.983646][ T9874] syz_tun: entered allmulticast mode [ 198.120248][ T9874] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 198.135161][ T9874] bond7 (unregistering): Released all slaves [ 198.215703][ T9873] syz_tun: left allmulticast mode [ 199.537400][ T9894] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.734088][ T9894] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.436149][ T9900] geneve2: entered promiscuous mode [ 200.457767][ T9900] geneve2: entered allmulticast mode [ 200.508707][ T8987] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.528666][ T8987] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 200.556350][ T8987] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.565710][ T8987] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 200.574691][ T8987] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.584034][ T8987] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 200.610349][ T8987] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.625061][ T8987] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 200.746432][T10004] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 201.002653][T10033] netlink: 'syz.0.1168': attribute type 3 has an invalid length. [ 201.245875][T10048] __nla_validate_parse: 20 callbacks suppressed [ 201.245895][T10048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1173'. [ 201.278110][T10048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1173'. [ 201.311047][T10054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1173'. [ 201.328244][T10054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1173'. [ 201.720170][T10082] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1181'. [ 202.445299][T10101] syzkaller0: entered promiscuous mode [ 202.471690][T10101] syzkaller0: entered allmulticast mode [ 204.073349][T10138] geneve2: entered promiscuous mode [ 204.078945][T10138] geneve2: entered allmulticast mode [ 204.086761][T10143] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 204.182082][T10148] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.286806][ T3515] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 204.295833][ T3515] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 204.316579][ T3515] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 204.351945][T10168] netlink: 'syz.3.1200': attribute type 4 has an invalid length. [ 204.389188][T10171] netlink: 64985 bytes leftover after parsing attributes in process `syz.2.1201'. [ 204.406978][T10173] netlink: 'syz.3.1200': attribute type 4 has an invalid length. [ 204.809079][T10175] vlan0 (unregistering): left allmulticast mode [ 204.815486][T10175] veth0_vlan (unregistering): left allmulticast mode [ 204.824132][T10175] vlan0 (unregistering): left promiscuous mode [ 205.330808][T10183] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1204'. [ 205.430088][T10186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1206'. [ 205.452984][T10186] netlink: 'syz.3.1206': attribute type 1 has an invalid length. [ 205.538174][T10192] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1209'. [ 205.726696][T10209] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1214'. [ 205.947716][T10219] syzkaller1: entered promiscuous mode [ 205.976618][T10219] syzkaller1: entered allmulticast mode [ 205.977045][T10226] netlink: 'syz.2.1219': attribute type 3 has an invalid length. [ 206.024114][T10148] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.056221][T10148] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 206.114662][T10226] tipc: Enabled bearer , priority 0 [ 206.126031][T10226] syzkaller0: entered promiscuous mode [ 206.131780][T10226] syzkaller0: entered allmulticast mode [ 206.223605][T10148] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.248944][T10148] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 206.280860][T10242] __nla_validate_parse: 3 callbacks suppressed [ 206.280878][T10242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1224'. [ 206.308900][T10242] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1224'. [ 206.401525][T10226] tipc: Resetting bearer [ 206.432778][T10148] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.444281][T10148] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 206.466753][T10225] tipc: Resetting bearer [ 206.481468][T10250] netlink: 'syz.0.1225': attribute type 39 has an invalid length. [ 206.531374][T10225] tipc: Disabling bearer [ 206.665457][ T3515] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 206.694554][ T3515] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 206.801620][ T3515] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 206.811143][ T3515] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 206.888550][ T3515] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 206.897493][ T3515] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 206.937461][ T3515] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 206.959546][ T3515] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 206.980915][T10269] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1233'. [ 207.000621][T10270] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1234'. [ 207.032469][T10275] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1237'. [ 207.035930][T10270] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1234'. [ 207.093743][T10270] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1234'. [ 207.138200][T10270] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1234'. [ 207.162199][T10270] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1234'. [ 207.198106][T10270] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1234'. [ 207.231786][T10283] netlink: 'syz.3.1238': attribute type 1 has an invalid length. [ 207.325187][T10290] netlink: 'syz.0.1239': attribute type 21 has an invalid length. [ 207.380858][T10287] syzkaller0: entered promiscuous mode [ 207.386466][T10287] syzkaller0: entered allmulticast mode [ 207.699271][T10303] netlink: zone id is out of range [ 207.724022][T10303] netlink: zone id is out of range [ 207.739256][T10303] netlink: zone id is out of range [ 207.744437][T10303] netlink: zone id is out of range [ 207.822120][T10303] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 207.983082][T10331] xt_NFQUEUE: number of total queues is 0 [ 209.969726][T10386] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.029682][T10387] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 210.268429][T10403] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 210.877030][T10434] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 211.165362][T10452] º: renamed from veth1_vlan (while UP) [ 211.285563][ T9925] IPVS: starting estimator thread 0... [ 211.303485][T10461] tipc: Enabled bearer , priority 0 [ 211.317464][T10461] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 211.325346][T10461] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 211.364012][T10461] tipc: Resetting bearer [ 211.378169][T10462] IPVS: using max 43 ests per chain, 103200 per kthread [ 211.396069][T10461] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 211.582700][T10478] __nla_validate_parse: 69 callbacks suppressed [ 211.582722][T10478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1291'. [ 211.708740][T10484] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 211.805855][T10373] Bluetooth: hci0: command 0x0c1a tx timeout [ 211.814803][T10373] Bluetooth: hci1: command 0x0406 tx timeout [ 211.821094][ T5151] Bluetooth: hci3: command 0x0406 tx timeout [ 211.829753][T10375] Bluetooth: hci2: command 0x0406 tx timeout [ 212.079856][ T45] IPVS: starting estimator thread 0... [ 212.121311][T10513] ieee802154 phy0 wpan0: encryption failed: -22 [ 212.181139][T10509] IPVS: using max 25 ests per chain, 60000 per kthread [ 212.292084][T10519] netlink: 'syz.2.1303': attribute type 1 has an invalid length. [ 212.372809][T10519] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1303'. [ 212.544525][T10534] : renamed from hsr0 (while UP) [ 212.692769][T10545] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1308'. [ 213.001416][T10560] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1316'. [ 213.178484][T10567] netlink: 'syz.2.1320': attribute type 4 has an invalid length. [ 213.189311][T10570] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1319'. [ 213.225767][T10570] vxcan0: entered allmulticast mode [ 213.442016][T10585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1324'. [ 213.451819][T10585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1324'. [ 213.723268][T10597] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1328'. [ 213.783872][T10603] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1330'. [ 214.233683][T10635] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1338'. [ 214.392333][T10640] can: request_module (can-proto-0) failed. [ 214.489237][T10646] can: request_module (can-proto-0) failed. [ 214.584749][T10653] netlink: 'syz.0.1346': attribute type 11 has an invalid length. [ 214.603750][T10653] netlink: 'syz.0.1346': attribute type 11 has an invalid length. [ 214.637623][T10660] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 214.655826][T10660] bond6 (unregistering): Released all slaves [ 214.715046][T10662] bond4: (slave vetè0_virt_wifi): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 214.751370][T10662] bond4: (slave vetè0_virt_wifi): Enslaving as a backup interface with an up link [ 214.761980][T10662] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 214.886778][T10673] Cannot find add_set index 0 as target [ 215.074006][T10683] netlink: 'syz.1.1353': attribute type 14 has an invalid length. [ 215.094372][T10683] netlink: 'syz.1.1353': attribute type 13 has an invalid length. [ 215.109018][T10697] netlink: 'syz.4.1356': attribute type 10 has an invalid length. [ 215.169461][T10697] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 215.230937][T10702] bond0: (slave bridge0): Releasing backup interface [ 215.463620][T10717] xt_cgroup: invalid path, errno=-2 [ 215.487811][T10717] : entered promiscuous mode [ 215.588658][T10726] netlink: 'syz.2.1367': attribute type 1 has an invalid length. [ 215.663101][T10733] netlink: 'syz.1.1368': attribute type 2 has an invalid length. [ 215.700024][T10726] netlink: 'syz.2.1367': attribute type 10 has an invalid length. [ 215.711003][T10731] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 215.728940][T10733] netlink: 'syz.1.1368': attribute type 2 has an invalid length. [ 216.133107][T10758] syzkaller0: entered promiscuous mode [ 216.141756][T10758] syzkaller0: entered allmulticast mode [ 216.382536][T10783] netlink: 'syz.4.1382': attribute type 1 has an invalid length. [ 216.626702][T10799] bridge3: entered promiscuous mode [ 216.632106][T10799] bridge3: entered allmulticast mode [ 216.747733][T10800] syzkaller0: entered promiscuous mode [ 216.753807][T10800] syzkaller0: entered allmulticast mode [ 218.347772][T10829] sctp: [Deprecated]: syz.2.1397 (pid 10829) Use of struct sctp_assoc_value in delayed_ack socket option. [ 218.347772][T10829] Use struct sctp_sack_info instead [ 218.456996][T10837] __nla_validate_parse: 10 callbacks suppressed [ 218.457016][T10837] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1401'. [ 218.527007][T10837] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1401'. [ 218.544926][T10841] validate_nla: 1 callbacks suppressed [ 218.544945][T10841] netlink: 'syz.2.1402': attribute type 2 has an invalid length. [ 218.570855][T10842] IPv6: NLM_F_REPLACE set, but no existing node found! [ 218.591685][T10837] netlink: 'syz.0.1401': attribute type 5 has an invalid length. [ 218.628804][T10837] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1401'. [ 218.746820][T10851] netlink: 'syz.2.1406': attribute type 1 has an invalid length. [ 218.827397][T10857] netlink: 'syz.0.1408': attribute type 1 has an invalid length. [ 218.885229][T10856] syzkaller0: entered promiscuous mode [ 218.892224][T10856] syzkaller0: entered allmulticast mode [ 218.912860][T10859] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 218.923126][ T30] audit: type=1800 audit(1763443867.766:3): pid=10859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1410" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 218.928263][T10859] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 218.964049][T10865] sctp: [Deprecated]: syz.4.1411 (pid 10865) Use of struct sctp_assoc_value in delayed_ack socket option. [ 218.964049][T10865] Use struct sctp_sack_info instead [ 218.991315][T10859] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 219.026445][T10857] 8021q: adding VLAN 0 to HW filter on device bond5 [ 219.063546][T10867] bond5: (slave geneve2): making interface the new active one [ 219.073097][T10867] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 219.100390][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059985400: rx timeout, send abort [ 219.224002][T10878] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 219.600552][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059985c00: rx timeout, send abort [ 219.609217][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059985400: abort rx timeout. Force session deactivation [ 219.638661][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888059985c00: connection exists (fe ff). last cmd: 20 [ 219.889225][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059987000: rx timeout, send abort [ 220.399604][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059987000: abort rx timeout. Force session deactivation [ 220.426269][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888059985c00: connection exists (fe ff). last cmd: 20 [ 220.676187][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806a1f6400: rx timeout, send abort [ 220.836815][T10900] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1417'. [ 220.885306][T10902] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1418'. [ 220.929808][T10905] bond6: option resend_igmp: invalid value (32767) [ 220.936459][T10905] bond6: option resend_igmp: allowed values 0 - 255 [ 220.949833][T10905] bond6 (unregistering): Released all slaves [ 221.073944][T10911] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1421'. [ 221.131357][T10914] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1423'. [ 221.184680][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806a1f6400: abort rx timeout. Force session deactivation [ 221.215381][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888059985c00: connection exists (fe ff). last cmd: 20 [ 221.222409][T10920] netlink: 'syz.4.1425': attribute type 1 has an invalid length. [ 221.273033][T10921] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1425'. [ 221.299366][T10920] bond8: entered promiscuous mode [ 221.310542][T10920] 8021q: adding VLAN 0 to HW filter on device bond8 [ 221.317430][T10922] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1425'. [ 221.465346][ C1] vcan0: j1939_tp_rxtimer: 0xffff888145ffd000: rx timeout, send abort [ 221.661434][T10952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1431'. [ 221.840451][T10962] openvswitch: netlink: Flow key attribute not present in set flow. [ 221.973661][ C1] vcan0: j1939_tp_rxtimer: 0xffff888145ffd000: abort rx timeout. Force session deactivation [ 222.007161][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888059985c00: connection exists (fe ff). last cmd: 20 [ 222.257124][ C1] vcan0: j1939_tp_rxtimer: 0xffff888145ffc800: rx timeout, send abort [ 222.414381][T10992] netlink: 'syz.0.1441': attribute type 2 has an invalid length. [ 222.683573][T11009] ipvlan2: entered promiscuous mode [ 222.765441][ C1] vcan0: j1939_tp_rxtimer: 0xffff888145ffc800: abort rx timeout. Force session deactivation [ 222.794851][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888059985c00: connection exists (fe ff). last cmd: 20 [ 223.048274][ C1] vcan0: j1939_tp_rxtimer: 0xffff888145ffdc00: rx timeout, send abort [ 223.316690][T11051] lo speed is unknown, defaulting to 1000 [ 223.333651][T11049] netlink: 'syz.0.1463': attribute type 4 has an invalid length. [ 223.334334][T11051] lo speed is unknown, defaulting to 1000 [ 223.350298][T11051] lo speed is unknown, defaulting to 1000 [ 223.374653][T11049] netlink: 'syz.0.1463': attribute type 4 has an invalid length. [ 223.538510][T11057] syzkaller0: entered promiscuous mode [ 223.544265][T11057] syzkaller0: entered allmulticast mode [ 223.556633][ C1] vcan0: j1939_tp_rxtimer: 0xffff888145ffdc00: abort rx timeout. Force session deactivation [ 223.584097][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888059985c00: connection exists (fe ff). last cmd: 20 [ 223.613946][ T9923] lo speed is unknown, defaulting to 1000 [ 223.621191][T11051] infiniband sz1: set active [ 223.632092][T11051] infiniband sz1: added lo [ 223.705754][T11051] RDS/IB: sz1: added [ 223.710462][T11051] smc: adding ib device sz1 with port count 1 [ 223.716813][T11051] smc: ib device sz1 port 1 has no pnetid [ 223.726213][T11051] lo speed is unknown, defaulting to 1000 [ 223.739376][ T9923] lo speed is unknown, defaulting to 1000 [ 223.834060][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880596f2000: rx timeout, send abort [ 223.962053][T11065] __nla_validate_parse: 7 callbacks suppressed [ 223.962075][T11065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1467'. [ 224.103146][T11075] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1470'. [ 224.161144][T11051] lo speed is unknown, defaulting to 1000 [ 224.225188][T11083] netlink: 666 bytes leftover after parsing attributes in process `syz.4.1473'. [ 224.342503][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880596f2000: abort rx timeout. Force session deactivation [ 224.369920][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888059985c00: connection exists (fe ff). last cmd: 20 [ 224.536093][T11051] lo speed is unknown, defaulting to 1000 [ 224.572714][T11097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1478'. [ 224.619879][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880596f3000: rx timeout, send abort [ 224.721160][T11101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1480'. [ 224.733895][T11101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1480'. [ 224.743271][T11101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1480'. [ 224.815946][T11103] netlink: 'syz.2.1481': attribute type 9 has an invalid length. [ 224.824181][T11103] netlink: 'syz.2.1481': attribute type 6 has an invalid length. [ 224.829512][T11051] lo speed is unknown, defaulting to 1000 [ 225.128239][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880596f3000: abort rx timeout. Force session deactivation [ 225.150855][T11115] netlink: 'syz.2.1485': attribute type 1 has an invalid length. [ 225.159303][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888059985c00: connection exists (fe ff). last cmd: 20 [ 225.190631][T11118] nbd: couldn't find device at index 0 [ 225.220331][T11115] bond6: entered promiscuous mode [ 225.225518][T11115] bond6: entered allmulticast mode [ 225.248538][T11115] 8021q: adding VLAN 0 to HW filter on device bond6 [ 225.291313][T11121] macvlan2: entered promiscuous mode [ 225.302965][T11121] macvlan2: entered allmulticast mode [ 225.313558][T11123] IPVS: set_ctl: invalid protocol: 135 172.30.1.1:20002 [ 225.314787][T11121] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 225.354633][T11051] lo speed is unknown, defaulting to 1000 [ 225.409246][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880596f3800: rx timeout, send abort [ 225.609554][T11133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1490'. [ 225.629692][T11133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1490'. [ 225.828257][T11145] netlink: 'syz.0.1493': attribute type 6 has an invalid length. [ 225.862255][T11145] openvswitch: netlink: Message has 592 unknown bytes. [ 225.871571][T11145] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.917492][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880596f3800: abort rx timeout. Force session deactivation [ 225.938190][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888059985c00: connection exists (fe ff). last cmd: 20 [ 226.074447][T11162] openvswitch: netlink: nsh attr 60 is out of range max 3 [ 226.082186][T11163] openvswitch: netlink: nsh attr 60 is out of range max 3 [ 226.090025][T11162] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 226.099629][T11163] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 226.188326][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880596f3400: rx timeout, send abort [ 226.253877][T11175] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1501'. [ 226.327466][T11175] macvtap1: entered promiscuous mode [ 226.333266][T11175] vlan0: entered promiscuous mode [ 226.339517][T11175] macvtap1: entered allmulticast mode [ 226.345314][T11175] vlan0: entered allmulticast mode [ 226.350845][T11175] veth0_vlan: entered allmulticast mode [ 226.545556][T11191] netlink: 'syz.2.1506': attribute type 1 has an invalid length. [ 226.572854][T11191] 8021q: adding VLAN 0 to HW filter on device bond7 [ 226.599327][T11191] bond7: (slave veth5): Enslaving as an active interface with a down link [ 226.613419][T11191] bond2: (slave veth0_to_bond): Releasing active interface [ 226.624994][T11191] bond7: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 226.650320][T11191] bond7: (slave veth7): Enslaving as an active interface with a down link [ 226.696706][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880596f3400: abort rx timeout. Force session deactivation [ 226.728511][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888059985c00: connection exists (fe ff). last cmd: 20 [ 226.862423][T11202] SET target dimension over the limit! [ 226.885507][T11206] netlink: 'syz.1.1511': attribute type 1 has an invalid length. [ 226.979064][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880596f2800: rx timeout, send abort [ 227.487394][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880596f2800: abort rx timeout. Force session deactivation [ 227.519068][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888059985c00: connection exists (fe ff). last cmd: 20 [ 227.768964][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880596f2c00: rx timeout, send abort [ 227.993577][T11261] ipt_REJECT: TCP_RESET invalid for non-tcp [ 228.277276][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880596f2c00: abort rx timeout. Force session deactivation [ 228.305913][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888059985c00: connection exists (fe ff). last cmd: 20 [ 228.555852][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880596f1400: rx timeout, send abort [ 228.902864][T11293] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.006451][T11309] netlink: 'syz.4.1543': attribute type 58 has an invalid length. [ 229.015473][T11309] __nla_validate_parse: 9 callbacks suppressed [ 229.015493][T11309] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1543'. [ 229.064126][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880596f1400: abort rx timeout. Force session deactivation [ 229.087595][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888059985c00: connection exists (fe ff). last cmd: 20 [ 229.264643][T11293] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.285178][T11293] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.337569][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880596f0c00: rx timeout, send abort [ 229.708792][ T9923] lo speed is unknown, defaulting to 1000 [ 229.715783][ T9923] sz1: Port: 1 Link DOWN [ 229.804166][T11313] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1546'. [ 229.835321][ T12] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.845172][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.854317][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880596f0c00: abort rx timeout. Force session deactivation [ 229.866644][T11313] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1546'. [ 229.876272][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888059985c00: connection exists (fe ff). last cmd: 20 [ 229.893002][ T9916] lo speed is unknown, defaulting to 1000 [ 229.908590][T11313] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1546'. [ 229.929050][ T12] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.948122][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.964507][ T12] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.971127][T11318] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1547'. [ 229.977666][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.993670][ T3467] bond0: (slave lo): link status up again after 0 ms [ 229.994898][T11316] bond0: entered promiscuous mode [ 230.010449][T11316] lo: entered promiscuous mode [ 230.015084][ T3467] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 230.015604][T11316] bond0: entered allmulticast mode [ 230.031794][T11316] lo: entered allmulticast mode [ 230.033552][T11319] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1548'. [ 230.037117][T11316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.056615][ T3467] bond0: (slave lo): link status up again after 0 ms [ 230.064793][ T12] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.082439][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.088053][ T3467] bond0: (slave lo): link status up again after 0 ms [ 230.126055][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880596f1000: rx timeout, send abort [ 230.148744][ T3467] bond0: (slave lo): link status up again after 0 ms [ 230.165339][ T3467] bond0: (slave lo): failed to get link speed/duplex [ 230.205309][ T8987] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 230.310142][ T8987] bond0: (slave lo): failed to get link speed/duplex [ 230.428132][ T8990] bond0: (slave lo): failed to get link speed/duplex [ 230.501596][T11343] lo speed is unknown, defaulting to 1000 [ 230.552512][ T12] bond0: (slave lo): failed to get link speed/duplex [ 230.634382][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880596f1000: abort rx timeout. Force session deactivation [ 230.661960][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888059985c00: connection exists (fe ff). last cmd: 20 [ 230.691813][T11349] sctp: [Deprecated]: syz.0.1557 (pid 11349) Use of struct sctp_assoc_value in delayed_ack socket option. [ 230.691813][T11349] Use struct sctp_sack_info instead [ 230.779413][T11355] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1559'. [ 230.911885][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880596f1800: rx timeout, send abort [ 231.159969][T11369] netlink: 'syz.4.1560': attribute type 10 has an invalid length. [ 231.420202][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880596f1800: abort rx timeout. Force session deactivation [ 231.450146][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888059985c00: connection exists (fe ff). last cmd: 20 [ 231.699807][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802f5aa000: rx timeout, send abort [ 231.735855][T11397] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1569'. [ 232.078961][T11411] sctp: [Deprecated]: syz.4.1574 (pid 11411) Use of int in maxseg socket option. [ 232.078961][T11411] Use struct sctp_assoc_value instead [ 232.208109][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802f5aa000: abort rx timeout. Force session deactivation [ 232.218174][T11419] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1578'. [ 232.238720][T11421] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1576'. [ 232.242470][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888059985c00: connection exists (fe ff). last cmd: 20 [ 232.492438][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802f5a9800: rx timeout, send abort [ 232.855167][T11460] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.870658][T11460] team0: Cannot enslave team device to itself [ 232.882506][T11459] team0: Cannot enslave team device to itself [ 232.890545][T11462] netlink: 'syz.1.1589': attribute type 3 has an invalid length. [ 233.000800][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802f5a9800: abort rx timeout. Force session deactivation [ 233.032003][T11470] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20000 [ 233.039345][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888059985c00: connection exists (fe ff). last cmd: 20 [ 233.289173][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059606400: rx timeout, send abort [ 233.544495][T11493] netlink: 'syz.2.1598': attribute type 4 has an invalid length. [ 233.681239][T11503] netlink: 'syz.2.1599': attribute type 4 has an invalid length. [ 233.693638][T11503] `: renamed from bond0 [ 233.797592][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059606400: abort rx timeout. Force session deactivation [ 233.825074][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888059985c00: connection exists (fe ff). last cmd: 20 [ 233.947411][T11511] netlink: 'syz.2.1601': attribute type 2 has an invalid length. [ 234.075087][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059604400: rx timeout, send abort [ 234.129491][T11517] __nla_validate_parse: 11 callbacks suppressed [ 234.129512][T11517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1605'. [ 234.198469][T11517] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1605'. [ 234.207672][T11517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1605'. [ 234.280253][T11517] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1605'. [ 234.309175][T11523] netlink: 'syz.1.1605': attribute type 1 has an invalid length. [ 234.317985][T11523] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1605'. [ 234.583372][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059604400: abort rx timeout. Force session deactivation [ 234.611880][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888059985c00: connection exists (fe ff). last cmd: 20 [ 234.756287][T11519] team0 (unregistering): Port device team_slave_0 removed [ 234.766714][T11519] team0 (unregistering): Port device team_slave_1 removed [ 234.801006][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 234.811976][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 234.822354][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 234.833314][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 234.861844][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059604c00: rx timeout, send abort [ 234.898339][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 235.026908][T11541] lo speed is unknown, defaulting to 1000 [ 235.038513][ T12] net_ratelimit: 30 callbacks suppressed [ 235.038535][ T12] bond0: (slave lo): failed to get link speed/duplex [ 235.184813][ T8987] bond0: (slave lo): failed to get link speed/duplex [ 235.288450][T11561] tipc: Enabling of bearer rejected, already enabled [ 235.370176][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059604c00: abort rx timeout. Force session deactivation [ 235.397588][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888059985c00: connection exists (fe ff). last cmd: 20 [ 235.440462][T11569] gtp0: entered promiscuous mode [ 235.445476][T11569] gtp0: entered allmulticast mode [ 235.468212][ T3515] bond0: (slave lo): failed to get link speed/duplex [ 235.638029][ T12] bond0: (slave lo): failed to get link speed/duplex [ 235.647553][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059604800: rx timeout, send abort [ 235.718318][ T3515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.758585][T11580] netlink: 'syz.4.1619': attribute type 1 has an invalid length. [ 235.782337][T11580] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1619'. [ 235.813177][T11581] af_packet: tpacket_rcv: packet too big, clamped from 112 to 4294967272. macoff=96 [ 235.818079][ T3515] bond0: (slave lo): failed to get link speed/duplex [ 236.155930][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059604800: abort rx timeout. Force session deactivation [ 236.160709][T11592] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1623'. [ 236.183374][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888059985c00: connection exists (fe ff). last cmd: 20 [ 236.281303][T11611] bond0: option mode: invalid value (133) [ 236.293584][T11611] bond0 (unregistering): Released all slaves [ 236.352119][T11614] bond0: option mode: invalid value (133) [ 236.361805][T11614] bond0 (unregistering): Released all slaves [ 236.413191][T11541] chnl_net:caif_netlink_parms(): no params data found [ 236.433353][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a4ec000: rx timeout, send abort [ 236.529687][T11625] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1629'. [ 236.710329][T11645] netlink: 'syz.2.1635': attribute type 1 has an invalid length. [ 236.717488][T11643] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1633'. [ 236.729558][T11643] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1633'. [ 236.775955][T11643] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 236.783540][T11541] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.792475][T11541] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.800069][T11541] bridge_slave_0: entered allmulticast mode [ 236.819409][T11541] bridge_slave_0: entered promiscuous mode [ 236.848741][ T3467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.853859][T11645] bond0: (slave gretap1): making interface the new active one [ 236.882870][T11645] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 236.905467][T11541] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.921029][T11541] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.936673][T11541] bridge_slave_1: entered allmulticast mode [ 236.943035][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a4ec000: abort rx timeout. Force session deactivation [ 236.959334][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888059985c00: connection exists (fe ff). last cmd: 20 [ 236.974814][T11541] bridge_slave_1: entered promiscuous mode [ 236.999092][ T5835] Bluetooth: hci4: command tx timeout [ 237.003919][T11647] gretap2: entered promiscuous mode [ 237.010663][T11657] netlink: 'syz.4.1638': attribute type 1 has an invalid length. [ 237.029654][T11647] bond0: (slave gretap2): Enslaving as an active interface with an up link [ 237.053953][T11645] syz.2.1635 (11645) used greatest stack depth: 18200 bytes left [ 237.098293][ T1165] bond0: (slave lo): failed to get link speed/duplex [ 237.160279][T11541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.204867][T11541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.209284][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a4ee400: rx timeout, send abort [ 237.289141][T11672] ieee802154 phy0 wpan0: encryption failed: -22 [ 237.406317][T11541] team0: Port device team_slave_0 added [ 237.471705][T11541] team0: Port device team_slave_1 added [ 237.548817][T11683] hsr_slave_0 (unregistering): left promiscuous mode [ 237.597093][T11690] syzkaller0: entered promiscuous mode [ 237.603200][T11690] syzkaller0: entered allmulticast mode [ 237.603417][T11688] block nbd2: server does not support multiple connections per device. [ 237.618350][T11688] block nbd2: shutting down sockets [ 237.622104][T11541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.632160][T11541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 237.660373][T11541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.681066][T11541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.688519][T11541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 237.716112][T11541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.726809][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a4ee400: abort rx timeout. Force session deactivation [ 237.741044][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888059985c00: connection exists (fe ff). last cmd: 20 [ 237.780147][T11689] block nbd2: server does not support multiple connections per device. [ 237.793955][T11689] block nbd2: shutting down sockets [ 237.991015][ C0] vcan0: j1939_tp_rxtimer: 0xffff888033180000: rx timeout, send abort [ 237.993575][T11708] xt_TCPMSS: Only works on TCP SYN packets [ 238.006593][ T1165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.027229][T11541] hsr_slave_0: entered promiscuous mode [ 238.034658][T11541] hsr_slave_1: entered promiscuous mode [ 238.081120][T11708] dvmrp6: entered allmulticast mode [ 238.368617][T11723] netlink: 'syz.1.1658': attribute type 1 has an invalid length. [ 238.388223][T11723] netlink: 'syz.1.1658': attribute type 2 has an invalid length. [ 238.499393][ C0] vcan0: j1939_tp_rxtimer: 0xffff888033180000: abort rx timeout. Force session deactivation [ 238.503642][T11541] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 238.522864][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888059985c00: connection exists (fe ff). last cmd: 20 [ 238.554320][T11541] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 238.574358][T11541] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 238.587227][T11541] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 238.738255][ T1165] bond0: (slave lo): failed to get link speed/duplex [ 238.772826][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806a194000: rx timeout, send abort [ 238.894617][T11541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.005321][ T9926] Oops: general protection fault, probably for non-canonical address 0xdffffc000000004c: 0000 [#1] SMP KASAN PTI [ 239.017356][ T9926] KASAN: null-ptr-deref in range [0x0000000000000260-0x0000000000000267] [ 239.025781][ T9926] CPU: 0 UID: 0 PID: 9926 Comm: kworker/0:12 Not tainted syzkaller #0 PREEMPT(full) [ 239.035337][ T9926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 239.045393][ T9926] Workqueue: events l2cap_info_timeout [ 239.050879][ T9926] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 239.056779][ T9926] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 d0 84 23 09 cc 66 66 66 66 66 66 2e [ 239.076483][ T9926] RSP: 0018:ffffc9001af97788 EFLAGS: 00010202 [ 239.082644][ T9926] RAX: dffffc0000000000 RBX: ffffffff891f0a58 RCX: d7206c99e8657600 [ 239.090701][ T9926] RDX: 0000000000000000 RSI: ffffffff891f0a58 RDI: 000000000000004c [ 239.098762][ T9926] RBP: ffffffff8a4ffaf5 R08: 0000000000000001 R09: 0000000000000000 [ 239.106740][ T9926] R10: dffffc0000000000 R11: ffffffff8a4ffab0 R12: 0000000000000000 [ 239.114712][ T9926] R13: 0000000000000260 R14: 0000000000000260 R15: 0000000000000001 [ 239.122685][ T9926] FS: 0000000000000000(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000 [ 239.131700][ T9926] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 239.138457][ T9926] CR2: 00007f5658e4ff98 CR3: 0000000077e8c000 CR4: 00000000003526f0 [ 239.146693][ T9926] Call Trace: [ 239.149974][ T9926] [ 239.152906][ T9926] __kasan_check_byte+0x12/0x40 [ 239.157759][ T9926] lock_acquire+0x8d/0x360 [ 239.162173][ T9926] ? lockdep_hardirqs_on+0x9c/0x150 [ 239.167387][ T9926] ? __cancel_work+0x254/0x2e0 [ 239.172245][ T9926] lock_sock_nested+0x48/0x100 [ 239.177023][ T9926] ? l2cap_sock_ready_cb+0x45/0x140 [ 239.182315][ T9926] l2cap_sock_ready_cb+0x45/0x140 [ 239.187425][ T9926] l2cap_conn_start+0x76d/0xe50 [ 239.192381][ T9926] ? __pfx_l2cap_conn_start+0x10/0x10 [ 239.197935][ T9926] ? __lock_acquire+0xab9/0xd20 [ 239.202784][ T9926] ? __pfx___mutex_lock+0x10/0x10 [ 239.207822][ T9926] ? process_scheduled_works+0x9ef/0x17b0 [ 239.213740][ T9926] l2cap_info_timeout+0x68/0xa0 [ 239.218680][ T9926] ? process_scheduled_works+0x9ef/0x17b0 [ 239.225114][ T9926] process_scheduled_works+0xae1/0x17b0 [ 239.230672][ T9926] ? __pfx_process_scheduled_works+0x10/0x10 [ 239.236670][ T9926] worker_thread+0x8a0/0xda0 [ 239.241292][ T9926] ? __kthread_parkme+0x7b/0x200 [ 239.246293][ T9926] kthread+0x711/0x8a0 [ 239.250381][ T9926] ? __pfx_worker_thread+0x10/0x10 [ 239.255518][ T9926] ? __pfx_kthread+0x10/0x10 [ 239.260132][ T9926] ? _raw_spin_unlock_irq+0x23/0x50 [ 239.265335][ T9926] ? lockdep_hardirqs_on+0x9c/0x150 [ 239.270539][ T9926] ? __pfx_kthread+0x10/0x10 [ 239.275136][ T9926] ret_from_fork+0x4bc/0x870 [ 239.279754][ T9926] ? __pfx_ret_from_fork+0x10/0x10 [ 239.284886][ T9926] ? __switch_to_asm+0x39/0x70 [ 239.289757][ T9926] ? __switch_to_asm+0x33/0x70 [ 239.294520][ T9926] ? __pfx_kthread+0x10/0x10 [ 239.299289][ T9926] ret_from_fork_asm+0x1a/0x30 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 239.304061][ T9926] [ 239.307085][ T9926] Modules linked in: [ 239.312341][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806a194000: abort rx timeout. Force session deactivation [ 239.322564][ T9926] ---[ end trace 0000000000000000 ]--- [ 239.336642][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888059985c00: connection exists (fe ff). last cmd: 20 [ 239.359307][ T5835] Bluetooth: hci4: command tx timeout [ 239.406907][ T9926] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 239.414377][ T9926] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 d0 84 23 09 cc 66 66 66 66 66 66 2e [ 239.434353][ T9926] RSP: 0018:ffffc9001af97788 EFLAGS: 00010202 [ 239.440904][ T9926] RAX: dffffc0000000000 RBX: ffffffff891f0a58 RCX: d7206c99e8657600 [ 239.448947][ T9926] RDX: 0000000000000000 RSI: ffffffff891f0a58 RDI: 000000000000004c [ 239.456950][ T9926] RBP: ffffffff8a4ffaf5 R08: 0000000000000001 R09: 0000000000000000 [ 239.465055][ T9926] R10: dffffc0000000000 R11: ffffffff8a4ffab0 R12: 0000000000000000 [ 239.474920][ T9926] R13: 0000000000000260 R14: 0000000000000260 R15: 0000000000000001 [ 239.486325][ T9926] FS: 0000000000000000(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000 [ 239.495384][ T9926] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 239.502123][ T9926] CR2: 00007f222a517d60 CR3: 000000003280a000 CR4: 00000000003526f0 [ 239.510182][ T9926] Kernel panic - not syncing: Fatal exception [ 239.516594][ T9926] Kernel Offset: disabled [ 239.520916][ T9926] Rebooting in 86400 seconds..