last executing test programs: 58.779862887s ago: executing program 4 (id=1061): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000002f000b00000400000000000004"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, 0x3b, 0x107, 0x100, 0x0, {0x1, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x24}}, 0x20010804) (async) r3 = socket(0x1e, 0x4, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r6, 0x89fb, &(0x7f0000000180)={'sit0\x00', 0x0}) (async) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) (async) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) recvmmsg$unix(r3, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) recvmsg$can_j1939(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/240, 0xf0}], 0x1}, 0x20) (async) close(r7) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r9, &(0x7f0000000000)={0x1f, 0x6, @any, 0x0, 0x1}, 0xe) (async) connect$bt_l2cap(r9, &(0x7f0000000680)={0x1f, 0x20, @none}, 0xe) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000c0000001800018014000200766574683100000000000000000000001800038008"], 0x44}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, 0x27, 0x8, 0x70bd2c, 0x25dfdbfd, {0x15}, [@generic="2c488b83ff1b07c66ec9f089a74dae647998efdc090b896a"]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) 47.699770874s ago: executing program 4 (id=1061): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000002f000b00000400000000000004"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, 0x3b, 0x107, 0x100, 0x0, {0x1, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x24}}, 0x20010804) (async) r3 = socket(0x1e, 0x4, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r6, 0x89fb, &(0x7f0000000180)={'sit0\x00', 0x0}) (async) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) (async) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) recvmmsg$unix(r3, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) recvmsg$can_j1939(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/240, 0xf0}], 0x1}, 0x20) (async) close(r7) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r9, &(0x7f0000000000)={0x1f, 0x6, @any, 0x0, 0x1}, 0xe) (async) connect$bt_l2cap(r9, &(0x7f0000000680)={0x1f, 0x20, @none}, 0xe) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000c0000001800018014000200766574683100000000000000000000001800038008"], 0x44}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, 0x27, 0x8, 0x70bd2c, 0x25dfdbfd, {0x15}, [@generic="2c488b83ff1b07c66ec9f089a74dae647998efdc090b896a"]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) 44.147565434s ago: executing program 0 (id=1956): socket$isdn(0x22, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r2, 0x2, 0x0, 0x0, @void, @value}, 0x10) socket$l2tp6(0xa, 0x2, 0x73) r3 = socket$kcm(0x2, 0xa, 0x2) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000740)) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x54, 0x3b, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@typed={0x4}, @typed={0x23, 0x62, 0x0, 0x0, @str='\x00x\xa6k\x1e\xa4H\xef\xc9\xd3\'\xf4pi\x81\xc0\xf7ag\xab\x86\xc3\xfc\xbc\xcc\xf5\xdd\xec\x00\x00\x00'}, @nested={0x18, 0x2, 0x0, 0x1, [@generic="8d437a577106dba73a8db37f0f09b96ab5be2be3"]}]}, 0x54}}, 0xc000) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x1) 44.082772067s ago: executing program 0 (id=1957): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x80}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000840)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32=r6, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendto$inet6(r6, &(0x7f0000000b40)="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", 0x1000, 0x20008000, &(0x7f0000000300)={0xa, 0x4e21, 0x1, @loopback, 0x4}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000040)='mm_lru_insertion\x00', r5}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r7, &(0x7f0000000180), 0x40010) 42.927608399s ago: executing program 0 (id=1959): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$sock_timeval(r0, 0x1, 0x43, 0x0, &(0x7f0000000040)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e28, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e2f, @multicast2}, 0x10) 32.442875474s ago: executing program 4 (id=1061): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000002f000b00000400000000000004"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, 0x3b, 0x107, 0x100, 0x0, {0x1, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x24}}, 0x20010804) (async) r3 = socket(0x1e, 0x4, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r6, 0x89fb, &(0x7f0000000180)={'sit0\x00', 0x0}) (async) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) (async) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) recvmmsg$unix(r3, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) recvmsg$can_j1939(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/240, 0xf0}], 0x1}, 0x20) (async) close(r7) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r9, &(0x7f0000000000)={0x1f, 0x6, @any, 0x0, 0x1}, 0xe) (async) connect$bt_l2cap(r9, &(0x7f0000000680)={0x1f, 0x20, @none}, 0xe) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000c0000001800018014000200766574683100000000000000000000001800038008"], 0x44}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, 0x27, 0x8, 0x70bd2c, 0x25dfdbfd, {0x15}, [@generic="2c488b83ff1b07c66ec9f089a74dae647998efdc090b896a"]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) 31.42151119s ago: executing program 0 (id=1959): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$sock_timeval(r0, 0x1, 0x43, 0x0, &(0x7f0000000040)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e28, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e2f, @multicast2}, 0x10) 18.206529362s ago: executing program 4 (id=1061): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000002f000b00000400000000000004"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, 0x3b, 0x107, 0x100, 0x0, {0x1, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x24}}, 0x20010804) (async) r3 = socket(0x1e, 0x4, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r6, 0x89fb, &(0x7f0000000180)={'sit0\x00', 0x0}) (async) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) (async) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) recvmmsg$unix(r3, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) recvmsg$can_j1939(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/240, 0xf0}], 0x1}, 0x20) (async) close(r7) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r9, &(0x7f0000000000)={0x1f, 0x6, @any, 0x0, 0x1}, 0xe) (async) connect$bt_l2cap(r9, &(0x7f0000000680)={0x1f, 0x20, @none}, 0xe) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000c0000001800018014000200766574683100000000000000000000001800038008"], 0x44}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, 0x27, 0x8, 0x70bd2c, 0x25dfdbfd, {0x15}, [@generic="2c488b83ff1b07c66ec9f089a74dae647998efdc090b896a"]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) 16.522025473s ago: executing program 0 (id=1959): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$sock_timeval(r0, 0x1, 0x43, 0x0, &(0x7f0000000040)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e28, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e2f, @multicast2}, 0x10) 15.858839734s ago: executing program 4 (id=1061): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000002f000b00000400000000000004"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, 0x3b, 0x107, 0x100, 0x0, {0x1, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x24}}, 0x20010804) (async) r3 = socket(0x1e, 0x4, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r6, 0x89fb, &(0x7f0000000180)={'sit0\x00', 0x0}) (async) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) (async) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) recvmmsg$unix(r3, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) recvmsg$can_j1939(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/240, 0xf0}], 0x1}, 0x20) (async) close(r7) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r9, &(0x7f0000000000)={0x1f, 0x6, @any, 0x0, 0x1}, 0xe) (async) connect$bt_l2cap(r9, &(0x7f0000000680)={0x1f, 0x20, @none}, 0xe) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000c0000001800018014000200766574683100000000000000000000001800038008"], 0x44}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, 0x27, 0x8, 0x70bd2c, 0x25dfdbfd, {0x15}, [@generic="2c488b83ff1b07c66ec9f089a74dae647998efdc090b896a"]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) 15.445803258s ago: executing program 0 (id=1959): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$sock_timeval(r0, 0x1, 0x43, 0x0, &(0x7f0000000040)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e28, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e2f, @multicast2}, 0x10) 6.055347248s ago: executing program 3 (id=2140): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="7800000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100001f000008000740000000001400108008024000"/120], 0x78}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448cc, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r2, @ANYBLOB="7fdebf5f10a50eaf3717e835b74334cd87f04f05"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) unshare(0x400) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000180)=0x101d1, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c000000070a01010000000000000000020000000956f05c7fae6d1871eced6030696b005b3a45607a3200000000ffff000073797a3000000000"], 0x2c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x10}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="b2", 0x1}, {&(0x7f0000000040)="000000070020ac", 0x7}], 0x2}, 0x0) r9 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_int(r9, 0x29, 0x46, 0x0, 0x0) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x4ea1, 0x0, @loopback, 0x101}, 0x1c) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000001a000100000000000000000002000000000000000000000008000100e0e0000108000300", @ANYRES32=r11], 0x34}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) 5.895224549s ago: executing program 3 (id=2141): socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) (async) r0 = socket(0x15, 0x5, 0x0) epoll_create1(0x0) (async) epoll_create1(0x0) epoll_create1(0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) (async) bind$alg(r1, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r0) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r3, 0x400, 0x70bd2a, 0x401, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r5, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) (async) writev(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r5, 0x1) recvmmsg(r5, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0x6c5621a684f1998c}}, {{&(0x7f0000000540)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x15, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xfffffffffffffdac}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/65, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) socket(0x1, 0x803, 0x0) (async) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xb) (async) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xb) 5.631654797s ago: executing program 3 (id=2143): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="5000000061a6e3ba8ea247e50000000000000010bbe3237153dc6ea09bab8dcb2361f0d84916ce419c260425a0f2ae1ca5c54bf8335e7ce23b4cab10a691452a1ee7cb1519e5c298f60298af3ea06c1da07d6d862c477dd7a0e3c998ec352011c5c27d4d20cd2a434cac7efd408ac2ce3061715ba5e1d35e6c84a72ba52a701eb59e39651ac0cbe0518885a824ee35670205fd5a23d2974f4fe4ca6731ee47cc59d98ed6170737afe0176d2e12cd396561d6710317cf77156cc215419f9b1fd438d2af64e7fe857e67af730aaebed35f925a1d4672f95cac03bc9d61612113be659c4e5092f38b7f811c36b218d8", @ANYRES32=0x0, @ANYBLOB="00000000080000001c0012800c0001006d6163766c616e000c00028008000900ffffffff140035006d6163766c616e300000000000000000"], 0x50}}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="5000000061a6e3ba8ea247e50000000000000010bbe3237153dc6ea09bab8dcb2361f0d84916ce419c260425a0f2ae1ca5c54bf8335e7ce23b4cab10a691452a1ee7cb1519e5c298f60298af3ea06c1da07d6d862c477dd7a0e3c998ec352011c5c27d4d20cd2a434cac7efd408ac2ce3061715ba5e1d35e6c84a72ba52a701eb59e39651ac0cbe0518885a824ee35670205fd5a23d2974f4fe4ca6731ee47cc59d98ed6170737afe0176d2e12cd396561d6710317cf77156cc215419f9b1fd438d2af64e7fe857e67af730aaebed35f925a1d4672f95cac03bc9d61612113be659c4e5092f38b7f811c36b218d8", @ANYRES32=0x0, @ANYBLOB="00000000080000001c0012800c0001006d6163766c616e000c00028008000900ffffffff140035006d6163766c616e300000000000000000"], 0x50}}, 0x8000) (async) 5.501049398s ago: executing program 3 (id=2145): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x0) r3 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x1}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000200)={r4, 0x1000, 0x10}, &(0x7f0000000240)=0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r5, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000840)=""/73, 0x49}, {&(0x7f0000002980)=""/4098, 0x1002}, {&(0x7f0000000040)=""/6, 0x6}, {&(0x7f00000006c0)=""/219, 0xdb}, {&(0x7f00000008c0)=""/47, 0x2f}, {&(0x7f0000000b00)=""/213, 0xd5}, {&(0x7f0000000c00)=""/193, 0xc1}], 0x7}, 0x80000000}], 0x4, 0x20, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r10) sendmsg$IEEE802154_ASSOCIATE_REQ(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r11, 0x1}, 0x14}}, 0x0) sendto$inet(r8, &(0x7f0000003700)="da4c2d5a91a513f44a38ddfefd048083939d", 0x12, 0x4004085, 0x0, 0x0) recvmmsg(r8, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000026c0)=""/4103, 0x1007}], 0x1}}], 0x1, 0x41, 0x0) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) 5.063504612s ago: executing program 3 (id=2146): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) (fail_nth: 5) 4.717180226s ago: executing program 3 (id=2148): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000010640)={'sit0\x00', &(0x7f00000001c0)=@ethtool_cmd={0xb, 0x5, 0x0, 0x0, 0xf8, 0x0, 0x3, 0xfc, 0x0, 0xfc, 0x0, 0x0, 0x0, 0xff, 0x0, 0x45, [0xfffffffd, 0x89ff]}}) r4 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad000000", 0x4) recvmmsg(r4, &(0x7f0000000b00), 0x0, 0x2, 0x0) recvmmsg(r4, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000b2b97f", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bind$x25(r2, &(0x7f00000001c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="180800000000006e2531e8fd3e612052092189ac0000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca90000000000003509010000000000950000000000000075090200020000007b9a00fe00000000b509000000000000c39a04fee1000000bf8700000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018290000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000020000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendto$ax25(r4, &(0x7f00000002c0)="2f9be4e4f82138b20bfbd317313c107f19a463a421da9e3c5ba9c83bb1a2ca630ba7d45be5e3370c9425e0e98b13063594223c5c56f598e63c581ae89614e20d71699bdda3764ce8e311042cf88e49e2d413760d16449c523c5f4adec27c3322664bbc1ce847c447f0b0a8acb59d7f328fe69e94555a75faad22b5a415a0a17e2f651590edf8a8c447f2", 0x8a, 0x80, &(0x7f0000000380)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @default]}, 0x48) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCALLUSERDATA(r8, 0x89e5, &(0x7f00000006c0)={0x121, "2c75b642236f10c41dadaf49110c7154979da667929c6bc363cab06cd2773d23fe610361e97becf5c7230be0e99de26c6812a26b519806fa4d397b58d3bd3913850d37d6ada5439739bd075da8fb6c595ea42fd726a46c56a85addd97d4dcd87d3da3a7a870a5d71907698521e752b41f0841ce7a529a4d90d75547573c007df"}) ioctl$sock_SIOCETHTOOL(r7, 0x89f1, &(0x7f0000000a00)={'tunl0\x00', &(0x7f0000000a40)=@ethtool_cmd={0x3a, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0xfe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, [0x0, 0x2]}}) 3.507436859s ago: executing program 1 (id=2156): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x803}, 0xe) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan4\x00', 0x0}) r5 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) r7 = openat$cgroup_netprio_ifpriomap(r6, &(0x7f0000000040), 0x2, 0x0) preadv(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/159, 0x9f}, {0x0}], 0x2, 0x6, 0x4) r8 = socket$inet_dccp(0x2, 0x6, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000c0000000001a0000f7000000000000009ddd0ef2a3a1", @ANYRES32=0x1, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32], 0x48) listen(r5, 0x5) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) sendmmsg(r8, &(0x7f0000000600)=[{{&(0x7f0000000500)=@hci={0x1f, 0x3, 0x1}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000580)="38fa52cf8247eb6bf6565893896a87cbedc2dd6f8446a72d3c92b2b2c671db90841f548c8ddaaa9e23da7b506514ac22c11c4fe785931b8338ecb9dca0d1dc4a3a81ff0999f7d700d519d7beb02eaf052dc9478e539cb702a12a2079f3922dce93d30150ac90a42e3dd37ca075a4b25d6831", 0x72}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[{0x10, 0x117, 0xfff}], 0x10}}, {{0x0, 0x0, 0x0}}], 0x3, 0x20000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x128, r3, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_KEY={0x18, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "a820b7b1fce201d7f017b5d6a9dba71b"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_KEY={0xc8, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "87e44d1bb15efb7ce7461302e0b25972"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "a27f705a5bd329c69241128efc2151aa20114afac1fd6413ea9eb73121b29302"}, @NL802154_KEY_ATTR_ID={0x68, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x101}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_MODE={0xffffffffffffffea, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x79af}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "cb4beac20ab068edc810d79aa754dee0cad5ba707762274307261cfdf2f650c6"}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x4}, 0x20040000) r11 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x0, 0x0, 0xb, 0x81, 0x46d, 0xfff9, 0x1, 0x0, 0x8, 'syz1\x00'}) r12 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T1(r12, 0x103, 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) shutdown(r0, 0x1) 3.431163871s ago: executing program 2 (id=2157): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x400, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x8000) (async) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x2, 0x70bd26, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8041}, 0x8084) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r4, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x22804}, 0x84) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) (rerun: 64) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x48000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}]}, 0x44}, 0x1, 0x0, 0x0, 0x54}, 0x8040) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'veth0_macvtap\x00'}) (async) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000a00)={0x0, 0x5, 0x5, 0x200, 0x0, 0x2800, 0x1, 0x7, {0x0, @in6={{0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}, 0x4, 0x3f2, 0xfffffff8, 0xf, 0x1}}, &(0x7f0000000ac0)=0xb0) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000c40)={0x0, @in6={{0xa, 0x4e22, 0xc2f, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}}, 0x28, 0x9}, &(0x7f0000000d00)=0x90) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000d40)={0x0, 0x7b83, 0x6}, &(0x7f0000000d80)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000e80)=[{&(0x7f0000000580)=@in6={0xa, 0x4e21, 0x5d, @empty, 0x4}, 0x1c, &(0x7f0000000980)=[{&(0x7f00000005c0)="4a6d15f2e8767d4fe644d782db", 0xd}, {&(0x7f0000000600)="306bdb8e260a7a84adc8be99858b6aca22d3c1900ca6323f6e0a7a135b1325aa57bafa7659e1a901d62f6cb60bff89a6176bb448479beaaa9e804975dcd2de2f9bc7779fac25234f1f98084393c7633a6f5ff43602a0aa68bd0053542b9d9ee38e60d2fb70f59204558e2966e21ae35123df593af0df62cfa12fd9bb6b9f62c7e0c74afd5c0ee53d34347984e89def6fc109389b5526ef1be479f8038c0cc9343e607cd4dcbf79cf16dd40afa8ad80eaec321d7f1e5e2c0263b245ecc69346639bbe75d07c3faa", 0xc7}, {&(0x7f0000000700)="b975cddf9bcef0d2053f02eb42b88db294ec5d7a6a5a0012016b56c1f6e54e43ab2393db794dcb280fc23ea1b3bdf49057b3a53992ad3c4503649adb7b596c6a14a6e8e1bdc090208edbc853e9884e25d688a781d66e8a8326c120011cbd1bca9b28feed83e2aac46b949b3187f95f4fe8641e6b52d7dba1074c11288494d97854c2c57b2bcd0ee20b04eb662f10d754345628", 0x93}, {&(0x7f00000007c0)="cc45a6ee88e64faa652b19c7881a3cd36161ab1c6641b89f6bb4de97febbde", 0x1f}, {&(0x7f0000000800)="25948f232d718ebc69a3edc30e6796ac5823d29bc3640228657dc95b7cddf247502d5b023ca70048b3c94d6aec2b0410ad421702d64f1fb69656a96d9d6c3322f4d864f6c10118366c2b4b8f369d6d3e33ff341af96c1196fe6da031985314ddf5ffecd3ff49070a00fcf9301367d7b95f9a011da01c812bcc2ca47b86aec987e472047e0cab46b166126a97eb53972fc9c5bd74d4a84181b678e787ad7065698d2ae7cec32ca359a63b483afa58482ff2b7b85a", 0xb4}, {&(0x7f00000008c0)="914b4dbc8c9af94c4388e43e12cabadb3549f247bf789c44f093f0c38f776ad8b1fa2fd7b5425b", 0x27}, {&(0x7f0000000900)="310f65ebddd996edbae293a2bff38dd5b295ba26bdb4df3f74dbaec4938e5bd805fe10438fced86be9968761f51fc2fd6d2f7acdcbf2d8324676ccf2a92f0d4c0548f6eae2fd0b6bf8442c96eb3de67e52cd056bfaa8549cde67ec4d7b8bd70c1d37a9062cdd481c79718dbec14c8c5d", 0x70}], 0x7, &(0x7f0000000b00)=[@prinfo={0x18, 0x84, 0x5, {0x10, 0x5}}, @sndinfo={0x20, 0x84, 0x2, {0x4, 0x5, 0x2231, 0x2, r7}}], 0x38, 0x40000}, {&(0x7f0000000b40)=@in={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000b80)="194ef6b4b177418850083e625f916e58faf07336850aa2dfb73d8a54e85f3c96270f0e95b30ea743469af8c1a199008c3b12376c7806c236326194d0e04c6231e3d5", 0x42}], 0x1, &(0x7f0000000dc0)=[@sndrcv={0x30, 0x84, 0x1, {0xd, 0xfff7, 0x1, 0xfd8a, 0x5, 0x7, 0xe, 0x2, r8}}, @authinfo={0x18, 0x84, 0x6, {0x2}}, @sndrcv={0x30, 0x84, 0x1, {0x3ff, 0x7fff, 0xd, 0x2, 0x85bb, 0x5, 0x8, 0x8, r9}}, @init={0x18, 0x84, 0x0, {0xa4df, 0x459a, 0x5, 0x25}}, @init={0x18, 0x84, 0x0, {0xb, 0x1590, 0x40, 0x2f8e}}], 0xa8, 0x90}], 0x2, 0x40000) r10 = socket$unix(0x1, 0x2, 0x0) (async) r11 = socket(0x27, 0x5, 0xff) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000f00)={0xffffffffffffffff, 0x9, 0x10}, 0xc) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x280000c, 0x13, r12, 0xbae71000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000f40)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x1040}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x40, r14, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x33}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x22000800}, 0x40) (async) ioctl$sock_inet_SIOCSIFDSTADDR(r13, 0x8918, &(0x7f00000010c0)={'geneve1\x00', {0x2, 0x4e23, @multicast1}}) (async) r15 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000001100)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, {0x2, 0x4e21, @empty}, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x200, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xb7e}) (async) ioctl$sock_SIOCGIFINDEX_80211(r15, 0x8933, &(0x7f00000011c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000001180), 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x34, r14, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r16}, @val={0xc, 0x99, {0x4, 0x7d}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x34}}, 0x801) (async, rerun: 64) listen(r2, 0x585) (async, rerun: 64) sendmsg$NL80211_CMD_STOP_NAN(r11, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x1c, r14, 0x2, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r16}, @void}}, ["", "", "", ""]}, 0x1c}}, 0x8004) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r10, 0x8982, &(0x7f00000013c0)={0x0, 'gretap0\x00', {}, 0x3}) 3.20033025s ago: executing program 2 (id=2158): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090a0000000000000000000065fd060000000e000200000040ab00090000000000000020020001000000000000000002000000000000050000f6ffff01000000e000"/79], 0x50}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}}, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r5, 0x400454cc, 0x2) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r6], 0x448}}, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmmsg$inet(r6, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@cgroup=r3, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r8, &(0x7f0000000180)=[{&(0x7f0000000000)="729804819e25bf1576ffe5c12a5207113f19d58313aba5de68f29cba9eabb7ffc8ffa6ff5e57bb2a1a4db35012bba91acdbe6123e6d1b0e9b009f638c2262aa71fdb6fdca6f5afd31515336efa", 0x4d}], 0x1) 3.123707064s ago: executing program 1 (id=2159): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_crypto(0x10, 0x3, 0x15) r2 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000001000)=""/16, 0x1030000, 0x1000, 0x5}, 0x20) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000019f55947153139acf97e4511a056a151b7da54f654bcf0899853df468b349c25c516e96b01dfe42e2037bbdd288da8862ae8d29931dee023f28fe9f3741431badd4012c00531016656f6ed710baa5834202cbd19c0f49d4ae139070910c83af751ea1e70af42b3fe1c6b565a29dd97ceccf49443ebf210fd1f9a2cc049fbf72bc1f18971ff18b9b615a3b183362574d26c441cd5a9076336fe4f15c6857cf8aec28ba16e86e2c8b324b782543e1f3768af90d8d79051e68caeab3535a96c180bd801142a4992ff674", @ANYRES16=r4, @ANYBLOB="0100000100f100000000040000000c000180060008"], 0x20}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00'}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r9, 0x8955, &(0x7f00000004c0)={{0x2, 0x0, @empty}, {0x6, @random="4019c30200"}, 0xffffff5d, {0x2, 0x0, @empty}}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="580000001000cff5000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="00000000e43f06003800128008000100687372002c00028008000200f2d20b7d2ebc5dc026c96a19b30d490c6aa34b24fc15d70a6437087ccc87b3c26d4803716ff4620e8099021feabe5b5196b5a13e2a2f32cea13adf3fb99813124bef17a8fd3091f036e64516b2146b4917cdc4b21846693d9114269f0f0290d1001a2c53986196e20bba0cd7", @ANYRES32=r7, @ANYBLOB="08000200", @ANYRES32=r7, @ANYBLOB="050007000100000005000600060000000500030000000000"], 0x58}, 0x1, 0x0, 0x0, 0x4850}, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000080)={0x77359400}, 0x17) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, 0x0, &(0x7f0000000040)) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x8, 0x7, [0x9, 0x7, 0x1, 0x73d0, 0x6, 0x5, 0x5]}, &(0x7f0000000080)=0x16) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) pwrite64(r10, 0x0, 0x0, 0x0) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r11, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}], 0x1c) shutdown(r11, 0x2) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r11, 0x84, 0x75, &(0x7f0000000800)={0x0, 0xa}, 0x8) 2.831448884s ago: executing program 2 (id=2160): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x20, 0x0, 0x1, 0xfffffffd, 0x0, {0x1, 0x6c00000000000000}, [{{0x8}, {0x4}}]}, 0x20}, 0x1, 0xf000, 0x0, 0x20000000}, 0x20040) (async) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="180100002d000100000000000000000006"], 0x118}], 0x1}, 0x180) (async) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$inet(r6, &(0x7f00000009c0)={&(0x7f0000000280)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000400)="191e6a36d56e277bc872504106e195d270b01d7f1440d895b3eaa0f7f02fa2", 0x1f}, {&(0x7f0000000580)="d007d8654926d20e2d384f3330786a705e02500d1998d49eea3db1143c779e37387ad50b2fc4e2dc6cd78bd667dabe2995e273782b167ed287616e5c172ebfae740dea7f3a1da0e456ea01810d8cafe1a080a13bad7fb901d8066ee5a584df7443d8973a78875b2f8cd415b1e59d83380fcf0a46e27dfbac0527077bc53b1a9a19b377d56ef0296f447b4fc0f5a724adc9e45270caced3a11ad756eebe11a9258a9b764ca48bfa652ae0504289c00c8ef9cc5365b5add45c7f5cb5c1ac", 0xbd}, {&(0x7f0000000640)="4111eb844ae687c3e672fab9f4d882eee4bd118a0ee29f43535fad5da244d67035e9a818233ddf1576bd7a7aa0ee729360c4bb6361592bad52559f356f876ec959fa84ce14f8047508b56fd814e23c3b4aff088d851d5a0669ce84cba4b9a196dc6b6f675e729899277cb51fe66f", 0x6e}, {&(0x7f0000000440)="38464df0de19e382403f998cc613ec8af29719e1905f", 0x16}], 0x4, &(0x7f0000000740)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0xf}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0x90}, 0x801) (async) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000020071120b000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2a, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt(r8, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r8, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x5, 0x1, "fd"}, 0x9) (async) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x23, &(0x7f0000000340)={0x0, 0x5}, 0x8) (async) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000a00), 0x9) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x7}, {0xb, 0x6, 0x0, 0x0, 0x3, 0x3}, 0x80, 0x39}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8004}, 0x4000080) (async) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) (async) sendto$inet6(r3, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r10, 0x0, 0x72, 0x7}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) setsockopt$packet_int(r3, 0x107, 0xe, &(0x7f00000000c0)=0x7fff, 0x4) 2.703134903s ago: executing program 1 (id=2161): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d00)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0xc00d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.599577507s ago: executing program 1 (id=2162): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r1, 0xfffffffffffffef0, &(0x7f0000000600)}, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000004000000080000002200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000076a341e300"/28], 0x48) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0xe5, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) socket$kcm(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r6) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a00)=ANY=[@ANYBLOB="14010000", @ANYRES16=r7, @ANYBLOB="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"], 0x114}, 0x1, 0x0, 0x0, 0x20084880}, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[], 0x20}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000003c0)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000140)=0xa000, 0x4) accept(0xffffffffffffffff, &(0x7f0000001080)=@sco, &(0x7f0000001100)=0x80) socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) 2.523978633s ago: executing program 2 (id=2163): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000200), &(0x7f0000000280)='%pB \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) (fail_nth: 3) 1.970615898s ago: executing program 2 (id=2164): syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x20, r3, 0x101, 0x0, 0x0, {{0x19}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x4}]}, 0x20}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xb9) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map=r6, r5, 0x5, 0x0, 0x0, @void, @value}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map=r6, r7, 0x4, 0x0, 0x0, @void, @value}, 0x10) r8 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r6, &(0x7f0000000240), &(0x7f0000000180)=@tcp=r8}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r6, &(0x7f0000000440), &(0x7f00000002c0)=@tcp6=r8}, 0x20) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYRES64=r9, @ANYRES16=r9, @ANYRES64=0x0, @ANYRES32=r10, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500040000001400040073"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.579686118s ago: executing program 2 (id=2165): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(r2, &(0x7f0000008080)={0x0, 0x0, &(0x7f0000008040)={&(0x7f0000000680)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x20}, 0xc0) socket$nl_generic(0x10, 0x3, 0x10) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0xffffffffffffffff, {}, 0xff}, 0x18) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x1, {0x3, 0xf0, 0x1}, 0xfd}, 0x18) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000500)=@gcm_256={{0x303}, "125d89ea980434d1", "150bc50a728deaecb4af62493b0da4a9ba50134c8fdb2a4440d5cc5ddfbfde52", "8eab4310", "f7f5d61363ab30e2"}, 0x38) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) sendfile(r4, r5, 0x0, 0x200009) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @cgroup_sock=0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001940)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0200000002"], 0x10) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r10, r11, 0x2, 0x2, 0x0, @void, @value}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r8, r9, 0x2, 0x2, 0x0, @void, @value}, 0x10) socketpair(0x2, 0x3, 0x2, &(0x7f0000000380)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x4) 1.153689394s ago: executing program 32 (id=2165): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(r2, &(0x7f0000008080)={0x0, 0x0, &(0x7f0000008040)={&(0x7f0000000680)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x20}, 0xc0) socket$nl_generic(0x10, 0x3, 0x10) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0xffffffffffffffff, {}, 0xff}, 0x18) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x1, {0x3, 0xf0, 0x1}, 0xfd}, 0x18) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000500)=@gcm_256={{0x303}, "125d89ea980434d1", "150bc50a728deaecb4af62493b0da4a9ba50134c8fdb2a4440d5cc5ddfbfde52", "8eab4310", "f7f5d61363ab30e2"}, 0x38) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) sendfile(r4, r5, 0x0, 0x200009) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @cgroup_sock=0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001940)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0200000002"], 0x10) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r10, r11, 0x2, 0x2, 0x0, @void, @value}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r8, r9, 0x2, 0x2, 0x0, @void, @value}, 0x10) socketpair(0x2, 0x3, 0x2, &(0x7f0000000380)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x4) 730.790274ms ago: executing program 4 (id=1061): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000002f000b00000400000000000004"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, 0x3b, 0x107, 0x100, 0x0, {0x1, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x24}}, 0x20010804) (async) r3 = socket(0x1e, 0x4, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r6, 0x89fb, &(0x7f0000000180)={'sit0\x00', 0x0}) (async) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) (async) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) recvmmsg$unix(r3, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) recvmsg$can_j1939(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/240, 0xf0}], 0x1}, 0x20) (async) close(r7) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r9, &(0x7f0000000000)={0x1f, 0x6, @any, 0x0, 0x1}, 0xe) (async) connect$bt_l2cap(r9, &(0x7f0000000680)={0x1f, 0x20, @none}, 0xe) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000c0000001800018014000200766574683100000000000000000000001800038008"], 0x44}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, 0x27, 0x8, 0x70bd2c, 0x25dfdbfd, {0x15}, [@generic="2c488b83ff1b07c66ec9f089a74dae647998efdc090b896a"]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) 730.084539ms ago: executing program 33 (id=1061): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000002f000b00000400000000000004"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, 0x3b, 0x107, 0x100, 0x0, {0x1, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x24}}, 0x20010804) (async) r3 = socket(0x1e, 0x4, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r6, 0x89fb, &(0x7f0000000180)={'sit0\x00', 0x0}) (async) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) (async) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) recvmmsg$unix(r3, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) recvmsg$can_j1939(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/240, 0xf0}], 0x1}, 0x20) (async) close(r7) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r9, &(0x7f0000000000)={0x1f, 0x6, @any, 0x0, 0x1}, 0xe) (async) connect$bt_l2cap(r9, &(0x7f0000000680)={0x1f, 0x20, @none}, 0xe) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000c0000001800018014000200766574683100000000000000000000001800038008"], 0x44}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, 0x27, 0x8, 0x70bd2c, 0x25dfdbfd, {0x15}, [@generic="2c488b83ff1b07c66ec9f089a74dae647998efdc090b896a"]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) 203.493029ms ago: executing program 1 (id=2168): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a0102e9ff000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404cf378042f27d3e08f90a3ffe32f53baa749fe0790a0d0e1f76d056d656332eca6d822a42983bf3e45b0c80e2d273f6cbc7cb4f77cb7abd3779c86449b0ee849149b77c5d6ab2114c0f"], 0xfc}}, 0x0) 0s ago: executing program 1 (id=2169): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) (async) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r2, @ANYBLOB="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"], 0x1c8}}, 0x0) (async) sendto$inet6(r0, &(0x7f0000000180)="c5", 0x1, 0x40080, &(0x7f00000000c0)={0xa, 0x4e24, 0x40, @local, 0x13}, 0x1c) (async) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x1000, 0x400, 0x3}, &(0x7f0000000140)=0x10) kernel console output (not intermixed with test programs): z.3.1570'. [ 260.701400][T11774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.720981][T11855] smc: net device bond0 applied user defined pnetid SYZ0 [ 260.751610][T11857] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1569'. [ 260.759711][T11860] smc: net device bond0 erased user defined pnetid SYZ0 [ 260.762385][T11857] netem: unknown loss type 13 [ 260.795064][T11857] netem: change failed [ 260.853820][T11774] team0: Port device team_slave_0 added [ 260.874389][T11774] team0: Port device team_slave_1 added [ 261.029868][T11868] x_tables: duplicate underflow at hook 1 [ 261.149259][T11774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.159421][ T5844] Bluetooth: hci4: command tx timeout [ 261.169531][T11774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.211557][T11871] netlink: 'syz.0.1573': attribute type 1 has an invalid length. [ 261.238914][T11774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.281019][T11875] nbd: must specify a size in bytes for the device [ 261.290238][T11774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.335765][T11774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.376849][T11774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.401234][T11879] FAULT_INJECTION: forcing a failure. [ 261.401234][T11879] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 261.435044][T11879] CPU: 0 UID: 0 PID: 11879 Comm: syz.0.1576 Not tainted 6.14.0-rc3-syzkaller-00702-gb66e19dcf684 #0 [ 261.435076][T11879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 261.435089][T11879] Call Trace: [ 261.435097][T11879] [ 261.435106][T11879] dump_stack_lvl+0x241/0x360 [ 261.435143][T11879] ? __pfx_dump_stack_lvl+0x10/0x10 [ 261.435166][T11879] ? __pfx__printk+0x10/0x10 [ 261.435189][T11879] ? __pfx_lock_release+0x10/0x10 [ 261.435230][T11879] should_fail_ex+0x40a/0x550 [ 261.435265][T11879] _copy_from_user+0x2d/0xb0 [ 261.435292][T11879] copy_msghdr_from_user+0xae/0x680 [ 261.435317][T11879] ? __pfx___might_resched+0x10/0x10 [ 261.435348][T11879] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 261.435371][T11879] ? __fget_files+0x2a/0x410 [ 261.435405][T11879] ? __sys_sendmmsg+0x392/0x720 [ 261.435437][T11879] ? __might_fault+0xaa/0x120 [ 261.435462][T11879] __sys_sendmmsg+0x32b/0x720 [ 261.435505][T11879] ? __pfx___sys_sendmmsg+0x10/0x10 [ 261.435550][T11879] ? __pfx_lock_release+0x10/0x10 [ 261.435579][T11879] ? kstrtouint_from_user+0x128/0x190 [ 261.435624][T11879] ? ksys_write+0x22a/0x2b0 [ 261.435645][T11879] ? __pfx_lock_release+0x10/0x10 [ 261.435683][T11879] ? sb_end_write+0xe9/0x1c0 [ 261.435712][T11879] ? vfs_write+0x7fa/0xd10 [ 261.435735][T11879] ? __mutex_unlock_slowpath+0x227/0x800 [ 261.435792][T11879] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 261.435827][T11879] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 261.435860][T11879] ? do_syscall_64+0x100/0x230 [ 261.435892][T11879] __x64_sys_sendmmsg+0xa0/0xb0 [ 261.435933][T11879] do_syscall_64+0xf3/0x230 [ 261.435961][T11879] ? clear_bhb_loop+0x35/0x90 [ 261.435994][T11879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.436033][T11879] RIP: 0033:0x7fb23ef8d169 [ 261.436051][T11879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.436067][T11879] RSP: 002b:00007fb23fe87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 261.436093][T11879] RAX: ffffffffffffffda RBX: 00007fb23f1a5fa0 RCX: 00007fb23ef8d169 [ 261.436108][T11879] RDX: 040000000000009f RSI: 00004000000002c0 RDI: 0000000000000005 [ 261.436122][T11879] RBP: 00007fb23fe87090 R08: 0000000000000000 R09: 0000000000000000 [ 261.436134][T11879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.436146][T11879] R13: 0000000000000000 R14: 00007fb23f1a5fa0 R15: 00007ffc73934e08 [ 261.436176][T11879] [ 261.757414][T11882] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1577'. [ 261.771992][T11774] hsr_slave_0: entered promiscuous mode [ 261.778515][T11774] hsr_slave_1: entered promiscuous mode [ 261.785046][T11774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 261.792785][T11774] Cannot create hsr debugfs directory [ 261.894405][T11887] bridge0: port 4(ip6gretap0) entered blocking state [ 261.901365][T11887] bridge0: port 4(ip6gretap0) entered forwarding state [ 261.912899][T11887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.922015][T11887] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.939447][T11887] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 262.038861][ T5924] lo speed is unknown, defaulting to 1000 [ 262.045433][T11888] netlink: 'syz.0.1580': attribute type 1 has an invalid length. [ 262.091333][T11884] lo speed is unknown, defaulting to 1000 [ 262.472649][T11907] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 262.540327][T11909] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.676656][T11884] lo speed is unknown, defaulting to 1000 [ 263.150662][T11923] FAULT_INJECTION: forcing a failure. [ 263.150662][T11923] name failslab, interval 1, probability 0, space 0, times 0 [ 263.199534][T11923] CPU: 1 UID: 0 PID: 11923 Comm: syz.2.1590 Not tainted 6.14.0-rc3-syzkaller-00702-gb66e19dcf684 #0 [ 263.199568][T11923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 263.199580][T11923] Call Trace: [ 263.199587][T11923] [ 263.199594][T11923] dump_stack_lvl+0x241/0x360 [ 263.199625][T11923] ? __pfx_dump_stack_lvl+0x10/0x10 [ 263.199647][T11923] ? __pfx__printk+0x10/0x10 [ 263.199669][T11923] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 263.199700][T11923] ? __pfx___might_resched+0x10/0x10 [ 263.199735][T11923] ? aa_label_sk_perm+0x4f3/0x6c0 [ 263.199768][T11923] should_fail_ex+0x40a/0x550 [ 263.199802][T11923] should_failslab+0xac/0x100 [ 263.199832][T11923] kmem_cache_alloc_node_noprof+0x77/0x380 [ 263.199861][T11923] ? __alloc_skb+0x1c3/0x440 [ 263.199893][T11923] __alloc_skb+0x1c3/0x440 [ 263.199926][T11923] ? __pfx___alloc_skb+0x10/0x10 [ 263.199965][T11923] netlink_sendmsg+0x634/0xcb0 [ 263.200001][T11923] ? __pfx_netlink_sendmsg+0x10/0x10 [ 263.200029][T11923] ? aa_sock_msg_perm+0x91/0x160 [ 263.200065][T11923] ? __pfx_netlink_sendmsg+0x10/0x10 [ 263.200086][T11923] __sock_sendmsg+0x221/0x270 [ 263.200114][T11923] ____sys_sendmsg+0x53a/0x860 [ 263.200155][T11923] ? __pfx_____sys_sendmsg+0x10/0x10 [ 263.200185][T11923] ? __fget_files+0x2a/0x410 [ 263.200219][T11923] ? __sys_sendmmsg+0x392/0x720 [ 263.200249][T11923] ? __might_fault+0xaa/0x120 [ 263.200275][T11923] __sys_sendmmsg+0x36a/0x720 [ 263.200318][T11923] ? __pfx___sys_sendmmsg+0x10/0x10 [ 263.200361][T11923] ? __pfx_lock_release+0x10/0x10 [ 263.200391][T11923] ? kstrtouint_from_user+0x128/0x190 [ 263.200437][T11923] ? ksys_write+0x22a/0x2b0 [ 263.200459][T11923] ? __pfx_lock_release+0x10/0x10 [ 263.200496][T11923] ? sb_end_write+0xe9/0x1c0 [ 263.200536][T11923] ? vfs_write+0x7fa/0xd10 [ 263.200559][T11923] ? __mutex_unlock_slowpath+0x227/0x800 [ 263.200615][T11923] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 263.200648][T11923] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 263.200679][T11923] ? do_syscall_64+0x100/0x230 [ 263.200717][T11923] __x64_sys_sendmmsg+0xa0/0xb0 [ 263.200749][T11923] do_syscall_64+0xf3/0x230 [ 263.200777][T11923] ? clear_bhb_loop+0x35/0x90 [ 263.200809][T11923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.200836][T11923] RIP: 0033:0x7f17d878d169 [ 263.200855][T11923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.200871][T11923] RSP: 002b:00007f17d9512038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 263.200893][T11923] RAX: ffffffffffffffda RBX: 00007f17d89a5fa0 RCX: 00007f17d878d169 [ 263.200907][T11923] RDX: 040000000000009f RSI: 00004000000002c0 RDI: 0000000000000005 [ 263.200920][T11923] RBP: 00007f17d9512090 R08: 0000000000000000 R09: 0000000000000000 [ 263.200932][T11923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.200944][T11923] R13: 0000000000000000 R14: 00007f17d89a5fa0 R15: 00007ffd6f3c80b8 [ 263.200973][T11923] [ 263.239403][ T5844] Bluetooth: hci4: command tx timeout [ 263.562467][T11774] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 263.564439][T11931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1594'. [ 263.578475][T11931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1594'. [ 263.626132][T11774] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 263.672244][T11774] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 263.771348][T11774] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 263.817837][T11940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1595'. [ 263.929862][T11942] bond0: left allmulticast mode [ 263.937482][T11942] team0: Port device macvlan2 removed [ 263.943004][T11945] siw: device registration error -23 [ 263.956349][T11940] netlink: 'syz.1.1595': attribute type 11 has an invalid length. [ 263.984819][T11942] vlan4: entered allmulticast mode [ 264.183814][T11774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.213735][T11952] netlink: 'syz.0.1598': attribute type 27 has an invalid length. [ 264.226313][T11774] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.243033][T11952] netlink: 'syz.0.1598': attribute type 11 has an invalid length. [ 264.257165][T11956] netlink: 'syz.0.1598': attribute type 11 has an invalid length. [ 264.268006][T11955] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1600'. [ 264.300644][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.307807][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.343573][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.350867][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.763476][T11973] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 264.777645][T11974] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 264.798376][T11774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.931125][T11980] netlink: 'syz.3.1605': attribute type 4 has an invalid length. [ 264.957805][T11980] netlink: 'syz.3.1605': attribute type 4 has an invalid length. [ 265.174237][T11990] netlink: 'syz.2.1609': attribute type 5 has an invalid length. [ 265.195260][T11990] ip6erspan0: entered promiscuous mode [ 265.202114][T11988] IPVS: set_ctl: invalid protocol: 136 127.0.0.1:20000 [ 265.227422][T11774] veth0_vlan: entered promiscuous mode [ 265.268751][T11774] veth1_vlan: entered promiscuous mode [ 265.321268][T11994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1608'. [ 265.350590][T11774] veth0_macvtap: entered promiscuous mode [ 265.383488][T11774] veth1_macvtap: entered promiscuous mode [ 265.450626][T11774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.471774][T11774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.516036][T12003] FAULT_INJECTION: forcing a failure. [ 265.516036][T12003] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.534053][T11774] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.560038][ T5844] Bluetooth: hci4: command tx timeout [ 265.565592][T12003] CPU: 1 UID: 0 PID: 12003 Comm: syz.3.1614 Not tainted 6.14.0-rc3-syzkaller-00702-gb66e19dcf684 #0 [ 265.565624][T12003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 265.565636][T12003] Call Trace: [ 265.565643][T12003] [ 265.565652][T12003] dump_stack_lvl+0x241/0x360 [ 265.565690][T12003] ? __pfx_dump_stack_lvl+0x10/0x10 [ 265.565722][T12003] ? __pfx__printk+0x10/0x10 [ 265.565743][T12003] ? __pfx_lock_release+0x10/0x10 [ 265.565779][T12003] should_fail_ex+0x40a/0x550 [ 265.565809][T12003] _copy_from_iter+0x1df/0x1c40 [ 265.565832][T12003] ? __virt_addr_valid+0x183/0x530 [ 265.565854][T12003] ? __pfx_lock_release+0x10/0x10 [ 265.565891][T12003] ? __alloc_skb+0x28f/0x440 [ 265.565918][T12003] ? __pfx__copy_from_iter+0x10/0x10 [ 265.565942][T12003] ? __virt_addr_valid+0x183/0x530 [ 265.565960][T12003] ? __virt_addr_valid+0x183/0x530 [ 265.565978][T12003] ? __virt_addr_valid+0x45f/0x530 [ 265.565997][T12003] ? __phys_addr_symbol+0x2f/0x70 [ 265.566027][T12003] ? __check_object_size+0x47a/0x730 [ 265.566058][T12003] netlink_sendmsg+0x742/0xcb0 [ 265.566093][T12003] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.566119][T12003] ? aa_sock_msg_perm+0x91/0x160 [ 265.566153][T12003] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.566174][T12003] __sock_sendmsg+0x221/0x270 [ 265.566200][T12003] ____sys_sendmsg+0x53a/0x860 [ 265.566239][T12003] ? __pfx_____sys_sendmsg+0x10/0x10 [ 265.566267][T12003] ? __fget_files+0x2a/0x410 [ 265.566299][T12003] ? __sys_sendmmsg+0x392/0x720 [ 265.566328][T12003] ? __might_fault+0xaa/0x120 [ 265.566353][T12003] __sys_sendmmsg+0x36a/0x720 [ 265.566412][T12003] ? __pfx___sys_sendmmsg+0x10/0x10 [ 265.566456][T12003] ? __pfx_lock_release+0x10/0x10 [ 265.566485][T12003] ? kstrtouint_from_user+0x128/0x190 [ 265.566531][T12003] ? ksys_write+0x22a/0x2b0 [ 265.566552][T12003] ? __pfx_lock_release+0x10/0x10 [ 265.566590][T12003] ? sb_end_write+0xe9/0x1c0 [ 265.566620][T12003] ? vfs_write+0x7fa/0xd10 [ 265.566644][T12003] ? __mutex_unlock_slowpath+0x227/0x800 [ 265.566709][T12003] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 265.566744][T12003] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 265.566777][T12003] ? do_syscall_64+0x100/0x230 [ 265.566810][T12003] __x64_sys_sendmmsg+0xa0/0xb0 [ 265.566843][T12003] do_syscall_64+0xf3/0x230 [ 265.566872][T12003] ? clear_bhb_loop+0x35/0x90 [ 265.566905][T12003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.566934][T12003] RIP: 0033:0x7f5b5958d169 [ 265.566953][T12003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.566971][T12003] RSP: 002b:00007f5b5a370038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 265.566994][T12003] RAX: ffffffffffffffda RBX: 00007f5b597a5fa0 RCX: 00007f5b5958d169 [ 265.567010][T12003] RDX: 040000000000009f RSI: 00004000000002c0 RDI: 0000000000000005 [ 265.567025][T12003] RBP: 00007f5b5a370090 R08: 0000000000000000 R09: 0000000000000000 [ 265.567038][T12003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 265.567050][T12003] R13: 0000000000000000 R14: 00007f5b597a5fa0 R15: 00007ffe7138d658 [ 265.567081][T12003] [ 265.699464][T11774] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.922136][T11774] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.931384][T11774] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.968667][T12009] tipc: Enabling of bearer <Þ|i³:æ> rejected, media not registered [ 266.111722][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.124340][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.175843][T12028] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 266.184693][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.204259][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.463405][T12039] dvmrp0: entered allmulticast mode [ 266.729952][T12050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1623'. [ 266.790778][T12050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1623'. [ 266.811207][T12050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1623'. [ 266.900444][T12057] lo speed is unknown, defaulting to 1000 [ 267.027122][T12064] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1628'. [ 267.050452][T12057] lo speed is unknown, defaulting to 1000 [ 267.093395][T12067] ieee802154 phy0 wpan0: encryption failed: -22 [ 267.368150][T12076] netlink: 'syz.2.1632': attribute type 3 has an invalid length. [ 267.506141][T12087] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1633'. [ 267.515664][T12087] netlink: 'syz.3.1633': attribute type 1 has an invalid length. [ 267.883819][ T3478] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.947005][ T3478] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.023188][ T3478] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.088521][ T3478] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.166060][ T3478] bridge_slave_1: left allmulticast mode [ 268.172103][ T3478] bridge_slave_1: left promiscuous mode [ 268.177804][ T3478] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.187674][ T3478] bridge_slave_0: left allmulticast mode [ 268.193757][ T3478] bridge_slave_0: left promiscuous mode [ 268.199793][ T3478] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.894245][ T3478] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.923750][ T3478] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.951348][ T3478] bond0 (unregistering): Released all slaves [ 268.975789][T12113] tipc: Started in network mode [ 268.997638][T12113] tipc: Node identity 00000000000000000000ffffac14142, cluster identity 4711 [ 269.008328][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 269.032355][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 269.032615][T12113] tipc: Enabling of bearer rejected, failed to enable media [ 269.070385][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 269.081834][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 269.090300][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 269.097695][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 269.248568][T12117] lo speed is unknown, defaulting to 1000 [ 269.280514][T12122] syzkaller1: entered promiscuous mode [ 269.309358][T12122] syzkaller1: entered allmulticast mode [ 269.355600][T12128] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1647'. [ 269.408036][T12128] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1647'. [ 269.592776][T12117] lo speed is unknown, defaulting to 1000 [ 269.592866][T12136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1649'. [ 269.654255][T12143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1651'. [ 269.754387][T12149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1653'. [ 269.821548][T12149] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.829917][T12149] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.838118][T12149] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.846450][T12149] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.945589][T12149] vxlan1: entered promiscuous mode [ 269.951168][T12149] vxlan1: entered allmulticast mode [ 270.051119][ T3478] hsr_slave_0: left promiscuous mode [ 270.063445][ T3478] hsr_slave_1: left promiscuous mode [ 270.070978][ T3478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.078510][ T3478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.121733][ T3478] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.142875][ T3478] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.231086][ T3478] veth1_macvtap: left promiscuous mode [ 270.236800][ T3478] veth0_macvtap: left promiscuous mode [ 270.242733][ T3478] veth1_vlan: left promiscuous mode [ 270.248103][ T3478] veth0_vlan: left promiscuous mode [ 270.735358][ T3478] team0 (unregistering): Port device team_slave_1 removed [ 270.784534][ T3478] team0 (unregistering): Port device team_slave_0 removed [ 271.162267][ T5844] Bluetooth: hci4: command tx timeout [ 271.325999][T12183] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 271.336711][T12183] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 271.654606][T12117] chnl_net:caif_netlink_parms(): no params data found [ 271.818713][T12200] netlink: 'syz.2.1663': attribute type 1 has an invalid length. [ 271.940486][T12206] __nla_validate_parse: 7 callbacks suppressed [ 271.940506][T12206] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1665'. [ 272.105424][T12117] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.129418][T12117] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.136701][T12117] bridge_slave_0: entered allmulticast mode [ 272.150519][T12117] bridge_slave_0: entered promiscuous mode [ 272.180231][T12117] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.187598][T12117] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.213285][T12117] bridge_slave_1: entered allmulticast mode [ 272.241533][T12117] bridge_slave_1: entered promiscuous mode [ 272.336196][T12117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.363087][T12117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.474694][T12117] team0: Port device team_slave_0 added [ 272.508584][T12117] team0: Port device team_slave_1 added [ 272.593761][T12117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.628306][T12117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.692488][T12238] netlink: 304 bytes leftover after parsing attributes in process `syz.2.1674'. [ 272.719429][T12117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.732303][T12117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.743938][T12117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.779177][T12117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.795139][T12245] ip6tnl2: entered promiscuous mode [ 272.963928][T12117] hsr_slave_0: entered promiscuous mode [ 272.990445][T12117] hsr_slave_1: entered promiscuous mode [ 272.996603][T12117] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 273.039324][T12117] Cannot create hsr debugfs directory [ 273.092815][T12258] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1680'. [ 273.240019][ T5844] Bluetooth: hci4: command tx timeout [ 273.258788][T12268] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1683'. [ 273.443645][T12277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1687'. [ 273.664755][T12286] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1689'. [ 273.682698][T12286] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1689'. [ 273.923638][T12117] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 273.973953][T12117] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 273.994382][T12117] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 274.020302][T12117] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 274.232304][T12117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.272779][T12117] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.298205][T10319] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.305411][T10319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.335696][T12303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1694'. [ 274.348775][T12303] openvswitch: netlink: Tunnel attr 7 has unexpected len 5032 expected 0 [ 274.352743][T10319] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.364441][T10319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.417157][T12304] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 49252 - 0 [ 274.445639][T12304] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 51156 - 0 [ 274.550891][T12304] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 49252 - 0 [ 274.561077][T12304] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 51156 - 0 [ 274.632124][T12304] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 49252 - 0 [ 274.649586][T12304] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 51156 - 0 [ 274.743478][T12304] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 49252 - 0 [ 274.754026][T12304] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 51156 - 0 [ 274.887329][T12304] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 49252 - 0 [ 274.895897][T12304] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 51156 - 0 [ 274.916407][T12304] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 49252 - 0 [ 274.925664][T12304] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 51156 - 0 [ 274.945197][T12304] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 49252 - 0 [ 274.945283][T12314] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1697'. [ 274.953742][T12304] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 51156 - 0 [ 275.001417][T12304] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 49252 - 0 [ 275.030088][T12304] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 51156 - 0 [ 275.200090][T12117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.211230][T12324] ip6gretap0: left allmulticast mode [ 275.216577][T12324] ip6gretap0: left promiscuous mode [ 275.280839][T12324] bridge0: port 1(ip6gretap0) entered disabled state [ 275.306053][T12324] bond3: (slave batadv1): Releasing active interface [ 275.329293][ T5844] Bluetooth: hci4: command tx timeout [ 275.377508][T12324] bond3: (slave batadv1): the permanent HWaddr of slave - e2:a4:fa:81:dd:1e - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 275.476753][T12345] openvswitch: netlink: ERSPAN option length err (len 4096, max 255). [ 275.480311][T12324] bond3: (slave batadv2): making interface the new active one [ 275.514077][T12345] netlink: 'syz.3.1702': attribute type 10 has an invalid length. [ 275.526090][T12324] bond3: (slave batadv2): Releasing active interface [ 275.536269][T12324] bond3: (slave veth3): Releasing active interface [ 275.548083][T12324] team0: Port device bridge5 removed [ 275.554153][T12324] batadv3: left allmulticast mode [ 275.559552][T12324] batadv3: left promiscuous mode [ 275.564921][T12324] bridge0: port 2(batadv3) entered disabled state [ 275.611719][T12345] mac80211_hwsim hwsim4 wlan1: left promiscuous mode [ 275.622603][T12345] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 275.634841][T12345] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 275.686870][T12349] vlan2: entered allmulticast mode [ 275.747289][T12355] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 275.921472][T12366] netlink: 324 bytes leftover after parsing attributes in process `syz.3.1707'. [ 276.035979][T12117] veth0_vlan: entered promiscuous mode [ 276.059154][T12117] veth1_vlan: entered promiscuous mode [ 276.134576][T12117] veth0_macvtap: entered promiscuous mode [ 276.255583][T12117] veth1_macvtap: entered promiscuous mode [ 276.315631][T12117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.357363][T12117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.370258][T12117] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.380842][T12117] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.392240][T12117] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.401825][T12117] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.614836][T12394] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 276.648976][T12395] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 276.811103][T12398] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.854704][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.863110][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.921065][T12398] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.940894][ T3505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.948946][ T3505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.970189][T12398] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 277.003466][T12398] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 277.016238][T12398] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 277.050111][T12398] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 277.082937][T12398] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 277.771984][ T3505] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.895300][ T3505] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.998339][ T3505] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.227868][ T3505] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.416911][ T3505] bridge_slave_1: left allmulticast mode [ 278.422898][ T3505] bridge_slave_1: left promiscuous mode [ 278.428641][ T3505] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.437292][ T3505] bridge_slave_0: left allmulticast mode [ 278.443593][ T3505] bridge_slave_0: left promiscuous mode [ 278.449564][ T3505] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.100246][ T3505] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 279.123936][ T3505] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.145354][ T3505] bond0 (unregistering): Released all slaves [ 279.169082][T12429] __nla_validate_parse: 2 callbacks suppressed [ 279.169103][T12429] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1721'. [ 279.200294][T12425] bridge_slave_1: entered allmulticast mode [ 279.328694][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 279.339829][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 279.349984][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 279.408634][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 279.419538][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 279.426904][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 279.554852][T12440] lo speed is unknown, defaulting to 1000 [ 279.705990][T12457] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1733'. [ 279.830830][T12457] netlink: 'syz.3.1733': attribute type 1 has an invalid length. [ 279.845194][T12457] netlink: 'syz.3.1733': attribute type 1 has an invalid length. [ 279.878676][T12440] lo speed is unknown, defaulting to 1000 [ 279.973301][T12470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1738'. [ 280.113168][T12472] pim6reg: entered allmulticast mode [ 280.127313][T12474] team0: left promiscuous mode [ 280.139753][T12474] team0: entered allmulticast mode [ 280.145156][T12476] bridge0: left allmulticast mode [ 280.164347][T12476] pim6reg: left allmulticast mode [ 280.288142][ T3505] hsr_slave_0: left promiscuous mode [ 280.304043][ T3505] hsr_slave_1: left promiscuous mode [ 280.318257][ T3505] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.326050][ T3505] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.342534][ T3505] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.363277][T12486] xt_bpf: check failed: parse error [ 280.375382][ T3505] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.410608][T12486] netlink: 'syz.2.1743': attribute type 13 has an invalid length. [ 280.420850][T12491] sctp: [Deprecated]: syz.3.1741 (pid 12491) Use of int in max_burst socket option deprecated. [ 280.420850][T12491] Use struct sctp_assoc_value instead [ 280.456466][ T3505] veth1_macvtap: left promiscuous mode [ 280.462361][ T3505] veth0_macvtap: left promiscuous mode [ 280.467979][ T3505] veth1_vlan: left promiscuous mode [ 280.473893][ T3505] veth0_vlan: left promiscuous mode [ 280.502273][T12487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 280.575956][T12494] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1743'. [ 280.971556][ T3505] team0 (unregistering): Port device team_slave_1 removed [ 281.017200][ T3505] team0 (unregistering): Port device team_slave_0 removed [ 281.447295][T12486] macvtap0: entered promiscuous mode [ 281.455518][T12486] macvtap0: refused to change device tx_queue_len [ 281.471296][T12493] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 281.489787][ T54] Bluetooth: hci4: command tx timeout [ 281.662020][T12503] xt_connbytes: Forcing CT accounting to be enabled [ 281.676691][T12503] --map-set only usable from mangle table [ 281.686500][T12440] chnl_net:caif_netlink_parms(): no params data found [ 281.706041][T12504] netlink: 'syz.1.1744': attribute type 11 has an invalid length. [ 281.958349][T12522] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1749'. [ 282.027110][T12522] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1749'. [ 282.030564][T12440] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.051542][T12440] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.059141][T12440] bridge_slave_0: entered allmulticast mode [ 282.061842][T12522] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1749'. [ 282.073192][T12440] bridge_slave_0: entered promiscuous mode [ 282.090247][T12522] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1749'. [ 282.120088][T12440] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.127703][T12440] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.141007][T12440] bridge_slave_1: entered allmulticast mode [ 282.150503][T12522] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1749'. [ 282.155244][T12440] bridge_slave_1: entered promiscuous mode [ 282.162395][T12522] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1749'. [ 282.234856][T12440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.321347][T12440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.424051][T12440] team0: Port device team_slave_0 added [ 282.462153][T12440] team0: Port device team_slave_1 added [ 282.573349][T12548] netlink: 'syz.3.1754': attribute type 8 has an invalid length. [ 282.611640][T12440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.618650][T12440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.701655][T12440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.724995][T12440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.739519][T12440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.789315][T12440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.898039][T12440] hsr_slave_0: entered promiscuous mode [ 282.905096][T12440] hsr_slave_1: entered promiscuous mode [ 282.915475][T12440] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 282.929409][T12440] Cannot create hsr debugfs directory [ 282.988976][T12565] lo speed is unknown, defaulting to 1000 [ 283.019111][T12569] bond0: (slave syz_tun): Releasing backup interface [ 283.028945][T12569] ip6gretap0: left allmulticast mode [ 283.036159][T12569] ip6gretap0: left promiscuous mode [ 283.049452][T12569] bridge0: port 4(ip6gretap0) entered disabled state [ 283.083180][T12569] team0: Port device dummy0 removed [ 283.109684][T12569] bond0: (slave batadv0): Releasing backup interface [ 283.118034][T12569] bridge_slave_0: left allmulticast mode [ 283.123886][T12569] bridge_slave_0: left promiscuous mode [ 283.129970][T12569] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.139029][T12569] bridge_slave_1: left allmulticast mode [ 283.157514][T12569] bridge_slave_1: left promiscuous mode [ 283.170006][T12569] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.195633][T12569] bond0: (slave bond_slave_0): Releasing backup interface [ 283.214152][T12569] bond0: (slave bond_slave_1): Releasing backup interface [ 283.242737][T12569] team0: Port device team_slave_0 removed [ 283.249103][T12569] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.269792][T12569] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.279942][T12569] hsr0: left allmulticast mode [ 283.289144][T12569] hsr_slave_0: left allmulticast mode [ 283.309285][T12569] hsr_slave_1: left allmulticast mode [ 283.314938][T12569] hsr0: left promiscuous mode [ 283.323721][T12569] bridge0: port 3(hsr0) entered disabled state [ 283.355617][T12569] bond2: (slave macvlan0): Releasing backup interface [ 283.423234][T12569] team0: Port device bridge3 removed [ 283.503341][T12565] lo speed is unknown, defaulting to 1000 [ 283.509822][T12563] lo speed is unknown, defaulting to 1000 [ 283.559459][ T54] Bluetooth: hci4: command tx timeout [ 283.816087][T12580] netlink: 'syz.1.1765': attribute type 1 has an invalid length. [ 283.833025][T12563] lo speed is unknown, defaulting to 1000 [ 284.243568][T12593] __nla_validate_parse: 61 callbacks suppressed [ 284.243589][T12593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1769'. [ 284.274115][T12593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1769'. [ 284.319366][T12593] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1769'. [ 284.328385][T12593] block nbd0: Unsupported socket: shutdown callout must be supported. [ 284.392931][T12596] macsec0: left promiscuous mode [ 284.409344][T12592] lo speed is unknown, defaulting to 1000 [ 284.426380][T12596] macsec0: entered promiscuous mode [ 284.727020][T12440] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 284.764716][T12440] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 284.774596][T12592] lo speed is unknown, defaulting to 1000 [ 284.787371][T12440] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 284.817961][T12440] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 284.964533][T12440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.984810][T12440] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.021086][T12440] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 285.032532][T12440] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 285.067286][ T3505] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.074497][ T3505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.120943][T12616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1775'. [ 285.131648][ T3505] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.138816][ T3505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.630312][T12636] netlink: 'syz.3.1780': attribute type 32 has an invalid length. [ 285.649540][ T54] Bluetooth: hci4: command tx timeout [ 285.786671][T12641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1781'. [ 285.839615][T12642] netlink: 884 bytes leftover after parsing attributes in process `syz.2.1781'. [ 285.902499][T12440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.101429][T12655] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1783'. [ 286.410250][T12440] veth0_vlan: entered promiscuous mode [ 286.445336][T12440] veth1_vlan: entered promiscuous mode [ 286.500691][T12440] veth0_macvtap: entered promiscuous mode [ 286.512088][T12440] veth1_macvtap: entered promiscuous mode [ 286.533767][T12440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.556985][T12440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.586145][T12440] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.605897][T12440] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.616304][T12440] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.625290][T12440] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.749582][T10319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.771016][T10319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.828886][T10332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.853484][T10332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.038323][T12680] IPVS: set_ctl: invalid protocol: 44 10.1.1.1:20002 [ 287.090464][T12680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1789'. [ 287.141387][T12683] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1791'. [ 287.180172][T12683] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1791'. [ 287.529769][T12698] lo: left promiscuous mode [ 287.542820][T12698] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 287.675579][T12704] netlink: 'syz.0.1795': attribute type 1 has an invalid length. [ 287.756246][T12700] bond4: (slave gretap2): making interface the new active one [ 287.765596][T12700] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 288.038492][T10329] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.249593][T10329] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.695322][T10329] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.927475][T10329] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.042220][T10329] bridge_slave_1: left allmulticast mode [ 289.047903][T10329] bridge_slave_1: left promiscuous mode [ 289.053892][T10329] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.063184][T10329] bridge_slave_0: left allmulticast mode [ 289.068836][T10329] bridge_slave_0: left promiscuous mode [ 289.079140][T10329] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.659117][T12746] __nla_validate_parse: 8 callbacks suppressed [ 289.659138][T12746] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1810'. [ 289.742308][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 289.752475][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 289.760826][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 289.782051][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 289.792073][ T5844] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 289.804089][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 289.858227][T12751] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 290.153584][T10329] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 290.166084][T10329] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 290.176716][T10329] bond0 (unregistering): Released all slaves [ 290.238654][T12747] lo speed is unknown, defaulting to 1000 [ 290.579001][T12747] lo speed is unknown, defaulting to 1000 [ 290.765707][T12769] lo speed is unknown, defaulting to 1000 [ 290.904436][T12777] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1820'. [ 290.960438][T12777] netlink: 'syz.0.1820': attribute type 30 has an invalid length. [ 291.156664][T10329] hsr_slave_0: left promiscuous mode [ 291.193318][T10329] hsr_slave_1: left promiscuous mode [ 291.220618][T10329] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.232233][T12763] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 291.247022][T10329] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.272703][T10329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.309000][T10329] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.413527][T10329] veth1_macvtap: left promiscuous mode [ 291.428665][T10329] veth0_macvtap: left promiscuous mode [ 291.455413][T10329] veth1_vlan: left promiscuous mode [ 291.466790][T10329] veth0_vlan: left promiscuous mode [ 291.881013][ T5844] Bluetooth: hci4: command tx timeout [ 292.247486][T10329] team0 (unregistering): Port device team_slave_1 removed [ 292.292933][T10329] team0 (unregistering): Port device team_slave_0 removed [ 292.754485][T12787] veth0_to_bond: left promiscuous mode [ 292.786782][T12788] vlan4: entered promiscuous mode [ 292.794122][T12788] bond0: (slave vlan4): Opening slave failed [ 292.807197][T12769] lo speed is unknown, defaulting to 1000 [ 292.807756][T12796] netlink: 'syz.1.1825': attribute type 29 has an invalid length. [ 292.836564][T12805] IPv6: sit1: Disabled Multicast RS [ 292.843782][T12805] sit1: entered allmulticast mode [ 292.877356][T12747] chnl_net:caif_netlink_parms(): no params data found [ 293.274831][T12825] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1830'. [ 293.311849][T12747] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.320167][T12747] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.339726][T12747] bridge_slave_0: entered allmulticast mode [ 293.346738][T12747] bridge_slave_0: entered promiscuous mode [ 293.401869][T12747] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.409040][T12747] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.439720][T12747] bridge_slave_1: entered allmulticast mode [ 293.447041][T12747] bridge_slave_1: entered promiscuous mode [ 293.600637][T12835] netlink: 'syz.1.1833': attribute type 27 has an invalid length. [ 293.644023][T12747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.685701][T12747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.788572][T12747] team0: Port device team_slave_0 added [ 293.810911][T12747] team0: Port device team_slave_1 added [ 293.822775][T12840] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1835'. [ 293.921459][T12747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.928967][T12747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.956386][T12747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.967690][ T5844] Bluetooth: hci4: command tx timeout [ 294.004099][T12747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.011400][T12747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.033714][T12849] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 294.048397][T12747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.141773][T12850] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1837'. [ 294.204888][T12747] hsr_slave_0: entered promiscuous mode [ 294.230520][T12747] hsr_slave_1: entered promiscuous mode [ 294.255348][T12747] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 294.276631][T12747] Cannot create hsr debugfs directory [ 294.566341][T12862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1840'. [ 294.575615][T12862] netlink: 'syz.2.1840': attribute type 3 has an invalid length. [ 295.189845][T12872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1844'. [ 295.377078][T12877] gtp1: entered promiscuous mode [ 295.385545][T12877] gtp1: entered allmulticast mode [ 295.529627][T12747] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 295.533644][T12882] netlink: 'syz.3.1847': attribute type 2 has an invalid length. [ 295.553784][T12882] netlink: 'syz.3.1847': attribute type 2 has an invalid length. [ 295.574507][T12747] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 295.628982][T12747] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 295.636052][T12882] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1847'. [ 295.652392][T12747] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 295.671069][T12882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1847'. [ 295.764433][T12888] netlink: 'syz.2.1849': attribute type 10 has an invalid length. [ 295.918188][T12747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.982791][T12747] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.032067][ T3505] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.039272][ T3505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.040151][ T5844] Bluetooth: hci4: command tx timeout [ 296.056188][ T3505] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.063403][ T3505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.166278][T12897] tunl0: left promiscuous mode [ 296.172797][T12897] gre0: left promiscuous mode [ 296.178201][T12897] gretap0: left promiscuous mode [ 296.184240][T12897] erspan0: left promiscuous mode [ 296.194104][T12897] ip_vti0: left promiscuous mode [ 296.212405][T12897] ip6_vti0: left promiscuous mode [ 296.217661][T12897] sit0: left promiscuous mode [ 296.222870][T12897] ip6tnl0: left promiscuous mode [ 296.226475][T12904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1853'. [ 296.227948][T12897] ip6gre0: left promiscuous mode [ 296.260935][T12897] ip6gretap0: left promiscuous mode [ 296.266329][T12897] bridge0: left promiscuous mode [ 296.287555][T12897] vcan0: left promiscuous mode [ 296.309457][T12897] bond0: left promiscuous mode [ 296.314302][T12897] mac80211_hwsim hwsim4 wlan1: left promiscuous mode [ 296.325459][T12897] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 296.363930][T12907] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1854'. [ 296.707080][T12747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.027841][T12936] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1860'. [ 297.087471][T12939] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1861'. [ 297.301009][T12747] veth0_vlan: entered promiscuous mode [ 297.313936][T12948] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1864'. [ 297.334439][T12747] veth1_vlan: entered promiscuous mode [ 297.394192][T12948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1864'. [ 297.403319][T12918] lo speed is unknown, defaulting to 1000 [ 297.411972][T12747] veth0_macvtap: entered promiscuous mode [ 297.448710][T12747] veth1_macvtap: entered promiscuous mode [ 297.476709][T12747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.506650][T12948] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 297.539059][T12747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.607743][T12747] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.659352][T12747] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.668121][T12747] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.719515][T12747] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.926270][ T3505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.945684][ T3505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.038713][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.069602][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.105387][T12964] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1869'. [ 298.119694][ T5844] Bluetooth: hci4: command tx timeout [ 298.128941][T12956] lo speed is unknown, defaulting to 1000 [ 298.230084][T12918] lo speed is unknown, defaulting to 1000 [ 298.424140][T12956] lo speed is unknown, defaulting to 1000 [ 299.286704][T12979] lo speed is unknown, defaulting to 1000 [ 299.584794][T10332] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.634186][T12979] lo speed is unknown, defaulting to 1000 [ 299.851207][T10332] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.030794][T10332] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.145380][T10332] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.283189][T10332] bridge_slave_1: left allmulticast mode [ 300.288989][T10332] bridge_slave_1: left promiscuous mode [ 300.295277][T10332] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.312952][T10332] bridge_slave_0: left allmulticast mode [ 300.318818][T10332] bridge_slave_0: left promiscuous mode [ 300.324824][T10332] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.111628][T10332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 301.132735][T10332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 301.160108][T10332] bond0 (unregistering): Released all slaves [ 301.293852][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 301.303795][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 301.312005][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 301.349539][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 301.359104][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 301.368377][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 301.568551][T13006] lo speed is unknown, defaulting to 1000 [ 301.585275][T13023] dvmrp5: entered allmulticast mode [ 301.868906][T13006] lo speed is unknown, defaulting to 1000 [ 302.224705][T10332] hsr_slave_0: left promiscuous mode [ 302.252633][T10332] hsr_slave_1: left promiscuous mode [ 302.258775][T10332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.267044][T10332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.299079][T10332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.316532][T10332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.371421][T13045] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1889'. [ 302.395678][T10332] veth1_macvtap: left promiscuous mode [ 302.407997][T10332] veth0_macvtap: left promiscuous mode [ 302.416699][T10332] veth1_vlan: left promiscuous mode [ 302.428181][T10332] veth0_vlan: left promiscuous mode [ 303.190636][T10332] team0 (unregistering): Port device team_slave_1 removed [ 303.242501][T10332] team0 (unregistering): Port device team_slave_0 removed [ 303.479643][ T5844] Bluetooth: hci4: command tx timeout [ 304.065288][T13006] chnl_net:caif_netlink_parms(): no params data found [ 304.159646][T13057] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1891'. [ 304.199161][T13056] lo speed is unknown, defaulting to 1000 [ 304.297677][T13057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.330890][T13057] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.419351][T13057] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 304.700965][T13006] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.708191][T13006] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.726039][T13006] bridge_slave_0: entered allmulticast mode [ 304.747987][T13006] bridge_slave_0: entered promiscuous mode [ 304.759133][T13056] lo speed is unknown, defaulting to 1000 [ 304.779423][T13006] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.786668][T13006] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.804204][T13006] bridge_slave_1: entered allmulticast mode [ 304.823025][T13006] bridge_slave_1: entered promiscuous mode [ 304.890583][T13068] pim6reg: left allmulticast mode [ 304.944960][T13006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.042010][T13006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.158995][T13006] team0: Port device team_slave_0 added [ 305.372679][T13006] team0: Port device team_slave_1 added [ 305.559542][ T5844] Bluetooth: hci4: command tx timeout [ 305.709700][T13006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.716711][T13006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.840072][T13006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.900055][T13006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.916780][T13006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.977325][T13006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.247916][T13006] hsr_slave_0: entered promiscuous mode [ 306.260245][T13006] hsr_slave_1: entered promiscuous mode [ 306.280968][T13006] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 306.305983][T13006] Cannot create hsr debugfs directory [ 306.559881][T13094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1902'. [ 306.568807][T13094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1902'. [ 306.827884][T13100] openvswitch: netlink: Message has 24 unknown bytes. [ 307.062608][T13109] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1907'. [ 307.125393][T13006] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 307.177781][T13006] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 307.213197][T13006] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 307.241469][T13006] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 307.422880][T13006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.468071][T13006] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.488504][T10329] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.495720][T10329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.519770][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.526916][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.640008][ T5844] Bluetooth: hci4: command tx timeout [ 307.899771][T13006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.272770][T13144] No such timeout policy "syz0" [ 308.332689][T13006] veth0_vlan: entered promiscuous mode [ 308.371476][T13006] veth1_vlan: entered promiscuous mode [ 308.377907][T13146] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1916'. [ 308.452360][T13006] veth0_macvtap: entered promiscuous mode [ 308.478961][T13152] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1919'. [ 308.481546][T13006] veth1_macvtap: entered promiscuous mode [ 308.556557][T13006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.573934][T13006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.630020][T13006] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.659562][T13006] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.668333][T13006] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.697571][T13006] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.917628][T10319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.940188][T10319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.988222][T10319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.009478][T10319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.470278][T13179] netlink: 'syz.0.1927': attribute type 2 has an invalid length. [ 309.478082][T13179] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1927'. [ 309.691025][T13190] lo speed is unknown, defaulting to 1000 [ 309.984191][T13191] lo speed is unknown, defaulting to 1000 [ 309.984191][T13190] lo speed is unknown, defaulting to 1000 [ 310.293670][T10329] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.411941][T13191] lo speed is unknown, defaulting to 1000 [ 310.754845][T10329] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.098661][T10329] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.155307][T10329] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.237638][T10329] bridge_slave_1: left allmulticast mode [ 311.244929][T10329] bridge_slave_1: left promiscuous mode [ 311.254687][T10329] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.265681][T10329] bridge_slave_0: left allmulticast mode [ 311.271988][T10329] bridge_slave_0: left promiscuous mode [ 311.277687][T10329] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.627483][T10329] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.638360][T10329] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.649231][T10329] bond0 (unregistering): Released all slaves [ 311.897433][T13213] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1933'. [ 312.135325][T13224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1939'. [ 312.160600][T13212] lo speed is unknown, defaulting to 1000 [ 312.327589][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 312.340247][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 312.351068][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 312.369038][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 312.377925][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 312.388146][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 312.442624][T13231] netlink: 'syz.3.1941': attribute type 5 has an invalid length. [ 312.682246][T13212] lo speed is unknown, defaulting to 1000 [ 312.689915][T13230] lo speed is unknown, defaulting to 1000 [ 312.776050][T13240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1945'. [ 312.960639][T13227] lo speed is unknown, defaulting to 1000 [ 313.156306][T13230] lo speed is unknown, defaulting to 1000 [ 313.263320][T13227] lo speed is unknown, defaulting to 1000 [ 313.549644][T10329] hsr_slave_0: left promiscuous mode [ 313.563990][T10329] hsr_slave_1: left promiscuous mode [ 313.577403][T10329] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.585202][T10329] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.598672][T10329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.613884][T10329] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.671916][T10329] veth1_macvtap: left promiscuous mode [ 313.677509][T10329] veth0_macvtap: left promiscuous mode [ 313.700754][T10329] veth1_vlan: left promiscuous mode [ 313.716528][T10329] veth0_vlan: left promiscuous mode [ 313.736201][T13273] netlink: 'syz.0.1956': attribute type 2 has an invalid length. [ 314.221755][T10329] team0 (unregistering): Port device team_slave_1 removed [ 314.269147][T10329] team0 (unregistering): Port device team_slave_0 removed [ 314.498695][T13275] netlink: 'syz.1.1958': attribute type 1 has an invalid length. [ 314.514133][T13275] netlink: 'syz.1.1958': attribute type 2 has an invalid length. [ 314.524639][ T54] Bluetooth: hci4: command tx timeout [ 314.529764][T13275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1958'. [ 314.626305][T13276] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1958'. [ 315.413443][T13227] chnl_net:caif_netlink_parms(): no params data found [ 315.585841][T13286] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1962'. [ 315.595106][T13286] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1962'. [ 315.604277][T13286] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1962'. [ 315.627900][T13286] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1962'. [ 315.763135][T13227] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.779611][T13227] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.786882][T13227] bridge_slave_0: entered allmulticast mode [ 315.794077][T13227] bridge_slave_0: entered promiscuous mode [ 315.802372][T13227] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.813597][T13227] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.820916][T13227] bridge_slave_1: entered allmulticast mode [ 315.828005][T13227] bridge_slave_1: entered promiscuous mode [ 315.909858][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 315.919258][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 315.936999][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 315.958084][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 315.966026][ T5844] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 315.973737][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 316.056417][T13295] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 316.167635][T13302] lo speed is unknown, defaulting to 1000 [ 316.182145][T13227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.348078][T13227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.465722][T13324] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1971'. [ 316.477453][T13324] SET target dimension over the limit! [ 316.533370][T13302] lo speed is unknown, defaulting to 1000 [ 316.584404][T13227] team0: Port device team_slave_0 added [ 316.599509][ T5844] Bluetooth: hci4: command tx timeout [ 316.634073][T13227] team0: Port device team_slave_1 added [ 316.871952][T13332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1973'. [ 316.914229][T13227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.922069][T13227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.949078][T13227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.974705][T13334] pimreg: entered allmulticast mode [ 316.994029][T13227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.009679][T13227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.036323][T13227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.215397][T13227] hsr_slave_0: entered promiscuous mode [ 317.217277][T13349] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 317.252948][T13227] hsr_slave_1: entered promiscuous mode [ 317.259160][T13227] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 317.291662][T13227] Cannot create hsr debugfs directory [ 317.310301][T13352] netlink: 'syz.2.1979': attribute type 1 has an invalid length. [ 317.409903][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.416445][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.507006][T13354] lo speed is unknown, defaulting to 1000 [ 317.782534][T13302] chnl_net:caif_netlink_parms(): no params data found [ 318.004364][T13364] lo speed is unknown, defaulting to 1000 [ 318.010629][T13354] lo speed is unknown, defaulting to 1000 [ 318.040924][ T5844] Bluetooth: hci2: command tx timeout [ 318.341571][T13302] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.348706][T13302] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.368475][T13302] bridge_slave_0: entered allmulticast mode [ 318.392767][T13302] bridge_slave_0: entered promiscuous mode [ 318.400258][T13375] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 318.433551][T13302] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.433555][T13364] lo speed is unknown, defaulting to 1000 [ 318.444521][T13302] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.476967][T13302] bridge_slave_1: entered allmulticast mode [ 318.487846][T13302] bridge_slave_1: entered promiscuous mode [ 318.522667][T13379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1983'. [ 318.593541][T13302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.627258][T13381] lo speed is unknown, defaulting to 1000 [ 318.635205][T13302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.680941][ T5844] Bluetooth: hci4: command tx timeout [ 318.864998][T13302] team0: Port device team_slave_0 added [ 318.887423][T13302] team0: Port device team_slave_1 added [ 318.971613][T13227] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 319.003476][T13227] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 319.028833][T13302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.049328][T13302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.077622][T13302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.124318][T13381] lo speed is unknown, defaulting to 1000 [ 319.124327][T13227] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 319.166306][T13227] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 319.226776][T13302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.239656][T13302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.275108][T13302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.349931][T13385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1986'. [ 319.370273][T13302] hsr_slave_0: entered promiscuous mode [ 319.378829][T13302] hsr_slave_1: entered promiscuous mode [ 319.385615][T13302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 319.393531][T13302] Cannot create hsr debugfs directory [ 319.403086][T13382] lo speed is unknown, defaulting to 1000 [ 319.587874][T13382] lo speed is unknown, defaulting to 1000 [ 320.001415][T13302] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 49252 - 0 [ 320.011927][T13302] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 51156 - 0 [ 320.119893][ T5844] Bluetooth: hci2: command tx timeout [ 320.128070][T13227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.152605][T13302] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 49252 - 0 [ 320.169301][T13302] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 51156 - 0 [ 320.227244][T13227] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.250356][T13302] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 49252 - 0 [ 320.260969][T13302] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 51156 - 0 [ 320.335436][T10329] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.342755][T10329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.375239][T13302] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 49252 - 0 [ 320.386588][T13302] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 51156 - 0 [ 320.418961][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.425602][T13402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1991'. [ 320.426145][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.711552][T13302] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 320.732264][T13302] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 320.759442][ T54] Bluetooth: hci4: command tx timeout [ 320.760154][T13302] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 320.804982][T13302] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 320.958022][T13302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.027099][T13302] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.053285][T13227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.142092][T10329] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.149296][T10329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.190267][T10329] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.197461][T10329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.546403][T13227] veth0_vlan: entered promiscuous mode [ 321.558346][T13437] netlink: 'syz.2.1997': attribute type 1 has an invalid length. [ 321.642861][T13437] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 321.689847][T13227] veth1_vlan: entered promiscuous mode [ 321.913495][T13450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2001'. [ 322.199600][ T54] Bluetooth: hci2: command tx timeout [ 323.797467][T13458] veth1_to_bond: entered allmulticast mode [ 323.806531][T13302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.877075][T13460] veth1_to_bond: left allmulticast mode [ 323.909135][T13227] veth0_macvtap: entered promiscuous mode [ 323.929113][T13227] veth1_macvtap: entered promiscuous mode [ 323.980390][T13302] veth0_vlan: entered promiscuous mode [ 324.024050][T13227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.048885][T13302] veth1_vlan: entered promiscuous mode [ 324.092558][T13227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.131965][T13227] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.149293][T13227] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.158064][T13227] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.168391][T13474] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2007'. [ 324.188015][T13227] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.226484][T13302] veth0_macvtap: entered promiscuous mode [ 324.238776][T13478] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.2006'. [ 324.283563][ T54] Bluetooth: hci2: command 0x0419 tx timeout [ 324.288620][T13302] veth1_macvtap: entered promiscuous mode [ 324.467966][T13302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.489461][T13302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.500820][T13302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.508553][T13485] lo speed is unknown, defaulting to 1000 [ 324.583735][T13302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.601815][T13302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.628128][T13302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.656857][T13302] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.666561][T13302] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.676418][T13302] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.686599][T13302] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.719119][ T3505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.732451][ T3505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.782587][T13493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2011'. [ 324.817438][T13493] IPVS: Error connecting to the multicast addr [ 324.848865][T13493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2011'. [ 324.864932][T10319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.910889][T13485] lo speed is unknown, defaulting to 1000 [ 324.919948][T10319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.932007][T13484] lo speed is unknown, defaulting to 1000 [ 325.260123][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.268090][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.298654][T13490] lo speed is unknown, defaulting to 1000 [ 325.322725][T13484] lo speed is unknown, defaulting to 1000 [ 325.425085][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.448530][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.619519][T13502] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 325.623982][T10332] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.709786][T13490] lo speed is unknown, defaulting to 1000 [ 325.815471][T10332] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.016777][T10332] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.122342][T10332] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.585303][T10332] bridge_slave_1: left allmulticast mode [ 326.601523][T10332] bridge_slave_1: left promiscuous mode [ 326.616160][T10332] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.666350][T10332] bridge_slave_0: left allmulticast mode [ 326.683438][T10332] bridge_slave_0: left promiscuous mode [ 326.693624][T10332] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.983409][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 327.002318][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 327.016392][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 327.034678][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 327.044252][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 327.062980][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 327.075357][ T5859] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 327.086939][ T5859] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 327.111373][ T5859] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 327.120669][ T5859] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 327.131687][ T5859] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 327.144482][ T5859] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 327.490342][T13526] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2018'. [ 327.528407][T10332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.542620][T10332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.553692][T10332] bond0 (unregistering): Released all slaves [ 327.647493][T13519] lo speed is unknown, defaulting to 1000 [ 327.998651][T13531] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2019'. [ 328.056181][T13519] lo speed is unknown, defaulting to 1000 [ 328.062261][T13525] lo speed is unknown, defaulting to 1000 [ 328.170830][T13534] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 328.312636][T13526] tipc: Enabled bearer , priority 10 [ 328.423936][T13519] chnl_net:caif_netlink_parms(): no params data found [ 328.528371][T13516] lo speed is unknown, defaulting to 1000 [ 328.540413][T13519] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.568446][T13519] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.600185][T13519] bridge_slave_0: entered allmulticast mode [ 328.617610][T13519] bridge_slave_0: entered promiscuous mode [ 328.633401][T13519] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.651310][T13519] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.658740][T13519] bridge_slave_1: entered allmulticast mode [ 328.676539][T13519] bridge_slave_1: entered promiscuous mode [ 328.748214][T13519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.791197][T13519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.883672][T13525] lo speed is unknown, defaulting to 1000 [ 328.941340][T13516] lo speed is unknown, defaulting to 1000 [ 328.964835][T13519] team0: Port device team_slave_0 added [ 329.007056][T13519] team0: Port device team_slave_1 added [ 329.093738][T10332] hsr_slave_0: left promiscuous mode [ 329.109341][T10332] hsr_slave_1: left promiscuous mode [ 329.120516][T10332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.148405][T10332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.168971][T10332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.178215][ T5859] Bluetooth: hci2: command tx timeout [ 329.180048][T10332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.235796][T10332] veth1_macvtap: left promiscuous mode [ 329.241729][ T5859] Bluetooth: hci4: command tx timeout [ 329.248136][T10332] veth0_macvtap: left promiscuous mode [ 329.254098][T10332] veth1_vlan: left promiscuous mode [ 329.260753][T10332] veth0_vlan: left promiscuous mode [ 329.302620][T13550] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 329.325469][T13551] netlink: 'syz.1.2023': attribute type 3 has an invalid length. [ 329.766750][T10332] team0 (unregistering): Port device team_slave_1 removed [ 329.818951][T10332] team0 (unregistering): Port device team_slave_0 removed [ 330.378893][T13519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.395231][T13519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.429347][T13519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.442157][T13519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.449131][T13519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.489602][T13519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.976616][T13519] hsr_slave_0: entered promiscuous mode [ 330.996618][T13519] hsr_slave_1: entered promiscuous mode [ 331.040321][T13519] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 331.048106][T13519] Cannot create hsr debugfs directory [ 331.239750][ T5859] Bluetooth: hci2: command tx timeout [ 331.320037][ T5859] Bluetooth: hci4: command tx timeout [ 331.518918][T10329] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.553897][T13516] chnl_net:caif_netlink_parms(): no params data found [ 331.671871][T10329] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.822670][T10329] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.859791][T13584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 331.980552][T13593] Bluetooth: MGMT ver 1.23 [ 332.038876][T10329] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.124153][T13597] netlink: 'syz.2.2035': attribute type 1 has an invalid length. [ 332.133761][T13597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2035'. [ 332.142938][T13516] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.157939][T13516] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.169128][T13516] bridge_slave_0: entered allmulticast mode [ 332.178236][T13516] bridge_slave_0: entered promiscuous mode [ 332.206006][T13516] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.214607][T13516] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.222695][T13516] bridge_slave_1: entered allmulticast mode [ 332.234823][T13516] bridge_slave_1: entered promiscuous mode [ 332.335650][T13516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.358918][T13516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.434977][T10329] bridge_slave_1: left allmulticast mode [ 332.460470][T10329] bridge_slave_1: left promiscuous mode [ 332.467152][T10329] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.479159][T10329] bridge_slave_0: left allmulticast mode [ 332.493204][T10329] bridge_slave_0: left promiscuous mode [ 332.498897][T10329] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.727177][T13606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2037'. [ 333.116851][T10329] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 333.143140][T10329] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 333.154425][T10329] bond0 (unregistering): Released all slaves [ 333.207750][T13600] »»»»»»: renamed from veth0_vlan [ 333.274627][T13516] team0: Port device team_slave_0 added [ 333.319786][ T5859] Bluetooth: hci2: command tx timeout [ 333.380697][T13516] team0: Port device team_slave_1 added [ 333.399922][ T5859] Bluetooth: hci4: command tx timeout [ 333.479261][T13519] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 333.491653][T13611] atomic_op ffff888035b2c998 conn xmit_atomic 0000000000000000 [ 333.681075][T13519] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 333.718071][T13519] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 333.935731][T13516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.946746][T13516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.978061][T13516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.991422][T13519] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 334.013053][T13621] lo speed is unknown, defaulting to 1000 [ 334.042763][T13516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.061522][T13516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.120204][T13516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.238661][T13516] hsr_slave_0: entered promiscuous mode [ 334.255541][T13516] hsr_slave_1: entered promiscuous mode [ 334.267777][T13516] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 334.285882][T13516] Cannot create hsr debugfs directory [ 334.330280][T13621] lo speed is unknown, defaulting to 1000 [ 334.447650][T13651] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2048'. [ 334.563313][T10329] hsr_slave_0: left promiscuous mode [ 334.570462][T10329] hsr_slave_1: left promiscuous mode [ 334.576675][T10329] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.585094][T10329] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.598998][T10329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.607559][T10329] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.638545][T10329] veth1_macvtap: left promiscuous mode [ 334.644531][T10329] veth0_macvtap: left promiscuous mode [ 334.650522][T10329] veth1_vlan: left promiscuous mode [ 334.655990][T10329] veth0_vlan: left promiscuous mode [ 335.212331][T10329] team0 (unregistering): Port device team_slave_1 removed [ 335.266103][T10329] team0 (unregistering): Port device team_slave_0 removed [ 335.404862][ T5847] Bluetooth: hci2: command tx timeout [ 335.484366][ T5847] Bluetooth: hci4: command tx timeout [ 335.791658][T13654] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.819532][T13654] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 335.948432][T13654] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.958959][T13654] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 336.061582][T13519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.081514][T13654] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.099740][T13654] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 336.223842][T13654] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.259680][T13654] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 336.296720][T13661] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2050'. [ 336.302566][T13519] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.363455][T13661] sctp: [Deprecated]: syz.1.2050 (pid 13661) Use of int in maxseg socket option. [ 336.363455][T13661] Use struct sctp_assoc_value instead [ 336.365380][T10323] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.385255][T10323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.433800][T10323] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.441036][T10323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.518929][T13654] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.534354][T13654] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 336.564970][T13654] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.581711][T13654] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 336.604448][T13654] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.625216][T13654] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 336.662443][T13654] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.671893][T13654] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 336.912378][T13668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2053'. [ 336.931257][T13516] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 336.959657][T13516] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 336.990458][T13516] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 337.004937][T13516] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 337.441879][T13686] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 337.579129][T13689] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2058'. [ 337.598744][T13519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.620665][T13689] netlink: 'syz.3.2058': attribute type 4 has an invalid length. [ 337.768397][T13516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.819013][T13516] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.848740][T10319] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.855908][T10319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.877135][T13694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2059'. [ 337.970970][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.978203][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.186671][T13519] veth0_vlan: entered promiscuous mode [ 338.224659][T13519] veth1_vlan: entered promiscuous mode [ 338.241387][T13710] netlink: 'syz.1.2063': attribute type 30 has an invalid length. [ 338.269003][T13710] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2063'. [ 338.327458][T13519] veth0_macvtap: entered promiscuous mode [ 338.364645][T13519] veth1_macvtap: entered promiscuous mode [ 338.412492][T13519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 338.472501][T13519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 338.521266][T13519] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.540309][T13519] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.550893][T13519] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.552931][T13721] netlink: 'syz.2.2066': attribute type 1 has an invalid length. [ 338.578732][T13519] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.637414][T13721] 8021q: adding VLAN 0 to HW filter on device bond4 [ 338.755736][T13731] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2069'. [ 338.833578][T13516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.947872][T13741] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2070'. [ 338.988913][T10332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.027962][T10332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.066571][T13516] veth0_vlan: entered promiscuous mode [ 339.121697][T13516] veth1_vlan: entered promiscuous mode [ 339.146107][T10323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.164616][T10323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.224768][T13516] veth0_macvtap: entered promiscuous mode [ 339.260905][T13516] veth1_macvtap: entered promiscuous mode [ 339.308814][T13516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.322393][T13516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.344714][T13516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.456989][T13516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.480314][T13516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.500688][T13516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.528157][T13751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2074'. [ 339.541996][T13516] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.558030][T13516] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.568373][T13516] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.577509][T13516] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.596440][T13756] netlink: 'syz.3.2074': attribute type 1 has an invalid length. [ 339.605773][T13756] netlink: 'syz.3.2074': attribute type 2 has an invalid length. [ 339.614134][T13756] netlink: 'syz.3.2074': attribute type 4 has an invalid length. [ 339.623015][T13756] netlink: 'syz.3.2074': attribute type 1 has an invalid length. [ 339.631379][T13756] netlink: 'syz.3.2074': attribute type 2 has an invalid length. [ 339.640763][T13756] netlink: 129988 bytes leftover after parsing attributes in process `syz.3.2074'. [ 339.651534][T13756] netlink: 'syz.3.2074': attribute type 1 has an invalid length. [ 339.697573][T13756] netlink: 'syz.3.2074': attribute type 2 has an invalid length. [ 339.805305][T10319] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.817774][T13759] xt_TPROXY: Can be used only with -p tcp or -p udp [ 339.917826][T10319] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.044362][T10332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.060289][T10332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.120777][T10319] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.155476][T10332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.164774][T10332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.187085][T10319] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.445448][T10319] bridge_slave_1: left allmulticast mode [ 340.452002][T10319] bridge_slave_1: left promiscuous mode [ 340.457795][T10319] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.467811][T10319] bridge_slave_0: left allmulticast mode [ 340.474045][T10319] bridge_slave_0: left promiscuous mode [ 340.480377][T10319] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.846165][T10319] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 340.862834][T10319] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 340.873346][T10319] bond0 (unregistering): Released all slaves [ 341.229976][T10319] hsr_slave_0: left promiscuous mode [ 341.253927][T10319] hsr_slave_1: left promiscuous mode [ 341.260125][T10319] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.267573][T10319] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 341.278657][T10319] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 341.294522][T10319] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.363113][T10319] veth1_macvtap: left promiscuous mode [ 341.368717][T10319] veth0_macvtap: left promiscuous mode [ 341.419580][T10319] veth1_vlan: left promiscuous mode [ 341.424970][T10319] veth0_vlan: left promiscuous mode [ 341.441447][T13767] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2079'. [ 341.578035][T13773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2077'. [ 341.879140][ T5859] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 341.901322][ T5859] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 341.910851][ T5859] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 341.921209][ T5859] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 341.928995][ T5859] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 341.936673][ T5859] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 341.946970][T13778] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 341.976841][ T5859] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 341.987920][ T5859] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 342.009344][ T5859] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 342.030588][ T5859] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 342.048156][ T5859] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 342.057234][ T5859] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 342.067961][T13780] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 342.636990][T10319] team0 (unregistering): Port device team_slave_1 removed [ 342.712797][T10319] team0 (unregistering): Port device team_slave_0 removed [ 342.766644][ T5859] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 342.784090][ T5859] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 342.803011][ T5859] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 342.814759][ T5859] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 342.829592][ T5859] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 342.847708][ T5859] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 343.145724][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 343.156979][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 343.165597][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 343.195256][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 343.208593][ T5847] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 343.216280][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 343.553326][T13783] lo speed is unknown, defaulting to 1000 [ 343.747683][T13798] Bluetooth: MGMT ver 1.23 [ 343.753204][T13798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2084'. [ 343.839623][T13803] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2085'. [ 343.861286][T13804] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2085'. [ 343.907242][T13803] 8021q: adding VLAN 0 to HW filter on device bond3 [ 343.946538][T13786] lo speed is unknown, defaulting to 1000 [ 343.960067][T13783] lo speed is unknown, defaulting to 1000 [ 344.126676][T13786] lo speed is unknown, defaulting to 1000 [ 344.695690][T10319] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.761822][T13786] chnl_net:caif_netlink_parms(): no params data found [ 344.855860][T10319] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.889676][T13783] chnl_net:caif_netlink_parms(): no params data found [ 344.935508][ T5859] Bluetooth: hci2: command tx timeout [ 345.024615][T10319] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.024737][T13861] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input12 [ 345.065394][T13856] vlan2: entered allmulticast mode [ 345.106621][T13856] bridge_slave_0: entered allmulticast mode [ 345.135570][T13856] bridge_slave_0: left allmulticast mode [ 345.239534][ T5859] Bluetooth: hci4: command tx timeout [ 345.325386][T10319] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.339441][T13872] validate_nla: 1 callbacks suppressed [ 345.339457][T13872] netlink: 'syz.1.2104': attribute type 13 has an invalid length. [ 345.444178][T13786] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.452152][T13786] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.460548][T13786] bridge_slave_0: entered allmulticast mode [ 345.467796][T13786] bridge_slave_0: entered promiscuous mode [ 345.494372][T13786] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.519529][T13786] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.531565][T13786] bridge_slave_1: entered allmulticast mode [ 345.539002][T13786] bridge_slave_1: entered promiscuous mode [ 345.596712][T13881] netlink: 'syz.2.2107': attribute type 4 has an invalid length. [ 345.604925][T13881] netlink: 3581 bytes leftover after parsing attributes in process `syz.2.2107'. [ 345.644080][T13786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.680499][T13783] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.687716][T13783] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.695401][T13783] bridge_slave_0: entered allmulticast mode [ 345.702875][T13783] bridge_slave_0: entered promiscuous mode [ 345.731404][T13786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.815084][T13783] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.824264][T13783] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.835443][T13783] bridge_slave_1: entered allmulticast mode [ 345.842852][T13783] bridge_slave_1: entered promiscuous mode [ 347.017238][ T5859] Bluetooth: hci2: command tx timeout [ 347.334921][ T5859] Bluetooth: hci4: command tx timeout [ 347.987269][T13786] team0: Port device team_slave_0 added [ 348.005941][T13893] tipc: Bearer : already 2 bearers with priority 10 [ 348.024588][T13893] tipc: Bearer : trying with adjusted priority [ 348.033384][T13893] tipc: Enabling of bearer rejected, failed to enable media [ 348.093348][T13783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.114159][T10319] bridge_slave_1: left allmulticast mode [ 348.125487][T10319] bridge_slave_1: left promiscuous mode [ 348.131714][T10319] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.176375][T10319] bridge_slave_0: left allmulticast mode [ 348.185758][T10319] bridge_slave_0: left promiscuous mode [ 348.208073][T10319] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.256167][ T29] audit: type=1800 audit(1740297970.406:3): pid=13910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2115" name="memory.events" dev="tmpfs" ino=2484 res=0 errno=0 [ 348.427546][ T29] audit: type=1804 audit(1740297970.576:4): pid=13917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2115" name="/newroot/481/memory.events" dev="tmpfs" ino=2484 res=1 errno=0 [ 348.513378][T13921] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2116'. [ 348.955475][T10319] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.966676][T10319] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.978006][T10319] bond0 (unregistering): Released all slaves [ 348.990552][T13786] team0: Port device team_slave_1 added [ 349.009375][T13783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.079629][ T5859] Bluetooth: hci2: command tx timeout [ 349.291804][T13783] team0: Port device team_slave_0 added [ 349.347974][T13786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.357638][T13786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.400470][ T5859] Bluetooth: hci4: command tx timeout [ 349.415271][T13786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.434882][T13933] vlan0: entered promiscuous mode [ 349.442429][T13933] bond0: entered promiscuous mode [ 349.447514][T13933] bond_slave_0: entered promiscuous mode [ 349.459130][T13933] bond_slave_1: entered promiscuous mode [ 349.465224][T13933] syz_tun: entered promiscuous mode [ 349.476982][T13943] netlink: 'syz.2.2125': attribute type 10 has an invalid length. [ 349.489658][T13933] bond0: left promiscuous mode [ 349.494476][T13933] bond_slave_0: left promiscuous mode [ 349.501315][T13933] bond_slave_1: left promiscuous mode [ 349.507326][T13933] syz_tun: left promiscuous mode [ 349.521999][T13945] netlink: 'syz.3.2126': attribute type 12 has an invalid length. [ 349.540852][T13783] team0: Port device team_slave_1 added [ 349.550570][T13786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.557828][T13786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.629286][T13786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.773802][T13946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.787613][T13946] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.795254][ T5843] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 349.809621][T13946] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 349.899617][ T5843] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 349.904730][T13961] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2128'. [ 349.950770][ T3478] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 349.969414][ T3478] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 350.024942][T13783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.039254][T13783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.066681][T13783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.259063][T13783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.269304][T13783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.339443][T13783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.365508][T13976] netlink: 'syz.3.2134': attribute type 1 has an invalid length. [ 350.395941][T10319] hsr_slave_0: left promiscuous mode [ 350.404740][T10319] hsr_slave_1: left promiscuous mode [ 350.414583][T10319] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.422329][T10319] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.431353][T10319] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.439954][T10319] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.469731][ T5894] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 350.496647][T10319] veth1_macvtap: left promiscuous mode [ 350.502572][T10319] veth0_macvtap: left promiscuous mode [ 350.508477][T10319] veth1_vlan: left promiscuous mode [ 350.514015][T10319] veth0_vlan: left promiscuous mode [ 351.036508][T10319] team0 (unregistering): Port device team_slave_1 removed [ 351.086083][T10319] team0 (unregistering): Port device team_slave_0 removed [ 351.169540][ T5847] Bluetooth: hci2: command tx timeout [ 351.479624][ T5847] Bluetooth: hci4: command tx timeout [ 351.718777][T13786] hsr_slave_0: entered promiscuous mode [ 351.738115][T13786] hsr_slave_1: entered promiscuous mode [ 351.748532][T13786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 351.768674][T13786] Cannot create hsr debugfs directory [ 351.791392][T14004] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2140'. [ 351.872005][T14004] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2140'. [ 351.884178][T14004] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2140'. [ 351.910293][T13987] lo speed is unknown, defaulting to 1000 [ 351.938446][T13783] hsr_slave_0: entered promiscuous mode [ 351.990687][T13783] hsr_slave_1: entered promiscuous mode [ 351.996889][T13783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 352.024449][T13783] Cannot create hsr debugfs directory [ 352.184783][T13987] lo speed is unknown, defaulting to 1000 [ 352.808283][T14030] FAULT_INJECTION: forcing a failure. [ 352.808283][T14030] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 352.839486][T14030] CPU: 1 UID: 0 PID: 14030 Comm: syz.3.2146 Not tainted 6.14.0-rc3-syzkaller-00702-gb66e19dcf684 #0 [ 352.839516][T14030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 352.839529][T14030] Call Trace: [ 352.839537][T14030] [ 352.839545][T14030] dump_stack_lvl+0x241/0x360 [ 352.839580][T14030] ? __pfx_dump_stack_lvl+0x10/0x10 [ 352.839603][T14030] ? __pfx__printk+0x10/0x10 [ 352.839631][T14030] ? snprintf+0xda/0x120 [ 352.839657][T14030] should_fail_ex+0x40a/0x550 [ 352.839692][T14030] _copy_to_user+0x31/0xb0 [ 352.839721][T14030] simple_read_from_buffer+0xca/0x150 [ 352.839753][T14030] proc_fail_nth_read+0x1e9/0x250 [ 352.839784][T14030] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 352.839816][T14030] ? rw_verify_area+0x243/0x630 [ 352.839836][T14030] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 352.839866][T14030] vfs_read+0x1f8/0xb40 [ 352.839889][T14030] ? fdget_pos+0x254/0x320 [ 352.839919][T14030] ? __pfx___mutex_lock+0x10/0x10 [ 352.839949][T14030] ? __pfx_vfs_read+0x10/0x10 [ 352.839973][T14030] ? __fget_files+0x2a/0x410 [ 352.840005][T14030] ? __fget_files+0x395/0x410 [ 352.840032][T14030] ? __fget_files+0x2a/0x410 [ 352.840071][T14030] ksys_read+0x18f/0x2b0 [ 352.840095][T14030] ? __pfx_ksys_read+0x10/0x10 [ 352.840150][T14030] ? do_syscall_64+0x100/0x230 [ 352.840182][T14030] ? do_syscall_64+0xb6/0x230 [ 352.840214][T14030] do_syscall_64+0xf3/0x230 [ 352.840243][T14030] ? clear_bhb_loop+0x35/0x90 [ 352.840276][T14030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.840304][T14030] RIP: 0033:0x7f5b5958bb7c [ 352.840324][T14030] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 352.840342][T14030] RSP: 002b:00007f5b5a370030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 352.840364][T14030] RAX: ffffffffffffffda RBX: 00007f5b597a5fa0 RCX: 00007f5b5958bb7c [ 352.840379][T14030] RDX: 000000000000000f RSI: 00007f5b5a3700a0 RDI: 0000000000000008 [ 352.840392][T14030] RBP: 00007f5b5a370090 R08: 0000000000000000 R09: 0000000000000000 [ 352.840404][T14030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.840415][T14030] R13: 0000000000000000 R14: 00007f5b597a5fa0 R15: 00007ffe7138d658 [ 352.840447][T14030] [ 353.450519][T13786] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 353.471476][T13786] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 353.489835][T13786] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 353.500835][T14043] FAULT_INJECTION: forcing a failure. [ 353.500835][T14043] name failslab, interval 1, probability 0, space 0, times 0 [ 353.518375][T13786] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 353.538337][T14043] CPU: 0 UID: 0 PID: 14043 Comm: syz.2.2151 Not tainted 6.14.0-rc3-syzkaller-00702-gb66e19dcf684 #0 [ 353.538367][T14043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 353.538379][T14043] Call Trace: [ 353.538387][T14043] [ 353.538395][T14043] dump_stack_lvl+0x241/0x360 [ 353.538426][T14043] ? __pfx_dump_stack_lvl+0x10/0x10 [ 353.538449][T14043] ? __pfx__printk+0x10/0x10 [ 353.538472][T14043] ? __kmalloc_cache_noprof+0x48/0x390 [ 353.538502][T14043] ? __pfx___might_resched+0x10/0x10 [ 353.538535][T14043] should_fail_ex+0x40a/0x550 [ 353.538569][T14043] should_failslab+0xac/0x100 [ 353.538597][T14043] __kmalloc_cache_noprof+0x70/0x390 [ 353.538624][T14043] ? virtio_transport_do_socket_init+0x57/0x300 [ 353.538664][T14043] virtio_transport_do_socket_init+0x57/0x300 [ 353.538702][T14043] vsock_assign_transport+0x4e6/0x660 [ 353.538733][T14043] vsock_connect+0x5cf/0xe70 [ 353.538765][T14043] ? aa_sk_perm+0x96d/0xab0 [ 353.538795][T14043] ? __pfx_vsock_connect+0x10/0x10 [ 353.538824][T14043] ? __pfx_autoremove_wake_function+0x10/0x10 [ 353.538856][T14043] ? __might_fault+0xc6/0x120 [ 353.538886][T14043] __sys_connect+0x288/0x2d0 [ 353.538915][T14043] ? __fget_files+0x2a/0x410 [ 353.538942][T14043] ? __pfx___sys_connect+0x10/0x10 [ 353.538984][T14043] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 353.539017][T14043] ? do_syscall_64+0x100/0x230 [ 353.539059][T14043] __x64_sys_connect+0x7a/0x90 [ 353.539088][T14043] do_syscall_64+0xf3/0x230 [ 353.539115][T14043] ? clear_bhb_loop+0x35/0x90 [ 353.539147][T14043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.539178][T14043] RIP: 0033:0x7f17d878d169 [ 353.539195][T14043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.539212][T14043] RSP: 002b:00007f17d9512038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 353.539233][T14043] RAX: ffffffffffffffda RBX: 00007f17d89a5fa0 RCX: 00007f17d878d169 [ 353.539247][T14043] RDX: 0000000000000010 RSI: 0000400000000000 RDI: 0000000000000007 [ 353.539259][T14043] RBP: 00007f17d9512090 R08: 0000000000000000 R09: 0000000000000000 [ 353.539271][T14043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.539283][T14043] R13: 0000000000000000 R14: 00007f17d89a5fa0 R15: 00007ffd6f3c80b8 [ 353.539314][T14043] [ 353.719393][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 353.788398][T13786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.804659][T13786] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.833201][T10319] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.840387][T10319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.862301][T10319] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.869526][T10319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.920517][T14048] netlink: 'syz.1.2152': attribute type 4 has an invalid length. [ 354.018423][T13786] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 354.046890][T13786] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 354.239882][T14055] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2154'. [ 354.481684][T13783] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 354.512915][T13783] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 354.585003][T13783] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 354.632352][T13783] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 354.686966][T13786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.818597][T13786] veth0_vlan: entered promiscuous mode [ 354.854210][T13786] veth1_vlan: entered promiscuous mode [ 354.929013][T13783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.970895][T14072] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2159'. [ 355.013774][T13786] veth0_macvtap: entered promiscuous mode [ 355.044045][T13786] veth1_macvtap: entered promiscuous mode [ 355.064498][T13783] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.106374][T10332] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.113568][T10332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.123993][T14075] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2160'. [ 355.174539][T13786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.213870][T10332] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.221095][T10332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.270232][T13786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.299971][T13786] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.339638][T13786] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.348427][T13786] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.370848][T13786] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.382617][T14082] FAULT_INJECTION: forcing a failure. [ 355.382617][T14082] name failslab, interval 1, probability 0, space 0, times 0 [ 355.459453][T14082] CPU: 0 UID: 0 PID: 14082 Comm: syz.2.2163 Not tainted 6.14.0-rc3-syzkaller-00702-gb66e19dcf684 #0 [ 355.459485][T14082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 355.459498][T14082] Call Trace: [ 355.459505][T14082] [ 355.459514][T14082] dump_stack_lvl+0x241/0x360 [ 355.459545][T14082] ? __pfx_dump_stack_lvl+0x10/0x10 [ 355.459567][T14082] ? __pfx__printk+0x10/0x10 [ 355.459590][T14082] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 355.459620][T14082] ? __pfx___might_resched+0x10/0x10 [ 355.459654][T14082] should_fail_ex+0x40a/0x550 [ 355.459689][T14082] should_failslab+0xac/0x100 [ 355.459718][T14082] kmem_cache_alloc_node_noprof+0x77/0x380 [ 355.459746][T14082] ? __alloc_skb+0x1c3/0x440 [ 355.459782][T14082] __alloc_skb+0x1c3/0x440 [ 355.459808][T14082] ? mark_lock+0x9a/0x360 [ 355.459839][T14082] ? __pfx___alloc_skb+0x10/0x10 [ 355.459865][T14082] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 355.459899][T14082] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 355.459938][T14082] virtio_transport_alloc_skb+0x4b/0xe90 [ 355.459970][T14082] ? __vsock_bind+0xc63/0xe20 [ 355.459995][T14082] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 355.460025][T14082] virtio_transport_send_pkt_info+0x56f/0x10b0 [ 355.460054][T14082] ? __vsock_bind+0xc63/0xe20 [ 355.460092][T14082] virtio_transport_connect+0xd9/0x140 [ 355.460115][T14082] ? __pfx_virtio_transport_connect+0x10/0x10 [ 355.460142][T14082] ? __pfx_vsock_auto_bind+0x10/0x10 [ 355.460167][T14082] ? vsock_assign_transport+0x51f/0x660 [ 355.460199][T14082] vsock_connect+0xbdc/0xe70 [ 355.460231][T14082] ? aa_sk_perm+0x96d/0xab0 [ 355.460260][T14082] ? __pfx_vsock_connect+0x10/0x10 [ 355.460289][T14082] ? __pfx_autoremove_wake_function+0x10/0x10 [ 355.460322][T14082] ? __might_fault+0xc6/0x120 [ 355.460352][T14082] __sys_connect+0x288/0x2d0 [ 355.460380][T14082] ? __fget_files+0x2a/0x410 [ 355.460406][T14082] ? __pfx___sys_connect+0x10/0x10 [ 355.460444][T14082] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 355.460477][T14082] ? do_syscall_64+0x100/0x230 [ 355.460510][T14082] __x64_sys_connect+0x7a/0x90 [ 355.460540][T14082] do_syscall_64+0xf3/0x230 [ 355.460568][T14082] ? clear_bhb_loop+0x35/0x90 [ 355.460601][T14082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.460628][T14082] RIP: 0033:0x7f17d878d169 [ 355.460646][T14082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.460662][T14082] RSP: 002b:00007f17d9512038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 355.460683][T14082] RAX: ffffffffffffffda RBX: 00007f17d89a5fa0 RCX: 00007f17d878d169 [ 355.460699][T14082] RDX: 0000000000000010 RSI: 0000400000000000 RDI: 0000000000000007 [ 355.460711][T14082] RBP: 00007f17d9512090 R08: 0000000000000000 R09: 0000000000000000 [ 355.460723][T14082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.460735][T14082] R13: 0000000000000000 R14: 00007f17d89a5fa0 R15: 00007ffd6f3c80b8 [ 355.460767][T14082] [ 355.812805][T14086] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2162'. [ 358.273772][ T5859] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 358.287181][ T5859] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 358.299027][ T5859] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 358.310818][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 358.321827][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 358.322091][ T5859] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 358.331350][ T5844] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 358.343445][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 358.354049][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 358.367094][ T5859] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 358.378198][ T5859] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 358.394151][ T5859] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 358.449405][T10329] bond0 (unregistering): Error: No native XDP support for the current bonding mode [ 358.459877][T10329] ------------[ cut here ]------------ [ 358.465395][T10329] WARNING: CPU: 0 PID: 10329 at net/core/dev.c:9921 unregister_netdevice_many_notify+0x1b5c/0x2070 [ 358.476181][T10329] Modules linked in: [ 358.480191][T10329] CPU: 0 UID: 0 PID: 10329 Comm: kworker/u8:18 Not tainted 6.14.0-rc3-syzkaller-00702-gb66e19dcf684 #0 [ 358.491303][T10329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 358.501897][T10329] Workqueue: netns cleanup_net [ 358.506735][T10329] RIP: 0010:unregister_netdevice_many_notify+0x1b5c/0x2070 [ 358.514232][T10329] Code: f4 f7 90 0f 0b 90 e9 49 ff ff ff e8 fe ce f4 f7 90 0f 0b 90 eb 97 e8 f3 ce f4 f7 90 0f 0b 90 e9 99 f0 ff ff e8 e5 ce f4 f7 90 <0f> 0b 90 e9 09 f2 ff ff e8 d7 ce f4 f7 90 0f 0b 90 e9 71 f3 ff ff [ 358.534240][T10329] RSP: 0018:ffffc900030f7820 EFLAGS: 00010293 [ 358.540408][T10329] RAX: ffffffff89ccebab RBX: 00000000ffffffa1 RCX: ffff8880124cbc00 [ 358.548417][T10329] RDX: 0000000000000000 RSI: 00000000ffffffa1 RDI: 0000000000000000 [ 358.556741][T10329] RBP: ffffc900030f7a10 R08: ffffffff89ccddb0 R09: fffffbfff1d3a614 [ 358.564922][T10329] R10: dffffc0000000000 R11: fffffbfff1d3a614 R12: ffffc90003de1000 [ 358.573002][T10329] R13: 1ffff1100fd25186 R14: ffff88807e928c30 R15: ffff88807e928c28 [ 358.581073][T10329] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 358.590117][T10329] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 358.597420][T10329] CR2: 0000400000c53030 CR3: 00000000542d2000 CR4: 00000000003526f0 [ 358.605544][T10329] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 358.613635][T10329] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 358.621699][T10329] Call Trace: [ 358.625010][T10329] [ 358.627963][T10329] ? __warn+0x165/0x4d0 [ 358.632282][T10329] ? unregister_netdevice_many_notify+0x1b5c/0x2070 [ 358.638909][T10329] ? report_bug+0x2b3/0x500 [ 358.643501][T10329] ? unregister_netdevice_many_notify+0x1b5c/0x2070 [ 358.650215][T10329] ? handle_bug+0x60/0x90 [ 358.654592][T10329] ? exc_invalid_op+0x1a/0x50 [ 358.659354][T10329] ? asm_exc_invalid_op+0x1a/0x20 [ 358.664472][T10329] ? unregister_netdevice_many_notify+0xd60/0x2070 [ 358.671109][T10329] ? unregister_netdevice_many_notify+0x1b5b/0x2070 [ 358.677823][T10329] ? unregister_netdevice_many_notify+0x1b5c/0x2070 [ 358.684617][T10329] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 358.691544][T10329] ? __pfx___might_resched+0x10/0x10 [ 358.696872][T10329] ? __pfx_call_rcu+0x10/0x10 [ 358.701659][T10329] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 358.707958][T10329] ? remove_nexthop+0xe2/0x180 [ 358.712849][T10329] ? nexthop_net_exit_batch_rtnl+0x100/0x150 [ 358.718867][T10329] cleanup_net+0x76d/0xd60 [ 358.723416][T10329] ? __pfx_cleanup_net+0x10/0x10 [ 358.728409][T10329] ? process_scheduled_works+0x9c6/0x18e0 [ 358.734240][T10329] process_scheduled_works+0xabe/0x18e0 [ 358.739912][T10329] ? __pfx_process_scheduled_works+0x10/0x10 [ 358.745948][T10329] ? assign_work+0x364/0x3d0 [ 358.750647][T10329] worker_thread+0x870/0xd30 [ 358.755295][T10329] ? __kthread_parkme+0x169/0x1d0 [ 358.760416][T10329] ? __pfx_worker_thread+0x10/0x10 [ 358.765567][T10329] kthread+0x7a9/0x920 [ 358.769736][T10329] ? __pfx_kthread+0x10/0x10 [ 358.774375][T10329] ? __pfx_worker_thread+0x10/0x10 [ 358.779623][T10329] ? __pfx_kthread+0x10/0x10 [ 358.784254][T10329] ? __pfx_kthread+0x10/0x10 [ 358.788891][T10329] ? __pfx_kthread+0x10/0x10 [ 358.793587][T10329] ? _raw_spin_unlock_irq+0x23/0x50 [ 358.798823][T10329] ? lockdep_hardirqs_on+0x99/0x150 [ 358.804134][T10329] ? __pfx_kthread+0x10/0x10 [ 358.808771][T10329] ret_from_fork+0x4b/0x80 [ 358.813291][T10329] ? __pfx_kthread+0x10/0x10 [ 358.817925][T10329] ret_from_fork_asm+0x1a/0x30 [ 358.822796][T10329] [ 358.825860][T10329] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 358.833162][T10329] CPU: 0 UID: 0 PID: 10329 Comm: kworker/u8:18 Not tainted 6.14.0-rc3-syzkaller-00702-gb66e19dcf684 #0 [ 358.844200][T10329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 358.854262][T10329] Workqueue: netns cleanup_net [ 358.859046][T10329] Call Trace: [ 358.862325][T10329] [ 358.865260][T10329] dump_stack_lvl+0x241/0x360 [ 358.869950][T10329] ? __pfx_dump_stack_lvl+0x10/0x10 [ 358.875154][T10329] ? __pfx__printk+0x10/0x10 [ 358.879754][T10329] ? _printk+0xd5/0x120 [ 358.883916][T10329] ? __init_begin+0x41000/0x41000 [ 358.888952][T10329] ? vscnprintf+0x5d/0x90 [ 358.893287][T10329] panic+0x349/0x880 [ 358.897189][T10329] ? __warn+0x174/0x4d0 [ 358.901356][T10329] ? __pfx_panic+0x10/0x10 [ 358.905782][T10329] ? ret_from_fork_asm+0x1a/0x30 [ 358.910738][T10329] __warn+0x344/0x4d0 [ 358.914735][T10329] ? unregister_netdevice_many_notify+0x1b5c/0x2070 [ 358.921333][T10329] report_bug+0x2b3/0x500 [ 358.925667][T10329] ? unregister_netdevice_many_notify+0x1b5c/0x2070 [ 358.932266][T10329] handle_bug+0x60/0x90 [ 358.936432][T10329] exc_invalid_op+0x1a/0x50 [ 358.940950][T10329] asm_exc_invalid_op+0x1a/0x20 [ 358.945809][T10329] RIP: 0010:unregister_netdevice_many_notify+0x1b5c/0x2070 [ 358.953013][T10329] Code: f4 f7 90 0f 0b 90 e9 49 ff ff ff e8 fe ce f4 f7 90 0f 0b 90 eb 97 e8 f3 ce f4 f7 90 0f 0b 90 e9 99 f0 ff ff e8 e5 ce f4 f7 90 <0f> 0b 90 e9 09 f2 ff ff e8 d7 ce f4 f7 90 0f 0b 90 e9 71 f3 ff ff [ 358.972623][T10329] RSP: 0018:ffffc900030f7820 EFLAGS: 00010293 [ 358.978699][T10329] RAX: ffffffff89ccebab RBX: 00000000ffffffa1 RCX: ffff8880124cbc00 [ 358.986680][T10329] RDX: 0000000000000000 RSI: 00000000ffffffa1 RDI: 0000000000000000 [ 358.994667][T10329] RBP: ffffc900030f7a10 R08: ffffffff89ccddb0 R09: fffffbfff1d3a614 [ 359.002645][T10329] R10: dffffc0000000000 R11: fffffbfff1d3a614 R12: ffffc90003de1000 [ 359.010623][T10329] R13: 1ffff1100fd25186 R14: ffff88807e928c30 R15: ffff88807e928c28 [ 359.018609][T10329] ? unregister_netdevice_many_notify+0xd60/0x2070 [ 359.025119][T10329] ? unregister_netdevice_many_notify+0x1b5b/0x2070 [ 359.031749][T10329] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 359.038520][T10329] ? __pfx___might_resched+0x10/0x10 [ 359.043818][T10329] ? __pfx_call_rcu+0x10/0x10 [ 359.048504][T10329] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 359.054765][T10329] ? remove_nexthop+0xe2/0x180 [ 359.059538][T10329] ? nexthop_net_exit_batch_rtnl+0x100/0x150 [ 359.065526][T10329] cleanup_net+0x76d/0xd60 [ 359.069957][T10329] ? __pfx_cleanup_net+0x10/0x10 [ 359.074915][T10329] ? process_scheduled_works+0x9c6/0x18e0 [ 359.080645][T10329] process_scheduled_works+0xabe/0x18e0 [ 359.086221][T10329] ? __pfx_process_scheduled_works+0x10/0x10 [ 359.092218][T10329] ? assign_work+0x364/0x3d0 [ 359.096822][T10329] worker_thread+0x870/0xd30 [ 359.101435][T10329] ? __kthread_parkme+0x169/0x1d0 [ 359.106496][T10329] ? __pfx_worker_thread+0x10/0x10 [ 359.111618][T10329] kthread+0x7a9/0x920 [ 359.115699][T10329] ? __pfx_kthread+0x10/0x10 [ 359.120316][T10329] ? __pfx_worker_thread+0x10/0x10 [ 359.125438][T10329] ? __pfx_kthread+0x10/0x10 [ 359.130038][T10329] ? __pfx_kthread+0x10/0x10 [ 359.134664][T10329] ? __pfx_kthread+0x10/0x10 [ 359.139266][T10329] ? _raw_spin_unlock_irq+0x23/0x50 [ 359.144468][T10329] ? lockdep_hardirqs_on+0x99/0x150 [ 359.149674][T10329] ? __pfx_kthread+0x10/0x10 [ 359.154282][T10329] ret_from_fork+0x4b/0x80 [ 359.158711][T10329] ? __pfx_kthread+0x10/0x10 [ 359.163316][T10329] ret_from_fork_asm+0x1a/0x30 [ 359.168096][T10329] [ 359.171454][T10329] Kernel Offset: disabled [ 359.175870][T10329] Rebooting in 86400 seconds..