last executing test programs: 1m6.916388071s ago: executing program 2 (id=135): r0 = socket(0x11, 0x3, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x0, 0x0, 0x0, 0x2}, 0x14}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000380), &(0x7f00000003c0)=0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000008500000011000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x2, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000000}, 0x24000041) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000080)={'hsr0\x00', {0x2, 0x4e24, @empty}}) 1m6.38655629s ago: executing program 2 (id=142): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000040)=@newtaction={0x18, 0x30, 0x10, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10, 0x800) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000200)={'broute\x00', 0x0, 0x4, 0x55, [0x0, 0x8, 0x5, 0x2, 0xf29f, 0xffffffffffffa0a6], 0x5, &(0x7f0000000100)=[{}, {}, {}, {}, {}], &(0x7f0000000180)=""/85}, &(0x7f0000000280)=0x78) 50.865868027s ago: executing program 2 (id=142): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000040)=@newtaction={0x18, 0x30, 0x10, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10, 0x800) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000200)={'broute\x00', 0x0, 0x4, 0x55, [0x0, 0x8, 0x5, 0x2, 0xf29f, 0xffffffffffffa0a6], 0x5, &(0x7f0000000100)=[{}, {}, {}, {}, {}], &(0x7f0000000180)=""/85}, &(0x7f0000000280)=0x78) 36.474524228s ago: executing program 2 (id=142): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000040)=@newtaction={0x18, 0x30, 0x10, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10, 0x800) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000200)={'broute\x00', 0x0, 0x4, 0x55, [0x0, 0x8, 0x5, 0x2, 0xf29f, 0xffffffffffffa0a6], 0x5, &(0x7f0000000100)=[{}, {}, {}, {}, {}], &(0x7f0000000180)=""/85}, &(0x7f0000000280)=0x78) 23.095632859s ago: executing program 2 (id=142): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000040)=@newtaction={0x18, 0x30, 0x10, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10, 0x800) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000200)={'broute\x00', 0x0, 0x4, 0x55, [0x0, 0x8, 0x5, 0x2, 0xf29f, 0xffffffffffffa0a6], 0x5, &(0x7f0000000100)=[{}, {}, {}, {}, {}], &(0x7f0000000180)=""/85}, &(0x7f0000000280)=0x78) 9.943297231s ago: executing program 2 (id=142): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000040)=@newtaction={0x18, 0x30, 0x10, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10, 0x800) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000200)={'broute\x00', 0x0, 0x4, 0x55, [0x0, 0x8, 0x5, 0x2, 0xf29f, 0xffffffffffffa0a6], 0x5, &(0x7f0000000100)=[{}, {}, {}, {}, {}], &(0x7f0000000180)=""/85}, &(0x7f0000000280)=0x78) 5.597803994s ago: executing program 4 (id=624): pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000002900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x3, [@enum64={0x6, 0x5, 0x0, 0x13, 0x0, 0x0, [{0xf, 0x2, 0xffff}, {0x5, 0x8000, 0xffffffff}, {0x8, 0x8, 0x80000000}, {0x4, 0xfffffffa, 0x9}, {0x2, 0xf, 0x4}]}, @type_tag={0x3, 0x0, 0x0, 0x12, 0x4}, @volatile={0x0, 0x0, 0x0, 0x9, 0x5}, @func={0xf, 0x0, 0x0, 0xc, 0x2}, @int={0x8, 0x0, 0x0, 0x1, 0x0, 0x4e, 0x0, 0x64, 0x4}]}, {0x0, [0x2e]}}, &(0x7f00000002c0)=""/13, 0x97, 0xd, 0x1, 0x1f46, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000029c0)={0x11, 0x15, &(0x7f0000002780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10000}, {}, {}, [@ldst={0x3, 0x3, 0x2, 0x1, 0x1, 0x6, 0xfffffffffffffff0}, @generic={0xef, 0x0, 0x5, 0x7}, @ldst={0x0, 0x2, 0x1, 0x6, 0xb, 0xffffffffffffffc0, 0x1}, @exit, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x10001, 0x9c, &(0x7f0000002840)=""/156, 0x41100, 0x10, '\x00', r2, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x0, 0xe, 0x1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f00000000c0)={r5, 0x1, 0x10, 0x0, 0x4}, &(0x7f0000000300)=0x18) sendmsg$nl_netfilter(r0, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4004}, 0xc, &(0x7f0000000200)={&(0x7f0000000500)={0x2254, 0x2, 0x4, 0x301, 0x70bd26, 0x25dfdbff, {0x2, 0x0, 0x8}, [@nested={0xc, 0x13f, 0x0, 0x1, [@typed={0x8, 0x134, 0x0, 0x0, @ipv4=@broadcast}]}, @generic="6961678c97e5f83476b8", @generic="bb1308111df554539d7f32ced0bfd72ba6ebf633a2c216ef3c7496f681da0e95370ea2a7068ab1dfd87fab3415c2a291dc13a6dcce0bde3898a617f9db39bd24309b38e98e4c01b5e12fb9ffdb964b0eb144eb8fb076eccd02ee320e770b8f5005e8ea5cd673d0e7ee91c3aa66e227e8829b0b963ba9da2cf719d7fa6cbc00d880772d3d19c50ed4f2333d7ed4f48438f7f0d85b9e30890159b89eed7439eab756459fb2e6a5fca7e98be46b6f2d9d4cb81463ff234a7e725181ad1bdc3e9438c8f1d2b40c9f1fc0b31eea74823a71c6074fd50161d084469135d817e63ff4578c0049e033a2eb059093bdead8a09e9a0ad370e560142232bd373a74230f95366ec3ba964e05e26a02541ff7f02fa987eacb156d02d52c6ad5ea699d59b895dbb8b317f2e14c01deccded602d580891e918696fac0c09e6ff4b1be394d6b2180890ff154e8abbe2da5696b41dda27eea9f2f672c9f1ba320c02f927db271a5ced97bb1dcf8d99605fba7d5f2c64ff0873d649b876f513491aee3cf266ecaa4364ee636376ed79215b8f0088e28e65d1f429416154a3aaeee811a2eb839b0f64b514ec8656c8b28c7c8337a29cfe896517cb4301432eec509b30b35c06e76da4bf8c173c82310cdce41a1525f78c62949d3af62ff01086378244c8d305ed42b07ec82dc3f27fc6f8b6e84209fb0d7e4db10e1b162520f7c683c80d14403c2b1eabb2f7252b8dfc4510f64ee123658d3495027bf7d85192efe1ead4d2dca06c4a99f2ac0531ccef36e8dbe9467688c4aa90025c9f2492bc590cf189d7f34903503af5e53cbe5d3400cc76efe2f511574e3d5937953bc7443a425dadf23b4913239fea7418521f46f409ff2fd633c8a9d4cbacfaf539f0ec9d27a929e56ccd5e52896e00ca21220310d115a17e5e8105b8049f4c204434c0f2bbcd0eae3c8e50a8dba7b7da5624bef8f1d3a190a4f84bea7903cdd78db58582bb6fa42f2355e389c3a6611068803d6b39a77b69ca2965e5de60457af71fd3cc5e7189bbe1b789ea9c100ec7cc410dd56ab61cb6125e30c22f7c5dd7a70b1fdc9430d7194d99a8e3a20af9497084fb665f321ec4072a10e6aff1f2e959c375115d2bd80ca50cb919c3b23dccc1ca4dae11d0822d0673bccccf9752c2224a11484a465d67ba75de4d6a94a06fd94353156248d037520d32a3fd61f43b4df0805fe4402e2223fe74be2a7902ac7589edf45f845d2cf525d191c041415435a4e5e452b0990561bd26655ffd2c291a0a0ec96b1509474d655f376ae2cdbcc62b19026becf9365510991e4903b49aab0017ab5942712c78546d0a9bd22a71dc1066cb0beb0b8cc7cf45397234219d552715e54d28bec094225e67600d6ed8158bd9484976a9d246647ccac431d3bc5860312f5b5efa7c3a57998e13dd71637b673fe5e70da1a04111c2f5e70c02a49069879c5fcbe37407d70eb0aee50c4c786cd586a7029e15bb64dec062b72e751a66a0592b6251cf8917a15644b9d22ded5801dff2eaa3980a49342b94ed6b4531e932d8308c40586528b38f4b85aac590d109e6dd7f5d20638d2bee56e4872fc93a45915623214197b12309c0a670db0e1879dfdf346729cd61707b947c56732124dbceb03bf71f8e3667b667ac9c40bbc6631bcaf4fd0c9040b59a2d502f7c19fa3bd5794bdffe57ac5ed66780a8e051ef3a59f8f744bc659b87fce51ffa7c91131460ca2bc13f55619400e67d396b8e41c44d8e770e1b8de274e7c560c7800a189caa5deae508535c2c816a106227e12962fcfc5a0d370a9af06525cbb7d7982a5021c9989e46989cfc4c09a4e3905a25fc42fbf3fb16c9fb50c267100574cca5c81f3e226c584f115aad30b8322584ee32fedab52e338712f23d6653819e7eeb3d6c861fa0b5e63b1b5397e2c5024051c5c71917a59df20e1c559a34cf1b5a8c476928fc33544a7463cbd049ddd0f34e5b92cd2e3fd65e50cae6cbfe6342a55bb69ba061516dad7a2e4012e73e78bd427d16150d93a1855c73c25b180c75941eebc5549b2c5f09c2f4b2fc218b6d6c9a4a1025977df3ecdc6a794f7a3d1e7a4fd399ee562449e2472d584e3664201176f76721532132fc8bd6e40e029643658d0b2f6297be4b80ed29efca832d8dbb132af88747214a18fc6a75851eab0d2808c4bc3f7d76758b67959c47503d93e7fef55c1cc5256605edd67e802b4238b7601b396baac48f392862c0cfc5e81af095ee0185e7f4b2ccbbec2eef04648a95c61d8e5dd531588b1091161ad7b6fcf5aec1147a37bff1c7b920f25faa87657bc7ee1592fc8bbd64f0cecb4aa67137882012ee6bb701eec91934d6830ecef847a3a787051eedb8edffa71fa09e2c409aa72ba98643f95bb6d1a5c33d7e2c7061f01aada2556608ca38dbbf47f5ed9d46ae05c934b1bb9fdc25a15ba7835154a7a22ba04346e905b51fe62b2fc0454b36e41fb2ce458fe1ab52b2c1c4a4a99554fd45b7931862bf6954424e90aa535219c8a8c6145f944e9c4677473ffa0f3787f6f89444574578f667d2d1f63e0efcfc6262cdb38429dc1113648aac31ccdeb6fc6fbf87ee047ac7a9feccebb996c07a7bbda9a079c65271be1038319755f2339d304bec7ae0481ee93d463f413c55b3f8b319d85b0c3bf38b85c6d1c2bf5f2755d08abd188e589ec3f52aa7333ad19b681aea199e1355b8c5b325db501b4ddd403f4100d81f50f013c6658eb52443d67a92724c235274cbe03d0d63223c9b3bc813b1b926f9ef96c2254da5f2807cd227c723b557e35806e69e65f4171138298e072eb5681606144ff181a5756444930344f8ce732d37668ff6a2199302ea96ed8fb0141fa32d6bc9a2d5a9031d66d7c2135ab536b9f80bdd269d56ad1fe770f58dfd6140aeae1190f97378cb677bc1d2071e3bb25b225550e1225c334c794cdffc4113d7ce0c133e6bb2b11061ee45be538102b910f1069e9e0cdf820cfc5d85ab20316ec5473f9b9deacb5f2511055e95c7831db50944895ec264ea4e646e78a4f2874ed097938917dd171f66975e1cb1ed5fd27e944665328555e97bf241a6a17684ee2d4c8e1b8682fbc36b1bd3cb41c539059adc0cec32a579f34fba09f3f8f0577d8bed955cf647e52a2f3239fcec8de97918c198b7b484e82d57fc34b04d6a2041055848d5a1e91c755e99683c7c62d5c756df1f49167480646dabe84a8a5a07bc2c0b370d9fa73045e39d91c29706041d7b6a0f019cd043d5738f66e27fc5a01b4f8430e79c7e93444a668576bec2bf1cd08ac3c2ec90f6ca100f2dfd725a5514c800323b8c10e2a17e736d5c82ba9693b9696ed5f030576ab5b6db9b65f69975687a5548dd2ea722e416c4f64bbf8fd5bd618db6e2cdd4ca86bd07fdf2da2ed896bb71176b54f073e74ac6c1465876b11ae1bb0813c41ed3ee1d93bdcc49cb545d463e45322e3eeca9f66e0f4051f05b309efa9e53b81a41b5aeb914073e30195da9b54a3271e6b658f3b2bd0dc14b63a97f692b13c81a947946980a87a9a677d1a7859de25bb8130ef3644faa66f83396ce1e0bfb7d3927b32bd9978d8d4ae51856e2e5bea539b4a844168abcc68d5a20f7fb740af2c96cd11f65a574502cfdfd022c345f32c2c44245a72e16351d9373466adf5d9085b47c63e49c95743ac512e4cab54492066b1eb30262e630cd825c2e8038dda5a3e58c1560ed1ca6da49c1253301aba93374d18d88eee61b3d537d74578be633dbb71a551c52f3acf03e73def2772a5b993c36588f1f0c2e8c79faec0c6239b7884cfd241ab3125a3044cd3e2026cad4e470b233cbf74edf02dc5563e4cc4201a03be9077c192f81c0b592702a98791f074f52bb0d4eeb9a4be5229233140c975c351ab77c67bf95002c0b4d0880f83ae7713bc76349f7d77c150c181cb81338353405409a05c63f45158024e9948ef730944396f72b5cb682d5b12533258b38a8797eb2380f7b14440947c654e1cbf02ce8af1b0c52336dd945cf95b9d0b937602ac08705e498367622fbbc2c0cb86a05e45de490610f7b3b8194323de139d4f6740706fd9cccfdfcf98d932c1fd00deb87832dd807f310b445a3d026cfd1ff8eb704387ff8a496367ce7ae5bf3fa8978161dafdbdb25a2c9d0b94791ef182125b94b544601696143547a3d1798731c5906c05a709d7da8fde9ae3c142057224f9a379dcf21fde8547b56baacc1fae9349452bdfdc7c8af577e1720270d665dd99dfc5aa8f0190a62d29093a99e690d1b337fd188b2c036562b0db6552c45170ec58edf853f93c33bd95b4a5d5ee65224ef2a734fda67c68a85b48ab33d5ca938f642fcbafe599cdfd08f766f659771eef17d217f45c0c677fd88a0f178b9d684963f372593fbd9d5bafd4533ac3c715a6f1e24d6a05b807a1ce109c82789e181c910377c2dee4a5053d88717fc967389aeb82d81ba634a582df179073712a97abc96e8c35c68101eb147c0047602a4c3d10cab66963dc229b9c3528da984804df47a023c614f5077ecb573fce6712e8c347c5dc72c4236e39f72fa75e53e2701e51c21479d3457e2bf0ee14dcfc99aa71127b07ca54d3b3bd1efbe3692f5c6a04ee97f10e174c8eddb5d19a75168ff8a1fe68b69b52ea5746dbeacf5e345f14a08679a94ab0cf07b13692ddd1ff13987c0f95ac6c41e96af813d4006af50969e1de6a68c7f5c288c1cf5df133c4c63f88ba1403b9698a571f262b28a7c0ce3b6f9b8e9892eead0f2734a9121e9a39157b06d92811d6b77fee1c31a0d56e471b56fbfa83aacef90a5fa31daae471eca85d5500762d8d4611011790baca3253efcf850f02d0cdeb7439fe4466ac3273f9229d7a34b06ca3165de5701a0cdbd62df9458029ffecca3e52575ef6f36038a649bd91a633bdc8ad20c2ef36536bb7792834b69fa842a3f306122af1a45f319ae8502f4393aadf89d968f35b12fcf5841ab59a7b9213b83b823804ba2212c7decbdeec54a36944e999712fef8bf729ea8d5643c8cc31661f9ee9ad645790faef81a62e83812440ada295f8d4e343230c3cf5eb87cc4ac6301f64bea020188852af0dbe47e552eb3a6a34d1cec898a25f1e4e65a404490fb7812961c40f389182736db419c4955410bf0399fbd7700b266e68fe2c214e0a7515a2c2068f3b90950efd30f8292636a265a84f5080af047b0c8c20b05bc65a4419f97e871342514306a19d045fdd346a4dc30d5bf14a9bbd5c150fd3746d09fec53238abddd4f07d1edb93eb2eb8f46c0d62f3e16e917954374d3554841763cdeaa9346effbaa35165aa0cd245dce725d21ea39e62cff7dd6457dd650915abca9e55693bbb3c483295e46b03de6f3653d8b760de526b16a6256c01b2699870c2b5f1b0fd569edfec315233b68cf09fa017ce900cb73900184144bba756c6a36c9e90a9d4d17ced951fb7fdb6db9ffe844f1b4728cf7c828c4146fecd5f31e0c8ef3bce46e45791445e860401f6efa055936cf9bff96e4d3208ec17feca939c054652e06bfbea08873503156b6d0ab80388e9a32dfc98a472747966f7eeebaff871c39a821546ee8d36218fd919e51e7a6a44222648e27dc1df943a2ff30dec5c9ef7d62cf52b5f16c4353d21aa2becf71bf7d30e1924f04678195f3dba28c353102a0dd8525b3ad6aa37c363e1cb2965e57b63fea152a973d774addc9f30512024168450d0d6c8197bde8b8dd1ad2c09af0f6f761691694177160e6befa9ad88aa37ad533f8b116063b712347032459184a42704680d1708", @generic="dbf82fe3a6b341c0356be9d4e86971874f5136507cd591ebbbd0c601084ab93390c993db80bc53d56a3a965a4e6b2d9ba136a31b7a391e2a5a3e0e421e9ba14ed1325d0e3f3f41d05050f45eced8376f98230a413e9a3e27c3ae1ef7447d218ae2b6343bd8674789c34585ea547f32c04b4ad925192c4391621bb8a60ddb9cc59423299da0a3cc09315fda64f02e93aefec5471dab5f37f3ad9c0151ce7fc2625e6fb4a0019adefe6249aabafe44a8118864f0ca28fc607b8e8756d64762cbe81f2a3c10425f64027741f295b01475790dbad49b9fe43172769a6b93242f8ab2fffbdbacf23ce8ba4d4a070e881d0b023d", @nested={0x7f, 0x136, 0x0, 0x1, [@generic="974cd4ff303ab81226bf0c", @typed={0x8, 0xe3, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0xe3, 0x0, 0x0, @u32=0x6}, @nested={0x4, 0x11e}, @typed={0x41, 0x11a, 0x0, 0x0, @binary="80ba6ce0053aa766d06bea1b81f81efb7470ce57dbc2d2fd260ed04d888a500da01293dec65fc776dfcf4413f8409cb417fc7ad86682b4b88af3af6f58"}, @nested={0x4, 0x62}, @nested={0x4, 0xf0}, @nested={0x4, 0x29}, @typed={0xc, 0x38, 0x0, 0x0, @u64=0x6}]}, @generic="29ea3d0bfafaee1c2f77aaa0ff7313e83cec96e390d476e30d68f2a4010549b67b87818a4b59beb374454fa46c1aa6313996ba5e68a2fa8257596cac5c2be7d2c7e90ff6d3723a4e87a17c49bc65e63726e6f9756a761f8f8a8071fced63753ae4ab9eb7b479687f37f1610a5b670a0079cc4aa7b0f9cc7d4217ccd4a73e9107affe41b4e438625b70acfb21acbbad8991eae56f71b3e7b2a138cda151377f39ea7592ee848e0f271c5c62aa4f0aa579b067ce06b9725e", @generic="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"]}, 0x2254}, 0x1, 0x0, 0x0, 0x4}, 0x9063852a75a799aa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x5, 0x0, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r6, 0x0, 0x82, 0x0, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r7, 0x114, 0x8, &(0x7f0000000040)=0x1, 0x4) getsockopt$EBT_SO_GET_INFO(r6, 0x0, 0x80, &(0x7f0000000140)={'filter\x00', 0x0, 0x0, 0x0, [0x30a9, 0x2, 0x4, 0x2, 0x0, 0x9]}, &(0x7f0000000040)=0x78) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000120000000000000000851000000600000018100000", @ANYRES32, @ANYBLOB="0000000000000000660000000000000018000000f8ffffff00000000000000809500000000000000360a00000000000018010000202078250000000000202020db1af8ff10010000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.453495479s ago: executing program 1 (id=629): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='westwood\x00', 0x9) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448e1, &(0x7f0000000000)={0x0, 0x0, "957008"}) getsockopt$inet_opts(r2, 0x0, 0xc, 0x0, &(0x7f0000000780)) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x83113193c2d18c9d}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) 2.630390772s ago: executing program 3 (id=633): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000008000000000000000000611200000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x8, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x15) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), r1) sendmsg$SMC_PNETID_GET(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x98, r2, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_1\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x8000}, 0x8080) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000340)=@generic={&(0x7f0000000300)='./file0\x00', r0}, 0x18) sendmsg$netlink(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000003500)={0xe0, 0x13, 0x1, 0x0, 0x0, "", [@generic="d8f00d2c09a739aaf9a450f21dd3ab4b0551f902cbf669a2e5ac6b1a5317c2d9532d75ff4393c8de5aed294ee89cd85a07ecb834de0e49d5bb9ff633e6425c1ba3849a0e10f972e2f4d18aabb3175c574e59c6419f3b9f60f7779c868d9c7b400f20c00ca51b4c9e29f97a9bdd9620d71a84a46d52dd3dc1661e478c9a1934d5e0cdd5f2c9076e879ddca6639824c343424bd884dc991f14b5b58ce35b1699bd64dd4e7e4e5cde2ff49723c8624f33298c16cf9d4c41b9e61c8416bd52700661880e486563693121216e05c62f"]}, 0xe0}], 0x1, 0x0, 0x0, 0xc848}, 0x4) 2.427220394s ago: executing program 3 (id=634): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="030b28bd4625937000ffdbdf2503"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20040880) 2.388188694s ago: executing program 1 (id=635): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x4, [@float={0x4, 0x0, 0x0, 0x10, 0x2}, @int={0xa, 0x0, 0x0, 0x1, 0x0, 0x65, 0x0, 0x5e}, @ptr={0x6, 0x0, 0x0, 0x2, 0x4}, @enum={0xf, 0x1, 0x0, 0x6, 0x4, [{0x10, 0x5}]}]}, {0x0, [0x2e, 0x30]}}, &(0x7f0000000140)=""/112, 0x58, 0x70, 0x0, 0x1000, 0x0, @void, @value}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x0, 0x3, &(0x7f0000000200)=ANY=[@ANYRES8, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000ac0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x1e, &(0x7f0000000280)=0x4, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r3, 0x8b22, &(0x7f0000000040)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r6, &(0x7f0000000300)={{0x3, @default, 0x2}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5f00f965", @ANYRES16=r5, @ANYBLOB="010001000000000000000c0000002400018008000100", @ANYRES32=0x0, @ANYBLOB="0800030002000000080003000000000008000300020000004000018014000200626f6e645f736c6176655f3100000000140002006970365f7674693000000000000000001400020076657468305f746f5f626f6e64000000"], 0x78}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r9, 0x8983, &(0x7f0000000040)={0x6, 'nr0\x00', {0x1}, 0x2}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r9, 0x8982, &(0x7f00000000c0)={0x0, 'veth1_to_team\x00', {}, 0x4}) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r10, 0x0, 0x138) recvmsg(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x100) connect$packet(r8, &(0x7f0000000000)={0x1f, 0xf8, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) shutdown(r8, 0x1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@fallback, 0x2, 0x0, 0xfffffffc, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f00000003c0)=[0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0], 0x0}, 0x40) r12 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000500)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)={@fallback=r6, r1, 0x4, 0x2010, r8, @value=r12, @void, @void, @void, r11}, 0x20) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x8, 0x0, 0x0, 0x100, {{0x5, 0x4, 0x0, 0x0, 0xfffffffffffffdc4, 0x0, 0x0, 0x8, 0x5e55b37311de6d89, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 2.314800265s ago: executing program 3 (id=636): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x24, 0x2, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x51}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xb0}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) listen(r0, 0xc) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000000)={0x0, 0x2710}, 0x10) accept(r0, 0x0, 0x0) 2.227174275s ago: executing program 0 (id=637): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000fbffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000000c0)=0x1210204, 0x4) 2.165489464s ago: executing program 0 (id=638): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="4000a2000e0002"], 0x30}}, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x604ab000) sendmsg$tipc(r5, &(0x7f0000002780)={0xfffffffffffffffd, 0x0, &(0x7f0000002640)=[{&(0x7f0000001300)="82d884b6aed12788ddfef1940be095db0bf63777928c4c56d304823a09788d96e1652914ad719cbf255ce8873e83e5556b4a4f3dc4edb3fbffb7605367870b502fd86c74b9dc3da6c947eec5968c9c719704d249ff79ab4581dba3508c868db1abee48452ec4361ede2d357aff9b9ab5429f52ec249cc364534774287e14bfda4c", 0x81}, {&(0x7f0000000100)="9ceb156601c24a8da345218bb3e252b59025c881", 0x14}, {&(0x7f00000013c0)="906517", 0x3}, {&(0x7f0000001400)="2b44b6307c4467978b600e7daeb3430bccb0b35d964d46dacb257d31300198c9b4a1d1b93989899184359db1f305f9a8a7f42b153a002991083a5f71740cf82351eb665fb162ec147521cc8cfff2492fdacae27b69b899590cf448d81573ca76b579705612a0554fbd7d671fdefae77cae1e1a119b2684a20eec7ff123557ff0e935b07e1cb7585fbe412634c591ca0e0f63c9135ce8e22df3e6290a522c0c3adca1738172ef39648346e083d727a4424b24764ffc5caf1bed32b9bed9e3c2823e8a39d40556a88605d23a0d50d0732c45b8f57fe09e", 0xd6}, {&(0x7f0000001500)="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", 0xe92}, {&(0x7f0000002500)}], 0x6}, 0x4000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f00000002c0)=0x40) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="f78d9ca38fff4811bf5216c36ee9466aa5bb3448412ba8", 0x10}], 0x0, &(0x7f00000001c0)=[@assoc={0x0, 0x117, 0x4, 0x1001}], 0x20}], 0x1, 0x41) setsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000000280)={@dev={0xfe, 0x80, '\x00', 0x20}, r6}, 0x14) 1.912929478s ago: executing program 4 (id=639): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x23, &(0x7f0000000340)={0x0, 0x5}, 0x8) (async) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/user\x00') (async) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r2, &(0x7f0000000240)={&(0x7f00000002c0)={0x24, @short}, 0xb, &(0x7f0000000080)={0x0}}, 0x0) (async) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000100)) 1.735090551s ago: executing program 0 (id=640): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) poll(&(0x7f0000000040), 0x55, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x20000000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@bridge_newvlan={0x34, 0x71, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r6}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x1}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x1}}}]}, 0x34}}, 0x20008000) 1.734504897s ago: executing program 4 (id=641): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async, rerun: 32) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty, 0x5}, 0x1c) syz_emit_ethernet(0x52, &(0x7f0000000840)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x18, 0x11, 0x1, @remote, @mcast2, {[], {0x4e20, 0xe22, 0x18, 0x0, @wg=@data={0x4, 0xf, 0x6}}}}}}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) (async, rerun: 32) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) (async, rerun: 32) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001b40)=""/153, 0x99}, {&(0x7f0000005c40)=""/4100, 0x1004}, {&(0x7f0000000680)=""/206, 0xce}], 0x3}, 0x7}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001c00)=""/4101, 0x1005}, {&(0x7f00000008c0)=""/229, 0xe5}, {&(0x7f0000000240)=""/105, 0x69}, {&(0x7f00000000c0)=""/17, 0x11}, {&(0x7f0000000480)=""/124, 0x7c}, {&(0x7f0000003c40)=""/4092, 0xffc}], 0x6}, 0x7ffffffe}, {{0x0, 0x0, 0x0}, 0x5}], 0x5, 0x18042, 0x0) 1.569269581s ago: executing program 4 (id=642): syz_emit_ethernet(0x22, &(0x7f0000001540)={@local, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x2f, 0x14, 0x68, 0x0, 0x1, 0x2e, 0x0, @loopback, @broadcast}}}}}, 0x0) r0 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000340)=0x10, 0x80000) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000200)=ANY=[@ANYBLOB="c4000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a0000000000000031bd347957ade3e8f39919a2f25268d32c402f36a5fb67de593d627ab0c6f03cba2847f56eba4d4388810afae44d6a5b2a8605006066d80194fc3d37d7dbdd216a79f64f0d6ba2185e1453af49e6524c0f9a026ad1ec75204d0ada83b6a446278969694242492ed37fe2ecb56853", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a00000000000003000000000000000200000000000008000000000000000000010002000000000c0015000100010010000000"], 0xc4}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="b800000014000100000000006df9aee4fc00000000000000000000000000000100070000000000000000000000008000000000000a0000000000c256a078000057bbe6bed2c749bf295d38379dee801f7db8605edd68eb4e7b6b973de896a8de6847cbec2b36160cfcc10c2c0f3e8a806a2725f94e3519d8ce4e5309047df00010d689e428305d8d91b5ef55070000002d8fef5fbe6c210a5ba0c0f2278bc419aaa0ad369c960272001000000000000067f4079af22bbecdc38949c10bbc9a2b80db8c351e66b7209e7fdccca1799b66962c44f042d4f1f91cf28989cc3d1fb8d376527d1f186a65778f606700"/250, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/112], 0xb8}}, 0x10) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={0x1, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_xfrm(r1, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)=@getae={0x98, 0x1f, 0x2, 0x70bd2b, 0x25dfdbfd, {{@in=@multicast2, 0x4d2, 0xa, 0xff}, @in=@broadcast}, [@replay_val={0x10, 0xa, {0x70bd25, 0x70bd27}}, @replay_thresh={0x8, 0xb, 0x5}, @user_kmaddress={0x2c, 0x13, {@in6=@empty, @in6=@mcast2, 0x0, 0x2}}, @etimer_thresh={0x8, 0xc, 0xffffffff}, @offload={0xc, 0x1c, {r4, 0x1}}]}, 0x98}, 0x1, 0x0, 0x0, 0x8840}, 0x4004080) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000500)={'wg2\x00'}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000001c0)={'netdevsim0\x00', &(0x7f0000000140)=@ethtool_coalesce={0xe}}) r6 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r6, 0x107, 0xb, 0x0, &(0x7f0000000100)=0xfffffffffffffdde) bind$netrom(r3, &(0x7f0000000080)={{0x3, @bcast}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x12, 0x9, &(0x7f0000000380)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000500000085000000ba000000a70000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb13, @void, @value}, 0x94) 1.382801891s ago: executing program 1 (id=643): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000120208807000008048000980282100f8060001000a00000014000200fe8000400000000000000000000000aa05000300000000001c000080060008000200e00000017a51181b710e5ae4240001"], 0x21c}, 0x1, 0x0, 0x0, 0x24040010}, 0x4) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, 0x0, &(0x7f0000000480)) (async) r4 = socket$kcm(0x11, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r7 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000200)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r8, 0x0) (async, rerun: 64) r9 = socket(0x1e, 0x4, 0x0) (rerun: 64) ioctl$SIOCX25SSUBSCRIP(r9, 0x89e1, 0x0) (async) recvmsg$unix(r5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) syz_open_procfs$namespace(r10, 0x0) sendmsg$kcm(r4, &(0x7f0000000580)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x47}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000080)="5a5a5718fb956db600001800886b", 0xe}], 0x1}, 0x90) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="44010000100033060000000000000000e0000002000000000000000000000000fe8000000000000000000000000000ff00000000000000000000000084000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001fffffffd32000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bcb619241ce46738cde9000000000000000000000000050000000000000000000000000000000000000002000000000000000a000400000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00"], 0x144}}, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38010000100033", @ANYRES16=r11], 0x138}}, 0x0) 1.31910136s ago: executing program 0 (id=644): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000002100390d0000000000000000ac141400000000000000000000000000f702000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50}}, 0x0) 1.253305796s ago: executing program 3 (id=645): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8fff7ff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b70500000000e000720a23fe000000008500000012000000b70000000000000095000000000000004e6258941c823b7505608556ba4ababb42684e890d31ae450400373a0a5447a801b8c1c4f0c4bd97c6555e61345400f9bd42abeb9ade0105000000000000a21902ff07000094a2b51c21df74924f5436a6ed89b98f75e800230c49c90fe1336481f3b92a63336c36fcd745d61d7739c6554ca201000000bebbe8282f8b1e26407437a397bf8f50e87ed4d27adfd876bffc402887781979461c4363bc5c9b6202ea471428197ef88bc333fbcec0ea4334f1ddb9d679ae95a90fd41d528f58d305000000435883df6c10ce86188c92292b2d0226082960be682836bdff8b0971f2a5405e453228e7b1005bd73479358a90df3e481947de6453736aa572158af6ea63d6d418fbbd2bba050000001da000ef78df03000000d19913a5fb03c79dac2e489f68127892658115e7ffb588a71dffffff951b8535167ab8069a2c92a3aa18e22517000026637b4c34bf2d0aa304ed42bf70480e9e97203fd169411f37fddd1f7fbe16dbbc0f307bceb5064f388a0350c3dc928b0e638b1e2b2a9d25264233e5d45eb377f56b95241024dbe30f67191c2b56b70328d6d3215dfffe5d89af1d10599bd494d921d1fb2db99b6aba0fa978f41eb1d4c553e5a9326ed550c13f8dd36716a899a1e79234294707c5312b924d142c17b20bb80ee202222c03fa84ccc374e717f694018630366397266090a82343aedfbf7afe892390c2eb775b0d16073da2229958db05de7df6ab7600004000010000006d8081cb3bf251d906c00da0e23b50465f8394820be571e3592d0000c7ef10fdc462e7040e7074ec43aa461fc54401a76406db718d4efd6c1bd10ce1d087cf9bba461162555a95524c84df0952d32093082b7aa71304e0d2d9ec310d1b676b378a5879e47941de1a28c3a8f400000000000000000e032b7d2badd0bc6617a859b7ac273b6304555f664469cec152030f06cc0ca1765838eb5590264736fbccfc3a8f4e3b10daf6a275daf5db2dac7096fe8ac8876acaad043663b3b0fedb05e6d31408fa20140c9d2db1c59ac8a3ce28e489d67d87d3a107ccea3007f58f2c5017e8807107f79ac50cc1d4f546b4443d137eb706b71b1767a10cca7a7c82b76c96e874aff249f36329a6526b354b6e674b08f7ef492b804c4b08fb10de807d79fd782027318cd7632e22d2faa16209272b39b5ec8d239832ea02cc88e249a2e77753a58987547571fbc8de747faab724bebb6401412b496e078fcb6c78ab447e871b76a8b0506f49594aa1d610567e14d739a60ff3ce04d0d2e5681e787c7e1ad25467bb81f2f440128207fe07a83759ec30cf9e0a3fd3f2fcee97fe8d273f8e712a8a64eaf2d89a1fa44554357fcd7ab531ff7a41c27164fca430a62d015b477de61853f5ee2e25b00a63642ec32ece2ff3bb5883deb895f52a923b5c744d8dccdd6a09ded8b90f1eeda8e6e884a4f090edb6ab9fc8107846508d51f3735493d5860cf80200ce31b92eb3563d485b5a7d192092d7a9fd2bc67d305d1d4573aad5f6501d1cd27657ce17330402dacb78d72d776330711645eed7d4c292f4448733c0826c4eb950f3d40457f82d7f792d106518f6bde874aff9e2bea7d73f74bebeeacfc700000000000000000000d40d73be47803297db004264c8c70b7761b22a7114a078a87d63d63b0c9dcc263a5b773bfeba212abef4181ad9e4872e328c0f105d51e3d167a2b717051d7681ba04552eeba18a000000b22b50d76d85040c9000ea68a528049a60d5e26b20455194f4be3b8466fd66d0e6cefcff7891c485d61cb66f4076cd60a22733cb00cf7cc12ca7d9bb864c0e650236a79a5c85349a9b1e6bbc3bace197e72490c566431cd3a08e9d1b641c1ba1f661d01573b904c3fa1427370fa15cecd294ac21fefe3d161fdf58e8bc5957ef145839f4370176e1be88d2e3516a1998c1621a00b4438b85a4dfee6f61827a1e50e158038b037dfda3ffb35069e41fc740ae720800de53948f176c3c15f3a529c02434b920d87f12a6e3420a2fdcb3559e7a5b1ddbb06b7a5977f63bfac701e673bf626d126b213c92e7169a930beb8d76f9db34e8098bea301baa96916d6458c923866dc192928b320738d1b298fb55f2a64500000000000000000000000000509885a38d9d995a46817e7ff7acddcc5f9253c63f86baf33f92820c9ff497cf76b6482c3ab53fb6ecea6d220b91b99b2fb4279ab09ae0645ab92df309000000000000a4868411948f8e3e259b717d722a1eebd3f6860a17f1ae9e10a1178f6aef4951b192d13e9600c1f700ca7b1d127e451034469bf2a8f93dbae6ad8e932e431dc18323794156238625bb9c45c5a76a68a8646e701b29a71ffbd854f50f195823106a5625ff94221f1f04c72525b50aae69081de9626de9847bf53475d90642d9730101d80b1b0000000000000000822b0641698d60160d9157548302dd2636d12c431f96728ae4a45361e6d47a1c4a52d67c0f0a62585c09fcfd70d0f249f87c44b47283c1c6f2430d70c751e4ada9b646e6e7c1719faee476d88a2943c71a21db55b7497dd7ed385ac2e8cb916390a3a0ed52e7371e1a141e69afa07b46ac20f3521fb251b72c82ee1c7eb4f67c0deed5618d0db925ce7a7c50a99835544c540f5d528587d1a26e78df1bc9a8e4d90c57d0b8122eae7b23e4456624f5337c16c42648c7a3d0b799ad409befe0cbe2aa781ba826918df7aa80dff4f62258e54419629eb1d37de7f6a3512bd618781d1ad3a4d4b0da44df9f9a93f0487f79a9b16dfa6f68b06ce6a96ca344d194cded05702c2300d1a4f451b33830765f8131f6c28fada65701851bba089b8a8347900e72d68cea965feb6a06225dd3f0e135323a5bde3b43c9d242b73abf9e05336af040a4a6bb5918146393f1d50705c1d1e986bf2f690de51ee8727d37339df5391db535bb1e9bb3e5dadb6e5a2bb4faa2dcbc6ca9b40ac96e448b9dadeb08fc2cf3a960f22bf20b9e967b7a75687372b8e3edc543896c360674d901a7f56b07ba1479b46eea3d94026a9c7e670ab40bb2c1ca1a7c90299361239bef773140af974c7efc285a64633d21513481b3ac62dec9fa3e8ce6156d76b82baa145bc550b0ccbc0934ccfea45292caa2f0654fe18dc0669a4f2af9fa232a293ad94261f55675cc686db72783a6bacc0df6a1ea943ae266af112f35319980cd681811a369e0d03cf7d22bed7cbe1afe498b88942b1bf7edae441a0d0d88fce65cb4e848793a28cbd7373f6acd3b5a48c034e487750388929d37fa3165f205dab3be5f3e5781a84298687cbf02dcaf0e14a2b260293f349d076eb75a2ddc5382d106f0beea02aa45018fe36d1176cf7704383b6922d10dc80bc7feca3982ae232d4bb47c722c83a7cf6ee8832f038b072eb803a47cd7f753e80c9f6eedb8"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) listen(r1, 0x9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r3}, 0x10) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000080)=@ipv4_newaddr={0x3c, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x4, 0x2, @dev}, @IFA_BROADCAST={0x8, 0xb, @loopback}, @IFA_CACHEINFO={0x14}]}, 0x3c}}, 0x0) r6 = accept(r4, 0x0, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x40895, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x20, 0x1405, 0x1, 0x0, 0x0, "", [{{0x8}, {0x4}}]}, 0x20}}, 0x0) 1.146489601s ago: executing program 4 (id=646): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0xfffffffb}, @FRA_DST={0x8, 0x1, @initdev={0xac, 0x1e, 0x4, 0x0}}, @FRA_FLOW={0x8, 0xb, 0xccb}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_OP={0x8}, @NFTA_EXTHDR_DREG={0x8}]}}}]}], {0x14, 0x10}}, 0xb0}}, 0x0) 1.066394102s ago: executing program 0 (id=647): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) (async) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r4) (async) ioctl$SIOCSIFHWADDR(r4, 0x8b26, &(0x7f0000000400)={'wlan1\x00'}) (async) ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f0000000680)={0x18, 0x0, {0x3, @remote, 'geneve1\x00'}}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @remote, @local}, &(0x7f00000002c0)=0xc) (async) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xc, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) (async) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) (async) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@generic={&(0x7f0000000480)='./file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x19, &(0x7f00000000c0)=@raw=[@map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x6}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffa}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0xaa308daaf472725, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @ldst={0x1, 0x3, 0x4, 0x0, 0x7, 0x100, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xff}}], &(0x7f0000000000)='syzkaller\x00', 0x5, 0xf3, &(0x7f00000001c0)=""/243, 0x40f00, 0x10, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x9, 0x9, 0x800}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000500)=[r0, r6, r7, r8, r9], &(0x7f0000000540)=[{0x0, 0x2, 0x8, 0x2}], 0x10, 0x7000000, @void, @value}, 0x94) (async) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000080)='wg0\x00') 1.012919834s ago: executing program 1 (id=648): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000040), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x58, 0x10, 0x401, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x183, 0x120a1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_COST={0x8, 0x3, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40448c1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'lo\x00'}) recvmsg$unix(r2, &(0x7f0000001700)={&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000001640)=[{&(0x7f0000000200)=""/147, 0x93}, {&(0x7f00000002c0)=""/86, 0x56}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/198, 0xc6}, {&(0x7f0000001440)=""/79, 0x4f}, {&(0x7f00000014c0)=""/200, 0xc8}, {&(0x7f00000015c0)=""/69, 0x45}], 0x7, &(0x7f00000016c0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x1) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="27051c00340f14000600002fb96dbcf706060000170000005f52f491fdd6e755bdd54ec5ff11", 0x26}], 0x1}, 0x9cdc2384016b48f8) 637.216974ms ago: executing program 4 (id=649): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000001200140000006000000001002f00fe88a43de1a400000000000000007d01ff02000000000000000000000000000112"], 0xfdef) 189.463216ms ago: executing program 3 (id=650): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000010000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd608a96460014040000000000000000000000000000000000fe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5090780000000000"], 0x0) 153.2144ms ago: executing program 1 (id=651): syz_emit_ethernet(0xdb, &(0x7f0000000580)={@remote, @dev, @void, {@ipv4={0x800, @igmp={{0x2b, 0x4, 0x3, 0x1e, 0xcd, 0x65, 0x0, 0x5, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x3c, 0xcb, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xe}, {@broadcast, 0x6}, {@local, 0x3}, {@private=0xa010101, 0x1b81}, {@loopback, 0x6}, {@private=0xa010101, 0x7}, {@broadcast, 0x23}]}, @cipso={0x86, 0x59, 0x1, [{0x7, 0x11, "cfaf8b53408099b2eda742029f104a"}, {0x6, 0x4, "7bfa"}, {0x3, 0xd, "750b92941fb5b8b329d5bb"}, {0x0, 0xd, "d72500a7e71e27c9801471"}, {0x6, 0x8, "cfba35b59a64"}, {0x5, 0x6, "b785cbbf"}, {0x1, 0x5, "739bfe"}, {0x2, 0x11, "b0e509171f69e74af2822bbdaa4d9a"}]}]}}, {0x12, 0x3, 0x0, @private=0xa010102, "3f0ed7cbe1e964fc85bc7f01dedc517295ca9a3c7a1595c91a"}}}}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socketpair(0x9, 0x6, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kvm_age_hva\x00', r0, 0x0, 0x1}, 0x18) 101.47767ms ago: executing program 3 (id=652): r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@phonet, &(0x7f0000000080)=0x80) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r1, 0x410, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x31}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x44000080}, 0x400c0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xa, 0x8, 0x72, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x6e, 0x2, 0x7}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000440)={'syztnl2\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x10, 0x7, 0x2, 0x68, {{0x14, 0x4, 0x3, 0x1, 0x50, 0x65, 0x0, 0x9, 0x29, 0x0, @broadcast, @private=0xa010102, {[@noop, @end, @end, @noop, @timestamp_prespec={0x44, 0x24, 0x2a, 0x3, 0x9, [{@multicast2, 0x10001}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@remote, 0x1}, {@multicast2, 0x1}]}, @noop, @generic={0x94, 0xa, "f4a08edc1a538871"}, @ssrr={0x89, 0x7, 0x16, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000500)={'syztnl0\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x2f, 0xff, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @private1, 0x700, 0x1, 0x0, 0xb}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000540)={'wg2\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000680)={'tunl0\x00', &(0x7f0000000580)={'ip_vti0\x00', 0x0, 0x7, 0x7, 0x1, 0x80, {{0x2d, 0x4, 0x1, 0x9, 0xb4, 0x66, 0x0, 0x9, 0x2f, 0x0, @multicast2, @remote, {[@cipso={0x86, 0x2a, 0x3, [{0x0, 0xc, "e6c01fb9cb5716779b58"}, {0x5, 0x9, "c473dcb30ea1f2"}, {0x5, 0x3, "ed"}, {0x2, 0x9, "f9a1c15b4ce053"}, {0x0, 0x3, "10"}]}, @cipso={0x86, 0x1c, 0x1, [{0x7, 0x12, "bc5db52f11a4222993326661bbc49d2e"}, {0x1, 0x4, '2W'}]}, @timestamp_prespec={0x44, 0x1c, 0x86, 0x3, 0x4, [{@private=0xa010100, 0x1}, {@loopback, 0x1731}, {@local, 0x3800000}]}, @timestamp_addr={0x44, 0xc, 0xae, 0x1, 0x0, [{@broadcast, 0x1000}]}, @noop, @ssrr={0x89, 0x13, 0x1b, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @local]}, @rr={0x7, 0x1b, 0xc6, [@dev={0xac, 0x14, 0x14, 0xb}, @dev={0xac, 0x14, 0x14, 0x39}, @remote, @broadcast, @dev={0xac, 0x14, 0x14, 0xe}, @rand_addr=0x64010102]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000740)={'gre0\x00', &(0x7f00000006c0)={'gretap0\x00', 0x0, 0x7888, 0x700, 0xffffff00, 0x9, {{0x14, 0x4, 0x0, 0x9, 0x50, 0x68, 0x0, 0xe0, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}, @empty, {[@generic={0x88, 0x7, "08791f31f3"}, @timestamp_prespec={0x44, 0x34, 0xb5, 0x3, 0x9, [{@private=0xa010100, 0xf}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffff800}, {@private=0xa010101, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80}, {@local, 0x2}, {@remote, 0xfa2}]}, @end]}}}}}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000780)={0x0, @multicast2, @multicast2}, &(0x7f00000007c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'vxcan0\x00', 0x0}) getpeername$packet(r0, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000880)=0x14) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000008c0)={0x178, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_DEBUG_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_DEBUG_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x4040000}, 0x80d1) connect$pppoe(r0, &(0x7f0000000ac0)={0x18, 0x0, {0x1, @local, 'macvlan0\x00'}}, 0x1e) sendmsg$nl_route(r0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)=@mpls_getnetconf={0x34, 0x52, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x5}, @NETCONFA_IFINDEX={0x8, 0x1, r11}, @NETCONFA_IFINDEX={0x8, 0x1, r3}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x100}]}, 0x34}, 0x1, 0x0, 0x0, 0xc044}, 0x20000000) r13 = socket(0x23, 0x1, 0x416) pipe(&(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$nfc_llcp(r14, 0x118, 0x0, &(0x7f0000000c40)=""/74, 0x4a) recvmsg(r14, &(0x7f0000000ec0)={&(0x7f0000000cc0)=@phonet, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000d40)=""/12, 0xc}, {&(0x7f0000000d80)=""/160, 0xa0}], 0x2, &(0x7f0000000e80)=""/11, 0xb}, 0x0) sendmsg$NL80211_CMD_FRAME(r13, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001000)={&(0x7f0000000f40)={0xb4, r1, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0xb}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x9ec}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x51, 0x33, @action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x7f}, @device_a, @broadcast, @random="48cb7135745b", {0x4, 0xf29}, @value=@ver_80211n={0x0, 0xff, 0x2, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}}, @sp_mp_confirm={0xf, 0x2, {0x2000, @default, {0x1, 0x5, [{0x1b}, {0x60, 0x1}, {0x1b, 0x1}, {0x48, 0x1}, {0x12}]}, @val={0x72, 0x6}, @val={0x2d, 0x1a, {0x6, 0x1, 0x3, 0x0, {0x4, 0x7c, 0x0, 0x7, 0x0, 0x1, 0x1}, 0x409, 0xa, 0x8}}}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xbf8}, @NL80211_ATTR_FRAME={0x21, 0x33, @action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @random="9957fbea1f5d", {0x4, 0x7}}, @tdls_setup_cfm={0xc, 0x2, {0x44, 0x5}}}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0xb4}, 0x1, 0x0, 0x0, 0x10}, 0x2400c845) r16 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MIF(r16, 0x29, 0xcb, &(0x7f0000001080)={0x1, 0x1, 0x8, r7, 0x886}, 0xc) r17 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001100), r0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r15, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x24, r17, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x3}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xb68846be0fceebfe}, 0x40000000) sendmsg$NL80211_CMD_SET_PMKSA(r13, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x78, r1, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0xe}, @NL80211_ATTR_PMK={0x14, 0xfe, "8296f27e621e6e412d0b7416c0f47d26"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x5}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x7ff}, @NL80211_ATTR_SSID={0x1a, 0x34, @random="853b69f94e6ac2bbc0e5a5d31302f0f7dedbe10666ed"}, @NL80211_ATTR_FILS_CACHE_ID={0x6}, @NL80211_ATTR_PMKID={0x14, 0x55, "e101f5d0a743bde5e9a59ca1132775e6"}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x40080) getsockname$packet(r14, &(0x7f0000001340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001380)=0x14) r18 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r18, 0xc0c89425, &(0x7f00000015c0)={"accf8132e563413b1f92b4f556bb62a8", 0x0, 0x0, {0x3, 0x9}, {0x4, 0x7f}, 0x65d, [0x4, 0xe, 0x9c, 0x0, 0x9, 0x6c, 0x7, 0x6, 0x4, 0x76ce, 0x7, 0x4, 0x9, 0x8, 0x100000000, 0x1]}) 35.001608ms ago: executing program 0 (id=653): syz_emit_ethernet(0x46, &(0x7f0000000ac0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x10, 0x0, 0x0, @local, @local, {[@dstopts={0x73, 0x1, '\x00', [@ra, @ra]}]}}}}}, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) (async, rerun: 64) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 64) listen(r2, 0xfffffffc) sendto$inet6(r2, &(0x7f0000000100)="061f837a7c7509a2db1818acba5d3063df79c2b512fb33b9db781a2afd5eb00a2c90f1fb9a61ef099e4d5758d4cb45", 0x2f, 0x4004000, &(0x7f0000000140)={0xa, 0x4e20, 0x5, @local, 0x7dd}, 0x1c) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 32) bind$bt_sco(r4, &(0x7f0000000280)={0x1f, @none}, 0x8) listen(r4, 0x0) (async, rerun: 64) socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 64) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x13, 0x0, 0x0) (async, rerun: 32) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000390428bd70000300000000000000", @ANYRES32=r1, @ANYBLOB="00420518d1000100140066c81680100000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8041}, 0x40008000) (rerun: 32) 0s ago: executing program 1 (id=654): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r1, &(0x7f0000000000)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r1, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0xd07, 0xc041}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001e000504000000000000000004"], 0x114}], 0x1}, 0x10) accept$netrom(r1, &(0x7f0000000480)={{0x3, @rose}, [@default, @rose, @null, @null, @netrom, @default, @remote, @null]}, 0x0) 0s ago: executing program 4 (id=655): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, [{0x19, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x22, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x3, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x20000000000002e4, "b8a3e100908f61640000000200007c0000000000000000ffff008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) ioctl$SIOCX25SCAUSEDIAG(r0, 0x89ec, &(0x7f0000000080)={0x7}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.34' (ED25519) to the list of known hosts. [ 79.725753][ T5816] cgroup: Unknown subsys name 'net' [ 79.844137][ T5816] cgroup: Unknown subsys name 'cpuset' [ 79.852954][ T5816] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.575430][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.200614][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.209060][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.217318][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.225153][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.228445][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.233171][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.241563][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.254375][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.262176][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.269649][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.280382][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.280389][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.294821][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.296680][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.303853][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.310797][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.338891][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.348900][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.357279][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.364675][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.390525][ T5150] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.399662][ T5150] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.407367][ T5150] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.417832][ T5150] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.426863][ T5150] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.881890][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 85.082019][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 85.231261][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.238439][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.246448][ T5849] bridge_slave_0: entered allmulticast mode [ 85.255310][ T5849] bridge_slave_0: entered promiscuous mode [ 85.293156][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 85.316635][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.324285][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.331975][ T5849] bridge_slave_1: entered allmulticast mode [ 85.340011][ T5849] bridge_slave_1: entered promiscuous mode [ 85.500756][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 85.513795][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 85.535809][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.546091][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.553768][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.561148][ T5834] bridge_slave_0: entered allmulticast mode [ 85.568421][ T5834] bridge_slave_0: entered promiscuous mode [ 85.596854][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.606748][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.614597][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.622162][ T5834] bridge_slave_1: entered allmulticast mode [ 85.629444][ T5834] bridge_slave_1: entered promiscuous mode [ 85.765088][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.787569][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.794854][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.802641][ T5829] bridge_slave_0: entered allmulticast mode [ 85.810018][ T5829] bridge_slave_0: entered promiscuous mode [ 85.821241][ T5849] team0: Port device team_slave_0 added [ 85.829665][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.852355][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.859657][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.867259][ T5829] bridge_slave_1: entered allmulticast mode [ 85.875089][ T5829] bridge_slave_1: entered promiscuous mode [ 85.898835][ T5849] team0: Port device team_slave_1 added [ 86.022584][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.047709][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.054745][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.080994][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.100827][ T5834] team0: Port device team_slave_0 added [ 86.120619][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.127868][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.135684][ T5832] bridge_slave_0: entered allmulticast mode [ 86.143239][ T5832] bridge_slave_0: entered promiscuous mode [ 86.151601][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.158761][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.166148][ T5832] bridge_slave_1: entered allmulticast mode [ 86.173810][ T5832] bridge_slave_1: entered promiscuous mode [ 86.183596][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.193497][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.200777][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.226857][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.240515][ T5834] team0: Port device team_slave_1 added [ 86.246579][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.254788][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.262134][ T5831] bridge_slave_0: entered allmulticast mode [ 86.269455][ T5831] bridge_slave_0: entered promiscuous mode [ 86.279327][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.286827][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.294116][ T5831] bridge_slave_1: entered allmulticast mode [ 86.302857][ T5831] bridge_slave_1: entered promiscuous mode [ 86.401357][ T5837] Bluetooth: hci1: command tx timeout [ 86.401362][ T51] Bluetooth: hci0: command tx timeout [ 86.401582][ T5837] Bluetooth: hci3: command tx timeout [ 86.408680][ T5829] team0: Port device team_slave_0 added [ 86.412870][ T5150] Bluetooth: hci2: command tx timeout [ 86.472312][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.484120][ T5829] team0: Port device team_slave_1 added [ 86.493228][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.494203][ T5150] Bluetooth: hci4: command tx timeout [ 86.517607][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.525035][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.551196][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.566741][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.610737][ T5849] hsr_slave_0: entered promiscuous mode [ 86.617350][ T5849] hsr_slave_1: entered promiscuous mode [ 86.626910][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.633922][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.659985][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.673661][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.751156][ T5832] team0: Port device team_slave_0 added [ 86.757593][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.764684][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.791708][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.804209][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.811275][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.837319][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.887794][ T5831] team0: Port device team_slave_0 added [ 86.896855][ T5832] team0: Port device team_slave_1 added [ 86.975408][ T5831] team0: Port device team_slave_1 added [ 87.156435][ T5829] hsr_slave_0: entered promiscuous mode [ 87.168435][ T5829] hsr_slave_1: entered promiscuous mode [ 87.176059][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.188491][ T5829] Cannot create hsr debugfs directory [ 87.215806][ T5834] hsr_slave_0: entered promiscuous mode [ 87.227850][ T5834] hsr_slave_1: entered promiscuous mode [ 87.235770][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.248097][ T5834] Cannot create hsr debugfs directory [ 87.254769][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.262200][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.289053][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.301010][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.308015][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.333999][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.373957][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.381637][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.407842][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.419725][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.426769][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.452838][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.675713][ T5832] hsr_slave_0: entered promiscuous mode [ 87.682442][ T5832] hsr_slave_1: entered promiscuous mode [ 87.688548][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.696553][ T5832] Cannot create hsr debugfs directory [ 87.748870][ T5831] hsr_slave_0: entered promiscuous mode [ 87.756146][ T5831] hsr_slave_1: entered promiscuous mode [ 87.762601][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.770435][ T5831] Cannot create hsr debugfs directory [ 88.087277][ T5849] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.145118][ T5849] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.190017][ T5849] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.202039][ T5849] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.306606][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.334578][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.346300][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.358415][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.452897][ T5834] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.464478][ T5834] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.478155][ T5834] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.486013][ T5150] Bluetooth: hci2: command tx timeout [ 88.492245][ T5150] Bluetooth: hci3: command tx timeout [ 88.496636][ T5845] Bluetooth: hci1: command tx timeout [ 88.506950][ T5837] Bluetooth: hci0: command tx timeout [ 88.514333][ T5834] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.560265][ T5837] Bluetooth: hci4: command tx timeout [ 88.644556][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.688830][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.696127][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.726446][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.739854][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.813941][ T5832] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.839688][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.851225][ T5832] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.864467][ T5832] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.886956][ T5832] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.903289][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.933188][ T1313] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.940564][ T1313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.978854][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.986085][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.005249][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.043562][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.066790][ T3480] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.074012][ T3480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.104247][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.135613][ T3480] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.142829][ T3480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.157723][ T3456] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.164925][ T3456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.202378][ T3456] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.209543][ T3456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.356548][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.436710][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.487347][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.516944][ T3480] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.524223][ T3480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.577409][ T3480] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.584668][ T3480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.659177][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.737193][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.744456][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.807634][ T3456] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.814868][ T3456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.030275][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.086978][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.103359][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.230882][ T5829] veth0_vlan: entered promiscuous mode [ 90.305689][ T5829] veth1_vlan: entered promiscuous mode [ 90.383989][ T5849] veth0_vlan: entered promiscuous mode [ 90.476187][ T5849] veth1_vlan: entered promiscuous mode [ 90.545687][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.568941][ T5837] Bluetooth: hci3: command tx timeout [ 90.574874][ T51] Bluetooth: hci2: command tx timeout [ 90.580561][ T5845] Bluetooth: hci0: command tx timeout [ 90.581192][ T5837] Bluetooth: hci1: command tx timeout [ 90.603411][ T5829] veth0_macvtap: entered promiscuous mode [ 90.641654][ T5837] Bluetooth: hci4: command tx timeout [ 90.666156][ T5829] veth1_macvtap: entered promiscuous mode [ 90.708662][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.767006][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.779892][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.791476][ T5849] veth0_macvtap: entered promiscuous mode [ 90.807654][ T5849] veth1_macvtap: entered promiscuous mode [ 90.834652][ T5831] veth0_vlan: entered promiscuous mode [ 90.852950][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.868972][ T5829] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.878023][ T5829] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.889091][ T5829] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.898139][ T5829] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.921936][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.972047][ T5831] veth1_vlan: entered promiscuous mode [ 90.982977][ T5849] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.993386][ T5849] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.002690][ T5849] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.012113][ T5849] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.074785][ T5832] veth0_vlan: entered promiscuous mode [ 91.089642][ T5834] veth0_vlan: entered promiscuous mode [ 91.168084][ T5832] veth1_vlan: entered promiscuous mode [ 91.186454][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.200094][ T5831] veth0_macvtap: entered promiscuous mode [ 91.206556][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.237424][ T5834] veth1_vlan: entered promiscuous mode [ 91.297520][ T5831] veth1_macvtap: entered promiscuous mode [ 91.331101][ T3456] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.337553][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.349258][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.354119][ T3456] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.406036][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.452076][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.452509][ T5834] veth0_macvtap: entered promiscuous mode [ 91.489756][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.509988][ T3456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.519061][ T3456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.549022][ T5834] veth1_macvtap: entered promiscuous mode [ 91.562879][ T5832] veth0_macvtap: entered promiscuous mode [ 91.587384][ T5831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.605803][ T5831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.615277][ T5831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.624510][ T5831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.673637][ T5921] netlink: 'syz.0.1': attribute type 4 has an invalid length. [ 91.694312][ T5832] veth1_macvtap: entered promiscuous mode [ 91.704885][ T5921] netlink: 'syz.0.1': attribute type 4 has an invalid length. [ 91.784563][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.813842][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.868614][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.870925][ T5924] af_packet: tpacket_rcv: packet too big, clamped from 60 to 4294967272. macoff=96 [ 91.887420][ T5924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 91.916084][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.005468][ T977] cfg80211: failed to load regulatory.db [ 92.066375][ T5834] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.085569][ T5834] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.096706][ T5834] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.111744][ T5834] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.136846][ T5832] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.177553][ T5832] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.198990][ T5832] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.208960][ T5832] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.238255][ T5935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8'. [ 92.239450][ T5930] Zero length message leads to an empty skb [ 92.248493][ T5934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8'. [ 92.499992][ T3480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.518529][ T3480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.645217][ T5837] Bluetooth: hci0: command tx timeout [ 92.651148][ T51] Bluetooth: hci3: command tx timeout [ 92.651220][ T5150] Bluetooth: hci1: command tx timeout [ 92.656573][ T51] Bluetooth: hci2: command tx timeout [ 92.720907][ T51] Bluetooth: hci4: command tx timeout [ 92.757173][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.773219][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.964161][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.985246][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.288543][ T3456] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.316560][ T3456] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.402888][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.416463][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.565848][ T5961] netlink: 'syz.2.13': attribute type 4 has an invalid length. [ 93.625330][ T5962] netlink: 'syz.2.13': attribute type 4 has an invalid length. [ 93.822820][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.833522][ T5836] hid-generic 0005:0458:005C.0001: item fetching failed at offset 16/20 [ 93.845018][ T5836] hid-generic 0005:0458:005C.0001: probe with driver hid-generic failed with error -22 [ 93.887029][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.907513][ T5971] netlink: 100 bytes leftover after parsing attributes in process `syz.2.16'. [ 93.918424][ T5972] netlink: 100 bytes leftover after parsing attributes in process `syz.2.16'. [ 94.126209][ T5978] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18'. [ 94.344196][ T5987] netlink: 36 bytes leftover after parsing attributes in process `syz.2.21'. [ 94.356995][ T5986] netlink: 'syz.0.20': attribute type 1 has an invalid length. [ 94.371090][ T5989] netlink: 36 bytes leftover after parsing attributes in process `syz.2.21'. [ 95.301331][ T6002] syz.0.23 uses obsolete (PF_INET,SOCK_PACKET) [ 95.525724][ T6013] Cannot find set identified by id 0 to match [ 95.573720][ T6013] netlink: 'syz.3.24': attribute type 13 has an invalid length. [ 95.633385][ T6013] netlink: 'syz.3.24': attribute type 17 has an invalid length. [ 95.968987][ T6013] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 96.296587][ T6044] netlink: 'syz.4.34': attribute type 1 has an invalid length. [ 96.571505][ T6050] veth3: entered promiscuous mode [ 96.863480][ T6069] netlink: 176 bytes leftover after parsing attributes in process `syz.0.42'. [ 96.932655][ T6075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.43'. [ 97.252636][ T6086] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.423998][ T6092] Bluetooth: MGMT ver 1.23 [ 97.479857][ T6098] FAULT_INJECTION: forcing a failure. [ 97.479857][ T6098] name failslab, interval 1, probability 0, space 0, times 0 [ 97.517556][ T6098] CPU: 0 UID: 0 PID: 6098 Comm: syz.1.50 Not tainted 6.15.0-syzkaller-07796-g3ec523304976 #0 PREEMPT(full) [ 97.517596][ T6098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 97.517616][ T6098] Call Trace: [ 97.517625][ T6098] [ 97.517634][ T6098] dump_stack_lvl+0x189/0x250 [ 97.517674][ T6098] ? __pfx____ratelimit+0x10/0x10 [ 97.517700][ T6098] ? __pfx_dump_stack_lvl+0x10/0x10 [ 97.517733][ T6098] ? __pfx__printk+0x10/0x10 [ 97.517772][ T6098] should_fail_ex+0x414/0x560 [ 97.517806][ T6098] should_failslab+0xa8/0x100 [ 97.517840][ T6098] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 97.517873][ T6098] ? __alloc_skb+0x112/0x2d0 [ 97.517910][ T6098] __alloc_skb+0x112/0x2d0 [ 97.517947][ T6098] __netdev_alloc_skb+0x108/0x970 [ 97.517984][ T6098] ? __pfx___netdev_alloc_skb+0x10/0x10 [ 97.518021][ T6098] ? ieee80211_mgmt_tx+0xab0/0x21d0 [ 97.518055][ T6098] ieee80211_mgmt_tx+0x12ec/0x21d0 [ 97.518094][ T6098] ? ieee80211_mgmt_tx+0xab0/0x21d0 [ 97.518134][ T6098] cfg80211_mlme_mgmt_tx+0x7ef/0x1620 [ 97.518178][ T6098] nl80211_tx_mgmt+0x9fd/0xd50 [ 97.518217][ T6098] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 97.518249][ T6098] ? __pfx_netdev_run_todo+0x10/0x10 [ 97.518277][ T6098] ? __pfx___cfg80211_wdev_from_attrs+0x10/0x10 [ 97.518316][ T6098] ? nl80211_pre_doit+0x4f1/0x930 [ 97.518348][ T6098] genl_family_rcv_msg_doit+0x212/0x300 [ 97.518383][ T6098] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 97.518424][ T6098] ? bpf_lsm_capable+0x9/0x20 [ 97.518455][ T6098] ? security_capable+0x7e/0x2e0 [ 97.518489][ T6098] genl_rcv_msg+0x60e/0x790 [ 97.518523][ T6098] ? __pfx_genl_rcv_msg+0x10/0x10 [ 97.518545][ T6098] ? ref_tracker_free+0x63a/0x7d0 [ 97.518571][ T6098] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 97.518599][ T6098] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 97.518628][ T6098] ? __pfx_nl80211_post_doit+0x10/0x10 [ 97.518652][ T6098] ? __pfx_ref_tracker_free+0x10/0x10 [ 97.518694][ T6098] netlink_rcv_skb+0x205/0x470 [ 97.518733][ T6098] ? __pfx_genl_rcv_msg+0x10/0x10 [ 97.518760][ T6098] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 97.518811][ T6098] ? down_read+0x1ad/0x2e0 [ 97.518842][ T6098] genl_rcv+0x28/0x40 [ 97.518865][ T6098] netlink_unicast+0x758/0x8d0 [ 97.518908][ T6098] netlink_sendmsg+0x805/0xb30 [ 97.518938][ T6098] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.518963][ T6098] ? aa_sock_msg_perm+0x94/0x160 [ 97.519004][ T6098] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 97.519028][ T6098] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.519048][ T6098] __sock_sendmsg+0x21c/0x270 [ 97.519079][ T6098] ____sys_sendmsg+0x505/0x830 [ 97.519106][ T6098] ? __pfx_____sys_sendmsg+0x10/0x10 [ 97.519139][ T6098] ? import_iovec+0x74/0xa0 [ 97.519164][ T6098] ___sys_sendmsg+0x21f/0x2a0 [ 97.519188][ T6098] ? __pfx____sys_sendmsg+0x10/0x10 [ 97.519251][ T6098] ? __fget_files+0x2a/0x420 [ 97.519282][ T6098] ? __fget_files+0x3a0/0x420 [ 97.519326][ T6098] __x64_sys_sendmsg+0x19b/0x260 [ 97.519351][ T6098] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 97.519385][ T6098] ? __pfx_ksys_write+0x10/0x10 [ 97.519409][ T6098] ? rcu_is_watching+0x15/0xb0 [ 97.519446][ T6098] ? do_syscall_64+0xbe/0x3b0 [ 97.519478][ T6098] do_syscall_64+0xfa/0x3b0 [ 97.519503][ T6098] ? lockdep_hardirqs_on+0x9c/0x150 [ 97.519527][ T6098] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.519548][ T6098] ? clear_bhb_loop+0x60/0xb0 [ 97.519574][ T6098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.519603][ T6098] RIP: 0033:0x7f01c858e969 [ 97.519621][ T6098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.519639][ T6098] RSP: 002b:00007f01c93a6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.519661][ T6098] RAX: ffffffffffffffda RBX: 00007f01c87b5fa0 RCX: 00007f01c858e969 [ 97.519677][ T6098] RDX: 0000000024008080 RSI: 0000200000000c00 RDI: 0000000000000004 [ 97.519690][ T6098] RBP: 00007f01c93a6090 R08: 0000000000000000 R09: 0000000000000000 [ 97.519703][ T6098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.519715][ T6098] R13: 0000000000000000 R14: 00007f01c87b5fa0 R15: 00007ffffa67bbc8 [ 97.519749][ T6098] [ 98.386596][ T6119] netlink: 'syz.4.57': attribute type 4 has an invalid length. [ 98.484565][ T6122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.59'. [ 98.494876][ T6119] netlink: 'syz.4.57': attribute type 4 has an invalid length. [ 99.578621][ T6176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.77'. [ 99.711385][ T6172] netlink: 'syz.3.76': attribute type 39 has an invalid length. [ 99.804609][ T6175] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 99.909059][ T6189] FAULT_INJECTION: forcing a failure. [ 99.909059][ T6189] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 99.924098][ T6186] FAULT_INJECTION: forcing a failure. [ 99.924098][ T6186] name failslab, interval 1, probability 0, space 0, times 0 [ 99.948106][ T6186] CPU: 1 UID: 0 PID: 6186 Comm: syz.4.80 Not tainted 6.15.0-syzkaller-07796-g3ec523304976 #0 PREEMPT(full) [ 99.948137][ T6186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 99.948149][ T6186] Call Trace: [ 99.948158][ T6186] [ 99.948167][ T6186] dump_stack_lvl+0x189/0x250 [ 99.948205][ T6186] ? __pfx____ratelimit+0x10/0x10 [ 99.948231][ T6186] ? __pfx_dump_stack_lvl+0x10/0x10 [ 99.948264][ T6186] ? __pfx__printk+0x10/0x10 [ 99.948294][ T6186] ? __pfx___might_resched+0x10/0x10 [ 99.948323][ T6186] ? fs_reclaim_acquire+0x7d/0x100 [ 99.948352][ T6186] should_fail_ex+0x414/0x560 [ 99.948393][ T6186] should_failslab+0xa8/0x100 [ 99.948427][ T6186] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 99.948471][ T6186] ? __alloc_skb+0x112/0x2d0 [ 99.948507][ T6186] __alloc_skb+0x112/0x2d0 [ 99.948562][ T6186] skb_copy+0x188/0x800 [ 99.948591][ T6186] ? __pfx___netdev_alloc_skb+0x10/0x10 [ 99.948630][ T6186] ieee80211_attach_ack_skb+0x29/0x290 [ 99.948659][ T6186] ieee80211_mgmt_tx+0x1bcd/0x21d0 [ 99.948698][ T6186] ? ieee80211_mgmt_tx+0xab0/0x21d0 [ 99.948744][ T6186] cfg80211_mlme_mgmt_tx+0x7ef/0x1620 [ 99.948792][ T6186] nl80211_tx_mgmt+0x9fd/0xd50 [ 99.948831][ T6186] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 99.948862][ T6186] ? __pfx_netdev_run_todo+0x10/0x10 [ 99.948890][ T6186] ? __pfx___cfg80211_wdev_from_attrs+0x10/0x10 [ 99.948930][ T6186] ? nl80211_pre_doit+0x4f1/0x930 [ 99.948963][ T6186] genl_family_rcv_msg_doit+0x212/0x300 [ 99.948998][ T6186] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 99.949040][ T6186] ? bpf_lsm_capable+0x9/0x20 [ 99.949071][ T6186] ? security_capable+0x7e/0x2e0 [ 99.949105][ T6186] genl_rcv_msg+0x60e/0x790 [ 99.949139][ T6186] ? __pfx_genl_rcv_msg+0x10/0x10 [ 99.949161][ T6186] ? ref_tracker_free+0x63a/0x7d0 [ 99.949186][ T6186] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 99.949207][ T6186] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 99.949234][ T6186] ? __pfx_nl80211_post_doit+0x10/0x10 [ 99.949258][ T6186] ? __pfx_ref_tracker_free+0x10/0x10 [ 99.949301][ T6186] netlink_rcv_skb+0x205/0x470 [ 99.949335][ T6186] ? __pfx_genl_rcv_msg+0x10/0x10 [ 99.949362][ T6186] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 99.949422][ T6186] ? down_read+0x1ad/0x2e0 [ 99.949454][ T6186] genl_rcv+0x28/0x40 [ 99.949476][ T6186] netlink_unicast+0x758/0x8d0 [ 99.949520][ T6186] netlink_sendmsg+0x805/0xb30 [ 99.949552][ T6186] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.949576][ T6186] ? aa_sock_msg_perm+0x94/0x160 [ 99.949605][ T6186] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 99.949629][ T6186] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.949651][ T6186] __sock_sendmsg+0x21c/0x270 [ 99.949683][ T6186] ____sys_sendmsg+0x505/0x830 [ 99.949711][ T6186] ? __pfx_____sys_sendmsg+0x10/0x10 [ 99.949745][ T6186] ? import_iovec+0x74/0xa0 [ 99.949771][ T6186] ___sys_sendmsg+0x21f/0x2a0 [ 99.949795][ T6186] ? __pfx____sys_sendmsg+0x10/0x10 [ 99.949864][ T6186] ? __fget_files+0x2a/0x420 [ 99.949894][ T6186] ? __fget_files+0x3a0/0x420 [ 99.949939][ T6186] __x64_sys_sendmsg+0x19b/0x260 [ 99.949964][ T6186] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 99.949998][ T6186] ? __pfx_ksys_write+0x10/0x10 [ 99.950022][ T6186] ? rcu_is_watching+0x15/0xb0 [ 99.950059][ T6186] ? do_syscall_64+0xbe/0x3b0 [ 99.950091][ T6186] do_syscall_64+0xfa/0x3b0 [ 99.950114][ T6186] ? lockdep_hardirqs_on+0x9c/0x150 [ 99.950137][ T6186] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.950158][ T6186] ? clear_bhb_loop+0x60/0xb0 [ 99.950183][ T6186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.950202][ T6186] RIP: 0033:0x7f8d3bd8e969 [ 99.950221][ T6186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.950238][ T6186] RSP: 002b:00007f8d3cce1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 99.950260][ T6186] RAX: ffffffffffffffda RBX: 00007f8d3bfb5fa0 RCX: 00007f8d3bd8e969 [ 99.950274][ T6186] RDX: 0000000024008080 RSI: 0000200000000c00 RDI: 0000000000000004 [ 99.950287][ T6186] RBP: 00007f8d3cce1090 R08: 0000000000000000 R09: 0000000000000000 [ 99.950300][ T6186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 99.950312][ T6186] R13: 0000000000000000 R14: 00007f8d3bfb5fa0 R15: 00007ffe3a8db5a8 [ 99.950350][ T6186] [ 100.379253][ T6189] CPU: 0 UID: 0 PID: 6189 Comm: syz.0.81 Not tainted 6.15.0-syzkaller-07796-g3ec523304976 #0 PREEMPT(full) [ 100.379286][ T6189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 100.379298][ T6189] Call Trace: [ 100.379306][ T6189] [ 100.379316][ T6189] dump_stack_lvl+0x189/0x250 [ 100.379354][ T6189] ? __pfx____ratelimit+0x10/0x10 [ 100.379390][ T6189] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.379423][ T6189] ? __pfx__printk+0x10/0x10 [ 100.379447][ T6189] ? __might_fault+0xb0/0x130 [ 100.379492][ T6189] should_fail_ex+0x414/0x560 [ 100.379527][ T6189] _copy_from_user+0x2d/0xb0 [ 100.379550][ T6189] generic_map_update_batch+0x572/0x7f0 [ 100.379588][ T6189] ? __pfx_generic_map_update_batch+0x10/0x10 [ 100.379609][ T6189] ? __fget_files+0x2a/0x420 [ 100.379651][ T6189] ? __pfx_generic_map_update_batch+0x10/0x10 [ 100.379671][ T6189] bpf_map_do_batch+0x369/0x5f0 [ 100.379708][ T6189] __sys_bpf+0x384/0x860 [ 100.379737][ T6189] ? __pfx___sys_bpf+0x10/0x10 [ 100.379781][ T6189] ? ksys_write+0x22a/0x250 [ 100.379812][ T6189] ? __pfx_ksys_write+0x10/0x10 [ 100.379836][ T6189] ? rcu_is_watching+0x15/0xb0 [ 100.379875][ T6189] __x64_sys_bpf+0x7c/0x90 [ 100.379900][ T6189] do_syscall_64+0xfa/0x3b0 [ 100.379925][ T6189] ? lockdep_hardirqs_on+0x9c/0x150 [ 100.379950][ T6189] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.379971][ T6189] ? clear_bhb_loop+0x60/0xb0 [ 100.379998][ T6189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.380018][ T6189] RIP: 0033:0x7f462d18e969 [ 100.380036][ T6189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.380053][ T6189] RSP: 002b:00007f462dfd9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 100.380075][ T6189] RAX: ffffffffffffffda RBX: 00007f462d3b5fa0 RCX: 00007f462d18e969 [ 100.380090][ T6189] RDX: 0000000000000038 RSI: 00002000000006c0 RDI: 000000000000001a [ 100.380107][ T6189] RBP: 00007f462dfd9090 R08: 0000000000000000 R09: 0000000000000000 [ 100.380119][ T6189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.380130][ T6189] R13: 0000000000000000 R14: 00007f462d3b5fa0 R15: 00007ffc27378138 [ 100.380165][ T6189] [ 101.226108][ T6217] tipc: Started in network mode [ 101.234875][ T6217] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 101.252525][ T6217] tipc: Enabling of bearer rejected, failed to enable media [ 101.262408][ T6217] xt_TPROXY: Can be used only with -p tcp or -p udp [ 101.366995][ T6223] FAULT_INJECTION: forcing a failure. [ 101.366995][ T6223] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.416522][ T6223] CPU: 1 UID: 0 PID: 6223 Comm: syz.1.93 Not tainted 6.15.0-syzkaller-07796-g3ec523304976 #0 PREEMPT(full) [ 101.416555][ T6223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 101.416568][ T6223] Call Trace: [ 101.416576][ T6223] [ 101.416585][ T6223] dump_stack_lvl+0x189/0x250 [ 101.416624][ T6223] ? __pfx____ratelimit+0x10/0x10 [ 101.416650][ T6223] ? __pfx_dump_stack_lvl+0x10/0x10 [ 101.416683][ T6223] ? __pfx__printk+0x10/0x10 [ 101.416706][ T6223] ? __might_fault+0xb0/0x130 [ 101.416748][ T6223] should_fail_ex+0x414/0x560 [ 101.416781][ T6223] _copy_from_user+0x2d/0xb0 [ 101.416804][ T6223] generic_map_update_batch+0x51b/0x7f0 [ 101.416839][ T6223] ? __pfx_generic_map_update_batch+0x10/0x10 [ 101.416860][ T6223] ? __fget_files+0x2a/0x420 [ 101.416898][ T6223] ? __pfx_generic_map_update_batch+0x10/0x10 [ 101.416918][ T6223] bpf_map_do_batch+0x369/0x5f0 [ 101.416953][ T6223] __sys_bpf+0x384/0x860 [ 101.416981][ T6223] ? __pfx___sys_bpf+0x10/0x10 [ 101.417019][ T6223] ? ksys_write+0x22a/0x250 [ 101.417049][ T6223] ? __pfx_ksys_write+0x10/0x10 [ 101.417074][ T6223] ? rcu_is_watching+0x15/0xb0 [ 101.417112][ T6223] __x64_sys_bpf+0x7c/0x90 [ 101.417136][ T6223] do_syscall_64+0xfa/0x3b0 [ 101.417162][ T6223] ? lockdep_hardirqs_on+0x9c/0x150 [ 101.417187][ T6223] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.417207][ T6223] ? clear_bhb_loop+0x60/0xb0 [ 101.417232][ T6223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.417252][ T6223] RIP: 0033:0x7f01c858e969 [ 101.417270][ T6223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.417287][ T6223] RSP: 002b:00007f01c93a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 101.417310][ T6223] RAX: ffffffffffffffda RBX: 00007f01c87b5fa0 RCX: 00007f01c858e969 [ 101.417334][ T6223] RDX: 0000000000000038 RSI: 00002000000006c0 RDI: 000000000000001a [ 101.417347][ T6223] RBP: 00007f01c93a6090 R08: 0000000000000000 R09: 0000000000000000 [ 101.417360][ T6223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.417372][ T6223] R13: 0000000000000000 R14: 00007f01c87b5fa0 R15: 00007ffffa67bbc8 [ 101.417405][ T6223] [ 101.775911][ T6230] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.812894][ T6229] netlink: 'syz.0.95': attribute type 8 has an invalid length. [ 101.824956][ T6235] netlink: 28 bytes leftover after parsing attributes in process `syz.2.97'. [ 101.834253][ T6235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.97'. [ 101.843066][ T6235] netlink: 8 bytes leftover after parsing attributes in process `syz.2.97'. [ 101.852402][ T6229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.95'. [ 101.872737][ T6231] netlink: 4 bytes leftover after parsing attributes in process `syz.4.96'. [ 102.391497][ T6262] netlink: 'syz.4.107': attribute type 1 has an invalid length. [ 102.520438][ T6262] veth3: entered promiscuous mode [ 102.537414][ T6269] netlink: 256 bytes leftover after parsing attributes in process `syz.1.110'. [ 102.556818][ T6269] netlink: 'syz.1.110': attribute type 9 has an invalid length. [ 102.609773][ T6270] sctp: failed to load transform for md5: -2 [ 102.641601][ T6267] vlan0: entered promiscuous mode [ 102.646842][ T6267] bridge0: entered promiscuous mode [ 102.660995][ T6267] vlan0: entered allmulticast mode [ 102.692812][ T6267] bridge0: entered allmulticast mode [ 102.722372][ T6269] C: renamed from lo (while UP) [ 102.745846][ T6269] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 102.791296][ T6276] netlink: 72 bytes leftover after parsing attributes in process `syz.0.111'. [ 102.823550][ T6276] netlink: 72 bytes leftover after parsing attributes in process `syz.0.111'. [ 103.062725][ T6289] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 103.275340][ T6300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.120'. [ 103.562009][ T6309] netlink: 'syz.2.122': attribute type 1 has an invalid length. [ 103.634887][ T6312] netlink: 'syz.1.124': attribute type 10 has an invalid length. [ 103.933611][ T6325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.126'. [ 104.108840][ T6314] veth3: entered promiscuous mode [ 104.126190][ T6314] bridge8: port 1(veth3) entered blocking state [ 104.138759][ T6314] bridge8: port 1(veth3) entered disabled state [ 104.157146][ T6314] veth3: entered allmulticast mode [ 104.249467][ T6312] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 104.342719][ T6334] netlink: 'syz.3.129': attribute type 13 has an invalid length. [ 104.784233][ T6356] netlink: 24 bytes leftover after parsing attributes in process `syz.0.138'. [ 104.844233][ T6353] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.856770][ T6353] batadv_slave_0: entered promiscuous mode [ 104.886258][ T6353] batadv_slave_0: entered allmulticast mode [ 104.918226][ T6359] warning: `syz.1.139' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 104.999560][ T6364] netlink: 'syz.4.141': attribute type 1 has an invalid length. [ 105.029467][ T6363] netlink: 'syz.0.140': attribute type 1 has an invalid length. [ 105.234119][ T6365] veth3: entered promiscuous mode [ 105.295255][ T6366] veth3: entered promiscuous mode [ 105.324404][ T6366] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 105.494525][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.755232][ T6389] netlink: 3 bytes leftover after parsing attributes in process `syz.4.149'. [ 105.776218][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.810301][ T6389] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 105.885138][ T6391] netlink: 4 bytes leftover after parsing attributes in process `syz.3.150'. [ 105.911500][ T6393] xt_l2tp: v2 doesn't support IP mode [ 105.937993][ T6394] netlink: 'syz.3.150': attribute type 2 has an invalid length. [ 106.012317][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.275437][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.384380][ T6420] netlink: 14 bytes leftover after parsing attributes in process `syz.4.156'. [ 106.441990][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 106.455625][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 106.463517][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 106.472725][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 106.483133][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 106.633323][ T6420] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.668223][ T6420] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.684744][ T6420] bond0 (unregistering): Released all slaves [ 106.709585][ T6426] batman_adv: batadv0: Adding interface: dummy0 [ 106.727226][ T6426] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.771829][ T6426] batman_adv: batadv0: Interface activated: dummy0 [ 106.825146][ T6427] batadv0: mtu less than device minimum [ 106.837984][ T6427] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 106.850255][ T6427] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 106.862272][ T6427] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 106.874327][ T6427] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 106.886398][ T6427] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 106.898476][ T6427] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 107.170876][ T6440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.162'. [ 107.355719][ T36] bridge_slave_1: left allmulticast mode [ 107.387044][ T36] bridge_slave_1: left promiscuous mode [ 107.394772][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.413104][ T36] bridge_slave_0: left allmulticast mode [ 107.421321][ T36] bridge_slave_0: left promiscuous mode [ 107.427193][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.454915][ T36] veth3: left allmulticast mode [ 107.460059][ T36] bridge8: port 1(veth3) entered disabled state [ 108.561746][ T5837] Bluetooth: hci4: command tx timeout [ 108.617370][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.629141][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.639499][ T36] bond0 (unregistering): Released all slaves [ 108.825112][ T6452] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.842197][ T6452] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.866109][ T6452] bond0 (unregistering): Released all slaves [ 110.128903][ T36] hsr_slave_0: left promiscuous mode [ 110.175422][ T36] hsr_slave_1: left promiscuous mode [ 110.198055][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.206863][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.244775][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.270236][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.285197][ T6533] netlink: 'syz.3.178': attribute type 11 has an invalid length. [ 110.308018][ T6533] __nla_validate_parse: 2 callbacks suppressed [ 110.308036][ T6533] netlink: 224 bytes leftover after parsing attributes in process `syz.3.178'. [ 110.333689][ T6540] net_ratelimit: 13 callbacks suppressed [ 110.333709][ T6540] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x2 [ 110.364610][ T36] veth1_macvtap: left promiscuous mode [ 110.380097][ T36] veth0_macvtap: left promiscuous mode [ 110.386004][ T36] veth1_vlan: left promiscuous mode [ 110.392564][ T36] veth0_vlan: left promiscuous mode [ 110.640336][ T5837] Bluetooth: hci4: command tx timeout [ 110.833263][ T36] team0 (unregistering): Port device team_slave_1 removed [ 110.873808][ T36] team0 (unregistering): Port device team_slave_0 removed [ 111.283784][ T6528] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.292835][ T6528] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.396085][ T6548] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 111.450462][ T6422] chnl_net:caif_netlink_parms(): no params data found [ 111.639989][ T6556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.183'. [ 111.738135][ T6564] netlink: 2 bytes leftover after parsing attributes in process `syz.1.183'. [ 111.770869][ T6564] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 112.007613][ T6572] xt_ecn: cannot match TCP bits for non-tcp packets [ 112.399376][ T6585] netlink: 12 bytes leftover after parsing attributes in process `syz.3.189'. [ 112.537744][ T6422] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.562507][ T6422] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.583386][ T6422] bridge_slave_0: entered allmulticast mode [ 112.606007][ T6422] bridge_slave_0: entered promiscuous mode [ 112.691485][ T6422] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.723844][ T5837] Bluetooth: hci4: command tx timeout [ 112.726552][ T6422] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.801362][ T6422] bridge_slave_1: entered allmulticast mode [ 112.828876][ T6422] bridge_slave_1: entered promiscuous mode [ 112.854230][ T6606] netlink: 12 bytes leftover after parsing attributes in process `syz.4.193'. [ 112.887320][ T6608] netlink: 72 bytes leftover after parsing attributes in process `syz.3.194'. [ 112.910619][ T6610] netlink: 72 bytes leftover after parsing attributes in process `syz.3.194'. [ 113.008052][ T6613] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 113.064643][ T6422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.118879][ T6422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.342118][ T6422] team0: Port device team_slave_0 added [ 113.356429][ T6620] netlink: 'syz.0.195': attribute type 1 has an invalid length. [ 113.379781][ T6422] team0: Port device team_slave_1 added [ 113.396496][ T6620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.195'. [ 113.572515][ T6623] team0: Device ip6gretap1 is up. Set it down before adding it as a team port [ 113.655718][ T6422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.673293][ T6422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.780197][ T6422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.834766][ T6422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.844299][ T6422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.908846][ T6422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.154441][ T6422] hsr_slave_0: entered promiscuous mode [ 114.172642][ T6422] hsr_slave_1: entered promiscuous mode [ 114.690637][ T6658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.202'. [ 114.804752][ T5837] Bluetooth: hci4: command tx timeout [ 114.876377][ T6664] netlink: 12 bytes leftover after parsing attributes in process `syz.4.204'. [ 115.028331][ T6643] syz.3.202 (6643) used greatest stack depth: 17880 bytes left [ 115.259841][ T6675] netlink: 'syz.1.208': attribute type 7 has an invalid length. [ 115.281795][ T6675] netlink: 'syz.1.208': attribute type 8 has an invalid length. [ 115.303905][ T6676] netlink: 'syz.4.206': attribute type 1 has an invalid length. [ 115.558341][ T6681] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 115.805657][ T6695] __nla_validate_parse: 3 callbacks suppressed [ 115.805677][ T6695] netlink: 76 bytes leftover after parsing attributes in process `syz.0.212'. [ 115.847433][ T6695] nbd: illegal input index -8454144 [ 115.908673][ T6695] netlink: 28 bytes leftover after parsing attributes in process `syz.0.212'. [ 116.176532][ T6422] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 116.199378][ T6422] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 116.262385][ T6705] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 116.276000][ T6422] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 116.292215][ T6706] netlink: 12 bytes leftover after parsing attributes in process `syz.3.216'. [ 116.314197][ T6422] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 116.333667][ T6711] netlink: 16 bytes leftover after parsing attributes in process `syz.0.215'. [ 116.399439][ T6712] IPVS: length: 145 != 299528 [ 116.515678][ T6705] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDw}z [ 116.608288][ T6422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.802764][ T6422] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.836494][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.843769][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.912107][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.919315][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.075039][ T6740] tipc: Failed to obtain node identity [ 117.086592][ T6740] tipc: Enabling of bearer rejected, failed to enable media [ 117.422940][ T6749] netlink: 12 bytes leftover after parsing attributes in process `syz.4.228'. [ 117.546249][ T6749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.807160][ T6768] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20003 [ 117.921505][ T6770] netlink: 12 bytes leftover after parsing attributes in process `syz.1.231'. [ 118.132558][ T6787] netlink: 4 bytes leftover after parsing attributes in process `syz.4.234'. [ 118.330055][ T6787] netlink: 24 bytes leftover after parsing attributes in process `syz.4.234'. [ 118.352903][ T6422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.438662][ T6784] netlink: 'syz.0.232': attribute type 1 has an invalid length. [ 118.509648][ T6784] netlink: 12 bytes leftover after parsing attributes in process `syz.0.232'. [ 118.658866][ T6422] veth0_vlan: entered promiscuous mode [ 118.715089][ T6422] veth1_vlan: entered promiscuous mode [ 118.866705][ T6422] veth0_macvtap: entered promiscuous mode [ 118.931786][ T6422] veth1_macvtap: entered promiscuous mode [ 119.045780][ T6422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.090032][ T6422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.159578][ T6817] netlink: 4 bytes leftover after parsing attributes in process `syz.4.243'. [ 119.178126][ T6422] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.208867][ T6422] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.229128][ T6422] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.249472][ T6422] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.281362][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 119.715471][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.745530][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.866741][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.910209][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.150993][ T6854] veth0_to_hsr: entered promiscuous mode [ 120.186909][ T6855] netlink: 'syz.0.252': attribute type 23 has an invalid length. [ 120.434873][ T6852] veth0_to_hsr: left promiscuous mode [ 120.452579][ T6864] netlink: 'syz.4.255': attribute type 7 has an invalid length. [ 120.908459][ T1313] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.064447][ T1313] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.405731][ T6891] __nla_validate_parse: 7 callbacks suppressed [ 121.405751][ T6891] netlink: 12 bytes leftover after parsing attributes in process `syz.3.260'. [ 121.689996][ T1313] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.879622][ T6915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.264'. [ 121.918925][ T6915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.264'. [ 121.965131][ T1313] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.337823][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 122.357922][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 122.368027][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 122.406753][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 122.418388][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 122.682800][ T1313] bridge_slave_1: left allmulticast mode [ 122.710992][ T1313] bridge_slave_1: left promiscuous mode [ 122.716852][ T1313] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.841456][ T1313] bridge_slave_0: left allmulticast mode [ 122.854877][ T1313] bridge_slave_0: left promiscuous mode [ 122.861645][ T6952] netlink: 12 bytes leftover after parsing attributes in process `syz.1.275'. [ 122.870885][ T1313] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.059665][ T10] IPVS: starting estimator thread 0... [ 123.073407][ T6961] netlink: 'syz.4.277': attribute type 1 has an invalid length. [ 123.083734][ T6961] netlink: 228 bytes leftover after parsing attributes in process `syz.4.277'. [ 123.113278][ T6966] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 123.152779][ T6969] netlink: 'syz.4.277': attribute type 10 has an invalid length. [ 123.171102][ T6965] IPVS: using max 26 ests per chain, 62400 per kthread [ 123.509227][ T1313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.527609][ T1313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.538981][ T1313] bond0 (unregistering): Released all slaves [ 123.589083][ T6969] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.598144][ T6969] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.653159][ T6972] bridge_slave_1: left allmulticast mode [ 123.687756][ T6972] bridge_slave_1: left promiscuous mode [ 123.693896][ T6972] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.718819][ T6977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.279'. [ 123.785874][ T6972] bridge_slave_0: left allmulticast mode [ 123.799517][ T6972] bridge_slave_0: left promiscuous mode [ 123.808458][ T6972] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.348253][ T1313] hsr_slave_0: left promiscuous mode [ 124.369090][ T1313] hsr_slave_1: left promiscuous mode [ 124.398136][ T1313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.424817][ T1313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.452951][ T1313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.472386][ T1313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.487509][ T5837] Bluetooth: hci4: command tx timeout [ 124.564488][ T1313] veth1_macvtap: left promiscuous mode [ 124.570402][ T1313] veth0_macvtap: left promiscuous mode [ 124.576108][ T1313] veth1_vlan: left promiscuous mode [ 124.582268][ T1313] veth0_vlan: left promiscuous mode [ 124.647524][ T7013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.285'. [ 124.738267][ T7018] netlink: 12 bytes leftover after parsing attributes in process `syz.1.289'. [ 124.855946][ T7024] netlink: 132 bytes leftover after parsing attributes in process `syz.4.290'. [ 125.424085][ T1313] team0 (unregistering): Port device team_slave_1 removed [ 125.462930][ T1313] team0 (unregistering): Port device team_slave_0 removed [ 125.888649][ T7013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.896428][ T7013] batadv0: mtu less than device minimum [ 125.903289][ T7013] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 125.915057][ T7013] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 125.927065][ T7013] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 125.938543][ T7013] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 125.949912][ T7013] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 125.961344][ T7013] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 125.972773][ T7013] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 125.984208][ T7013] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 125.995575][ T7013] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 126.075764][ T7013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.105779][ T7022] sit0: entered promiscuous mode [ 126.130926][ T7022] netlink: 'syz.4.290': attribute type 1 has an invalid length. [ 126.138648][ T7022] netlink: 1 bytes leftover after parsing attributes in process `syz.4.290'. [ 126.536793][ T6933] chnl_net:caif_netlink_parms(): no params data found [ 126.570652][ T5837] Bluetooth: hci4: command tx timeout [ 127.114856][ T6933] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.129419][ T7082] netlink: 12 bytes leftover after parsing attributes in process `syz.4.303'. [ 127.158976][ T6933] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.199407][ T6933] bridge_slave_0: entered allmulticast mode [ 127.209692][ T6933] bridge_slave_0: entered promiscuous mode [ 127.254263][ T6933] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.270393][ T6933] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.287455][ T6933] bridge_slave_1: entered allmulticast mode [ 127.302103][ T6933] bridge_slave_1: entered promiscuous mode [ 127.509519][ T6933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.561383][ T6933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.001622][ T6933] team0: Port device team_slave_0 added [ 128.058007][ T6933] team0: Port device team_slave_1 added [ 128.363881][ T6933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.400340][ T6933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.494630][ T6933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.532512][ T6933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.539535][ T6933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.578625][ T6933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.640301][ T5837] Bluetooth: hci4: command tx timeout [ 128.742103][ T7147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.315'. [ 128.838810][ T7147] 8021q: adding VLAN 0 to HW filter on device team1 [ 128.999794][ T6933] hsr_slave_0: entered promiscuous mode [ 129.014990][ T6933] hsr_slave_1: entered promiscuous mode [ 129.052701][ T7165] netlink: 'syz.3.320': attribute type 4 has an invalid length. [ 129.109868][ T7160] netlink: 'syz.3.320': attribute type 4 has an invalid length. [ 129.391671][ T7181] netlink: 4 bytes leftover after parsing attributes in process `syz.4.324'. [ 130.459796][ T7248] FAULT_INJECTION: forcing a failure. [ 130.459796][ T7248] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.483790][ T7248] CPU: 0 UID: 0 PID: 7248 Comm: syz.4.335 Not tainted 6.15.0-syzkaller-07796-g3ec523304976 #0 PREEMPT(full) [ 130.483831][ T7248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 130.483843][ T7248] Call Trace: [ 130.483851][ T7248] [ 130.483860][ T7248] dump_stack_lvl+0x189/0x250 [ 130.483898][ T7248] ? __pfx____ratelimit+0x10/0x10 [ 130.483923][ T7248] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.483955][ T7248] ? __pfx__printk+0x10/0x10 [ 130.483977][ T7248] ? __might_fault+0xb0/0x130 [ 130.484019][ T7248] should_fail_ex+0x414/0x560 [ 130.484051][ T7248] _copy_from_user+0x2d/0xb0 [ 130.484073][ T7248] generic_map_update_batch+0x572/0x7f0 [ 130.484106][ T7248] ? __pfx_generic_map_update_batch+0x10/0x10 [ 130.484127][ T7248] ? __fget_files+0x2a/0x420 [ 130.484164][ T7248] ? __pfx_generic_map_update_batch+0x10/0x10 [ 130.484183][ T7248] bpf_map_do_batch+0x369/0x5f0 [ 130.484217][ T7248] __sys_bpf+0x384/0x860 [ 130.484245][ T7248] ? __pfx___sys_bpf+0x10/0x10 [ 130.484282][ T7248] ? ksys_write+0x22a/0x250 [ 130.484309][ T7248] ? __pfx_ksys_write+0x10/0x10 [ 130.484333][ T7248] ? rcu_is_watching+0x15/0xb0 [ 130.484370][ T7248] __x64_sys_bpf+0x7c/0x90 [ 130.484393][ T7248] do_syscall_64+0xfa/0x3b0 [ 130.484417][ T7248] ? lockdep_hardirqs_on+0x9c/0x150 [ 130.484440][ T7248] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.484460][ T7248] ? clear_bhb_loop+0x60/0xb0 [ 130.484503][ T7248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.484522][ T7248] RIP: 0033:0x7f8d3bd8e969 [ 130.484540][ T7248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.484558][ T7248] RSP: 002b:00007f8d3cce1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 130.484579][ T7248] RAX: ffffffffffffffda RBX: 00007f8d3bfb5fa0 RCX: 00007f8d3bd8e969 [ 130.484594][ T7248] RDX: 0000000000000038 RSI: 00002000000006c0 RDI: 000000000000001a [ 130.484606][ T7248] RBP: 00007f8d3cce1090 R08: 0000000000000000 R09: 0000000000000000 [ 130.484619][ T7248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 130.484631][ T7248] R13: 0000000000000000 R14: 00007f8d3bfb5fa0 R15: 00007ffe3a8db5a8 [ 130.484664][ T7248] [ 130.528090][ T6933] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 130.735368][ T5837] Bluetooth: hci4: command tx timeout [ 130.750004][ T7253] netlink: 'syz.3.337': attribute type 2 has an invalid length. [ 130.790266][ T7253] netlink: 'syz.3.337': attribute type 2 has an invalid length. [ 130.804157][ T6933] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 130.841705][ T6933] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 130.885709][ T6933] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 130.963021][ T7260] net_ratelimit: 11 callbacks suppressed [ 130.963040][ T7260] openvswitch: netlink: Missing key (keys=40, expected=100) [ 131.301619][ T6933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.346142][ T7270] netlink: 'syz.4.345': attribute type 29 has an invalid length. [ 131.358287][ T7270] netlink: 4 bytes leftover after parsing attributes in process `syz.4.345'. [ 131.384405][ T7277] netlink: 72 bytes leftover after parsing attributes in process `syz.1.347'. [ 131.393649][ T7277] netlink: 72 bytes leftover after parsing attributes in process `syz.1.347'. [ 131.397535][ T7274] netlink: 'syz.3.346': attribute type 10 has an invalid length. [ 131.419891][ T6933] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.459762][ T7183] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.467700][ T7183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.497399][ T7284] netlink: 12 bytes leftover after parsing attributes in process `syz.3.346'. [ 131.618427][ T7274] team0: Device veth0_macvtap failed to register rx_handler [ 131.621831][ T7289] FAULT_INJECTION: forcing a failure. [ 131.621831][ T7289] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.648151][ T7289] CPU: 0 UID: 0 PID: 7289 Comm: syz.1.349 Not tainted 6.15.0-syzkaller-07796-g3ec523304976 #0 PREEMPT(full) [ 131.648182][ T7289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 131.648195][ T7289] Call Trace: [ 131.648203][ T7289] [ 131.648213][ T7289] dump_stack_lvl+0x189/0x250 [ 131.648251][ T7289] ? __pfx____ratelimit+0x10/0x10 [ 131.648278][ T7289] ? __pfx_dump_stack_lvl+0x10/0x10 [ 131.648311][ T7289] ? __pfx__printk+0x10/0x10 [ 131.648333][ T7289] ? __might_fault+0xb0/0x130 [ 131.648377][ T7289] should_fail_ex+0x414/0x560 [ 131.648410][ T7289] _copy_from_user+0x2d/0xb0 [ 131.648432][ T7289] generic_map_update_batch+0x51b/0x7f0 [ 131.648468][ T7289] ? __pfx_generic_map_update_batch+0x10/0x10 [ 131.648489][ T7289] ? __fget_files+0x2a/0x420 [ 131.648529][ T7289] ? __pfx_generic_map_update_batch+0x10/0x10 [ 131.648549][ T7289] bpf_map_do_batch+0x369/0x5f0 [ 131.648593][ T7289] __sys_bpf+0x384/0x860 [ 131.648622][ T7289] ? __pfx___sys_bpf+0x10/0x10 [ 131.648663][ T7289] ? ksys_write+0x22a/0x250 [ 131.648693][ T7289] ? __pfx_ksys_write+0x10/0x10 [ 131.648718][ T7289] ? rcu_is_watching+0x15/0xb0 [ 131.648757][ T7289] __x64_sys_bpf+0x7c/0x90 [ 131.648781][ T7289] do_syscall_64+0xfa/0x3b0 [ 131.648810][ T7289] ? lockdep_hardirqs_on+0x9c/0x150 [ 131.648832][ T7289] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.648853][ T7289] ? clear_bhb_loop+0x60/0xb0 [ 131.648878][ T7289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.648898][ T7289] RIP: 0033:0x7f01c858e969 [ 131.648917][ T7289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.648935][ T7289] RSP: 002b:00007f01c93a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 131.648957][ T7289] RAX: ffffffffffffffda RBX: 00007f01c87b5fa0 RCX: 00007f01c858e969 [ 131.648972][ T7289] RDX: 0000000000000038 RSI: 00002000000006c0 RDI: 000000000000001a [ 131.648986][ T7289] RBP: 00007f01c93a6090 R08: 0000000000000000 R09: 0000000000000000 [ 131.648999][ T7289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 131.649010][ T7289] R13: 0000000000000000 R14: 00007f01c87b5fa0 R15: 00007ffffa67bbc8 [ 131.649044][ T7289] [ 131.952693][ T6933] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 131.963597][ T6933] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 131.986116][ T7282] tipc: Enabling of bearer rejected, media not registered [ 132.126364][ T7209] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.133652][ T7209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.322879][ T7307] openvswitch: netlink: Key 6 has unexpected len 11 expected 2 [ 132.343228][ T7308] openvswitch: netlink: Key 6 has unexpected len 11 expected 2 [ 132.554177][ T6933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.581304][ T7318] netlink: 'syz.0.355': attribute type 178 has an invalid length. [ 132.676371][ T7323] netlink: 12 bytes leftover after parsing attributes in process `syz.4.356'. [ 132.876723][ T6933] veth0_vlan: entered promiscuous mode [ 132.944643][ T6933] veth1_vlan: entered promiscuous mode [ 132.969766][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.977964][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.132970][ T6933] veth0_macvtap: entered promiscuous mode [ 133.181201][ T6933] veth1_macvtap: entered promiscuous mode [ 133.260013][ T6933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.375926][ T6933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.408114][ T7352] netlink: 14 bytes leftover after parsing attributes in process `syz.4.364'. [ 133.423779][ T6933] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.470189][ T6933] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.487369][ T6933] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.506421][ T6933] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.598460][ T7356] netlink: 'syz.4.364': attribute type 7 has an invalid length. [ 133.640669][ T7365] netlink: 16 bytes leftover after parsing attributes in process `syz.1.367'. [ 134.153272][ T7209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.193993][ T7388] netlink: 'syz.0.370': attribute type 1 has an invalid length. [ 134.195695][ T7209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.297632][ T7183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.333317][ T7183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.346067][ T7398] netlink: 12 bytes leftover after parsing attributes in process `syz.3.372'. [ 134.371937][ T7401] netlink: 24 bytes leftover after parsing attributes in process `syz.4.373'. [ 134.852057][ T7418] xt_limit: Overflow, try lower: 2147483649/128 [ 134.999740][ T7211] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.229078][ T7211] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.334097][ T7211] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.421186][ T7211] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.582379][ T7445] netlink: 20 bytes leftover after parsing attributes in process `syz.1.382'. [ 135.604571][ T7445] netlink: 7 bytes leftover after parsing attributes in process `syz.1.382'. [ 135.659359][ T7449] netlink: 'syz.4.384': attribute type 8 has an invalid length. [ 135.851767][ T7456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.385'. [ 136.055053][ T7211] bridge_slave_1: left allmulticast mode [ 136.078490][ T7211] bridge_slave_1: left promiscuous mode [ 136.115221][ T7211] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.195082][ T7468] netlink: 'syz.1.388': attribute type 1 has an invalid length. [ 136.207382][ T7211] bridge_slave_0: left allmulticast mode [ 136.225847][ T7211] bridge_slave_0: left promiscuous mode [ 136.246523][ T7211] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.273552][ T7474] netlink: 16 bytes leftover after parsing attributes in process `syz.0.390'. [ 136.432968][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 136.452011][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 136.469365][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 136.486028][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 136.494884][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 136.690760][ T7211] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.702939][ T7211] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.715721][ T7211] bond0 (unregistering): Released all slaves [ 136.869571][ T7475] veth3: entered promiscuous mode [ 136.890019][ T7475] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 137.013187][ T7489] netlink: 'syz.3.392': attribute type 4 has an invalid length. [ 137.057672][ T7483] netlink: 'syz.4.391': attribute type 11 has an invalid length. [ 137.065905][ T7485] netlink: 'syz.3.392': attribute type 4 has an invalid length. [ 137.099377][ T7483] netlink: 224 bytes leftover after parsing attributes in process `syz.4.391'. [ 137.142038][ T7493] netlink: 'syz.0.393': attribute type 1 has an invalid length. [ 137.237232][ T7491] netlink: 'syz.0.393': attribute type 1 has an invalid length. [ 137.326930][ T7493] bond2: entered promiscuous mode [ 137.332752][ T7493] 8021q: adding VLAN 0 to HW filter on device bond2 [ 137.393560][ T7494] 8021q: adding VLAN 0 to HW filter on device bond2 [ 137.407090][ T7494] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 137.428472][ T7494] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 137.462311][ T7494] bond2: (slave wireguard0): making interface the new active one [ 137.473199][ T7494] wireguard0: entered promiscuous mode [ 137.483702][ T7494] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 137.696009][ T7211] hsr_slave_0: left promiscuous mode [ 137.711505][ T7519] trusted_key: syz.3.402 sent an empty control message without MSG_MORE. [ 137.734824][ T7211] hsr_slave_1: left promiscuous mode [ 137.752492][ T7211] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.773007][ T7211] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.786872][ T7211] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.796889][ T7211] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.848185][ T7211] veth1_macvtap: left promiscuous mode [ 137.854760][ T7211] veth0_macvtap: left promiscuous mode [ 137.865544][ T7211] veth1_vlan: left promiscuous mode [ 137.873479][ T7211] veth0_vlan: left promiscuous mode [ 138.559916][ T7211] team0 (unregistering): Port device team_slave_1 removed [ 138.560650][ T5837] Bluetooth: hci4: command tx timeout [ 138.604859][ T7211] team0 (unregistering): Port device team_slave_0 removed [ 139.154348][ T7538] __nla_validate_parse: 1 callbacks suppressed [ 139.154369][ T7538] netlink: 28 bytes leftover after parsing attributes in process `syz.1.404'. [ 139.224262][ T7547] netlink: 'syz.3.407': attribute type 4 has an invalid length. [ 139.224965][ T7543] netlink: 104 bytes leftover after parsing attributes in process `syz.0.406'. [ 139.236655][ T7538] netlink: 'syz.1.404': attribute type 7 has an invalid length. [ 139.270670][ T7538] netlink: 'syz.1.404': attribute type 8 has an invalid length. [ 139.280308][ T7538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.404'. [ 139.326874][ T7551] netlink: 'syz.3.407': attribute type 4 has an invalid length. [ 139.639129][ T7478] chnl_net:caif_netlink_parms(): no params data found [ 139.703404][ T7566] netlink: 12 bytes leftover after parsing attributes in process `syz.3.412'. [ 139.825449][ T7578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.415'. [ 139.876164][ T7575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.414'. [ 140.129990][ T7478] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.141685][ T7478] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.149082][ T7478] bridge_slave_0: entered allmulticast mode [ 140.158599][ T7478] bridge_slave_0: entered promiscuous mode [ 140.218689][ T7478] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.235165][ T7478] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.260332][ T7478] bridge_slave_1: entered allmulticast mode [ 140.272908][ T7478] bridge_slave_1: entered promiscuous mode [ 140.420031][ T7478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.454981][ T7478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.603445][ T7478] team0: Port device team_slave_0 added [ 140.642406][ T5837] Bluetooth: hci4: command tx timeout [ 140.654131][ T7613] netlink: 'syz.3.422': attribute type 4 has an invalid length. [ 140.664496][ T7478] team0: Port device team_slave_1 added [ 140.699167][ T7618] Driver unsupported XDP return value 0 on prog (id 137) dev N/A, expect packet loss! [ 140.736208][ T7620] netlink: 'syz.3.422': attribute type 4 has an invalid length. [ 140.861023][ T7627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.426'. [ 140.878337][ T7478] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.892291][ T7478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.936093][ T7478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.956703][ T7631] netlink: 12 bytes leftover after parsing attributes in process `syz.4.427'. [ 141.018523][ T7633] x_tables: duplicate underflow at hook 1 [ 141.059198][ T7478] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.067994][ T7478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.120700][ T7478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.412275][ T7647] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 141.463161][ T7644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.477663][ T7644] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 141.505484][ T7646] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.547336][ T7646] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.603204][ T7646] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.651394][ T7646] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.712350][ T7646] bond0: (slave batadv0): Releasing backup interface [ 141.781514][ T7478] hsr_slave_0: entered promiscuous mode [ 141.788615][ T7478] hsr_slave_1: entered promiscuous mode [ 142.135232][ T7686] validate_nla: 1 callbacks suppressed [ 142.135254][ T7686] netlink: 'syz.4.438': attribute type 4 has an invalid length. [ 142.208645][ T7688] netlink: 'syz.4.438': attribute type 4 has an invalid length. [ 142.304754][ T7692] netlink: 12 bytes leftover after parsing attributes in process `syz.3.442'. [ 142.721011][ T5837] Bluetooth: hci4: command tx timeout [ 142.731478][ T7705] netlink: 'syz.4.443': attribute type 21 has an invalid length. [ 142.780464][ T7705] netlink: 152 bytes leftover after parsing attributes in process `syz.4.443'. [ 142.936811][ T7715] openvswitch: netlink: Unknown nsh attribute 0 [ 142.956918][ T7715] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.059670][ T7718] netlink: 'syz.1.447': attribute type 1 has an invalid length. [ 143.163892][ T7725] netlink: 'syz.0.449': attribute type 11 has an invalid length. [ 143.364831][ T7718] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 143.447193][ T7724] veth5: entered promiscuous mode [ 143.478449][ T7724] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 143.867162][ T7746] netlink: 'syz.4.453': attribute type 4 has an invalid length. [ 143.886679][ T7478] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 143.919216][ T7755] netlink: 'syz.4.453': attribute type 4 has an invalid length. [ 144.045727][ T7478] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 144.093015][ T7478] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 144.190199][ T7478] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 144.329639][ T7766] netlink: 'syz.4.457': attribute type 2 has an invalid length. [ 144.496828][ T7772] __nla_validate_parse: 5 callbacks suppressed [ 144.496848][ T7772] netlink: 12 bytes leftover after parsing attributes in process `syz.0.459'. [ 144.508718][ T7768] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 144.664093][ T7478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.728615][ T7478] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.800661][ T5837] Bluetooth: hci4: command tx timeout [ 144.837041][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.844296][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.876235][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.883488][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.266135][ T7796] netlink: 'syz.0.467': attribute type 12 has an invalid length. [ 145.301107][ T7796] netlink: 'syz.0.467': attribute type 29 has an invalid length. [ 145.344476][ T7796] netlink: 148 bytes leftover after parsing attributes in process `syz.0.467'. [ 145.375116][ T7796] netlink: 'syz.0.467': attribute type 1 has an invalid length. [ 145.730063][ T7478] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.771944][ T7821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.469'. [ 145.810431][ T7821] bridge_slave_1: left allmulticast mode [ 145.816288][ T7821] bridge_slave_1: left promiscuous mode [ 145.838678][ T7821] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.889878][ T7821] bridge_slave_0: left allmulticast mode [ 145.922935][ T7821] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.244527][ T7478] veth0_vlan: entered promiscuous mode [ 146.264661][ T7478] veth1_vlan: entered promiscuous mode [ 146.452238][ T7478] veth0_macvtap: entered promiscuous mode [ 146.464195][ T7478] veth1_macvtap: entered promiscuous mode [ 146.520861][ T7478] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.533866][ T7478] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.546187][ T7478] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.556630][ T7478] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.570050][ T7478] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.610287][ T7478] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.714470][ T7857] netlink: 224 bytes leftover after parsing attributes in process `syz.4.481'. [ 146.840341][ T7865] netlink: 40 bytes leftover after parsing attributes in process `syz.3.483'. [ 146.851303][ T7864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.482'. [ 146.883442][ T7864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.482'. [ 146.929250][ T7865] team0: Port device geneve0 added [ 147.068420][ T7212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.114784][ T7212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.276530][ T7211] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.320154][ T7211] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.396607][ T7882] netlink: 12 bytes leftover after parsing attributes in process `syz.4.487'. [ 147.660485][ T7891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.489'. [ 148.501158][ T7918] netlink: 24 bytes leftover after parsing attributes in process `syz.1.494'. [ 148.652262][ T7211] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.987906][ T7211] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.143171][ T7211] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.324853][ T7211] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.555013][ T7939] __nla_validate_parse: 1 callbacks suppressed [ 149.555034][ T7939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.495'. [ 149.590502][ T7940] veth0: entered promiscuous mode [ 149.598278][ T7939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.495'. [ 149.631413][ T7211] bridge_slave_1: left allmulticast mode [ 149.637128][ T7211] bridge_slave_1: left promiscuous mode [ 149.656179][ T7211] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.692525][ T7951] validate_nla: 2 callbacks suppressed [ 149.692543][ T7951] netlink: 'syz.4.498': attribute type 4 has an invalid length. [ 149.716767][ T7211] bridge_slave_0: left allmulticast mode [ 149.727638][ T7951] netlink: 152 bytes leftover after parsing attributes in process `syz.4.498'. [ 149.729623][ T7211] bridge_slave_0: left promiscuous mode [ 149.788749][ T7211] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.291839][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 150.306464][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 150.326138][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 150.336101][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 150.346124][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 150.488971][ T7211] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.501852][ T7211] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.512236][ T7211] bond0 (unregistering): Released all slaves [ 150.531331][ T7936] veth0: left promiscuous mode [ 150.543506][ T7951] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 150.668814][ T7966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.500'. [ 151.160640][ T7982] netlink: 'syz.4.504': attribute type 1 has an invalid length. [ 151.224082][ T7994] netlink: 52 bytes leftover after parsing attributes in process `syz.0.506'. [ 151.373855][ T7211] hsr_slave_0: left promiscuous mode [ 151.410540][ T7211] hsr_slave_1: left promiscuous mode [ 151.427893][ T7211] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.457562][ T7211] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.491403][ T7211] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.523439][ T7211] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.621988][ T7211] veth1_macvtap: left promiscuous mode [ 151.657415][ T7211] veth0_macvtap: left promiscuous mode [ 151.672728][ T7211] veth1_vlan: left promiscuous mode [ 151.686368][ T7211] veth0_vlan: left promiscuous mode [ 152.402663][ T5837] Bluetooth: hci4: command tx timeout [ 152.932306][ T7211] team0 (unregistering): Port device team_slave_1 removed [ 152.988427][ T7211] team0 (unregistering): Port device team_slave_0 removed [ 153.136739][ T8028] netlink: 48 bytes leftover after parsing attributes in process `syz.1.512'. [ 153.621833][ T7961] chnl_net:caif_netlink_parms(): no params data found [ 153.707239][ T8040] netlink: 'syz.3.514': attribute type 4 has an invalid length. [ 153.758145][ T8035] netlink: 'syz.3.514': attribute type 4 has an invalid length. [ 154.277919][ T7961] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.323060][ T7961] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.360471][ T7961] bridge_slave_0: entered allmulticast mode [ 154.372383][ T7961] bridge_slave_0: entered promiscuous mode [ 154.392587][ T8074] netlink: 'syz.1.522': attribute type 3 has an invalid length. [ 154.419008][ T7961] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.446801][ T7961] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.473406][ T7961] bridge_slave_1: entered allmulticast mode [ 154.485309][ T5837] Bluetooth: hci4: command tx timeout [ 154.494320][ T7961] bridge_slave_1: entered promiscuous mode [ 154.768931][ T7961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.900576][ T8099] tipc: Enabling of bearer rejected, media not registered [ 154.936742][ T7961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.967947][ T8109] netlink: 'syz.1.529': attribute type 4 has an invalid length. [ 155.022269][ T8111] netlink: 'syz.1.529': attribute type 4 has an invalid length. [ 155.075145][ T8113] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 155.219275][ T7961] team0: Port device team_slave_0 added [ 155.250010][ T7961] team0: Port device team_slave_1 added [ 155.432558][ T7961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.475827][ T7961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.531730][ T7961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.607155][ T7961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.644207][ T7961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.685808][ T7961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.750377][ T8138] netlink: 12 bytes leftover after parsing attributes in process `syz.0.535'. [ 155.965023][ T7961] hsr_slave_0: entered promiscuous mode [ 155.985854][ T8149] netlink: 'syz.1.539': attribute type 1 has an invalid length. [ 155.994322][ T7961] hsr_slave_1: entered promiscuous mode [ 156.066541][ T8153] netlink: 'syz.4.542': attribute type 4 has an invalid length. [ 156.119081][ T8154] netlink: 'syz.4.542': attribute type 4 has an invalid length. [ 156.269019][ T8159] netlink: 60 bytes leftover after parsing attributes in process `syz.1.544'. [ 156.279877][ T8159] unsupported nlmsg_type 40 [ 156.462210][ T8170] netlink: 8 bytes leftover after parsing attributes in process `syz.1.548'. [ 156.560302][ T5837] Bluetooth: hci4: command tx timeout [ 157.169907][ T8198] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 157.170676][ T8197] xt_time: unknown flags 0x4 [ 157.230008][ T8198] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 157.391337][ T8208] netlink: 'syz.1.557': attribute type 4 has an invalid length. [ 157.457969][ T8210] netlink: 'syz.3.558': attribute type 10 has an invalid length. [ 157.471175][ T8208] netlink: 'syz.1.557': attribute type 4 has an invalid length. [ 157.632345][ T7961] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 157.670422][ T8215] netlink: 'syz.4.560': attribute type 1 has an invalid length. [ 157.700183][ T7961] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 157.735590][ T7961] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 157.799678][ T7961] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 158.131485][ T7961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.176021][ T7961] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.206202][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.213440][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.256151][ T7208] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.263402][ T7208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.477917][ T8242] netlink: 'syz.0.565': attribute type 1 has an invalid length. [ 158.640897][ T5837] Bluetooth: hci4: command tx timeout [ 158.877356][ T8258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.571'. [ 158.904701][ T8258] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 158.933097][ T8258] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.967563][ T5922] IPVS: starting estimator thread 0... [ 159.070296][ T8264] IPVS: using max 27 ests per chain, 64800 per kthread [ 159.088051][ T7961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.264747][ T7961] veth0_vlan: entered promiscuous mode [ 159.347355][ T7961] veth1_vlan: entered promiscuous mode [ 159.416691][ T8284] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 159.494206][ T8284] netlink: 60 bytes leftover after parsing attributes in process `syz.4.579'. [ 159.531912][ T8289] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 159.557047][ T7961] veth0_macvtap: entered promiscuous mode [ 159.599084][ T7961] veth1_macvtap: entered promiscuous mode [ 159.649044][ T7961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.721536][ T7961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.766803][ T8298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.582'. [ 159.779599][ T7961] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.834576][ T7961] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.846496][ T5837] Bluetooth: hci2: command tx timeout [ 159.868622][ T7961] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.894138][ T7961] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.704587][ T7183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.716058][ T7183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.833092][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.864611][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.979152][ T8348] sctp: [Deprecated]: syz.3.596 (pid 8348) Use of int in max_burst socket option. [ 160.979152][ T8348] Use struct sctp_assoc_value instead [ 161.277635][ T8366] xt_HMARK: proto mask must be zero with L3 mode [ 161.331442][ T8363] tipc: Started in network mode [ 161.339680][ T8363] tipc: Node identity f657f28055df, cluster identity 4711 [ 161.369541][ T8363] tipc: Enabled bearer , priority 0 [ 161.538976][ T8367] syzkaller0: entered promiscuous mode [ 161.554215][ T8367] syzkaller0: entered allmulticast mode [ 161.561144][ T8367] tipc: Resetting bearer [ 161.596670][ T8363] netlink: 12 bytes leftover after parsing attributes in process `syz.4.601'. [ 161.658644][ T7183] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.704902][ T8359] tipc: Resetting bearer [ 162.411429][ T5917] tipc: Node number set to 2743661184 [ 162.718732][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 162.741046][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 162.755133][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 162.768843][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 162.782063][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 163.336838][ T8359] tipc: Disabling bearer [ 163.422310][ T7183] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.613392][ T7183] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.762903][ T8404] netlink: 52 bytes leftover after parsing attributes in process `syz.1.612'. [ 163.808363][ T8404] netlink: 60 bytes leftover after parsing attributes in process `syz.1.612'. [ 163.908471][ T7183] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.991311][ T8416] validate_nla: 5 callbacks suppressed [ 163.991330][ T8416] netlink: 'syz.4.613': attribute type 39 has an invalid length. [ 163.994838][ T8408] netlink: 20 bytes leftover after parsing attributes in process `syz.4.613'. [ 164.068964][ T8420] netlink: 68 bytes leftover after parsing attributes in process `syz.0.614'. [ 164.553701][ T8432] netlink: 8 bytes leftover after parsing attributes in process `syz.4.617'. [ 164.575895][ T8434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.617'. [ 164.647101][ T7183] bridge_slave_1: left allmulticast mode [ 164.683451][ T7183] bridge_slave_1: left promiscuous mode [ 164.689305][ T7183] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.755571][ T7183] bridge_slave_0: left allmulticast mode [ 164.772826][ T7183] bridge_slave_0: left promiscuous mode [ 164.779669][ T7183] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.884469][ T5837] Bluetooth: hci4: command tx timeout [ 165.486649][ T7183] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.499317][ T7183] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.512712][ T7183] bond0 (unregistering): Released all slaves [ 165.527399][ T8446] netlink: 28 bytes leftover after parsing attributes in process `syz.0.619'. [ 165.580332][ T8386] chnl_net:caif_netlink_parms(): no params data found [ 165.695203][ T8445] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 165.912252][ T8468] netlink: 'syz.1.623': attribute type 1 has an invalid length. [ 165.927124][ T8476] netlink: 'syz.0.625': attribute type 4 has an invalid length. [ 166.005046][ T8480] netlink: 'syz.0.625': attribute type 4 has an invalid length. [ 166.126697][ T8479] xfrm0 speed is unknown, defaulting to 1000 [ 166.198160][ T8479] xfrm0 speed is unknown, defaulting to 1000 [ 166.262056][ T7183] hsr_slave_0: left promiscuous mode [ 166.277538][ T7183] hsr_slave_1: left promiscuous mode [ 166.295464][ T7183] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.311365][ T7183] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.324781][ T7183] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.340467][ T7183] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.392744][ T7183] veth1_macvtap: left promiscuous mode [ 166.418831][ T7183] veth0_macvtap: left promiscuous mode [ 166.432045][ T7183] veth1_vlan: left promiscuous mode [ 166.437468][ T7183] veth0_vlan: left promiscuous mode [ 166.881720][ T5837] Bluetooth: hci0: command 0x0401 tx timeout [ 166.960457][ T5837] Bluetooth: hci4: command tx timeout [ 167.224027][ T7183] team0 (unregistering): Port device team_slave_1 removed [ 167.265616][ T7183] team0 (unregistering): Port device team_slave_0 removed [ 167.683738][ T8386] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.699997][ T8386] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.708056][ T8386] bridge_slave_0: entered allmulticast mode [ 167.717233][ T8386] bridge_slave_0: entered promiscuous mode [ 167.731568][ T8479] xfrm0 speed is unknown, defaulting to 1000 [ 167.767204][ T8479] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 167.801749][ T8479] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 167.889520][ T8386] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.922650][ T8386] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.938553][ T8386] bridge_slave_1: entered allmulticast mode [ 167.954887][ T8386] bridge_slave_1: entered promiscuous mode [ 167.989177][ T8479] xfrm0 speed is unknown, defaulting to 1000 [ 168.078013][ T8479] xfrm0 speed is unknown, defaulting to 1000 [ 168.084841][ T8386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.107846][ T8386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.146213][ T8479] xfrm0 speed is unknown, defaulting to 1000 [ 168.237837][ T8479] xfrm0 speed is unknown, defaulting to 1000 [ 168.249069][ T8386] team0: Port device team_slave_0 added [ 168.269730][ T8386] team0: Port device team_slave_1 added [ 168.329819][ T8479] xfrm0 speed is unknown, defaulting to 1000 [ 168.421357][ T8479] xfrm0 speed is unknown, defaulting to 1000 [ 168.571184][ T8386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.585877][ T8386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.618908][ T8386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.806401][ T8386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.825985][ T8386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.871198][ T8386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.882843][ T8515] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 169.040321][ T5837] Bluetooth: hci4: command tx timeout [ 169.257122][ T8386] hsr_slave_0: entered promiscuous mode [ 169.279238][ T8386] hsr_slave_1: entered promiscuous mode [ 169.385694][ T8554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.638'. [ 169.957853][ T8574] netlink: 12 bytes leftover after parsing attributes in process `syz.4.642'. [ 170.018150][ T8577] netlink: 104 bytes leftover after parsing attributes in process `syz.4.642'. [ 170.080205][ T51] Bluetooth: hci0: command 0x0401 tx timeout [ 170.297264][ T8590] netlink: 'syz.3.645': attribute type 2 has an invalid length. [ 170.379932][ T8594] netlink: 'syz.3.645': attribute type 3 has an invalid length. [ 171.120327][ T51] Bluetooth: hci4: command tx timeout [ 171.182624][ T8386] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 171.377549][ T8386] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 171.397580][ T8386] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 171.467825][ T8386] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 171.560466][ T8634] netlink: 'syz.1.654': attribute type 1 has an invalid length. [ 171.568258][ T8634] netlink: 'syz.1.654': attribute type 10 has an invalid length. [ 171.579472][ T8634] netlink: 236 bytes leftover after parsing attributes in process `syz.1.654'. [ 171.585697][ T8636] ------------[ cut here ]------------ [ 171.594167][ T8636] memcpy: detected field-spanning write (size 28) of single field "pfx->in6_u.u6_addr8" at ./include/net/ipv6.h:614 (size 16) [ 171.608433][ T8636] WARNING: CPU: 1 PID: 8636 at ./include/net/ipv6.h:614 ipv6_addr_prefix+0x124/0x1d0 [ 171.618040][ T8636] Modules linked in: [ 171.622039][ T8636] CPU: 1 UID: 0 PID: 8636 Comm: syz.4.655 Not tainted 6.15.0-syzkaller-07796-g3ec523304976 #0 PREEMPT(full) [ 171.633686][ T8636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 171.643855][ T8636] RIP: 0010:ipv6_addr_prefix+0x124/0x1d0 [ 171.649552][ T8636] Code: cc e8 20 78 a6 f7 c6 05 e7 30 71 05 01 90 b9 10 00 00 00 48 c7 c7 20 46 9e 8c 4c 89 fe 48 c7 c2 40 4d 9e 8c e8 5d 64 6a f7 90 <0f> 0b 90 90 e9 33 ff ff ff e8 ee 77 a6 f7 44 89 e6 48 c7 c7 80 80 [ 171.669341][ T8636] RSP: 0018:ffffc900050feb30 EFLAGS: 00010246 [ 171.675512][ T8636] RAX: 9d8a34e12dc74300 RBX: ffff88804e5bb450 RCX: 0000000000080000 [ 171.683576][ T8636] RDX: ffffc9000c892000 RSI: 000000000000e654 RDI: 000000000000e655 [ 171.691637][ T8636] RBP: 0000000000000004 R08: ffffc900050fe807 R09: 1ffff92000a1fd00 [ 171.699745][ T8636] R10: dffffc0000000000 R11: fffff52000a1fd01 R12: 000000000000001c [ 171.707797][ T8636] R13: 1ffff92000a1fd89 R14: ffffc900050fec64 R15: 000000000000001c [ 171.715904][ T8636] FS: 00007f8d3cce16c0(0000) GS:ffff888125d66000(0000) knlGS:0000000000000000 [ 171.724950][ T8636] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 171.731721][ T8636] CR2: 00002000000003c2 CR3: 0000000033286000 CR4: 00000000003526f0 [ 171.739743][ T8636] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 171.747808][ T8636] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 171.755889][ T8636] Call Trace: [ 171.759207][ T8636] [ 171.762220][ T8636] ip6_route_info_create+0x4af/0x860 [ 171.767567][ T8636] ip6_route_add+0x28/0x190 [ 171.772202][ T8636] addrconf_prefix_route+0x210/0x2c0 [ 171.777556][ T8636] ? __pfx_addrconf_prefix_route+0x10/0x10 [ 171.783502][ T8636] ? addrconf_get_prefix_route+0xf2/0x760 [ 171.789287][ T8636] ? __pfx_addrconf_get_prefix_route+0x10/0x10 [ 171.795554][ T8636] ? in6_dev_get+0x1a/0x290 [ 171.800155][ T8636] ? in6_dev_get+0x1a/0x290 [ 171.804723][ T8636] addrconf_prefix_rcv+0x60b/0x1610 [ 171.809997][ T8636] ? __pfx_addrconf_prefix_rcv+0x10/0x10 [ 171.815767][ T8636] ndisc_router_discovery+0x2015/0x35f0 [ 171.821449][ T8636] ? __pfx_ndisc_router_discovery+0x10/0x10 [ 171.827423][ T8636] ? skb_checksum+0x7c1/0x8c0 [ 171.832215][ T8636] ? ndisc_rcv+0x4aa/0x730 [ 171.836694][ T8636] icmpv6_rcv+0x139a/0x1c80 [ 171.841305][ T8636] ? ipv6_chk_mcast_addr+0x77f/0x860 [ 171.846659][ T8636] ? __pfx_icmpv6_rcv+0x10/0x10 [ 171.851611][ T8636] ip6_protocol_deliver_rcu+0xe0b/0x15c0 [ 171.857340][ T8636] ip6_input_finish+0xde/0x190 [ 171.862207][ T8636] NF_HOOK+0x309/0x3a0 [ 171.866326][ T8636] ? __pfx_ip6_input_finish+0x10/0x10 [ 171.871785][ T8636] ? NF_HOOK+0x9a/0x3a0 [ 171.875988][ T8636] ? __pfx_NF_HOOK+0x10/0x10 [ 171.880665][ T8636] ? __pfx_ip6_input_finish+0x10/0x10 [ 171.886100][ T8636] ip6_input+0x16a/0x270 [ 171.890421][ T8636] ? ip6_input+0x23/0x270 [ 171.894818][ T8636] ip6_mc_input+0x79a/0xbe0 [ 171.899378][ T8636] ? __pfx_ip6_mc_input+0x10/0x10 [ 171.904515][ T8636] ? skb_dst+0x71/0xd0 [ 171.908635][ T8636] ? ip6_rcv_finish+0x29a/0x2d0 [ 171.913584][ T8636] NF_HOOK+0x309/0x3a0 [ 171.917787][ T8636] ? skb_orphan+0x4f/0xd0 [ 171.922240][ T8636] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 171.927487][ T8636] ? NF_HOOK+0x9a/0x3a0 [ 171.931735][ T8636] ? __pfx_NF_HOOK+0x10/0x10 [ 171.936468][ T8636] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 171.941772][ T8636] __netif_receive_skb+0xd3/0x380 [ 171.946856][ T8636] ? netif_receive_skb+0x115/0x790 [ 171.952054][ T8636] netif_receive_skb+0x1cb/0x790 [ 171.957047][ T8636] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 171.962969][ T8636] ? __pfx_netif_receive_skb+0x10/0x10 [ 171.968537][ T8636] ? tun_rx_batched+0x160/0x730 [ 171.973495][ T8636] tun_rx_batched+0x1b9/0x730 [ 171.978239][ T8636] ? __lock_acquire+0xab9/0xd20 [ 171.983208][ T8636] ? __pfx_tun_rx_batched+0x10/0x10 [ 171.988468][ T8636] ? tun_get_user+0x2549/0x3ce0 [ 171.993430][ T8636] tun_get_user+0x298e/0x3ce0 [ 171.998167][ T8636] ? tun_get_user+0x693/0x3ce0 [ 172.003043][ T8636] ? tun_get_user+0x2549/0x3ce0 [ 172.007966][ T8636] ? aa_file_perm+0x11f/0xed0 [ 172.012741][ T8636] ? __pfx_tun_get_user+0x10/0x10 [ 172.017827][ T8636] ? aa_file_perm+0x3e7/0xed0 [ 172.022617][ T8636] ? ref_tracker_alloc+0x318/0x460 [ 172.027776][ T8636] ? __lock_acquire+0xab9/0xd20 [ 172.032718][ T8636] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 172.038241][ T8636] ? tun_get+0x1c/0x2f0 [ 172.042502][ T8636] ? tun_get+0x1c/0x2f0 [ 172.046711][ T8636] ? tun_get+0x1c/0x2f0 [ 172.051017][ T8636] tun_chr_write_iter+0x113/0x200 [ 172.056119][ T8636] vfs_write+0x54b/0xa90 [ 172.060475][ T8636] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 172.066076][ T8636] ? __pfx_vfs_write+0x10/0x10 [ 172.070950][ T8636] ? __fget_files+0x2a/0x420 [ 172.075611][ T8636] ksys_write+0x145/0x250 [ 172.080002][ T8636] ? __pfx_ksys_write+0x10/0x10 [ 172.084985][ T8636] ? rcu_is_watching+0x15/0xb0 [ 172.089823][ T8636] ? do_syscall_64+0xbe/0x3b0 [ 172.094611][ T8636] do_syscall_64+0xfa/0x3b0 [ 172.099187][ T8636] ? lockdep_hardirqs_on+0x9c/0x150 [ 172.104492][ T8636] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.110640][ T8636] ? clear_bhb_loop+0x60/0xb0 [ 172.115369][ T8636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.121360][ T8636] RIP: 0033:0x7f8d3bd8d41f [ 172.125816][ T8636] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 172.145523][ T8636] RSP: 002b:00007f8d3cce1000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 172.154040][ T8636] RAX: ffffffffffffffda RBX: 00007f8d3bfb5fa0 RCX: 00007f8d3bd8d41f [ 172.162103][ T8636] RDX: 00000000000003b6 RSI: 00002000000003c0 RDI: 00000000000000c8 [ 172.170173][ T8636] RBP: 00007f8d3be10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 172.178312][ T8636] R10: 00000000000003b6 R11: 0000000000000293 R12: 0000000000000000 [ 172.186380][ T8636] R13: 0000000000000000 R14: 00007f8d3bfb5fa0 R15: 00007ffe3a8db5a8 [ 172.194459][ T8636] [ 172.197521][ T8636] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 172.204848][ T8636] CPU: 1 UID: 0 PID: 8636 Comm: syz.4.655 Not tainted 6.15.0-syzkaller-07796-g3ec523304976 #0 PREEMPT(full) [ 172.216615][ T8636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 172.226713][ T8636] Call Trace: [ 172.230050][ T8636] [ 172.233013][ T8636] dump_stack_lvl+0x99/0x250 [ 172.237652][ T8636] ? __asan_memcpy+0x40/0x70 [ 172.242377][ T8636] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.247628][ T8636] ? __pfx__printk+0x10/0x10 [ 172.252270][ T8636] panic+0x2db/0x790 [ 172.256311][ T8636] ? __pfx_panic+0x10/0x10 [ 172.260820][ T8636] __warn+0x31b/0x4b0 [ 172.264881][ T8636] ? ipv6_addr_prefix+0x124/0x1d0 [ 172.269958][ T8636] ? ipv6_addr_prefix+0x124/0x1d0 [ 172.275033][ T8636] report_bug+0x2be/0x4f0 [ 172.279409][ T8636] ? ipv6_addr_prefix+0x124/0x1d0 [ 172.284500][ T8636] ? ipv6_addr_prefix+0x124/0x1d0 [ 172.289571][ T8636] ? ipv6_addr_prefix+0x126/0x1d0 [ 172.294681][ T8636] handle_bug+0x84/0x160 [ 172.298960][ T8636] exc_invalid_op+0x1a/0x50 [ 172.303493][ T8636] asm_exc_invalid_op+0x1a/0x20 [ 172.308369][ T8636] RIP: 0010:ipv6_addr_prefix+0x124/0x1d0 [ 172.314025][ T8636] Code: cc e8 20 78 a6 f7 c6 05 e7 30 71 05 01 90 b9 10 00 00 00 48 c7 c7 20 46 9e 8c 4c 89 fe 48 c7 c2 40 4d 9e 8c e8 5d 64 6a f7 90 <0f> 0b 90 90 e9 33 ff ff ff e8 ee 77 a6 f7 44 89 e6 48 c7 c7 80 80 [ 172.333644][ T8636] RSP: 0018:ffffc900050feb30 EFLAGS: 00010246 [ 172.339736][ T8636] RAX: 9d8a34e12dc74300 RBX: ffff88804e5bb450 RCX: 0000000000080000 [ 172.347723][ T8636] RDX: ffffc9000c892000 RSI: 000000000000e654 RDI: 000000000000e655 [ 172.355704][ T8636] RBP: 0000000000000004 R08: ffffc900050fe807 R09: 1ffff92000a1fd00 [ 172.363695][ T8636] R10: dffffc0000000000 R11: fffff52000a1fd01 R12: 000000000000001c [ 172.371676][ T8636] R13: 1ffff92000a1fd89 R14: ffffc900050fec64 R15: 000000000000001c [ 172.379679][ T8636] ip6_route_info_create+0x4af/0x860 [ 172.384990][ T8636] ip6_route_add+0x28/0x190 [ 172.389541][ T8636] addrconf_prefix_route+0x210/0x2c0 [ 172.394856][ T8636] ? __pfx_addrconf_prefix_route+0x10/0x10 [ 172.400703][ T8636] ? addrconf_get_prefix_route+0xf2/0x760 [ 172.406439][ T8636] ? __pfx_addrconf_get_prefix_route+0x10/0x10 [ 172.412611][ T8636] ? in6_dev_get+0x1a/0x290 [ 172.417134][ T8636] ? in6_dev_get+0x1a/0x290 [ 172.421663][ T8636] addrconf_prefix_rcv+0x60b/0x1610 [ 172.426987][ T8636] ? __pfx_addrconf_prefix_rcv+0x10/0x10 [ 172.432651][ T8636] ndisc_router_discovery+0x2015/0x35f0 [ 172.438243][ T8636] ? __pfx_ndisc_router_discovery+0x10/0x10 [ 172.444174][ T8636] ? skb_checksum+0x7c1/0x8c0 [ 172.448882][ T8636] ? ndisc_rcv+0x4aa/0x730 [ 172.453319][ T8636] icmpv6_rcv+0x139a/0x1c80 [ 172.457855][ T8636] ? ipv6_chk_mcast_addr+0x77f/0x860 [ 172.463165][ T8636] ? __pfx_icmpv6_rcv+0x10/0x10 [ 172.468042][ T8636] ip6_protocol_deliver_rcu+0xe0b/0x15c0 [ 172.473799][ T8636] ip6_input_finish+0xde/0x190 [ 172.478579][ T8636] NF_HOOK+0x309/0x3a0 [ 172.482671][ T8636] ? __pfx_ip6_input_finish+0x10/0x10 [ 172.488073][ T8636] ? NF_HOOK+0x9a/0x3a0 [ 172.492330][ T8636] ? __pfx_NF_HOOK+0x10/0x10 [ 172.496939][ T8636] ? __pfx_ip6_input_finish+0x10/0x10 [ 172.502337][ T8636] ip6_input+0x16a/0x270 [ 172.506587][ T8636] ? ip6_input+0x23/0x270 [ 172.510971][ T8636] ip6_mc_input+0x79a/0xbe0 [ 172.515497][ T8636] ? __pfx_ip6_mc_input+0x10/0x10 [ 172.520535][ T8636] ? skb_dst+0x71/0xd0 [ 172.524617][ T8636] ? ip6_rcv_finish+0x29a/0x2d0 [ 172.529585][ T8636] NF_HOOK+0x309/0x3a0 [ 172.533681][ T8636] ? skb_orphan+0x4f/0xd0 [ 172.538049][ T8636] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 172.543276][ T8636] ? NF_HOOK+0x9a/0x3a0 [ 172.547449][ T8636] ? __pfx_NF_HOOK+0x10/0x10 [ 172.552054][ T8636] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 172.557271][ T8636] __netif_receive_skb+0xd3/0x380 [ 172.562327][ T8636] ? netif_receive_skb+0x115/0x790 [ 172.567454][ T8636] netif_receive_skb+0x1cb/0x790 [ 172.572420][ T8636] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 172.578288][ T8636] ? __pfx_netif_receive_skb+0x10/0x10 [ 172.583768][ T8636] ? tun_rx_batched+0x160/0x730 [ 172.588642][ T8636] tun_rx_batched+0x1b9/0x730 [ 172.593338][ T8636] ? __lock_acquire+0xab9/0xd20 [ 172.598211][ T8636] ? __pfx_tun_rx_batched+0x10/0x10 [ 172.603431][ T8636] ? tun_get_user+0x2549/0x3ce0 [ 172.608307][ T8636] tun_get_user+0x298e/0x3ce0 [ 172.613014][ T8636] ? tun_get_user+0x693/0x3ce0 [ 172.617790][ T8636] ? tun_get_user+0x2549/0x3ce0 [ 172.622664][ T8636] ? aa_file_perm+0x11f/0xed0 [ 172.627354][ T8636] ? __pfx_tun_get_user+0x10/0x10 [ 172.632400][ T8636] ? aa_file_perm+0x3e7/0xed0 [ 172.637111][ T8636] ? ref_tracker_alloc+0x318/0x460 [ 172.642243][ T8636] ? __lock_acquire+0xab9/0xd20 [ 172.647119][ T8636] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 172.652603][ T8636] ? tun_get+0x1c/0x2f0 [ 172.656786][ T8636] ? tun_get+0x1c/0x2f0 [ 172.660965][ T8636] ? tun_get+0x1c/0x2f0 [ 172.665231][ T8636] tun_chr_write_iter+0x113/0x200 [ 172.670283][ T8636] vfs_write+0x54b/0xa90 [ 172.674632][ T8636] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 172.680195][ T8636] ? __pfx_vfs_write+0x10/0x10 [ 172.685068][ T8636] ? __fget_files+0x2a/0x420 [ 172.689684][ T8636] ksys_write+0x145/0x250 [ 172.694037][ T8636] ? __pfx_ksys_write+0x10/0x10 [ 172.698906][ T8636] ? rcu_is_watching+0x15/0xb0 [ 172.703693][ T8636] ? do_syscall_64+0xbe/0x3b0 [ 172.708387][ T8636] do_syscall_64+0xfa/0x3b0 [ 172.712911][ T8636] ? lockdep_hardirqs_on+0x9c/0x150 [ 172.718135][ T8636] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.724213][ T8636] ? clear_bhb_loop+0x60/0xb0 [ 172.728910][ T8636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.734848][ T8636] RIP: 0033:0x7f8d3bd8d41f [ 172.739278][ T8636] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 172.758910][ T8636] RSP: 002b:00007f8d3cce1000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 172.767359][ T8636] RAX: ffffffffffffffda RBX: 00007f8d3bfb5fa0 RCX: 00007f8d3bd8d41f [ 172.775338][ T8636] RDX: 00000000000003b6 RSI: 00002000000003c0 RDI: 00000000000000c8 [ 172.783317][ T8636] RBP: 00007f8d3be10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 172.791293][ T8636] R10: 00000000000003b6 R11: 0000000000000293 R12: 0000000000000000 [ 172.799280][ T8636] R13: 0000000000000000 R14: 00007f8d3bfb5fa0 R15: 00007ffe3a8db5a8 [ 172.807282][ T8636] [ 172.810636][ T8636] Kernel Offset: disabled [ 172.814969][ T8636] Rebooting in 86400 seconds..