last executing test programs: 1m25.217595429s ago: executing program 1 (id=2655): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x7ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0xeb2}, @in6={0xa, 0x4e21, 0x7, @local, 0x9}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000040)={r1, @in6={{0xa, 0x4e21, 0x3, @empty, 0x1}}, 0xfffe, 0x8}, 0x90) 1m9.925252358s ago: executing program 1 (id=2655): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x7ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0xeb2}, @in6={0xa, 0x4e21, 0x7, @local, 0x9}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000040)={r1, @in6={{0xa, 0x4e21, 0x3, @empty, 0x1}}, 0xfffe, 0x8}, 0x90) 58.554824571s ago: executing program 1 (id=2655): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x7ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0xeb2}, @in6={0xa, 0x4e21, 0x7, @local, 0x9}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000040)={r1, @in6={{0xa, 0x4e21, 0x3, @empty, 0x1}}, 0xfffe, 0x8}, 0x90) 37.538936284s ago: executing program 1 (id=2655): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x7ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0xeb2}, @in6={0xa, 0x4e21, 0x7, @local, 0x9}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000040)={r1, @in6={{0xa, 0x4e21, 0x3, @empty, 0x1}}, 0xfffe, 0x8}, 0x90) 27.601236313s ago: executing program 1 (id=2655): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x7ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0xeb2}, @in6={0xa, 0x4e21, 0x7, @local, 0x9}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000040)={r1, @in6={{0xa, 0x4e21, 0x3, @empty, 0x1}}, 0xfffe, 0x8}, 0x90) 17.658150191s ago: executing program 1 (id=2655): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x7ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0xeb2}, @in6={0xa, 0x4e21, 0x7, @local, 0x9}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000040)={r1, @in6={{0xa, 0x4e21, 0x3, @empty, 0x1}}, 0xfffe, 0x8}, 0x90) 14.865300098s ago: executing program 3 (id=3726): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @broadcast}}, &(0x7f0000000080)=0x1c, 0x100000) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5826}, 0x1c) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000100), 0x4) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000140)=0x5, 0x4) r4 = socket$netlink(0x10, 0x3, 0x4) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x7800, 0x20, 0x1, 0xc0e9, {{0x13, 0x4, 0x2, 0x38, 0x4c, 0x66, 0x0, 0x5, 0x29, 0x0, @remote, @loopback, {[@timestamp={0x44, 0x1c, 0xae, 0x0, 0x2, [0x2, 0x9, 0x65, 0x2, 0x7, 0x7c9]}, @rr={0x7, 0x1b, 0xee, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @multicast2, @loopback, @remote, @broadcast]}]}}}}}) sendmsg$ETHTOOL_MSG_EEE_SET(r4, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000340)={0x28c, r5, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_MODES_OURS={0x1a4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1a0, 0x3, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x51d07fe0}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'tls\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'tls\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xae}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\xec}\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd23}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-&\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x48000000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffc}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, ':]:{{(\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '\\{^:\xab,)^:\'.&\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '}$#:\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x4}, @ETHTOOL_A_EEE_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x6}, @ETHTOOL_A_EEE_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0x28c}, 0x1, 0x0, 0x0, 0x2004c044}, 0x5) bind$l2tp6(r2, &(0x7f0000000680)={0xa, 0x0, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}, 0x20) r9 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f00000006c0), &(0x7f0000000740)=0x60, 0x0) listen(r9, 0x3) r10 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)=@dellinkprop={0x4c, 0x6d, 0x200, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, 0x20200, 0x1000}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x1}, @IFLA_WEIGHT={0x8, 0xf, 0xfffffbff}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0xf}, @IFLA_NET_NS_FD={0x8, 0x1c, r10}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x4c}}, 0x4000040) r11 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet6(r11, &(0x7f00000008c0)="3f43250d36014483434c44c2496fef06fd057bc3369217484ae93997ee016b99b2aeed524722120bffbcb1ad0141104d471f2e7eb22906eeed5033d32567dd1016dc205ca0e6f005bd4c97de4a93", 0x4e, 0x8800, &(0x7f0000000940)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x1}, 0x1c) accept$unix(r1, 0x0, &(0x7f0000000980)) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f00000009c0)={'vlan1\x00', @local}) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a40)=@o_path={&(0x7f0000000a00)='./file0\x00', 0x0, 0x10, r0}, 0x18) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000a80)={0x0, @in={{0x2, 0x4e22, @local}}, 0x10, 0x564, 0x6, 0xc26, 0x4, 0xb}, 0x9c) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b40)={'ip6tnl0\x00', r7, 0x2f, 0x8, 0x3, 0x47, 0x0, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x80, 0xfffffffb, 0xcb7}}) r13 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000c00)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) setsockopt$inet_udp_int(r13, 0x11, 0x1, &(0x7f0000000c40)=0x4, 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000c80)={0x0, 0x80}, &(0x7f0000000cc0)=0xc) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r13, 0x84, 0x10, &(0x7f0000000d00)=@sack_info={r14, 0x2, 0x10000}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000dc0)={{r12}, &(0x7f0000000d40), &(0x7f0000000d80)=r13}, 0x20) 14.320282452s ago: executing program 3 (id=3731): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0xfb8b, 0x7, 0x4}) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, 0xd, 0x6, 0x5, 0x0, 0x0, {0x1}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) unshare(0x22020600) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}, 0x1, 0x0, 0x7000000, 0x488c0}, 0xc000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x2c, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c00018006000600060600000800028004007280080007"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 14.069901003s ago: executing program 3 (id=3734): r0 = socket(0x28, 0x5, 0x6) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$llc(r2, &(0x7f0000000400)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r6 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r6, &(0x7f0000000040)={{0x3, @bcast}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r8, 0x400452c8, &(0x7f0000000100)) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x12, 0xffffffffffffffff, 0xffffc000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001200000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) 13.975640145s ago: executing program 3 (id=3735): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000600000000000000000000d30000000001000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5b0, 0x1f8, 0xd0, 0x1f8, 0x320, 0x3f0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, &(0x7f0000000200), {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00', [0x0, 0xffffffff, 0xff, 0xff], [0x0, 0x0, 0xff, 0xff000000], 'veth0_to_bridge\x00', 'nr0\x00', {0xff}, {0xff}, 0x62, 0x9, 0x2, 0x2}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x2, 0x2}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@inet=@esp={{0x30}, {[0x4d5, 0x4d5], 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@eui64={{0x28}}, @common=@frag={{0x30}, {[0x10000, 0x3], 0x2, 0x20, 0x1}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x8, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x4}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff000000, 0xffffffff, 0xff, 0xffffff00], 'veth1_to_bond\x00', 'veth1_vlan\x00', {0xff}, {0xff}, 0x3a, 0x8, 0x0, 0x4}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4=@private=0xa010100, 0x4, 0x4, 0x38}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) (async) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5b0, 0x1f8, 0xd0, 0x1f8, 0x320, 0x3f0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, &(0x7f0000000200), {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00', [0x0, 0xffffffff, 0xff, 0xff], [0x0, 0x0, 0xff, 0xff000000], 'veth0_to_bridge\x00', 'nr0\x00', {0xff}, {0xff}, 0x62, 0x9, 0x2, 0x2}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x2, 0x2}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@inet=@esp={{0x30}, {[0x4d5, 0x4d5], 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@eui64={{0x28}}, @common=@frag={{0x30}, {[0x10000, 0x3], 0x2, 0x20, 0x1}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x8, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x4}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff000000, 0xffffffff, 0xff, 0xffffff00], 'veth1_to_bond\x00', 'veth1_vlan\x00', {0xff}, {0xff}, 0x3a, 0x8, 0x0, 0x4}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4=@private=0xa010100, 0x4, 0x4, 0x38}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) (async) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) sendmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '$'}], 0xfffffffffffffed7, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x18, 0x500}}], 0x2, 0x0) setsockopt$llc_int(r3, 0x10c, 0x7, &(0x7f0000000fc0)=0x6, 0x4) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f0000000300)={0x1, 0x2}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getpeername(r6, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, &(0x7f0000001780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007a0000000800000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, &(0x7f0000001780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007a0000000800000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf337cfe74a4", 0x0, 0xc698, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf337cfe74a4", 0x0, 0xc698, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r5, @ANYRES32=r8, @ANYBLOB="02"], 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r9, 0x2, 0x0, 0x0, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r10, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r10, 0x0) (async) listen(r10, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) 13.775111315s ago: executing program 3 (id=3736): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000240)={'veth1_macvtap\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='mm_lru_activate\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000097dd000080654d970008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8918, &(0x7f0000000000)={r4}) (async) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000300)={r5, 0xf, 0x1f, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x1000) (async) r6 = socket$rxrpc(0x21, 0x2, 0xa) getsockopt(r6, 0x110, 0x6, 0x0, &(0x7f0000000280)=0x300) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$netlink(0x10, 0x3, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000005400)=ANY=[@ANYBLOB="18000000000010000000000000000000180100002020000000000000000000007b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r8 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r8, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) (async) sendmmsg(r8, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) (async) recvmmsg(r8, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c0000380004804e2d4e"], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) (async) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r9, 0x112, 0x4, 0x0, &(0x7f00000000c0)) (async) r10 = socket$nl_crypto(0x10, 0x3, 0x15) bind$netlink(r10, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfc, 0x40000}, 0xc) 12.335361228s ago: executing program 3 (id=3737): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000a40)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="05"], 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00a8bc", 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0xa}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000380)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) r8 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r8, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value={0x0, 0x7f}, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r2, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xe}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.66336597s ago: executing program 0 (id=3778): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000007c0)=ANY=[@ANYBLOB="64766d47030f938fed080b38dfb0e9e34630f142edada1e95938834a795a6ad9805b5abc5f162ff13355251525b3236e1adc9fc69a8b", @ANYRESDEC=r0], 0x64}}, 0x20000080) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x2, 0x0, 0x0, 0x8}], 0x10, 0x3, @void, @value}, 0x94) sendmsg$inet(r3, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000080)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x0) sendmsg$inet(r3, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="97", 0x1}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x7b, &(0x7f0000000000)=r6, 0x8) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6, 0xfe}]}, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x23}, 0x10, &(0x7f0000000100)={0x0, 0x64}, 0x2}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x4000190, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000180)) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000880)=0xc) sendmsg$netlink(r7, &(0x7f0000000940)={&(0x7f0000000180)=@proc={0x10, 0x0, 0x25dfdbfe}, 0xc, &(0x7f00000002c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x344}, {&(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x17c}], 0x2, &(0x7f00000008c0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r8}}}], 0x40, 0x44}, 0x4008010) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000340)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000ac0)={{{@in6, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000280)=0xfffffffffffffc99) getgid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000004c0), &(0x7f0000000500)=0xc) getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, r9}, 0xc) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r11 = gettid() sendmsg$netlink(r10, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="1000000092a49c1998e4a3ef911402613b0000082bbd7000df25", @ANYRES64=r4], 0x10}], 0x1, &(0x7f0000000ec0)=ANY=[@ANYBLOB="c27655c9690d1ed5ac5f4877fd47921f9a355660d3f4465af2640a44be77ac4be542a5275060e8a798283ee60d429870449baeac68d319d417d9c7aeebb4b8d7272cd53ccf02879626bd31b9d258e200f7e0a8c5a4", @ANYRES32=r11, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000010000000000000000100000001000000"], 0x30, 0x4c884}, 0x40400c0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000980)={{{@in, @in6=@remote}}, {{@in=@broadcast}, 0x0, @in6=@local}}, &(0x7f0000000540)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000cc0), &(0x7f0000000d00)=0xc) 1.882962152s ago: executing program 2 (id=3786): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800b0001006d6163736563000078ff028008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00q'], 0x44}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) 1.772043417s ago: executing program 0 (id=3788): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000008c50000000f000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) (async, rerun: 32) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) (rerun: 32) sendmsg$tipc(r1, &(0x7f0000000400)={&(0x7f00000008c0), 0x58, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) sendmsg$tipc(r1, &(0x7f00000003c0)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x0, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x26040885}, 0x20000040) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) (async, rerun: 64) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb", 0x1}], 0x1}, 0x0) recvmsg(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000e40)=""/4096, 0x1000}], 0x1}, 0x0) 1.607758951s ago: executing program 2 (id=3790): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000009e8685000000040000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000cbd520850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)={0x1c, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x8, 0x1a, 0x0, 0x1, [@generic="2fe5afbf"]}]}, 0x1c}], 0x1}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000c00)=ANY=[@ANYRES8=r0], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.573132439s ago: executing program 0 (id=3791): r0 = accept4$llc(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)=0x10, 0x80000) recvfrom$llc(r0, &(0x7f0000000540)=""/176, 0xa0, 0x40, &(0x7f0000000280)={0x1a, 0x311, 0x1, 0x4, 0x4, 0x7, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x20000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100"], 0x0, 0x42, 0x0, 0x3, 0x0, 0x0, @void, @value}, 0x28) (async) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000440)={r4, @in={{0x2, 0x4e21, @empty}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r6) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)={0x3c, r7, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008004}, 0x200c0084) r8 = socket$unix(0x1, 0x2, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NS_GET_PARENT(r11, 0xb702, 0x0) (async) r12 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r12, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) setsockopt$packet_rx_ring(r12, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) (async) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x9, 0x3, 0x2d0, 0x200, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, &(0x7f0000000400), {[{{@uncond, 0x0, 0xd0, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x3b}, [0xff000000, 0xff000000, 0x0, 0xff000000], 0x4e23, 0x4e22, 0x4e24, 0x4e22, 0x800, 0x6, 0x72fe, 0x6, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, r9, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) 1.492278901s ago: executing program 2 (id=3792): r0 = socket(0x10, 0x4, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000004c000480480001800a000100696e6e65720000003800028008000240000000840800034000000007080004400000000f080001400000000014000580090001006d65740200000000040002800900010073797a30000000000900020073797a32"], 0xa0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x5c, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x46, 0x11, 0x0, 0x1, [@generic="9e15c00619065e963eba3ef94d765eb501e2e4bea6b8d14b16632741a5bb965f9065d9dca5cb4f685e14d59f0d0241320e02933e8a83c309d150d620aa585af62c01"]}]}, 0x5c}], 0x1}, 0x300) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000001780)={0x0, 0x3, {0x9, @struct={0x3, 0x210}, 0x0, 0x1, 0xb25, 0x7fffffff, 0x9, 0x0, 0x801, @usage=0x7fffffffffffffff, 0x0, 0xf6f, [0x5, 0x0, 0x7, 0x6, 0x1, 0x3]}, {0x7, @usage, 0x0, 0x3, 0x7fffffff, 0x0, 0x4, 0x0, 0xc, @struct={0x3, 0x6448}, 0x80, 0x4, [0x7ff, 0x7fffffffffffffff, 0x8, 0x0, 0x4, 0xff]}, {0x2000002c, @usage=0x7, r4, 0x0, 0xc, 0x1, 0x9, 0x80, 0x24, @struct={0x8, 0x13}, 0x7, 0xffffff47, [0x81, 0x7f, 0x9, 0x7, 0x5]}, {0x6, 0x6, 0x4}}) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000000280)={{}, {@val={r4}, @max}}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000063019d000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$kcm(0x10, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000700)={0x4, 0x6, {0xffffffffffff93c6, @usage=0x4, 0x0, 0x4000000000000004, 0x0, 0x1, 0x2e, 0x8, 0x40, @usage=0x56f, 0xc0a61cb, 0xc6, [0xffffffffffffe748, 0x7f, 0x3, 0x91, 0x7, 0x45d]}, {0x8, @usage=0xfffffffffffffff1, 0x0, 0x33, 0x400, 0x3, 0x10000004, 0x8dbf, 0x46, @usage=0x7, 0x73, 0x7, [0x9, 0x5, 0x7, 0x9, 0x0, 0x3]}, {0x9, @struct={0x6, 0x6bbb}, 0x0, 0x7, 0xfffffffffffffff7, 0x7f, 0x40, 0x0, 0x8, @usage=0x8, 0x135, 0x2, [0x81, 0xfffffffffffffffc, 0xac46, 0x2, 0x2d, 0x8]}, {0x5, 0xab4, 0x9}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b00)={0x0, 0x1, {0x5, @usage, 0x0, 0x80000000, 0x1, 0x5, 0x10000, 0xfffffffffffffffb, 0x4e5, @struct={0x1, 0xf548d190}, 0xb, 0x2000000, [0x8001, 0x5, 0x4, 0x5, 0x8, 0xd044]}, {0x80, @struct={0x2, 0x6}, 0x0, 0x3, 0x0, 0x9, 0x7, 0x8001, 0x14, @struct={0x6, 0xffffffff}, 0x9, 0x9, [0x9, 0xb0e, 0x707, 0x7fff, 0x8, 0x9]}, {0x0, @struct={0xfffffe00, 0x1}, 0x0, 0x3, 0x9, 0x9, 0x8d, 0x4, 0x30, @struct={0x7, 0xfffffff8}, 0xf, 0x100, [0x3, 0x7, 0x9, 0x7ff, 0x7fff, 0x9]}, {0x9, 0x10, 0x4a}}) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x5c, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x46, 0x11, 0x0, 0x1, [@generic="9e15c00619065e963eba3ef94d765eb501e2e4bea6b8d14b16632741a5bb965f9065d9dca5cb4f685e14d59f0d0241320e02933e8a83c309d150d620aa585af62c01"]}]}, 0x5c}], 0x1}, 0x300) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r6, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_RESIZE(r5, 0x50009403, &(0x7f0000000280)={{}, {@val={r7}, @max}}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000600)={0x5, 0x0, {0x5, @struct={0x7, 0x9}, 0x0, 0xc, 0x1, 0x1, 0xd000000000000000, 0x5, 0xa, @usage=0x6, 0x0, 0x200, [0x3, 0x1, 0x7, 0x8, 0x3, 0x3]}, {0x4, @struct={0xffff, 0xa8c29a1}, 0x0, 0x1, 0x0, 0x7, 0x3, 0x1, 0x21, @struct={0x8000}, 0x1, 0x9, [0x9, 0x7, 0x1, 0x569, 0x101, 0x2]}, {0x1, @struct={0xfffffff8, 0x5}, 0x0, 0x9, 0x80, 0x7, 0x1ff, 0x7, 0x9, @usage=0x200, 0x7, 0x7fffffff, [0xf, 0x9, 0x8000000000000001, 0x5, 0xffffffff00000001, 0x4]}, {0x1, 0x9, 0xae}}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000a00)={0x0, 0x5, {0xfffffffffffffff7, @struct={0x1, 0x4}, r4, 0x2, 0x0, 0x6, 0x9, 0x4, 0x78, @usage=0x6, 0x10001, 0x2, [0x3, 0x6, 0x6e8, 0x6, 0x61, 0x800]}, {0x9, @struct={0x0, 0x4e8}, r7, 0x589f, 0x6, 0xfffffffffffffd8d, 0x7, 0xfffffffffffffffa, 0x73, @usage=0x8, 0xd42a, 0x9, [0xffff, 0x3, 0x542, 0x1, 0xf, 0x5]}, {0x7fff, @struct={0x9, 0x1000}, r8, 0x6, 0x4, 0xfff, 0x10000, 0xe6, 0x30, @usage=0x10, 0xe, 0x6, [0x5, 0x3ff, 0x73d, 0x100, 0x9, 0x8]}, {0x3, 0x0, 0x2}}) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r10 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r10, 0x6b, 0x1, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x4000) r11 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40000000, 0x0) recvmmsg$unix(r11, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)=""/116, 0x74}], 0x1}}], 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.287611771s ago: executing program 0 (id=3793): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x10, 0x80000) getsockopt$llc_int(r2, 0x10c, 0x9, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000007cc0)=[{{&(0x7f0000000800)={0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0xd}, 0x6}, 0x1c, &(0x7f0000001880)=[{&(0x7f0000000340)='(', 0x1}], 0x1, &(0x7f00000019c0)=ANY=[@ANYBLOB="24000000000000002001000000000000000000000000000e14b65b156c4d1400", @ANYRES32, @ANYBLOB="00000000400000000000000029000000360000001d04000000000000000100c90300000000000000000000ffffac1414aac910fe8800000000000000000000000001010014000000000000002900000008000000070000000000000014000000000000002900000008000000060000000000000014"], 0xb0}}], 0x1, 0x931766f6319eed40) shutdown(r4, 0x1) shutdown(r2, 0x1) getsockopt$bt_hci(r4, 0x84, 0x1, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000001c0)={0xfffa, 0x3, 0x8, 0x543, r6}, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a400014003000000035c1f61c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cee0090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) 1.177449658s ago: executing program 2 (id=3794): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0xfffffffffffffd59, &(0x7f0000000200)={&(0x7f0000000000)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}, [@RTA_UID={0x8}, @RTA_SPORT={0x6, 0x1c, 0x4e23}]}, 0x2c}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x76b, @private0, 0xfffffff9}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@tclass={{0x14, 0x29, 0x32, 0x9}}], 0x18}}], 0x1, 0x8c0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) socket(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a140100000000000000000008000300000000000800", @ANYRES64=r6], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) write$cgroup_pid(r3, &(0x7f00000000c0), 0x12) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0xfffffff9, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x800, 0x9df69d563542a5b1, 0xd, 0x6}, 0x9}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x81}, 0x0) splice(r4, 0x0, r3, 0x0, 0x1100000000f336, 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000700)=ANY=[], 0x8) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) 1.150426104s ago: executing program 4 (id=3795): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f00000005c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="01002cbd7000fbdbdf25050000000e0001006e6e657464657673696d3000000800030003000000eb8cf00e7335e79ab5427849b7441043d78fc4e7f52bb09c00"/78], 0x3c}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r2 = getpid() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r2, r3, 0x0, 0x0, 0x0}, 0x30) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x190b87f9}, {0x6, 0x0, 0x6, 0x1}]}, 0x10) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000140)="24250000010006", 0x7) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="2e000400010002", 0x7) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000018000000000000000000000800000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8880890600"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$ARPT_SO_GET_ENTRIES(r6, 0x0, 0x61, &(0x7f0000000480)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000053000000e923750925a3932829421ececfd9d7debeef068cdb3b67510863c49cc966a81f9fdc5ce6670caa6d64c9b2a0dbc296e8b32ea4bc5e9ea173a42e579b4a2a5ada69c78032336851ec8b2eccc862be69dc5542ee"], &(0x7f00000002c0)=0x77) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000000080)=0xfffffffe, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000010000000000000000000000711218000000000095"], &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb58, @void, @value}, 0x94) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030080e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004000) sendmsg$NFT_BATCH(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a31000000000800044002000000090001b9ea651430000000000800034000000004140000001100010000000008000000000000000a"], 0x64}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000700ffffffff00000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000800007000000000000006800"/28], 0x48) sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[@ANYRES64=r7, @ANYRESDEC=r5, @ANYRESHEX=r3, @ANYRESHEX, @ANYRES32=r8, @ANYRES64], 0x24}, 0x1, 0x0, 0x0, 0x200000c4}, 0x24001080) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r9], 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r10}, 0x10) 914.72155ms ago: executing program 4 (id=3796): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f00000005c0)={0xa, 0x4e23, 0x8005f91, @loopback, 0x67b}, 0x1c) sendto$inet6(r0, &(0x7f0000000380)="2d2bd435074796d2", 0x8, 0x40, &(0x7f000005ffe4)={0xa, 0x4e23, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040)=0x200b, 0x4) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff08000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x20}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x4084}, 0x804) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000200)={r0, 0x7a, 0x1, 0x7}) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x48, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x14}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xe8f}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x4}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x8001, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1b}]}, 0x48}, 0x1, 0x0, 0x0, 0x24004090}, 0x20040000) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000000000000600000008000300", @ANYRES32=r5, @ANYBLOB="080005000b00000005005300e2000000"], 0x2c}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711236000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) (async) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)=0x0) write$cgroup_pid(r6, &(0x7f0000000100)=r7, 0x12) 741.221433ms ago: executing program 4 (id=3797): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x5, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e22, @rand_addr=0x64010102}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000000)={r5, 0x2}, 0x8) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x20000, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0xfd, 0x0, 0x5, 0x4, 0x4bfffffe}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @multicast2}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {}, {0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_EMATCHES={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48c0}, 0x20001880) 568.430336ms ago: executing program 4 (id=3798): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, &(0x7f00000000c0)) 467.301151ms ago: executing program 4 (id=3799): sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x1411, 0x8, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x40800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newqdisc={0x90, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{0x4, 0x3, 0x8000, 0x2, 0x8000, 0x100}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE64={0xc, 0x8, 0x646ba38401034db9}, @TCA_NETEM_RATE={0x14, 0x6, {0xcbd8, 0x100000, 0x2607, 0xe127}}, @TCA_NETEM_CORR={0x10, 0x1, {0x8, 0x81, 0x2}}, @TCA_NETEM_JITTER64={0xc, 0xb, 0xb166}]}}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xa, 0xffff}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x800) r4 = socket(0x10, 0x3, 0x6fc) sendto(r4, &(0x7f0000000000)="6c072876250c360c541ecec531b35edc12ebbb79f112844bddc8b662e1cfc98520f42d35a561f0d9b99a3e2952971ea4a3b74596917ea330424b409d8f758c7ac79f863639a97c9d91c86e49231e5169007f3ce5cdf4900a1bc2a3e56168f96bc1a7dd7d8fe68cf99e62b0471278541322118621911f8971c00c1cc0adb4", 0x7e, 0x8004011, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r5}, 0x18) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRES32=r4], 0x18}}], 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x29, 0x24, 0xee, 0x1, 0x35, @loopback, @private0, 0x700, 0x8, 0x6, 0x7}}) sendmsg$nl_route(r4, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8004000}, 0xc, &(0x7f0000000380)={&(0x7f0000000800)=ANY=[@ANYBLOB="180000001400200427bd7000fcdbdf25021004fdeb5eda3adcfb97846bda4a0ed89d1391944c19dcaf19ac3a2cd73fcc3f4507f065a70a2de1edaa7ad7e43e621b2339cb2cad654f197d4b3d6bf22af0fbcd2823e9dc6ddb208d4faa50352f68e6c098dd604d9e42d86b7d1be435509c26283addb235d68a2b88d9bb707cb0f81138bbe8a2f90f9f5d416743c89b1f053b5ee75fac3709498463bbdb6cfce464904a77ada7f66fd8f6f496a602d377d72164a029dd7ec44252da7badd2cf728a73966ea5f32d7d80dfdd91d3", @ANYRES32=r6], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x4084) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "ec"}], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x605, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)={0x1c, r9, 0xbfd1bec9ce0df7f7, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x844) r10 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r10, &(0x7f0000000440)="828342987f4f58886ec7c813c8cf07c5b128c017301e4ec5e66f6c050aa7aa26d06554c071a3f9231f5452ce874a2b676733a19897ff5126d46a7bf7907d99", 0x3f, 0x48084, &(0x7f0000000480)={0xa, 0x0, 0x5, @empty, 0xffffffff}, 0x20) sendto$inet6(r4, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) 383.658928ms ago: executing program 0 (id=3800): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010004000000fcdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB='\f\x00,'], 0x28}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000894}, 0x20000000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0) 221.140288ms ago: executing program 2 (id=3801): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0xc3) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x36, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x0) 131.516253ms ago: executing program 0 (id=3802): r0 = socket(0x2, 0x80805, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x2000300, 0x4, 0x0, &(0x7f0000000000)="63eced8e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, &(0x7f00000001c0)=0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, 0x0, 0x0) bind$inet(r3, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4000040) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x238}}, 0x0) close(0xffffffffffffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x22, &(0x7f0000000140)=0x403a7, 0x4) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001500000029bd7000000000006469676573745f6e756c6c2d67656e65726963"], 0xe0}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_crypto(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004) recvmmsg(r6, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}, 0x40080fe}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000000c0)=""/154, 0x9a}, {&(0x7f00000004c0)=""/247, 0xf7}, {&(0x7f0000000000)=""/31, 0x1f}, {&(0x7f0000000040)=""/64, 0x40}, {&(0x7f0000000800)=""/4109, 0x100d}, {&(0x7f0000000700)=""/244, 0xf4}, {&(0x7f0000000340)=""/219, 0xdb}], 0x7}, 0x6}], 0x4, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r9, &(0x7f0000000440)='syz1\x00', 0x1ff) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) sendmsg$inet(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) 1.327177ms ago: executing program 2 (id=3803): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20300, 0x1003200}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000100000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f00000023c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x2, 0x300) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r5, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r6) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000280)={@dev, 0x0}, &(0x7f00000002c0)=0x14) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r10 = socket$pppl2tp(0x18, 0x1, 0x1) r11 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r10, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r11, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) ioctl$PPPIOCSFLAGS(r10, 0x40047459, 0x0) connect$can_bcm(r8, &(0x7f0000001ff0)={0x1d, r9}, 0x10) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="c1b12674853302eb790640fd48119a48332fd59a596d1c20d158b2b690d5710ba30d16e88cdf418f0dd92050a3b9d322a94df8e3132c", 0x36}], 0x1, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @private=0xa010100, @loopback}}}], 0x58}, 0x0) 0s ago: executing program 4 (id=3804): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc8e00, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x1}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000200), 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004f0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r1, 0x27, 0xe, 0x0, &(0x7f0000000080)="f8ad48cc02cb29dcc8007f5b88a8", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xb) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = getpid() syz_emit_ethernet(0x83, &(0x7f0000000500)=ANY=[@ANYRESDEC=r4], 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001200230b000000000000000000000200", @ANYRES32=0x0, @ANYBLOB="000000000000000008001280040001"], 0x28}}, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="42232873d1cfc48b255cf42b7da8e29f57242b2049aa19f87ea8c25849eb44922c58f594762afcef8697a4d13eefca72ebe04de9ab9f70f7710d33967bf92e1c80c629cba2599fbae4fad10ad9a2b3459d5dfe6f241ea66396f1cddf9ebdc3c1edeb9618ec7029b705af8993c87b7033e975911d71560967a701bb76c77af4d3e506a8c450b6e90cc90e3224a7b0cc5ae2ccff0fbcf5b70548774d2c3dc5f36f6a120d9e52753157ec1106ee41a93536412646673065736e5ea54e5f5855e41c9cd1289a767a110d09b5157428c147e240146f8bcb4ec9fdd1dfa2a542af56f5cc5eb321c5e67047361227", @ANYRESDEC=r0, @ANYRES64=r2, @ANYRESOCT=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = gettid() sendmsg$unix(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r11, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r10, @ANYRES32=r9, @ANYRES32=r9, @ANYRES32=r10, @ANYRES32=r8, @ANYRES32=r10, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r9, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) sendmsg$nl_netfilter(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)={0x40c, 0x9, 0x8, 0x101, 0x70bd2c, 0x1, {0x1, 0x0, 0x3}, [@nested={0x38, 0x133, 0x0, 0x1, [@nested={0x4, 0x68}, @typed={0x14, 0x11e, 0x0, 0x0, @ipv6=@empty}, @typed={0x8, 0x44, 0x0, 0x0, @u32=0x3}, @nested={0x4, 0xe6}, @nested={0x4, 0x70}, @nested={0x4, 0x14f}, @typed={0x8, 0x109, 0x0, 0x0, @u32=0x1}]}, @nested={0xf0, 0x11b, 0x0, 0x1, [@generic="4b02216126dab46ba0b7d067c0f3051538872ccc43851e0c1251f8d582f4c53b49ebb44eca564c9a6b9d0f019fe42bfb4e5d21d63162a7c46d84cc81fb781007", @nested={0x4, 0x71}, @typed={0x4, 0x127}, @nested={0x4, 0x5f}, @nested={0x4, 0xc1}, @typed={0x14, 0x5e, 0x0, 0x0, @ipv6=@empty}, @generic="31ce756f7ecc8c219d75d24b65d870810867b8f7a5afd066e576016e02fe7e8f8537e8aacb06bfa25ecbde0b57f10e80fa292490539aef4a68e6ff0e696031a0329e1dd019531e91eed4bcf865e982c5191ccf698f0962d204b0f3d89406e5808d865136e2743fefb91653327e8105b80e86c1596dc5830a8efcee447902d3792aada839071046b6"]}, @nested={0xe9, 0x121, 0x0, 0x1, [@nested={0x4, 0x10}, @nested={0x4, 0x9c}, @typed={0x8, 0x47, 0x0, 0x0, @pid=r4}, @generic="45cf5b1f4641d159ce70d3e7d2fff0af824a2b3afb7ddd293683b6622c6cb06768665fab596c8b82ccb7d49a3d1d88142ebb4e226ee060accd2abeea519030b1402a713affb819bfe6fb799ed72274ec7410390c2204240363d78c5e7ea46d68f4e54cbcce4d94a30dacab4078aa28a95d00a94089e08a707db30cbfc69be63cde638e4d5bc837d8765719d28205a5028ed3caaf069a2da2c79aace1884c45f4e30d41723d540d280852a79b7eb0d2ef2a216e9c8f1e525f9aae8a96752d8d49760eba9d6da3043d574ccdd518ab9da9acccee7430"]}, @generic="e57f63be5b0c44be360441fe84ec0eccb391e75fb52ba4be8470ad319627f574794c90dd7d1f9adc7208c66a4c959253c8360005881e6439f5ef2f64772806cb3ccd7ce0c4d7ff7db2125804d2d942d2f2dee896440a53c7352b981b31a3b975d6980c34747c4cf4", @nested={0x38, 0xfd, 0x0, 0x1, [@typed={0x8, 0x6d, 0x0, 0x0, @pid=r11}, @typed={0x8, 0x6f, 0x0, 0x0, @ipv4=@loopback}, @nested={0x4, 0x23}, @typed={0x14, 0x71, 0x0, 0x0, @ipv6=@empty}, @typed={0xc, 0x56, 0x0, 0x0, @u64=0x68}]}, @nested={0x57, 0x103, 0x0, 0x1, [@nested={0x8, 0xda, 0x0, 0x1, [@typed={0x4, 0xfd}]}, @generic="c2f11b2302c098517c369bde518b449d3547ce4aaa404b4c19f2c46f24b5d42315dcd52602e5122581ac825982edf7d6ee2bc6d28be801", @typed={0x14, 0x2c, 0x0, 0x0, @ipv6=@mcast1}]}, @generic="53e0f25e4bec21e05b014a0a1ecc6f7be3e7cbb717e8836ae45d22a1679d9ff38070fba77102ac65ef7b50a78c2a0b8abe501d9b9c5f4651c53a0a975c24aa8e4a0a457de0594f132dc44f9ddfc0337df399ff9ec50599e08e9e4fcb351c5dac59bc3909cb7a2fee80f3fc363d581cbec92fcd7cff53370ed236e883853a0bd455b4f56778c20bbb2ee54b05f5b54288063ce4e0cfce1b2c8779eafc8729228a40ac197b2beb353f87f576d8e30971441481adf90faf8d2d991bfbbc2e098cc6767649b93edcb461e7a05c2f5d50f121ec907c3c95eac74cf46f8079ea6e8bd178056d2b96e4ce4a03"]}, 0x40c}, 0x1, 0x0, 0x0, 0x40010}, 0x20000844) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) kernel console output (not intermixed with test programs): et index 4 as target [ 452.793920][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 452.804263][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 452.813767][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 452.838774][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 452.847137][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 453.341017][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 453.354625][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 453.368774][ T64] bond0 (unregistering): Released all slaves [ 453.543871][T17635] macvlan1 speed is unknown, defaulting to 1000 [ 453.598908][T17638] wg1: entered promiscuous mode [ 453.609230][T17638] wg1: entered allmulticast mode [ 454.281351][T17655] wireguard0: entered promiscuous mode [ 454.441894][T17658] netlink: 'syz.0.3105': attribute type 21 has an invalid length. [ 454.533440][T17658] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3105'. [ 454.559826][T17658] netlink: 'syz.0.3105': attribute type 1 has an invalid length. [ 454.574582][T17658] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3105'. [ 454.864587][ T64] hsr_slave_0: left promiscuous mode [ 454.879099][ T64] hsr_slave_1: left promiscuous mode [ 454.887340][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 454.894840][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.909573][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 454.917675][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 454.946000][ T5836] Bluetooth: hci3: command tx timeout [ 454.953812][ T64] veth1_macvtap: left promiscuous mode [ 454.959696][ T64] veth0_macvtap: left promiscuous mode [ 454.966277][ T64] veth1_vlan: left promiscuous mode [ 454.971641][ T64] veth0_vlan: left promiscuous mode [ 455.080791][T17683] xt_bpf: check failed: parse error [ 455.488305][ T64] team0 (unregistering): Port device team_slave_1 removed [ 455.533215][ T64] team0 (unregistering): Port device team_slave_0 removed [ 456.669405][T17635] chnl_net:caif_netlink_parms(): no params data found [ 456.951601][ T5919] IPVS: starting estimator thread 0... [ 456.973627][T17635] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.000204][T17635] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.025938][ T5836] Bluetooth: hci3: command tx timeout [ 457.031682][T17635] bridge_slave_0: entered allmulticast mode [ 457.055549][T17732] IPVS: using max 30 ests per chain, 72000 per kthread [ 457.085497][T17635] bridge_slave_0: entered promiscuous mode [ 457.108699][T17635] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.122412][T17635] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.141969][T17635] bridge_slave_1: entered allmulticast mode [ 457.180093][T17635] bridge_slave_1: entered promiscuous mode [ 457.246285][T17743] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3123'. [ 457.327047][T17635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 457.360263][T17635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 457.457868][T17635] team0: Port device team_slave_0 added [ 457.476388][T17635] team0: Port device team_slave_1 added [ 457.550555][T17635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 457.568445][T17635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 457.599585][T17757] netlink: 664 bytes leftover after parsing attributes in process `syz.0.3131'. [ 457.628765][T17635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 457.651243][T17635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 457.685188][T17635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 457.725567][T17635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.050157][T17635] hsr_slave_0: entered promiscuous mode [ 458.083210][T17635] hsr_slave_1: entered promiscuous mode [ 458.107027][T17635] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 458.122578][T17635] Cannot create hsr debugfs directory [ 458.139956][T17777] batman_adv: batadv0: Adding interface: macvlan2 [ 458.146755][T17777] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.205426][T17777] batman_adv: batadv0: Interface activated: macvlan2 [ 458.298056][T17777] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3137'. [ 458.694961][T17802] netlink: 'syz.4.3144': attribute type 10 has an invalid length. [ 458.719596][T17802] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3144'. [ 458.850544][T17808] netlink: 236 bytes leftover after parsing attributes in process `syz.4.3145'. [ 459.110167][ T5836] Bluetooth: hci3: command tx timeout [ 459.135674][T17823] Cannot find add_set index 0 as target [ 459.369263][T17815] syzkaller0: entered promiscuous mode [ 459.374970][T17815] syzkaller0: entered allmulticast mode [ 461.185957][ T5836] Bluetooth: hci3: command tx timeout [ 461.267116][T17635] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 461.305862][T17828] macvlan1 speed is unknown, defaulting to 1000 [ 461.308449][T17635] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 461.359338][T17635] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 461.376480][T17843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3153'. [ 461.420199][T17635] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 461.711460][T17635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.789892][T17635] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.829145][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.836538][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.878888][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.886256][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.050073][T17868] netlink: 'syz.2.3161': attribute type 1 has an invalid length. [ 462.101885][T17868] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 462.616428][T17878] syzkaller0: entered promiscuous mode [ 462.623328][T17878] syzkaller0: entered allmulticast mode [ 463.031402][T17894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3166'. [ 463.046031][T17894] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3166'. [ 463.210871][T17897] xt_hashlimit: size too large, truncated to 1048576 [ 464.579044][T17894] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 53584 - 0 [ 464.590809][T17894] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 35717 - 0 [ 464.667973][T17635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 464.704453][T17902] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3168'. [ 464.704539][T17894] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 53584 - 0 [ 464.725660][T17894] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 35717 - 0 [ 464.766742][T17902] ip6tnl1: entered promiscuous mode [ 464.772030][T17902] ip6tnl1: entered allmulticast mode [ 464.792640][T17894] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 53584 - 0 [ 464.819576][T17894] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 35717 - 0 [ 464.990893][T17908] xt_bpf: check failed: parse error [ 465.003548][T17635] veth0_vlan: entered promiscuous mode [ 465.023867][T17894] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 53584 - 0 [ 465.044227][T17894] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 35717 - 0 [ 465.092270][T17635] veth1_vlan: entered promiscuous mode [ 465.212247][T17894] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 53584 - 0 [ 465.235991][T17894] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 35717 - 0 [ 465.274021][T17894] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 53584 - 0 [ 465.283066][T17894] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 35717 - 0 [ 465.318887][T17894] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 53584 - 0 [ 465.327876][T17894] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 35717 - 0 [ 465.337749][T17919] syzkaller1: tun_chr_ioctl cmd 1074025680 [ 465.379879][T17894] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 53584 - 0 [ 465.399645][T17894] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 35717 - 0 [ 465.421199][T17917] netlink: 'syz.3.3171': attribute type 12 has an invalid length. [ 465.436182][T17917] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3171'. [ 465.544974][T17926] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3174'. [ 465.566094][T17925] netlink: 'syz.0.3174': attribute type 1 has an invalid length. [ 465.640538][T17926] batadv1: entered promiscuous mode [ 465.665692][T17926] batadv1: entered allmulticast mode [ 465.710221][T17925] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 465.738596][T17635] veth0_macvtap: entered promiscuous mode [ 465.777886][T17635] veth1_macvtap: entered promiscuous mode [ 465.839810][T17635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 465.861282][T17635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 465.890358][T17635] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.902605][T17635] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.911806][T17635] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.921146][T17635] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.952044][T17948] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3180'. [ 465.972065][T17948] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3180'. [ 466.056051][T17948] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3180'. [ 466.068550][T17948] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 466.117092][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.139679][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.201786][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.224944][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.444396][T17966] xt_CT: You must specify a L4 protocol and not use inversions on it [ 466.641769][T17978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3189'. [ 466.834472][ T1097] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.896865][T17988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3189'. [ 467.102791][ T1097] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.245045][ T1097] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.367764][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 467.378607][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 467.389185][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 467.401010][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 467.409028][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 467.453055][T17989] macvlan1 speed is unknown, defaulting to 1000 [ 467.506716][ T1097] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.816381][ T1097] bridge_slave_1: left allmulticast mode [ 467.822112][ T1097] bridge_slave_1: left promiscuous mode [ 467.828275][ T1097] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.838969][ T1097] bridge_slave_0: left allmulticast mode [ 467.844660][ T1097] bridge_slave_0: left promiscuous mode [ 467.852072][ T1097] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.114610][T18000] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3193'. [ 468.153973][T18000] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3193'. [ 468.382720][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 468.393476][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 468.412877][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 468.435447][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 468.443419][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 468.451930][ T1097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 468.466738][ T1097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 468.482163][ T1097] bond0 (unregistering): Released all slaves [ 468.507677][T18001] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 468.581152][T17989] chnl_net:caif_netlink_parms(): no params data found [ 468.813529][T18012] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3197'. [ 468.830306][T18015] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3198'. [ 468.862727][T18004] macvlan1 speed is unknown, defaulting to 1000 [ 468.964688][T18018] netlink: 'syz.3.3199': attribute type 1 has an invalid length. [ 468.973117][T18018] netlink: 'syz.3.3199': attribute type 4 has an invalid length. [ 468.981629][T18018] netlink: 9491 bytes leftover after parsing attributes in process `syz.3.3199'. [ 469.210470][T18022] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3200'. [ 469.260146][T17989] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.275966][T18025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3202'. [ 469.291202][T17989] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.299484][T17989] bridge_slave_0: entered allmulticast mode [ 469.312169][T17989] bridge_slave_0: entered promiscuous mode [ 469.321941][T17989] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.329439][T17989] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.341024][T17989] bridge_slave_1: entered allmulticast mode [ 469.360107][T17989] bridge_slave_1: entered promiscuous mode [ 469.425753][ T5836] Bluetooth: hci0: command tx timeout [ 469.631812][T17989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 469.667645][T17989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 469.697159][ T1097] hsr_slave_0: left promiscuous mode [ 469.709043][ T1097] hsr_slave_1: left promiscuous mode [ 469.725951][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 469.734911][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 469.750442][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 469.758223][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 469.767871][ T5839] hid-generic 0005:046D:0A0B.0001: item fetching failed at offset 1/14 [ 469.778054][ T5839] hid-generic 0005:046D:0A0B.0001: probe with driver hid-generic failed with error -22 [ 469.841374][ T1097] veth1_macvtap: left promiscuous mode [ 469.858051][ T1097] veth0_macvtap: left promiscuous mode [ 469.864481][ T1097] veth1_vlan: left promiscuous mode [ 469.887380][ T1097] veth0_vlan: left promiscuous mode [ 469.890020][T18043] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3206'. [ 470.015662][T18046] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3209'. [ 470.555605][ T5836] Bluetooth: hci3: command tx timeout [ 470.681222][ T1097] team0 (unregistering): Port device team_slave_1 removed [ 470.741040][ T1097] team0 (unregistering): Port device team_slave_0 removed [ 471.371318][T17989] team0: Port device team_slave_0 added [ 471.427597][T17989] team0: Port device team_slave_1 added [ 471.504650][T17989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 471.511952][ T5836] Bluetooth: hci0: command tx timeout [ 471.517633][T17989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.543916][T17989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 471.579165][T17989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 471.587046][T17989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.616867][T17989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 471.814375][T17989] hsr_slave_0: entered promiscuous mode [ 471.834825][T17989] hsr_slave_1: entered promiscuous mode [ 471.843261][T17989] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 471.854623][T17989] Cannot create hsr debugfs directory [ 472.201370][T18004] chnl_net:caif_netlink_parms(): no params data found [ 472.201534][T18073] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3218'. [ 472.267635][T18073] macsec0: entered allmulticast mode [ 472.273315][T18073] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 472.302479][T18073] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 472.430499][ T1097] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 53584 - 0 [ 472.443967][ T1097] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 35717 - 0 [ 472.571403][ T1097] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 53584 - 0 [ 472.605743][ T1097] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 35717 - 0 [ 472.625726][ T5836] Bluetooth: hci3: command tx timeout [ 472.736816][ T1097] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 53584 - 0 [ 472.760602][ T1097] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 35717 - 0 [ 472.800690][T18004] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.808404][T18004] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.816116][T18004] bridge_slave_0: entered allmulticast mode [ 472.825034][T18004] bridge_slave_0: entered promiscuous mode [ 472.838499][T18004] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.845968][T18004] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.853510][T18004] bridge_slave_1: entered allmulticast mode [ 472.862302][T18004] bridge_slave_1: entered promiscuous mode [ 472.917286][ T1097] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 53584 - 0 [ 472.939961][ T1097] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 35717 - 0 [ 473.015418][T18004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 473.192542][T18004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 473.350413][T18004] team0: Port device team_slave_0 added [ 473.392895][T18004] team0: Port device team_slave_1 added [ 473.491146][T18115] macvlan1 speed is unknown, defaulting to 1000 [ 473.568336][T18004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 473.585869][T18004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 473.589545][ T5836] Bluetooth: hci0: command tx timeout [ 473.623083][T18004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 473.706853][T18004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 473.713982][T18004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 473.765733][T18004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 473.937736][ T1097] veth0_to_bridge: left allmulticast mode [ 473.948999][ T1097] veth0_to_bridge: left promiscuous mode [ 473.962369][ T1097] bridge0: port 1(veth0_to_bridge) entered disabled state [ 474.073310][ T1097] batman_adv: batadv0: Removing interface: ip6gretap1 [ 474.129192][ T1097] batman_adv: batadv0: Removing interface: ip6gretap2 [ 474.302644][ T1097] batman_adv: batadv0: Interface deactivated: macvlan2 [ 474.323945][ T1097] batman_adv: batadv0: Removing interface: macvlan0 [ 474.343181][ T1097] batman_adv: batadv0: Removing interface: macvlan2 [ 474.705945][ T5836] Bluetooth: hci3: command tx timeout [ 474.903994][ T1097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 474.914522][ T1097] bond0 (unregistering): Released all slaves [ 474.931185][ T1097] bond1 (unregistering): Released all slaves [ 474.947303][ T1097] bond2 (unregistering): Released all slaves [ 475.065862][ T1097] bond3 (unregistering): Released all slaves [ 475.171545][ T1097] bond4 (unregistering): (slave veth9): Releasing active interface [ 475.182084][ T1097] bond4 (unregistering): Released all slaves [ 475.197500][ T1097] bond5 (unregistering): Released all slaves [ 475.308878][ T1097] bond6 (unregistering): Released all slaves [ 475.364598][T18121] macvlan1 speed is unknown, defaulting to 1000 [ 475.417330][T18004] hsr_slave_0: entered promiscuous mode [ 475.425014][T18004] hsr_slave_1: entered promiscuous mode [ 475.453887][T18004] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 475.477057][T18004] Cannot create hsr debugfs directory [ 475.666139][ T5836] Bluetooth: hci0: command tx timeout [ 475.841217][T18129] macvlan1 speed is unknown, defaulting to 1000 [ 476.319856][T17989] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 476.389215][T17989] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 476.418733][T17989] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 476.692816][T17989] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 476.785845][ T5836] Bluetooth: hci3: command tx timeout [ 476.853067][ T1097] hsr_slave_0: left promiscuous mode [ 476.864040][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 476.873852][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 476.888307][ T1097] hsr0: left allmulticast mode [ 476.893205][ T1097] hsr0: left promiscuous mode [ 478.014738][T17989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.037367][T18136] __nla_validate_parse: 1 callbacks suppressed [ 478.037390][T18136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3233'. [ 478.053722][T18136] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3233'. [ 478.136423][T18136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3233'. [ 478.166208][T18136] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3233'. [ 478.192693][T17989] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.207171][ T1097] IPVS: stop unused estimator thread 0... [ 478.289096][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.296541][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.364981][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.372300][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.404732][T18004] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 478.427778][T18004] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 478.494554][T18004] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 478.513547][T18004] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 478.720492][T18153] sctp: [Deprecated]: syz.4.3236 (pid 18153) Use of int in max_burst socket option deprecated. [ 478.720492][T18153] Use struct sctp_assoc_value instead [ 478.771134][T18004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.829601][T18004] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.860952][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.868178][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.891227][ T6125] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.898508][ T6125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.928741][T18159] netlink: 'syz.3.3239': attribute type 39 has an invalid length. [ 479.081609][T17989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 479.130316][T18173] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3242'. [ 479.178969][T18173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3242'. [ 479.200371][T18173] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.241214][T18173] bridge_slave_1 (unregistering): left allmulticast mode [ 479.249473][T18173] bridge_slave_1 (unregistering): left promiscuous mode [ 479.257848][T18173] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.298281][T17989] veth0_vlan: entered promiscuous mode [ 479.317800][T17989] veth1_vlan: entered promiscuous mode [ 479.387625][T17989] veth0_macvtap: entered promiscuous mode [ 479.410030][T17989] veth1_macvtap: entered promiscuous mode [ 479.469822][T17989] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 479.497874][T17989] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 479.529432][T17989] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.550813][T17989] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.563200][T17989] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.565843][T18179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3243'. [ 479.583571][T18179] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3243'. [ 479.593018][T17989] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.607949][T18179] netlink: 'syz.2.3243': attribute type 14 has an invalid length. [ 479.628682][T18004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 479.637002][T18179] netlink: 'syz.2.3243': attribute type 11 has an invalid length. [ 479.810942][T18187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3245'. [ 479.820146][T18187] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3245'. [ 479.936229][T18182] macvlan1 speed is unknown, defaulting to 1000 [ 479.942695][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.946790][T18004] veth0_vlan: entered promiscuous mode [ 479.961858][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.032449][T18004] veth1_vlan: entered promiscuous mode [ 480.122240][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.150751][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.216016][T18004] veth0_macvtap: entered promiscuous mode [ 480.232681][T18202] xt_bpf: check failed: parse error [ 480.270907][T18004] veth1_macvtap: entered promiscuous mode [ 480.285613][T18204] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 480.319925][T18204] No such timeout policy "syz0" [ 480.350440][T18004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 480.383967][T18004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.413869][T18004] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.433707][T18004] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.443897][T18004] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.458348][T18004] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.533645][T18208] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 480.632914][T18198] macvlan1 speed is unknown, defaulting to 1000 [ 480.650415][T18206] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 480.691098][T18206] tipc: Enabling of bearer rejected, failed to enable media [ 480.771978][T18213] netlink: 'syz.0.3252': attribute type 18 has an invalid length. [ 480.937300][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.955595][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.038686][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.056510][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.164867][T18222] Bluetooth: MGMT ver 1.23 [ 481.598070][T18222] macvlan1 speed is unknown, defaulting to 1000 [ 482.268605][ T64] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.634924][ T64] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.760708][ T64] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.884134][ T64] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.010864][ T64] bridge_slave_1: left allmulticast mode [ 483.016789][ T64] bridge_slave_1: left promiscuous mode [ 483.022579][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.032684][ T64] bridge_slave_0: left allmulticast mode [ 483.038593][ T64] bridge_slave_0: left promiscuous mode [ 483.044325][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.350408][T18240] __nla_validate_parse: 3 callbacks suppressed [ 483.350427][T18240] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3262'. [ 483.689356][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 483.713668][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 483.737919][ T64] bond0 (unregistering): Released all slaves [ 483.964245][T18260] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3264'. [ 483.997916][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 484.008934][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 484.020577][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 484.040990][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 484.051624][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 484.480426][T18281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3266'. [ 484.574964][T18264] macvlan1 speed is unknown, defaulting to 1000 [ 484.757506][T18291] netlink: 'syz.4.3269': attribute type 10 has an invalid length. [ 484.786646][T18291] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3269'. [ 484.848148][T18294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3268'. [ 485.159123][T18291] bridge0: port 1(0!) entered blocking state [ 485.175358][T18291] bridge0: port 1(0!) entered disabled state [ 485.189259][T18291] !: entered allmulticast mode [ 485.199255][T18291] !: entered promiscuous mode [ 485.309330][ T64] hsr_slave_0: left promiscuous mode [ 485.320866][ T64] hsr_slave_1: left promiscuous mode [ 485.327390][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 485.335029][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 485.349364][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 485.358680][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 485.392371][ T64] veth1_macvtap: left promiscuous mode [ 485.398502][ T64] veth0_macvtap: left promiscuous mode [ 485.404420][ T64] veth1_vlan: left promiscuous mode [ 485.411510][ T64] veth0_vlan: left promiscuous mode [ 485.940909][ T64] team0 (unregistering): Port device team_slave_1 removed [ 485.986012][ T64] team0 (unregistering): Port device team_slave_0 removed [ 486.155471][ T5832] Bluetooth: hci3: command tx timeout [ 486.576004][T18313] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3273'. [ 486.618867][T18316] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3275'. [ 486.746249][T18321] x_tables: duplicate underflow at hook 2 [ 487.034467][T18264] chnl_net:caif_netlink_parms(): no params data found [ 487.162959][T18337] syzkaller0: refused to change device tx_queue_len [ 487.231529][T18348] bond0: entered promiscuous mode [ 487.247118][T18348] batadv0: entered promiscuous mode [ 487.259792][T18348] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 487.271422][T18348] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 487.284375][T18348] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 487.308188][T18337] syzkaller1: entered promiscuous mode [ 487.313753][T18337] syzkaller1: entered allmulticast mode [ 487.723837][T18264] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.739932][T18264] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.756562][T18264] bridge_slave_0: entered allmulticast mode [ 487.783154][T18264] bridge_slave_0: entered promiscuous mode [ 487.801262][T18264] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.809093][T18264] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.825804][T18264] bridge_slave_1: entered allmulticast mode [ 487.837429][T18264] bridge_slave_1: entered promiscuous mode [ 487.939035][T18386] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3291'. [ 488.130638][T18264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 488.179828][T18264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 488.227850][ T5832] Bluetooth: hci3: command tx timeout [ 488.463688][T18264] team0: Port device team_slave_0 added [ 488.506181][T18264] team0: Port device team_slave_1 added [ 488.601746][T18264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 488.611584][T18264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 488.644863][T18264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 488.680550][T18264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 488.694527][T18264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 488.723334][T18428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3304'. [ 488.789128][T18264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 489.072116][T18264] hsr_slave_0: entered promiscuous mode [ 489.242793][T18264] hsr_slave_1: entered promiscuous mode [ 489.263039][T18264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 489.288267][T18264] Cannot create hsr debugfs directory [ 489.665705][T18458] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3316'. [ 489.708210][T18458] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3316'. [ 489.921744][T18473] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3318'. [ 489.974544][T18467] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3313'. [ 490.057703][T18475] macvlan1 speed is unknown, defaulting to 1000 [ 490.079194][T18479] netlink: 'syz.2.3319': attribute type 1 has an invalid length. [ 490.140692][T18482] xt_CT: You must specify a L4 protocol and not use inversions on it [ 490.187877][T18479] smc: net device bond0 erased user defined pnetid SYZ [ 490.296481][T18486] bond1: (slave veth3): Enslaving as an active interface with a down link [ 490.306329][ T5832] Bluetooth: hci3: command tx timeout [ 490.467604][T18504] netlink: 'syz.3.3325': attribute type 1 has an invalid length. [ 490.491816][T18503] netlink: 'syz.3.3325': attribute type 1 has an invalid length. [ 490.643977][T18503] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 490.645040][T18504] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 490.669683][T18508] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3326'. [ 490.809019][T18515] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3329'. [ 490.898261][T18264] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 491.018338][T18264] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 491.035937][T18264] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 491.046657][T18526] netlink: 'syz.4.3331': attribute type 1 has an invalid length. [ 491.071483][T18264] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 491.715452][T18525] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.723343][T18525] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.351871][T18525] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 492.395421][ T5836] Bluetooth: hci3: command tx timeout [ 492.412044][T18525] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 492.898488][T18525] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.907765][T18525] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.916981][T18525] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.926357][T18525] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.159198][T18531] macvlan1 speed is unknown, defaulting to 1000 [ 493.333509][T18264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 493.400359][T18264] 8021q: adding VLAN 0 to HW filter on device team0 [ 493.436953][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.444224][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 493.463119][T18553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3339'. [ 493.518674][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.525924][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 493.633598][T18556] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3341'. [ 493.746651][T18552] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.995741][T18552] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 494.021562][T18552] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 494.163706][T18552] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.174130][T18552] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.183886][T18552] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.193163][T18552] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.219041][T18552] netdevsim netdevsim2 netdevsim3: left allmulticast mode [ 494.224098][T18565] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3342'. [ 494.300371][T18552] ip6tnl1: left promiscuous mode [ 494.314259][T18552] ip6tnl1: left allmulticast mode [ 494.454193][T18558] macvlan1 speed is unknown, defaulting to 1000 [ 494.511361][T18559] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 494.526366][T18559] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 494.548896][T18559] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 494.562708][T18559] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 494.584807][T18559] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 495.203487][T18583] IPv6: sit1: Disabled Multicast RS [ 495.431770][T18594] bridge1: entered promiscuous mode [ 495.451189][T18594] bridge1: entered allmulticast mode [ 495.529491][T18264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 495.685992][T18264] veth0_vlan: entered promiscuous mode [ 495.720524][T18264] veth1_vlan: entered promiscuous mode [ 495.901273][T18264] veth0_macvtap: entered promiscuous mode [ 495.933474][T18264] veth1_macvtap: entered promiscuous mode [ 496.029228][T18264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 496.079487][T18264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 496.118262][T18264] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.136935][T18264] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.153128][T18614] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3357'. [ 496.155144][T18264] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.195140][T18264] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.218234][T18617] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 496.241227][T18617] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 496.495989][ T3512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.516396][ T3512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.630588][ T3512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.649510][ T3512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.798114][T18642] netlink: 'syz.2.3364': attribute type 39 has an invalid length. [ 496.926762][T18644] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3365'. [ 496.999565][T18647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3366'. [ 497.102391][T18657] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3369'. [ 497.122220][T18660] IPVS: sync thread started: state = BACKUP, mcast_ifn = team0, syncid = 1, id = 0 [ 497.146675][T18658] tun0: tun_chr_ioctl cmd 1074025677 [ 497.152193][T18658] tun0: linktype set to 5 [ 497.172165][T18661] IPVS: length: 78 != 8 [ 497.177275][T18661] netlink: 348 bytes leftover after parsing attributes in process `syz.3.3370'. [ 497.374405][T16434] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.520143][T16434] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.627182][T16434] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.892578][T16434] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.013508][T16434] bridge_slave_1: left allmulticast mode [ 498.019856][T16434] bridge_slave_1: left promiscuous mode [ 498.025860][T16434] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.035390][T16434] bridge_slave_0: left allmulticast mode [ 498.041098][T16434] bridge_slave_0: left promiscuous mode [ 498.048644][T16434] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.400224][T16434] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 498.412694][T16434] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 498.423254][T16434] bond0 (unregistering): Released all slaves [ 498.659558][T18676] xt_TPROXY: Can be used only with -p tcp or -p udp [ 498.692725][T18676] IPVS: set_ctl: invalid protocol: 27746 111.46.98.102:28974 [ 498.716059][T18677] IPVS: length: 78 != 8 [ 498.726554][T18672] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6 [ 499.005328][T18686] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3377'. [ 499.094304][T18691] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3378'. [ 499.196736][T18691] ipvlan2: entered promiscuous mode [ 499.210004][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 499.224660][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 499.233924][T18691] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 499.241371][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 499.246040][T18698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3378'. [ 499.262753][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 499.271905][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 499.353851][T18697] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3379'. [ 499.567402][T16434] hsr_slave_0: left promiscuous mode [ 499.628586][T16434] hsr_slave_1: left promiscuous mode [ 499.637026][T16434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 499.655249][T16434] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 499.676202][T16434] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 499.694028][T16434] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 499.762429][T16434] veth1_macvtap: left promiscuous mode [ 499.786836][T16434] veth0_macvtap: left promiscuous mode [ 499.792700][T16434] veth1_vlan: left promiscuous mode [ 499.803041][T16434] veth0_vlan: left promiscuous mode [ 500.429920][T16434] team0 (unregistering): Port device team_slave_1 removed [ 500.479344][T16434] team0 (unregistering): Port device team_slave_0 removed [ 501.007699][T18693] macvlan1 speed is unknown, defaulting to 1000 [ 501.365702][ T5836] Bluetooth: hci3: command tx timeout [ 501.517365][T18722] macvlan1 speed is unknown, defaulting to 1000 [ 501.535621][T18752] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3394'. [ 501.765269][T18765] mac80211_hwsim hwsim32 wlan1: entered allmulticast mode [ 502.117965][T18773] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3398'. [ 502.251173][T18779] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3399'. [ 502.513227][T18693] chnl_net:caif_netlink_parms(): no params data found [ 502.782298][T18798] bond0 (unregistering): Released all slaves [ 503.130510][T18810] netlink: 'syz.4.3403': attribute type 3 has an invalid length. [ 503.145524][T18810] netlink: 'syz.4.3403': attribute type 3 has an invalid length. [ 503.245131][T18693] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.252358][T18693] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.285556][T18693] bridge_slave_0: entered allmulticast mode [ 503.293932][T18693] bridge_slave_0: entered promiscuous mode [ 503.304922][T18693] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.312946][T18693] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.320408][T18693] bridge_slave_1: entered allmulticast mode [ 503.330314][T18693] bridge_slave_1: entered promiscuous mode [ 503.356800][T18818] netlink: 'syz.3.3406': attribute type 11 has an invalid length. [ 503.428768][ T5836] Bluetooth: hci3: command tx timeout [ 503.512843][T18693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 503.557165][T18693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 503.644649][T18693] team0: Port device team_slave_0 added [ 503.662847][T18822] vlan0: entered promiscuous mode [ 503.668477][T18822] ip6gretap0: entered promiscuous mode [ 503.708705][T18693] team0: Port device team_slave_1 added [ 503.834096][T18693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 503.860697][T18693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 503.918667][T18693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 503.941162][T18693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 503.951743][T18693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 503.988107][T18693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 504.106754][T18842] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3414'. [ 504.128975][T18693] hsr_slave_0: entered promiscuous mode [ 504.137340][T18693] hsr_slave_1: entered promiscuous mode [ 504.143603][T18693] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 504.151514][T18693] Cannot create hsr debugfs directory [ 504.328973][T18848] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3416'. [ 504.366312][T18848] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3416'. [ 504.739226][T18693] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 504.768578][T18853] macvlan1 speed is unknown, defaulting to 1000 [ 504.770196][T18693] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 504.796678][T18693] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 504.832381][T18693] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 504.943585][T18861] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3419'. [ 504.971638][T18861] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3419'. [ 504.991664][T18861] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3419'. [ 505.016525][T18861] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3419'. [ 505.048821][T18693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 505.097950][T18862] netlink: 248 bytes leftover after parsing attributes in process `syz.3.3418'. [ 505.145972][T18693] 8021q: adding VLAN 0 to HW filter on device team0 [ 505.203263][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.210577][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.339367][T18857] macvlan1 speed is unknown, defaulting to 1000 [ 505.410636][T16434] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.417984][T16434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 505.505742][ T5832] Bluetooth: hci3: command tx timeout [ 505.744719][T18693] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 506.047485][T18891] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3426'. [ 506.070772][T18891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3426'. [ 506.071634][T18888] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3425'. [ 506.162036][T18889] vti0: entered allmulticast mode [ 506.350414][T18888] bond2: entered promiscuous mode [ 506.356581][T18888] bond2: entered allmulticast mode [ 506.603403][T18693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 506.812864][T18693] veth0_vlan: entered promiscuous mode [ 506.848423][T18693] veth1_vlan: entered promiscuous mode [ 507.017550][T18693] veth0_macvtap: entered promiscuous mode [ 507.042579][T18693] veth1_macvtap: entered promiscuous mode [ 507.110747][T18693] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 507.146450][T18693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 507.187098][T18693] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.222933][T18693] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.249785][T18693] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.297797][T18693] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.456177][T18920] macvlan1 speed is unknown, defaulting to 1000 [ 507.523269][T18940] netlink: 'syz.3.3437': attribute type 1 has an invalid length. [ 507.595396][ T5832] Bluetooth: hci3: command 0x0419 tx timeout [ 507.614182][T18944] netlink: 'syz.0.3438': attribute type 10 has an invalid length. [ 507.707781][T18940] 8021q: adding VLAN 0 to HW filter on device bond9 [ 507.777093][T18949] netlink: 'syz.0.3438': attribute type 3 has an invalid length. [ 507.835025][T18944] team0: Device ipvlan1 failed to register rx_handler [ 507.933627][T18948] ip6gre1: entered allmulticast mode [ 507.996834][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.017509][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.149807][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.168044][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.829825][ T64] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.990404][ T64] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.191906][ T64] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.358598][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 509.369515][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 509.379029][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 509.389911][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 509.397946][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 509.447425][T18991] macvlan1 speed is unknown, defaulting to 1000 [ 509.518369][ T64] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.713750][ T64] bridge_slave_1: left allmulticast mode [ 509.719607][ T64] bridge_slave_1: left promiscuous mode [ 509.725662][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.735361][ T64] bridge_slave_0: left allmulticast mode [ 509.741038][ T64] bridge_slave_0: left promiscuous mode [ 509.747522][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.116101][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 510.128143][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 510.138682][ T64] bond0 (unregistering): Released all slaves [ 510.489874][T19008] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 510.528531][T19001] netlink: 'syz.0.3450': attribute type 29 has an invalid length. [ 510.852268][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 510.855028][T19015] netlink: 'syz.4.3454': attribute type 1 has an invalid length. [ 510.862872][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 510.878900][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 510.894079][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 510.903441][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 511.041517][T19020] bond0: entered promiscuous mode [ 511.069559][T19020] bond0: entered allmulticast mode [ 511.082284][T19020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 511.214870][T19015] ip6gretap1: entered promiscuous mode [ 511.225725][T19015] ip6gretap1: entered allmulticast mode [ 511.232327][T19015] bond0: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 511.249413][T18991] chnl_net:caif_netlink_parms(): no params data found [ 511.279727][ T1163] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 511.407360][T19027] batadv1: entered promiscuous mode [ 511.427750][ T6125] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 511.429131][ T5832] Bluetooth: hci3: command tx timeout [ 511.473708][ T64] hsr_slave_0: left promiscuous mode [ 511.480384][ T64] hsr_slave_1: left promiscuous mode [ 511.497847][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 511.519824][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 511.542237][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 511.619675][T19036] __nla_validate_parse: 8 callbacks suppressed [ 511.619703][T19036] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3458'. [ 511.636535][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 511.693106][ T64] veth1_macvtap: left promiscuous mode [ 511.700960][ T64] veth0_macvtap: left promiscuous mode [ 511.707175][ T64] veth1_vlan: left promiscuous mode [ 511.712683][ T64] veth0_vlan: left promiscuous mode [ 512.310309][ T64] team0 (unregistering): Port device team_slave_1 removed [ 512.362788][ T64] team0 (unregistering): Port device team_slave_0 removed [ 512.945311][ T5832] Bluetooth: hci4: command tx timeout [ 513.133740][T19013] macvlan1 speed is unknown, defaulting to 1000 [ 513.141391][T19053] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.3461'. [ 513.303659][T19057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3463'. [ 513.337220][T18991] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.350522][T18991] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.376071][T18991] bridge_slave_0: entered allmulticast mode [ 513.391571][T18991] bridge_slave_0: entered promiscuous mode [ 513.431028][T18991] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.463777][T18991] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.484512][T18991] bridge_slave_1: entered allmulticast mode [ 513.509166][ T5832] Bluetooth: hci3: command tx timeout [ 513.518383][T18991] bridge_slave_1: entered promiscuous mode [ 513.633472][T19063] netlink: 'syz.0.3465': attribute type 11 has an invalid length. [ 513.673570][T19077] netlink: 'syz.4.3466': attribute type 1 has an invalid length. [ 513.731362][T18991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 513.883857][T19070] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3466'. [ 513.912540][T19077] 8021q: adding VLAN 0 to HW filter on device bond5 [ 513.924941][T18991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 513.948065][T19066] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 513.959290][T19071] macvlan1 speed is unknown, defaulting to 1000 [ 514.127448][T18991] team0: Port device team_slave_0 added [ 514.231365][T18991] team0: Port device team_slave_1 added [ 514.438598][T18991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 514.455264][T18991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 514.505481][T18991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 514.556811][T18991] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 514.563862][T18991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 514.594321][T18991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 514.642272][T19084] macvlan1 speed is unknown, defaulting to 1000 [ 514.760663][T19102] bridge_slave_0: left allmulticast mode [ 514.766896][T19102] bridge_slave_0: left promiscuous mode [ 514.772895][T19102] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.798810][T19102] bond0: (slave bond_slave_0): Releasing backup interface [ 514.809606][T19102] bond0: (slave bond_slave_1): Releasing backup interface [ 514.827387][T19102] team0: Port device team_slave_0 removed [ 514.842711][T19102] team0: Port device team_slave_1 removed [ 514.849718][T19102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 514.861279][T19102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 514.871389][T19102] bond1: (slave veth3): Releasing active interface [ 514.989866][T18991] hsr_slave_0: entered promiscuous mode [ 514.996949][T18991] hsr_slave_1: entered promiscuous mode [ 515.003367][T18991] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 515.011644][T18991] Cannot create hsr debugfs directory [ 515.025776][ T5832] Bluetooth: hci4: command tx timeout [ 515.032442][T19108] xt_CT: You must specify a L4 protocol and not use inversions on it [ 515.236789][T19112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3475'. [ 515.585583][ T5832] Bluetooth: hci3: command tx timeout [ 515.650740][T19116] netlink: 'syz.2.3476': attribute type 1 has an invalid length. [ 515.661474][T19116] netlink: 240 bytes leftover after parsing attributes in process `syz.2.3476'. [ 515.843853][T19013] chnl_net:caif_netlink_parms(): no params data found [ 516.298792][T19136] netlink: 'syz.0.3479': attribute type 4 has an invalid length. [ 516.314543][T19136] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3479'. [ 516.662553][ T13] smc: removing ib device syz1 [ 516.805816][ T64] dvmrp1 (unregistering): left allmulticast mode [ 516.921786][ T64] team0: Port device geneve0 removed [ 517.105355][ T5832] Bluetooth: hci4: command tx timeout [ 517.496648][ T64] bond1 (unregistering): Released all slaves [ 517.517081][ T64] bond2 (unregistering): Released all slaves [ 517.537663][ T64] bond3 (unregistering): Released all slaves [ 517.675244][ T5832] Bluetooth: hci3: command tx timeout [ 517.710685][ T64] bond0 (unregistering): left promiscuous mode [ 517.717904][ T64] bond0 (unregistering): Released all slaves [ 517.844393][ T64] bond4 (unregistering): Released all slaves [ 517.860275][ T64] bond5 (unregistering): Released all slaves [ 517.874561][ T64] bond6 (unregistering): Released all slaves [ 517.892394][ T64] bond7 (unregistering): Released all slaves [ 517.914591][ T64] bond8 (unregistering): Released all slaves [ 518.032857][ T64] bond9 (unregistering): Released all slaves [ 518.065556][ T5919] macvlan1 speed is unknown, defaulting to 1000 [ 518.279381][T19176] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3488'. [ 518.297661][T19173] IPVS: sh: UDP 224.0.0.2:20004 - no destination available [ 518.376998][T19173] IPVS: set_ctl: invalid protocol: 22 224.0.0.1:20000 [ 518.591404][T19013] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.599143][T19013] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.612486][T19013] bridge_slave_0: entered allmulticast mode [ 518.626904][T19013] bridge_slave_0: entered promiscuous mode [ 518.637925][T19013] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.647946][T19013] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.655447][T19013] bridge_slave_1: entered allmulticast mode [ 518.667401][T19013] bridge_slave_1: entered promiscuous mode [ 518.860353][T19183] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3491'. [ 518.910978][T19182] netlink: 'syz.0.3491': attribute type 30 has an invalid length. [ 518.931088][T19013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 518.978460][T19185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3492'. [ 519.013290][T19013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 519.078357][T19187] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3493'. [ 519.185722][ T5832] Bluetooth: hci4: command tx timeout [ 519.387505][T19013] team0: Port device team_slave_0 added [ 519.405738][T19197] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3495'. [ 519.484950][T19013] team0: Port device team_slave_1 added [ 519.571365][T19202] netlink: 'syz.4.3496': attribute type 9 has an invalid length. [ 519.583304][T19202] netlink: 212160 bytes leftover after parsing attributes in process `syz.4.3496'. [ 519.692574][T19013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 519.705301][T19013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.748801][T19013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 519.804589][T19013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 519.821499][T19013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.879501][T19013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 520.419292][T19013] hsr_slave_0: entered promiscuous mode [ 520.478485][T19013] hsr_slave_1: entered promiscuous mode [ 520.508853][T19013] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 520.535200][T19013] Cannot create hsr debugfs directory [ 520.568688][T19212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3498'. [ 520.739360][T19220] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3499'. [ 520.863717][T18991] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 520.896419][T19212] bridge_slave_1: left allmulticast mode [ 520.902379][T19212] bridge_slave_1: left promiscuous mode [ 520.909029][T19212] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.919327][T19212] bridge_slave_0: left allmulticast mode [ 520.925197][T19212] bridge_slave_0: left promiscuous mode [ 520.931190][T19212] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.043400][ T64] : left promiscuous mode [ 521.098416][T18991] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 521.180628][ T64] tipc: Left network mode [ 521.189332][T18991] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 521.271826][T18991] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 521.438836][T19231] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3503'. [ 521.731524][T19236] netlink: 'syz.0.3505': attribute type 1 has an invalid length. [ 521.767304][T19236] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3505'. [ 522.060336][ T64] batadv0: left promiscuous mode [ 522.087229][ T64] hsr_slave_0: left promiscuous mode [ 522.102873][ T64] hsr_slave_1: left promiscuous mode [ 522.126112][T19246] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 522.156285][T19246] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 522.218711][ T64] batadv0 (unregistering): left allmulticast mode [ 523.003787][T18991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 523.390883][T18991] 8021q: adding VLAN 0 to HW filter on device team0 [ 523.420282][ T6142] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.427527][ T6142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 523.454479][T19013] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 523.472713][ T64] IPVS: stop unused estimator thread 0... [ 523.494442][ T6142] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.501870][ T6142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 523.527256][T19013] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 523.537984][T19274] syz.0.3515: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 523.554622][T19274] CPU: 1 UID: 0 PID: 19274 Comm: syz.0.3515 Not tainted 6.15.0-rc6-syzkaller-01204-gb8fa067c4a76 #0 PREEMPT(full) [ 523.554664][T19274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 523.554679][T19274] Call Trace: [ 523.554689][T19274] [ 523.554700][T19274] dump_stack_lvl+0x189/0x250 [ 523.554747][T19274] ? __pfx_dump_stack_lvl+0x10/0x10 [ 523.554781][T19274] ? __pfx__printk+0x10/0x10 [ 523.554804][T19274] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 523.554830][T19274] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 523.554859][T19274] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 523.554888][T19274] warn_alloc+0x214/0x310 [ 523.554934][T19274] ? __pfx___schedule+0x10/0x10 [ 523.554962][T19274] ? __pfx_warn_alloc+0x10/0x10 [ 523.554996][T19274] ? kasan_save_track+0x4f/0x80 [ 523.555024][T19274] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 523.555059][T19274] ? xskq_create+0x56/0x170 [ 523.555086][T19274] ? __x64_sys_setsockopt+0x18b/0x220 [ 523.555117][T19274] ? do_syscall_64+0xf6/0x210 [ 523.555141][T19274] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.555178][T19274] __vmalloc_node_range_noprof+0x125/0x12c0 [ 523.555247][T19274] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 523.555284][T19274] ? __kasan_kmalloc+0x93/0xb0 [ 523.555318][T19274] vmalloc_user_noprof+0x74/0x80 [ 523.555350][T19274] ? xskq_create+0xbf/0x170 [ 523.555371][T19274] xskq_create+0xbf/0x170 [ 523.555398][T19274] xsk_init_queue+0xb0/0x110 [ 523.555423][T19274] xsk_setsockopt+0x43f/0x710 [ 523.555449][T19274] ? __pfx_xsk_setsockopt+0x10/0x10 [ 523.555484][T19274] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 523.555513][T19274] ? __pfx_xsk_setsockopt+0x10/0x10 [ 523.555537][T19274] do_sock_setsockopt+0x257/0x3e0 [ 523.555571][T19274] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 523.555599][T19274] ? __fget_files+0x2a/0x420 [ 523.555635][T19274] ? __fget_files+0x3a0/0x420 [ 523.555663][T19274] ? __fget_files+0x2a/0x420 [ 523.555701][T19274] __x64_sys_setsockopt+0x18b/0x220 [ 523.555740][T19274] do_syscall_64+0xf6/0x210 [ 523.555767][T19274] ? clear_bhb_loop+0x60/0xb0 [ 523.555794][T19274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.555815][T19274] RIP: 0033:0x7f819198e969 [ 523.555835][T19274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 523.555856][T19274] RSP: 002b:00007f8192833038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 523.555880][T19274] RAX: ffffffffffffffda RBX: 00007f8191bb5fa0 RCX: 00007f819198e969 [ 523.555907][T19274] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 523.555922][T19274] RBP: 00007f8191a10ab1 R08: 0000000000000004 R09: 0000000000000000 [ 523.555935][T19274] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 523.555950][T19274] R13: 0000000000000000 R14: 00007f8191bb5fa0 R15: 00007ffc96b82b18 [ 523.555985][T19274] [ 523.848627][T19274] Mem-Info: [ 523.851884][T19274] active_anon:13630 inactive_anon:0 isolated_anon:0 [ 523.851884][T19274] active_file:1555 inactive_file:40018 isolated_file:0 [ 523.851884][T19274] unevictable:768 dirty:70 writeback:8 [ 523.851884][T19274] slab_reclaimable:11858 slab_unreclaimable:136497 [ 523.851884][T19274] mapped:29142 shmem:4231 pagetables:732 [ 523.851884][T19274] sec_pagetables:0 bounce:0 [ 523.851884][T19274] kernel_misc_reclaimable:0 [ 523.851884][T19274] free:1298496 free_pcp:589 free_cma:0 [ 523.900819][T19013] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 523.913752][T19013] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 523.918476][T19274] Node 0 active_anon:54520kB inactive_anon:0kB active_file:6220kB inactive_file:159868kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116568kB dirty:280kB writeback:32kB shmem:15388kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11624kB pagetables:2928kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 523.957654][T19274] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 524.035424][T18991] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 524.048678][T18991] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 524.059552][T19274] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 524.129417][T19274] lowmem_reserve[]: 0 2503 2503 2503 2503 [ 524.137894][T19274] Node 0 DMA32 free:1273568kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:46312kB inactive_anon:0kB active_file:6220kB inactive_file:159768kB unevictable:1536kB writepending:308kB present:3129332kB managed:2563984kB mlocked:0kB bounce:0kB free_pcp:6680kB local_pcp:4044kB free_cma:0kB [ 524.215001][T19274] lowmem_reserve[]: 0 0 0 0 0 [ 524.303738][T19274] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:4kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 524.346151][T19274] lowmem_reserve[]: 0 0 0 0 0 [ 524.350996][T19274] Node 1 Normal free:3908852kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 524.404968][T19013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.450061][T19274] lowmem_reserve[]: 0 0 0 0 0 [ 524.454911][T19274] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 524.489758][T19274] Node 0 DMA32: 361*4kB (UM) 235*8kB (UME) 225*16kB (UME) 374*32kB (UME) 131*64kB (UME) 42*128kB (UME) 63*256kB (UM) 107*512kB (UME) 48*1024kB (UM) 10*2048kB (UM) 271*4096kB (UM) = 1283212kB [ 524.554974][T19274] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 524.579913][T19274] Node 1 Normal: 241*4kB (UE) 62*8kB (UME) 42*16kB (UME) 219*32kB (UME) 83*64kB (UME) 39*128kB (UME) 13*256kB (UME) 8*512kB (UME) 1*1024kB (M) 1*2048kB (E) 947*4096kB (UM) = 3908852kB [ 524.602620][T19274] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 524.612564][T19274] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 524.627257][T19274] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 524.638328][T19274] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 524.651852][T19274] 42932 total pagecache pages [ 524.666984][T19274] 0 pages in swap cache [ 524.671225][T19274] Free swap = 124996kB [ 524.675863][T19274] Total swap = 124996kB [ 524.680131][T19274] 2097051 pages RAM [ 524.683978][T19274] 0 pages HighMem/MovableOnly [ 524.689271][T19274] 424397 pages reserved [ 524.693909][T19274] 0 pages cma reserved [ 524.713071][T19298] __nla_validate_parse: 2 callbacks suppressed [ 524.713091][T19298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3519'. [ 524.752911][T19013] 8021q: adding VLAN 0 to HW filter on device team0 [ 524.821815][T18991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 524.863492][T16434] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.870739][T16434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.889037][T19307] netlink: 'syz.4.3521': attribute type 58 has an invalid length. [ 524.900238][T19307] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3521'. [ 524.949664][T16434] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.956931][T16434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.983452][T19307] xt_l2tp: missing protocol rule (udp|l2tpip) [ 525.001602][T19307] x_tables: duplicate underflow at hook 1 [ 525.012174][T19312] x_tables: duplicate underflow at hook 1 [ 525.124475][T18991] veth0_vlan: entered promiscuous mode [ 525.191743][T18991] veth1_vlan: entered promiscuous mode [ 525.310161][T18991] veth0_macvtap: entered promiscuous mode [ 525.337679][T18991] veth1_macvtap: entered promiscuous mode [ 525.393231][T18991] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 525.418941][T18991] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 525.451446][T18991] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.466701][T18991] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.477515][T18991] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.496088][T18991] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.692937][ T6142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.717732][ T6142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.788795][ T1097] bond0: (slave ip6gretap1): link status up again after 0 ms [ 525.809779][ T6142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.815342][ T1097] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 525.830143][ T6142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.848127][T19013] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 525.860814][T19342] netlink: 11 bytes leftover after parsing attributes in process `syz.0.3528'. [ 525.913097][T19342] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3528'. [ 525.966069][T19342] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3528'. [ 525.970210][T16434] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 526.092391][T19353] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3448'. [ 526.114002][T19013] veth0_vlan: entered promiscuous mode [ 526.124639][T19353] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3448'. [ 526.156354][ T6142] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 526.171572][T19013] veth1_vlan: entered promiscuous mode [ 526.268653][T19356] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 526.277640][T19356] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 526.286532][T19356] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 526.295432][T19356] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 526.374144][T19013] veth0_macvtap: entered promiscuous mode [ 526.470983][T19359] syzkaller0: entered promiscuous mode [ 526.492389][T19359] syzkaller0: entered allmulticast mode [ 526.583136][T19362] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3534'. [ 526.624825][T19013] veth1_macvtap: entered promiscuous mode [ 526.646330][T19367] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3534'. [ 528.326166][ T6125] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 528.509001][T19013] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 528.578609][T19013] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 528.596780][ T6142] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 528.606636][T19013] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.619585][T19013] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.638522][T19013] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.647656][T19013] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.659806][T19397] sctp: [Deprecated]: syz.2.3541 (pid 19397) Use of struct sctp_assoc_value in delayed_ack socket option. [ 528.659806][T19397] Use struct sctp_sack_info instead [ 528.700166][T19397] netlink: 'syz.2.3541': attribute type 1 has an invalid length. [ 528.708404][ T6142] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 528.747729][T19397] 8021q: adding VLAN 0 to HW filter on device bond2 [ 528.831817][T19395] bond2: (slave gretap1): making interface the new active one [ 528.883240][T19395] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 529.064150][T19405] 8021q: adding VLAN 0 to HW filter on device bond1 [ 529.092639][T19405] team0: Port device bond1 added [ 529.164709][ T6142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.175540][T16434] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 529.197386][T19401] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3542'. [ 529.207037][ T6142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.273270][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.285384][ T6142] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 529.292883][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.406003][T16434] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 529.749458][T19436] wireguard0: entered promiscuous mode [ 529.785326][T19436] wireguard0: entered allmulticast mode [ 529.904047][ T3512] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.940076][T19439] __nla_validate_parse: 4 callbacks suppressed [ 529.940096][T19439] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3550'. [ 530.051615][ T3512] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.126538][ T3512] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.203179][ T3512] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.298654][ T3512] bridge_slave_1: left allmulticast mode [ 530.304350][ T3512] bridge_slave_1: left promiscuous mode [ 530.310666][ T3512] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.321170][ T3512] bridge_slave_0: left allmulticast mode [ 530.327069][ T3512] bridge_slave_0: left promiscuous mode [ 530.332804][ T3512] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.671540][ T3512] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 530.685884][ T3512] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 530.697154][ T3512] bond0 (unregistering): Released all slaves [ 530.835899][ T6142] net_ratelimit: 6 callbacks suppressed [ 530.835927][ T6142] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 530.947224][ T3512] hsr_slave_0: left promiscuous mode [ 530.953335][ T3512] hsr_slave_1: left promiscuous mode [ 530.959495][ T3512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 530.967017][ T3512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 530.975291][ T3512] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 530.983510][ T3512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 531.010273][ T3512] veth1_macvtap: left promiscuous mode [ 531.015962][ T3512] veth0_macvtap: left promiscuous mode [ 531.021572][ T3512] veth1_vlan: left promiscuous mode [ 531.027202][ T3512] veth0_vlan: left promiscuous mode [ 531.143750][T19446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3551'. [ 531.249833][T19454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3552'. [ 531.381377][T19461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3552'. [ 531.784557][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 531.794531][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 531.804271][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 531.814079][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 531.827550][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 532.031556][ T3512] team0 (unregistering): Port device team_slave_1 removed [ 532.079228][ T3512] team0 (unregistering): Port device team_slave_0 removed [ 532.575251][T16434] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 532.786061][ T12] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 533.166087][T19504] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3563'. [ 533.185671][ T1097] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 533.233233][T19504] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 533.320481][T19504] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 533.446494][ T13] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 533.835531][ T13] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 533.872492][T19470] chnl_net:caif_netlink_parms(): no params data found [ 533.915531][ T5832] Bluetooth: hci4: command tx timeout [ 534.008236][ T1097] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 534.119800][T19531] netlink: 'syz.2.3568': attribute type 2 has an invalid length. [ 534.169996][T19538] netlink: 'syz.4.3569': attribute type 280 has an invalid length. [ 534.327282][ T13] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 534.534670][T19470] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.546049][T19470] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.553508][T19470] bridge_slave_0: entered allmulticast mode [ 534.566585][T19470] bridge_slave_0: entered promiscuous mode [ 534.575973][ T3512] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 534.585009][T19470] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.592816][T19470] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.601379][T19470] bridge_slave_1: entered allmulticast mode [ 534.609614][T19470] bridge_slave_1: entered promiscuous mode [ 534.676962][T19470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 534.694248][T19470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 534.748040][T19470] team0: Port device team_slave_0 added [ 534.755246][ T13] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 534.774184][T19470] team0: Port device team_slave_1 added [ 534.841159][T19553] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan0, syncid = 1, id = 0 [ 534.841273][T19551] IPVS: stopping backup sync thread 19553 ... [ 534.851774][T19470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 534.864590][T19470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 534.892021][T19470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 534.914347][T19470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 534.922803][T19470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 534.950201][T19470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 535.091074][T19470] hsr_slave_0: entered promiscuous mode [ 535.099712][T19470] hsr_slave_1: entered promiscuous mode [ 535.106459][T19470] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 535.114367][T19470] Cannot create hsr debugfs directory [ 535.811301][T19586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3581'. [ 535.867734][T19591] netlink: 'syz.0.3584': attribute type 22 has an invalid length. [ 535.922281][T19591] netlink: 'syz.0.3584': attribute type 3 has an invalid length. [ 535.948553][ T13] net_ratelimit: 3 callbacks suppressed [ 535.948576][ T13] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 535.999149][ T5836] Bluetooth: hci4: command tx timeout [ 536.012420][T19597] netlink: 'syz.0.3584': attribute type 5 has an invalid length. [ 536.028878][T19597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3584'. [ 536.095272][ T64] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 536.151909][T19601] netlink: zone id is out of range [ 536.168453][T19601] netlink: zone id is out of range [ 536.185248][T19601] netlink: zone id is out of range [ 536.195422][T19601] netlink: zone id is out of range [ 536.215726][ T64] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 536.284291][T19470] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 536.309849][T19470] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 536.342617][T19470] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 536.361351][T19470] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 536.726142][ T3512] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 536.748070][T19470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 536.813459][T19470] 8021q: adding VLAN 0 to HW filter on device team0 [ 536.839078][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.846446][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 536.872453][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.879752][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 536.947662][ T6125] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 537.076737][ T3512] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 537.240227][T19633] IPv6: Can't replace route, no match found [ 537.249263][T19636] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.3598'. [ 537.317093][T19640] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3599'. [ 537.381738][T19640] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 537.434830][T19470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 537.630462][T19470] veth0_vlan: entered promiscuous mode [ 537.651957][T19470] veth1_vlan: entered promiscuous mode [ 537.707504][T19660] x_tables: duplicate underflow at hook 2 [ 537.737488][T19470] veth0_macvtap: entered promiscuous mode [ 537.786621][T19470] veth1_macvtap: entered promiscuous mode [ 537.873639][T19470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 537.928223][T19470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 537.944663][T19670] netlink: 'syz.3.3604': attribute type 10 has an invalid length. [ 537.979675][T19470] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.005760][T19470] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.014563][T19470] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.023951][T19470] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.063208][T19670] team0: Device veth1_macvtap failed to register rx_handler [ 538.071800][ T5836] Bluetooth: hci4: command 0x040f tx timeout [ 538.393453][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.404007][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.511556][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.540616][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.595657][T19697] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3611'. [ 538.633431][T19697] 0ªX¹¦À: renamed from caif0 [ 538.680239][T19697] 0ªX¹¦À: entered allmulticast mode [ 538.912157][T19714] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 538.987544][T19722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3617'. [ 539.059177][T19715] IPVS: Scheduler module ip_vs_sip not found [ 539.163711][T19732] netlink: 'syz.4.3620': attribute type 10 has an invalid length. [ 539.426215][T19746] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 539.783134][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.106174][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.193004][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.258168][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.353489][ T13] bridge_slave_1: left allmulticast mode [ 540.359870][ T13] bridge_slave_1: left promiscuous mode [ 540.365866][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.378178][ T13] bridge_slave_0: left allmulticast mode [ 540.383859][ T13] bridge_slave_0: left promiscuous mode [ 540.393515][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.771023][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 540.787965][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 540.799183][ T13] bond0 (unregistering): Released all slaves [ 540.955416][ T5832] Bluetooth: hci3: command 0x0405 tx timeout [ 540.976899][ T3512] net_ratelimit: 24 callbacks suppressed [ 540.976924][ T3512] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 541.007901][ T13] hsr_slave_0: left promiscuous mode [ 541.013945][ T13] hsr_slave_1: left promiscuous mode [ 541.020612][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 541.028222][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 541.039514][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 541.047126][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 541.071298][ T13] veth1_macvtap: left promiscuous mode [ 541.077001][ T13] veth0_macvtap: left promiscuous mode [ 541.082628][ T13] veth1_vlan: left promiscuous mode [ 541.088266][ T13] veth0_vlan: left promiscuous mode [ 541.317175][T19765] netlink: 248 bytes leftover after parsing attributes in process `syz.4.3633'. [ 541.343568][T19767] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3630'. [ 541.763539][T19789] netlink: 'syz.0.3637': attribute type 1 has an invalid length. [ 541.888691][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 541.898842][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 541.918908][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 541.927556][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 541.935705][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 542.046733][T19797] netlink: 'syz.0.3637': attribute type 39 has an invalid length. [ 542.076896][ T13] team0 (unregistering): Port device team_slave_1 removed [ 542.104210][T19799] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3637'. [ 542.129076][ T13] team0 (unregistering): Port device team_slave_0 removed [ 542.756475][T19805] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 542.769341][T19802] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3639'. [ 542.779235][T19801] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3639'. [ 542.826923][ T12] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 543.023669][T19816] netlink: 'syz.3.3642': attribute type 1 has an invalid length. [ 543.086716][T19816] 8021q: adding VLAN 0 to HW filter on device bond2 [ 543.095664][ T6142] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 543.162862][T19816] ip6erspan0: entered promiscuous mode [ 543.173202][T19816] bond2: (slave ip6erspan0): making interface the new active one [ 543.190518][T19816] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 543.286375][ T1097] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 543.525265][ T6125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.551848][ T6125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.586017][T19840] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3650'. [ 543.616435][ T6142] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 543.720706][T19844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3651'. [ 543.761470][T19792] chnl_net:caif_netlink_parms(): no params data found [ 543.836394][ T1097] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 543.865336][T19851] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3653'. [ 543.887713][T19851] geneve1: entered promiscuous mode [ 543.909177][T19851] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3653'. [ 543.985589][ T5832] Bluetooth: hci4: command tx timeout [ 544.035871][T19867] xt_hashlimit: max too large, truncated to 1048576 [ 544.158034][T19855] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3654'. [ 544.731877][T19887] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 544.748255][T19792] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.769976][T19792] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.786687][T19792] bridge_slave_0: entered allmulticast mode [ 544.801101][T19792] bridge_slave_0: entered promiscuous mode [ 544.826910][T19792] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.844441][T19792] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.852144][T19792] bridge_slave_1: entered allmulticast mode [ 544.861536][T19792] bridge_slave_1: entered promiscuous mode [ 544.966027][ T1097] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 545.000308][T19792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 545.052938][T19792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 545.228298][T19792] team0: Port device team_slave_0 added [ 545.259360][T19792] team0: Port device team_slave_1 added [ 545.435813][T19792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 545.463526][T19792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 545.542550][T19933] xt_CT: You must specify a L4 protocol and not use inversions on it [ 545.545289][T19792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 545.576236][T19792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 545.583220][T19792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 545.621478][ T7272] hid-generic 0005:07C0:5505.0002: item fetching failed at offset 0/1 [ 545.631106][ T7272] hid-generic 0005:07C0:5505.0002: probe with driver hid-generic failed with error -22 [ 545.642913][T19792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 545.663493][T19934] netlink: 'syz.2.3672': attribute type 2 has an invalid length. [ 545.678322][T19934] netlink: 'syz.2.3672': attribute type 1 has an invalid length. [ 545.718231][ T6125] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 545.840606][T19792] hsr_slave_0: entered promiscuous mode [ 545.851759][T19792] hsr_slave_1: entered promiscuous mode [ 545.867021][T19792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 545.888702][T19792] Cannot create hsr debugfs directory [ 545.971086][T19955] openvswitch: netlink: VXLAN extension message has 12 unknown bytes. [ 546.065398][ T5832] Bluetooth: hci4: command tx timeout [ 546.066635][ T3512] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 546.208566][ T6125] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 546.346185][ T1097] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 546.467331][ T64] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 546.565285][T19974] __nla_validate_parse: 5 callbacks suppressed [ 546.565309][T19974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3682'. [ 546.628848][T19974] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3682'. [ 546.660457][T19792] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 546.683161][T19792] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 546.697796][T19974] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3682'. [ 546.714293][T19979] x_tables: duplicate underflow at hook 3 [ 546.734296][T19792] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 546.774454][T19983] lo: entered promiscuous mode [ 546.799105][T19983] netlink: 'syz.3.3684': attribute type 1 has an invalid length. [ 546.823545][T19983] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 546.871200][T19792] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 546.925192][ T1097] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 547.047054][ T64] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 547.169178][T19997] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3688'. [ 547.185275][ T1097] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 547.196702][T19997] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3688'. [ 547.200368][T20001] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3689'. [ 547.218357][T19792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.278069][T19792] 8021q: adding VLAN 0 to HW filter on device team0 [ 547.321465][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.328850][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 547.357692][ T6125] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 547.387516][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.394695][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 547.487470][T20013] netlink: 'syz.3.3691': attribute type 1 has an invalid length. [ 547.541810][T19792] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 547.547279][T20021] Cannot find add_set index 0 as target [ 547.556302][T20013] netlink: 'syz.3.3691': attribute type 2 has an invalid length. [ 547.587033][T20013] netlink: 'syz.3.3691': attribute type 1 has an invalid length. [ 547.594938][T20013] netlink: 1156 bytes leftover after parsing attributes in process `syz.3.3691'. [ 547.630165][T20025] macvlan1: entered promiscuous mode [ 547.635652][T20025] bridge0: entered promiscuous mode [ 547.641778][T20025] bridge0: port 2(macvlan1) entered blocking state [ 547.688526][T20025] bridge0: port 2(macvlan1) entered disabled state [ 547.715365][T20022] netlink: 'syz.4.3692': attribute type 10 has an invalid length. [ 547.741453][T20025] macvlan1: entered allmulticast mode [ 547.771689][T20022] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3692'. [ 547.793879][T20025] bridge0: entered allmulticast mode [ 547.816179][T20025] macvlan1: left allmulticast mode [ 547.823981][T20033] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3695'. [ 547.841453][T20025] bridge0: left allmulticast mode [ 547.857785][T20025] bridge0: left promiscuous mode [ 547.914239][T20037] syzkaller1: entered promiscuous mode [ 547.926265][T20037] syzkaller1: entered allmulticast mode [ 547.939095][ T6125] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 548.145365][ T5832] Bluetooth: hci4: command tx timeout [ 548.169264][T19792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 548.233920][T19792] veth0_vlan: entered promiscuous mode [ 548.252842][T19792] veth1_vlan: entered promiscuous mode [ 548.322734][T19792] veth0_macvtap: entered promiscuous mode [ 548.338204][T19792] veth1_macvtap: entered promiscuous mode [ 548.371996][T19792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 548.399864][T19792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 548.424662][T19792] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.434818][T19792] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.444486][T19792] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.455701][T19792] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.571859][ T3512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.591547][ T3512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.617778][T20059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3704'. [ 548.624456][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.642105][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.694344][T20060] netlink: 'syz.0.3704': attribute type 15 has an invalid length. [ 548.712347][T20060] netlink: 'syz.0.3704': attribute type 3 has an invalid length. [ 548.946191][T20066] geneve2: entered allmulticast mode [ 548.963688][T20065] syzkaller1: entered promiscuous mode [ 548.970649][T20065] syzkaller1: entered allmulticast mode [ 549.000893][ T47] IPVS: starting estimator thread 0... [ 549.145742][T20067] IPVS: using max 25 ests per chain, 60000 per kthread [ 549.471568][T20091] netlink: 'syz.4.3713': attribute type 12 has an invalid length. [ 549.545976][T20091] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 549.653362][T20096] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 549.820240][ T3512] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.893677][T20091] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 549.980354][T20091] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.055643][T20091] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.136733][T20091] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.157118][T20091] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.174727][T20091] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.193338][T20091] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.444964][ T3512] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.107190][ T3512] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.136450][ T64] net_ratelimit: 21 callbacks suppressed [ 551.136473][ T64] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 551.164640][ T3512] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.266949][ T7272] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 551.337343][ T1097] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 551.364109][ T3512] bridge_slave_1: left allmulticast mode [ 551.371728][ T3512] bridge_slave_1: left promiscuous mode [ 551.387875][ T3512] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.417697][ T3512] bridge_slave_0: left allmulticast mode [ 551.433642][ T3512] bridge_slave_0: left promiscuous mode [ 551.458517][ T3512] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.782354][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 551.788203][T20119] __nla_validate_parse: 5 callbacks suppressed [ 551.788225][T20119] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3721'. [ 551.808959][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 551.821410][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 551.832177][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 551.843396][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 552.141472][ T3512] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 552.153173][ T3512] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 552.164146][ T3512] bond0 (unregistering): Released all slaves [ 552.182427][T20104] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3715'. [ 552.199893][ T6125] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 552.413570][T20137] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3724'. [ 552.756225][T16434] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 552.886055][ T12] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 552.983468][T20162] openvswitch: netlink: Message has 4 unknown bytes. [ 553.005958][T16434] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 553.067377][ T3512] hsr_slave_0: left promiscuous mode [ 553.073931][T20165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3729'. [ 553.101047][ T3512] hsr_slave_1: left promiscuous mode [ 553.113757][ T3512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 553.123737][ T3512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 553.141813][ T3512] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 553.156039][ T3512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 553.186641][ T5892] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 553.196334][ T6125] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 553.217130][ T30] audit: type=1107 audit(1747642370.764:7): pid=20154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='1' [ 553.244907][ T3512] veth1_macvtap: left promiscuous mode [ 553.257013][ T3512] veth0_macvtap: left promiscuous mode [ 553.262751][ T3512] veth1_vlan: left promiscuous mode [ 553.268947][ T3512] veth0_vlan: left promiscuous mode [ 553.273667][T20176] x_tables: duplicate underflow at hook 1 [ 553.286587][T20177] x_tables: duplicate underflow at hook 1 [ 553.908748][ T5836] Bluetooth: hci4: command tx timeout [ 553.919470][ T3512] team0 (unregistering): Port device team_slave_1 removed [ 553.963584][ T3512] team0 (unregistering): Port device team_slave_0 removed [ 554.479071][T20165] macsec1: entered allmulticast mode [ 554.484449][T20165] gretap0: entered allmulticast mode [ 554.492966][T20165] gretap0: left allmulticast mode [ 555.554616][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 555.582957][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 555.597653][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 555.622212][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 555.633868][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 555.988695][ T5832] Bluetooth: hci4: command tx timeout [ 556.556532][ T6125] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 556.634034][T20117] chnl_net:caif_netlink_parms(): no params data found [ 556.678473][T20185] netlink: 312 bytes leftover after parsing attributes in process `syz.0.3738'. [ 556.914296][T20193] netlink: 'syz.0.3741': attribute type 4 has an invalid length. [ 556.922727][T16434] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 556.982490][T20198] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3742'. [ 556.996727][T20200] netlink: 'syz.0.3741': attribute type 4 has an invalid length. [ 557.034531][T20202] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3742'. [ 557.055606][T20198] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3742'. [ 557.158878][T20117] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.168038][T20117] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.175540][T20117] bridge_slave_0: entered allmulticast mode [ 557.184027][T20117] bridge_slave_0: entered promiscuous mode [ 557.196044][T20117] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.203324][T20117] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.210968][T20117] bridge_slave_1: entered allmulticast mode [ 557.219587][T20117] bridge_slave_1: entered promiscuous mode [ 557.248031][T20207] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 557.259377][T16434] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 557.412058][T20212] team0: Device gtp0 is of different type [ 557.434907][T20117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 557.479936][T20117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 557.538154][ T6125] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 557.747007][ T5832] Bluetooth: hci3: command tx timeout [ 557.803893][ T3512] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.875364][ T6125] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 558.010535][ T3512] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.066540][ T5832] Bluetooth: hci4: command tx timeout [ 558.087794][T20117] team0: Port device team_slave_0 added [ 558.096776][T16434] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 558.133113][T20117] team0: Port device team_slave_1 added [ 558.197112][ T3512] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.344249][T20181] chnl_net:caif_netlink_parms(): no params data found [ 558.470666][ T3512] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.516672][T20117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 558.534008][T20117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 558.595262][T20117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 558.696214][T20117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 558.713572][T20117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 558.740579][T20117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 558.927348][ T6125] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 559.069771][T20117] hsr_slave_0: entered promiscuous mode [ 559.076858][T20117] hsr_slave_1: entered promiscuous mode [ 559.083394][T20117] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 559.091147][T20117] Cannot create hsr debugfs directory [ 559.232329][T20181] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.243820][T20181] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.258447][T20181] bridge_slave_0: entered allmulticast mode [ 559.271341][T20181] bridge_slave_0: entered promiscuous mode [ 559.283091][T20181] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.294980][T20181] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.304531][T20181] bridge_slave_1: entered allmulticast mode [ 559.331491][T20181] bridge_slave_1: entered promiscuous mode [ 559.508719][T20181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 559.535360][ T3512] bridge_slave_1: left allmulticast mode [ 559.542801][ T3512] bridge_slave_1: left promiscuous mode [ 559.562234][ T3512] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.581824][ T3512] bridge_slave_0: left allmulticast mode [ 559.591439][ T3512] bridge_slave_0: left promiscuous mode [ 559.597511][ T3512] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.827223][ T5832] Bluetooth: hci3: command tx timeout [ 560.041486][ T3512] bond2 (unregistering): (slave ip6erspan0): Releasing active interface [ 560.154415][ T5832] Bluetooth: hci4: command tx timeout [ 560.380471][T20256] sctp: [Deprecated]: syz.0.3754 (pid 20256) Use of int in max_burst socket option deprecated. [ 560.380471][T20256] Use struct sctp_assoc_value instead [ 560.518993][ T3512] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 560.534290][ T3512] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 560.553938][ T3512] bond0 (unregistering): Released all slaves [ 560.743266][ T3512] team0: Port device bond1 removed [ 560.755384][ T3512] bond1 (unregistering): Released all slaves [ 560.917356][ T3512] bond2 (unregistering): Released all slaves [ 560.947541][T20181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 560.980154][T20256] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3754'. [ 560.995692][T20256] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3754'. [ 561.027836][T20256] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3754'. [ 561.297764][T20181] team0: Port device team_slave_0 added [ 561.309146][T20181] team0: Port device team_slave_1 added [ 561.392095][T20272] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3758'. [ 561.413043][T20274] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3758'. [ 561.660892][T20181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 561.668842][T20181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.699727][T20181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 561.712644][T20284] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3760'. [ 561.793649][T20181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 561.804506][T20181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.831092][T20181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 561.862834][T20292] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878) [ 561.875220][T20292] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 561.905740][ T5832] Bluetooth: hci3: command tx timeout [ 561.914294][T20295] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3763'. [ 562.014054][T20299] __nla_validate_parse: 1 callbacks suppressed [ 562.014077][T20299] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3764'. [ 562.166298][T20181] hsr_slave_0: entered promiscuous mode [ 562.173468][T20181] hsr_slave_1: entered promiscuous mode [ 562.209501][T20181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 562.229539][T20181] Cannot create hsr debugfs directory [ 562.264057][ T3512] hsr_slave_0: left promiscuous mode [ 562.275895][ T3512] hsr_slave_1: left promiscuous mode [ 562.283016][ T3512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 562.295957][ T3512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 562.327869][ T3512] veth0_macvtap: left promiscuous mode [ 562.727049][ T3512] team0 (unregistering): Port device team_slave_1 removed [ 562.778075][ T3512] team0 (unregistering): Port device team_slave_0 removed [ 563.111388][T20315] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3768'. [ 563.456162][T20309] ipvlan2: entered promiscuous mode [ 563.461984][T20309] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 563.470027][T20309] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 563.511983][T20308] bridge_slave_0: default FDB implementation only supports local addresses [ 563.521548][ T64] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 563.686982][ T64] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 563.691198][T20321] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3769'. [ 563.763274][T20322] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3770'. [ 563.985955][ T5832] Bluetooth: hci3: command tx timeout [ 564.060747][T20322] bond0 (unregistering): Released all slaves [ 564.279125][T20343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3775'. [ 564.298845][T20342] netlink: 'syz.0.3775': attribute type 1 has an invalid length. [ 564.323810][T20117] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 564.345391][T20343] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3775'. [ 564.359018][T20117] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 564.373280][T20342] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 564.374387][ T3512] IPVS: stop unused estimator thread 0... [ 564.392945][T20343] batadv1: entered promiscuous mode [ 564.403906][T20343] batadv1: entered allmulticast mode [ 564.442765][T20353] netlink: 'syz.2.3777': attribute type 1 has an invalid length. [ 564.445510][T20351] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3776'. [ 564.505824][T20117] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 564.518167][T20117] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 564.547345][ T1163] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 564.571731][T20358] (unnamed net_device) (uninitialized): option ad_select: invalid value (34) [ 564.707235][T20364] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3780'. [ 564.726785][ T6125] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 564.756368][T20363] netlink: 'syz.2.3781': attribute type 1 has an invalid length. [ 564.774047][T20363] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3781'. [ 564.838628][T20117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 564.883217][T20117] 8021q: adding VLAN 0 to HW filter on device team0 [ 564.964107][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.971440][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 565.044293][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.051635][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 565.075940][T20374] openvswitch: netlink: IP tunnel dst address not specified [ 565.114038][T20181] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 565.135787][T20181] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 565.170911][T20375] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3784'. [ 565.187275][ T1163] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 565.203232][T20181] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 565.262255][T20181] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 565.312616][T20383] macsec1: entered allmulticast mode [ 565.318466][T20383] gretap0: entered allmulticast mode [ 565.334090][T20383] gretap0: left allmulticast mode [ 565.518531][ T1097] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 565.637004][ T3512] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 565.739334][T20181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 565.824701][T20181] 8021q: adding VLAN 0 to HW filter on device team0 [ 565.924085][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.931393][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 565.951431][T20414] netlink: 'syz.0.3793': attribute type 21 has an invalid length. [ 565.980827][ T6125] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.988125][ T6125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 566.006273][ T6125] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 566.113278][T20419] Bluetooth: MGMT ver 1.23 [ 566.189777][T20117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 566.197737][T20421] netlink: 'syz.2.3794': attribute type 11 has an invalid length. [ 566.266109][ T6125] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 566.312810][T20117] veth0_vlan: entered promiscuous mode [ 566.330297][T20117] veth1_vlan: entered promiscuous mode [ 566.397799][T20117] veth0_macvtap: entered promiscuous mode [ 566.429078][T20117] veth1_macvtap: entered promiscuous mode [ 566.521100][T20117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 566.552400][T20181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 566.564905][T20117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 566.580362][T20117] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.590234][T20117] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.601220][T20117] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.629877][T20117] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.823576][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 566.836520][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.899666][T20181] veth0_vlan: entered promiscuous mode [ 566.959489][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 566.970228][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.973504][T20181] veth1_vlan: entered promiscuous mode [ 567.161294][T20444] __nla_validate_parse: 5 callbacks suppressed [ 567.161319][T20444] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3802'. [ 567.178889][T20181] veth0_macvtap: entered promiscuous mode [ 567.212261][T20181] veth1_macvtap: entered promiscuous mode [ 567.266188][T20117] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] SMP KASAN PTI [ 567.278155][T20117] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037] [ 567.286638][T20117] CPU: 0 UID: 0 PID: 20117 Comm: syz-executor Not tainted 6.15.0-rc6-syzkaller-01204-gb8fa067c4a76 #0 PREEMPT(full) [ 567.299170][T20117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 567.309336][T20117] RIP: 0010:kernfs_rename_ns+0x3a/0x810 [ 567.314997][T20117] Code: ec 40 49 89 cf 48 89 54 24 08 49 89 f4 49 89 fe 48 bb 00 00 00 00 00 fc ff df e8 f1 41 64 ff 49 8d 6e 30 49 89 ed 49 c1 ed 03 <41> 80 7c 1d 00 00 74 08 48 89 ef e8 a6 3b c6 ff 48 83 7d 00 00 0f [ 567.334744][T20117] RSP: 0018:ffffc9000435f7e8 EFLAGS: 00010206 [ 567.340867][T20117] RAX: ffffffff825bafff RBX: dffffc0000000000 RCX: ffff88806070da00 [ 567.348862][T20117] RDX: 0000000000000000 RSI: ffff8881436d30f0 RDI: 0000000000000000 [ 567.356933][T20117] RBP: 0000000000000030 R08: ffff88806070da00 R09: 0000000000000008 [ 567.364913][T20117] R10: 0000000000000007 R11: 0000000000000000 R12: ffff8881436d30f0 [ 567.372894][T20117] R13: 0000000000000006 R14: 0000000000000000 R15: 0000000000000000 [ 567.380962][T20117] FS: 0000000000000000(0000) GS:ffff8881260b6000(0000) knlGS:0000000000000000 [ 567.389905][T20117] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 567.396513][T20117] CR2: 00002000000023c0 CR3: 000000004fe92000 CR4: 00000000003526f0 [ 567.404584][T20117] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 567.412654][T20117] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 567.420635][T20117] Call Trace: [ 567.423924][T20117] [ 567.426866][T20117] ? trace_kmalloc+0x1f/0xd0 [ 567.431597][T20117] ? kobject_move+0x20a/0x4f0 [ 567.436298][T20117] kobject_move+0x3a5/0x4f0 [ 567.440885][T20117] ? __pfx_kobject_move+0x10/0x10 [ 567.446277][T20117] ? get_device_parent+0x366/0x3a0 [ 567.451432][T20117] device_move+0xe0/0x700 [ 567.455778][T20117] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 567.461772][T20117] hci_conn_del_sysfs+0xb8/0x170 [ 567.466766][T20117] hci_conn_del+0x8f5/0xca0 [ 567.471289][T20117] hci_conn_hash_flush+0x191/0x230 [ 567.476413][T20117] hci_dev_close_sync+0xaef/0x1330 [ 567.481829][T20117] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 567.487421][T20117] ? up_write+0x1c4/0x420 [ 567.491768][T20117] hci_unregister_dev+0x206/0x500 [ 567.496807][T20117] vhci_release+0x80/0xd0 [ 567.501153][T20117] ? __pfx_vhci_release+0x10/0x10 [ 567.506367][T20117] __fput+0x44c/0xa70 [ 567.510366][T20117] task_work_run+0x1d4/0x260 [ 567.514989][T20117] ? __pfx_task_work_run+0x10/0x10 [ 567.520118][T20117] ? kmem_cache_free+0x192/0x3f0 [ 567.525077][T20117] do_exit+0x8d6/0x2550 [ 567.529260][T20117] ? __pfx_do_exit+0x10/0x10 [ 567.533867][T20117] ? _raw_spin_unlock_irq+0x23/0x50 [ 567.539080][T20117] ? lockdep_hardirqs_on+0x9c/0x150 [ 567.544303][T20117] do_group_exit+0x21c/0x2d0 [ 567.549010][T20117] __x64_sys_exit_group+0x3f/0x40 [ 567.554053][T20117] x64_sys_call+0x21ba/0x21c0 [ 567.558739][T20117] do_syscall_64+0xf6/0x210 [ 567.563260][T20117] ? clear_bhb_loop+0x60/0xb0 [ 567.567955][T20117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.573997][T20117] RIP: 0033:0x7f285b58e969 [ 567.578433][T20117] Code: Unable to access opcode bytes at 0x7f285b58e93f. [ 567.585576][T20117] RSP: 002b:00007ffecf4443c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 567.594184][T20117] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f285b58e969 [ 567.602194][T20117] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 567.610269][T20117] RBP: 00007f285b5ee8f0 R08: 00007ffecf442167 R09: 0000000000000003 [ 567.618339][T20117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 567.626324][T20117] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007ffecf444580 [ 567.634315][T20117] [ 567.637355][T20117] Modules linked in: [ 567.642892][T20117] ---[ end trace 0000000000000000 ]--- [ 567.664414][T20117] RIP: 0010:kernfs_rename_ns+0x3a/0x810 [ 567.671948][T20117] Code: ec 40 49 89 cf 48 89 54 24 08 49 89 f4 49 89 fe 48 bb 00 00 00 00 00 fc ff df e8 f1 41 64 ff 49 8d 6e 30 49 89 ed 49 c1 ed 03 <41> 80 7c 1d 00 00 74 08 48 89 ef e8 a6 3b c6 ff 48 83 7d 00 00 0f [ 567.692691][T20117] RSP: 0018:ffffc9000435f7e8 EFLAGS: 00010206 [ 567.702186][T20117] RAX: ffffffff825bafff RBX: dffffc0000000000 RCX: ffff88806070da00 [ 567.710465][T20117] RDX: 0000000000000000 RSI: ffff8881436d30f0 RDI: 0000000000000000 [ 567.719459][T20117] RBP: 0000000000000030 R08: ffff88806070da00 R09: 0000000000000008 [ 567.729643][T20117] R10: 0000000000000007 R11: 0000000000000000 R12: ffff8881436d30f0 [ 567.737855][T20117] R13: 0000000000000006 R14: 0000000000000000 R15: 0000000000000000 [ 567.749139][T20117] FS: 0000000000000000(0000) GS:ffff8881260b6000(0000) knlGS:0000000000000000 [ 567.759389][T20117] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 567.768433][T20117] CR2: 00007eff89134f98 CR3: 000000005a9f6000 CR4: 00000000003526f0 [ 567.776589][T20117] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 567.784607][T20117] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 567.792834][T20117] Kernel panic - not syncing: Fatal exception [ 567.799296][T20117] Kernel Offset: disabled [ 567.803780][T20117] Rebooting in 86400 seconds..