last executing test programs: 12.165470327s ago: executing program 2 (id=1117): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="550a00000000000061191c00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB='@\x00\x00\a', @ANYRES16=r0, @ANYBLOB="0100ffffffffffdbdf251800000008000300", @ANYRES32=r2, @ANYBLOB="240030802000018014000380060001000000000008000200020000000800010000000000"], 0x40}, 0x1, 0x0, 0x0, 0x4004080}, 0x810) (async) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB='@\x00\x00\a', @ANYRES16=r0, @ANYBLOB="0100ffffffffffdbdf251800000008000300", @ANYRES32=r2, @ANYBLOB="240030802000018014000380060001000000000008000200020000000800010000000000"], 0x40}, 0x1, 0x0, 0x0, 0x4004080}, 0x810) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x894a, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0}) sendto$packet(r3, &(0x7f00000000c0)="8ea6e7d96d9bd024307e2697c998ada3b6bb80517f094adc0548f2401142ee5cfde2e9701378cf6b79698e8cde6333225169bb9e72bb94e9bac1ed69536980fc53d63b372f309caa50bf80a3e72b7e7d20b1056494d6eabdc293552aca76af2c3ed7b35ff43d6056e5e8a2a82e16d0d31b919838309f5e566a7dfbca711737580f429019392ec9c423bfc9b0de10d6ec6fa19fbae1420c22a23cea0fb354", 0x9e, 0xc080, &(0x7f00000001c0)={0x11, 0x9, 0x0, 0x1, 0x6, 0x6, @random="2747a26aadab"}, 0x14) (async) sendto$packet(r3, &(0x7f00000000c0)="8ea6e7d96d9bd024307e2697c998ada3b6bb80517f094adc0548f2401142ee5cfde2e9701378cf6b79698e8cde6333225169bb9e72bb94e9bac1ed69536980fc53d63b372f309caa50bf80a3e72b7e7d20b1056494d6eabdc293552aca76af2c3ed7b35ff43d6056e5e8a2a82e16d0d31b919838309f5e566a7dfbca711737580f429019392ec9c423bfc9b0de10d6ec6fa19fbae1420c22a23cea0fb354", 0x9e, 0xc080, &(0x7f00000001c0)={0x11, 0x9, 0x0, 0x1, 0x6, 0x6, @random="2747a26aadab"}, 0x14) 11.887836121s ago: executing program 2 (id=1120): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x11, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x9, 0x28010000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x60}}, 0x44012) 11.734862578s ago: executing program 2 (id=1124): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x20, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000010000000000000000000000791209000000000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="64010000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000040004800800020001000000080001000000000038010880540007800800050000000000000008000600000000000800050000000000080005000000000008000500000000000800050000000000080005000000000008000600000000000800060000000000240007800800060000000000080006000000000008000500000000000800050004"], 0x164}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a32000000001400048008000240326565a708000140000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c0001800b00010072656a65637400000c000280080001400000000114000000110001"], 0xd0}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x148, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x270, 0x20a, 0x278, 0x270, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'veth0_to_team\x00', {}, {}, 0x6}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@unspec=@limit={{0x48}, {0x4c5c, 0x40, 0x0, 0x0, 0x0, 0x10000}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@private2, @private1, [], [], 'wg0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x15, 0x5, 0x0) connect$l2tp6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xfffffffd, 0x3}, 0x20) getsockname$llc(r5, 0x0, &(0x7f00000002c0)) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f00000004c0)=0x40, 0x4) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000005c0)={'wpan0\x00', 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), r8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000cc0)={'wpan1\x00', 0x0}) syz_genetlink_get_family_id$netlbl_calipso(0x0, r8) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r8, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000240)={0x40, r9, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20004800) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000880), r11) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f00000008c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r11, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r12, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r13}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x4008000) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000600)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000640)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r1, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x54, r6, 0x68e7a93a4cb0a1ae, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x180000000}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008001}, 0x800) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a34000000030a01080000000000000000010000000900030073797a32000000054000000000140000001100010000000000000000000000000a00"/92], 0x5c}}, 0x0) 11.058569778s ago: executing program 2 (id=1132): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r2, 0x2, 0x2, 0x0, @void, @value}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r3, r4, 0x2, 0x2, 0x0, @void, @value}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000b00000000000000000c85000000a800000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000001000)={'syztnl0\x00', &(0x7f0000000f80)={'erspan0\x00', 0x0, 0x8000, 0x7, 0x0, 0x1, {{0x14, 0x4, 0x1, 0x1d, 0x50, 0x64, 0x0, 0xfe, 0x2b, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @ssrr={0x89, 0xf, 0x49, [@empty, @multicast1, @empty]}, @end, @rr={0x7, 0x7, 0x8, [@multicast2]}, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @lsrr={0x83, 0x13, 0xfd, [@local, @private=0xa010102, @loopback, @dev={0xac, 0x14, 0x14, 0xb}]}, @noop, @timestamp={0x44, 0x8, 0xa0, 0x0, 0x4, [0x7]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000010c0)={'tunl0\x00', &(0x7f0000001040)={'erspan0\x00', r6, 0x20, 0x1, 0x3, 0x6, {{0x14, 0x4, 0x2, 0x8, 0x50, 0x64, 0x0, 0x5f, 0x29, 0x0, @multicast1, @multicast1, {[@end, @cipso={0x86, 0x2a, 0x2, [{0x7, 0x12, "d522547874959d321e095a5e44179147"}, {0x6, 0x12, "6c0f6407669d6f7dcc6ba9d576697482"}]}, @rr={0x7, 0xf, 0xa7, [@multicast2, @dev={0xac, 0x14, 0x14, 0x1f}, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000006c0)=0x0, &(0x7f0000000700)=0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x1d, 0x1, 0xfff, 0x4, 0x200, 0xffffffffffffffff, 0xbd, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r9}, 0x10) r11 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r10}, 0x8) close(r11) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x55a, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r13, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x7, &(0x7f0000001100)=ANY=[@ANYBLOB="8520000005000000850000007400000018d4e6ad02da9957feabedf90000001d0d00000000000044b251879500000000000000186300000f00000000000000f00d0000"], &(0x7f00000005c0)='GPL\x00', 0x9, 0x99, &(0x7f0000000600)=""/153, 0x41100, 0x38, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000780)={0x3, 0xf, 0x30000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000e40)=[r8, r11, r12, r13, 0xffffffffffffffff], 0x0, 0x10, 0x2, @void, @value}, 0x94) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r15 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000011c0)={@cgroup=r15, r14, 0x2, 0x6, 0x4000, @void, @value=r2}, 0x20) r16 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x2c, r16, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_IP_SADDR={0x27, 0x18, @loopback}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44885}, 0x24004001) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x64, r16, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x10}]}, 0x64}}, 0x0) 10.844034939s ago: executing program 2 (id=1137): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@can_delroute={0x134, 0x19, 0x1, 0x70bd2e, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_CS_CRC8={0x11e, 0x6, {0x7e, 0x66, 0x6c, 0x9, 0x1, "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", 0x2, "10b80d35bc2428954569e109c75a1ae7a3b7b750"}}]}, 0x134}}, 0x0) 9.645870364s ago: executing program 2 (id=1144): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, r2, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x30}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000015c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x2c, r3, 0x401, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x5, 0x8}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4018000}, 0x4010) readv(r0, &(0x7f00000014c0)=[{&(0x7f0000000100)=""/191, 0xbf}, {&(0x7f0000000340)=""/206, 0xce}, {&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000080)=""/59, 0x3b}, {&(0x7f00000001c0)=""/123, 0x7b}, {&(0x7f0000000240)=""/39, 0x27}, {&(0x7f0000001440)=""/127, 0x7f}], 0x8) sendmsg$NFT_BATCH(r0, &(0x7f0000001700)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001740)={{0x14}, [@NFT_MSG_NEWSET={0xd0, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @last={{0x9}, @void}}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x24}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_DESC={0x84, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8}, @NFTA_SET_DESC_CONCAT={0x4}, @NFTA_SET_DESC_CONCAT={0x74, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x27}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}]}]}]}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x10c}, 0x1, 0x0, 0x0, 0x891}, 0x221ccfbfe24b8a64) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000064000000090a010400000000000000000300000008000a400000000009000200797a300000000004000980080005400000000d2800128014000180090001006c617374000000000400028010000180090001006c617374000000000800034000000110140000001000010000000000000000000084000a00"], 0xac}}, 0x20058800) 3.822484953s ago: executing program 3 (id=1168): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000005f8d39b109552641e190a6d1f9b6359c2270000000501627f14086e35d200000000000000000000000000000a1eb0007"], 0x48) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x88dd895beaa99965, 0x12, r0, 0xe352a000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="64010000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000040004800800020001000000080001000000000038010880540007800800050000000000000008000600000000000800050000000000080005000000000008000500000000000800050000000000080005000000000008000600000000000800060000000000240007800800060000000000080006000000000008000500000000000800050004"], 0x164}}, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_RESP(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r3, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0xf}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x4}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4050}, 0x4004000) 3.648483569s ago: executing program 3 (id=1171): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r1, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x55}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x14}, 0x20048051) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000300)={'filter\x00', 0x0, [0xb, 0x5, 0x81, 0x8, 0x6]}, &(0x7f0000000a00)=0x54) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r1, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x55}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x14}, 0x20048051) (async) unshare(0x68040200) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000300)={'filter\x00', 0x0, [0xb, 0x5, 0x81, 0x8, 0x6]}, &(0x7f0000000a00)=0x54) (async) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10) (async) 2.479328678s ago: executing program 0 (id=1181): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x5}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x5, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r1, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff83, 0x42, 0x8, 0x0, 0x0}}, 0xffffffffffffff05) r2 = socket$alg(0x26, 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f00001cb000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0xb36a9000) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a400014002000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x300000d, 0x13, r3, 0xd7735000) bind$alg(r3, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha1\x00'}, 0x58) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r6 = accept$alg(r5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) recvmmsg(r6, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0xfffffffc}], 0x1, 0x40, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r7, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000006060102000000000000000000000003050001000700000005000100070000000900020073797a3080000000050001000700000005000100070000009229674afe3e7899b313d0bad2ed9fb82d3c71c8d63063601787d5dfe90d99acd1b57a170bf1d8f946e28ac84f3d3ba4884bace1f227ea1747f8834aa774cf6d39da29ee465ab08b5c410c8dfccfbafbf5b372fa1e2c4c60488802a734a6d3eb710ee856d74ec193ffbe2557baccabce8816276abee017dc0608b9ef42d9bdc06558ab4aab"], 0x40}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) r8 = accept4(r2, 0x0, 0x0, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) r10 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_MCAST_MSFILTER(r8, 0x0, 0x30, &(0x7f0000000500)={0x7, {{0x2, 0x4e21, @loopback}}, 0x1, 0x4, [{{0x2, 0x4e21, @rand_addr=0x64010100}}, {{0x2, 0x4e21, @broadcast}}, {{0x2, 0x4e21, @remote}}, {{0x2, 0x4e24, @local}}]}, 0x290) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) accept4$tipc(r3, &(0x7f0000000340), &(0x7f0000000380)=0x10, 0x800) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r11, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x6c, r11, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x5, 0x3, 'X'}]}]]}, 0x6c}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000980)=ANY=[@ANYBLOB="0000000097708c8e61701b2ddf60de59fa3afc413ea62c70d63e6e188e1514326c22c077a3eed6994dc1e55b4f7a3d63806a735093ce6ee7fad3251bfa9072e0bb1881c9a2fffa8a4be497b659cfb03b0d870d7541bc8aff89f7d00d494a7384221c32417a17a6e0a28807aa4fc9d6a1f24135b518e960f400deafb621292c2a36c0de1f3b65dcf2380a289003627eb94fd1390360fe5530f60c497ba601d58584dc815b4be239b0989bf21fa1", @ANYRES16=r9, @ANYBLOB="00022abd7000fbdbdf250600000008000300", @ANYRES32=r12, @ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r13, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) 2.23849459s ago: executing program 4 (id=1183): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000300)={0x1f, 0x0, @any, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000280)={0x3, 0x101, 0xfffd, 0x4}, 0xc) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r2, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) close(0x4) 2.173971014s ago: executing program 0 (id=1185): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0xc, 0xb}, {}, {0x4, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @remote}, @TCA_FLOWER_KEY_IP_TOS_MASK={0x5, 0x4a, 0xaa}, @TCA_FLOWER_KEY_IP_TTL={0x5, 0x4b, 0x9}]}}]}, 0x4c}}, 0x800) 2.033434753s ago: executing program 4 (id=1186): socketpair(0x0, 0x4, 0x4, &(0x7f0000000000)={0xffffffffffffffff}) socket$inet_udplite(0x2, 0x2, 0x88) (async) r1 = accept$unix(r0, 0x0, &(0x7f0000000100)) connect$unix(r1, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) (async) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x6}, 0x8) 1.729916494s ago: executing program 4 (id=1189): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) (async, rerun: 64) r1 = socket$key(0xf, 0x3, 0x2) (rerun: 64) sendmsg$key(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2, 0x2, 0xff, 0x5, 0xc, 0x0, 0x70bd29, 0x25dfdbfb, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x6e6bb5, 0xc3, {0x6, 0x6c, 0x8, 0x6, 0x0, 0x1, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@loopback}}, @sadb_sa={0x2, 0x1, 0x4d2, 0x8, 0x6, 0x19, 0x2}]}, 0x60}}, 0x4000040) (async) r2 = socket$inet6(0xa, 0x3, 0x88) (async) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000a1a1011000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast1, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x4, 0x2}, {0x0, 0x1ffffffff, 0x10000, 0xa0de, 0x40000000000004, 0x2, 0x4, 0x400}, {0x7f}, 0xfff, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@private2, 0x0, 0x6c}, 0xa, @in6=@private2, 0x0, 0x1, 0x8, 0x0, 0x9075, 0x800000}}, 0xe8) (async) r4 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000000)={r6, 0x3}, 0x8) (async) connect$inet6(r2, &(0x7f00000003c0)={0xa, 0x4e21, 0x9, @local, 0x2}, 0x1c) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000040)={r6, 0xb, 0x400, 0x5df}, &(0x7f0000000140)=0x10) (async, rerun: 32) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x9, @loopback}, 0xfffffffffffffebc) 1.55778476s ago: executing program 1 (id=1190): r0 = socket(0x80000000000000a, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close(r0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000f00)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000005c0)="75e613512be654a19770bc090cc469914959de011f5a7bf4f91a4c398b4906b7db4037e4412e4822daec56626ea24a441f01c1e2de8a15af04a961b13fd9c2b85dc73224958588ade21603e50a6e446f10147b495a59bb8b9fe92e367c33c9a1f64f33eb750dfa75675fd23a3ac3ce6948aa843872bf16d2f4de10b9114a2177b52cf4ca0665e01359f0335dc1988bfe8f38740fb84ccbcc57c5958d29af3dc3884b7a275d3fce2702e651fb5c8636e21024e9ddcc8049b6dd504ba4409d36c30810a41baa70b8f807558c305aa937357b0daa79d9830c7745ce663172f92b2697e2", 0xe2}, {&(0x7f00000006c0)="006c471e00a5c7cf9cb0b86c113afa9eb388dfcf39b7cfea77bce5cf37e875509d4a49f7295e37d6cb4b12b2da57671322967a1d80305544e9471146fa52840d5df2299ef92c721d9a55084e9fde026638810eb5553d169c9862faed0d183e93df40c3ab485e77940ad7e104b02bf3711abc6f2e6fda689028c62c1079854c932d1a3b4b0a1f2a1c3123ed7c8aa796bb3e3a49ebed699ce941ae41149b", 0x9d}], 0x2}], 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000002000010000010000000000000a000000000000080017004e2171f0d656ffff00"], 0x24}}, 0x840) getsockname$netlink(r5, &(0x7f0000000000), &(0x7f00000001c0)=0xc) r6 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r6, &(0x7f00000000c0), 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000140)='cgroup.max.depth\x00', 0x2, 0x0) sendfile(r9, r9, 0x0, 0x40000000000000) r10 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000000200)={0x7, 'batadv0\x00', {0x6}, 0x7ff}) bind$l2tp(r10, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}, 0x2}, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.556930712s ago: executing program 0 (id=1191): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f91624fc60100c214002000014050582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x3, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xe, 0x3}, {0x8, 0x5}, {0x10, 0x3}]}, @var={0x5, 0x0, 0x0, 0xe, 0x4, 0x2}, @struct={0x2, 0x2, 0x0, 0x4, 0x0, 0x8, [{0xb, 0x3, 0xfffffff8}, {0x7, 0x5, 0xa}]}, @volatile={0x1ff, 0x0, 0x0, 0x9, 0x1}, @union={0x8000005, 0x3, 0x0, 0x5, 0x0, 0x4, [{0x1, 0x0, 0x6}, {0x7, 0x3, 0x63}, {0xd, 0x3, 0x9}]}, @var={0xe, 0x0, 0x0, 0xe, 0x3, 0x1}]}, {0x0, [0x2e]}}, &(0x7f0000000480)=""/98, 0xbf, 0x62, 0x0, 0x2, 0x10000, @value}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{0x1}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) (async, rerun: 64) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000600)={0x0, @loopback, @local}, &(0x7f0000000640)=0xc) (rerun: 64) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x16, 0x10000, 0x7, 0xf, 0x22290, 0x1, 0x0, '\x00', 0x0, r2, 0x1, 0x4, 0x3, 0x0, @void, @value, @void, @value}, 0x50) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x80, 0xd, 0x2, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x7800, 0x10, 0x4853, 0x400000}}) r6 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xffffffff}) (rerun: 32) ioctl(r6, 0x8b22, &(0x7f0000000040)) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r4, &(0x7f0000000140)='t'}, 0x20) (async, rerun: 64) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) (rerun: 64) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r5, 0x29, 0x6f, 0x3, 0x4, 0x2, @dev={0xfe, 0x80, '\x00', 0x35}, @empty, 0x8000, 0x80, 0x0, 0xc97a}}) (async, rerun: 64) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0x14, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (rerun: 64) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r9}, 0x10) close(r10) (async) socket$kcm(0x29, 0x2, 0x0) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r8, 0x0, 0xe, 0x0, &(0x7f00000002c0)="e02742e86c0d85ff9782762f0800", 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (rerun: 32) 1.330839117s ago: executing program 1 (id=1192): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x3, 0x8) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="200000005e00010000000000000000000c00000001000000000000e6"], 0x20}], 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x80}, 0x4000801) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.kill\x00', 0x0, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.kill\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000080)={0x5}, 0x4) (async) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000080)={0x5}, 0x4) 1.305403722s ago: executing program 4 (id=1193): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x12, &(0x7f0000000280)=0xfffffffe, 0x15) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000980)={0x2}, 0x10) write(0xffffffffffffffff, &(0x7f0000000300)="1c0000001a005f0214f9f4070d0903001f00", 0x12) r5 = socket$igmp(0x2, 0x3, 0x2) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x8, 0x700, 0x6, 0x4, {{0x5, 0x4, 0x2, 0x34, 0x14, 0x67, 0x0, 0x7, 0x4, 0x0, @remote, @rand_addr=0x64010100}}}}) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, 0x0) bind$can_j1939(r7, &(0x7f0000001200), 0x18) connect$can_j1939(r7, &(0x7f0000000080)={0x1d, 0x0, 0x4, {0x1, 0x0, 0x4}, 0xfd}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x1, 0x1000, 0x20, @remote, @mcast1, 0x77f, 0x40, 0x81, 0x9}}) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f00000002c0)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x400000000200, 0x400000000230, 0x400000000260], 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="000000000000000056cf303e00000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000cd53a7a37408e851b2b96652bf470400"/144]}, 0x108) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) setsockopt$sock_int(r8, 0x1, 0x29, &(0x7f00000001c0)=0xc442, 0x4) 1.213682798s ago: executing program 1 (id=1194): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa6a03dcf6177a080045069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="540200029078000c"], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$isdn_base(0x22, 0x3, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000280), &(0x7f00000002c0)=0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000007c0)=ANY=[@ANYRES32=r2], 0x108}}, 0x0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711053000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x3c, 0x3e9, 0x1, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x7}}, 0x3c}, 0x1, 0x0, 0x0, 0x8050}, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="3f00000000000000280012800a00010076786c616e00000018000280140003"], 0x50}}, 0x24040004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000000)="3900000013000b4700bb65e1c3e4ffff0100000040000000560000022500000019000a001000000007fd17e5ffff080004000000000000000a", 0x39}], 0x1) 1.039300995s ago: executing program 3 (id=1195): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000240)={0x1d, r1, 0x0, {0x2}, 0xff}, 0x18) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x40, 0x8, 0x0, 0x2, {{0x2d, 0x4, 0x3, 0x3, 0xb4, 0x64, 0x0, 0x3, 0x4, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x44}, {[@timestamp_prespec={0x44, 0x24, 0x1b, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@broadcast, 0x4}, {@rand_addr=0x64010102, 0x2}, {@private=0xa010100, 0x6}]}, @ra={0x94, 0x4}, @end, @timestamp={0x44, 0xc, 0xe5, 0x0, 0x3, [0x7, 0x2]}, @cipso={0x86, 0x25, 0x2, [{0x0, 0xd, "82626b28d9a3b1ee752850"}, {0x1, 0x12, "08715948cb6b6f555869a916e77cc555"}]}, @lsrr={0x83, 0x13, 0x42, [@remote, @broadcast, @multicast2, @rand_addr=0x64010100]}, @timestamp_prespec={0x44, 0xc, 0x36, 0x3, 0x0, [{@private=0xa010100, 0x4}]}, @noop, @timestamp_addr={0x44, 0x24, 0x3f, 0x1, 0x3, [{@local, 0x9}, {@dev={0xac, 0x14, 0x14, 0x18}}, {@private=0xa010102, 0xf165}, {@rand_addr=0x64010102, 0x7}]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000004200000127bd7000fedb3d1c00000000bd39c11c9109ffd0ea5c4cf7e08a510d512ed7be446bc72ed99760472e8a784a5319adea1a5f7d5499"], 0x14}}, 0x4008881) 964.085458ms ago: executing program 4 (id=1196): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r1 = socket(0x10, 0x803, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x50, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0x4}, {}, {0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x3, 0xfff2, 0xa}}}]}]}]}}]}, 0x50}}, 0x20040054) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 904.535239ms ago: executing program 0 (id=1197): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYBLOB="5037366163095cfb423a6c840000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) (async) r4 = socket$kcm(0x10, 0x2, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000003, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000940)="d744784ca67c0398246d848e6df22054de2bd8ca3da64dfdea7d8eb74ffe057d7469066c6ca034a2677ce0c1c25e2b2a825d677e0fbac312a7da165cd5db94fa38cdf3a3f3f93b912a7515e0b1e441a3be644a296bcc765e7adc9ddb4d14376a69cbfcd2ddd156ba432349e96debeda26ee8914c28f4", 0x7ffff000}, {&(0x7f00000009c0)="d86e5c29ab2c0dce2b79f95d543a0d6b45dec9dab7afbc0d6d678feb7a652e67638c3ee007937917fad76308e99818f8f112b73a3c3e3c5ed80c49fab6e0593e95008b4a47aebdde3e28cea1cec26385f3d03b872970dfb69a63a6384a9be5b9419ff8ea6d9c2a730307894adb589d11a1ec59255d10acb1fbef", 0x7a}], 0x2}, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) (async) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000016000500000000000004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r2, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.events\x00', 0x0, 0x0) write$cgroup_int(r7, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r8}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000340)=ANY=[@ANYRESOCT=r1, @ANYRESHEX=0x0, @ANYRES16=r9], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r10}, 0x10) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) (async) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r13) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x20}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r13, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)={0x3c, r14, 0x400, 0x70bd28, 0x0, {}, [@NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcp_state_t:s0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4841}, 0x8040) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r13) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000400000008000000010000008000000060eb716269ad49dee0baa9bde625428f5276e1393701728fc2c096", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r12, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) 854.853117ms ago: executing program 3 (id=1198): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xfffffffffffffdd1, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @rand_addr=0x64010100}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x810}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}, @IFLA_MASTER={0x8}]}, 0x54}}, 0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff?\x11\xc8\xdd\x15\xcc\xd2\xf1\xff\'%\xa0\x00\x00\x00,'}, 0x30) ioctl$FICLONE(r1, 0x40049409, r1) write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) 853.23988ms ago: executing program 1 (id=1199): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pread64(r0, &(0x7f0000000480)=""/61, 0x3d, 0x7fffffffffffffff) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000300)='writeback_bdi_register\x00', r4, 0x0, 0x4}, 0x18) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000140)=r1) socketpair$unix(0x1, 0x5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f0000000600)=@get={0x1, 0x0}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001700)=ANY=[@ANYRES64=r0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffd}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(0xffffffffffffffff) r8 = openat$cgroup_int(r7, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) sendmsg(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000004c0)="59ef6161fd9f75e3c3318619c8b9b13c7f8504c056bcadfe7bbf76f68899d024774cb5d4d8ff9ba0349390e64d96106e09b2e498412eaa3fb28a4f3f5e55ca129a400aa213df9d8ce7d1d7145e1618e267043f17175c0294ac008061c980aa0f82efd430e6571407f61d0226049b071120579ecf5074a21d30d11920f45ee4c848cd309262b8676ca9cf46d2bfd4ab59404691b4bc1a96b05cb4fc67d0e596c3fe2a22", 0xa3}, {&(0x7f0000000180)='[', 0x1}, {&(0x7f0000000640)="d0d98a5aaca916d0aa5878543b6254438b857c3b2ae1ae257786cc015fbdb272d00538482cfe8b621f516ad990c4586aeb1f664fa13ebdf667d652bd8f9f82293318e5968ac02f75cdef5950a74297eaa4d5102639d23486b390c6c85df54a14ce5d53248fb7ad2f1bd7cb72fe4b69828165d3a850297ab1e13f28b02ad2f23fcfee2b6bfb970c5478838ff9a014699646918b279e660a0d2a1e745518a3ecf86c76cb608b74e00f8dce070b32484897e57bb8a24dd770ef78635061dffe14cfc215250b6df6c229dfa41ef9a45751bcc666880c40143910496ad9f85f", 0xdd}, {&(0x7f0000000380)="47f6a11e4b6d5b04ac9b0f35b6032ac1d39017d1e8f5736dba8f943393cd8f32e380a5edcd1d23f1b78e7341d3cf26de64d42737ffccf465645ebb71fbbf9f6e5f04c59d3cba65f15619215a61354ed36039d6187283b0fb122b9dc2dfae98bf", 0x60}, {&(0x7f00000001c0)="e0ddc644d75f1aa50b210366460b1c7d30b84a791a", 0x15}, {&(0x7f00000002c0)="0ddf", 0x2}, {&(0x7f0000000580)="13243824cccd7f10da148690393b43cdf8f08fe58c35301155cfa01ac8fbf9db0a940c551d439b7690e8d4e048e11ef32d029f0ca6716040adc091a0ed732bc4e36761851f85303f61fbf5defcacf3e086bbfa9804e56341718b6e7deef57aceb0ae3469de", 0x65}, {&(0x7f0000001740)="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", 0x1000}], 0x8}, 0x2004c040) writev(r8, &(0x7f0000000a40)=[{&(0x7f00000007c0)='e', 0x1}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x702, 0xe, 0xfffffffffffffff7, &(0x7f0000000100)="f4606889ecdb00000000d1a60000", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 652.407887ms ago: executing program 3 (id=1200): syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c208000000000000007d00044242bf80"], 0x0) 598.701606ms ago: executing program 0 (id=1201): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) getsockopt$MRT(r0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/11], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r3, &(0x7f00000002c0)="882e154b0f", 0x5, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0xa}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000003700010324bd7002f9dbdf25050000003a2eddd0801b964f3fa9bf327ec8824397207e06b906163a7dbac85cbb9d6e25524f22e3e4976a209cb08ee94c14e42f0dc2a85d046b5c1c6c556e6548a345cb56dc2080b27e47284a504698ecd122068dc91328409f9251a9d76d2de9b6d6ee5f1709ecf00df21876ecbbe06dcde4b15a2357a7ae90feade85bcaadd5e974f3370de5f64d3130fdcf6c668d26b277efd0f69381479c2308fc57bb240543d00bafc712c0698fa721d7e3051b7c7ad9"], 0x14}}, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x7, 0x0, 0x0, {{0x8}, {@void, @val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 526.557829ms ago: executing program 4 (id=1202): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000100)={'gretap0\x00', 0x0, 0x40, 0x0, 0x6, 0x0, {{0x6, 0x4, 0x1, 0x3f, 0x18, 0x66, 0x0, 0xb9, 0x0, 0x0, @loopback, @empty, {[@noop]}}}}}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x14, 0x24, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}}, @call={0x85, 0x0, 0x0, 0x9}, @call={0x85, 0x0, 0x0, 0xd2}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffff9}, @jmp={0x5, 0x1, 0x9, 0x5, 0x8, 0x20, 0x8}, @tail_call, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='GPL\x00', 0xbfbd, 0xf8, &(0x7f0000000300)=""/248, 0x41000, 0x9, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x4, 0x80000000, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x7, 0x0, &(0x7f0000000480)=[{0x5, 0x3, 0xf, 0x2}, {0x5, 0x4, 0x10, 0x3}, {0x2, 0x4, 0xc, 0xa}, {0x1, 0x4, 0xc, 0xa}, {0x5, 0x5, 0xf, 0xc}, {0x4, 0x1, 0x3, 0x1}, {0x2, 0x2, 0x6, 0x6}], 0x10, 0xfffffff8, @void, @value}, 0x94) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r3 = socket(0x28, 0x5, 0x0) (async) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async) listen(r4, 0x0) (async) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) (async) close(0x3) (async) close(r4) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x18) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) close(r6) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x13, 0x8, 0x8, 0x0, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r8, 0x0, 0x0}, 0x10) (async) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000080)={0x0, @loopback, @multicast1}, &(0x7f00000000c0)=0xc) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@bridge_getneigh={0xbc, 0x1e, 0x0, 0x70bd2b, 0x25dfdbfd, {0x7, 0x0, 0x0, r1, 0x20200, 0x1}, [@IFLA_PORT_SELF={0x24, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "cfd6d367754ed04dcfee2f242e17bf62"}]}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0xedd}, @IFLA_MTU={0x8, 0x4, 0x9ee}, @IFLA_MAP={0x24, 0xe, {0x0, 0x4f, 0x9, 0x8, 0x81, 0x7}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MAP={0x24, 0xe, {0x8, 0x9, 0x3, 0x5, 0x9, 0x6}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_LINKMODE={0x5, 0x11, 0xd}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8000080}, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, r5, 0x0, 0x1, &(0x7f0000000780)='\x00', 0x0}, 0x30) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000900)={@cgroup=r6, 0x2b, 0x0, 0x8001, &(0x7f00000005c0)=[0x0], 0x1, 0x0, &(0x7f0000000840)=[0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r12, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) recvmsg$unix(r12, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r13, 0x80087601, 0x7) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000800)={0x9}, 0x8) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000980)={@fallback=r8, r8, 0x1e, 0x24, 0x0, @void, @void, @void, @value=r10, r11}, 0x20) 465.908582ms ago: executing program 3 (id=1203): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="a30b0000000000f7fb31f5e065031c000000000576831b674dd550db2ddb2a6811c06b65206d0a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000000000000300"/28], 0x50) r1 = socket$inet6(0xa, 0x40000080806, 0x0) connect$inet6(r1, &(0x7f0000000380)={0xa, 0x1000, 0x0, @empty, 0x4}, 0x1c) ppoll(&(0x7f00000000c0)=[{r1, 0x80}, {0xffffffffffffffff, 0x80}, {0xffffffffffffffff, 0x4100}, {r1}], 0x4, &(0x7f0000000140), &(0x7f0000000180)={[0x1]}, 0x8) r2 = socket(0x840000000002, 0x3, 0x100) setsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000040)=0x5, 0x1) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, 0x0, &(0x7f0000000300)) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1e, &(0x7f0000000040), 0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000440)={0x0, 0x4c, &(0x7f0000000180)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e21, 0x3, @empty, 0x75}]}, &(0x7f0000000480)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000200), &(0x7f0000000280)=0x4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000240)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(aegis128)\x00'}, 0x58) close(0x3) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000100)) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x14, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="180100002d000100000000000000000007"], 0x118}], 0x1}, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r6, 0xf517, 0x0) 330.033927ms ago: executing program 1 (id=1204): r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) splice(r1, &(0x7f0000000040)=0xd9a6, r0, &(0x7f0000000140)=0x7, 0x3, 0x1) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000080)={{{@in=@dev={0xac, 0x14, 0x14, 0xb}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x4, 0x100000000, 0x3ffffffff, 0x0, 0x0, 0x0, 0xf}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x3c}, 0xa, @in=@local, 0x0, 0x5, 0x0, 0x0, 0x2000000}}, 0xe8) (async) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) (async) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$inet(r6, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000240)='sched_switch\x00', r7}, 0x18) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00"/13, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x1f, 0xf, &(0x7f0000000680)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x25}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200000006800e97800000000ffdbdf250a0000000000000008000500", @ANYRES32=r4, @ANYBLOB], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000001800090400000000e4c496ff0a000000000000000020000008001e0001000000"], 0x24}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x59, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r9, @ANYRES32=r4, @ANYBLOB="9201000000020000"], 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x0) 26.814214ms ago: executing program 1 (id=1205): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f00000005c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000000), 0x8) (async) listen(r1, 0x0) (async) listen(r0, 0x0) (async) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82187201, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="017fde000003000000006700000008000300", @ANYRES32=r5, @ANYBLOB="0c00990000000000000000000800c300741300000800c40001"], 0x4c}}, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r6], 0x44}}, 0x0) (async) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8931, 0x0) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, &(0x7f0000000100)) 0s ago: executing program 0 (id=1206): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x7, 0x7) r4 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r4, 0x10d, 0xb4, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0x8, 0x4, 0x0, 0x1, [{0x3}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x30}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="190300000000000000004a0000000e0002"], 0x34}}, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r7, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_MODES_OURS={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, "15bf3ccf"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_EEE_HEADER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x280d1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.15' (ED25519) to the list of known hosts. [ 57.222999][ T5820] cgroup: Unknown subsys name 'net' [ 57.376651][ T5820] cgroup: Unknown subsys name 'cpuset' [ 57.384702][ T5820] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.643886][ T5820] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 60.858513][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.880682][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.890063][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 60.897801][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 60.906406][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 60.915504][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.932377][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 60.933577][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 60.940500][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 60.956601][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 60.964549][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 60.966094][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 60.978833][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 60.986657][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 60.993626][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 60.993837][ T5847] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 61.002518][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.015356][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 61.024905][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.025611][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.032350][ T5849] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 61.040245][ T5847] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 61.046890][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.054173][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.061414][ T5849] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 61.068064][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.082104][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.082801][ T5850] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 61.096412][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 61.099364][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.465892][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 61.491508][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 61.669874][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 61.687453][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.696698][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.705897][ T5830] bridge_slave_0: entered allmulticast mode [ 61.712539][ T5830] bridge_slave_0: entered promiscuous mode [ 61.724529][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.731636][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.738931][ T5830] bridge_slave_1: entered allmulticast mode [ 61.745849][ T5830] bridge_slave_1: entered promiscuous mode [ 61.760014][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.767132][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.774489][ T5836] bridge_slave_0: entered allmulticast mode [ 61.781044][ T5836] bridge_slave_0: entered promiscuous mode [ 61.788480][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.796175][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.803340][ T5836] bridge_slave_1: entered allmulticast mode [ 61.810136][ T5836] bridge_slave_1: entered promiscuous mode [ 61.817084][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 61.896664][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.913161][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.941705][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.961136][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.003194][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 62.038634][ T5836] team0: Port device team_slave_0 added [ 62.047639][ T5836] team0: Port device team_slave_1 added [ 62.069108][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.076350][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.084230][ T5833] bridge_slave_0: entered allmulticast mode [ 62.090778][ T5833] bridge_slave_0: entered promiscuous mode [ 62.131805][ T5830] team0: Port device team_slave_0 added [ 62.150569][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.158120][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.165547][ T5833] bridge_slave_1: entered allmulticast mode [ 62.172100][ T5833] bridge_slave_1: entered promiscuous mode [ 62.179306][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.186533][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.193782][ T5846] bridge_slave_0: entered allmulticast mode [ 62.200350][ T5846] bridge_slave_0: entered promiscuous mode [ 62.209282][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.216318][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.242281][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.255482][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.262439][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.288699][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.301559][ T5830] team0: Port device team_slave_1 added [ 62.345110][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.352234][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.360263][ T5846] bridge_slave_1: entered allmulticast mode [ 62.367701][ T5846] bridge_slave_1: entered promiscuous mode [ 62.409691][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.421530][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.449087][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.460543][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.470927][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.477966][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.505028][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.548797][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.557694][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.589299][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.625182][ T5846] team0: Port device team_slave_0 added [ 62.635783][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.643679][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.650838][ T5835] bridge_slave_0: entered allmulticast mode [ 62.657903][ T5835] bridge_slave_0: entered promiscuous mode [ 62.667853][ T5833] team0: Port device team_slave_0 added [ 62.683380][ T5846] team0: Port device team_slave_1 added [ 62.699531][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.709850][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.717472][ T5835] bridge_slave_1: entered allmulticast mode [ 62.725204][ T5835] bridge_slave_1: entered promiscuous mode [ 62.739654][ T5833] team0: Port device team_slave_1 added [ 62.757658][ T5836] hsr_slave_0: entered promiscuous mode [ 62.764910][ T5836] hsr_slave_1: entered promiscuous mode [ 62.790291][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.809937][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.817298][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.843733][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.861540][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.868840][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.895011][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.907507][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.914531][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.940532][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.954017][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.964604][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.971567][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.997956][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.021331][ T5830] hsr_slave_0: entered promiscuous mode [ 63.027585][ T5830] hsr_slave_1: entered promiscuous mode [ 63.034043][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.041931][ T5830] Cannot create hsr debugfs directory [ 63.096822][ T5835] team0: Port device team_slave_0 added [ 63.135117][ T5843] Bluetooth: hci1: command tx timeout [ 63.136204][ T5835] team0: Port device team_slave_1 added [ 63.141009][ T5843] Bluetooth: hci0: command tx timeout [ 63.152405][ T5834] Bluetooth: hci3: command tx timeout [ 63.158212][ T5850] Bluetooth: hci4: command tx timeout [ 63.177184][ T5846] hsr_slave_0: entered promiscuous mode [ 63.183226][ T5846] hsr_slave_1: entered promiscuous mode [ 63.189969][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.197984][ T5846] Cannot create hsr debugfs directory [ 63.213611][ T5850] Bluetooth: hci2: command tx timeout [ 63.242030][ T5833] hsr_slave_0: entered promiscuous mode [ 63.250571][ T5833] hsr_slave_1: entered promiscuous mode [ 63.256820][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.265061][ T5833] Cannot create hsr debugfs directory [ 63.281507][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.288704][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.315297][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.327872][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.334932][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.360908][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.571774][ T5835] hsr_slave_0: entered promiscuous mode [ 63.578101][ T5835] hsr_slave_1: entered promiscuous mode [ 63.584770][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.592333][ T5835] Cannot create hsr debugfs directory [ 63.705082][ T5836] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.739530][ T5836] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.764461][ T5836] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.784761][ T5836] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.824989][ T5846] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.844937][ T5846] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.854914][ T5846] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.886802][ T5846] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.935614][ T5833] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.948342][ T5833] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.959449][ T5833] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.988655][ T5833] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.033170][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.045915][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.079439][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.088528][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.142721][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.167733][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.179610][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.189175][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.213585][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.252211][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.287231][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.315524][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.322827][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.345667][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.352796][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.399188][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.431738][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.438904][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.488177][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.495324][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.543326][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.586752][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.599807][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.635558][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.652940][ T3494] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.660123][ T3494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.674286][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.722832][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.753155][ T3494] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.760372][ T3494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.779207][ T3494] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.786345][ T3494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.807588][ T1335] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.814760][ T1335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.881903][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.889111][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.937406][ T3494] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.944749][ T3494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.969296][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.001206][ T5833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.027106][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.150569][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.179639][ T5835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.215142][ T5850] Bluetooth: hci0: command tx timeout [ 65.220604][ T5850] Bluetooth: hci1: command tx timeout [ 65.225649][ T5836] veth0_vlan: entered promiscuous mode [ 65.231054][ T5843] Bluetooth: hci4: command tx timeout [ 65.231606][ T5834] Bluetooth: hci3: command tx timeout [ 65.268637][ T5836] veth1_vlan: entered promiscuous mode [ 65.294113][ T5834] Bluetooth: hci2: command tx timeout [ 65.420488][ T5830] veth0_vlan: entered promiscuous mode [ 65.428888][ T5836] veth0_macvtap: entered promiscuous mode [ 65.446042][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.463921][ T5836] veth1_macvtap: entered promiscuous mode [ 65.487001][ T5830] veth1_vlan: entered promiscuous mode [ 65.497495][ T5846] veth0_vlan: entered promiscuous mode [ 65.542494][ T5846] veth1_vlan: entered promiscuous mode [ 65.559789][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.581909][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.592994][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.602621][ T5833] veth0_vlan: entered promiscuous mode [ 65.617478][ T5836] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.627537][ T5836] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.636979][ T5836] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.646075][ T5836] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.691060][ T5833] veth1_vlan: entered promiscuous mode [ 65.716851][ T5830] veth0_macvtap: entered promiscuous mode [ 65.742512][ T5830] veth1_macvtap: entered promiscuous mode [ 65.754301][ T5846] veth0_macvtap: entered promiscuous mode [ 65.790055][ T5846] veth1_macvtap: entered promiscuous mode [ 65.803049][ T5835] veth0_vlan: entered promiscuous mode [ 65.838956][ T5835] veth1_vlan: entered promiscuous mode [ 65.849898][ T5833] veth0_macvtap: entered promiscuous mode [ 65.863830][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.874900][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.886019][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.904114][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.915470][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.925654][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.936499][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.947421][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.958136][ T5833] veth1_macvtap: entered promiscuous mode [ 65.964404][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.978411][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.981513][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.998581][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.010064][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.022872][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.034311][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.044672][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.057498][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.069710][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.083376][ T5830] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.094180][ T5830] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.102892][ T5830] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.111916][ T5830] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.129276][ T5846] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.138473][ T5846] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.147995][ T5846] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.157142][ T5846] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.198131][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.207949][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.216792][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.219459][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.237775][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.251441][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.265309][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.276127][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.287493][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.307771][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.319816][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.330152][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.342806][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.352748][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.364487][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.375496][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.385917][ T5833] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.394817][ T5833] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.405249][ T5833] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.415856][ T5833] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.441805][ T5835] veth0_macvtap: entered promiscuous mode [ 66.459817][ T5835] veth1_macvtap: entered promiscuous mode [ 66.503020][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.522086][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.523374][ T5836] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 66.549547][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.561500][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.572382][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.583745][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.593796][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.604668][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.615656][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.659550][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.680230][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.691355][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.707745][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.717870][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.738462][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.749426][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.760087][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.771226][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.793197][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.798175][ T5835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.815208][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.816391][ T5835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.831362][ T5835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.840113][ T5835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.856610][ T5920] lo speed is unknown, defaulting to 1000 [ 66.897696][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.902316][ T5919] netlink: 'syz.0.1': attribute type 1 has an invalid length. [ 66.911681][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.915465][ T5919] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1'. [ 66.941607][ T5920] lo speed is unknown, defaulting to 1000 [ 66.950676][ T3494] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.961008][ T3494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.013055][ T5920] lo speed is unknown, defaulting to 1000 [ 67.152997][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.164477][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.289884][ T3494] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.297869][ T5834] Bluetooth: hci1: command tx timeout [ 67.297922][ T5834] Bluetooth: hci4: command tx timeout [ 67.297951][ T5834] Bluetooth: hci0: command tx timeout [ 67.304401][ T5849] Bluetooth: hci3: command tx timeout [ 67.327266][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.338968][ T5925] rdma_rxe: rxe_newlink: failed to add lo [ 67.358050][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.362249][ T3494] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.374819][ T5849] Bluetooth: hci2: command tx timeout [ 67.416797][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.425119][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.495180][ T5920] infiniband syz0: set active [ 67.504349][ T5920] infiniband syz0: added lo [ 67.514434][ T5925] netlink: 'syz.1.2': attribute type 1 has an invalid length. [ 67.522812][ T5885] lo speed is unknown, defaulting to 1000 [ 67.549999][ T5925] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2'. [ 67.565340][ T3494] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.584209][ T3494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.746880][ T5920] RDS/IB: syz0: added [ 67.751519][ T5920] smc: adding ib device syz0 with port count 1 [ 67.759534][ T5920] smc: ib device syz0 port 1 has pnetid [ 67.801140][ T5920] lo speed is unknown, defaulting to 1000 [ 67.810994][ T5886] lo speed is unknown, defaulting to 1000 [ 67.907270][ T5941] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3'. [ 68.149529][ T5948] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8'. [ 68.162892][ T5953] netlink: 'syz.4.10': attribute type 29 has an invalid length. [ 68.186606][ T5953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10'. [ 68.188944][ T5954] openvswitch: netlink: IP tunnel dst address not specified [ 68.204857][ T5948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8'. [ 68.230185][ T5955] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8'. [ 68.250004][ T5955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8'. [ 68.329512][ T5920] lo speed is unknown, defaulting to 1000 [ 68.333090][ T5955] Zero length message leads to an empty skb [ 68.543495][ T5964] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 68.570695][ T5967] x_tables: duplicate underflow at hook 1 [ 68.634189][ T5967] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.733107][ T5920] lo speed is unknown, defaulting to 1000 [ 68.769769][ T5971] warning: `syz.4.17' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 68.823746][ T5973] netlink: 'syz.3.18': attribute type 10 has an invalid length. [ 68.875591][ T5977] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18'. [ 68.876328][ T5973] syz_tun: entered promiscuous mode [ 68.916760][ T5973] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 68.949386][ T5980] team0: entered promiscuous mode [ 68.959491][ T5980] team_slave_0: entered promiscuous mode [ 68.989322][ T5980] team_slave_1: entered promiscuous mode [ 69.001373][ T5980] batadv_slave_1: entered promiscuous mode [ 69.024582][ T5983] geneve2: entered allmulticast mode [ 69.106523][ T5920] lo speed is unknown, defaulting to 1000 [ 69.266436][ T5992] netlink: 'syz.4.25': attribute type 2 has an invalid length. [ 69.294412][ T5992] netlink: 'syz.4.25': attribute type 1 has an invalid length. [ 69.329675][ T5992] netlink: 20 bytes leftover after parsing attributes in process `syz.4.25'. [ 69.362220][ T5992] netlink: 'syz.4.25': attribute type 11 has an invalid length. [ 69.376013][ T5849] Bluetooth: hci3: command tx timeout [ 69.381476][ T5849] Bluetooth: hci0: command tx timeout [ 69.387443][ T5849] Bluetooth: hci4: command tx timeout [ 69.392874][ T5849] Bluetooth: hci1: command tx timeout [ 69.420090][ T5997] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 69.454489][ T5849] Bluetooth: hci2: command tx timeout [ 69.619427][ T5920] lo speed is unknown, defaulting to 1000 [ 69.646158][ T6008] netlink: 'syz.1.29': attribute type 1 has an invalid length. [ 70.904529][ T6063] ipt_ECN: cannot use operation on non-tcp rule [ 71.255065][ T6076] netlink: 'syz.1.51': attribute type 28 has an invalid length. [ 71.289053][ T6076] netlink: 'syz.1.51': attribute type 3 has an invalid length. [ 71.422914][ T6080] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 71.432594][ T6083] netlink: 'syz.4.55': attribute type 9 has an invalid length. [ 71.714293][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.160255][ T6110] __nla_validate_parse: 7 callbacks suppressed [ 72.160274][ T6110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.66'. [ 72.516105][ T6132] netlink: 'syz.2.72': attribute type 9 has an invalid length. [ 72.682968][ T6143] macvlan2: entered allmulticast mode [ 72.708110][ T6143] veth1_vlan: entered allmulticast mode [ 72.721291][ T6143] veth1_vlan: left allmulticast mode [ 72.835120][ T6147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.76'. [ 73.067437][ T6157] syz.0.81 uses obsolete (PF_INET,SOCK_PACKET) [ 73.426642][ T6178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.88'. [ 73.503071][ T6185] netlink: 40 bytes leftover after parsing attributes in process `syz.0.88'. [ 73.570817][ T6185] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.648807][ T6191] netlink: 28 bytes leftover after parsing attributes in process `syz.1.90'. [ 73.679491][ T6185] bridge_slave_0 (unregistering): left allmulticast mode [ 73.687446][ T6185] bridge_slave_0 (unregistering): left promiscuous mode [ 73.695412][ T6185] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.758709][ T6198] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 73.819620][ T6200] tipc: Can't bind to reserved service type 0 [ 74.382443][ T6235] netlink: 40 bytes leftover after parsing attributes in process `syz.0.98'. [ 74.820802][ T6262] bond0: option updelay: invalid value (18446744073709551615) [ 74.843816][ T6262] bond0: option updelay: allowed values 0 - 2147483647 [ 75.323366][ T6287] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 75.354295][ T6284] rdma_rxe: rxe_newlink: failed to add lo [ 75.376712][ T6285] netlink: 'syz.0.116': attribute type 1 has an invalid length. [ 75.386245][ T6284] netlink: 'syz.3.114': attribute type 1 has an invalid length. [ 75.396066][ T6285] netlink: 12 bytes leftover after parsing attributes in process `syz.0.116'. [ 75.410702][ T6284] netlink: 224 bytes leftover after parsing attributes in process `syz.3.114'. [ 75.585337][ T6298] netlink: 40 bytes leftover after parsing attributes in process `syz.1.120'. [ 75.610851][ T6301] veth0: entered promiscuous mode [ 75.616880][ T6298] netlink: 'syz.1.120': attribute type 4 has an invalid length. [ 75.629661][ T6298] IPVS: set_ctl: invalid protocol: 8 224.0.0.2:20000 [ 75.638483][ T6301] veth0: left promiscuous mode [ 75.874342][ T6319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.125'. [ 76.333948][ T5849] Bluetooth: hci4: command tx timeout [ 77.079447][ T6353] netlink: 'syz.0.139': attribute type 7 has an invalid length. [ 77.498206][ T6334] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 77.520236][ T6361] syz0: rxe_newlink: already configured on lo [ 77.578738][ T6361] netlink: 'syz.0.143': attribute type 1 has an invalid length. [ 77.642077][ T6361] __nla_validate_parse: 3 callbacks suppressed [ 77.642094][ T6361] netlink: 224 bytes leftover after parsing attributes in process `syz.0.143'. [ 78.529678][ T6418] netlink: 4 bytes leftover after parsing attributes in process `syz.4.157'. [ 78.625281][ T6424] tipc: Enabling of bearer rejected, failed to enable media [ 78.750744][ T6426] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.772859][ T6426] xt_l2tp: v2 tid > 0xffff: 150994944 [ 78.942225][ T6430] macvlan2: entered promiscuous mode [ 78.994148][ T6430] macvlan2: entered allmulticast mode [ 79.120446][ T6446] netlink: 256 bytes leftover after parsing attributes in process `syz.1.168'. [ 79.605799][ T6474] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 79.621903][ T6480] trusted_key: syz.4.176 sent an empty control message without MSG_MORE. [ 79.734596][ T6483] netlink: 12 bytes leftover after parsing attributes in process `syz.0.179'. [ 79.764568][ T6483] nbd: must specify a device to reconfigure [ 80.137523][ T6505] xt_ipcomp: unknown flags B [ 80.159818][ T6509] xt_ipcomp: unknown flags B [ 80.214707][ T6512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.233067][ T6512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.266953][ T6512] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.277548][ T6512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.334437][ T6516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.189'. [ 80.365670][ T6516] dummy0: entered allmulticast mode [ 80.422509][ T6516] batman_adv: batadv0: Adding interface: dummy0 [ 80.443664][ T6516] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.513298][ T6516] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 80.544165][ T6522] netlink: 'syz.0.193': attribute type 39 has an invalid length. [ 80.955327][ T6550] netlink: 'syz.0.198': attribute type 1 has an invalid length. [ 80.967364][ T6550] lo speed is unknown, defaulting to 1000 [ 80.993938][ T6544] netlink: 'syz.0.198': attribute type 1 has an invalid length. [ 81.368179][ T6565] netlink: 20 bytes leftover after parsing attributes in process `syz.4.206'. [ 81.517154][ T6573] netlink: 'syz.2.209': attribute type 8 has an invalid length. [ 81.549292][ T6573] netlink: 16 bytes leftover after parsing attributes in process `syz.2.209'. [ 81.944956][ T973] cfg80211: failed to load regulatory.db [ 81.945964][ T6591] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 81.989113][ T6594] netlink: 'syz.3.217': attribute type 21 has an invalid length. [ 81.999470][ T6594] netlink: 132 bytes leftover after parsing attributes in process `syz.3.217'. [ 82.562960][ T6632] veth1_macvtap: left promiscuous mode [ 82.571838][ T6632] macsec0: entered promiscuous mode [ 82.611042][ T6632] veth1_macvtap: entered promiscuous mode [ 82.619492][ T6632] macsec0: left promiscuous mode [ 82.644679][ T6631] syzkaller0: entered promiscuous mode [ 82.656556][ T6631] syzkaller0: entered allmulticast mode [ 82.695593][ T6635] netlink: 'syz.1.230': attribute type 2 has an invalid length. [ 82.696401][ T6631] netlink: 12 bytes leftover after parsing attributes in process `syz.4.228'. [ 82.703650][ T6635] netlink: 'syz.1.230': attribute type 1 has an invalid length. [ 82.825324][ T6631] syz_tun: mtu less than device minimum [ 83.172487][ T6660] netlink: 44 bytes leftover after parsing attributes in process `syz.4.239'. [ 83.206889][ T973] IPVS: starting estimator thread 0... [ 83.215049][ T6657] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 83.323647][ T6664] IPVS: using max 23 ests per chain, 55200 per kthread [ 83.391798][ T6671] Bluetooth: MGMT ver 1.23 [ 83.431651][ T6671] netlink: 48 bytes leftover after parsing attributes in process `syz.3.240'. [ 83.530585][ T6679] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 83.693824][ T6685] netlink: 'syz.2.244': attribute type 9 has an invalid length. [ 83.767871][ T6689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.248'. [ 83.819904][ T6691] netlink: 24 bytes leftover after parsing attributes in process `syz.1.247'. [ 83.931061][ T6658] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 83.980982][ T6694] veth3: entered allmulticast mode [ 84.125913][ T6701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.254'. [ 84.169944][ T6706] sctp: [Deprecated]: syz.3.253 (pid 6706) Use of int in max_burst socket option deprecated. [ 84.169944][ T6706] Use struct sctp_assoc_value instead [ 84.218789][ T6701] hsr_slave_1 (unregistering): left promiscuous mode [ 84.251062][ T6711] netlink: 'syz.1.252': attribute type 1 has an invalid length. [ 84.288977][ T6711] netlink: 'syz.1.252': attribute type 2 has an invalid length. [ 84.382870][ T6709] DRBG: could not allocate digest TFM handle: hmac(sha384) [ 84.544801][ T6724] Bluetooth: MGMT ver 1.23 [ 84.869157][ T6746] syz.1.263 uses old SIOCAX25GETINFO [ 85.021139][ T6754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.266'. [ 85.046034][ T6751] x_tables: duplicate underflow at hook 3 [ 85.066988][ T6751] x_tables: duplicate underflow at hook 3 [ 85.137497][ T5849] Bluetooth: hci2: command 0x0401 tx timeout [ 85.459723][ T6782] netlink: 32 bytes leftover after parsing attributes in process `syz.0.274'. [ 85.642462][ T6799] netlink: 68 bytes leftover after parsing attributes in process `syz.0.280'. [ 85.836575][ T6813] netlink: 4 bytes leftover after parsing attributes in process `syz.0.282'. [ 85.850562][ T6813] netlink: 'syz.0.282': attribute type 3 has an invalid length. [ 85.876719][ T6813] netlink: 'syz.0.282': attribute type 3 has an invalid length. [ 85.899306][ T6815] Cannot find add_set index 0 as target [ 86.714062][ T68] tipc: Subscription rejected, illegal request [ 86.779723][ T6862] IPv6: sit1: Disabled Multicast RS [ 87.401617][ T6886] netlink: 'syz.3.310': attribute type 2 has an invalid length. [ 87.848446][ T6896] netlink: 'syz.1.312': attribute type 4 has an invalid length. [ 87.932052][ T6899] netlink: 'syz.2.314': attribute type 10 has an invalid length. [ 87.948859][ T6900] netlink: 'syz.1.312': attribute type 4 has an invalid length. [ 87.983894][ T6898] __nla_validate_parse: 8 callbacks suppressed [ 87.983915][ T6898] netlink: 176 bytes leftover after parsing attributes in process `syz.3.310'. [ 87.999340][ T6898] netlink: 32 bytes leftover after parsing attributes in process `syz.3.310'. [ 88.496807][ T5850] Bluetooth: hci4: command 0x0405 tx timeout [ 88.989870][ T6879] netlink: 288 bytes leftover after parsing attributes in process `syz.4.307'. [ 89.012163][ T6886] lo speed is unknown, defaulting to 1000 [ 89.082585][ T6899] geneve0: entered promiscuous mode [ 89.112668][ T6899] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 89.806217][ T6936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.322'. [ 89.884998][ T6942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.322'. [ 89.995142][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 90.001829][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 90.009793][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 90.017688][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 90.025659][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 90.033538][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 90.041438][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 90.049353][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 90.057558][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 90.066173][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 90.074125][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 90.081969][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 90.089947][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 90.097843][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 90.105821][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 90.113697][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 90.121615][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 90.129522][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 90.137481][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 90.145389][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 90.153309][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 90.161220][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 90.169170][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 90.177084][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 90.185105][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 90.192951][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 90.200915][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 90.208805][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 90.216748][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 90.224639][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 90.232545][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 90.240445][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 90.248388][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 90.256287][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 90.264254][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 90.272083][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 90.280032][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 90.287909][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 90.296116][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 90.304264][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 90.312739][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 90.320632][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 90.328580][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 90.336454][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 90.344399][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 90.352234][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 90.360155][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 90.368027][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 90.375938][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 90.383786][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 90.391835][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 90.399721][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 90.407649][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 90.415522][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 90.423390][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 90.431276][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 90.439257][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 90.447126][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 90.455064][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 90.462918][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 90.470857][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 90.478735][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 90.486682][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 90.494558][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 90.502417][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 90.510313][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 90.593214][ T6956] geneve2: entered promiscuous mode [ 90.601334][ T6956] geneve2: entered allmulticast mode [ 90.813980][ T6963] netlink: 'syz.4.330': attribute type 2 has an invalid length. [ 91.284885][ T6979] netlink: 'syz.4.339': attribute type 1 has an invalid length. [ 91.293080][ T6979] netlink: 224 bytes leftover after parsing attributes in process `syz.4.339'. [ 91.460868][ T6989] xt_hashlimit: size too large, truncated to 1048576 [ 91.503751][ T6991] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 91.584453][ T6992] : renamed from bond0 (while UP) [ 91.891699][ T7006] netlink: 161 bytes leftover after parsing attributes in process `syz.4.345'. [ 92.217514][ T7024] mac80211_hwsim hwsim10 ÿ: renamed from wlan1 (while UP) [ 92.343944][ T7028] netlink: 'syz.0.353': attribute type 2 has an invalid length. [ 92.366230][ T7028] netlink: 244 bytes leftover after parsing attributes in process `syz.0.353'. [ 92.524638][ T7038] Driver unsupported XDP return value 0 on prog (id 64) dev N/A, expect packet loss! [ 92.715352][ T7050] dccp_invalid_packet: P.type (CLOSE) not Data || [Data]Ack, while P.X == 0 [ 92.750019][ T7054] netlink: 16 bytes leftover after parsing attributes in process `syz.0.362'. [ 92.816349][ T7054] netlink: 48 bytes leftover after parsing attributes in process `syz.0.362'. [ 93.049167][ T7067] netlink: 'syz.2.366': attribute type 7 has an invalid length. [ 93.199132][ T7073] __nla_validate_parse: 1 callbacks suppressed [ 93.199153][ T7073] netlink: 100 bytes leftover after parsing attributes in process `syz.0.368'. [ 93.218031][ T7072] lo speed is unknown, defaulting to 1000 [ 93.309166][ T7078] macvlan3: entered promiscuous mode [ 93.351728][ T7078] macvlan3: entered allmulticast mode [ 93.422838][ T7082] sctp: [Deprecated]: syz.1.371 (pid 7082) Use of int in maxseg socket option. [ 93.422838][ T7082] Use struct sctp_assoc_value instead [ 93.625600][ T7093] netlink: 40 bytes leftover after parsing attributes in process `syz.3.374'. [ 93.843015][ T7104] netlink: 4 bytes leftover after parsing attributes in process `syz.3.378'. [ 94.063818][ T7115] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 94.147185][ T7114] syz.1.382 (7114) used greatest stack depth: 16848 bytes left [ 94.162761][ T7117] tipc: Started in network mode [ 94.169723][ T7117] tipc: Node identity fe57c2bf4b61, cluster identity 4711 [ 94.189099][ T7117] tipc: Enabled bearer , priority 0 [ 94.375809][ T7117] syzkaller0: entered promiscuous mode [ 94.406793][ T7117] syzkaller0: entered allmulticast mode [ 94.426311][ T7125] netlink: 4 bytes leftover after parsing attributes in process `syz.3.385'. [ 94.436336][ T7127] netlink: 24 bytes leftover after parsing attributes in process `syz.2.386'. [ 94.436350][ T7117] tipc: Resetting bearer [ 94.508932][ T7116] tipc: Resetting bearer [ 94.635197][ T7132] netlink: 40 bytes leftover after parsing attributes in process `syz.4.388'. [ 94.683042][ T7136] netlink: 144 bytes leftover after parsing attributes in process `syz.3.389'. [ 94.778413][ T7142] netlink: 28 bytes leftover after parsing attributes in process `syz.3.389'. [ 94.955774][ T7148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.393'. [ 95.218666][ T973] tipc: Node number set to 3040264895 [ 96.135984][ T7116] tipc: Disabling bearer [ 96.433022][ T7159] netlink: 'syz.3.397': attribute type 12 has an invalid length. [ 96.466482][ T7159] netlink: 'syz.3.397': attribute type 29 has an invalid length. [ 96.498951][ T7159] netlink: 148 bytes leftover after parsing attributes in process `syz.3.397'. [ 96.508784][ T7159] netlink: 'syz.3.397': attribute type 1 has an invalid length. [ 96.525801][ T7159] netlink: 'syz.3.397': attribute type 2 has an invalid length. [ 96.535464][ T7160] netlink: 'syz.3.397': attribute type 12 has an invalid length. [ 96.543213][ T7160] netlink: 'syz.3.397': attribute type 29 has an invalid length. [ 96.577855][ T7160] netlink: 'syz.3.397': attribute type 1 has an invalid length. [ 96.600579][ T7160] netlink: 'syz.3.397': attribute type 2 has an invalid length. [ 97.277060][ T7192] syzkaller1: entered promiscuous mode [ 97.283365][ T7192] syzkaller1: entered allmulticast mode [ 97.582697][ T7209] bond0: entered promiscuous mode [ 97.603629][ T7209] bond_slave_0: entered promiscuous mode [ 97.609490][ T7209] bond_slave_1: entered promiscuous mode [ 97.653271][ T7209] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 97.676002][ T7209] bond0: left promiscuous mode [ 97.693964][ T7209] bond_slave_0: left promiscuous mode [ 97.699566][ T7209] bond_slave_1: left promiscuous mode [ 98.425213][ T7260] __nla_validate_parse: 8 callbacks suppressed [ 98.425227][ T7260] netlink: 32 bytes leftover after parsing attributes in process `syz.1.431'. [ 98.564026][ T7264] netlink: 'syz.4.432': attribute type 1 has an invalid length. [ 98.583293][ T7264] netlink: 4 bytes leftover after parsing attributes in process `syz.4.432'. [ 98.628649][ T7267] netlink: 'syz.0.433': attribute type 5 has an invalid length. [ 98.835575][ T7278] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 99.406160][ T7305] bridge0: port 3(batadv1) entered blocking state [ 99.432542][ T7311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.445'. [ 99.433529][ T7305] bridge0: port 3(batadv1) entered disabled state [ 99.495817][ T7311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.445'. [ 99.508120][ T7305] batadv1: entered allmulticast mode [ 99.551508][ T7305] batadv1: entered promiscuous mode [ 99.906584][ T4857] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 99.916337][ T4857] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 99.977398][ T7339] IPv6: Can't replace route, no match found [ 99.985501][ T7339] tipc: Started in network mode [ 99.990418][ T7339] tipc: Node identity ac14140f, cluster identity 4711 [ 100.019777][ T7339] tipc: New replicast peer: 255.255.255.255 [ 100.050491][ T7339] tipc: Enabled bearer , priority 10 [ 100.066864][ T7343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.456'. [ 100.073203][ T7345] netlink: 4 bytes leftover after parsing attributes in process `syz.3.455'. [ 100.139424][ T7351] netlink: 4 bytes leftover after parsing attributes in process `syz.3.455'. [ 100.170551][ T7345] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.217319][ T7354] netlink: 164 bytes leftover after parsing attributes in process `syz.3.455'. [ 100.351951][ T7345] bridge_slave_1 (unregistering): left allmulticast mode [ 100.363486][ T7345] bridge_slave_1 (unregistering): left promiscuous mode [ 100.371343][ T7345] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.417922][ T7351] batadv1: left allmulticast mode [ 100.419205][ T7365] netlink: 16 bytes leftover after parsing attributes in process `syz.4.459'. [ 100.423051][ T7351] batadv1: left promiscuous mode [ 100.455913][ T7351] bridge0: port 3(batadv1) entered disabled state [ 100.509466][ T7351] bridge_slave_0: left allmulticast mode [ 100.527969][ T7351] bridge_slave_0: left promiscuous mode [ 100.538041][ T7351] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.548746][ T7374] netlink: 20 bytes leftover after parsing attributes in process `syz.2.462'. [ 100.790388][ T7383] netlink: 'syz.4.464': attribute type 13 has an invalid length. [ 100.939856][ T7388] tipc: Started in network mode [ 100.951213][ T7388] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 100.961775][ T7388] tipc: Enabled bearer , priority 28 [ 100.976990][ T7390] syzkaller0: refused to change device tx_queue_len [ 101.003022][ T7388] tipc: Enabling of bearer rejected, already enabled [ 101.012696][ T7391] tipc: Enabling of bearer rejected, already enabled [ 101.021538][ T7388] tipc: Enabling of bearer rejected, already enabled [ 101.032347][ T7388] tipc: Enabling of bearer rejected, already enabled [ 101.054381][ T7388] tipc: Enabling of bearer rejected, already enabled [ 101.067054][ T7388] tipc: Enabling of bearer rejected, already enabled [ 101.090211][ T7388] tipc: Enabling of bearer rejected, already enabled [ 101.115650][ T7388] tipc: Enabling of bearer rejected, already enabled [ 101.127764][ T7388] tipc: Enabling of bearer rejected, already enabled [ 101.152948][ T7388] tipc: Enabling of bearer rejected, already enabled [ 101.163546][ T9] tipc: Node number set to 2886997007 [ 101.174607][ T7398] netlink: 'syz.0.470': attribute type 1 has an invalid length. [ 101.196492][ T7388] tipc: Enabling of bearer rejected, already enabled [ 101.220600][ T7388] tipc: Enabling of bearer rejected, already enabled [ 101.273854][ T7388] tipc: Enabling of bearer rejected, already enabled [ 101.292963][ T7388] tipc: Enabling of bearer rejected, already enabled [ 101.317360][ T7388] tipc: Enabling of bearer rejected, already enabled [ 101.329148][ T7388] tipc: Enabling of bearer rejected, already enabled [ 101.340423][ T7388] tipc: Enabling of bearer rejected, already enabled [ 101.349898][ T7388] tipc: Enabling of bearer rejected, already enabled [ 101.500441][ T7388] tipc: Enabling of bearer rejected, already enabled [ 101.523874][ T7388] tipc: Enabling of bearer rejected, already enabled [ 101.541169][ T7388] tipc: Enabling of bearer rejected, already enabled [ 101.582763][ T7388] tipc: Enabling of bearer rejected, already enabled [ 101.606237][ T7388] tipc: Enabling of bearer rejected, already enabled [ 101.636048][ T7388] tipc: Enabling of bearer rejected, already enabled [ 101.682354][ T7388] tipc: Enabling of bearer rejected, already enabled [ 101.698608][ T7388] tipc: Enabling of bearer rejected, already enabled [ 101.711692][ T7388] tipc: Enabling of bearer rejected, already enabled [ 101.714207][ T7412] netlink: 'syz.1.474': attribute type 1 has an invalid length. [ 101.725457][ T7388] tipc: Enabling of bearer rejected, already enabled [ 102.073577][ T5888] tipc: Node number set to 10005162 [ 102.328095][ T7453] xt_policy: neither incoming nor outgoing policy selected [ 102.493518][ T5850] Bluetooth: hci0: command tx timeout [ 102.508864][ T7468] netlink: 'syz.4.488': attribute type 39 has an invalid length. [ 102.727479][ T7478] netlink: 'syz.2.493': attribute type 2 has an invalid length. [ 102.947992][ T7487] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 103.040897][ T7495] netlink: 'syz.4.500': attribute type 5 has an invalid length. [ 103.049633][ T7495] netlink: 'syz.4.500': attribute type 13 has an invalid length. [ 103.093990][ T7495] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len [ 103.336221][ T7512] bridge0: entered allmulticast mode [ 103.354076][ T7511] openvswitch: netlink: Geneve opt len 31 is not a multiple of 4. [ 103.355986][ T7512] pim6reg: entered allmulticast mode [ 103.458592][ T7512] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 103.483599][ T7512] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 103.525569][ T7512] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 103.557770][ T7512] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 103.582215][ T7512] geneve2: entered promiscuous mode [ 103.596059][ T7530] __nla_validate_parse: 12 callbacks suppressed [ 103.596136][ T7530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.508'. [ 103.621819][ T7512] geneve2: entered allmulticast mode [ 103.638143][ T7512] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 103.673899][ T7512] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 103.691379][ T7512] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 103.700908][ T7512] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 103.771649][ T7530] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 103.797737][ T7540] netlink: 'syz.0.510': attribute type 21 has an invalid length. [ 103.805929][ T7540] netlink: 128 bytes leftover after parsing attributes in process `syz.0.510'. [ 103.843731][ T7540] netlink: 'syz.0.510': attribute type 4 has an invalid length. [ 103.852856][ T7540] netlink: 'syz.0.510': attribute type 5 has an invalid length. [ 103.880195][ T7540] netlink: 3 bytes leftover after parsing attributes in process `syz.0.510'. [ 104.172324][ T7554] bond1: entered promiscuous mode [ 104.187965][ T7554] bond1: entered allmulticast mode [ 104.208671][ T7554] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.214061][ T5887] IPVS: starting estimator thread 0... [ 104.337780][ T7565] IPVS: using max 23 ests per chain, 55200 per kthread [ 104.514797][ T7576] netlink: 4 bytes leftover after parsing attributes in process `syz.2.521'. [ 104.681056][ T7590] netlink: 'syz.2.526': attribute type 2 has an invalid length. [ 104.722362][ T7590] netlink: 'syz.2.526': attribute type 8 has an invalid length. [ 104.771021][ T7590] netlink: 132 bytes leftover after parsing attributes in process `syz.2.526'. [ 104.821099][ T7585] netlink: 'syz.2.526': attribute type 2 has an invalid length. [ 104.832570][ T7596] netlink: 'syz.4.528': attribute type 1 has an invalid length. [ 104.863953][ T7585] netlink: 'syz.2.526': attribute type 8 has an invalid length. [ 104.871638][ T7585] netlink: 132 bytes leftover after parsing attributes in process `syz.2.526'. [ 104.909249][ T7596] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.971290][ T7606] xt_limit: Overflow, try lower: 2147483649/128 [ 104.992866][ T7603] geneve3: entered allmulticast mode [ 105.014225][ T7603] bond1: (slave geneve3): making interface the new active one [ 105.026472][ T7603] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 105.151861][ T7603] syz.4.528 (7603) used greatest stack depth: 16056 bytes left [ 105.305901][ T7624] rdma_rxe: rxe_newlink: failed to add lo [ 105.337018][ T7624] netlink: 'syz.3.536': attribute type 1 has an invalid length. [ 105.348501][ T7625] netlink: 'syz.0.538': attribute type 29 has an invalid length. [ 105.373591][ T7624] netlink: 224 bytes leftover after parsing attributes in process `syz.3.536'. [ 105.529564][ T7633] rdma_rxe: rxe_newlink: failed to add lo [ 105.631414][ T7637] lo speed is unknown, defaulting to 1000 [ 105.712097][ T7643] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.545'. [ 105.760292][ T7640] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.545'. [ 105.836811][ T7648] tipc: Enabling of bearer rejected, media not registered [ 106.060783][ T7656] raw_sendmsg: syz.4.549 forgot to set AF_INET. Fix it! [ 106.210916][ T7660] netlink: 68 bytes leftover after parsing attributes in process `syz.2.553'. [ 106.267362][ T7663] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 106.695065][ T7688] FAULT_INJECTION: forcing a failure. [ 106.695065][ T7688] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 106.755033][ T7688] CPU: 1 UID: 0 PID: 7688 Comm: syz.4.559 Not tainted 6.14.0-rc1-syzkaller-00092-g011b03359038 #0 [ 106.755060][ T7688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 106.755073][ T7688] Call Trace: [ 106.755080][ T7688] [ 106.755087][ T7688] dump_stack_lvl+0x241/0x360 [ 106.755119][ T7688] ? __pfx_dump_stack_lvl+0x10/0x10 [ 106.755136][ T7688] ? __pfx__printk+0x10/0x10 [ 106.755166][ T7688] ? snprintf+0xda/0x120 [ 106.755186][ T7688] should_fail_ex+0x40a/0x550 [ 106.755209][ T7688] _copy_to_user+0x31/0xb0 [ 106.755227][ T7688] simple_read_from_buffer+0xca/0x150 [ 106.755253][ T7688] proc_fail_nth_read+0x1e9/0x250 [ 106.755279][ T7688] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 106.755304][ T7688] ? rw_verify_area+0x243/0x630 [ 106.755323][ T7688] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 106.755348][ T7688] vfs_read+0x1f8/0xb40 [ 106.755380][ T7688] ? fdget_pos+0x254/0x320 [ 106.755398][ T7688] ? __pfx___mutex_lock+0x10/0x10 [ 106.755419][ T7688] ? __pfx_vfs_read+0x10/0x10 [ 106.755443][ T7688] ? __fget_files+0x2a/0x410 [ 106.755462][ T7688] ? __fget_files+0x395/0x410 [ 106.755477][ T7688] ? __fget_files+0x2a/0x410 [ 106.755504][ T7688] ksys_read+0x18f/0x2b0 [ 106.755526][ T7688] ? __pfx_ksys_read+0x10/0x10 [ 106.755547][ T7688] ? do_syscall_64+0x100/0x230 [ 106.755572][ T7688] ? do_syscall_64+0xb6/0x230 [ 106.755595][ T7688] do_syscall_64+0xf3/0x230 [ 106.755616][ T7688] ? clear_bhb_loop+0x35/0x90 [ 106.755640][ T7688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.755660][ T7688] RIP: 0033:0x7fcd3bf8b7fc [ 106.755681][ T7688] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 106.755694][ T7688] RSP: 002b:00007fcd3ce06030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 106.755712][ T7688] RAX: ffffffffffffffda RBX: 00007fcd3c1a6080 RCX: 00007fcd3bf8b7fc [ 106.755724][ T7688] RDX: 000000000000000f RSI: 00007fcd3ce060a0 RDI: 0000000000000005 [ 106.755734][ T7688] RBP: 00007fcd3ce06090 R08: 0000000000000000 R09: 0000000000000000 [ 106.755745][ T7688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.755754][ T7688] R13: 0000000000000001 R14: 00007fcd3c1a6080 R15: 00007ffda7c4ed58 [ 106.755781][ T7688] [ 107.777843][ T7719] openvswitch: netlink: Flow actions attr not present in new flow. [ 108.103814][ T7729] sctp: [Deprecated]: syz.2.574 (pid 7729) Use of int in maxseg socket option. [ 108.103814][ T7729] Use struct sctp_assoc_value instead [ 108.265806][ T7736] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.418405][ T7739] xt_CT: You must specify a L4 protocol and not use inversions on it [ 108.716288][ T7756] siw: device registration error -23 [ 108.919598][ T7765] __nla_validate_parse: 14 callbacks suppressed [ 108.919617][ T7765] netlink: 244 bytes leftover after parsing attributes in process `syz.1.587'. [ 109.623829][ T7796] netlink: 116 bytes leftover after parsing attributes in process `syz.0.596'. [ 109.639194][ T7795] netlink: 116 bytes leftover after parsing attributes in process `syz.0.596'. [ 109.646211][ T7800] openvswitch: netlink: Key type 34 is out of range max 32 [ 109.969917][ T7815] netlink: 20 bytes leftover after parsing attributes in process `syz.0.602'. [ 109.998243][ T7818] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 110.257499][ T7824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.606'. [ 110.288567][ T7830] validate_nla: 5 callbacks suppressed [ 110.288586][ T7830] netlink: 'syz.0.608': attribute type 7 has an invalid length. [ 110.309501][ T7824] netlink: 4 bytes leftover after parsing attributes in process `syz.4.606'. [ 110.329311][ T7830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.608'. [ 110.346213][ T7824] netlink: 38 bytes leftover after parsing attributes in process `syz.4.606'. [ 110.355712][ T7824] nbd: socks must be embedded in a SOCK_ITEM attr [ 110.643596][ T7849] netem: incorrect ge model size [ 110.649169][ T7849] netem: change failed [ 111.188627][ T7877] netlink: 516 bytes leftover after parsing attributes in process `syz.0.622'. [ 111.244304][ T7878] rdma_rxe: rxe_newlink: failed to add lo [ 111.251327][ T7878] netlink: 'syz.1.621': attribute type 1 has an invalid length. [ 111.290272][ T7878] netlink: 224 bytes leftover after parsing attributes in process `syz.1.621'. [ 111.773120][ T7901] tipc: Enabled bearer , priority 0 [ 111.944856][ T7909] netlink: 'syz.2.632': attribute type 2 has an invalid length. [ 112.029079][ T5885] IPVS: starting estimator thread 0... [ 112.090466][ T7916] xt_addrtype: ipv6 does not support BROADCAST matching [ 112.143594][ T7914] IPVS: using max 19 ests per chain, 45600 per kthread [ 112.221083][ T7923] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 112.482449][ T7926] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 112.550359][ T7945] netlink: 'syz.3.642': attribute type 9 has an invalid length. [ 113.114830][ T7978] netlink: 'syz.3.649': attribute type 1 has an invalid length. [ 113.123053][ T7978] netlink: 'syz.3.649': attribute type 1 has an invalid length. [ 113.352684][ T7993] netlink: 'syz.4.655': attribute type 8 has an invalid length. [ 114.494136][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 114.500595][ T5850] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 114.776747][ T8030] netlink: 'syz.4.665': attribute type 20 has an invalid length. [ 115.615639][ T8032] __nla_validate_parse: 11 callbacks suppressed [ 115.615659][ T8032] netlink: 36 bytes leftover after parsing attributes in process `syz.3.666'. [ 115.980930][ T8050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.673'. [ 116.017011][ T8050] netlink: 'syz.2.673': attribute type 11 has an invalid length. [ 116.348496][ T8064] dvmrp8: entered allmulticast mode [ 116.436905][ T8063] dvmrp8: left allmulticast mode [ 116.467241][ T8074] netlink: 156 bytes leftover after parsing attributes in process `syz.4.682'. [ 116.526927][ T8076] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 116.611621][ T5888] lo speed is unknown, defaulting to 1000 [ 116.888026][ T8099] netlink: set zone limit has 8 unknown bytes [ 116.916966][ T8109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.691'. [ 116.933808][ T8107] netlink: 4 bytes leftover after parsing attributes in process `syz.4.690'. [ 116.945378][ T8103] lo speed is unknown, defaulting to 1000 [ 117.019604][ T8107] ipvlan2: entered allmulticast mode [ 117.056374][ T8107] veth0_vlan: entered allmulticast mode [ 117.090166][ T8115] netlink: 16 bytes leftover after parsing attributes in process `syz.0.694'. [ 117.227508][ T8119] netlink: 36 bytes leftover after parsing attributes in process `syz.1.696'. [ 117.317313][ T8127] netlink: 'syz.2.699': attribute type 2 has an invalid length. [ 117.478354][ T8127] netlink: 10 bytes leftover after parsing attributes in process `syz.2.699'. [ 117.549714][ T8143] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 117.574715][ T8127] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 117.591096][ T8143] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 117.840520][ T8156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.702'. [ 118.175706][ T8167] siw: device registration error -23 [ 118.309783][ T8171] ªªªªªª: renamed from vlan0 (while UP) [ 118.330716][ T8167] xt_CT: No such helper "netbios-ns" [ 118.449854][ T8183] dvmrp0: entered allmulticast mode [ 118.538454][ T8188] netlink: 12 bytes leftover after parsing attributes in process `syz.3.712'. [ 118.718336][ T8202] xt_connbytes: Forcing CT accounting to be enabled [ 118.742586][ T8202] --map-set only usable from mangle table [ 118.838173][ T8206] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 118.846639][ T8206] IPv6: NLM_F_CREATE should be set when creating new route [ 118.854001][ T8206] IPv6: NLM_F_CREATE should be set when creating new route [ 118.988047][ T8218] rdma_rxe: rxe_newlink: failed to add lo [ 118.989970][ T8220] netlink: 'syz.2.722': attribute type 1 has an invalid length. [ 119.004515][ T8220] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 119.014306][ T8218] netlink: 'syz.4.720': attribute type 1 has an invalid length. [ 119.249503][ T8231] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 119.286641][ T8231] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 119.407381][ T8237] vcan0: entered allmulticast mode [ 119.442913][ T8237] vcan0 (unregistering): left allmulticast mode [ 120.050310][ T8272] netlink: 'syz.4.741': attribute type 4 has an invalid length. [ 120.055827][ T8273] netlink: zone id is out of range [ 120.086777][ T8273] netlink: zone id is out of range [ 120.091951][ T8273] netlink: zone id is out of range [ 120.114866][ T8273] netlink: zone id is out of range [ 120.130566][ T8273] netlink: zone id is out of range [ 120.141607][ T8281] ip6t_rpfilter: unknown options [ 120.167281][ T8273] netlink: zone id is out of range [ 120.172853][ T8273] netlink: zone id is out of range [ 120.184366][ T8273] netlink: zone id is out of range [ 120.381765][ T8291] lo speed is unknown, defaulting to 1000 [ 120.382634][ T8295] netlink: 'syz.3.749': attribute type 13 has an invalid length. [ 120.653255][ T8310] __nla_validate_parse: 9 callbacks suppressed [ 120.653356][ T8310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.754'. [ 120.668183][ T8311] netlink: 'syz.3.751': attribute type 1 has an invalid length. [ 120.689662][ T8311] netlink: 224 bytes leftover after parsing attributes in process `syz.3.751'. [ 120.690300][ T8310] bridge_slave_1: left allmulticast mode [ 120.724666][ T8310] bridge_slave_1: left promiscuous mode [ 120.741724][ T8310] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.792156][ T8308] rdma_rxe: rxe_newlink: failed to add lo [ 120.798923][ T8310] bridge_slave_0: left allmulticast mode [ 120.810310][ T8310] bridge_slave_0: left promiscuous mode [ 120.824443][ T8310] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.943984][ T8314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.754'. [ 120.978308][ T8323] netlink: 40 bytes leftover after parsing attributes in process `syz.2.754'. [ 121.543664][ T8352] netlink: 'syz.4.765': attribute type 21 has an invalid length. [ 121.570127][ T8355] netlink: 24 bytes leftover after parsing attributes in process `syz.3.764'. [ 121.579512][ T8355] netlink: 272 bytes leftover after parsing attributes in process `syz.3.764'. [ 121.594051][ T8352] sctp: [Deprecated]: syz.4.765 (pid 8352) Use of int in maxseg socket option. [ 121.594051][ T8352] Use struct sctp_assoc_value instead [ 121.622531][ T8355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.764'. [ 121.871336][ T8368] netlink: 24 bytes leftover after parsing attributes in process `syz.4.769'. [ 122.014784][ T8377] netlink: 'syz.0.770': attribute type 5 has an invalid length. [ 122.138727][ T8377] : entered promiscuous mode [ 122.159241][ T8382] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 122.347570][ T8391] rdma_rxe: rxe_newlink: failed to add lo [ 122.364586][ T8391] netlink: 'syz.3.775': attribute type 1 has an invalid length. [ 122.388899][ T8391] netlink: 224 bytes leftover after parsing attributes in process `syz.3.775'. [ 122.538729][ T8395] bond0: entered promiscuous mode [ 122.579227][ T8395] bond0: entered allmulticast mode [ 122.607281][ T8395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.711271][ T8407] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20003 [ 123.219622][ T8433] netlink: 24 bytes leftover after parsing attributes in process `syz.3.790'. [ 123.363721][ T8436] netlink: 'syz.3.791': attribute type 10 has an invalid length. [ 124.577376][ T5849] Bluetooth: hci4: command 0x0405 tx timeout [ 124.808569][ T8436] team0: Device veth1_macvtap failed to register rx_handler [ 124.961867][ T8445] net_ratelimit: 66 callbacks suppressed [ 124.961887][ T8445] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 125.428238][ T8464] netlink: 'syz.3.799': attribute type 1 has an invalid length. [ 125.599188][ T8473] rdma_rxe: rxe_newlink: failed to add lo [ 125.621671][ T8473] netlink: 'syz.1.801': attribute type 1 has an invalid length. [ 126.175029][ T8499] x_tables: unsorted entry at hook 3 [ 126.277011][ T8503] __nla_validate_parse: 3 callbacks suppressed [ 126.277029][ T8503] netlink: 12 bytes leftover after parsing attributes in process `syz.2.814'. [ 126.683759][ T8529] delete_channel: no stack [ 127.954911][ T8524] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 128.176599][ T8537] netlink: 36 bytes leftover after parsing attributes in process `syz.2.821'. [ 128.194985][ T8532] netlink: 4 bytes leftover after parsing attributes in process `syz.3.819'. [ 128.516409][ T8564] netlink: 84 bytes leftover after parsing attributes in process `syz.4.829'. [ 128.597607][ T8571] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 128.858859][ T8591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.837'. [ 129.033129][ T8605] netlink: 'syz.2.840': attribute type 3 has an invalid length. [ 129.091591][ T8609] sctp: [Deprecated]: syz.1.841 (pid 8609) Use of int in max_burst socket option deprecated. [ 129.091591][ T8609] Use struct sctp_assoc_value instead [ 129.920430][ T8653] netlink: 'syz.4.853': attribute type 39 has an invalid length. [ 130.204562][ T8653] netlink: 'syz.4.853': attribute type 39 has an invalid length. [ 130.212513][ T8653] netlink: 'syz.4.853': attribute type 39 has an invalid length. [ 130.243711][ T8653] netlink: 'syz.4.853': attribute type 39 has an invalid length. [ 130.274648][ T8653] netlink: 'syz.4.853': attribute type 39 has an invalid length. [ 130.328067][ T8653] netlink: 'syz.4.853': attribute type 39 has an invalid length. [ 130.343835][ T8653] netlink: 'syz.4.853': attribute type 39 has an invalid length. [ 130.389034][ T8653] netlink: 'syz.4.853': attribute type 39 has an invalid length. [ 130.434162][ T8653] netlink: 'syz.4.853': attribute type 39 has an invalid length. [ 130.758912][ T8706] bond1: entered promiscuous mode [ 130.769204][ T8706] bond1: entered allmulticast mode [ 130.776716][ T8706] 8021q: adding VLAN 0 to HW filter on device bond1 [ 130.861394][ T8712] IPv6: Can't replace route, no match found [ 131.088263][ T8729] netlink: 12 bytes leftover after parsing attributes in process `syz.1.871'. [ 131.398998][ T8744] netlink: 48 bytes leftover after parsing attributes in process `syz.3.873'. [ 131.568419][ T8761] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 131.638740][ T8762] IPv6: NLM_F_CREATE should be specified when creating new route [ 131.730563][ T8768] tipc: Enabling of bearer rejected, media not registered [ 131.985661][ T8789] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 132.292380][ T8811] netlink: 24 bytes leftover after parsing attributes in process `syz.4.888'. [ 132.525883][ T8826] xt_hashlimit: invalid interval [ 132.831729][ T8843] netlink: 20 bytes leftover after parsing attributes in process `syz.0.895'. [ 132.856478][ T8843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.895'. [ 132.881074][ T8843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.895'. [ 132.889894][ T8849] ipt_REJECT: TCP_RESET invalid for non-tcp [ 133.460380][ T8874] netlink: 52 bytes leftover after parsing attributes in process `syz.4.903'. [ 133.873801][ T8906] netlink: 15 bytes leftover after parsing attributes in process `syz.2.911'. [ 133.917956][ T8906] netlink: 40 bytes leftover after parsing attributes in process `syz.2.911'. [ 133.932981][ T8912] tap1: tun_chr_ioctl cmd 1074025672 [ 133.945947][ T8912] tap1: ignored: set checksum disabled [ 133.952949][ T8906] netlink: 872 bytes leftover after parsing attributes in process `syz.2.911'. [ 133.976285][ T8906] netlink: 15 bytes leftover after parsing attributes in process `syz.2.911'. [ 134.164369][ T8925] validate_nla: 28 callbacks suppressed [ 134.164388][ T8925] netlink: 'syz.4.916': attribute type 1 has an invalid length. [ 134.202292][ T8925] lo: entered allmulticast mode [ 134.222193][ T8925] tunl0: entered allmulticast mode [ 134.236288][ T8925] gre0: entered allmulticast mode [ 134.276930][ T8925] gretap0: entered allmulticast mode [ 134.288334][ T8925] erspan0: entered allmulticast mode [ 134.308763][ T8925] ip_vti0: entered allmulticast mode [ 134.321463][ T8925] ip6_vti0: entered allmulticast mode [ 134.340948][ T8925] sit0: entered allmulticast mode [ 134.373032][ T8925] ip6tnl0: entered allmulticast mode [ 134.393683][ T8925] ip6gre0: entered allmulticast mode [ 134.438749][ T8925] ip6gretap0: entered allmulticast mode [ 134.471700][ T8925] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.479281][ T8925] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.498308][ T8925] bridge0: entered allmulticast mode [ 134.516583][ T8925] vcan0: entered allmulticast mode [ 134.531579][ T8925] bond0: entered allmulticast mode [ 134.550306][ T8925] bond_slave_0: entered allmulticast mode [ 134.572839][ T8925] bond_slave_1: entered allmulticast mode [ 134.597333][ T8925] tipc: Resetting bearer [ 134.620496][ T8925] team0: entered allmulticast mode [ 134.653079][ T8925] team_slave_0: entered allmulticast mode [ 134.660153][ T8925] team_slave_1: entered allmulticast mode [ 134.676719][ T8925] dummy0: entered allmulticast mode [ 134.691102][ T8925] nlmon0: entered allmulticast mode [ 134.698904][ T8925] caif0: entered allmulticast mode [ 134.706520][ T8949] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 134.715803][ T8925] veth0: entered allmulticast mode [ 134.728984][ T8925] veth1: entered allmulticast mode [ 134.740422][ T8925] wg1: entered allmulticast mode [ 134.753893][ T8925] wg2: entered allmulticast mode [ 134.768476][ T8925] veth0_to_bridge: entered allmulticast mode [ 134.781760][ T8925] veth1_to_bridge: entered allmulticast mode [ 134.795855][ T8925] veth0_to_bond: entered allmulticast mode [ 134.806046][ T8925] veth1_to_bond: entered allmulticast mode [ 134.816253][ T8925] veth0_to_team: entered allmulticast mode [ 134.834399][ T8925] veth1_to_team: entered allmulticast mode [ 134.845267][ T8925] veth0_to_batadv: entered allmulticast mode [ 134.853322][ T8925] batadv_slave_0: entered allmulticast mode [ 134.863770][ T8925] veth1_to_batadv: entered allmulticast mode [ 134.871815][ T8925] batadv_slave_1: entered allmulticast mode [ 134.880109][ T8925] xfrm0: entered allmulticast mode [ 134.890273][ T8925] veth0_to_hsr: entered allmulticast mode [ 134.905571][ T8925] hsr_slave_0: entered allmulticast mode [ 134.912749][ T8925] veth1_to_hsr: entered allmulticast mode [ 134.920832][ T8925] hsr_slave_1: entered allmulticast mode [ 134.929104][ T8925] hsr0: entered allmulticast mode [ 134.937216][ T8925] veth1_vlan: entered allmulticast mode [ 134.955816][ T8925] vlan0: entered allmulticast mode [ 134.981369][ T8925] vlan1: entered allmulticast mode [ 134.996451][ T8925] macvlan0: entered allmulticast mode [ 135.017926][ T8925] macvlan1: entered allmulticast mode [ 135.034080][ T8925] ipvlan0: entered allmulticast mode [ 135.039564][ T8925] ipvlan1: entered allmulticast mode [ 135.051194][ T8962] vxcan1: tx address claim with dlc 4 [ 135.078549][ T8925] veth1_macvtap: entered allmulticast mode [ 135.087509][ T8925] veth0_macvtap: entered allmulticast mode [ 135.098670][ T8925] macvtap0: entered allmulticast mode [ 135.110475][ T8925] macsec0: entered allmulticast mode [ 135.119352][ T8925] geneve0: entered allmulticast mode [ 135.128555][ T8925] geneve1: entered allmulticast mode [ 135.136195][ T8925] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 135.153780][ T8925] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 135.161898][ T8925] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 135.185084][ T8925] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 135.197146][ T8925] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 135.222341][ T8925] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 135.239123][ T8925] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 135.248840][ T8925] bridge1: entered allmulticast mode [ 135.254581][ T8925] syztnl1: entered allmulticast mode [ 135.260614][ T8925] bridge2: entered allmulticast mode [ 135.267553][ T8925] xfrm1: entered allmulticast mode [ 135.275033][ T8925] sit1: entered allmulticast mode [ 135.280897][ T8925] bridge3: entered allmulticast mode [ 135.289180][ T8925] bond1: entered allmulticast mode [ 135.297441][ T8925] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.306797][ T8925] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.317287][ T8925] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.326665][ T8925] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.338298][ T8925] vxlan0: entered allmulticast mode [ 135.344019][ T8925] ip6erspan0: entered allmulticast mode [ 135.350868][ T8925] vlan2: entered allmulticast mode [ 135.356986][ T8925] vlan3: entered allmulticast mode [ 136.952798][ T8947] netlink: 'syz.1.921': attribute type 3 has an invalid length. [ 136.960867][ T8947] __nla_validate_parse: 1 callbacks suppressed [ 136.960877][ T8947] netlink: 766 bytes leftover after parsing attributes in process `syz.1.921'. [ 136.988302][ T8958] netlink: 'syz.3.923': attribute type 12 has an invalid length. [ 137.219838][ T8984] netlink: 60 bytes leftover after parsing attributes in process `syz.2.927'. [ 137.272007][ T8986] geneve2: entered promiscuous mode [ 137.290986][ T8986] geneve2: entered allmulticast mode [ 137.739212][ T9021] netlink: 156 bytes leftover after parsing attributes in process `syz.0.935'. [ 137.774594][ T9023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.936'. [ 137.946947][ T9035] xt_hashlimit: overflow, rate too high: 0 [ 138.060273][ T9030] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 138.279131][ T9053] netlink: 92 bytes leftover after parsing attributes in process `syz.1.942'. [ 138.301087][ T9050] netlink: 'syz.2.941': attribute type 3 has an invalid length. [ 138.304703][ T9053] netlink: 12 bytes leftover after parsing attributes in process `syz.1.942'. [ 138.327096][ T9050] netlink: 224 bytes leftover after parsing attributes in process `syz.2.941'. [ 138.683806][ T9070] nbd: socks must be embedded in a SOCK_ITEM attr [ 138.837542][ T9069] nbd: socks must be embedded in a SOCK_ITEM attr [ 138.909942][ T9089] netlink: 12 bytes leftover after parsing attributes in process `syz.1.951'. [ 139.104238][ T9094] netlink: set zone limit has 8 unknown bytes [ 139.139395][ T9101] netlink: 28 bytes leftover after parsing attributes in process `syz.0.954'. [ 139.190658][ T9100] netlink: 28 bytes leftover after parsing attributes in process `syz.0.954'. [ 139.682346][ T9134] netlink: 'syz.2.962': attribute type 1 has an invalid length. [ 140.179331][ T9164] netlink: del zone limit has 4 unknown bytes [ 140.857993][ T9202] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 141.156296][ T9221] rdma_rxe: rxe_newlink: failed to add lo [ 141.200772][ T9225] x_tables: duplicate underflow at hook 4 [ 141.388548][ T9234] dccp_invalid_packet: invalid packet type [ 141.571117][ T9243] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.710602][ T9243] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.758771][ T9244] netlink: 'syz.2.988': attribute type 4 has an invalid length. [ 141.965078][ T9265] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 141.988066][ T9267] __nla_validate_parse: 7 callbacks suppressed [ 141.988083][ T9267] netlink: 24 bytes leftover after parsing attributes in process `syz.4.994'. [ 142.026957][ T9265] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 142.039860][ T9265] gretap1: entered promiscuous mode [ 142.053665][ T9265] gretap1: entered allmulticast mode [ 142.110249][ T9272] netlink: 28 bytes leftover after parsing attributes in process `syz.2.996'. [ 142.146185][ T9272] netlink: 28 bytes leftover after parsing attributes in process `syz.2.996'. [ 142.337031][ T9283] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 142.354309][ T9283] syzkaller1: Linktype set failed because interface is up [ 142.625525][ T9292] xt_CT: No such helper "pptp" [ 142.866008][ T9322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1007'. [ 142.875452][ T9325] syz0: rxe_newlink: already configured on lo [ 143.016876][ T9334] netlink: 'syz.3.1009': attribute type 10 has an invalid length. [ 143.033354][ T9334] team0: Device hsr_slave_0 failed to register rx_handler [ 143.182126][ T9340] ip6gre1: entered allmulticast mode [ 143.231829][ T9342] netlink: 'syz.4.1011': attribute type 1 has an invalid length. [ 143.250389][ T9342] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1011'. [ 143.430831][ T9350] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1014'. [ 143.596260][ T9359] netlink: 'syz.3.1017': attribute type 4 has an invalid length. [ 143.658880][ T9362] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1018'. [ 144.909964][ T9382] netlink: 'syz.3.1022': attribute type 10 has an invalid length. [ 145.333652][ T9362] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.341000][ T9362] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.391809][ T9362] dummy0: left allmulticast mode [ 145.554096][ T9362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.618600][ T9379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.732968][ T9362] bond1: left promiscuous mode [ 145.744117][ T9362] bond1: left allmulticast mode [ 145.756103][ T9362] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.765528][ T9362] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.776368][ T9362] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.785890][ T9362] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.795588][ T9362] geneve2: left promiscuous mode [ 145.800714][ T9362] geneve2: left allmulticast mode [ 145.911710][ T9382] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 146.233627][ T9427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1030'. [ 146.317283][ T9432] netlink: 'syz.1.1032': attribute type 32 has an invalid length. [ 146.468913][ T9434] netlink: zone id is out of range [ 146.494378][ T9434] netlink: zone id is out of range [ 146.518239][ T9434] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 146.525619][ T9434] IPv6: NLM_F_CREATE should be set when creating new route [ 146.532918][ T9434] IPv6: NLM_F_CREATE should be set when creating new route [ 146.554183][ T9450] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 146.599658][ T9452] rdma_rxe: rxe_newlink: failed to add lo [ 146.617953][ T9452] netlink: 'syz.1.1036': attribute type 1 has an invalid length. [ 146.638543][ T9452] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1036'. [ 146.996565][ T9] IPVS: starting estimator thread 0... [ 147.093538][ T9471] IPVS: using max 26 ests per chain, 62400 per kthread [ 147.232986][ T9485] openvswitch: netlink: nsh attr 6564 is out of range max 3 [ 147.242911][ T9485] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.388255][ T9487] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1048'. [ 147.644130][ T9498] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1052'. [ 147.931383][ T9513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1056'. [ 148.021841][ T9518] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1058'. [ 148.172777][ T9532] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1063'. [ 148.202526][ T9534] rdma_rxe: rxe_newlink: failed to add lo [ 148.215151][ T9534] netlink: 'syz.1.1061': attribute type 1 has an invalid length. [ 148.234395][ T9534] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1061'. [ 148.582516][ T9552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1070'. [ 148.598788][ T9552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1070'. [ 148.877580][ T9567] netem: incorrect ge model size [ 148.883006][ T9567] netem: change failed [ 148.926355][ T9570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1075'. [ 149.204528][ T9589] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1080'. [ 149.432051][ T9598] netlink: 'syz.3.1084': attribute type 7 has an invalid length. [ 149.459210][ T9598] netlink: 'syz.3.1084': attribute type 2 has an invalid length. [ 149.769899][ T9616] rdma_rxe: rxe_newlink: failed to add lo [ 149.805738][ T9616] netlink: 'syz.2.1090': attribute type 1 has an invalid length. [ 150.006104][ T9633] netlink: 'syz.0.1095': attribute type 3 has an invalid length. [ 150.032438][ T9635] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.149145][ T9629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.210382][ T9642] syzkaller1: entered promiscuous mode [ 150.228234][ T9642] syzkaller1: entered allmulticast mode [ 150.251169][ T9629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.270888][ T9642] syzkaller1: left promiscuous mode [ 150.278128][ T9648] nft_compat: unsupported protocol 0 [ 150.293591][ T9642] syzkaller1: left allmulticast mode [ 150.324027][ T9648] nft_compat: unsupported protocol 0 [ 150.349950][ T9648] nft_compat: unsupported protocol 0 [ 150.361224][ T9648] nft_compat: unsupported protocol 0 [ 150.372535][ T9648] nft_compat: unsupported protocol 0 [ 150.394883][ T9648] nft_compat: unsupported protocol 0 [ 150.410826][ T9648] nft_compat: unsupported protocol 0 [ 150.431125][ T9648] nft_compat: unsupported protocol 0 [ 150.454665][ T9648] nft_compat: unsupported protocol 0 [ 150.474890][ T9648] nft_compat: unsupported protocol 0 [ 150.480456][ T9648] nft_compat: unsupported protocol 0 [ 150.486636][ T9648] nft_compat: unsupported protocol 0 [ 150.531684][ T9663] delete_channel: no stack [ 150.534071][ T9648] nft_compat: unsupported protocol 0 [ 150.552334][ T9648] nft_compat: unsupported protocol 0 [ 150.579956][ T9648] nft_compat: unsupported protocol 0 [ 150.586492][ T9648] nft_compat: unsupported protocol 0 [ 150.601567][ T9648] nft_compat: unsupported protocol 0 [ 150.609235][ T9648] nft_compat: unsupported protocol 0 [ 150.653739][ T9648] nft_compat: unsupported protocol 0 [ 150.669587][ T9648] nft_compat: unsupported protocol 0 [ 150.696779][ T9648] nft_compat: unsupported protocol 0 [ 150.720773][ T9648] nft_compat: unsupported protocol 0 [ 150.734512][ T9648] nft_compat: unsupported protocol 0 [ 150.752358][ T9648] nft_compat: unsupported protocol 0 [ 150.762222][ T9648] nft_compat: unsupported protocol 0 [ 150.794621][ T9648] nft_compat: unsupported protocol 0 [ 150.800109][ T9648] nft_compat: unsupported protocol 0 [ 150.835858][ T9648] nft_compat: unsupported protocol 0 [ 150.857481][ T9648] nft_compat: unsupported protocol 0 [ 150.895757][ T9648] nft_compat: unsupported protocol 0 [ 150.908504][ T9685] netlink: 'syz.4.1106': attribute type 4 has an invalid length. [ 150.941712][ T9648] nft_compat: unsupported protocol 0 [ 150.963716][ T9648] nft_compat: unsupported protocol 0 [ 150.967709][ T9685] netlink: 'syz.4.1106': attribute type 32 has an invalid length. [ 150.970323][ T9648] nft_compat: unsupported protocol 0 [ 151.013712][ T9685] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52) [ 151.033713][ T9648] nft_compat: unsupported protocol 0 [ 151.039221][ T9648] nft_compat: unsupported protocol 0 [ 151.095504][ T9648] nft_compat: unsupported protocol 0 [ 151.100987][ T9648] nft_compat: unsupported protocol 0 [ 151.165065][ T9648] nft_compat: unsupported protocol 0 [ 151.196504][ T9648] nft_compat: unsupported protocol 0 [ 151.205464][ T9700] x_tables: duplicate underflow at hook 1 [ 151.207189][ T9648] nft_compat: unsupported protocol 0 [ 151.220798][ T9648] nft_compat: unsupported protocol 0 [ 151.227538][ T9648] nft_compat: unsupported protocol 0 [ 151.233179][ T9648] nft_compat: unsupported protocol 0 [ 151.239836][ T9648] nft_compat: unsupported protocol 0 [ 151.246887][ T9648] nft_compat: unsupported protocol 0 [ 151.253238][ T9648] nft_compat: unsupported protocol 0 [ 151.259237][ T9648] nft_compat: unsupported protocol 0 [ 151.266352][ T9648] nft_compat: unsupported protocol 0 [ 151.272115][ T9648] nft_compat: unsupported protocol 0 [ 151.278906][ T9648] nft_compat: unsupported protocol 0 [ 151.329078][ T9648] nft_compat: unsupported protocol 0 [ 151.349109][ T9648] nft_compat: unsupported protocol 0 [ 151.395338][ T9648] nft_compat: unsupported protocol 0 [ 151.413927][ T9648] nft_compat: unsupported protocol 0 [ 151.419442][ T9648] nft_compat: unsupported protocol 0 [ 151.433831][ T9648] nft_compat: unsupported protocol 0 [ 151.439254][ T9648] nft_compat: unsupported protocol 0 [ 151.454667][ T9648] nft_compat: unsupported protocol 0 [ 151.469869][ T9648] nft_compat: unsupported protocol 0 [ 151.474143][ T9712] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 151.484452][ T9648] nft_compat: unsupported protocol 0 [ 151.489969][ T9648] nft_compat: unsupported protocol 0 [ 151.495795][ T9648] nft_compat: unsupported protocol 0 [ 151.501247][ T9648] nft_compat: unsupported protocol 0 [ 151.511285][ T9648] nft_compat: unsupported protocol 0 [ 151.518058][ T9648] nft_compat: unsupported protocol 0 [ 152.054553][ T9746] netlink: 'syz.0.1122': attribute type 1 has an invalid length. [ 152.095708][ T9746] netlink: 'syz.0.1122': attribute type 1 has an invalid length. [ 152.175689][ T9755] xt_TCPMSS: Only works on TCP SYN packets [ 152.499787][ T9761] __nla_validate_parse: 13 callbacks suppressed [ 152.499805][ T9761] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1124'. [ 152.685442][ T9786] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1130'. [ 152.889607][ T9793] IPVS: persistence engine module ip_vs_pe_À not found [ 152.892813][ T9799] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 152.926394][ T9796] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1134'. [ 152.934013][ T9792] IPVS: persistence engine module ip_vs_pe_À not found [ 153.002980][ T9802] lo speed is unknown, defaulting to 1000 [ 153.091057][ T9807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1138'. [ 153.161573][ T9807] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 153.170798][ T9807] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 153.180002][ T9807] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 153.189154][ T9807] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 153.198326][ T9807] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 153.207613][ T9807] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 153.216766][ T9807] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 153.225909][ T9807] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 153.235075][ T9807] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 153.244296][ T9807] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 153.264597][ T9814] netlink: 71 bytes leftover after parsing attributes in process `syz.1.1139'. [ 154.080928][ T9849] rdma_rxe: rxe_newlink: failed to add lo [ 154.091159][ T9849] netlink: 'syz.4.1142': attribute type 1 has an invalid length. [ 154.105303][ T9851] netlink: 'syz.3.1143': attribute type 10 has an invalid length. [ 154.106218][ T9849] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1142'. [ 154.123119][ T9804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1135'. [ 154.717229][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 154.750913][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 154.766332][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 154.794966][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 154.810389][ T5849] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 154.821548][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 155.915172][ T9851] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 156.017788][ T9658] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.192265][ T9658] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.201220][ T9873] sctp: [Deprecated]: syz.3.1148 (pid 9873) Use of int in maxseg socket option. [ 156.201220][ T9873] Use struct sctp_assoc_value instead [ 156.228491][ T9854] lo speed is unknown, defaulting to 1000 [ 156.312366][ T9658] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.428271][ T9658] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.762906][ T9900] netlink: 216 bytes leftover after parsing attributes in process `syz.4.1153'. [ 156.903659][ T5850] Bluetooth: hci2: command tx timeout [ 157.245681][ T9921] rdma_rxe: rxe_newlink: failed to add lo [ 157.260667][ T9921] netlink: 'syz.1.1155': attribute type 1 has an invalid length. [ 157.268666][ T9921] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1155'. [ 157.331470][ T9658]  (unregistering): (slave geneve0): Releasing backup interface [ 157.450448][ T9658]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.461187][ T9658]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.472896][ T9658]  (unregistering): Released all slaves [ 157.485886][ T9658] bond1 (unregistering): Released all slaves [ 157.608211][ T9658] bond0 (unregistering): Released all slaves [ 157.742528][ T9930] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20000 [ 157.765409][ T9930] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20003 [ 158.214260][ T9946] hsr_slave_0: left promiscuous mode [ 158.222458][ T9946] hsr_slave_1: left promiscuous mode [ 158.289550][ T9854] chnl_net:caif_netlink_parms(): no params data found [ 158.516506][ T9967] sctp: [Deprecated]: syz.0.1162 (pid 9967) Use of struct sctp_assoc_value in delayed_ack socket option. [ 158.516506][ T9967] Use struct sctp_sack_info instead [ 158.568628][ T9966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.590072][ T9966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.657232][ T9966] netlink: 1264 bytes leftover after parsing attributes in process `syz.4.1164'. [ 158.766658][ T9658] hsr_slave_0: left promiscuous mode [ 158.772929][ T9658] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.781432][ T9658] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.794517][ T9658] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.812230][ T9658] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.860683][ T9658] veth1_macvtap: left promiscuous mode [ 158.866989][ T9658] veth0_macvtap: left promiscuous mode [ 158.872632][ T9658] veth1_vlan: left promiscuous mode [ 158.878375][ T9658] veth0_vlan: left promiscuous mode [ 158.973856][ T5850] Bluetooth: hci2: command 0x041b tx timeout [ 159.475066][ T9658] team0 (unregistering): Port device team_slave_1 removed [ 159.516266][ T9658] team0 (unregistering): Port device team_slave_0 removed [ 159.889497][ T9854] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.897012][ T9854] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.904792][ T9854] bridge_slave_0: entered allmulticast mode [ 159.911458][ T9854] bridge_slave_0: entered promiscuous mode [ 159.920446][ T9854] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.927913][ T9854] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.943861][ T9854] bridge_slave_1: entered allmulticast mode [ 159.950910][ T9854] bridge_slave_1: entered promiscuous mode [ 160.024064][T10001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1168'. [ 160.169333][ T9854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.179536][T10003] rdma_rxe: rxe_newlink: failed to add lo [ 160.213845][ T9854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.505097][ T9854] team0: Port device team_slave_0 added [ 160.553980][ T9854] team0: Port device team_slave_1 added [ 160.587010][T10011] lo speed is unknown, defaulting to 1000 [ 160.631706][T10031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1174'. [ 160.832713][ T9854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.868844][ T9854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.931734][ T9854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.054334][ T5849] Bluetooth: hci2: command 0x041b tx timeout [ 161.060973][ T9854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.082745][ T9854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.111504][ T9854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.177245][ T9658] IPVS: stop unused estimator thread 0... [ 161.354460][ T9854] hsr_slave_0: entered promiscuous mode [ 161.360850][ T9854] hsr_slave_1: entered promiscuous mode [ 161.378268][ T9854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.397223][ T9854] Cannot create hsr debugfs directory [ 161.435210][T10060] netlink: 'syz.0.1181': attribute type 21 has an invalid length. [ 161.642273][T10067] rdma_rxe: rxe_newlink: failed to add lo [ 162.297846][T10104] netlink: 'syz.0.1191': attribute type 33 has an invalid length. [ 162.357919][T10105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1190'. [ 162.476258][T10113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1192'. [ 162.667470][T10120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1194'. [ 162.676979][T10120] netlink: 'syz.1.1194': attribute type 3 has an invalid length. [ 162.703330][T10120] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.712712][T10120] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.721644][T10120] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.730471][T10120] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.774438][T10121] netlink: 'syz.1.1194': attribute type 10 has an invalid length. [ 162.996421][T10134] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1198'. [ 163.040714][T10135] netlink: 'syz.0.1197': attribute type 11 has an invalid length. [ 163.063799][T10141] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1199'. [ 163.133643][ T5849] Bluetooth: hci2: command 0x041b tx timeout [ 163.574606][T10174] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1203'. [ 163.825860][T10184] ================================================================== [ 163.834061][T10184] BUG: KASAN: slab-use-after-free in sk_filter_trim_cap+0x270/0xa80 [ 163.842086][T10184] Read of size 8 at addr ffff8881476ff178 by task syz.1.1205/10184 [ 163.849987][T10184] [ 163.852319][T10184] CPU: 1 UID: 0 PID: 10184 Comm: syz.1.1205 Not tainted 6.14.0-rc1-syzkaller-00092-g011b03359038 #0 [ 163.852334][T10184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 163.852342][T10184] Call Trace: [ 163.852348][T10184] [ 163.852354][T10184] dump_stack_lvl+0x241/0x360 [ 163.852372][T10184] ? __pfx_dump_stack_lvl+0x10/0x10 [ 163.852385][T10184] ? __pfx__printk+0x10/0x10 [ 163.852404][T10184] ? _printk+0xd5/0x120 [ 163.852421][T10184] ? __virt_addr_valid+0x183/0x530 [ 163.852439][T10184] ? __virt_addr_valid+0x183/0x530 [ 163.852456][T10184] print_report+0x169/0x550 [ 163.852474][T10184] ? __virt_addr_valid+0x183/0x530 [ 163.852490][T10184] ? __virt_addr_valid+0x183/0x530 [ 163.852505][T10184] ? __virt_addr_valid+0x45f/0x530 [ 163.852521][T10184] ? __phys_addr+0xba/0x170 [ 163.852538][T10184] ? sk_filter_trim_cap+0x270/0xa80 [ 163.852556][T10184] kasan_report+0x143/0x180 [ 163.852574][T10184] ? sk_filter_trim_cap+0x270/0xa80 [ 163.852593][T10184] ? sk_filter_trim_cap+0x1b3/0xa80 [ 163.852609][T10184] sk_filter_trim_cap+0x270/0xa80 [ 163.852628][T10184] ? __pfx___alloc_skb+0x10/0x10 [ 163.852645][T10184] ? __alloc_skb+0x28f/0x440 [ 163.852661][T10184] ? __pfx_sk_filter_trim_cap+0x10/0x10 [ 163.852677][T10184] ? read_tsc+0x9/0x20 [ 163.852691][T10184] ? ktime_get_with_offset+0x24b/0x2a0 [ 163.852705][T10184] ? skb_push+0x97/0x100 [ 163.852720][T10184] sock_queue_rcv_skb_reason+0x28/0xf0 [ 163.852738][T10184] mgmt_cmd_status+0x28d/0x4d0 [ 163.852755][T10184] cmd_complete_rsp+0x114/0x180 [ 163.852773][T10184] mgmt_pending_foreach+0xd1/0x130 [ 163.852787][T10184] ? __pfx_cmd_complete_rsp+0x10/0x10 [ 163.852804][T10184] __mgmt_power_off+0x183/0x430 [ 163.852821][T10184] ? __pfx___mgmt_power_off+0x10/0x10 [ 163.852840][T10184] ? __mutex_trylock_common+0x183/0x2e0 [ 163.852852][T10184] ? __pfx___might_resched+0x10/0x10 [ 163.852868][T10184] ? __pfx___mutex_trylock_common+0x10/0x10 [ 163.852882][T10184] ? rcu_is_watching+0x15/0xb0 [ 163.852894][T10184] ? trace_contention_end+0x3c/0x120 [ 163.852906][T10184] ? __mutex_lock+0x397/0x1010 [ 163.852925][T10184] ? __mutex_unlock_slowpath+0x227/0x800 [ 163.852941][T10184] ? hci_dev_close_sync+0x5c8/0x11c0 [ 163.852955][T10184] ? __pfx___mutex_lock+0x10/0x10 [ 163.852971][T10184] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 163.852988][T10184] ? lockdep_hardirqs_on+0x99/0x150 [ 163.853004][T10184] ? _raw_spin_unlock_irq+0x2e/0x50 [ 163.853017][T10184] ? drain_workqueue+0x2d3/0x3a0 [ 163.853033][T10184] ? hci_discovery_set_state+0x57/0x180 [ 163.853050][T10184] hci_dev_close_sync+0x6c4/0x11c0 [ 163.853066][T10184] hci_dev_close+0x112/0x210 [ 163.853083][T10184] sock_do_ioctl+0x158/0x460 [ 163.853099][T10184] ? __pfx_sock_do_ioctl+0x10/0x10 [ 163.853119][T10184] sock_ioctl+0x626/0x8e0 [ 163.853133][T10184] ? __pfx_sock_ioctl+0x10/0x10 [ 163.853151][T10184] ? __fget_files+0x2a/0x410 [ 163.853165][T10184] ? __fget_files+0x2a/0x410 [ 163.853179][T10184] ? __pfx_sock_ioctl+0x10/0x10 [ 163.853192][T10184] __se_sys_ioctl+0xf5/0x170 [ 163.853209][T10184] do_syscall_64+0xf3/0x230 [ 163.853225][T10184] ? clear_bhb_loop+0x35/0x90 [ 163.853243][T10184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.853259][T10184] RIP: 0033:0x7f4ff498cde9 [ 163.853276][T10184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.853286][T10184] RSP: 002b:00007f4ff5838038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 163.853306][T10184] RAX: ffffffffffffffda RBX: 00007f4ff4ba5fa0 RCX: 00007f4ff498cde9 [ 163.853315][T10184] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 0000000000000006 [ 163.853323][T10184] RBP: 00007f4ff4a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 163.853331][T10184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.853339][T10184] R13: 0000000000000000 R14: 00007f4ff4ba5fa0 R15: 00007fffe8945718 [ 163.853353][T10184] [ 163.853358][T10184] [ 164.235769][T10184] Allocated by task 7365: [ 164.240086][T10184] kasan_save_track+0x3f/0x80 [ 164.244764][T10184] __kasan_kmalloc+0x98/0xb0 [ 164.249350][T10184] __kmalloc_noprof+0x285/0x4c0 [ 164.254189][T10184] sk_prot_alloc+0xe0/0x210 [ 164.258677][T10184] sk_alloc+0x38/0x370 [ 164.262729][T10184] bt_sock_alloc+0x3c/0x340 [ 164.267229][T10184] hci_sock_create+0xa1/0x190 [ 164.271897][T10184] bt_sock_create+0x161/0x230 [ 164.276569][T10184] __sock_create+0x4c0/0xa30 [ 164.281147][T10184] __sys_socket+0x150/0x3c0 [ 164.285644][T10184] __x64_sys_socket+0x7a/0x90 [ 164.290312][T10184] do_syscall_64+0xf3/0x230 [ 164.294804][T10184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.300688][T10184] [ 164.302999][T10184] Freed by task 10186: [ 164.307049][T10184] kasan_save_track+0x3f/0x80 [ 164.311718][T10184] kasan_save_free_info+0x40/0x50 [ 164.316734][T10184] __kasan_slab_free+0x59/0x70 [ 164.321489][T10184] kfree+0x196/0x430 [ 164.325370][T10184] __sk_destruct+0x479/0x5f0 [ 164.329947][T10184] mgmt_pending_remove+0x13e/0x1a0 [ 164.335046][T10184] mgmt_pending_foreach+0xd1/0x130 [ 164.340164][T10184] mgmt_index_removed+0x133/0x390 [ 164.345179][T10184] hci_sock_bind+0xcce/0x1150 [ 164.349848][T10184] __sys_bind+0x1e4/0x290 [ 164.354258][T10184] __x64_sys_bind+0x7a/0x90 [ 164.358758][T10184] do_syscall_64+0xf3/0x230 [ 164.363713][T10184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.369595][T10184] [ 164.371908][T10184] The buggy address belongs to the object at ffff8881476ff000 [ 164.371908][T10184] which belongs to the cache kmalloc-2k of size 2048 [ 164.386211][T10184] The buggy address is located 376 bytes inside of [ 164.386211][T10184] freed 2048-byte region [ffff8881476ff000, ffff8881476ff800) [ 164.400186][T10184] [ 164.402498][T10184] The buggy address belongs to the physical page: [ 164.408911][T10184] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1476f8 [ 164.417747][T10184] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 164.426233][T10184] anon flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff) [ 164.434297][T10184] page_type: f5(slab) [ 164.438268][T10184] raw: 057ff00000000040 ffff88801ac42000 0000000000000000 dead000000000001 [ 164.446840][T10184] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 164.455413][T10184] head: 057ff00000000040 ffff88801ac42000 0000000000000000 dead000000000001 [ 164.464074][T10184] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 164.472774][T10184] head: 057ff00000000003 ffffea00051dbe01 ffffffffffffffff 0000000000000000 [ 164.481450][T10184] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 164.490125][T10184] page dumped because: kasan: bad access detected [ 164.496536][T10184] page_owner tracks the page as allocated [ 164.502236][T10184] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 6107539473, free_ts 0 [ 164.521852][T10184] post_alloc_hook+0x1f4/0x240 [ 164.526612][T10184] get_page_from_freelist+0x365c/0x37a0 [ 164.532152][T10184] __alloc_frozen_pages_noprof+0x292/0x710 [ 164.537963][T10184] alloc_pages_mpol+0x311/0x660 [ 164.542807][T10184] allocate_slab+0x8f/0x3a0 [ 164.547313][T10184] ___slab_alloc+0xc27/0x14a0 [ 164.551979][T10184] __slab_alloc+0x58/0xa0 [ 164.556330][T10184] __kmalloc_cache_noprof+0x27b/0x390 [ 164.561693][T10184] device_create_with_groups+0x121/0x2e0 [ 164.567669][T10184] misc_register+0x3ea/0x670 [ 164.572251][T10184] fuse_dev_init+0xa9/0x130 [ 164.576752][T10184] fuse_init+0x5a/0x160 [ 164.580919][T10184] do_one_initcall+0x248/0x870 [ 164.585687][T10184] do_initcall_level+0x157/0x210 [ 164.590664][T10184] do_initcalls+0x3f/0x80 [ 164.595171][T10184] kernel_init_freeable+0x435/0x5d0 [ 164.600876][T10184] page_owner free stack trace missing [ 164.606247][T10184] [ 164.608569][T10184] Memory state around the buggy address: [ 164.614189][T10184] ffff8881476ff000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 164.622237][T10184] ffff8881476ff080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 164.630281][T10184] >ffff8881476ff100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 164.638329][T10184] ^ [ 164.646290][T10184] ffff8881476ff180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 164.654339][T10184] ffff8881476ff200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 164.662385][T10184] ================================================================== [ 164.679298][ T9854] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 164.701866][T10184] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 164.709112][T10184] CPU: 0 UID: 0 PID: 10184 Comm: syz.1.1205 Not tainted 6.14.0-rc1-syzkaller-00092-g011b03359038 #0 [ 164.720058][T10184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 164.730128][T10184] Call Trace: [ 164.733405][T10184] [ 164.736333][T10184] dump_stack_lvl+0x241/0x360 [ 164.741009][T10184] ? __pfx_dump_stack_lvl+0x10/0x10 [ 164.746196][T10184] ? __pfx__printk+0x10/0x10 [ 164.750789][T10184] ? preempt_schedule+0xe1/0xf0 [ 164.755644][T10184] ? vscnprintf+0x5d/0x90 [ 164.759975][T10184] panic+0x349/0x880 [ 164.763866][T10184] ? check_panic_on_warn+0x21/0xb0 [ 164.768974][T10184] ? __pfx_panic+0x10/0x10 [ 164.773387][T10184] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 164.779366][T10184] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 164.785684][T10184] ? print_report+0x502/0x550 [ 164.790466][T10184] check_panic_on_warn+0x86/0xb0 [ 164.795452][T10184] ? sk_filter_trim_cap+0x270/0xa80 [ 164.800659][T10184] end_report+0x77/0x160 [ 164.804903][T10184] kasan_report+0x154/0x180 [ 164.809405][T10184] ? sk_filter_trim_cap+0x270/0xa80 [ 164.814619][T10184] ? sk_filter_trim_cap+0x1b3/0xa80 [ 164.819809][T10184] sk_filter_trim_cap+0x270/0xa80 [ 164.824843][T10184] ? __pfx___alloc_skb+0x10/0x10 [ 164.829778][T10184] ? __alloc_skb+0x28f/0x440 [ 164.834366][T10184] ? __pfx_sk_filter_trim_cap+0x10/0x10 [ 164.839910][T10184] ? read_tsc+0x9/0x20 [ 164.843970][T10184] ? ktime_get_with_offset+0x24b/0x2a0 [ 164.849421][T10184] ? skb_push+0x97/0x100 [ 164.853672][T10184] sock_queue_rcv_skb_reason+0x28/0xf0 [ 164.859129][T10184] mgmt_cmd_status+0x28d/0x4d0 [ 164.863886][T10184] cmd_complete_rsp+0x114/0x180 [ 164.868732][T10184] mgmt_pending_foreach+0xd1/0x130 [ 164.873833][T10184] ? __pfx_cmd_complete_rsp+0x10/0x10 [ 164.879197][T10184] __mgmt_power_off+0x183/0x430 [ 164.884041][T10184] ? __pfx___mgmt_power_off+0x10/0x10 [ 164.889588][T10184] ? __mutex_trylock_common+0x183/0x2e0 [ 164.895128][T10184] ? __pfx___might_resched+0x10/0x10 [ 164.900424][T10184] ? __pfx___mutex_trylock_common+0x10/0x10 [ 164.906338][T10184] ? rcu_is_watching+0x15/0xb0 [ 164.911536][T10184] ? trace_contention_end+0x3c/0x120 [ 164.916816][T10184] ? __mutex_lock+0x397/0x1010 [ 164.921576][T10184] ? __mutex_unlock_slowpath+0x227/0x800 [ 164.927202][T10184] ? hci_dev_close_sync+0x5c8/0x11c0 [ 164.932575][T10184] ? __pfx___mutex_lock+0x10/0x10 [ 164.937599][T10184] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 164.943575][T10184] ? lockdep_hardirqs_on+0x99/0x150 [ 164.948790][T10184] ? _raw_spin_unlock_irq+0x2e/0x50 [ 164.953980][T10184] ? drain_workqueue+0x2d3/0x3a0 [ 164.958915][T10184] ? hci_discovery_set_state+0x57/0x180 [ 164.964455][T10184] hci_dev_close_sync+0x6c4/0x11c0 [ 164.969562][T10184] hci_dev_close+0x112/0x210 [ 164.974147][T10184] sock_do_ioctl+0x158/0x460 [ 164.978730][T10184] ? __pfx_sock_do_ioctl+0x10/0x10 [ 164.983840][T10184] sock_ioctl+0x626/0x8e0 [ 164.988161][T10184] ? __pfx_sock_ioctl+0x10/0x10 [ 164.993003][T10184] ? __fget_files+0x2a/0x410 [ 164.997588][T10184] ? __fget_files+0x2a/0x410 [ 165.002172][T10184] ? __pfx_sock_ioctl+0x10/0x10 [ 165.007904][T10184] __se_sys_ioctl+0xf5/0x170 [ 165.012687][T10184] do_syscall_64+0xf3/0x230 [ 165.017227][T10184] ? clear_bhb_loop+0x35/0x90 [ 165.021910][T10184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.027802][T10184] RIP: 0033:0x7f4ff498cde9 [ 165.032215][T10184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.051820][T10184] RSP: 002b:00007f4ff5838038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 165.060233][T10184] RAX: ffffffffffffffda RBX: 00007f4ff4ba5fa0 RCX: 00007f4ff498cde9 [ 165.068199][T10184] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 0000000000000006 [ 165.076163][T10184] RBP: 00007f4ff4a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 165.084126][T10184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.092086][T10184] R13: 0000000000000000 R14: 00007f4ff4ba5fa0 R15: 00007fffe8945718 [ 165.100056][T10184] [ 165.103335][T10184] Kernel Offset: disabled [ 165.107655][T10184] Rebooting in 86400 seconds..