last executing test programs: 2.957065769s ago: executing program 0 (id=1986): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000001c0)=0x1, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000001c0)=0x1, 0x4) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) sendmmsg$inet(r2, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="e647f8c4dc935c2243790d3b957d276dc04f77fb8ea704f31a85eeb9fcc6976ff8", 0x21}], 0x1}}], 0x1, 0x40408c1) recvmmsg(r2, &(0x7f00000098c0)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000015c0)=""/32, 0x20}, {0x0, 0x3c}], 0x2}, 0x80}], 0x1, 0x10002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r3, &(0x7f0000000180)}, 0x20) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, 0x0, 0x5) (async) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, 0x0, 0x5) socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 2.407792134s ago: executing program 2 (id=1994): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendto(r2, 0x0, 0x0, 0x20000800, 0x0, 0x0) (async) setsockopt$sock_int(r2, 0x1, 0xc, &(0x7f00000001c0), 0x4) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x27}}}, [0x9, 0x5, 0x7, 0x1, 0x4, 0x6, 0x6, 0x4, 0xc35, 0x5, 0x2, 0x0, 0xe, 0x6, 0xcec3]}, &(0x7f0000000140)=0x100) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58) (async) accept4(r5, 0x0, 0x0, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000000000), 0x4) (async) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000004000010000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b70800000000000e7b8af0ff00000000bfa10000000000000701000000feffffbfa40000000000000704000000feffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000200)={0x0, @dev, @broadcast}, &(0x7f0000000640)=0xc) (async) setsockopt$MRT_ADD_MFC(r6, 0x0, 0xcc, &(0x7f0000000400)={@broadcast, @multicast1, 0x1, "7d1f88f80bbe8d286c57f04c843abbec3737db4a9d77a557438242a50a4dad20", 0xaa4, 0x3, 0x3c4, 0x6}, 0x3c) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f00000004c0)=@ethtool_drvinfo={0x3, "cbb2fd3f672d14425aacb92be3da827479a24338a2c0c75226e9decabaa91898", "72400b87b3dd9c2f7dc0d06ece5e42cb179918de99d4391a3670a351bc61912c", "581f875d4403a678dda39f3057d5a0eb80bae57823a202367fd58181d4bad6ab", "0738a62146b4cc3da01d39a1b2c2fdd173ae57f65c2db93e41d8ddd021e1a8e0", "249b31d0dbbea85d1ffea921785f94479c58ec423779c41375cda3cc2bb127c4", "3244ac5a9adf601631fd6a43"}}) setsockopt$MRT_ADD_MFC(r6, 0x0, 0xcc, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "3dab2026179e3f9e94f795c462aef6c3ea5725a79a084ad573851312355a1302", 0xff, 0x3, 0x6, 0x2}, 0x3c) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000000000001000000008000600", @ANYRES32=r4, @ANYBLOB="08000300", @ANYRES32=r9, @ANYBLOB="225b382b0329b4c35b375f39117bb7be6ef9db1c5f7047a48bcf86c1a2dce3bd3d0c4ca5610243039a9ab906e4702df6d8198b1ec2c9dc342e4e42235062aaec2b5eec30d59786d14ea57d4ee764c9d905231fda0adfb07b176a8600be0f7ec683241a1be9b817a3a8f089d5eb"], 0x2c}}, 0x20004804) 2.394255781s ago: executing program 3 (id=1995): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a670300000000000000000100000008000440000000000900010073797a300000000038000380340000000400018004000680140007800c000100636f756e746572000400028014000180060001"], 0xe4}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r2 = socket(0x1d, 0x801, 0x7a060647) r3 = socket$netlink(0x10, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0xfffa, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x2}, 0xe) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r5, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000429bdd4597929df25f1000000040005010400e20008004200000000000062e1ec4a7fb6b381c8dd845a029c366770b521b438fbbbbd9c88ea2c7634a8ae4a2527e2f376be72722e74f5e99164217d78c79ca2429bff44ffc4a1ec51319b8d7cb81a5641b70dbcb12c9cfcbd82c5e28f6aa474"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4004) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071104f000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r9], 0x54}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0010002200170228bd7000ffdbdf08000004180000007d83dc7627a336d324c61a8ee76d5262fcde8afe61b29079fae5317179b593488e46d5007a48b644cb6b44752d"], 0x1c}}, 0x20040045) r10 = socket$inet(0x2, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x2}]}, @restrict={0x0, 0x0, 0x0, 0xb, 0x2}]}}, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r11 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r11, 0x114, 0x8, &(0x7f00000008c0), 0x4) close(r11) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x94}]}, 0x10) 2.160555507s ago: executing program 1 (id=1997): ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000003c0)={"eabb11ff2b9976618466e6256698a350", 0x0, 0x0, {0x5}, {0x0, 0x5}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) sendfile(r0, r0, &(0x7f0000000580)=0xd9e, 0x6d5a0a95) bpf$BPF_PROG_ATTACH(0x9, &(0x7f00000002c0)={@map, 0xffffffffffffffff, 0x24, 0x0, 0xffffffffffffffff, @void, @value}, 0x20) r1 = socket(0x1d, 0x2, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x6a, 0x4, 0x20000000, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="54000000020601020000000000000000000000000500050000000000090001000000000000000000100003006269746d61703a706f7274000c0007800600044000000000050001000700000063130500040000000000"], 0x54}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020605000000000000000000000000001400078005001400090000000800124008001f000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x58}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000005600010000000000000000000700c6c9", @ANYRES32=0x0, @ANYBLOB="200001"], 0x38}}, 0x0) 2.130508932s ago: executing program 3 (id=1998): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1655a0f3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x83, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x4, 0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000400)={0x0, 0x5}, &(0x7f00000005c0)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000600)={r4, 0x2, 0x1000}, 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000003c0)={'veth1_to_hsr\x00', @random="1193cf97264a"}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076"], 0xe8}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x15, 0x1, 0xfffffffc, 0x0, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="1802000005000000000000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="00000000000000003d75fcff736d36554d360000fcffffffbf91000000000000b70200000200000085000000819fd048b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x1e, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0xddcb}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x8}, @map_fd={0x18, 0x5, 0x1, 0x0, r1}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x561}}, @tail_call, @call={0x85, 0x0, 0x0, 0x46}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @cb_func={0x18, 0xa}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}]}, &(0x7f0000000280)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r0, 0x3e, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) 1.905140122s ago: executing program 1 (id=2000): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x10, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xffffff80}}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{0x5, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000200)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.884515194s ago: executing program 2 (id=2001): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000012000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000001640)="e0857f9f582f0300000000000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r5, 0x84, 0x80, &(0x7f0000002100)=""/4127, &(0x7f0000000000)=0x101f) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r4) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01040000f5ffffffffff2000000009001f00706879316000000005002000050000000c0005"], 0x34}}, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r8, &(0x7f0000000340)={&(0x7f0000000180), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r9, 0x200, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001cc0)=@newtaction={0x18, 0x31, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r3) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)={0x20, r10, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004080}, 0x1) 1.718198402s ago: executing program 2 (id=2002): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000001000000000000000000000079120e000000000095", @ANYRES16, @ANYRESOCT], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0, 0x0, 0x4}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x54}}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, 0x0, &(0x7f00000000c0)) unshare(0x22020600) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000040)=0xffffff01, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000001000000000000000000000079120e000000000095", @ANYRES16, @ANYRESOCT], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) socket$packet(0x11, 0x3, 0x300) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0, 0x0, 0x4}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x54}}, 0x0) (async) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, 0x0, &(0x7f00000000c0)) (async) unshare(0x22020600) (async) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000040)=0xffffff01, 0x4) (async) 1.531868883s ago: executing program 1 (id=2004): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x100}) r1 = socket(0x400000000010, 0x3, 0x0) socket$tipc(0x1e, 0x8, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x20008850) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000180)={0x0, 'team_slave_0\x00', {}, 0x1}) 1.531539483s ago: executing program 0 (id=2005): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, 0x1404, 0x400, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x58}}, 0x20004010) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x20}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x20}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x31}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.531228501s ago: executing program 3 (id=2006): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xc0002042, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x24, r6, 0x1, 0x70bd2b, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x6c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8, 0x1, r7}]}}}]}, 0x6c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.491975788s ago: executing program 0 (id=2007): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r1, 0x104, 0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000000)={'ipvlan1\x00', {0x2, 0x0, @broadcast=0xac141436}}) (async) unshare(0x48060000) 1.381042502s ago: executing program 2 (id=2008): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000007480)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000075c0), r0) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000007700)={0x0, 0x0, &(0x7f00000076c0)={&(0x7f0000007600)={0x20, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000003100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000003100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x50, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x50, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x20000000, @rand_addr=' \x01\x00'}}, 0x0, 0x0, 0x3, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x20000000, @rand_addr=' \x01\x00'}}, 0x0, 0x0, 0x3, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e23, 0x5, @loopback, 0x8}}, 0x0, 0x0, 0x4, 0x0, "61236b90dcdfe3ce2bb54fa6c4654e6c39d7ddcc4501330078eb7bf1597d638c7d4315210fb34d4c84c2f976071138016e8934b34d8b9cff05cd33c159c2c5a51f1bbe5b7d758286a3c82392b39a1d3f"}, 0xd8) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e23, 0x5, @loopback, 0x8}}, 0x0, 0x0, 0x4, 0x0, "61236b90dcdfe3ce2bb54fa6c4654e6c39d7ddcc4501330078eb7bf1597d638c7d4315210fb34d4c84c2f976071138016e8934b34d8b9cff05cd33c159c2c5a51f1bbe5b7d758286a3c82392b39a1d3f"}, 0xd8) close(r3) r4 = socket(0x1, 0x803, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MAC_ACL(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x10, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a844}, 0xc000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x18, 0x3e, 0x107, 0xfffffffc, 0x25dfdbfd, {0x1, 0x7c}, [@nested={0x4, 0x136}]}, 0x18}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 1.374545712s ago: executing program 3 (id=2009): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "4b3f7633015aff9fa5e73369ed3ed4f938752184f1af2029", "14ef0f501fd4f4fc0d232b48a86ef0222fb6364766977f816acb8f51148dba1a"}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 1.353517616s ago: executing program 4 (id=2010): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448cb, 0x0) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x271a, 0x0, &(0x7f0000000040)) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x1e, 0xa01, 0x0, 0x0, {0x9}}, 0x14}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r5}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r1) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000010140)=ANY=[@ANYBLOB="440e000f", @ANYRES16=r6, @ANYBLOB="010000000000000000000d000000050007000000000006000800000000000500170000000000050019000000000006000a00000000000500180000000000"], 0x44}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720aacff0000000071101d000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.101068294s ago: executing program 2 (id=2011): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000080)=@x25={0x9, @remote}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)=""/225, 0xe1}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000000)=""/11, 0xb}, {&(0x7f0000000300)=""/200, 0xc8}], 0x4, &(0x7f0000000400)=""/251, 0xfb}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000002c0)={0x14, r2, 0x405, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) socket$nl_netfilter(0x10, 0x3, 0xc) 993.595148ms ago: executing program 1 (id=2012): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_AD_USER_PORT_KEY={0x6}]}}}]}, 0x44}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00'}, 0x18) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) close(r7) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x13, 0x10, 0x8, 0x0, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r10, 0x0, 0x0}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup=r8, r10, 0x1, 0x0, 0xffffffffffffffff, @void, @value=r7}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@ifindex, 0xa, 0x0, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000480)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @exit, @ldst={0x1, 0x3, 0x3, 0x0, 0x9, 0x30}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x92a1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f0000000500)='GPL\x00', 0x6, 0x58, &(0x7f0000000540)=""/88, 0x41000, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000005c0)={0x2, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000600)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000640)=[{0x0, 0x3, 0xf, 0xa}, {0x2, 0x4, 0x9, 0x6}, {0x3, 0x5, 0x6, 0x4}], 0x10, 0x532, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)={@fallback=r2, r10, 0x0, 0x8, 0x0, @void, @value=r12, @void, @void, r11}, 0x20) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r5, r4}) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r1, r0}) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@ipv4_newnexthop={0x1c, 0x68, 0xefce5d6aba1cf00f, 0x70bd28, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) r14 = getuid() r15 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r15, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) connect$can_bcm(r15, &(0x7f00000000c0)={0x1d, r16}, 0x10) sendmsg$nl_route(r13, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000190000012c7748059b8722692a51bd7000fedbdf251d01060000000000", @ANYRES32=0x0, @ANYBLOB="08000500f7f7f84108000e00", @ANYRES32=r14, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r16, @ANYBLOB="150002000000002002010000987a22e08f2257d304000000"], 0x4c}, 0x1, 0x0, 0x0, 0x8800}, 0x4000004) close(r2) 952.883996ms ago: executing program 4 (id=2013): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x500, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000100070000000900020073797a300000000005000500020000001400078005001500000000000800124000000001050004000000000011000300686173683a69702c6d61726b"], 0x60}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_MODE={0xa, 0x2, {0x5, 0x2}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010000}, 0x84800) 745.858403ms ago: executing program 4 (id=2014): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000000206050000000000000000000d80f2250900020073797a32000000000500040000000000050005000200000012000300686173683a6e65742c706f72740000000c00078008001340000000090500010007000000"], 0x58}, 0x1, 0x0, 0x0, 0x8090}, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x2, 0x12) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000001780)={0x1, 'veth0_to_batadv\x00', {}, 0x8}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x0, 0x5, 0x0, 0xffff74b7, 0x28024, r2, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x2, 0x0, @value=r2, @void, @void, @value}, 0x50) 744.820831ms ago: executing program 2 (id=2015): r0 = socket$inet(0x2, 0x807, 0x86) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x7}, 0x1c) setsockopt$inet6_mtu(r1, 0x29, 0x4e, 0x0, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e24, @private=0xa010102}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r5 = socket$nl_crypto(0x10, 0x3, 0x15) recvmsg(r5, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x1) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'virt_wifi0\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0xba01}, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) 701.526878ms ago: executing program 0 (id=2016): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x4}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0xac}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28, 0x100}}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$kcm(0x29, 0x6, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x4}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4041}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0xac}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28, 0x100}}}]}, 0x38}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) socket$kcm(0x29, 0x6, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) 700.510935ms ago: executing program 4 (id=2017): syz_emit_ethernet(0x6e, &(0x7f0000000340)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @dev={0xfe, 0x80, '\x00', 0x3f}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @loopback, @loopback, [], "1e520acc951ee12e"}}}}}}}, 0x0) 655.513299ms ago: executing program 1 (id=2018): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x74, r3, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000880)=@newqdisc={0x4d4, 0x24, 0x10, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xb, 0xc}, {0xe, 0x2}, {0x10, 0x8}}, [@qdisc_kind_options=@q_red={{0x8}, {0x158, 0x2, [@TCA_RED_MAX_P={0x8, 0x3, 0x5}, @TCA_RED_FLAGS={0xc, 0x4, {0x17}}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0x8}}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0x8}}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0x7}}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8, 0x3, 0x40}, @TCA_RED_MAX_P={0x8, 0x3, 0xffffff3e}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x9}]}}, @TCA_STAB={0x178, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x95, 0x1, 0x7, 0x1, 0x8001, 0x0, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0x81, 0x3, 0x1, 0xaa, 0x1, 0x1ff, 0xfff, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0xe2, 0xe, 0x40, 0x80000001, 0x1, 0x9, 0x26cac0, 0x2}}, {0x8, 0x2, [0xf0, 0x40]}}, {{0x1c, 0x1, {0x4, 0x9, 0x7, 0x4, 0x0, 0x8, 0x3ff, 0x4}}, {0xc, 0x2, [0x0, 0xa, 0x7, 0x1]}}, {{0x1c, 0x1, {0x8, 0x7f, 0x755, 0x9, 0x0, 0x100, 0x1568, 0x8}}, {0x14, 0x2, [0x3, 0x8, 0xf801, 0x5, 0xb, 0x401, 0x0, 0xffff]}}, {{0x1c, 0x1, {0xe4, 0xa, 0x2, 0x7ff, 0x1, 0x5, 0x1, 0x1}}, {0x6, 0x2, [0x4]}}, {{0x1c, 0x1, {0xca, 0x9, 0x7, 0xfffffffe, 0x0, 0x7, 0x200, 0x6}}, {0x10, 0x2, [0x9, 0x4, 0x400, 0x90, 0x7e58, 0x7]}}, {{0x1c, 0x1, {0xf9, 0xff, 0x40, 0x71, 0x2, 0xfffffffe, 0x5, 0xa}}, {0x18, 0x2, [0xe, 0x6, 0x9, 0x7f, 0xce, 0x3edf, 0x8, 0x1, 0x9, 0x4]}}, {{0x1c, 0x1, {0x7, 0x5, 0xec3, 0x0, 0x0, 0x5f3, 0x2173, 0x6}}, {0x10, 0x2, [0x6, 0x0, 0x56, 0x5, 0x800, 0x7]}}]}, @TCA_STAB={0x18c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x7, 0x2, 0x1, 0x0, 0x2400000, 0x2, 0x1}}, {0x6, 0x2, [0x8]}}, {{0x1c, 0x1, {0x2, 0x4, 0x5, 0x0, 0x1, 0x4, 0x6, 0x3}}, {0xa, 0x2, [0x40, 0x8, 0xfff8]}}, {{0x1c, 0x1, {0x0, 0x2, 0xfa6, 0xc67, 0x0, 0x6, 0x9, 0x5}}, {0xe, 0x2, [0x80, 0x7, 0x1, 0x2, 0xfffb]}}, {{0x1c, 0x1, {0x4e, 0x0, 0x752c, 0x0, 0x1, 0x7fff, 0x4, 0x4}}, {0xc, 0x2, [0x3, 0xd7ee, 0x2, 0x800]}}, {{0x1c, 0x1, {0x3, 0x5, 0x4, 0xfffffffe, 0x2, 0x0, 0x81, 0x6}}, {0x10, 0x2, [0x5, 0x3, 0x200, 0x1, 0xff, 0x80]}}, {{0x1c, 0x1, {0x1, 0xa9, 0xfffd, 0xfffffffb, 0x0, 0x800, 0x10001, 0x5}}, {0xe, 0x2, [0x52d, 0x9, 0x81, 0x40, 0x7]}}, {{0x1c, 0x1, {0x90, 0x0, 0x7f76, 0x3, 0x1, 0x7, 0x0, 0x1}}, {0x6, 0x2, [0x81]}}, {{0x1c, 0x1, {0x0, 0x3, 0x0, 0x6a, 0xf712987516132ba4, 0x5, 0x0, 0x1}}, {0x6, 0x2, [0x1ff]}}, {{0x1c, 0x1, {0xe, 0xfb, 0x8, 0xea8c, 0xdc1b618fff637946, 0x1, 0x3, 0x1}}, {0x6, 0x2, [0x4]}}, {{0x1c, 0x1, {0x0, 0x3, 0x7, 0x4, 0x0, 0x3ff, 0x7fffffff, 0x2}}, {0x8, 0x2, [0x6, 0x3]}}]}, @TCA_RATE={0x6, 0x5, {0x8, 0x8}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x14d}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x1, 0x6, 0x3, 0x2, 0x401, 0xd}}, {0x4}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x10001}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}]}, 0x4d4}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x7, 0x80000001, 0x3, 0x7fffffff, 0x20a, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x38}}, 0x0) 445.162972ms ago: executing program 3 (id=2019): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x188004}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x800000, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5, 0x2d, 0x40}]}}}]}, 0x3c}}, 0x0) 441.957181ms ago: executing program 4 (id=2020): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @local}, 0x1c) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @local}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="9ecda1f6a7c0d7d4fcdc74a0a648971cca601a8c96a84352706d47dd488dd7f90f57eedfb96f070f614da15b2096efa1ee2b90b40249a2a181471fce8aee287128e6ef510a8a14", 0x47, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xe}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000000240)="9ecda1f6a7c0d7d4fcdc74a0a648971cca601a8c96a84352706d47dd488dd7f90f57eedfb96f070f614da15b2096efa1ee2b90b40249a2a181471fce8aee287128e6ef510a8a14", 0x47, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xe}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x200002}, 0xc) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='h', 0x34000}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000000071108d000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x1, 0x20}, 0xc) shutdown(r0, 0x0) 299.158189ms ago: executing program 1 (id=2021): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2100}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0x1a, 0x0, 0x0, 0x10001}, {0x8, 0x13, 0x0, 0x0, 0x3}]}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x29, 0x6, 0x81, 0x1, 0xc, @remote, @private2, 0x7, 0x8, 0xdd, 0x9}}) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={'wg1\x00', {0x2, 0x4e23, @loopback=0x7f000000}}) 251.793053ms ago: executing program 4 (id=2022): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610430000000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SIOCSIFHWADDR(r2, 0x8b19, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e00000002"], 0x8) syz_emit_ethernet(0x66, &(0x7f00000005c0)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "a92fb2", 0x0, 0x3b, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback}}}}}}}, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000140)={0x40000001}) ioctl$SIOCX25SFACILITIES(r4, 0x89e3, &(0x7f0000000180)={0x22, 0x9, 0x9, 0x6, 0x1, 0x81}) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1c, 0x4, 0x3, 0x9, 0x30048, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x1, 0x0, @void, @value, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={r7, 0xffffffffffffffff}, 0xffffffffffffff08) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x15, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000007f000000000000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018230000", @ANYRES32=r3, @ANYBLOB="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"], &(0x7f0000000400)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x5, 0x8, 0x0, 0x60000}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000880)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r7, r8, r9, r10], &(0x7f00000008c0)=[{0x2, 0x4, 0xf, 0x4}, {0x5, 0x2, 0xb}, {0x1, 0x2, 0x8, 0xa}], 0x10, 0x80000001, @void, @value}, 0x94) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) socket(0x2a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYRESOCT=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r11, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 137.06144ms ago: executing program 0 (id=2023): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x26, 0x0, 0x0, @void, @value}, 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r2, 0x11, 0x67, 0x0, &(0x7f0000000040)) (async) getsockopt$inet6_udp_int(r2, 0x11, 0x67, 0x0, &(0x7f0000000040)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xb, [@typedef={0x8, 0x0, 0x0, 0x8, 0x2}, @volatile]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x2e]}}, &(0x7f0000000200)=""/201, 0x3b, 0xc9, 0x1, 0x0, 0x0, @void, @value}, 0x20) 121.803759ms ago: executing program 3 (id=2024): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000280)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@call={0x85, 0x0, 0x0, 0x6b}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="3c75c2015e8724b5a4c586f2ae924b277f0443ec773eab27570e28988217c9b0", 0x20) r3 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000005e80)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="54ebe5165a24b39d7e37b8d3464a0e3c23c84b2128b2148405a9c0d30c6d6b4e65f1cf8d14b15369", 0x28}, {&(0x7f0000000240)="a39d822f44d76a787089b061f20686528c42c4125427d5045a4db4ecabcbe1183db82c6ff44eff3bff0a4bdd2763ea5f0e3b4ffeead6a6f2bec2", 0x3a}], 0x2, 0x0, 0x0, 0x1}], 0x1, 0x4d090) recvmmsg(r3, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000008c0)=""/98, 0x62}], 0x1}, 0x684b}], 0x1, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x34, r5, 0x1, 0x70bd29, 0x4, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xca}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4804}, 0x80) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x20, 0x20, 0x9, 0x0, 0x0, {0x2}, [@typed={0xc, 0x3, 0x0, 0x0, @u64=0xffff}]}, 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0x11}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x8e}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 0s ago: executing program 0 (id=2025): bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000009c502ad794c25b71b46eac8a2f4c093011c0cc4cd68bc41990d8ec72f8de5a122c172c3fdd5428f7d5a1ea75460a0b040c2fc603000000a2c62421efaf783bbb3f38b2126d3b8179e94eb5437f5ab2ad22"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0x1e, 0xa, 0x8) connect$qrtr(r2, &(0x7f0000000000)={0x2a, 0x3}, 0xc) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x30, r1, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x8}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x9004) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) kernel console output (not intermixed with test programs): batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.348379][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.382246][ T5848] team0: Port device team_slave_1 added [ 88.447848][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.454973][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.481342][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.507770][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.514751][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.540817][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.595679][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.602687][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.629226][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.641058][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.648292][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.675176][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.744518][ T5846] hsr_slave_0: entered promiscuous mode [ 88.753349][ T5846] hsr_slave_1: entered promiscuous mode [ 88.759975][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.767611][ T5846] Cannot create hsr debugfs directory [ 88.956584][ T5854] hsr_slave_0: entered promiscuous mode [ 88.963082][ T5854] hsr_slave_1: entered promiscuous mode [ 88.969972][ T5854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.978306][ T5854] Cannot create hsr debugfs directory [ 89.025493][ T5848] hsr_slave_0: entered promiscuous mode [ 89.031882][ T5848] hsr_slave_1: entered promiscuous mode [ 89.038426][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.046118][ T5848] Cannot create hsr debugfs directory [ 89.408596][ T5839] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.422051][ T5839] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.454185][ T5839] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.506453][ T5839] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.593982][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.605996][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.625489][ T5841] Bluetooth: hci1: command tx timeout [ 89.647335][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.659600][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.706146][ T5841] Bluetooth: hci0: command tx timeout [ 89.748689][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.761558][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.773409][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.785723][ T5841] Bluetooth: hci3: command tx timeout [ 89.785768][ T5847] Bluetooth: hci2: command tx timeout [ 89.812285][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.866417][ T5847] Bluetooth: hci4: command tx timeout [ 89.911442][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.942646][ T5848] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.953321][ T5848] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.971853][ T5848] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.984477][ T5848] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.027061][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.096085][ T3570] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.103485][ T3570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.113923][ T3570] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.121111][ T3570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.194393][ T5854] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.221477][ T5854] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.234179][ T5854] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.251628][ T5854] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.279513][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.339759][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.363434][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.370905][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.414937][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.422084][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.481813][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.600741][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.633569][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.652233][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.659993][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.700200][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.707366][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.758289][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.844874][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.852178][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.879720][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.913539][ T5846] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.969471][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.978063][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.985248][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.091521][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.150618][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.181851][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.189091][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.234824][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.242075][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.388899][ T5839] veth0_vlan: entered promiscuous mode [ 91.446621][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.479740][ T5839] veth1_vlan: entered promiscuous mode [ 91.566055][ T5837] veth0_vlan: entered promiscuous mode [ 91.599290][ T5837] veth1_vlan: entered promiscuous mode [ 91.631133][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.674792][ T5839] veth0_macvtap: entered promiscuous mode [ 91.713812][ T5847] Bluetooth: hci1: command tx timeout [ 91.724893][ T5846] veth0_vlan: entered promiscuous mode [ 91.739855][ T5839] veth1_macvtap: entered promiscuous mode [ 91.782968][ T5846] veth1_vlan: entered promiscuous mode [ 91.788631][ T5847] Bluetooth: hci0: command tx timeout [ 91.803468][ T5837] veth0_macvtap: entered promiscuous mode [ 91.818630][ T5837] veth1_macvtap: entered promiscuous mode [ 91.834703][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.867260][ T5847] Bluetooth: hci3: command tx timeout [ 91.869994][ T5841] Bluetooth: hci2: command tx timeout [ 91.875738][ T1214] cfg80211: failed to load regulatory.db [ 91.906377][ T5848] veth0_vlan: entered promiscuous mode [ 91.926734][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.942901][ T5848] veth1_vlan: entered promiscuous mode [ 91.950986][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.961760][ T5841] Bluetooth: hci4: command tx timeout [ 91.969169][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.981160][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.998190][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.022277][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.034230][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.046958][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.057302][ T5837] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.066282][ T5837] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.075088][ T5837] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.083816][ T5837] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.112510][ T5839] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.122005][ T5839] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.131519][ T5839] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.140665][ T5839] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.163332][ T5846] veth0_macvtap: entered promiscuous mode [ 92.180871][ T5846] veth1_macvtap: entered promiscuous mode [ 92.244205][ T5848] veth0_macvtap: entered promiscuous mode [ 92.287373][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.302848][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.313809][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.325197][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.336892][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.352642][ T5848] veth1_macvtap: entered promiscuous mode [ 92.361785][ T5854] veth0_vlan: entered promiscuous mode [ 92.413416][ T3570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.423597][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.427295][ T3570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.438135][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.452915][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.463700][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.477882][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.498499][ T5846] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.509477][ T5846] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.518820][ T5846] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.527917][ T5846] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.542119][ T5854] veth1_vlan: entered promiscuous mode [ 92.583725][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.596333][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.608173][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.608387][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.627085][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.637622][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.647806][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.661636][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.673436][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.730690][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.741679][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.752643][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.763136][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.773196][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.783816][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.796020][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.853653][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.863607][ T5848] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.873469][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.881454][ T5848] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.890923][ T5848] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.899934][ T5848] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.941007][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.950734][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.963316][ T5854] veth0_macvtap: entered promiscuous mode [ 92.975558][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.983625][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.040519][ T5854] veth1_macvtap: entered promiscuous mode [ 93.058053][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.071474][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.113172][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.158582][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.189639][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.231863][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.246384][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.256699][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.267388][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.278377][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.289700][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.302440][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.331950][ T5929] warning: `syz.1.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 93.363969][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.385888][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.414994][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.430318][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.452994][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.471798][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.481942][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.492609][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.510698][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.572363][ T5935] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.612126][ T5854] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.670820][ T5854] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.690559][ T5854] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.709906][ T5854] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.744052][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.753131][ T5945] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8'. [ 93.780040][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.788792][ T5841] Bluetooth: hci1: command tx timeout [ 93.875598][ T5841] Bluetooth: hci0: command tx timeout [ 93.906620][ T5951] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10'. [ 93.917304][ T5951] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10'. [ 93.941784][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.945637][ T5841] Bluetooth: hci2: command tx timeout [ 93.951307][ T5847] Bluetooth: hci3: command tx timeout [ 94.006998][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.025476][ T5847] Bluetooth: hci4: command tx timeout [ 94.077197][ T5953] Zero length message leads to an empty skb [ 94.165820][ T5961] netlink: 80 bytes leftover after parsing attributes in process `syz.0.9'. [ 94.175009][ T3570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.203691][ T5961] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9'. [ 94.217308][ T3570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.349466][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.389524][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.753914][ T5974] xt_hashlimit: size too large, truncated to 1048576 [ 94.846080][ T5977] x_tables: duplicate underflow at hook 1 [ 94.927927][ T5977] : renamed from vlan0 (while UP) [ 95.098418][ T5986] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'. [ 95.116778][ T5989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17'. [ 95.607944][ T6001] netlink: 16 bytes leftover after parsing attributes in process `syz.2.19'. [ 95.977130][ T6020] netlink: 'syz.1.21': attribute type 10 has an invalid length. [ 96.022209][ T6027] openvswitch: netlink: Key 6 has unexpected len 4741 expected 2 [ 96.123347][ T6015] bond1: entered promiscuous mode [ 96.136750][ T6015] bond1: entered allmulticast mode [ 96.163885][ T6022] netlink: 4 bytes leftover after parsing attributes in process `syz.4.26'. [ 96.194319][ T6020] veth0_macvtap: left promiscuous mode [ 96.202116][ T6034] xt_l2tp: invalid flags combination: c [ 96.688492][ T6055] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.995849][ T6064] netlink: 4 bytes leftover after parsing attributes in process `syz.4.37'. [ 97.893493][ T6111] gretap0: entered promiscuous mode [ 98.817658][ T6148] __nla_validate_parse: 9 callbacks suppressed [ 98.817680][ T6148] netlink: 48 bytes leftover after parsing attributes in process `syz.3.62'. [ 98.885629][ T6146] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 98.934373][ T6148] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 98.950552][ T6159] netlink: 192 bytes leftover after parsing attributes in process `syz.1.65'. [ 98.958143][ T6158] netlink: 16 bytes leftover after parsing attributes in process `syz.0.63'. [ 99.141244][ T6162] netlink: 16 bytes leftover after parsing attributes in process `syz.4.67'. [ 99.213249][ T6167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.66'. [ 99.445329][ T6172] netlink: 28 bytes leftover after parsing attributes in process `syz.4.70'. [ 99.485144][ T6172] netlink: 36 bytes leftover after parsing attributes in process `syz.4.70'. [ 99.840691][ T6188] syz.1.77 uses obsolete (PF_INET,SOCK_PACKET) [ 99.870235][ T6194] bridge0: entered promiscuous mode [ 99.900335][ T6194] macvlan2: entered promiscuous mode [ 100.006054][ T6201] macvlan3: entered promiscuous mode [ 100.217708][ T6215] netlink: 'syz.4.83': attribute type 10 has an invalid length. [ 100.270612][ T6216] raw_sendmsg: syz.4.83 forgot to set AF_INET. Fix it! [ 100.338838][ T6215] team0: Device veth0_macvtap failed to register rx_handler [ 100.443641][ T6215] syz.4.83 (6215) used greatest stack depth: 17912 bytes left [ 100.499408][ T6223] Cannot find map_set index 0 as target [ 100.837161][ T6247] skbuff: bad partial csum: csum=65506/2 headroom=178 headlen=65526 [ 100.887555][ T6250] x_tables: unsorted entry at hook 2 [ 100.898458][ T6251] x_tables: unsorted entry at hook 2 [ 100.912242][ T6248] gtp0: entered promiscuous mode [ 100.917887][ T6248] gtp0: entered allmulticast mode [ 101.167732][ T6254] netlink: 20 bytes leftover after parsing attributes in process `syz.4.96'. [ 101.366515][ T6275] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 101.374011][ T6275] IPv6: NLM_F_CREATE should be set when creating new route [ 101.478668][ T6282] netlink: 44 bytes leftover after parsing attributes in process `syz.2.105'. [ 101.574381][ T6277] netlink: 60 bytes leftover after parsing attributes in process `syz.3.102'. [ 101.784180][ T6291] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.792592][ T6291] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.811701][ T6294] netlink: 'syz.2.107': attribute type 5 has an invalid length. [ 102.169638][ T6316] netlink: 'syz.0.112': attribute type 1 has an invalid length. [ 102.504344][ T6333] syzkaller0: entered promiscuous mode [ 102.514137][ T6333] syzkaller0: entered allmulticast mode [ 102.665641][ T6333] pim6reg: entered allmulticast mode [ 102.709303][ T6337] C: renamed from lo (while UP) [ 102.749578][ T6338] atomic_op ffff888066d4d998 conn xmit_atomic 0000000000000000 [ 102.793109][ T6341] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 102.797505][ T6337] netlink: 'syz.2.118': attribute type 10 has an invalid length. [ 102.823967][ T6337] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.858833][ T6337] bond0: (slave team0): Enslaving as an active interface with an up link [ 103.032497][ T6348] netlink: 'syz.1.123': attribute type 1 has an invalid length. [ 103.562184][ T6376] delete_channel: no stack [ 103.590717][ T6377] netlink: 'syz.4.133': attribute type 1 has an invalid length. [ 103.748339][ T6377] xt_CT: No such helper "pptp" [ 103.933256][ T6397] delete_channel: no stack [ 104.832328][ T6451] xt_socket: unknown flags 0x50 [ 104.979208][ T6457] __nla_validate_parse: 8 callbacks suppressed [ 104.979231][ T6457] netlink: 44 bytes leftover after parsing attributes in process `syz.4.152'. [ 105.008667][ T6460] netlink: 'syz.0.153': attribute type 8 has an invalid length. [ 105.174629][ T6463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.155'. [ 105.819702][ T6495] openvswitch: netlink: Actions may not be safe on all matching packets [ 106.022851][ T6473] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 106.162681][ T6510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.165'. [ 106.221691][ T6514] netlink: 36 bytes leftover after parsing attributes in process `syz.4.168'. [ 106.349533][ T6520] IPv6: NLM_F_CREATE should be specified when creating new route [ 106.431127][ T6525] netlink: 'syz.1.170': attribute type 10 has an invalid length. [ 106.462684][ T6525] team0: Device veth0_macvtap failed to register rx_handler [ 106.667208][ T6540] vlan2: entered allmulticast mode [ 106.672650][ T6540] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 107.058026][ T6555] netlink: 40 bytes leftover after parsing attributes in process `syz.1.180'. [ 107.422078][ T6570] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:20001 [ 107.434333][ T6569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.186'. [ 107.436398][ T6567] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 107.620182][ T6579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.191'. [ 107.652104][ T6579] netlink: 12 bytes leftover after parsing attributes in process `syz.3.191'. [ 107.672287][ T6579] netlink: 'syz.3.191': attribute type 5 has an invalid length. [ 107.684464][ T6584] netlink: 20 bytes leftover after parsing attributes in process `syz.2.192'. [ 107.778286][ T6584] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 107.781000][ T6588] netlink: 40 bytes leftover after parsing attributes in process `syz.4.190'. [ 108.631702][ T6626] veth1_to_hsr: entered promiscuous mode [ 108.645082][ T6625] IPVS: sync thread started: state = MASTER, mcast_ifn = dummy0, syncid = 3, id = 0 [ 108.646999][ T6621] veth1_to_hsr: left promiscuous mode [ 108.785783][ T6631] batman_adv: batadv0: Adding interface: dummy0 [ 108.792090][ T6631] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.922971][ T6631] batman_adv: batadv0: Interface activated: dummy0 [ 109.174716][ T5922] IPVS: starting estimator thread 0... [ 109.210439][ T6657] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 109.294576][ T6664] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 109.345074][ T6661] IPVS: using max 27 ests per chain, 64800 per kthread [ 109.825325][ T6693] netlink: 'syz.2.224': attribute type 12 has an invalid length. [ 109.833665][ T6693] netlink: 'syz.2.224': attribute type 29 has an invalid length. [ 109.870195][ T6693] netlink: 'syz.2.224': attribute type 1 has an invalid length. [ 110.108628][ T6710] __nla_validate_parse: 6 callbacks suppressed [ 110.108649][ T6710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.231'. [ 110.127813][ T6712] netlink: 'syz.3.233': attribute type 9 has an invalid length. [ 111.040903][ T6716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 111.051996][ T6716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.272375][ T6741] netlink: 'syz.4.242': attribute type 20 has an invalid length. [ 111.349219][ T6749] netlink: 12 bytes leftover after parsing attributes in process `syz.0.241'. [ 111.542694][ T6758] Cannot find set identified by id 752 to match [ 111.563433][ T6756] netlink: 24 bytes leftover after parsing attributes in process `syz.3.245'. [ 111.576709][ T6754] Bluetooth: MGMT ver 1.23 [ 111.675486][ T6762] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.815955][ T6811] netlink: 24 bytes leftover after parsing attributes in process `syz.2.264'. [ 112.843577][ T6812] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 112.904748][ T6812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.263'. [ 112.947367][ T6812] netlink: 24 bytes leftover after parsing attributes in process `syz.3.263'. [ 113.158248][ T6827] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 113.243984][ T6832] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.252231][ T6832] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.356778][ T6836] netlink: 'syz.3.273': attribute type 1 has an invalid length. [ 113.366172][ T6836] netlink: 'syz.3.273': attribute type 4 has an invalid length. [ 113.375147][ T6836] netlink: 15334 bytes leftover after parsing attributes in process `syz.3.273'. [ 113.406509][ T6836] netlink: 28 bytes leftover after parsing attributes in process `syz.3.273'. [ 113.438247][ T6836] netlink: 'syz.3.273': attribute type 7 has an invalid length. [ 113.458623][ T6836] netlink: 'syz.3.273': attribute type 8 has an invalid length. [ 113.516724][ T6836] netlink: 4 bytes leftover after parsing attributes in process `syz.3.273'. [ 113.918454][ T6866] xt_CT: You must specify a L4 protocol and not use inversions on it [ 113.956158][ T6866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.280'. [ 114.217296][ T6883] netlink: 'syz.2.284': attribute type 10 has an invalid length. [ 114.277578][ T6883] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 114.352793][ T6882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.562168][ T6892] veth0_to_batadv: entered promiscuous mode [ 115.082951][ T6890] veth0_to_batadv: left promiscuous mode [ 115.329652][ T6929] __nla_validate_parse: 3 callbacks suppressed [ 115.329676][ T6929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.295'. [ 115.397213][ T5894] IPVS: starting estimator thread 0... [ 115.505071][ T6941] IPVS: using max 31 ests per chain, 74400 per kthread [ 115.758371][ T6952] ieee802154 phy0 wpan0: encryption failed: -22 [ 115.826337][ T6959] netlink: 4 bytes leftover after parsing attributes in process `syz.0.301'. [ 115.885121][ T6959] netlink: 4 bytes leftover after parsing attributes in process `syz.0.301'. [ 115.925063][ T6959] netlink: 4 bytes leftover after parsing attributes in process `syz.0.301'. [ 115.987197][ T6964] netlink: 'syz.3.303': attribute type 1 has an invalid length. [ 115.999310][ T6965] netlink: 132 bytes leftover after parsing attributes in process `syz.1.304'. [ 116.036254][ T6964] netlink: 'syz.3.303': attribute type 4 has an invalid length. [ 116.049184][ T6971] sctp: [Deprecated]: syz.4.305 (pid 6971) Use of int in max_burst socket option. [ 116.049184][ T6971] Use struct sctp_assoc_value instead [ 116.054280][ T6964] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.303'. [ 116.607716][ T6998] netlink: 'syz.2.311': attribute type 29 has an invalid length. [ 117.051511][ T7027] geneve2: entered promiscuous mode [ 117.085040][ T7027] geneve2: entered allmulticast mode [ 117.349112][ T7045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.322'. [ 117.403010][ T7041] xt_CT: No such helper "pptp" [ 117.412269][ T7051] netlink: 52 bytes leftover after parsing attributes in process `syz.0.323'. [ 117.428562][ T7051] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.454112][ T7053] netlink: 165 bytes leftover after parsing attributes in process `syz.3.322'. [ 117.464598][ T7054] sctp: [Deprecated]: syz.1.325 (pid 7054) Use of struct sctp_assoc_value in delayed_ack socket option. [ 117.464598][ T7054] Use struct sctp_sack_info instead [ 117.493562][ T7045] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 117.751764][ T7061] netlink: 'syz.1.328': attribute type 10 has an invalid length. [ 117.830899][ T7061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.859461][ T7061] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 117.892407][ T7061] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 117.933949][ T7072] batman_adv: batadv0: Adding interface: dummy0 [ 117.944316][ T7072] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.978984][ T7072] batman_adv: batadv0: Interface activated: dummy0 [ 117.989318][ T7074] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.996590][ T7074] bridge0: port 2(bridge_slave_1) entered listening state [ 118.004208][ T7074] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.011439][ T7074] bridge0: port 1(bridge_slave_0) entered listening state [ 118.123581][ T7076] batadv0: mtu less than device minimum [ 118.134423][ T7076] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 118.146691][ T7076] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 118.158498][ T7076] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 118.170597][ T7076] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 118.182630][ T7076] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 118.194670][ T7076] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 118.206461][ T7076] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 118.218466][ T7076] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 118.230990][ T7076] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 118.437456][ T7091] netlink: 'syz.0.338': attribute type 8 has an invalid length. [ 119.028018][ T7115] netlink: 12 bytes leftover after parsing attributes in process `syz.3.346'. [ 119.299525][ T5840] IPVS: starting estimator thread 0... [ 119.308100][ T7129] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20002 [ 119.415867][ T7133] IPVS: using max 24 ests per chain, 57600 per kthread [ 119.668301][ T7147] netlink: 'syz.0.356': attribute type 13 has an invalid length. [ 119.816469][ T7156] batman_adv: batadv0: Adding interface: gretap1 [ 119.856445][ T7156] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 119.927084][ T7161] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 120.212576][ T7177] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 120.461961][ T7189] __nla_validate_parse: 3 callbacks suppressed [ 120.461983][ T7189] netlink: 28 bytes leftover after parsing attributes in process `syz.0.371'. [ 120.651747][ T7194] netlink: 24 bytes leftover after parsing attributes in process `syz.0.374'. [ 121.108102][ T7219] netlink: 4 bytes leftover after parsing attributes in process `syz.2.382'. [ 121.326262][ T7226] netlink: 'syz.0.386': attribute type 10 has an invalid length. [ 121.358856][ T7226] bridge0: port 3(team0) entered blocking state [ 121.376051][ T7226] bridge0: port 3(team0) entered disabled state [ 121.401363][ T7226] team0: entered allmulticast mode [ 121.407475][ T7226] team_slave_0: entered allmulticast mode [ 121.413674][ T7226] team_slave_1: entered allmulticast mode [ 121.423402][ T7226] team0: entered promiscuous mode [ 121.433915][ T7226] team_slave_0: entered promiscuous mode [ 121.454297][ T7226] team_slave_1: entered promiscuous mode [ 121.490236][ T7226] bridge0: port 3(team0) entered blocking state [ 121.496751][ T7226] bridge0: port 3(team0) entered listening state [ 121.513029][ T7226] netlink: 'syz.0.386': attribute type 10 has an invalid length. [ 121.521301][ T7226] netlink: 'syz.0.386': attribute type 10 has an invalid length. [ 121.554334][ T7237] netlink: 40 bytes leftover after parsing attributes in process `syz.1.388'. [ 121.596870][ T7226] netlink: 'syz.0.386': attribute type 10 has an invalid length. [ 121.629301][ T7226] netlink: 'syz.0.386': attribute type 10 has an invalid length. [ 121.654073][ T7226] netlink: 'syz.0.386': attribute type 10 has an invalid length. [ 121.683276][ T7226] netlink: 'syz.0.386': attribute type 10 has an invalid length. [ 121.776609][ T7241] veth3: entered allmulticast mode [ 121.782386][ T7226] netlink: 'syz.0.386': attribute type 10 has an invalid length. [ 121.955040][ T5847] Bluetooth: hci0: command tx timeout [ 122.086726][ T7257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.398'. [ 122.266936][ T7269] netlink: 24 bytes leftover after parsing attributes in process `syz.1.401'. [ 122.528108][ T7282] netlink: 108 bytes leftover after parsing attributes in process `syz.0.404'. [ 122.538217][ T7282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.404'. [ 122.651529][ T7282] batadv0: entered promiscuous mode [ 122.680689][ T7282] macsec2: entered promiscuous mode [ 122.701062][ T7291] netlink: 48 bytes leftover after parsing attributes in process `syz.3.406'. [ 122.724785][ T7282] macsec2: entered allmulticast mode [ 122.745581][ T7282] batadv0: entered allmulticast mode [ 122.808180][ T7301] netlink: 24 bytes leftover after parsing attributes in process `syz.2.407'. [ 123.875549][ T7350] validate_nla: 59 callbacks suppressed [ 123.875570][ T7350] netlink: 'syz.2.420': attribute type 10 has an invalid length. [ 123.922522][ T7350] batman_adv: batadv0: Interface deactivated: dummy0 [ 123.999148][ T7350] batman_adv: batadv0: Removing interface: dummy0 [ 124.064243][ T7350] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 125.207343][ T7417] netlink: 'syz.0.440': attribute type 10 has an invalid length. [ 125.378972][ T7417] team0: Device veth1_macvtap failed to register rx_handler [ 125.636502][ T7430] netlink: 'syz.1.444': attribute type 4 has an invalid length. [ 125.686994][ T7432] netlink: 'syz.1.444': attribute type 4 has an invalid length. [ 125.701294][ T7438] __nla_validate_parse: 16 callbacks suppressed [ 125.701316][ T7438] netlink: 24 bytes leftover after parsing attributes in process `syz.3.446'. [ 125.879100][ T7446] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 126.157677][ T7449] ip6gre1: entered allmulticast mode [ 126.184505][ T7456] netlink: 'syz.1.450': attribute type 11 has an invalid length. [ 126.195962][ T7456] netlink: 68 bytes leftover after parsing attributes in process `syz.1.450'. [ 126.489973][ T52] IPVS: starting estimator thread 0... [ 126.595316][ T7468] IPVS: using max 27 ests per chain, 64800 per kthread [ 126.637791][ T7460] batadv_slave_1: entered allmulticast mode [ 126.958608][ T7495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.461'. [ 127.114062][ T7498] netlink: 'syz.4.461': attribute type 58 has an invalid length. [ 127.169671][ T7498] netlink: 20 bytes leftover after parsing attributes in process `syz.4.461'. [ 127.270786][ T7511] netlink: 'syz.1.465': attribute type 33 has an invalid length. [ 127.297654][ T7511] netlink: 152 bytes leftover after parsing attributes in process `syz.1.465'. [ 127.359208][ T7505] netlink: 28 bytes leftover after parsing attributes in process `syz.2.464'. [ 127.819871][ T7538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.474'. [ 128.200347][ T7556] IPVS: set_ctl: invalid protocol: 3 172.20.20.45:20000 [ 128.230705][ T7562] netlink: 256 bytes leftover after parsing attributes in process `syz.4.482'. [ 128.260864][ T7565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.483'. [ 128.279437][ T7565] netlink: 244 bytes leftover after parsing attributes in process `syz.2.483'. [ 128.436812][ T7567] tunl0: entered promiscuous mode [ 128.444064][ T7567] netlink: 'syz.1.485': attribute type 3 has an invalid length. [ 128.550034][ T7576] bridge_slave_1: left allmulticast mode [ 128.596021][ T7576] bridge_slave_1: left promiscuous mode [ 128.645151][ T7576] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.749305][ T7576] bridge_slave_0: left allmulticast mode [ 128.760001][ T7576] bridge_slave_0: left promiscuous mode [ 128.768230][ T7576] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.544406][ T7624] netem: change failed [ 129.806283][ C0] vcan0: j1939_tp_rxtimer: 0xffff888035ef2400: rx timeout, send abort [ 129.838367][ T7635] ieee802154 phy0 wpan0: encryption failed: -22 [ 129.848011][ T7637] ieee802154 phy0 wpan0: encryption failed: -22 [ 129.985280][ T7640] netlink: 'syz.4.505': attribute type 4 has an invalid length. [ 130.114244][ T7567] syz.1.485: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 130.153564][ T7567] CPU: 0 UID: 0 PID: 7567 Comm: syz.1.485 Not tainted 6.14.0-syzkaller-13310-g04efcee6ef8d #0 PREEMPT(full) [ 130.153597][ T7567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 130.153615][ T7567] Call Trace: [ 130.153623][ T7567] [ 130.153632][ T7567] dump_stack_lvl+0x241/0x360 [ 130.153674][ T7567] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.153706][ T7567] ? __pfx__printk+0x10/0x10 [ 130.153735][ T7567] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 130.153769][ T7567] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 130.153800][ T7567] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 130.153834][ T7567] warn_alloc+0x27c/0x410 [ 130.153869][ T7567] ? __pfx_warn_alloc+0x10/0x10 [ 130.153898][ T7567] ? hash_ipport4_resize+0x1e2/0x1b30 [ 130.153926][ T7567] ? __get_vm_area_node+0x1c8/0x2d0 [ 130.153957][ T7567] ? __get_vm_area_node+0x25c/0x2d0 [ 130.153996][ T7567] __vmalloc_node_range_noprof+0x634/0x1390 [ 130.154048][ T7567] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 130.154069][ T7567] ? __kasan_kmalloc_large+0x1a/0xa0 [ 130.154100][ T7567] ? hash_ipport4_resize+0x1e2/0x1b30 [ 130.154127][ T7567] __kvmalloc_node_noprof+0x3b2/0x5a0 [ 130.154157][ T7567] ? hash_ipport4_resize+0x1e2/0x1b30 [ 130.154182][ T7567] ? hash_ipport4_resize+0x1e2/0x1b30 [ 130.154215][ T7567] hash_ipport4_resize+0x1e2/0x1b30 [ 130.154252][ T7567] ? __pfx_hash_ipport4_add+0x10/0x10 [ 130.154282][ T7567] ? __pfx_hash_ipport4_uadt+0x10/0x10 [ 130.154331][ T7567] call_ad+0x38d/0xa80 [ 130.154364][ T7567] ? __pfx_call_ad+0x10/0x10 [ 130.154403][ T7567] ? __nla_parse+0x40/0x60 [ 130.154433][ T7567] ip_set_ad+0x7e4/0x9a0 [ 130.154466][ T7567] ? __pfx_ip_set_ad+0x10/0x10 [ 130.154486][ T7567] ? trace_contention_end+0x3c/0x120 [ 130.154560][ T7567] ? nfnetlink_rcv_msg+0x227/0x1190 [ 130.154584][ T7567] nfnetlink_rcv_msg+0xbf7/0x1190 [ 130.154607][ T7567] ? nfnetlink_rcv_msg+0x227/0x1190 [ 130.154654][ T7567] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 130.154673][ T7567] ? stack_trace_save+0x11a/0x1d0 [ 130.154730][ T7567] ? dev_hard_start_xmit+0x2d4/0x840 [ 130.154752][ T7567] ? __dev_queue_xmit+0x1b80/0x3f60 [ 130.154774][ T7567] ? __netlink_deliver_tap+0x561/0x7f0 [ 130.154801][ T7567] ? netlink_deliver_tap+0x19d/0x1b0 [ 130.154828][ T7567] ? netlink_unicast+0x7c6/0x9a0 [ 130.154857][ T7567] ? netlink_sendmsg+0x8c3/0xcd0 [ 130.154884][ T7567] ? __sock_sendmsg+0x221/0x270 [ 130.154910][ T7567] ? ____sys_sendmsg+0x523/0x860 [ 130.154929][ T7567] ? __sys_sendmsg+0x271/0x360 [ 130.154967][ T7567] netlink_rcv_skb+0x208/0x480 [ 130.154997][ T7567] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 130.155022][ T7567] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 130.155068][ T7567] ? apparmor_capable+0x13b/0x1b0 [ 130.155093][ T7567] ? bpf_lsm_capable+0x9/0x10 [ 130.155117][ T7567] ? security_capable+0x7e/0x2d0 [ 130.155153][ T7567] nfnetlink_rcv+0x296/0x28f0 [ 130.155179][ T7567] ? __dev_queue_xmit+0x2f9/0x3f60 [ 130.155203][ T7567] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 130.155230][ T7567] ? __dev_queue_xmit+0x2f9/0x3f60 [ 130.155253][ T7567] ? __dev_queue_xmit+0x2f9/0x3f60 [ 130.155276][ T7567] ? __dev_queue_xmit+0x1780/0x3f60 [ 130.155296][ T7567] ? kasan_save_track+0x3f/0x80 [ 130.155318][ T7567] ? __kasan_slab_alloc+0x66/0x80 [ 130.155349][ T7567] ? do_syscall_64+0xf3/0x230 [ 130.155378][ T7567] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 130.155398][ T7567] ? __dev_queue_xmit+0x2f9/0x3f60 [ 130.155427][ T7567] ? __pfx___dev_queue_xmit+0x10/0x10 [ 130.155488][ T7567] ? ref_tracker_free+0x63e/0x7e0 [ 130.155514][ T7567] ? __asan_memcpy+0x40/0x70 [ 130.155535][ T7567] ? __pfx_ref_tracker_free+0x10/0x10 [ 130.155580][ T7567] ? skb_clone+0x240/0x390 [ 130.155618][ T7567] ? netlink_deliver_tap+0x2e/0x1b0 [ 130.155651][ T7567] ? netlink_deliver_tap+0x2e/0x1b0 [ 130.155684][ T7567] netlink_unicast+0x7f8/0x9a0 [ 130.155722][ T7567] ? __pfx_netlink_unicast+0x10/0x10 [ 130.155752][ T7567] ? skb_put+0x114/0x1f0 [ 130.155778][ T7567] netlink_sendmsg+0x8c3/0xcd0 [ 130.155824][ T7567] ? __pfx_netlink_sendmsg+0x10/0x10 [ 130.155868][ T7567] ? aa_sock_msg_perm+0x91/0x160 [ 130.155906][ T7567] ? __pfx_netlink_sendmsg+0x10/0x10 [ 130.155936][ T7567] __sock_sendmsg+0x221/0x270 [ 130.155969][ T7567] ____sys_sendmsg+0x523/0x860 [ 130.156003][ T7567] ? __pfx_____sys_sendmsg+0x10/0x10 [ 130.156023][ T7567] ? __fget_files+0x2a/0x420 [ 130.156047][ T7567] ? __fget_files+0x2a/0x420 [ 130.156078][ T7567] __sys_sendmsg+0x271/0x360 [ 130.156107][ T7567] ? __pfx___sys_sendmsg+0x10/0x10 [ 130.156192][ T7567] ? do_syscall_64+0xb6/0x230 [ 130.156222][ T7567] do_syscall_64+0xf3/0x230 [ 130.156249][ T7567] ? clear_bhb_loop+0x45/0xa0 [ 130.156276][ T7567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.156297][ T7567] RIP: 0033:0x7f0f4318d169 [ 130.156317][ T7567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.156335][ T7567] RSP: 002b:00007f0f43f6e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 130.156359][ T7567] RAX: ffffffffffffffda RBX: 00007f0f433a5fa0 RCX: 00007f0f4318d169 [ 130.156375][ T7567] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 000000000000000c [ 130.156389][ T7567] RBP: 00007f0f4320e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 130.156402][ T7567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.156415][ T7567] R13: 0000000000000000 R14: 00007f0f433a5fa0 R15: 00007ffcca4c02f8 [ 130.156448][ T7567] [ 130.682641][ C0] vcan0: j1939_tp_rxtimer: 0xffff888035ef0800: rx timeout, send abort [ 130.690920][ C0] vcan0: j1939_tp_rxtimer: 0xffff888035ef2400: abort rx timeout. Force session deactivation [ 130.729896][ T7567] Mem-Info: [ 130.733153][ T7567] active_anon:4873 inactive_anon:0 isolated_anon:0 [ 130.733153][ T7567] active_file:1115 inactive_file:38314 isolated_file:0 [ 130.733153][ T7567] unevictable:768 dirty:57 writeback:0 [ 130.733153][ T7567] slab_reclaimable:9693 slab_unreclaimable:100383 [ 130.733153][ T7567] mapped:28436 shmem:1434 pagetables:906 [ 130.733153][ T7567] sec_pagetables:0 bounce:0 [ 130.733153][ T7567] kernel_misc_reclaimable:0 [ 130.733153][ T7567] free:1339266 free_pcp:432 free_cma:0 [ 130.781971][ T7567] Node 0 active_anon:19592kB inactive_anon:0kB active_file:4460kB inactive_file:153180kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:113844kB dirty:224kB writeback:0kB shmem:4200kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11024kB pagetables:3724kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 130.815721][ T7567] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 130.847710][ T7567] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 130.881163][ T7567] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 130.887172][ T7567] Node 0 DMA32 free:1432196kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:19628kB inactive_anon:0kB active_file:4460kB inactive_file:153088kB unevictable:1536kB writepending:224kB present:3129332kB managed:2547252kB mlocked:0kB bounce:0kB free_pcp:2116kB local_pcp:1180kB free_cma:0kB [ 130.917960][ T7567] lowmem_reserve[]: 0 0 0 0 0 [ 130.922830][ T7567] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 130.949510][ T7567] lowmem_reserve[]: 0 0 0 0 0 [ 130.954348][ T7567] Node 1 Normal free:3906976kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:64kB local_pcp:32kB free_cma:0kB [ 130.984759][ T7567] lowmem_reserve[]: 0 0 0 0 0 [ 130.989797][ T7567] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 131.002652][ T7567] Node 0 DMA32: 13*4kB (U) 10*8kB (UE) 16*16kB (UME) 23*32kB (UME) 33*64kB (UME) 19*128kB (ME) 17*256kB (UME) 7*512kB (M) 2*1024kB (ME) 5*2048kB (UM) 343*4096kB (UM) = 1430820kB [ 131.020590][ T7567] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 131.032349][ T7567] Node 1 Normal: 198*4kB (UME) 49*8kB (UME) 38*16kB (UME) 213*32kB (UME) 98*64kB (UME) 35*128kB (UME) 12*256kB (UME) 7*512kB (UM) 4*1024kB (UME) 3*2048kB (UE) 945*4096kB (M) = 3906976kB [ 131.051034][ T7567] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 131.060682][ T7567] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 131.070225][ T7567] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 131.081426][ T7567] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 131.090899][ T7567] 40863 total pagecache pages [ 131.095653][ T7567] 0 pages in swap cache [ 131.099834][ T7567] Free swap = 124996kB [ 131.104024][ T7567] Total swap = 124996kB [ 131.108291][ T7567] 2097051 pages RAM [ 131.112119][ T7567] 0 pages HighMem/MovableOnly [ 131.116857][ T7567] 428580 pages reserved [ 131.121031][ T7567] 0 pages cma reserved [ 131.190921][ C0] vcan0: j1939_tp_rxtimer: 0xffff888035ef0800: abort rx timeout. Force session deactivation [ 131.708659][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 132.822886][ T7684] __nla_validate_parse: 6 callbacks suppressed [ 132.822908][ T7684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.517'. [ 132.860024][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.866502][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.897908][ T7685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.517'. [ 133.148575][ T7700] Timeout policy `syz0' can only be used by L3 protocol number 0 [ 133.174166][ T7702] netlink: 80 bytes leftover after parsing attributes in process `syz.2.524'. [ 133.240943][ T7705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.525'. [ 133.278264][ T7705] xt_l2tp: v2 doesn't support IP mode [ 133.391485][ T7711] netlink: 20 bytes leftover after parsing attributes in process `syz.4.528'. [ 133.442738][ T7711] netlink: 12 bytes leftover after parsing attributes in process `syz.4.528'. [ 133.465964][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 133.474000][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 133.521566][ T7720] netlink: 32 bytes leftover after parsing attributes in process `syz.0.530'. [ 134.070118][ T7745] syzkaller0: entered allmulticast mode [ 134.181931][ T7756] tipc: Started in network mode [ 134.199386][ T7756] tipc: Node identity 3660dd99b1a5, cluster identity 4711 [ 134.215496][ T7756] tipc: Enabled bearer , priority 0 [ 134.246884][ T7756] syzkaller0: entered promiscuous mode [ 134.252419][ T7756] syzkaller0: entered allmulticast mode [ 134.295582][ T7756] netlink: 12 bytes leftover after parsing attributes in process `syz.0.544'. [ 134.333784][ T7756] tipc: Resetting bearer [ 134.343919][ T7761] x_tables: duplicate entry at hook 2 [ 134.389203][ T7755] tipc: Resetting bearer [ 134.420784][ T7755] tipc: Disabling bearer [ 134.526146][ T7768] bridge_slave_0: left allmulticast mode [ 134.556119][ T7768] bridge_slave_0: left promiscuous mode [ 134.562936][ T7768] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.576826][ T7776] netlink: 'syz.2.550': attribute type 9 has an invalid length. [ 134.584604][ T7776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.550'. [ 134.650519][ T7768] bridge_slave_1: left allmulticast mode [ 134.668031][ T7768] bridge_slave_1: left promiscuous mode [ 134.673860][ T7768] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.715830][ T7768] bond0: (slave bond_slave_0): Releasing backup interface [ 134.768175][ T7768] bond0: (slave bond_slave_1): Releasing backup interface [ 134.823540][ T7768] team0: Port device team_slave_0 removed [ 134.877419][ T7768] team0: Port device team_slave_1 removed [ 134.884524][ T7768] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.893778][ T7768] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.921496][ T7768] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.943477][ T7768] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.980571][ T7768] batman_adv: batadv0: Removing interface: gretap1 [ 135.236872][ T7799] netlink: 28 bytes leftover after parsing attributes in process `syz.2.558'. [ 135.704982][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 135.716900][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880247bc000: rx timeout, send abort [ 135.726879][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff8880247bc000: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 135.955517][ T7837] netlink: 'syz.4.567': attribute type 1 has an invalid length. [ 135.965895][ T7838] netlink: 'syz.3.565': attribute type 1 has an invalid length. [ 136.630385][ T7863] netlink: 'syz.4.576': attribute type 1 has an invalid length. [ 136.664916][ C0] bridge0: port 3(team0) entered learning state [ 136.762047][ T7867] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 136.802711][ T7867] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 136.853822][ T7867] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 136.877570][ T7867] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 136.959319][ T7882] xt_hashlimit: invalid interval [ 136.989447][ T7867] bond1: (slave geneve2): making interface the new active one [ 137.010039][ T7867] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 137.087629][ T7863] 8021q: adding VLAN 0 to HW filter on device bond1 [ 137.242835][ T7894] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20001 [ 137.569523][ T7892] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.585492][ T7892] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.599746][ T7892] bond0 (unregistering): (slave team0): Releasing backup interface [ 137.640047][ T7892] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 137.669447][ T7892] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 137.680456][ T7892] bond0 (unregistering): Released all slaves [ 137.959508][ T7925] __nla_validate_parse: 6 callbacks suppressed [ 137.959530][ T7925] netlink: 12 bytes leftover after parsing attributes in process `syz.1.592'. [ 137.968681][ T7922] netlink: 'syz.0.590': attribute type 24 has an invalid length. [ 138.287156][ T7942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.595'. [ 138.300738][ T3570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.308024][ T7942] sch_fq: defrate 0 ignored. [ 138.313439][ T3570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.466997][ T7947] net_ratelimit: 10 callbacks suppressed [ 138.467030][ T7947] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.486234][ T7947] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.616597][ T7954] netlink: 36 bytes leftover after parsing attributes in process `syz.3.599'. [ 138.777453][ T7961] skbuff: bad partial csum: csum=65506/2 headroom=178 headlen=65526 [ 138.969710][ T7972] Cannot find del_set index 3 as target [ 138.990561][ T7965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.604'. [ 139.041919][ T7965] macsec0: entered promiscuous mode [ 139.752927][ T8000] netlink: 'syz.3.617': attribute type 1 has an invalid length. [ 139.770440][ T8000] netlink: 'syz.3.617': attribute type 1 has an invalid length. [ 140.634231][ T8011] netlink: 'syz.1.619': attribute type 11 has an invalid length. [ 140.665921][ T8011] netlink: 224 bytes leftover after parsing attributes in process `syz.1.619'. [ 140.688533][ T8018] netlink: 'syz.1.619': attribute type 3 has an invalid length. [ 140.731273][ T8018] netlink: 9 bytes leftover after parsing attributes in process `syz.1.619'. [ 141.118070][ T8037] netlink: 'syz.2.630': attribute type 4 has an invalid length. [ 141.330585][ T8047] netlink: 12 bytes leftover after parsing attributes in process `syz.4.633'. [ 141.383647][ T8053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.634'. [ 141.491568][ T8057] netlink: 28 bytes leftover after parsing attributes in process `syz.2.635'. [ 141.501758][ T8057] netlink: 28 bytes leftover after parsing attributes in process `syz.2.635'. [ 142.370554][ T8095] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 142.607359][ T8107] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 142.651161][ T8108] netlink: 'syz.0.653': attribute type 1 has an invalid length. [ 142.743588][ T8116] netlink: 'syz.1.658': attribute type 1 has an invalid length. [ 142.812071][ T8116] 8021q: adding VLAN 0 to HW filter on device bond3 [ 142.864424][ T8123] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:20002 [ 142.895709][ T8119] 8021q: adding VLAN 0 to HW filter on device bond3 [ 142.903984][ T8119] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 142.917349][ T8119] bond3: (slave wireguard0): Error -95 calling set_mac_address [ 142.978295][ T8127] __nla_validate_parse: 1 callbacks suppressed [ 142.978320][ T8127] netlink: 72 bytes leftover after parsing attributes in process `syz.3.661'. [ 143.030095][ T8130] netlink: 'syz.2.662': attribute type 25 has an invalid length. [ 143.139106][ T8133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.663'. [ 143.285939][ T8139] netlink: 28 bytes leftover after parsing attributes in process `syz.2.665'. [ 143.505512][ T8155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.669'. [ 143.513637][ T8153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.669'. [ 143.523370][ T8157] netlink: 'syz.2.670': attribute type 21 has an invalid length. [ 143.536071][ T8157] netlink: 132 bytes leftover after parsing attributes in process `syz.2.670'. [ 143.555016][ T8155] netlink: 16 bytes leftover after parsing attributes in process `syz.1.669'. [ 143.585817][ T8159] netlink: 20 bytes leftover after parsing attributes in process `syz.3.671'. [ 143.599285][ T8153] netlink: 16 bytes leftover after parsing attributes in process `syz.1.669'. [ 143.814457][ T8171] netlink: 204 bytes leftover after parsing attributes in process `syz.2.675'. [ 144.129170][ T8177] netlink: 'syz.4.677': attribute type 21 has an invalid length. [ 144.149969][ T8177] netlink: 'syz.4.677': attribute type 20 has an invalid length. [ 144.195326][ T8177] IPv6: NLM_F_CREATE should be specified when creating new route [ 144.221272][ T8181] SET target dimension over the limit! [ 144.232753][ T8180] openvswitch: netlink: Flow actions attr not present in new flow. [ 144.385469][ T8190] netlink: 'syz.3.681': attribute type 10 has an invalid length. [ 144.441471][ T8190] team0: Port device geneve0 added [ 144.472627][ T5841] block nbd2: Receive control failed (result -32) [ 144.745630][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 144.805616][ T8219] sctp: [Deprecated]: syz.2.691 (pid 8219) Use of int in max_burst socket option deprecated. [ 144.805616][ T8219] Use struct sctp_assoc_value instead [ 144.874453][ T8223] netlink: 'syz.3.692': attribute type 5 has an invalid length. [ 145.028469][ T8225] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 145.372243][ T8248] trusted_key: syz.4.701 sent an empty control message without MSG_MORE. [ 145.445952][ T8252] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 145.617087][ T8261] netlink: 'syz.3.704': attribute type 13 has an invalid length. [ 145.834558][ T8273] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 145.848863][ T8273] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 145.903785][ T8275] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 146.355697][ T8292] ip6erspan0: entered promiscuous mode [ 146.372035][ T8292] x_tables: unsorted entry at hook 2 [ 146.982170][ T8331] netlink: 'syz.1.728': attribute type 1 has an invalid length. [ 147.066908][ T8337] unsupported nlmsg_type 40 [ 147.130518][ T8344] xt_TCPMSS: Only works on TCP SYN packets [ 147.430888][ T8360] netlink: 'syz.4.735': attribute type 1 has an invalid length. [ 147.453038][ T8360] netlink: 'syz.4.735': attribute type 2 has an invalid length. [ 147.721195][ T8368] netlink: 'syz.4.740': attribute type 1 has an invalid length. [ 147.850371][ T8376] Driver unsupported XDP return value 0 on prog (id 243) dev N/A, expect packet loss! [ 148.242573][ T8404] __nla_validate_parse: 13 callbacks suppressed [ 148.242595][ T8404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.750'. [ 148.258774][ T8404] netlink: 24 bytes leftover after parsing attributes in process `syz.0.750'. [ 148.295657][ T8404] netlink: 24 bytes leftover after parsing attributes in process `syz.0.750'. [ 148.458321][ T8411] netlink: 68 bytes leftover after parsing attributes in process `syz.2.754'. [ 148.470254][ T8411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.754'. [ 148.485856][ T8411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.754'. [ 148.825018][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.832337][ C0] bridge0: topology change detected, propagating [ 148.839155][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.846437][ C0] bridge0: topology change detected, propagating [ 148.963941][ T8433] sctp: [Deprecated]: syz.3.760 (pid 8433) Use of struct sctp_assoc_value in delayed_ack socket option. [ 148.963941][ T8433] Use struct sctp_sack_info instead [ 149.082447][ T8433] unknown channel width for channel at 909000KHz? [ 149.108670][ T8435] netlink: 24 bytes leftover after parsing attributes in process `syz.1.761'. [ 149.157807][ T8435] netlink: 44 bytes leftover after parsing attributes in process `syz.1.761'. [ 149.206136][ T8439] netlink: 'syz.4.763': attribute type 12 has an invalid length. [ 149.289461][ T8440] netlink: 'syz.1.761': attribute type 11 has an invalid length. [ 149.301664][ T8440] netlink: 228 bytes leftover after parsing attributes in process `syz.1.761'. [ 149.601947][ T8459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.770'. [ 149.914005][ T8477] IPVS: set_ctl: invalid protocol: 94 172.30.1.1:20001 [ 149.991142][ T8465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.086010][ T8465] bridge0: port 3(bond0) entered blocking state [ 150.120186][ T8465] bridge0: port 3(bond0) entered disabled state [ 150.143608][ T8465] bond0: entered allmulticast mode [ 150.157921][ T8465] bond0: entered promiscuous mode [ 150.172586][ T8465] bridge0: port 3(bond0) entered blocking state [ 150.179254][ T8465] bridge0: port 3(bond0) entered forwarding state [ 150.221902][ T13] bridge0: port 3(bond0) entered disabled state [ 150.294230][ T8494] x_tables: unsorted underflow at hook 4 [ 150.679732][ T8511] gretap0: entered promiscuous mode [ 151.172068][ T8535] syzkaller1: entered promiscuous mode [ 151.178358][ T8535] syzkaller1: entered allmulticast mode [ 151.206054][ T8545] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 151.371019][ T8551] xt_CT: You must specify a L4 protocol and not use inversions on it [ 151.774555][ T8565] bridge_slave_0: left allmulticast mode [ 151.775185][ T8567] x_tables: duplicate underflow at hook 1 [ 151.811715][ T8565] bridge_slave_0: left promiscuous mode [ 151.831647][ T8565] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.025074][ C0] bridge0: port 3(team0) entered forwarding state [ 152.031577][ C0] bridge0: topology change detected, propagating [ 153.810487][ T8565] bridge_slave_1: left allmulticast mode [ 153.819378][ T8565] bridge_slave_1: left promiscuous mode [ 153.835308][ T8565] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.092833][ T8565] team0: Port device team_slave_0 removed [ 154.113501][ T8565] team0: Port device team_slave_1 removed [ 154.121842][ T8565] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.130553][ T8565] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.143836][ T8565] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.151808][ T8565] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.168061][ T8565] bond0: left allmulticast mode [ 154.172952][ T8565] bond0: left promiscuous mode [ 154.178474][ T8565] bridge0: port 3(bond0) entered disabled state [ 154.208067][ T8573] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 154.667033][ T8606] __nla_validate_parse: 3 callbacks suppressed [ 154.667055][ T8606] netlink: 4 bytes leftover after parsing attributes in process `syz.4.816'. [ 155.444592][ T8650] netlink: 72 bytes leftover after parsing attributes in process `syz.0.826'. [ 155.562364][ T8655] netlink: 28 bytes leftover after parsing attributes in process `syz.1.831'. [ 155.673176][ T8662] netlink: 'syz.0.832': attribute type 27 has an invalid length. [ 155.728829][ T8668] netlink: 'syz.2.834': attribute type 10 has an invalid length. [ 155.766645][ T8668] netlink: 40 bytes leftover after parsing attributes in process `syz.2.834'. [ 155.796845][ T8668] dummy0: entered promiscuous mode [ 155.818561][ T8672] netlink: 4 bytes leftover after parsing attributes in process `syz.4.833'. [ 155.849452][ T8668] bridge0: port 1(dummy0) entered blocking state [ 155.890126][ T8668] bridge0: port 1(dummy0) entered disabled state [ 155.921542][ T8668] dummy0: entered allmulticast mode [ 155.970402][ T8668] bridge0: port 1(dummy0) entered blocking state [ 155.976994][ T8668] bridge0: port 1(dummy0) entered forwarding state [ 156.018332][ T8680] netlink: 36 bytes leftover after parsing attributes in process `syz.1.837'. [ 156.130056][ T8687] netlink: 4 bytes leftover after parsing attributes in process `syz.4.838'. [ 156.184774][ T8687] netlink: 4 bytes leftover after parsing attributes in process `syz.4.838'. [ 156.224432][ T8687] netlink: 'syz.4.838': attribute type 3 has an invalid length. [ 156.282659][ T8687] xt_TCPMSS: Only works on TCP SYN packets [ 156.504421][ T8702] netlink: 16 bytes leftover after parsing attributes in process `syz.3.844'. [ 156.508540][ T8699] bond0: entered promiscuous mode [ 156.531378][ T8699] bond_slave_0: entered promiscuous mode [ 156.541738][ T8699] bond_slave_1: entered promiscuous mode [ 156.556996][ T8699] batadv0: entered promiscuous mode [ 156.575761][ T8699] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 156.617156][ T8712] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 4, id = 0 [ 156.642214][ T8711] netlink: 108 bytes leftover after parsing attributes in process `syz.2.849'. [ 156.829611][ T8729] syz_tun: entered allmulticast mode [ 157.033580][ T8732] syzkaller0: entered promiscuous mode [ 157.085608][ T8732] syzkaller0: entered allmulticast mode [ 159.032260][ T8729] syz_tun: left allmulticast mode [ 159.107249][ T8777] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.116852][ T8777] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.126016][ T8777] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.134741][ T8777] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.160022][ T8777] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.169072][ T8777] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.178036][ T8777] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.186951][ T8777] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.439259][ T8802] netlink: 'syz.0.874': attribute type 4 has an invalid length. [ 159.500132][ T8807] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 159.712515][ T8807] 8021q: adding VLAN 0 to HW filter on device bond2 [ 160.043980][ T8842] __nla_validate_parse: 11 callbacks suppressed [ 160.044002][ T8842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.884'. [ 160.309855][ T8859] netlink: 'syz.4.889': attribute type 3 has an invalid length. [ 160.350853][ T8859] netlink: 32 bytes leftover after parsing attributes in process `syz.4.889'. [ 160.395712][ T8860] netlink: 'syz.2.888': attribute type 10 has an invalid length. [ 160.403753][ T8859] netlink: 40 bytes leftover after parsing attributes in process `syz.4.889'. [ 160.429525][ T8859] netlink: 40 bytes leftover after parsing attributes in process `syz.4.889'. [ 160.470983][ T8860] bridge0: port 2(team0) entered blocking state [ 160.481885][ T8860] bridge0: port 2(team0) entered disabled state [ 160.527370][ T8860] team0: entered allmulticast mode [ 160.564151][ T8860] team0: entered promiscuous mode [ 160.681497][ T8883] x_tables: duplicate underflow at hook 2 [ 160.729329][ T8883] netlink: 504 bytes leftover after parsing attributes in process `syz.2.895'. [ 160.843623][ T8886] sctp: [Deprecated]: syz.1.897 (pid 8886) Use of struct sctp_assoc_value in delayed_ack socket option. [ 160.843623][ T8886] Use struct sctp_sack_info instead [ 160.882765][ T8886] sctp: [Deprecated]: syz.1.897 (pid 8886) Use of struct sctp_assoc_value in delayed_ack socket option. [ 160.882765][ T8886] Use struct sctp_sack_info instead [ 160.927492][ T8891] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 160.936789][ T8891] netlink: 'syz.0.898': attribute type 1 has an invalid length. [ 161.038086][ T8894] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 161.047661][ T8891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.898'. [ 161.057766][ T8891] netlink: 24 bytes leftover after parsing attributes in process `syz.0.898'. [ 161.110464][ T8894] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 161.130142][ T8894] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 161.146580][ T8894] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 161.188683][ T8894] bond1: (slave geneve2): making interface the new active one [ 161.246355][ T8894] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 161.303136][ T8891] 8021q: adding VLAN 0 to HW filter on device bond1 [ 161.335829][ T8907] netlink: 4388 bytes leftover after parsing attributes in process `syz.1.904'. [ 161.522474][ T8914] netlink: 'syz.4.905': attribute type 1 has an invalid length. [ 162.086176][ T8946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.917'. [ 162.123234][ T8946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.917'. [ 162.463517][ T8970] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 162.477655][ T8967] veth5: entered allmulticast mode [ 162.489524][ T8971] netlink: 'syz.1.924': attribute type 49 has an invalid length. [ 162.532907][ T8973] xt_l2tp: missing protocol rule (udp|l2tpip) [ 162.669256][ T8977] delete_channel: no stack [ 163.184359][ T9003] macvlan2: entered promiscuous mode [ 163.658422][ T9030] x_tables: duplicate underflow at hook 2 [ 163.665602][ T9033] x_tables: duplicate underflow at hook 2 [ 164.413784][ T9069] tunl0: entered promiscuous mode [ 164.422305][ T9069] netlink: 'syz.0.956': attribute type 3 has an invalid length. [ 164.489926][ T9072] xt_CT: You must specify a L4 protocol and not use inversions on it [ 164.785882][ T9084] openvswitch: netlink: Actions may not be safe on all matching packets [ 164.854761][ T9087] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 165.064269][ T9103] __nla_validate_parse: 16 callbacks suppressed [ 165.064290][ T9103] netlink: 204 bytes leftover after parsing attributes in process `syz.2.967'. [ 165.590312][ T9127] netlink: 852 bytes leftover after parsing attributes in process `syz.4.973'. [ 165.624158][ T9130] bridge0: port 1(dummy0) entered disabled state [ 165.693130][ T9127] netlink: 'syz.4.973': attribute type 1 has an invalid length. [ 165.742977][ T9127] netlink: 244 bytes leftover after parsing attributes in process `syz.4.973'. [ 165.821038][ T9135] openvswitch: netlink: Message has 736 unknown bytes. [ 165.857182][ T9107] SET target dimension over the limit! [ 166.023290][ T9146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 166.054282][ T9146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.104140][ T9148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.980'. [ 166.592972][ T9175] netlink: 24 bytes leftover after parsing attributes in process `syz.0.987'. [ 167.653673][ T9166] veth0: entered promiscuous mode [ 167.667277][ T9170] veth0: left promiscuous mode [ 167.912339][ T9187] IPv6: NLM_F_CREATE should be specified when creating new route [ 167.981271][ T9194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.990'. [ 168.762452][ T9222] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1001'. [ 168.945728][ T9238] netlink: 'syz.2.1004': attribute type 2 has an invalid length. [ 169.077603][ T9241] netlink: 'syz.4.1005': attribute type 20 has an invalid length. [ 169.098387][ T9241] netlink: 34 bytes leftover after parsing attributes in process `syz.4.1005'. [ 169.881844][ T9272] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1014'. [ 170.084718][ T9283] netlink: 'syz.2.1017': attribute type 1 has an invalid length. [ 170.275406][ T9294] netlink: 'syz.1.1020': attribute type 4 has an invalid length. [ 170.289623][ T9295] x_tables: duplicate underflow at hook 2 [ 170.457159][ T9302] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1023'. [ 170.477195][ T9302] ip6gretap0: entered promiscuous mode [ 170.525185][ T9302] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1023'. [ 170.573890][ T9314] netlink: 'syz.2.1027': attribute type 2 has an invalid length. [ 170.692834][ T9319] ip6t_srh: unknown srh invflags 5F00 [ 170.698653][ T9320] ip6t_srh: unknown srh invflags 5F00 [ 170.718429][ T9322] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 170.902495][ T9331] x_tables: duplicate underflow at hook 1 [ 170.909558][ T9331] x_tables: duplicate underflow at hook 1 [ 170.983537][ T9335] netlink: 'syz.1.1035': attribute type 8 has an invalid length. [ 171.277815][ T9349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1041'. [ 171.288736][ T9349] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 171.342469][ T9346] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1040'. [ 171.447393][ T9356] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1043'. [ 171.715138][ T9363] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1045'. [ 173.040298][ T9373] tipc: Started in network mode [ 173.045838][ T9373] tipc: Node identity , cluster identity 4711 [ 173.051933][ T9373] tipc: Failed to set node id, please configure manually [ 173.059789][ T9373] tipc: Enabling of bearer rejected, failed to enable media [ 173.335517][ T9393] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 173.411387][ T9398] atomic_op ffff88805c444998 conn xmit_atomic 0000000000000000 [ 173.457464][ T9401] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 173.605557][ T9412] tipc: Started in network mode [ 173.610586][ T9412] tipc: Node identity 92072471abe2, cluster identity 4711 [ 173.652280][ T9412] tipc: Enabled bearer , priority 0 [ 173.693001][ T9422] syzkaller0: entered promiscuous mode [ 173.727005][ T9422] syzkaller0: entered allmulticast mode [ 173.773363][ T9412] tipc: Resetting bearer [ 173.792105][ T9407] tipc: Resetting bearer [ 173.836545][ T9407] tipc: Disabling bearer [ 173.990770][ T9428] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1065'. [ 174.023943][ T9428] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1065'. [ 174.215950][ T9436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1068'. [ 174.246864][ T9445] IPv6: addrconf: prefix option has invalid lifetime [ 174.260594][ T9437] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1068'. [ 174.682400][ T9458] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 174.759476][ T9458] bond3: entered promiscuous mode [ 174.769389][ T9458] bond3: entered allmulticast mode [ 174.775173][ T9458] 8021q: adding VLAN 0 to HW filter on device bond3 [ 174.780782][ T9466] netlink: 'syz.3.1075': attribute type 3 has an invalid length. [ 175.282090][ T9485] xt_cluster: you have exceeded the maximum number of cluster nodes (768 > 32) [ 175.442854][ T9494] xt_cgroup: xt_cgroup: no path or classid specified [ 175.492865][ T9494] xt_cgroup: xt_cgroup: no path or classid specified [ 175.655974][ T9510] netlink: 'syz.4.1090': attribute type 11 has an invalid length. [ 175.683512][ T9510] __nla_validate_parse: 7 callbacks suppressed [ 175.683531][ T9510] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1090'. [ 175.775782][ T9513] netlink: 872 bytes leftover after parsing attributes in process `syz.3.1091'. [ 175.885694][ T9520] x_tables: duplicate underflow at hook 2 [ 176.456288][ T9555] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 176.912287][ T9579] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 177.524640][ T9611] netlink: 'syz.3.1121': attribute type 3 has an invalid length. [ 177.780605][ T9627] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1126'. [ 178.023372][ T9644] tipc: Enabling of bearer rejected, failed to enable media [ 178.068157][ T9644] vlan2: entered promiscuous mode [ 178.073262][ T9644] bridge0: entered promiscuous mode [ 178.079972][ T9644] vlan2: entered allmulticast mode [ 178.086268][ T9644] bridge0: entered allmulticast mode [ 178.522585][ T9674] netlink: 668 bytes leftover after parsing attributes in process `syz.4.1141'. [ 178.536104][ T9674] netlink: 668 bytes leftover after parsing attributes in process `syz.4.1141'. [ 178.549988][ T9674] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1141'. [ 178.578671][ T9670] syz_tun: entered allmulticast mode [ 178.636470][ T9671] syz_tun: left allmulticast mode [ 178.736276][ T9681] syzkaller1: entered promiscuous mode [ 178.741815][ T9681] syzkaller1: entered allmulticast mode [ 178.933755][ T9696] unknown channel width for channel at 909000KHz? [ 178.941463][ T9694] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 179.191894][ T9707] netlink: 'syz.3.1151': attribute type 12 has an invalid length. [ 179.216818][ T9710] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 180.680529][ T9714] tipc: Enabled bearer , priority 0 [ 180.685774][ T9703] syz.3.1151 (9703) used greatest stack depth: 17432 bytes left [ 180.793246][ T9716] syzkaller0: entered promiscuous mode [ 180.799485][ T9716] syzkaller0: entered allmulticast mode [ 180.808249][ T9716] tipc: Resetting bearer [ 180.863609][ T13] tipc: Resetting bearer [ 180.872674][ T9710] tipc: Resetting bearer [ 180.894610][ T9742] Cannot find add_set index 65534 as target [ 181.718475][ T5992] tipc: Node number set to 2277891481 [ 182.005762][ T9710] tipc: Disabling bearer [ 182.156177][ T9748] netlink: 'syz.3.1162': attribute type 21 has an invalid length. [ 182.164062][ T9748] IPv6: NLM_F_CREATE should be specified when creating new route [ 182.173171][ T9749] netlink: 'syz.3.1162': attribute type 21 has an invalid length. [ 182.182821][ T9748] netlink: 'syz.3.1162': attribute type 4 has an invalid length. [ 182.247614][ T9749] netlink: 'syz.3.1162': attribute type 4 has an invalid length. [ 182.670695][ T9777] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1170'. [ 182.782722][ T9782] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1172'. [ 182.871281][ T9787] openvswitch: netlink: Actions may not be safe on all matching packets [ 182.940270][ T9793] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1174'. [ 182.990221][ T9793] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 183.338071][ T9817] lo: entered promiscuous mode [ 183.369811][ T9817] gre0: entered promiscuous mode [ 183.392091][ T9821] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1183'. [ 183.424448][ T9817] gretap0: entered promiscuous mode [ 183.473540][ T9817] erspan0: entered promiscuous mode [ 183.500392][ T9817] ip_vti0: entered promiscuous mode [ 183.524266][ T9817] ip6_vti0: entered promiscuous mode [ 183.548258][ T9817] sit0: entered promiscuous mode [ 183.569410][ T9817] ip6tnl0: entered promiscuous mode [ 183.579455][ T9817] ip6gre0: entered promiscuous mode [ 183.592697][ T9817] syz_tun: entered promiscuous mode [ 183.606489][ T9817] vcan0: entered promiscuous mode [ 183.616534][ T9817] bond0: entered promiscuous mode [ 183.621655][ T9817] bond_slave_0: entered promiscuous mode [ 183.628545][ T9817] bond_slave_1: entered promiscuous mode [ 183.634329][ T9817] batadv0: entered promiscuous mode [ 183.644216][ T9817] team0: entered promiscuous mode [ 183.649461][ T9817] team_slave_0: entered promiscuous mode [ 183.655602][ T9817] team_slave_1: entered promiscuous mode [ 183.667592][ T9817] dummy0: entered promiscuous mode [ 183.678470][ T9817] nlmon0: entered promiscuous mode [ 183.686043][ T9817] caif0: entered promiscuous mode [ 183.692584][ T9817] vxcan0: entered promiscuous mode [ 183.700846][ T9817] vxcan1: entered promiscuous mode [ 183.708809][ T9817] veth0: entered promiscuous mode [ 183.720308][ T9817] veth1: entered promiscuous mode [ 183.729595][ T9817] wg1: entered promiscuous mode [ 183.737679][ T9817] wg2: entered promiscuous mode [ 183.744497][ T9817] veth0_to_bridge: entered promiscuous mode [ 183.758953][ T9837] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1188'. [ 183.761181][ T9817] bridge_slave_0: entered promiscuous mode [ 183.778036][ T9817] veth1_to_bridge: entered promiscuous mode [ 183.790140][ T9817] bridge_slave_1: entered promiscuous mode [ 183.798605][ T9817] veth0_to_bond: entered promiscuous mode [ 183.817494][ T9817] veth1_to_bond: entered promiscuous mode [ 183.829618][ T9817] veth0_to_team: entered promiscuous mode [ 183.840739][ T9817] veth1_to_team: entered promiscuous mode [ 183.852922][ T9817] veth0_to_batadv: entered promiscuous mode [ 183.862541][ T9817] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.871756][ T9817] batadv_slave_0: entered promiscuous mode [ 183.880765][ T9817] veth1_to_batadv: entered promiscuous mode [ 183.892549][ T9817] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.900706][ T9817] batadv_slave_1: entered promiscuous mode [ 183.912023][ T9817] xfrm0: entered promiscuous mode [ 183.921966][ T9817] veth0_to_hsr: entered promiscuous mode [ 183.933596][ T9817] veth1_to_hsr: entered promiscuous mode [ 183.944735][ T9817] hsr0: entered promiscuous mode [ 183.955562][ T9817] veth1_virt_wifi: entered promiscuous mode [ 183.964359][ T9817] veth0_virt_wifi: entered promiscuous mode [ 183.971362][ T9817] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 183.992874][ T9817] vlan0: entered promiscuous mode [ 183.999164][ T9817] vlan1: entered promiscuous mode [ 184.005723][ T9817] macvlan0: entered promiscuous mode [ 184.017145][ T9817] macvlan1: entered promiscuous mode [ 184.031131][ T9817] ipvlan0: entered promiscuous mode [ 184.038605][ T9817] ipvlan1: entered promiscuous mode [ 184.047401][ T9817] veth0_macvtap: entered promiscuous mode [ 184.053283][ T9817] macvtap0: entered promiscuous mode [ 184.063750][ T9817] geneve0: entered promiscuous mode [ 184.072288][ T9817] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.081440][ T9817] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.090468][ T9817] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.100033][ T9817] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.111657][ T9817] geneve1: entered promiscuous mode [ 184.122541][ T9817] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 184.132491][ T9817] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 184.147517][ T9817] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 184.157805][ T9817] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 184.181096][ T9817] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 184.208455][ T9817] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 184.223369][ T9817] bond1: left allmulticast mode [ 184.229806][ T9817] gtp0: left allmulticast mode [ 184.241563][ T9817] gre1: entered promiscuous mode [ 184.275830][ T9817] bridge1: entered promiscuous mode [ 184.281320][ T9817] vxcan2: entered promiscuous mode [ 184.287618][ T9817] vxcan3: entered promiscuous mode [ 184.293016][ T9817] syztnl0: entered promiscuous mode [ 184.300604][ T9817] gre2: entered promiscuous mode [ 184.307064][ T9817] bond2: entered promiscuous mode [ 184.312772][ T9817] macsec1: entered promiscuous mode [ 184.319862][ T9817] bond3: entered promiscuous mode [ 184.325430][ T9817] bond4: entered promiscuous mode [ 184.332289][ T9817] bridge2: entered promiscuous mode [ 184.343828][ T9817] bridge3: entered promiscuous mode [ 184.354466][ T9817] bond5: entered promiscuous mode [ 184.370539][ T9823] syzkaller1: entered promiscuous mode [ 184.376857][ T9823] syzkaller1: entered allmulticast mode [ 184.938853][ T9865] bond0: (slave batadv0): Releasing backup interface [ 184.956351][ T9865] bond0: (slave bond_slave_0): Releasing backup interface [ 184.975352][ T9865] bond0: (slave bond_slave_1): Releasing backup interface [ 185.027917][ T9865] team0: Port device team_slave_0 removed [ 185.041209][ T9865] team0: Port device team_slave_1 removed [ 185.052174][ T9865] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.061021][ T9865] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.070975][ T9870] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 186.360733][ T9937] netlink: 'syz.4.1221': attribute type 13 has an invalid length. [ 186.486128][ T9943] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 186.716815][ T9954] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 186.752731][ T9954] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 186.782255][ T5847] Bluetooth: hci4: link tx timeout [ 186.789331][ T5847] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 187.205741][ T9976] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1234'. [ 187.219864][ T9976] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1234'. [ 187.234486][ T9976] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1234'. [ 187.544136][ T9992] ip6t_srh: unknown srh invflags 5F00 [ 187.640437][ T9997] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1240'. [ 187.981121][T10011] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 188.069772][T10011] vlan0: entered promiscuous mode [ 188.122691][T10011] bridge_slave_0: entered promiscuous mode [ 188.122951][T10018] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1245'. [ 188.132159][T10011] vlan0: entered allmulticast mode [ 188.160364][T10011] bridge_slave_0: entered allmulticast mode [ 188.239799][ T30] audit: type=1107 audit(1744100561.103:2): pid=10020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='=}m08 &>ԁ L6J[|Ohfҭ;' [ 188.710867][T10040] xt_policy: output policy not valid in PREROUTING and INPUT [ 188.805469][T10044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1256'. [ 188.824113][T10047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1256'. [ 188.835342][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 188.952624][T10053] 8021q: adding VLAN 0 to HW filter on device bond2 [ 188.963156][T10053] bond2: entered promiscuous mode [ 188.972534][T10053] bond0: (slave bond2): Enslaving as an active interface with an up link [ 189.140853][T10060] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1260'. [ 189.185910][T10061] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1260'. [ 189.351914][T10069] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 189.398734][T10069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1262'. [ 190.261752][T10112] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1273'. [ 190.272125][T10112] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 190.555670][T10114] Bluetooth: MGMT ver 1.23 [ 190.882545][T10116] tipc: New replicast peer: 0.0.0.0 [ 190.898929][T10116] tipc: Enabled bearer , priority 10 [ 190.916389][ T5847] Bluetooth: hci4: command 0x0405 tx timeout [ 190.926052][T10117] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 191.362565][ T9908] Set syz1 is full, maxelem 65536 reached [ 191.493707][T10139] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1283'. [ 192.015009][ T5992] tipc: Node number set to 971318385 [ 192.041993][T10131] Bluetooth: hci1: Opcode 0x080f failed: -4 [ 192.149807][T10160] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1288'. [ 192.932404][T10182] netlink: 'syz.0.1298': attribute type 7 has an invalid length. [ 193.060247][T10187] netlink: 'syz.4.1299': attribute type 10 has an invalid length. [ 193.083086][T10187] syz_tun: entered promiscuous mode [ 193.103721][T10187] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 193.314371][ T5847] Bluetooth: hci1: command 0x080f tx timeout [ 193.597816][T10213] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1310'. [ 193.615312][T10213] netlink: 'syz.0.1310': attribute type 7 has an invalid length. [ 193.631695][T10213] netlink: 'syz.0.1310': attribute type 8 has an invalid length. [ 193.655781][T10213] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1310'. [ 193.691483][T10216] netlink: 'syz.4.1311': attribute type 10 has an invalid length. [ 193.702822][T10220] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1312'. [ 193.779216][T10223] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1312'. [ 193.842706][T10223] nbd: device at index 64 is going down [ 193.906886][T10227] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.216827][T10251] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1319'. [ 194.274660][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.281545][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.306874][T10256] netlink: 'syz.2.1320': attribute type 29 has an invalid length. [ 194.311643][T10247] netlink: 'syz.0.1318': attribute type 5 has an invalid length. [ 194.325394][T10256] netlink: 'syz.2.1320': attribute type 29 has an invalid length. [ 194.341205][T10247] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1318'. [ 194.549138][T10268] tipc: Enabling of bearer rejected, failed to enable media [ 194.811465][T10281] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1328'. [ 194.822981][T10280] netlink: 'syz.4.1329': attribute type 1 has an invalid length. [ 194.836868][T10281] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1328'. [ 194.867585][T10280] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1329'. [ 194.971438][T10295] netlink: 'syz.0.1332': attribute type 12 has an invalid length. [ 195.021416][T10295] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1332'. [ 195.086932][T10299] pimreg: entered allmulticast mode [ 195.095047][T10299] pimreg: left allmulticast mode [ 195.221115][T10311] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 195.228453][T10311] IPv6: NLM_F_CREATE should be set when creating new route [ 195.235931][T10311] IPv6: NLM_F_CREATE should be set when creating new route [ 195.243193][T10311] IPv6: NLM_F_CREATE should be set when creating new route [ 195.253710][T10310] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 195.574007][T10321] veth7: entered promiscuous mode [ 195.586517][T10321] bond3: (slave veth7): Enslaving as a backup interface with a down link [ 195.714483][T10342] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 197.258166][T10427] team0: left allmulticast mode [ 197.263810][T10427] team_slave_0: left allmulticast mode [ 197.270122][T10427] team_slave_1: left allmulticast mode [ 197.278475][T10427] team0: left promiscuous mode [ 197.283398][T10427] team_slave_0: left promiscuous mode [ 197.291193][T10427] team_slave_1: left promiscuous mode [ 197.298307][T10427] bridge0: port 3(team0) entered disabled state [ 197.318112][T10427] bridge_slave_0: left allmulticast mode [ 197.343581][T10427] bridge_slave_0: left promiscuous mode [ 197.379722][T10427] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.462685][T10427] bridge_slave_1: left allmulticast mode [ 197.490612][T10427] bridge_slave_1: left promiscuous mode [ 197.499758][T10427] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.519748][T10427] bond0: (slave bond_slave_0): Releasing backup interface [ 197.543531][T10427] bond0: (slave bond_slave_1): Releasing backup interface [ 197.577197][T10427] team0: Port device team_slave_0 removed [ 197.606146][T10427] team0: Port device team_slave_1 removed [ 197.621626][T10427] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.629969][T10427] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.641055][T10427] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.649449][T10427] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.668135][T10427] bond1: (slave geneve2): Releasing active interface [ 197.680358][T10427] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 197.694534][T10427] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 197.709384][T10427] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 197.718831][T10427] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 197.943272][T10459] validate_nla: 8 callbacks suppressed [ 197.943295][T10459] netlink: 'syz.4.1374': attribute type 10 has an invalid length. [ 198.411536][T10490] netlink: 'syz.4.1383': attribute type 12 has an invalid length. [ 198.433470][T10491] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 198.450999][T10491] netlink: 'syz.0.1382': attribute type 3 has an invalid length. [ 198.622545][T10499] xt_CT: You must specify a L4 protocol and not use inversions on it [ 198.723777][T10503] xt_CT: You must specify a L4 protocol and not use inversions on it [ 198.783769][T10505] __nla_validate_parse: 14 callbacks suppressed [ 198.783783][T10505] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1388'. [ 198.868119][T10507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1389'. [ 198.932392][T10513] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1391'. [ 198.951275][T10514] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1391'. [ 199.092276][T10522] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1394'. [ 199.101410][T10523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1392'. [ 199.101446][T10523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1392'. [ 199.353833][ T5893] IPVS: starting estimator thread 0... [ 199.388185][T10529] geneve3: entered promiscuous mode [ 199.418910][T10529] geneve3: entered allmulticast mode [ 199.475302][T10531] IPVS: using max 30 ests per chain, 72000 per kthread [ 199.540179][T10537] netlink: 'syz.2.1398': attribute type 2 has an invalid length. [ 199.564391][T10537] netlink: 'syz.2.1398': attribute type 9 has an invalid length. [ 199.606893][T10537] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1398'. [ 199.779353][T10546] bridge_slave_1: left allmulticast mode [ 199.825255][T10546] bridge_slave_1: left promiscuous mode [ 199.869228][T10549] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1400'. [ 199.917772][T10546] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.980409][T10550] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1401'. [ 199.981813][T10546] bridge_slave_0: left allmulticast mode [ 200.020898][T10546] bridge_slave_0: left promiscuous mode [ 200.035338][T10546] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.140368][T10557] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 200.771928][T10586] IPv6: sit1: Disabled Multicast RS [ 200.814630][T10586] sit1: entered allmulticast mode [ 201.407346][T10617] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 201.439178][T10611] netlink: 'syz.4.1416': attribute type 5 has an invalid length. [ 201.861376][ T30] audit: type=1800 audit(1744100574.733:3): pid=10643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1422" name=4ADFE2251154658F2122D7375950231A63E12412618C75EFD66DC3C123B3ACDEBF6378DB453FFCA1B351C96275D2888EC598CEDA347664 dev="tmpfs" ino=1501 res=0 errno=0 [ 202.103323][T10648] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 202.112843][T10648] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 202.176982][T10657] tipc: Trying to set illegal importance in message [ 202.881530][T10686] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 202.924182][T10686] netlink: 'syz.4.1436': attribute type 21 has an invalid length. [ 202.941412][T10688] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 203.006999][T10686] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 203.450079][ T5840] hid (null): unknown global tag 0xe [ 203.922116][T10742] __nla_validate_parse: 12 callbacks suppressed [ 203.922139][T10742] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1447'. [ 203.992803][T10742] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1447'. [ 204.048095][T10742] netlink: 'syz.1.1447': attribute type 6 has an invalid length. [ 204.087540][T10742] netlink: 'syz.1.1447': attribute type 5 has an invalid length. [ 204.123196][T10742] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1447'. [ 204.328782][T10765] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1451'. [ 204.594559][T10778] netlink: 'syz.2.1456': attribute type 11 has an invalid length. [ 205.241773][T10812] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1463'. [ 205.247009][T10807] xt_CT: No such helper "snmp_trap" [ 205.342471][T10820] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1465'. [ 205.551432][T10832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1467'. [ 205.573081][T10832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1467'. [ 205.990835][ T5840] hid-generic 0005:046D:0A0F.0001: unknown global tag 0xe [ 206.011580][ T5840] hid-generic 0005:046D:0A0F.0001: item 0 2 1 14 parsing failed [ 206.044341][ T5840] hid-generic 0005:046D:0A0F.0001: probe with driver hid-generic failed with error -22 [ 206.368542][T10863] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1478'. [ 206.377644][T10863] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1478'. [ 206.506953][T10868] netlink: 'syz.0.1481': attribute type 1 has an invalid length. [ 206.595311][T10875] batman_adv: batadv0: Adding interface: dummy0 [ 206.601632][T10875] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.639775][T10875] batman_adv: batadv0: Interface activated: dummy0 [ 206.693671][T10868] batadv0: mtu less than device minimum [ 206.727151][T10868] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 206.739229][T10868] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 206.751254][T10868] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 206.763345][T10868] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 206.775410][T10868] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 206.787500][T10868] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 206.799410][T10868] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 206.810915][T10868] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 206.822626][T10868] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 207.619317][T10926] 8021q: adding VLAN 0 to HW filter on device bond5 [ 207.642823][T10926] bond5: entered promiscuous mode [ 207.649579][T10926] bond0: (slave bond5): Enslaving as an active interface with an up link [ 207.902541][T10941] syzkaller1: entered promiscuous mode [ 207.912214][T10941] syzkaller1: entered allmulticast mode [ 207.949674][T10941] pimreg: entered allmulticast mode [ 210.217586][T11012] __nla_validate_parse: 9 callbacks suppressed [ 210.217609][T11012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1519'. [ 210.462530][T11018] netlink: 'syz.1.1523': attribute type 42 has an invalid length. [ 211.707235][ T5845] Bluetooth: hci3: command 0x0406 tx timeout [ 211.707637][ T5849] Bluetooth: hci1: command 0x080f tx timeout [ 211.713300][ T5845] Bluetooth: hci2: command 0x0406 tx timeout [ 212.043365][T11061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1534'. [ 212.226758][T11061] team0: left allmulticast mode [ 212.231997][T11061] team0: left promiscuous mode [ 212.239465][T11061] bridge0: port 2(team0) entered disabled state [ 212.264355][T11061] dummy0: left allmulticast mode [ 212.275722][T11061] bridge0: port 1(dummy0) entered disabled state [ 212.426604][T11062] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1535'. [ 213.487108][T11101] netlink: 13428 bytes leftover after parsing attributes in process `syz.1.1543'. [ 213.865798][T11117] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1548'. [ 213.977833][T11121] netlink: 'syz.4.1550': attribute type 1 has an invalid length. [ 214.176682][T11121] 8021q: adding VLAN 0 to HW filter on device bond6 [ 214.509709][T11136] tipc: Invalid UDP bearer configuration [ 214.509767][T11136] tipc: Enabling of bearer rejected, failed to enable media [ 214.582175][T11136] tipc: Invalid UDP bearer configuration [ 214.582233][T11136] tipc: Enabling of bearer rejected, failed to enable media [ 214.622261][T11142] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1556'. [ 214.623172][T11136] tipc: Invalid UDP bearer configuration [ 214.649108][T11136] tipc: Enabling of bearer rejected, failed to enable media [ 215.138176][T11166] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1562'. [ 215.195812][T11168] netlink: 'syz.2.1563': attribute type 1 has an invalid length. [ 215.209918][T11168] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1563'. [ 215.646840][T11190] netlink: 'syz.2.1570': attribute type 1 has an invalid length. [ 215.731043][T11190] 8021q: adding VLAN 0 to HW filter on device bond4 [ 215.811229][T11201] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1567'. [ 216.562647][T11217] bond7: entered promiscuous mode [ 216.585635][T11217] bond7: entered allmulticast mode [ 216.605822][T11217] 8021q: adding VLAN 0 to HW filter on device bond7 [ 216.960002][T11217] bond7 (unregistering): Released all slaves [ 216.980971][T10981] net_ratelimit: 11 callbacks suppressed [ 216.980991][T10981] Set syz1 is full, maxelem 65536 reached [ 217.382401][T11244] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1584'. [ 217.419156][T11244] x_tables: duplicate underflow at hook 4 [ 217.439804][T11244] netlink: 'syz.1.1584': attribute type 2 has an invalid length. [ 217.459198][T11244] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1584'. [ 217.972314][T11267] xt_CT: No such helper "snmp_trap" [ 217.984235][T11275] netlink: 'syz.0.1590': attribute type 25 has an invalid length. [ 219.136663][T11331] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1607'. [ 219.190151][T11331] dummy0: left promiscuous mode [ 219.574407][T11339] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1610'. [ 219.752155][T11351] lo: entered allmulticast mode [ 219.778486][T11357] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1613'. [ 219.800465][T11357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1613'. [ 219.968027][T11353] lo: left allmulticast mode [ 220.017158][T11367] netlink: 'syz.3.1618': attribute type 7 has an invalid length. [ 220.625505][T11395] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1628'. [ 220.743001][T11395] IPv6: Can't replace route, no match found [ 220.860113][T11411] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1634'. [ 220.953762][T11417] openvswitch: netlink: Flow key attr not present in new flow. [ 221.147936][T11417] veth0: entered promiscuous mode [ 221.192667][T11417] geneve2: entered promiscuous mode [ 221.199465][T11417] geneve2: entered allmulticast mode [ 221.479971][T11449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1642'. [ 221.643961][T11430] geneve2: entered promiscuous mode [ 221.650023][T11430] geneve2: entered allmulticast mode [ 221.719254][T11416] veth0: left promiscuous mode [ 222.170866][ T30] audit: type=1107 audit(1744100595.043:4): pid=11477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 222.202430][T11478] sctp: [Deprecated]: syz.3.1656 (pid 11478) Use of struct sctp_assoc_value in delayed_ack socket option. [ 222.202430][T11478] Use struct sctp_sack_info instead [ 222.357127][T11484] sctp: [Deprecated]: syz.3.1656 (pid 11484) Use of struct sctp_assoc_value in delayed_ack socket option. [ 222.357127][T11484] Use struct sctp_sack_info instead [ 222.426594][T11483] tipc: Enabled bearer , priority 0 [ 222.567272][T11483] syzkaller0: entered promiscuous mode [ 222.572935][T11483] syzkaller0: entered allmulticast mode [ 222.583024][T11483] tipc: Resetting bearer [ 222.621734][T11481] tipc: Resetting bearer [ 222.844734][T11513] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1661'. [ 222.934673][T11522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1666'. [ 222.939868][T11520] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 224.256498][T11481] tipc: Disabling bearer [ 224.498921][T11536] netlink: 'syz.0.1670': attribute type 11 has an invalid length. [ 224.525003][T11536] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1670'. [ 224.582554][T11533] xt_CT: No such helper "pptp" [ 224.770149][T11555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1672'. [ 224.848761][T11556] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 224.871783][T11556] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 225.014667][T11563] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1677'. [ 225.174933][T11567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1679'. [ 225.189895][T11567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1679'. [ 225.206453][T11567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1679'. [ 225.250888][T11572] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (8) [ 225.984440][T11615] netlink: 'syz.1.1691': attribute type 1 has an invalid length. [ 226.018450][T11615] __nla_validate_parse: 1 callbacks suppressed [ 226.018470][T11615] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1691'. [ 226.035865][T11618] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1692'. [ 226.149193][T11625] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1697'. [ 226.157781][T11623] netlink: 'syz.4.1696': attribute type 21 has an invalid length. [ 226.190597][T11623] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1696'. [ 226.190906][T11625] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1697'. [ 226.332194][T11623] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1696'. [ 226.394049][T11627] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1696'. [ 226.554667][T11644] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1703'. [ 226.608246][T11647] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1703'. [ 226.650799][T11648] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1704'. [ 226.720683][T11648] gretap0: entered promiscuous mode [ 227.350053][T11684] netlink: 'syz.3.1717': attribute type 4 has an invalid length. [ 228.369459][T11733] netlink: 'syz.1.1734': attribute type 1 has an invalid length. [ 228.423285][T11701] infiniband syz1: set down [ 228.437569][T11701] infiniband syz1: added ipvlan1 [ 228.450534][T11701] syz1: rxe_create_cq: returned err = -12 [ 228.485327][T11701] infiniband syz1: Couldn't create ib_mad CQ [ 228.491661][T11701] infiniband syz1: Couldn't open port 1 [ 228.599768][T11737] xt_CT: No such helper "pptp" [ 228.650090][T11701] RDS/IB: syz1: added [ 228.672659][T11701] smc: adding ib device syz1 with port count 1 [ 228.698311][T11701] smc: ib device syz1 port 1 has pnetid SYZ0 (user defined) [ 228.873402][T11756] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 3, id = 0 [ 228.873675][T11753] IPVS: stopping backup sync thread 11756 ... [ 229.172308][T11769] veth0: entered promiscuous mode [ 229.206618][T11765] geneve2: entered promiscuous mode [ 229.211932][T11765] geneve2: entered allmulticast mode [ 229.306255][T11769] geneve2: entered promiscuous mode [ 229.315442][T11769] geneve2: entered allmulticast mode [ 229.407027][T11764] veth0: left promiscuous mode [ 229.705118][T11799] nbd: must specify at least one socket [ 230.422722][T11828] IPVS: length: 157 != 24 [ 230.434445][T11830] netlink: 'syz.1.1766': attribute type 32 has an invalid length. [ 230.545019][T11833] netlink: 'syz.2.1768': attribute type 2 has an invalid length. [ 230.566435][T11833] netlink: 'syz.2.1768': attribute type 3 has an invalid length. [ 231.347510][T11873] __nla_validate_parse: 17 callbacks suppressed [ 231.347532][T11873] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1777'. [ 231.369229][T11873] xt_SECMARK: invalid mode: 0 [ 231.460573][T11878] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1778'. [ 232.092971][T11899] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1785'. [ 232.116108][T11901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1784'. [ 232.121008][T11899] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1785'. [ 232.147870][T11901] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1784'. [ 232.169195][T11899] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1785'. [ 232.214503][T11899] netlink: 'syz.0.1785': attribute type 2 has an invalid length. [ 232.231059][T11899] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1785'. [ 232.299325][T11908] : renamed from bond0 (while UP) [ 232.423109][T11914] syzkaller1: entered promiscuous mode [ 232.433684][T11914] syzkaller1: entered allmulticast mode [ 232.544393][T11922] No such timeout policy "syz0" [ 232.750548][T11932] netlink: 'syz.2.1796': attribute type 1 has an invalid length. [ 232.764713][T11932] netlink: 'syz.2.1796': attribute type 2 has an invalid length. [ 232.911712][T11941] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1800'. [ 233.806686][T11986] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 234.100301][T12001] netlink: 'syz.3.1816': attribute type 11 has an invalid length. [ 234.265046][T12008] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1818'. [ 234.350978][T12011] 8021q: adding VLAN 0 to HW filter on device bond3 [ 234.359127][T12011] bridge0: port 1(bond3) entered blocking state [ 234.365805][T12011] bridge0: port 1(bond3) entered disabled state [ 234.372549][T12011] bond3: entered allmulticast mode [ 234.381091][T12011] bond3: entered promiscuous mode [ 234.461236][T12018] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-xor(2) [ 234.681628][T12023] 8021q: adding VLAN 0 to HW filter on device bond4 [ 234.718446][T12023] bond0: (slave bond4): Enslaving as an active interface with an up link [ 234.862520][T12040] netlink: 'syz.1.1827': attribute type 10 has an invalid length. [ 234.871068][T12040] mac80211_hwsim hwsim4 wlan1: left promiscuous mode [ 234.897639][T12040] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 234.907308][T12040] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 234.971646][T12040] netlink: 'syz.1.1827': attribute type 13 has an invalid length. [ 235.233764][T12057] macvlan3: entered promiscuous mode [ 235.262143][T12057] bridge0: entered promiscuous mode [ 235.331629][T12060] macvlan4: entered promiscuous mode [ 235.832728][T12087] netlink: 'syz.3.1837': attribute type 10 has an invalid length. [ 235.866831][T12092] netlink: 'syz.3.1837': attribute type 10 has an invalid length. [ 236.434568][T12125] netlink: 'syz.0.1849': attribute type 21 has an invalid length. [ 236.463445][T12125] __nla_validate_parse: 3 callbacks suppressed [ 236.463465][T12125] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1849'. [ 236.501955][T12125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1849'. [ 236.620198][T12137] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1853'. [ 236.977566][T12155] nbd: must specify an index to disconnect [ 237.022011][T12161] netlink: 'syz.1.1858': attribute type 1 has an invalid length. [ 237.036196][T12160] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1859'. [ 237.106496][T12168] x_tables: duplicate underflow at hook 1 [ 237.120358][T12162] 8021q: adding VLAN 0 to HW filter on device bond6 [ 237.156537][T12167] vlan2: entered allmulticast mode [ 237.161920][T12167] ip6gretap0: entered allmulticast mode [ 237.741610][T12194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1869'. [ 237.765479][T12195] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1869'. [ 238.064031][T12205] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1873'. [ 238.106921][T12211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1873'. [ 238.110277][T12210] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1875'. [ 238.128641][T12210] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1875'. [ 238.482960][T12225] hsr0: entered promiscuous mode [ 238.493825][T12224] hsr0: left promiscuous mode [ 239.000254][T12253] xt_hashlimit: size too large, truncated to 1048576 [ 239.925758][T12290] validate_nla: 1 callbacks suppressed [ 239.925779][T12290] netlink: 'syz.4.1897': attribute type 10 has an invalid length. [ 239.937732][T12292] 8021q: VLANs not supported on wg1 [ 240.233459][T12303] tipc: Started in network mode [ 240.265411][T12303] tipc: Node identity , cluster identity 4711 [ 240.271544][T12303] tipc: Failed to set node id, please configure manually [ 240.295836][T12303] tipc: Enabling of bearer rejected, failed to enable media [ 240.386962][T12315] macvlan0: entered promiscuous mode [ 240.392336][T12315] bridge0: entered promiscuous mode [ 240.684594][T12330] netlink: 'syz.2.1913': attribute type 5 has an invalid length. [ 240.764515][T12333] netlink: 'syz.3.1915': attribute type 1 has an invalid length. [ 242.278752][T12342] __nla_validate_parse: 11 callbacks suppressed [ 242.278770][T12342] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1917'. [ 242.298645][T12344] bond0: (slave syz_tun): Releasing backup interface [ 242.333814][T12344] batman_adv: batadv0: Interface deactivated: dummy0 [ 242.357667][T12344] batman_adv: batadv0: Removing interface: dummy0 [ 242.386078][T12344] bond0: (slave bond_slave_0): Releasing backup interface [ 242.404271][T12344] bond_slave_0: left promiscuous mode [ 242.407434][ T5992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.424302][T12344] bond0: (slave bond_slave_1): Releasing backup interface [ 242.449745][T12344] bond_slave_1: left promiscuous mode [ 242.476555][T12344] team0: Port device team_slave_0 removed [ 242.495628][T12344] team0: Port device team_slave_1 removed [ 242.502393][T12344] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.522886][T12344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.532321][T12344] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.540115][T12344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.554312][T12344] bond1: (slave geneve2): Releasing active interface [ 242.563439][T12344] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 242.573132][T12344] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 242.582886][T12344] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 242.593861][T12344] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 242.615797][T12344] bond0: (slave bond2): Releasing backup interface [ 242.629352][T12344] bond2: left promiscuous mode [ 242.649936][T12344] bond3: (slave veth7): Releasing backup interface [ 242.674462][T12344] bond0: (slave bond5): Releasing backup interface [ 242.683756][T12344] bond5: left promiscuous mode [ 242.718557][T12349] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1918'. [ 242.878928][T12361] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1922'. [ 242.889445][ T1214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.118172][T12379] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1928'. [ 243.157013][T12380] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1928'. [ 243.321397][T12394] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1929'. [ 243.362353][T12395] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1931'. [ 243.398124][T12398] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1934'. [ 243.429497][T12398] lo: left promiscuous mode [ 243.750160][T12416] netlink: 'syz.4.1940': attribute type 1 has an invalid length. [ 243.768761][T12416] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.1940'. [ 244.739433][T12464] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 244.840211][T12476] netlink: 'syz.1.1954': attribute type 10 has an invalid length. [ 244.873646][T12476] veth1_macvtap: left promiscuous mode [ 244.903302][T12476] team0: Device veth1_macvtap failed to register rx_handler [ 245.174185][T12483] vxcan5: entered promiscuous mode [ 245.306102][T12498] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1957'. [ 245.788429][T12518] xt_CT: You must specify a L4 protocol and not use inversions on it [ 246.050654][T12532] netlink: 'syz.2.1966': attribute type 2 has an invalid length. [ 246.731477][T12558] macvlan1: entered promiscuous mode [ 246.991415][T12568] macvlan2: entered promiscuous mode [ 247.032475][T12577] netlink: 'syz.2.1980': attribute type 4 has an invalid length. [ 247.122969][T12581] netlink: 'syz.2.1980': attribute type 3 has an invalid length. [ 247.301159][T12588] netlink: 'syz.2.1984': attribute type 4 has an invalid length. [ 247.489233][T12592] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.595836][T12602] __nla_validate_parse: 2 callbacks suppressed [ 247.595857][T12602] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1989'. [ 247.692729][T12592] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.721714][T12611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1989'. [ 247.762428][T12611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1989'. [ 247.850368][T12592] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.926894][T12621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1995'. [ 248.039188][T12630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1994'. [ 248.169608][T12592] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.326399][T12643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1998'. [ 248.360358][T12643] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1998'. [ 248.516944][T12592] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.537492][T12592] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.558100][T12592] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.577208][T12592] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.420347][T12689] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-xor(2) [ 249.839944][T12706] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 250.063886][T12721] tunl0: left promiscuous mode [ 250.105001][T12721] gre0: left promiscuous mode [ 250.140567][T12721] gretap0: left promiscuous mode [ 250.160597][T12721] erspan0: left promiscuous mode [ 250.223282][T12721] ip_vti0: left promiscuous mode [ 250.247074][T12721] ip6_vti0: left promiscuous mode [ 250.262571][T12721] sit0: left promiscuous mode [ 250.288645][T12721] ip6tnl0: left promiscuous mode [ 250.324221][T12721] ip6gre0: left promiscuous mode [ 250.352487][T12721] syz_tun: left promiscuous mode [ 250.373276][T12721] bond0: left promiscuous mode [ 250.401083][T12721] mac80211_hwsim hwsim4 wlan1: left promiscuous mode [ 250.424029][T12721] team0: left promiscuous mode [ 250.448623][T12721] [ 250.451002][T12721] ===================================== [ 250.456560][T12721] WARNING: bad unlock balance detected! [ 250.462111][T12721] 6.14.0-syzkaller-13310-g04efcee6ef8d #0 Not tainted [ 250.468869][T12721] ------------------------------------- [ 250.474409][T12721] syz.1.2021/12721 is trying to release lock (&dev_instance_lock_key) at: [ 250.482919][T12721] [] do_setlink+0xc26/0x43a0 [ 250.489091][T12721] but there are no more locks to release! [ 250.494803][T12721] [ 250.494803][T12721] other info that might help us debug this: [ 250.502860][T12721] 1 lock held by syz.1.2021/12721: [ 250.507961][T12721] #0: ffffffff900fc9c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xd68/0x1fe0 [ 250.517043][T12721] [ 250.517043][T12721] stack backtrace: [ 250.522930][T12721] CPU: 1 UID: 0 PID: 12721 Comm: syz.1.2021 Not tainted 6.14.0-syzkaller-13310-g04efcee6ef8d #0 PREEMPT(full) [ 250.522951][T12721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 250.522975][T12721] Call Trace: [ 250.522982][T12721] [ 250.522990][T12721] dump_stack_lvl+0x241/0x360 [ 250.523018][T12721] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.523042][T12721] ? __pfx__printk+0x10/0x10 [ 250.523065][T12721] ? print_lock+0x171/0x1a0 [ 250.523085][T12721] ? do_setlink+0xc26/0x43a0 [ 250.523108][T12721] print_unlock_imbalance_bug+0x185/0x1a0 [ 250.523151][T12721] lock_release+0x1ed/0x3e0 [ 250.523167][T12721] ? do_setlink+0xc26/0x43a0 [ 250.523190][T12721] ? do_setlink+0xc26/0x43a0 [ 250.523214][T12721] __mutex_unlock_slowpath+0xee/0x800 [ 250.523235][T12721] ? validate_linkmsg+0x70e/0xa40 [ 250.523256][T12721] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 250.523279][T12721] ? __pfx_validate_linkmsg+0x10/0x10 [ 250.523301][T12721] do_setlink+0xc26/0x43a0 [ 250.523327][T12721] ? stack_trace_save+0x11a/0x1d0 [ 250.523352][T12721] ? __lock_acquire+0xad5/0xd80 [ 250.523369][T12721] ? do_raw_spin_lock+0x151/0x370 [ 250.523401][T12721] ? __pfx_do_setlink+0x10/0x10 [ 250.523428][T12721] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 250.523443][T12721] ? lockdep_hardirqs_on+0x9d/0x150 [ 250.523460][T12721] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 250.523475][T12721] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 250.523492][T12721] ? rcu_is_watching+0x15/0xb0 [ 250.523520][T12721] ? __mutex_lock+0xbe3/0x10c0 [ 250.523540][T12721] ? __mutex_lock+0x5f3/0x10c0 [ 250.523558][T12721] ? rtnl_newlink+0xd68/0x1fe0 [ 250.523578][T12721] ? __pfx___mutex_lock+0x10/0x10 [ 250.523599][T12721] ? ns_capable+0x8a/0xf0 [ 250.523614][T12721] ? rtnl_link_get_net_capable+0x168/0x340 [ 250.523638][T12721] rtnl_newlink+0x1619/0x1fe0 [ 250.523665][T12721] ? __pfx_rtnl_newlink+0x10/0x10 [ 250.523687][T12721] ? kvm_sched_clock_read+0x11/0x20 [ 250.523703][T12721] ? sched_clock+0x4a/0x70 [ 250.523725][T12721] ? sched_clock_cpu+0x77/0x4d0 [ 250.523745][T12721] ? update_curr_se+0x8f/0x240 [ 250.523762][T12721] ? update_curr+0x84/0xbd0 [ 250.523775][T12721] ? psi_group_change+0xb54/0x1190 [ 250.523800][T12721] ? do_raw_spin_unlock+0x13c/0x8b0 [ 250.523823][T12721] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 250.523839][T12721] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 250.523854][T12721] ? do_raw_spin_unlock+0x13c/0x8b0 [ 250.523877][T12721] ? aa_get_newest_label+0x101/0x6f0 [ 250.523901][T12721] ? __lock_acquire+0xad5/0xd80 [ 250.523923][T12721] ? __pfx_rtnl_newlink+0x10/0x10 [ 250.523944][T12721] rtnetlink_rcv_msg+0x80f/0xd70 [ 250.523964][T12721] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 250.523985][T12721] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 250.524012][T12721] netlink_rcv_skb+0x208/0x480 [ 250.524033][T12721] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 250.524054][T12721] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 250.524081][T12721] ? netlink_deliver_tap+0x2e/0x1b0 [ 250.524102][T12721] ? netlink_deliver_tap+0x2e/0x1b0 [ 250.524123][T12721] netlink_unicast+0x7f8/0x9a0 [ 250.524145][T12721] ? __pfx_netlink_unicast+0x10/0x10 [ 250.524164][T12721] ? skb_put+0x114/0x1f0 [ 250.524180][T12721] netlink_sendmsg+0x8c3/0xcd0 [ 250.524205][T12721] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.524228][T12721] ? aa_sock_msg_perm+0x91/0x160 [ 250.524250][T12721] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.524272][T12721] __sock_sendmsg+0x221/0x270 [ 250.524292][T12721] ____sys_sendmsg+0x523/0x860 [ 250.524311][T12721] ? __pfx_____sys_sendmsg+0x10/0x10 [ 250.524325][T12721] ? __fget_files+0x2a/0x420 [ 250.524340][T12721] ? __fget_files+0x2a/0x420 [ 250.524356][T12721] __sys_sendmsg+0x271/0x360 [ 250.524373][T12721] ? __pfx___sys_sendmsg+0x10/0x10 [ 250.524427][T12721] ? do_syscall_64+0xb6/0x230 [ 250.524447][T12721] do_syscall_64+0xf3/0x230 [ 250.524466][T12721] ? clear_bhb_loop+0x45/0xa0 [ 250.524484][T12721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.524500][T12721] RIP: 0033:0x7f0f4318d169 [ 250.524519][T12721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.524534][T12721] RSP: 002b:00007f0f43f6e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 250.524552][T12721] RAX: ffffffffffffffda RBX: 00007f0f433a5fa0 RCX: 00007f0f4318d169 [ 250.524565][T12721] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 250.524575][T12721] RBP: 00007f0f4320e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 250.524586][T12721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.524596][T12721] R13: 0000000000000000 R14: 00007f0f433a5fa0 R15: 00007ffcca4c02f8 [ 250.524615][T12721] [ 255.707191][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.713559][ T1299] ieee802154 phy1 wpan1: encryption failed: -22