last executing test programs: 53.036314551s ago: executing program 3 (id=265): r0 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, &(0x7f0000000140)=0x7, r0, &(0x7f0000000180)=0x6, 0x2, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r1, &(0x7f00000001c0)={0x24, @short={0x2, 0x2, 0xaaa0}}, 0x14) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$int_in(r2, 0x5452, &(0x7f00000002c0)=0x100000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x90, 0x10, 0x401, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x58, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffff7, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10000, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x200, 0x3}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x90}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) 42.091794804s ago: executing program 3 (id=265): r0 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, &(0x7f0000000140)=0x7, r0, &(0x7f0000000180)=0x6, 0x2, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r1, &(0x7f00000001c0)={0x24, @short={0x2, 0x2, 0xaaa0}}, 0x14) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$int_in(r2, 0x5452, &(0x7f00000002c0)=0x100000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x90, 0x10, 0x401, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x58, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffff7, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10000, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x200, 0x3}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x90}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) 30.660233838s ago: executing program 3 (id=265): r0 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, &(0x7f0000000140)=0x7, r0, &(0x7f0000000180)=0x6, 0x2, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r1, &(0x7f00000001c0)={0x24, @short={0x2, 0x2, 0xaaa0}}, 0x14) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$int_in(r2, 0x5452, &(0x7f00000002c0)=0x100000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x90, 0x10, 0x401, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x58, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffff7, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10000, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x200, 0x3}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x90}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) 20.334013504s ago: executing program 3 (id=265): r0 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, &(0x7f0000000140)=0x7, r0, &(0x7f0000000180)=0x6, 0x2, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r1, &(0x7f00000001c0)={0x24, @short={0x2, 0x2, 0xaaa0}}, 0x14) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$int_in(r2, 0x5452, &(0x7f00000002c0)=0x100000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x90, 0x10, 0x401, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x58, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffff7, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10000, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x200, 0x3}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x90}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) 11.816867165s ago: executing program 0 (id=1157): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x6}, 0x1c) socket$packet(0x11, 0x3, 0x300) r1 = socket(0x11, 0xa, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x891e, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e1406020000000a0e", 0x21}], 0x1}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x8) sendmmsg$inet6(r2, &(0x7f0000000040)=[{{&(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="24000000000000002900000032000000fe"], 0x28}}], 0x1, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) 11.510098822s ago: executing program 0 (id=1161): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0xfb5, 0xfffffffe}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000001600156f"], 0x18}}, 0x8080) 11.395093874s ago: executing program 0 (id=1164): socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x1, &(0x7f0000000140)=@raw=[@exit], &(0x7f0000000180)='GPL\x00', 0xffff, 0x57, &(0x7f0000000200)=""/87, 0x40f00, 0xb, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0xd, 0xffff, 0x16000}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x8, &(0x7f0000000400)=ANY=[@ANYRES8=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@fallback=r4, r4, 0x2f}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) 11.075028972s ago: executing program 0 (id=1166): r0 = socket(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x4) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x8, 0x0, 0x0, @fd}]}, 0x1c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000006301040000000000950000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) syz_emit_ethernet(0x56, &(0x7f0000000200)={@multicast, @link_local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3f00e7", 0x20, 0x2c, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[@routing={0x3a, 0x0, 0x2, 0x1}, @dstopts={0x33, 0x0, '\x00', [@pad1]}], {0x0, 0x0, 0x8}}}}}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{0x1, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f0000000400)='%-5lx \x00'}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r1, 0x58, &(0x7f0000000480)}, 0x10) ioctl$SIOCX25SCUDMATCHLEN(0xffffffffffffffff, 0x89e7, &(0x7f0000000180)={0x61}) syz_emit_ethernet(0xc6, &(0x7f0000000300)={@broadcast, @random="17043a73dbde", @val={@val={0x88a8, 0x4, 0x0, 0x4}, {0x8100, 0x3, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @dev, {[@cipso={0x86, 0x3e, 0x0, [{0x0, 0x5, "66d281"}, {0x0, 0x11, "6f03057a91f875ccf5bd5d0a5b319a"}, {0x5, 0x10, "6253659c41d7d6a461f45f9d37fa"}, {0x0, 0x3, "91"}, {0x0, 0x7, "ccb3e82d2e"}, {0x0, 0x8, "a33b7a6b9500"}]}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private}, {@private=0xfffffffe}, {}, {@remote}, {@private}, {@remote}, {@private}]}]}}}}}}}, 0x0) 11.01595587s ago: executing program 0 (id=1167): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newlink={0x68, 0x10, 0x503, 0x2070bd2d, 0x4000000, {0x0, 0x0, 0x0, 0x0, 0x40004}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFLA_GRE_LINK={0x8, 0x1, r1}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xb}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x68}, 0x1, 0x0, 0x0, 0x2004c012}, 0x0) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000200)={@rand_addr=0x64010101, @remote, r1}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x801}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc}]}], {0x14}}, 0x70}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840) (async, rerun: 32) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000000002000000000ff000000850000000f000000850000000500000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f000000cbc0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x97}, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x8000000}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x9, &(0x7f0000000240)=0xfffffffc, 0x4) (async) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x1, 0x80802, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00', 0x0}) (async, rerun: 64) r10 = socket$packet(0x11, 0x2, 0x300) (rerun: 64) bind$packet(r10, &(0x7f00000001c0)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @link_local}, 0x14) (async, rerun: 64) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000000)={0x1}, 0x4) (async, rerun: 64) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x18) 10.817846312s ago: executing program 0 (id=1169): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000040)=0x401, 0x4) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, 0x0, 0x0) connect$can_j1939(r2, &(0x7f0000000000)={0x1d, r3, 0x3, {0x2, 0xff, 0x3}, 0xfd}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r3, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) socket$nl_route(0x10, 0x3, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socket$xdp(0x2c, 0x3, 0x0) (async) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000040)=0x401, 0x4) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, 0x0, 0x0) (async) connect$can_j1939(r2, &(0x7f0000000000)={0x1d, r3, 0x3, {0x2, 0xff, 0x3}, 0xfd}, 0x18) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r3, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async) 8.571421709s ago: executing program 3 (id=265): r0 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, &(0x7f0000000140)=0x7, r0, &(0x7f0000000180)=0x6, 0x2, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r1, &(0x7f00000001c0)={0x24, @short={0x2, 0x2, 0xaaa0}}, 0x14) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$int_in(r2, 0x5452, &(0x7f00000002c0)=0x100000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x90, 0x10, 0x401, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x58, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffff7, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10000, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x200, 0x3}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x90}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) 1.338977024s ago: executing program 1 (id=1260): r0 = socket(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) getsockopt(r0, 0x200000000114, 0x8, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x68, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0xa2f01, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2100, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x4, &(0x7f0000000340)=@framed={{}, [@func={0x85, 0x2, 0x1, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000200)='syzkaller\x00', 0x3}, 0x94) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x10}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$kcm(0x11, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000001340)=@ll={0x11, 0x1c, r4, 0x1, 0x9, 0x6, @random="405db6b5d150"}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000100)="b8b28225ea772f0daee8c7c98100", 0xe}, {&(0x7f00000002c0)="352babe3", 0x4}], 0x2}, 0x0) write$tun(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000000111ff00000000000000000000000000000000ff0200000000000000000000000000014f194e20"], 0x4b) 1.102962513s ago: executing program 2 (id=1263): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$kcm(0x29, 0x2, 0x0) (async, rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) (async, rerun: 32) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) (async) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r3, r2}) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r2, 0x0, 0x81, 0xe4, &(0x7f0000000040)="c3febee84b4ff004e8d59ddd1cd9fbbb5e1b1335637b5a4bd5fe3ae4727f6847f51bc0412c51220a4298774f59e1ddf927c97400082e5b15d521d280b9e1387df53fa192b9072166cf12ef1d3486ed1300a5661278fee5d2cd530cdaa8d4cbed15cc821a1b16dd50f6f9b5eecd319adc252268d168d8dfeb8a7c9235d23ef350c3", &(0x7f0000000180)=""/228, 0x8, 0x0, 0x90, 0x47, &(0x7f0000000340)="becf1f707a8d022d90f2ba83eb4505a21e15aa2be1eeb877658376bf747eca20834741c6c3c7360b6755334044b563e1e2d4c325aa1f4fd743815adb1d61908423aa716c5717e1df4aee102c601d740e64df6d8cba08352f674192ba3427f476631f6d249048c94daa156e3e782b074db500867d9fd638ede676a661595d412663511973e3a843aa66768df68eca7ea1", &(0x7f0000000280)="1d731b8a7b4b51d0650c30429c8a90340a25dcd2349771e2206301e1ab7e8ae884d11ea244520109d4d1f71ddae25985b429106c4a72e46b53023f25bfee0f8d00633f479e969a", 0x1, 0x0, 0x7}, 0x50) (async, rerun: 64) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="23020000000000000000030004001400019757"], 0x28}}, 0x0) 925.815744ms ago: executing program 1 (id=1265): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002300)={0x1c, 0x34, 0x107, 0xffffffff, 0xfffffffe, {0x1, 0x7c}, [@nested={0x8, 0x4, 0x0, 0x1, [@nested={0x4, 0x149}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x44}}, 0x8000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x81, 0x700, 0x200, 0xf39, {{0x6, 0x4, 0x2, 0x18, 0x18, 0x65, 0x0, 0x7, 0x29, 0x0, @rand_addr=0x64010101, @private=0xa010100, {[@ra={0x94, 0x4}]}}}}}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0xa8, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002300)={0x1c, 0x34, 0x107, 0xffffffff, 0xfffffffe, {0x1, 0x7c}, [@nested={0x8, 0x4, 0x0, 0x1, [@nested={0x4, 0x149}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x803, 0x0) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x44}}, 0x8000) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x81, 0x700, 0x200, 0xf39, {{0x6, 0x4, 0x2, 0x18, 0x18, 0x65, 0x0, 0x7, 0x29, 0x0, @rand_addr=0x64010101, @private=0xa010100, {[@ra={0x94, 0x4}]}}}}}) (async) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0xa8, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) (async) 923.543076ms ago: executing program 2 (id=1266): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @private=0xa010100}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt(r2, 0x84, 0x82, &(0x7f0000000480)="1a00000002000000", 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000d40)={0xffffffffffffffff, 0x58, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@remote, 0x0, 0x2b}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$inet6(r6, &(0x7f0000000480)={&(0x7f0000000040)={0xa, 0x0, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@pktinfo={{0x24, 0x29, 0x3b, {@private1={0xfc, 0x1, '\x00', 0x1}}}}], 0x28}, 0x40080) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000014c0)="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", 0x20e}], 0x1}, 0x8000) sendmmsg$sock(r0, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="e227270a4447678b03559a3ee19cc996d2741de97bbe9d74206d2dbff1e8287c20b3d02711c555645290449dba63d0b2f596bcd8da5e97660e1f4eb27e76d32ab7715c1ccc1d0a5e6f9e9831edb5ef560089d5064d3fde82d89acd13cd421ed34c81641d542171799cb3af6bf9775809a985955e4d8f41c0ff27ffe161d0de643714ffd73fa56578ed92b21ec2912d7a554344be367a125c556c21572ac49de773e3118a515fa747b4cadb1376d62d5b9dcfdfa09ea6fbf9fe9c578d7908ab3490b956b99361d980554a33ea1e86e1bcb4bfde94168409bccaefa5582362cdd8f5c0279d06e196bc8336d26e1d8e97326f9731d1a7e23c4fac", 0xf9}, {&(0x7f0000000100)="ffc7f612ecd724793d83342d7a4a848d491ef671510dac571ce043c3c52c", 0x1e}, {&(0x7f0000000140)="e2f46256d7a46c006a7b2f4d14c6d19061939544c4dccf07a9aec76055f50f50bfa87143c90296cd6838f6ba371af09a822f3a70a6ea728f3a948db10cdd942b8cfbdf0e208e982d33ce813c9ae74a19f58b070ba7404251b0c932439b6917a866a4a46c12264c94a60696594bd6136c5a85bd111d87b44bdd299f13f786d094fe42a41ab7455e36eaae6afe5a24eacbc6ac8e8624f03701450b24b85d2960151fc70dad613aabdf65bcf12cf82d217d0475bc3a6a0019a4a333bc9aaaa5d3851bbae24d4bd3b9c32b3f5caca68aef6f5efb7d4df654da44ee4c4bf3ccc76b59e3826bf4a63ead6d00b6f1f8c31014c40d812f9a12", 0xf5}, {&(0x7f0000000400)="a4f594143844100071f203a1f3b70456631387469989a594a8f3122c51b4164f428736aef0bd4f7e6cb8fc1f81e0ef5ce6846585a437dcc9a171c3dec4a968f1a007955f2650d7ec377b116298b12eb9f7c597e34c4abf30f422cd542b090957caa8efef6959d8334172abbbdcce5207a7151cc28838247b78199a3b29eb01aa2b0c15b6a7fd548a40853d2f6e3a53d1553b983dac2874868455432eefbe939d156c8604cc6ef12dea99f90fea41455872bfa7d768c823d86d28719243c0873b2125bb182cd98ff15b69acd03a413fbe091b214f4cc86765b295102592090a34d68795c9cdfeb5b4", 0xe8}, {&(0x7f0000000300)="615f81a63aeb360116cfe03e41873f203bd446dd5469f9b48d4f518a1d6f4111e9f0cc0d5fc2244adf47236296e12ea6c38088cd88601fde77ebf1ad086180e9d254efbaf8e5fe0a6c805edbdd169f2894505287d19836318b1dc236a4bfb45d9a023ee7eb25ce81e0e3b499f6e2a8", 0x6f}, {&(0x7f0000000240)="f0ce0ffcbb8bc4069640a1255779", 0xe}, {&(0x7f0000000500)="0974d3faf503b63bea3ac6d7b67097acd6fbb56e7571b89789e324e95c633ebfb86ae322c74cd09798d7ba7af6e419e0c98e66e3eda51b40530082646464bd88ebc76c97a821ec1687e7b8f2a5a1502d92f521a502424180718a7d119583b88f542e42b77f06ef4046e977197bca58ee8c1de8a82f18d61d5d66a857b0c76bf040f4e24186f0edb8c97b619bcd93519682eb4510ee5f3f2f", 0x98}], 0x7, &(0x7f0000000640)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @mark={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0x78}}, {{&(0x7f00000006c0)=@qipcrtr={0x2a, 0x0, 0x7fff}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000740)="cb8402db610b03dfcedf272f33a94431f1d734ebb8bf608293ced2fec088878a2ef49c31874425ee4e701401268be1bae2ba24f3b40be8e64ac1d6124631228401244dab2ae8953884cb5a0ee74bfb09a8e6c005ba56f3c3f737508608bc801bf319a894602b54e7c7210da6b058717881ed9da784cf52ccdc8e95479ac053fec639efda71482350b8906dc7e0b66f5b86127ac549c95a64ad816fa234390a3d688b7b66fbe9a3174dbe6eba3a803a576d260443ca866eb448e904ab", 0xbc}, {&(0x7f0000000800)="80e6db414aa3e1bcec869f86ff8e55606946525edfe5b4145aaab8d496eff4aaede75728620763877a263042fcbb4768cc7252864a622af83ffcb7bd29c97acdb5cd0bbdec815a1361ea0ffba16e23805d869982b78f6e5273", 0x59}, {&(0x7f0000000880)="cd691edf4647c1b8732d3ffe80bd6714b05229813c177e45264ef68537d73f3d2260e8b02b992add878a96398eaaca49a49ba65000fbec16fbb48c697e0bd8ba1406cd4a067528459ce3d0f51b57478ad858a1f3b1a710dcde3920dfb282ca5f", 0x60}, {&(0x7f0000000900)="27f25864a1369e667820ebea7f6456977bdfc2cccf307c96a09df5b128773cb3b0645f3c4e65ff10a110d4442d469eeaa880af2022044920d3007a8b7d26241da202a43dbe9c1a8500659861cacd3926c54726011c954b25452050442771c6fbec098a3269e6c79ea6bafbfae5678c119aad2f29d799ed84741cfedfc0972afdfee7d36292cc34d943730954a64a46b123fccea3281a5329b2c32955003c955164074d74514c33f0091f0692c4e3b8ae2ecea587f0add137d4eb0232e73af26284a7e9d3ef14b5e12202b2c149add4f4676f201e4585", 0xd6}], 0x4, &(0x7f0000000a00)=[@txtime={{0x18, 0x1, 0x3d, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x1ff}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}], 0x60}}, {{&(0x7f0000000a80)=@l2tp6={0xa, 0x0, 0x4, @local, 0x2, 0x1}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000b00)="97cb867f73900aac7c585542864dc2e1c2fdc595791b7d031078fa1812cf24684fc010", 0x23}, {&(0x7f0000000b40)="594b1f4108bbf3d3984825cb35021e059b9a57b5832f9e089b2288322e7f959623f041e5426c6d51ddf32ea9658e8d258c8015dc8edd6f75feb0be0b07283556731c04f7b3af2103533b6b9c19a1974e0238aa8fd282909bc2da6d99fa1765556c0dd7a55d53a38e8c5d0d00662da03209d80feeccfc0f163963af558e91f6baaa5aab543700484bb4d7db29b3d8639b1625cdeaf71058b1fa1c452fa2815b2ef7f9701d513fad201eba70ea1328a2a9357add0bc7e0183c44c57de3", 0xbc}, {&(0x7f0000000c00)="c0eab508b656e6592bac64beff700c9d9246fd961e423d59c310f0feda97", 0x1e}], 0x3, &(0x7f0000000c80)=[@txtime={{0x18, 0x1, 0x3d, 0xac}}], 0x18}}, {{&(0x7f0000000d80)=@xdp={0x2c, 0xd, r3, 0xa}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000e00)="0e3e328290bc25d9b10e2be0d2fe24d6f5d0acac7636eea40f518a65827cc404a688ee88927883a9e48e3cc77292fffc0a6ce859504659257e0c6bafd83548bbd89ab5af6b6af7c35132d89868b13b044917fd235bafd8f25591164d5793bd17b968f9aacc74c0e2540827ee27db3a8df3e7580bf5a439f1422f667d8b211b897e0044dcc3911bd6a60247aebd43b5c47210cb3ffc67d77b8574afd9dcdd5a9f804202598c3d522b83212a7260bb31c44b9f78d9a3f85ef092dc669ac5b979c51d250d5e0754e947f079323f28a2b81f3b6b38cded44f0791145c643d8", 0xdd}, {&(0x7f0000001080)="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", 0xfa}, {&(0x7f0000000f00)="dc7a1bbb529106b7e555482b0c620b727abb2829ef837733e040cc939b65b993c93630ca0d199e5441ee21fb8af7131c077b22bcbab908cc87796c109f1dad0c741cbfa42248b3fbd9cb712c3c2bf730bd91412244b862597f3501e39aa9d4db5e782bd8c0e5be6f", 0x68}], 0x3}}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001180)="665ea50ff330f18b04fed1e0fcce9e972036c607bfa9b37691164dd7f9c3ca4efc8774aa2ab692288bc783eec88556351a458bb9db9c65ebb414b7c4bc70f86ee8968974349ad8b9b441a900b5d3f0b85ad14e22ec95a288b4cc3b936fb192a66486db2f641198a526a7c23ff92e95a7b031eeae29ee971c4dbfcce4fde1fda613ad53dbb94f606d2c0161379d6d49ca360bddca70c5a4434ace15fc", 0x9c}, {&(0x7f0000001240)="0e511da0ed2c87928d6d8e61dabddbe63fe8cd1a3b6b2b480fb5850cc3edbe0dc674c58e82cf43e6bd97b23281fe6125bccd95cd9948c919c15db5cf69e543de464fc493582bddf035f7eb53ddb7f27f0330fd", 0x53}], 0x2, &(0x7f0000001300)=[@txtime={{0x18, 0x1, 0x3d, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x9646}}, @timestamping={{0x14, 0x1, 0x25, 0x95}}, @mark={{0x14, 0x1, 0x24, 0x1c9d8e1b}}, @mark={{0x14, 0x1, 0x24, 0xc}}], 0x78}}], 0x5, 0x404c000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0xc, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94) 782.545474ms ago: executing program 4 (id=1267): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4a}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8}]}}}]}]}], {0x14}}, 0x94}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r3) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r4, 0x7ad71c5c2912d839, 0x70bd29, 0x25dfdbfc}, 0x14}}, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 692.727012ms ago: executing program 1 (id=1268): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r0, 0x8946, &(0x7f0000000000)="8d557fd094c38f748ec33512ef3a") (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000240)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0xa8, 0x11, 0x148, 0xa8, 0x10, 0x188, 0x2a8, 0x2a8, 0x188, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xffffffad}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff, 0x2}, {0xffffffffffffffff, 0x7}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'vlan0\x00', 'veth1_to_batadv\x00', {}, {}, 0x2f, 0x0, 0x6c}, 0x0, 0x70, 0xd0, 0x0, {}, [@common=@osf={{}, {'syz1\x00', 0x0, 0x0, 0x1, 0x1}}]}, @unspec=@NOTRACK}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xfd3a) 584.696601ms ago: executing program 2 (id=1269): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7004040800008900000008c8a100", @ANYRES32=r3, @ANYBLOB="18001d801400008006000500100000000500060000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000094}, 0x80) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cryptd(ecb-camellia-aesni-avx2)\x00'}, 0x58) (async) bind$alg(r4, &(0x7f0000000ec0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(serpent)\x00'}, 0x58) 577.64117ms ago: executing program 4 (id=1270): r0 = socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000000200), 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r4, 0x7, 0x104, 0xfffffffe}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x1, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) socket(0x10, 0x3, 0x0) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) bind$inet(r3, 0x0, 0x0) (async) setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000000200), 0x4) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r4, 0x7, 0x104, 0xfffffffe}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) (async) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000100)) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x1, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) (async) 519.24712ms ago: executing program 4 (id=1271): r0 = socket(0x2b, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x1, 0x0, &(0x7f00000003c0)) r1 = socket$inet(0x2, 0x4000000805, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002b80)=@delchain={0xe8, 0x65, 0x2, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0xa}, {0xfff2, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0xb4, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0xfff1}}, @TCA_BPF_ACT={0x8c, 0x1, [@m_ctinfo={0x88, 0x1b, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x401}, @TCA_CTINFO_ACT={0x18, 0x3, {0xd, 0x6, 0x3, 0x101, 0x4}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8, 0x8, 0x5, 0x0, 0x9}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x400}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xffffffb4}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3b}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8}, @TCA_BPF_FD={0x8}]}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000b00)={'vxcan0\x00', 0x0}) sendmmsg$sock(r0, &(0x7f0000001fc0)=[{{&(0x7f0000000300)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default]}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000540)="674a8ffa9d310d34f2c11900b042dcf89470551b8d8b0ca77bbdc186c1b3bfca181f94be144e6df8253a235a46c32164a480be728029e71b1ab56bfef0193747d9f8d330ba2605e8cfc992275d79e276efe822e73057e01b4a28114932bc78e2edff1a5ac4", 0x65}, {&(0x7f00000006c0)="a9e405956846b9090e8e4a17e713085fbedb91cbc15369aec7d3875d9020afc4bff9486097df206198858fd7ccdb72d4d66c25d45f6ed20ac2a8a677002fc0ab7046abae7568", 0x46}, {&(0x7f0000000880)="b9edeba9874ab4ce82937148925890b617dd62950984123d892bd86e9c558c6af8b999ac89109b254870944d801c91024e2dd5e646974e44c294853c576da0c6455de7b185162254c242932b039bdd3df2c4675abeb1c2a4752403d2aad821a872f81bd13be82338fc181de39258463b865f232eb963b804c15322d7518d85cd0cb5546f4be64a1dab0a57fc5aef2cd600b2a27031c75e4a5f0cab6f643e0fcc76483cd0801424ca84d931df5e7fbe44bb15aeb38eb312bf5ba2c54baf7cd670d719c0338b81f654ef97f50fc41a532c800cc758e74b50d0e2e6eaaf37040e6ee08476510a792a0f4f3966739851265015fcc370fe73ca48", 0xf8}, {&(0x7f00000005c0)="20c99463fe", 0x5}, {&(0x7f0000000a00)="5abfd2885ef651aa3fa8fa0f5698e2cd098ab438cb7c8e112656acff32f47d0bdd67dd447b0cc0cd50bbd14a2e3b9aa71f1e4f46e5ecb8d78bd9f25d28c7f934a15fb8e5edbee3", 0x47}, {&(0x7f0000000780)="f2e1eac4c38dfbaeb2b94c6d2ae5f3b2ffc38e33bb0c46b5bf7e8b32a184e471201b2ff5ab679784f0bcff", 0x2b}], 0x6}}, {{&(0x7f0000000b40)=@can={0x1d, r3}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000bc0)="b841a5d18842d3082eeb3461996946b1896947ffd6110ff0afb54de6", 0x1c}, {&(0x7f0000000c00)}], 0x2, &(0x7f0000000c80)=[@txtime={{0x18, 0x1, 0x3d, 0x8}}, @timestamping={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x3feb}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x7fff}}], 0x90}}, {{&(0x7f0000000d40)=@pppoe={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}, 'geneve0\x00'}}, 0x80, &(0x7f0000000dc0), 0x0, &(0x7f0000000ec0)=[@timestamping={{0x14, 0x1, 0x25, 0xffff}}, @txtime={{0x18, 0x1, 0x3d, 0x16}}, @txtime={{0x18, 0x1, 0x3d, 0x7f}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0xa8}}, @mark={{0x14, 0x1, 0x24, 0xb2}}, @mark={{0x14, 0x1, 0x24, 0xe}}, @mark={{0x14, 0x1, 0x24, 0x200}}, @timestamping={{0x14, 0x1, 0x25, 0x10000}}], 0xd8}}], 0x3, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a0400eb2636037f00000000", @ANYRES32=r5, @ANYBLOB="0200000000008000800012000800010076746936740002006000"], 0xa0}}, 0x0) sendmmsg(r1, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@xdp={0x2c, 0x4, r5, 0x2b}, 0x80, &(0x7f0000000080)=[{&(0x7f00000000c0)="ae", 0x1}, {&(0x7f0000000100)="132b37d615ea5141e7ad36d7e491c053fdaa334f6566230d46ad30bf49c270ba8ae40e0cc7a74af2e8aef9f09a9b914e824a1ca2845cbb35eff98570134427cb10b2d67e43de261e7867e03d8e782ca4f7f7e3cbac16777b0df602d47cadd43895204ce662f0f0c89ab65736424e21f73728b38a20d79a92cc3ed3fd19e44c9adad4231c7da427a6dec3e31ef2e2bfe69ef4ba0bea6d9f8aa240015d3dae7b061093e5aac8c3a12aed767216b5d1cedda654b7c00ab405ddb2dd7e92d3", 0xbd}], 0x2}}, {{0x0, 0x0, 0x0, 0xfffffe9b, &(0x7f0000000500)=ANY=[@ANYBLOB="100000000000000084"], 0x10}}], 0x2, 0x0) 349.9344ms ago: executing program 1 (id=1272): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000006c0)={0x14, r1, 0x1, 0x70bd28}, 0x14}}, 0x4000080) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xf}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xa}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffda5, 0x0, 0x0, 0x0}, 0x90) 294.721444ms ago: executing program 4 (id=1273): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@restrict, @func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3}}]}}, 0x0, 0x4a}, 0x20) (async) r0 = socket$can_j1939(0x1d, 0x2, 0x7) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001880)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2b0, 0x20a, 0x278, 0x2b0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'vlan0\x00'}, 0x7a, 0x118, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x80000001, 0x3}}, @common=@unspec=@connlabel={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@dst={{0x48}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007665745300000000040002800800040000000000"], 0x3c}}, 0x0) (async) r5 = socket$packet(0x11, 0x3, 0x300) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0xffff0000, 0xe, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0x0, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000080)={0x4c, r10, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x7, 0x2a}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}]]}, 0x4c}}, 0x0) (async) sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) (async) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r12, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0xfffffffe, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) (async) r13 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r13, &(0x7f0000007dc0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2, 0x0) (async) sendto$packet(r5, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r12, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) (async) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r3, 0x3, {0x1, 0xf0, 0x4}, 0x1}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010300000ae6f720ffa003"], 0x3c}}, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000140), r14) 227.734954ms ago: executing program 2 (id=1274): r0 = socket$caif_stream(0x25, 0x1, 0x0) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000c80)=0xe3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x12, &(0x7f00000001c0)=0x10, 0x4) connect$caif(r0, &(0x7f0000000cc0), 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(0xffffffffffffffff, 0xf518, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000240), &(0x7f0000000540)=0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r3, &(0x7f0000003a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/223, 0xdf}, 0x8}], 0x1, 0x20010060, 0x0) writev(r3, &(0x7f00000004c0)=[{&(0x7f0000000100)="92e558aee41f40232c49d89792302b0671e72cdd33c5c987230486a352c6245bb88f038e022633aca6f40b9869c264f5a83ddcad48e8c6d9adf938bf3ff9aac10ab1af2a078a65a1ce9333433a4c05df7360c364ee97239604e9bb7e50ae556f449e2125e6d51f2bd85fcd870a013769e3d52ad38e0d0b3712ccaea83d50d18976a25e58c2116e86de9335e67aaeb2cc442d24c6fddd265800c564185342dc9498411a49774a1b17fe7b14e767d14dc0db0b9dda144b2ccc66744c043ad88ce42033710cfbb006961153a827e12cf25e075a44e01b7ae411c46206115d0d0e494a86fee6d7b402ae59e2463173f19eadd80ca6", 0xf3}, {&(0x7f0000000040)="94604edfa2b55ffeb9781cfb9cfb7c52a3523e4fb74f1401aa06a86614b95e581bcfcb76dd3ce984f4ca0a77d398b12e7de7dca2aa66a115ac483e09b3b121f4e2", 0x41}, {&(0x7f0000000200)="8e7f294b32e1188b8383ba72882f9d9e603b8f5b5cb8b9211e66120343370607d8a4636dbf81c18f34f679", 0x2b}, {&(0x7f00000012c0)="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", 0x1000}, {&(0x7f00000002c0)="4369a92e92b3da71a41eee661876678ad417650475547b90732689d4801d6f515db71db5e33c92ea9dfe31eeb1787a8747e188d5f6fcd0c35e4893ddeff8b0a53daad6b5eb5ce4ba9cefee8ff10e3cae85e3757924a6e47c54a8441ccb7c473c60cdd6", 0x63}, {&(0x7f0000000340)="5e7708bcf498955cb6342cd220c94ed5418629b94f58151971639d002ad44ed8c4b41145f6289e4e850c93e4171d0aeb4d328ef40089c43d1a43c5a3d8d792ce6bfb1f48c46b8d23c24c6510db00f8c65977f6eed28c08ad855b04e438549b77f9371a509f378ee835aad916441edb8e487bf70a6e4378d0e97bc079803c9f576030e2fd8cb01613c959014c14f39c0336716445a1392c5cca8d275fb6ceb6a21f0746", 0xa3}, {&(0x7f0000000400)="aacec28570805f2aa7692d323441af85013bb3bad9df566ac9c4cd005f054a97944abd8dd2117b653a7907dcb9d5a8b0fb1b553152e9f5c9dd37507aa5dfbaf3790abe1e308cd87bad5ab4ef2ae2e5b708c5d7e83e5ad46a6e4c38985e196406f7c2606920d9c74f4c57253a9f53c3e70766874e063cf43480c1a2075f4e01abb084189d7f227afa16fa01f8c11d24f76cb3eb86395010d61f41", 0x9a}], 0x7) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x24, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0x9, 0x0, 0x0, 0x1, [@generic="976b640868"]}]}, 0x24}], 0x1}, 0x0) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000580)) socket$caif_stream(0x25, 0x1, 0x0) (async) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000c80)=0xe3, 0x4) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_int(r1, 0x29, 0x12, &(0x7f00000001c0)=0x10, 0x4) (async) connect$caif(r0, &(0x7f0000000cc0), 0x18) (async) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$F2FS_IOC_COMPRESS_FILE(0xffffffffffffffff, 0xf518, 0x0) (async) socket(0x40000000015, 0x5, 0x0) (async) getsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000240), &(0x7f0000000540)=0x10) (async) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) (async) recvmmsg(r3, &(0x7f0000003a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/223, 0xdf}, 0x8}], 0x1, 0x20010060, 0x0) (async) writev(r3, &(0x7f00000004c0)=[{&(0x7f0000000100)="92e558aee41f40232c49d89792302b0671e72cdd33c5c987230486a352c6245bb88f038e022633aca6f40b9869c264f5a83ddcad48e8c6d9adf938bf3ff9aac10ab1af2a078a65a1ce9333433a4c05df7360c364ee97239604e9bb7e50ae556f449e2125e6d51f2bd85fcd870a013769e3d52ad38e0d0b3712ccaea83d50d18976a25e58c2116e86de9335e67aaeb2cc442d24c6fddd265800c564185342dc9498411a49774a1b17fe7b14e767d14dc0db0b9dda144b2ccc66744c043ad88ce42033710cfbb006961153a827e12cf25e075a44e01b7ae411c46206115d0d0e494a86fee6d7b402ae59e2463173f19eadd80ca6", 0xf3}, {&(0x7f0000000040)="94604edfa2b55ffeb9781cfb9cfb7c52a3523e4fb74f1401aa06a86614b95e581bcfcb76dd3ce984f4ca0a77d398b12e7de7dca2aa66a115ac483e09b3b121f4e2", 0x41}, {&(0x7f0000000200)="8e7f294b32e1188b8383ba72882f9d9e603b8f5b5cb8b9211e66120343370607d8a4636dbf81c18f34f679", 0x2b}, {&(0x7f00000012c0)="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", 0x1000}, {&(0x7f00000002c0)="4369a92e92b3da71a41eee661876678ad417650475547b90732689d4801d6f515db71db5e33c92ea9dfe31eeb1787a8747e188d5f6fcd0c35e4893ddeff8b0a53daad6b5eb5ce4ba9cefee8ff10e3cae85e3757924a6e47c54a8441ccb7c473c60cdd6", 0x63}, {&(0x7f0000000340)="5e7708bcf498955cb6342cd220c94ed5418629b94f58151971639d002ad44ed8c4b41145f6289e4e850c93e4171d0aeb4d328ef40089c43d1a43c5a3d8d792ce6bfb1f48c46b8d23c24c6510db00f8c65977f6eed28c08ad855b04e438549b77f9371a509f378ee835aad916441edb8e487bf70a6e4378d0e97bc079803c9f576030e2fd8cb01613c959014c14f39c0336716445a1392c5cca8d275fb6ceb6a21f0746", 0xa3}, {&(0x7f0000000400)="aacec28570805f2aa7692d323441af85013bb3bad9df566ac9c4cd005f054a97944abd8dd2117b653a7907dcb9d5a8b0fb1b553152e9f5c9dd37507aa5dfbaf3790abe1e308cd87bad5ab4ef2ae2e5b708c5d7e83e5ad46a6e4c38985e196406f7c2606920d9c74f4c57253a9f53c3e70766874e063cf43480c1a2075f4e01abb084189d7f227afa16fa01f8c11d24f76cb3eb86395010d61f41", 0x9a}], 0x7) (async) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x24, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0x9, 0x0, 0x0, 0x1, [@generic="976b640868"]}]}, 0x24}], 0x1}, 0x0) (async) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000580)) (async) 205.081172ms ago: executing program 1 (id=1275): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000740)=@mangle={'mangle\x00', 0x1f, 0x6, 0x728, 0x488, 0x370, 0x370, 0x488, 0x488, 0x658, 0x658, 0x658, 0x658, 0x658, 0x6, &(0x7f0000000080), {[{{@uncond, 0x0, 0x168, 0x1a8, 0x0, {}, [@common=@srh1={{0x90}, {0x16, 0x1, 0x8, 0xd, 0x81, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @ipv4={'\x00', '\xff\xff', @remote}, [0xffffffff, 0xff000000, 0xffffff00, 0xff], [0xffffff00, 0xff, 0xcc7e7c4345d882c4, 0xff000000], [0x0, 0xffffff00], 0x1030, 0x10}}, @common=@srh={{0x30}, {0xfa, 0xa, 0x2, 0x3, 0x101}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b331ccf3290ff0148996a48d3cfcd8c8721563afbba17735f668553bffa9"}}, {{@ipv6={@local, @remote, [0x0, 0xffffffff, 0x0, 0xff], [0xffffffff, 0xff, 0x0, 0xffffffff], 'batadv_slave_0\x00', 'geneve1\x00', {}, {}, 0x3b, 0x32, 0x3, 0x1}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0x4d}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x14}, @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0x0, 0x5099a5732b858abf, 0xffffff00], [0xffffffff, 0xff000000, 0xffffffff, 0xffffff00], 'syzkaller0\x00', 'ipvlan0\x00', {0xff}, {}, 0x8, 0x1, 0x4, 0x90}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'veth1_macvtap\x00', {0x9}}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x3, 'system_u:object_r:tun_tap_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x788) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) r2 = socket$pppoe(0x18, 0x1, 0x0) (rerun: 32) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x11ff, @broadcast, 'bond_slave_1\x00'}}, 0x1e) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) connect$pppoe(r2, &(0x7f00000016c0)={0x18, 0x0, {0x3, @random="3c38448f3736", 'macvlan1\x00'}}, 0x1e) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)={0x58, r1, 0x1, 0x70bd69, 0x25dfdbfb, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0x5555555555550001}}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0202}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x2}, 0x300048c0) 142.888183ms ago: executing program 4 (id=1276): r0 = socket$kcm(0x10, 0x3, 0x10) (async) r1 = socket$rds(0x15, 0x5, 0x0) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) listen(r5, 0x0) (async) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) sendfile(r4, r3, 0x0, 0xe25) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r6, &(0x7f000000a940)={0x23, 0x9, 0xfd, 0x82}, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8982, &(0x7f0000000280)={0x6, '\x00', {0x200}, 0x8001}) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000000)={0x9, 'vlan1\x00'}) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000016000b63d25a8064000000000124fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)}, 0x12002) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x1351c1, 0x0) ioctl$PPPIOCDISCONN(r7, 0x7439) (async) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) r9 = socket(0x2a, 0x2, 0x0) getsockname$packet(r9, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) (async) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r9, 0x6, 0x1d, &(0x7f0000000300)={0x6, 0x3, 0x2, 0x6, 0xffffffff}, 0x14) (async) getsockname$packet(r8, 0x0, &(0x7f00000006c0)) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000700)=@alg={0x108, 0x10, 0x100, 0x70bd27, 0x25dfdbfe, {{'ctr(des3_ede)\x00'}, '\x00', '\x00', 0x400, 0x2400}, [{0x8, 0x1, 0x6}, {0x8, 0x1, 0x1}, {0x8}, {0x8, 0x1, 0x3}, {0x8, 0x1, 0x349e4279}]}, 0x108}, 0x1, 0x0, 0x0, 0x800}, 0x4) (async) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYRESHEX=r6, @ANYRES32=0x0, @ANYBLOB="05242d4b1ce7deb92bfb0765c856f69d49060000000000300012800b0001006272696467650000c03390b4aa34c4f91354282237e5200002800c0000"], 0x6c}, 0x1, 0x0, 0x0, 0x20408c5}, 0x10) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40, 0x0) write$tun(r11, &(0x7f00000004c0)={@void, @void, @mpls={[{0x2, 0x0, 0x1}, {0xfffff, 0x0, 0x1}, {0x9a}, {0x8, 0x0, 0x1}, {0x80000, 0x0, 0x1}, {0xffd0b, 0x0, 0x1}, {0x339d, 0x0, 0x1}], @generic="5629d72d1b12e3d0ace3de96a079d23fdd72ad3c3aa62682048367577de9070ff3a54f30ba4997aa7508a3788096595cf60c460b0f662742a359fcce16b347f0280ed2c1ea61e6d98a49f3f7cae80d9597f251bd79c13177d606f0ad9ec0d52163d9c7b35719d1661d61adfcfcf0095e626eb6d6733c2fdbbf2eae85dd15f401904da0a68dbcb07c450716e5310dc8dca9225a15ed225a8f78cac5e19e14a2c622119e14f6ae2b869cbe4e7c988d2aa83a5219ed33c3414ddb0c523280ce9e79b6d3020c7eb965ec54e968f006ad68e3a3dfbc8351964e2ac89dff1774f38fcef7369415b4e5dbd8aca63abbf42c"}}, 0x10a) 131.544019ms ago: executing program 2 (id=1277): r0 = socket$nl_crypto(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x253, 0x10, &(0x7f0000000000), 0x19f, 0x0, 0xffffffffffffffff, 0xffffffffffffff74}, 0x48) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x44040) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x15, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040090}, 0x800) 58.225046ms ago: executing program 1 (id=1278): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001200)={0x60000010}) (async) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r2, 0x84, 0x7f, 0x0, &(0x7f0000001180)=0x24) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000600)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0xfffffffd, 0x0, 0x0, 0x8}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}]}, 0x60}, 0x1, 0x7}, 0x0) (async) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) recvmmsg(r3, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)=""/188, 0xbc}, {&(0x7f0000000840)=""/230, 0xe6}, {&(0x7f0000001b40)=""/4109, 0x100d}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x4}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001880)=""/120, 0x78}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000005080)=""/4096, 0x1000}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/81, 0x51}], 0x5}, 0xb0}, {{0x0, 0x0, 0x0}, 0x2}], 0x8, 0x20, 0x0) (async) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000100)={0xa000000d}) (async) close(r1) 2.855103ms ago: executing program 2 (id=1279): bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) r0 = socket(0x1e, 0x4, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x88, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x300, 0x1, 0x4, 0x0, {0x5, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x300, 0x3, 0x1}}, @void, @void, @val={0x76, 0x6, {0x4, 0x80, 0x7, 0x6}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x88}, 0x1, 0x0, 0x0, 0x40025}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r1, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8, 0x73}}}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x40080) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r6 = socket(0x1e, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r8, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close(r6) 689.69µs ago: executing program 4 (id=1280): syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) listen(r0, 0x0) (async) listen(r0, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r1, &(0x7f0000000200)={0x2, @long}, 0x8) (async) connect$802154_dgram(r1, &(0x7f0000000200)={0x2, @long}, 0x8) syz_emit_ethernet(0x4e, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x10, 0x5, 0x3, 0x0, [0x0, 0x0, 0xfffffffe]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e23, @loopback}}, 0x6, 0x3}, &(0x7f0000000140)=0x90) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000240)={r3, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x400, 0x81, 0x6, 0x1000, 0x20, 0x6, 0x6}, &(0x7f00000001c0)=0x9c) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000240)={r3, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x400, 0x81, 0x6, 0x1000, 0x20, 0x6, 0x6}, &(0x7f00000001c0)=0x9c) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x46, 0x0, 0x0) setsockopt$llc_int(r0, 0x10c, 0x2, &(0x7f0000000300)=0xbd54, 0x4) getsockopt$inet6_int(r4, 0x29, 0x46, 0x0, &(0x7f00000000c0)) r5 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r7, 0x80, 0x9b}, [@NDA_LLADDR={0xa, 0x2, @dev}]}, 0x28}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000000000010a000000000000000000000200"], 0x14}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) close(r8) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="24e4ff00a004b9f0e9dbdb2505000000080004"], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) 0s ago: executing program 3 (id=265): r0 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, &(0x7f0000000140)=0x7, r0, &(0x7f0000000180)=0x6, 0x2, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r1, &(0x7f00000001c0)={0x24, @short={0x2, 0x2, 0xaaa0}}, 0x14) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$int_in(r2, 0x5452, &(0x7f00000002c0)=0x100000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x90, 0x10, 0x401, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x58, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffff7, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10000, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x200, 0x3}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x90}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) kernel console output (not intermixed with test programs): 3][ T6113] Bluetooth: MGMT ver 1.23 [ 88.871344][ T6117] netlink: 24 bytes leftover after parsing attributes in process `syz.1.46'. [ 88.943777][ T6122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.48'. [ 89.005164][ T6125] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.085428][ T6127] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.46'. [ 89.096484][ T6128] Zero length message leads to an empty skb [ 89.152717][ T6127] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.46'. [ 89.391986][ T6134] trusted_key: syz.3.52 sent an empty control message without MSG_MORE. [ 89.435199][ T30] audit: type=1800 audit(1751242825.580:2): pid=6136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.53" name="memory.events" dev="tmpfs" ino=79 res=0 errno=0 [ 89.498223][ T30] audit: type=1804 audit(1751242825.580:3): pid=6136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.53" name="/newroot/12/memory.events" dev="tmpfs" ino=79 res=1 errno=0 [ 89.602227][ T6141] netlink: 'syz.2.54': attribute type 21 has an invalid length. [ 90.814535][ C1] Unknown status report in ack skb [ 91.082841][ T6177] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 91.350414][ T6192] netlink: 'syz.2.69': attribute type 4 has an invalid length. [ 91.636060][ T6205] warning: `syz.1.73' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 91.669459][ T6205] __nla_validate_parse: 5 callbacks suppressed [ 91.669475][ T6205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.73'. [ 91.729217][ T6207] netlink: 'syz.0.75': attribute type 5 has an invalid length. [ 91.871948][ T6209] gtp0: entered promiscuous mode [ 91.908054][ T6209] gtp0: entered allmulticast mode [ 95.207972][ T6243] Bluetooth: MGMT ver 1.23 [ 95.264784][ T5953] IPVS: starting estimator thread 0... [ 95.377136][ T6246] IPVS: using max 34 ests per chain, 81600 per kthread [ 95.611393][ T6255] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.88'. [ 95.652195][ T6256] netlink: 'syz.0.91': attribute type 18 has an invalid length. [ 95.673037][ T6255] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.88'. [ 95.751210][ T6256] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.760335][ T6256] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.771321][ T6256] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.780197][ T6256] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.862001][ T6264] netlink: 'syz.1.92': attribute type 33 has an invalid length. [ 95.884793][ T6264] netlink: 152 bytes leftover after parsing attributes in process `syz.1.92'. [ 95.935748][ T6267] openvswitch: netlink: IP tunnel dst address not specified [ 95.972433][ T6269] netlink: 56 bytes leftover after parsing attributes in process `syz.0.95'. [ 96.462757][ T6291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.103'. [ 96.488782][ T6291] netlink: 16 bytes leftover after parsing attributes in process `syz.0.103'. [ 96.519544][ T6291] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 96.538377][ T44] IPVS: starting estimator thread 0... [ 96.647660][ T6296] IPVS: using max 32 ests per chain, 76800 per kthread [ 96.837872][ T6313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.109'. [ 97.020559][ T6322] ieee802154 phy0 wpan0: encryption failed: -22 [ 97.031477][ T6318] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.038707][ T6318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.047155][ T6318] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.054511][ T6318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.079120][ T6318] bridge0: entered allmulticast mode [ 97.319166][ T3453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.353125][ T3453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.443346][ T6348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.121'. [ 97.828873][ T6349] netlink: 16 bytes leftover after parsing attributes in process `syz.4.120'. [ 98.000464][ T6370] netlink: 'syz.2.128': attribute type 10 has an invalid length. [ 98.028013][ T6370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.128'. [ 98.106555][ T6370] veth1_to_hsr: mtu less than device minimum [ 98.200569][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 98.203604][ T6383] netlink: 32 bytes leftover after parsing attributes in process `syz.3.132'. [ 98.212901][ C1] IPv6: bridge0: IPv6 duplicate address fe80::a8aa:aaff:feaa:aa1c used by aa:aa:aa:aa:aa:1c detected! [ 98.247178][ T5838] Bluetooth: hci0: command tx timeout [ 98.285294][ T6385] netem: change failed [ 98.982673][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 99.012123][ T6419] netlink: 8 bytes leftover after parsing attributes in process `syz.4.145'. [ 99.220626][ T6430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.146'. [ 99.250088][ T6425] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.146'. [ 99.353033][ T6432] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.663798][ T6446] netlink: 'syz.4.153': attribute type 9 has an invalid length. [ 99.825624][ T6448] netlink: 12 bytes leftover after parsing attributes in process `syz.0.154'. [ 99.845984][ T6448] tc_dump_action: action bad kind [ 99.875701][ T6453] net veth1_virt_wifi .: renamed from virt_wifi0 [ 100.150775][ T6461] syzkaller1: entered promiscuous mode [ 100.185334][ T6466] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 100.199930][ T6461] syzkaller1: entered allmulticast mode [ 116.898781][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 129.266935][ T6486] netlink: 45 bytes leftover after parsing attributes in process `syz.1.163'. [ 129.530452][ T6504] delete_channel: no stack [ 129.602266][ T6511] netlink: 12 bytes leftover after parsing attributes in process `syz.0.171'. [ 129.692538][ T6514] netlink: 'syz.0.171': attribute type 2 has an invalid length. [ 129.742313][ T6511] xt_CT: No such helper "netbios-ns" [ 129.774751][ T6515] Cannot find add_set index 0 as target [ 129.936829][ T6523] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 130.040757][ T6523] bond1: entered promiscuous mode [ 130.062184][ T6523] bond1: entered allmulticast mode [ 130.096020][ T6523] 8021q: adding VLAN 0 to HW filter on device bond1 [ 130.877991][ T6569] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.187'. [ 130.904185][ T6564] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.187'. [ 130.963852][ T6569] tap0: tun_chr_ioctl cmd 1074025677 [ 130.989630][ T6569] tap0: linktype set to 823 [ 131.217660][ T6587] netlink: 16 bytes leftover after parsing attributes in process `syz.4.192'. [ 131.316054][ T6593] netlink: 277 bytes leftover after parsing attributes in process `syz.0.195'. [ 131.409035][ T6597] netlink: 4 bytes leftover after parsing attributes in process `syz.3.194'. [ 131.498223][ T6605] netlink: 28 bytes leftover after parsing attributes in process `syz.4.197'. [ 131.536692][ T6605] netlink: 40 bytes leftover after parsing attributes in process `syz.4.197'. [ 131.554895][ T6602] netlink: 'syz.1.196': attribute type 2 has an invalid length. [ 131.584950][ T6610] netlink: 28 bytes leftover after parsing attributes in process `syz.4.197'. [ 131.701373][ T6612] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 131.762332][ T6612] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.799772][ T6624] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 131.852510][ T6619] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 132.245403][ T6644] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 132.616473][ T6658] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.625610][ T6658] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.897597][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.933890][ T6681] netlink: 'syz.2.218': attribute type 10 has an invalid length. [ 134.045482][ T6681] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 134.204251][ T6690] netlink: 'syz.4.222': attribute type 1 has an invalid length. [ 134.257904][ T6690] netlink: 'syz.4.222': attribute type 3 has an invalid length. [ 134.317151][ T6690] __nla_validate_parse: 9 callbacks suppressed [ 134.317168][ T6690] netlink: 224 bytes leftover after parsing attributes in process `syz.4.222'. [ 134.424861][ T6699] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 134.485054][ T6690] NCSI netlink: No device for ifindex 0 [ 134.499841][ T6712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.225'. [ 134.769468][ T6726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.232'. [ 134.786307][ T6726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.232'. [ 134.810322][ T6726] netlink: 108 bytes leftover after parsing attributes in process `syz.2.232'. [ 135.008683][ T6736] x_tables: duplicate underflow at hook 1 [ 135.198870][ T6743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.237'. [ 135.238945][ T6748] netlink: 'syz.0.241': attribute type 1 has an invalid length. [ 135.246712][ T6748] netlink: 184 bytes leftover after parsing attributes in process `syz.0.241'. [ 135.256005][ T6748] netlink: 'syz.0.241': attribute type 1 has an invalid length. [ 135.347814][ T6754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.242'. [ 135.431795][ T6763] netlink: 256 bytes leftover after parsing attributes in process `syz.3.245'. [ 135.526678][ T6767] netlink: 14 bytes leftover after parsing attributes in process `syz.0.247'. [ 135.571799][ T6767] hsr_slave_0: left promiscuous mode [ 135.585460][ T6767] hsr_slave_1: left promiscuous mode [ 135.839393][ T6791] openvswitch: netlink: Flow key attr not present in new flow. [ 136.039332][ T6806] tls_set_device_offload: netdev not found [ 136.382554][ T3517] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.499596][ T3517] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.655609][ T3517] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.822362][ T3517] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.864396][ T6834] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.066355][ T6845] pim6reg: entered allmulticast mode [ 137.140986][ T6848] pim6reg: left allmulticast mode [ 137.226635][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 137.254109][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 137.265778][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 137.274221][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 137.283827][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 137.339060][ T3517] bridge_slave_1: left allmulticast mode [ 137.345022][ T3517] bridge_slave_1: left promiscuous mode [ 137.357269][ T3517] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.374157][ T6858] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 137.406023][ T3517] bridge_slave_0: left allmulticast mode [ 137.422921][ T3517] bridge_slave_0: left promiscuous mode [ 137.433877][ T3517] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.531201][ T6873] netlink: 'syz.1.281': attribute type 7 has an invalid length. [ 137.860051][ T3517] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.871340][ T3517] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.881828][ T3517] bond0 (unregistering): Released all slaves [ 137.895908][ T3517] bond1 (unregistering): Released all slaves [ 137.935164][ T6873] : entered promiscuous mode [ 138.564490][ T3517] hsr_slave_0: left promiscuous mode [ 138.580008][ T3517] hsr_slave_1: left promiscuous mode [ 138.600044][ T3517] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.617880][ T3517] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.638546][ T3517] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.655507][ T3517] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.709618][ T3517] veth1_macvtap: left promiscuous mode [ 138.733018][ T3517] veth0_macvtap: left promiscuous mode [ 138.743377][ T3517] veth1_vlan: left promiscuous mode [ 138.756948][ T3517] veth0_vlan: left promiscuous mode [ 139.367187][ T5838] Bluetooth: hci4: command tx timeout [ 139.705686][ T6981] __nla_validate_parse: 9 callbacks suppressed [ 139.705705][ T6981] netlink: 12 bytes leftover after parsing attributes in process `syz.2.297'. [ 139.790297][ T6983] netlink: 'syz.2.297': attribute type 10 has an invalid length. [ 139.867720][ T6986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.298'. [ 139.878317][ T6986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.298'. [ 139.890711][ T6986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.298'. [ 139.899954][ T6986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.298'. [ 139.910801][ T6986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.298'. [ 139.920164][ T6986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.298'. [ 139.930977][ T6986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.298'. [ 139.941404][ T6986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.298'. [ 139.951465][ T6986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.298'. [ 140.090163][ T3517] team0 (unregistering): Port device team_slave_1 removed [ 140.132358][ T3517] team0 (unregistering): Port device team_slave_0 removed [ 140.566466][ T6983] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.594070][ T6983] bond0: (slave team0): Enslaving as an active interface with an up link [ 140.748535][ T6998] x_tables: duplicate underflow at hook 1 [ 140.939567][ T6852] chnl_net:caif_netlink_parms(): no params data found [ 141.064244][ T7021] netlink: 'syz.0.309': attribute type 12 has an invalid length. [ 141.084986][ T7021] netlink: 'syz.0.309': attribute type 4 has an invalid length. [ 141.144775][ T7025] lo: entered promiscuous mode [ 141.155755][ T7025] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 141.214957][ T7027] syzkaller1: entered promiscuous mode [ 141.220859][ T7027] syzkaller1: entered allmulticast mode [ 141.279874][ T3517] IPVS: stop unused estimator thread 0... [ 141.314882][ T6852] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.323017][ T6852] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.333804][ T6852] bridge_slave_0: entered allmulticast mode [ 141.345506][ T6852] bridge_slave_0: entered promiscuous mode [ 141.361962][ T6852] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.376236][ T6852] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.389272][ T6852] bridge_slave_1: entered allmulticast mode [ 141.397394][ T6852] bridge_slave_1: entered promiscuous mode [ 141.447244][ T5838] Bluetooth: hci4: command tx timeout [ 141.485761][ T7033] bridge_slave_1: left allmulticast mode [ 141.496708][ T7033] bridge_slave_1: left promiscuous mode [ 141.503271][ T7033] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.521689][ T7033] bridge_slave_0: left allmulticast mode [ 141.531420][ T7033] bridge_slave_0: left promiscuous mode [ 141.540361][ T7033] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.598116][ T6852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.670727][ T6852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.784485][ T6852] team0: Port device team_slave_0 added [ 141.830267][ T6852] team0: Port device team_slave_1 added [ 141.944361][ T6852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.958044][ T6852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.015863][ T6852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.039473][ T6852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.051554][ T6852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.084071][ T6852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.171944][ T6852] hsr_slave_0: entered promiscuous mode [ 142.179416][ T6852] hsr_slave_1: entered promiscuous mode [ 142.188769][ T6852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 142.204873][ T6852] Cannot create hsr debugfs directory [ 142.380019][ T7085] vlan2: entered promiscuous mode [ 142.385196][ T7085] bridge0: entered promiscuous mode [ 143.539826][ T5838] Bluetooth: hci4: command tx timeout [ 143.759578][ T7117] netlink: 'syz.4.339': attribute type 1 has an invalid length. [ 143.807914][ T7121] netlink: 'syz.2.340': attribute type 21 has an invalid length. [ 143.815697][ T7121] netlink: 'syz.2.340': attribute type 22 has an invalid length. [ 143.848110][ T7121] netlink: 'syz.2.340': attribute type 23 has an invalid length. [ 143.855884][ T7121] netlink: 'syz.2.340': attribute type 25 has an invalid length. [ 143.885601][ T7121] netlink: 'syz.2.340': attribute type 26 has an invalid length. [ 143.903046][ T6852] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 143.923828][ T6852] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 143.980712][ T6852] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 144.014754][ T6852] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 144.192378][ T7150] netlink: 'syz.1.348': attribute type 1 has an invalid length. [ 144.331523][ T6852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.625402][ T6852] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.663523][ T3480] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.670753][ T3480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.763786][ T6971] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.770988][ T6971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.783680][ T7185] unknown channel width for channel at 909000KHz? [ 144.795326][ T7184] netlink: 'syz.4.359': attribute type 83 has an invalid length. [ 144.960681][ T7191] __nla_validate_parse: 37 callbacks suppressed [ 144.960698][ T7191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.361'. [ 144.960772][ T7190] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 144.967391][ T7193] netlink: 8 bytes leftover after parsing attributes in process `syz.4.361'. [ 145.224517][ T7204] ipvlan5: entered promiscuous mode [ 145.240807][ T7204] bridge0: port 3(ipvlan5) entered blocking state [ 145.249590][ T7204] bridge0: port 3(ipvlan5) entered disabled state [ 145.256392][ T7204] ipvlan5: entered allmulticast mode [ 145.266499][ T7204] ipvlan5: left allmulticast mode [ 145.344138][ T6852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.466528][ T6852] veth0_vlan: entered promiscuous mode [ 145.499031][ T7218] xt_bpf: check failed: parse error [ 145.514072][ T6852] veth1_vlan: entered promiscuous mode [ 145.524231][ T7220] netlink: 24 bytes leftover after parsing attributes in process `syz.4.369'. [ 145.547532][ T7220] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 145.618148][ T5838] Bluetooth: hci4: command tx timeout [ 145.633848][ T6852] veth0_macvtap: entered promiscuous mode [ 145.643863][ T7226] x_tables: duplicate underflow at hook 1 [ 145.649160][ T6852] veth1_macvtap: entered promiscuous mode [ 145.679843][ T6852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.699030][ T6852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.721002][ T6852] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.747170][ T6852] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.755916][ T6852] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.774029][ T6852] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.813288][ T7229] bond1: entered promiscuous mode [ 145.819259][ T7229] bond1: entered allmulticast mode [ 145.824837][ T7229] 8021q: adding VLAN 0 to HW filter on device bond1 [ 145.833569][ T7231] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.861564][ T7231] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.945839][ T7238] netlink: 64 bytes leftover after parsing attributes in process `syz.1.373'. [ 145.964789][ T7238] xt_limit: Overflow, try lower: 0/0 [ 146.123653][ T7242] netlink: 4 bytes leftover after parsing attributes in process `syz.4.375'. [ 146.137848][ T7242] netlink: 4 bytes leftover after parsing attributes in process `syz.4.375'. [ 146.159473][ T6971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.218020][ T6971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.283900][ T7252] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 146.300491][ T6971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.314856][ T6971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.407390][ T7261] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 146.665958][ T7275] pim6reg1: entered promiscuous mode [ 146.672240][ T7275] pim6reg1: entered allmulticast mode [ 146.709509][ T7277] netlink: 64 bytes leftover after parsing attributes in process `syz.2.386'. [ 146.850580][ T6954] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.009327][ T6954] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.080876][ T7288] tipc: Started in network mode [ 147.093085][ T7288] tipc: Node identity ac1414aa, cluster identity 4711 [ 147.110582][ T7288] tipc: Enabled bearer , priority 10 [ 147.160967][ T7290] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 147.202160][ T7290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.389'. [ 147.242870][ T7291] veth0_to_batadv: entered allmulticast mode [ 147.362063][ T6954] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.406214][ T7300] netlink: 16 bytes leftover after parsing attributes in process `syz.0.396'. [ 147.417894][ T7300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.396'. [ 147.653110][ T6954] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.668548][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 147.683260][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 147.690803][ T7310] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge0 [ 147.702615][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 147.731772][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 147.749490][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 148.100843][ T6954] bridge_slave_1: left allmulticast mode [ 148.106744][ T6954] bridge_slave_1: left promiscuous mode [ 148.116362][ T6954] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.135973][ T6954] bridge_slave_0: left allmulticast mode [ 148.157115][ T6954] bridge_slave_0: left promiscuous mode [ 148.162960][ T6954] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.238810][ T24] tipc: Node number set to 2886997162 [ 148.582742][ T6954] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.593899][ T6954] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.604319][ T6954] bond0 (unregistering): Released all slaves [ 148.730973][ T7320] chnl_net:caif_netlink_parms(): no params data found [ 148.982261][ T7374] validate_nla: 1 callbacks suppressed [ 148.982279][ T7374] netlink: 'syz.4.415': attribute type 2 has an invalid length. [ 149.036797][ T7374] netlink: 'syz.4.415': attribute type 1 has an invalid length. [ 149.069778][ T7374] xt_limit: Overflow, try lower: 0/0 [ 149.152101][ T7377] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.182836][ T7377] bridge_slave_1 (unregistering): left allmulticast mode [ 149.190647][ T7377] bridge_slave_1 (unregistering): left promiscuous mode [ 149.201021][ T7377] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.390703][ T6954] hsr_slave_0: left promiscuous mode [ 149.401859][ T6954] hsr_slave_1: left promiscuous mode [ 149.410554][ T6954] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.427196][ T6954] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.454418][ T6954] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.467639][ T6954] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.510302][ T6954] veth1_macvtap: left promiscuous mode [ 149.526144][ T6954] veth0_macvtap: left promiscuous mode [ 149.544614][ T6954] veth1_vlan: left promiscuous mode [ 149.550871][ T6954] veth0_vlan: left promiscuous mode [ 149.848908][ T5838] Bluetooth: hci4: command tx timeout [ 150.130725][ T6954] team0 (unregistering): Port device team_slave_1 removed [ 150.168558][ T6954] team0 (unregistering): Port device team_slave_0 removed [ 150.549121][ T7320] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.556396][ T7320] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.564583][ T7320] bridge_slave_0: entered allmulticast mode [ 150.572394][ T7320] bridge_slave_0: entered promiscuous mode [ 150.642445][ T7320] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.661924][ T7320] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.692212][ T7320] bridge_slave_1: entered allmulticast mode [ 150.715320][ T7320] bridge_slave_1: entered promiscuous mode [ 150.905921][ T7320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.968836][ T7320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.142799][ T7320] team0: Port device team_slave_0 added [ 151.171573][ T7445] __nla_validate_parse: 7 callbacks suppressed [ 151.171593][ T7445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.434'. [ 151.286116][ T7320] team0: Port device team_slave_1 added [ 151.394892][ T7455] netdevsim netdevsim1 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 151.927457][ T5838] Bluetooth: hci4: command tx timeout [ 152.708793][ T7481] netlink: 24 bytes leftover after parsing attributes in process `syz.0.444'. [ 153.006549][ T7320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.013980][ T7320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.040564][ T7320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.063615][ T7480] team0: No ports can be present during mode change [ 153.137281][ T7485] netlink: 32 bytes leftover after parsing attributes in process `syz.0.444'. [ 153.157796][ T7488] netlink: 32 bytes leftover after parsing attributes in process `syz.1.445'. [ 153.161628][ T7486] netlink: 20 bytes leftover after parsing attributes in process `syz.0.444'. [ 153.167592][ T7488] netlink: 40 bytes leftover after parsing attributes in process `syz.1.445'. [ 153.229346][ T7320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.236612][ T7320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.263378][ T7320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.306972][ T7497] netlink: 40 bytes leftover after parsing attributes in process `syz.0.448'. [ 153.324180][ T7492] netlink: 12 bytes leftover after parsing attributes in process `syz.4.446'. [ 153.483377][ T7320] hsr_slave_0: entered promiscuous mode [ 153.493058][ T7320] hsr_slave_1: entered promiscuous mode [ 153.502153][ T7320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 153.511871][ T7320] Cannot create hsr debugfs directory [ 153.532395][ T7511] netlink: 24 bytes leftover after parsing attributes in process `syz.2.451'. [ 153.622695][ T7514] netlink: 12 bytes leftover after parsing attributes in process `syz.2.451'. [ 153.860380][ T7524] netdevsim netdevsim4: Direct firmware load for D failed with error -2 [ 153.876900][ T7524] netdevsim netdevsim4: Falling back to sysfs fallback for: D [ 153.895372][ T7520] sock: sock_timestamping_bind_phc: sock not bind to device [ 154.011851][ T5838] Bluetooth: hci4: command tx timeout [ 154.276815][ T7549] xt_CT: No such helper "snmp" [ 154.332136][ T7549] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 154.622293][ T7320] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 154.653569][ T7320] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 154.694425][ T7320] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 154.736845][ T7320] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 154.816236][ T7577] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 154.823042][ T7577] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 154.837803][ T7577] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 154.844266][ T7577] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 154.879538][ T7577] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 154.886128][ T7577] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 154.907912][ T7577] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 154.914393][ T7577] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 154.942003][ T7577] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 154.973937][ T7593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.992150][ T7320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.033838][ T7320] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.063221][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.071277][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.102012][ T6964] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.109257][ T6964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.178396][ T7597] netlink: 'syz.1.472': attribute type 1 has an invalid length. [ 155.472318][ T7611] tipc: Started in network mode [ 155.492561][ T7611] tipc: Node identity f61f34277b4c, cluster identity 4711 [ 155.505927][ T7611] tipc: Enabled bearer , priority 10 [ 155.545660][ T7320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.662665][ T7320] veth0_vlan: entered promiscuous mode [ 155.710038][ T7320] veth1_vlan: entered promiscuous mode [ 155.864065][ T7320] veth0_macvtap: entered promiscuous mode [ 155.902763][ T7320] veth1_macvtap: entered promiscuous mode [ 155.955333][ T7320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.976243][ T7320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.005001][ T7320] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.032948][ T7320] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.042302][ T7320] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.054717][ T7320] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.088636][ T5838] Bluetooth: hci4: command tx timeout [ 156.238247][ T3517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.266049][ T3517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.335721][ T3480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.359777][ T3480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.515623][ T7664] __nla_validate_parse: 6 callbacks suppressed [ 156.515642][ T7664] netlink: 28 bytes leftover after parsing attributes in process `syz.4.493'. [ 156.617369][ T5850] tipc: Node number set to 2371040295 [ 156.626670][ T12] bond0: (slave wlan1): link status definitely down, disabling slave [ 156.752588][ T7672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.495'. [ 157.240243][ T7699] netlink: 24 bytes leftover after parsing attributes in process `syz.0.501'. [ 157.280681][ T7699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.501'. [ 157.395954][ T7708] netlink: 'syz.2.504': attribute type 1 has an invalid length. [ 157.419732][ T7708] netlink: 172 bytes leftover after parsing attributes in process `syz.2.504'. [ 157.461548][ T7710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.505'. [ 157.537004][ T7714] netlink: 132 bytes leftover after parsing attributes in process `syz.4.506'. [ 157.554212][ T6954] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.584506][ T7710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.505'. [ 157.829242][ T7722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.509'. [ 157.973728][ T7728] netlink: 4 bytes leftover after parsing attributes in process `syz.2.511'. [ 158.075696][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 158.085149][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 158.093781][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 158.102777][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 158.112769][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 158.202112][ T7730] netem: incorrect gi model size [ 158.209640][ T7730] netem: change failed [ 158.242254][ T7736] bond0: (slave wlan1): Releasing backup interface [ 158.441391][ T6954] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.602671][ T6954] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.822705][ T6954] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.194601][ T7732] chnl_net:caif_netlink_parms(): no params data found [ 159.252376][ T6954] bridge_slave_1: left allmulticast mode [ 159.259267][ T6954] bridge_slave_1: left promiscuous mode [ 159.265900][ T6954] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.283249][ T6954] bridge_slave_0: left allmulticast mode [ 159.290655][ T6954] bridge_slave_0: left promiscuous mode [ 159.297191][ T6954] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.668674][ T6954] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.680615][ T6954] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.692218][ T6954] bond0 (unregistering): Released all slaves [ 159.731462][ T7794] team0: Device is already in use. [ 160.021822][ T7801] syzkaller0: entered promiscuous mode [ 160.028053][ T7801] syzkaller0: entered allmulticast mode [ 160.039746][ T7732] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.043913][ T7816] xt_limit: Overflow, try lower: 2147483649/128 [ 160.046892][ T7732] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.066829][ T7732] bridge_slave_0: entered allmulticast mode [ 160.082369][ T7732] bridge_slave_0: entered promiscuous mode [ 160.107742][ T7732] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.114940][ T7732] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.125881][ T7732] bridge_slave_1: entered allmulticast mode [ 160.135134][ T7732] bridge_slave_1: entered promiscuous mode [ 160.172899][ T5838] Bluetooth: hci4: command tx timeout [ 160.273312][ T6954] hsr_slave_0: left promiscuous mode [ 160.286347][ T6954] hsr_slave_1: left promiscuous mode [ 160.294343][ T6954] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.310896][ T6954] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.326219][ T7826] netlink: 'syz.0.534': attribute type 1 has an invalid length. [ 160.328066][ T6954] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.351845][ T6954] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.390170][ T7829] netlink: 'syz.1.536': attribute type 30 has an invalid length. [ 160.403412][ T6954] veth1_macvtap: left promiscuous mode [ 160.412897][ T6954] veth0_macvtap: left promiscuous mode [ 160.418978][ T6954] veth1_vlan: left promiscuous mode [ 160.424316][ T6954] veth0_vlan: left promiscuous mode [ 160.933615][ T6954] team0 (unregistering): Port device team_slave_1 removed [ 160.993023][ T6954] team0 (unregistering): Port device team_slave_0 removed [ 161.393491][ T7732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.253845][ T5838] Bluetooth: hci4: command tx timeout [ 162.574579][ T7830] netlink: 'syz.0.537': attribute type 12 has an invalid length. [ 162.582915][ T7829] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 162.592332][ T7829] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 162.603146][ T7832] netlink: 'syz.0.537': attribute type 4 has an invalid length. [ 162.617408][ T7841] __nla_validate_parse: 5 callbacks suppressed [ 162.617426][ T7841] netlink: 11 bytes leftover after parsing attributes in process `syz.2.538'. [ 162.677539][ T7732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.835237][ T5941] hid-generic 0005:10CF:05DF.0001: item fetching failed at offset 0/1 [ 162.877128][ T5941] hid-generic 0005:10CF:05DF.0001: probe with driver hid-generic failed with error -22 [ 162.884044][ T7732] team0: Port device team_slave_0 added [ 162.915561][ T7732] team0: Port device team_slave_1 added [ 162.925720][ T7861] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.544'. [ 163.030833][ T7866] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 163.043893][ T7732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.058575][ T7732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.112708][ T7732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.151940][ T7732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.159968][ T7732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.195477][ T7732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.423816][ T7889] tipc: Enabling of bearer rejected, failed to enable media [ 163.448702][ T7732] hsr_slave_0: entered promiscuous mode [ 163.463084][ T7732] hsr_slave_1: entered promiscuous mode [ 163.477995][ T7732] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.494208][ T7732] Cannot create hsr debugfs directory [ 163.632121][ T7901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.555'. [ 163.643608][ T7901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.555'. [ 164.186875][ T7930] Cannot find set identified by id 0 to match [ 164.328107][ T5838] Bluetooth: hci4: command tx timeout [ 164.445332][ T7941] netlink: 28 bytes leftover after parsing attributes in process `syz.2.564'. [ 164.639059][ T7732] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 164.665110][ T7732] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 164.692956][ T7953] netlink: 24 bytes leftover after parsing attributes in process `syz.1.567'. [ 164.693806][ T7732] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 164.732929][ T7732] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 164.833221][ T7961] netlink: 312 bytes leftover after parsing attributes in process `syz.2.569'. [ 164.851568][ T7967] net_ratelimit: 68 callbacks suppressed [ 164.851586][ T7967] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 165.063703][ T7732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.133373][ T7732] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.173852][ T3517] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.181085][ T3517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.232093][ T3517] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.239345][ T3517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.333220][ T7732] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 165.451021][ T7996] tipc: Started in network mode [ 165.455932][ T7996] tipc: Node identity 080211000001, cluster identity 4711 [ 165.508224][ T7996] tipc: Enabled bearer , priority 0 [ 165.536573][ T7997] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 165.568065][ T7997] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 165.586273][ T7997] tipc: Resetting bearer [ 165.781789][ T6966] tipc: Resetting bearer [ 165.830331][ T8019] pimreg: entered allmulticast mode [ 165.963333][ T7732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.072451][ T8032] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 166.162737][ T8032] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 166.199703][ T8032] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 166.246173][ T8046] netlink: 'syz.4.589': attribute type 11 has an invalid length. [ 166.255778][ T8046] netlink: 'syz.4.589': attribute type 11 has an invalid length. [ 166.281607][ T7732] veth0_vlan: entered promiscuous mode [ 166.285869][ T8046] netlink: 224 bytes leftover after parsing attributes in process `syz.4.589'. [ 166.406792][ T8032] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 166.425784][ T5838] Bluetooth: hci4: command tx timeout [ 166.452602][ T8032] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 166.516481][ T7732] veth1_vlan: entered promiscuous mode [ 166.541674][ T8032] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 166.570288][ T8032] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 166.595064][ T8054] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 166.617699][ T8032] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 166.637216][ T5834] tipc: Node number set to 134418688 [ 166.760912][ T7732] veth0_macvtap: entered promiscuous mode [ 166.825102][ T7732] veth1_macvtap: entered promiscuous mode [ 166.909346][ T7732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.930464][ T8061] netlink: 'syz.4.595': attribute type 3 has an invalid length. [ 166.938624][ T7732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.955569][ T7732] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.991821][ T7732] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.011000][ T7732] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.031470][ T7732] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.056883][ T8066] IPVS: Error connecting to the multicast addr [ 167.092613][ T8065] IPVS: Error connecting to the multicast addr [ 167.263766][ T3517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.291915][ T3517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.399071][ T6962] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.416295][ T6962] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.519935][ T8085] syzkaller1: entered allmulticast mode [ 167.725330][ T8107] Cannot find add_set index 4 as target [ 167.803242][ T8112] netlink: 32 bytes leftover after parsing attributes in process `syz.1.610'. [ 167.857625][ T8114] Illegal XDP return value 4294967274 on prog (id 168) dev N/A, expect packet loss! [ 167.969439][ T8123] netlink: 8 bytes leftover after parsing attributes in process `syz.4.612'. [ 168.272244][ T6951] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.480441][ T6951] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.601116][ T6951] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.700343][ T6951] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.841792][ T6951] bridge_slave_1: left allmulticast mode [ 168.847761][ T6951] bridge_slave_1: left promiscuous mode [ 168.853462][ T6951] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.862398][ T6951] bridge_slave_0: left allmulticast mode [ 168.868931][ T6951] bridge_slave_0: left promiscuous mode [ 168.874622][ T6951] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.161276][ T8156] netlink: 20 bytes leftover after parsing attributes in process `syz.0.619'. [ 169.490149][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 169.499674][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 169.509798][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 169.518175][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 169.526200][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 169.839540][ T6951] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.865994][ T6951] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.885943][ T6951] bond0 (unregistering): Released all slaves [ 169.926439][ T8172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.624'. [ 169.969555][ T8172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.624'. [ 169.999801][ T8172] netlink: 36 bytes leftover after parsing attributes in process `syz.2.624'. [ 170.160420][ T8187] netlink: 'syz.1.628': attribute type 8 has an invalid length. [ 170.422584][ T8204] netlink: 300 bytes leftover after parsing attributes in process `syz.4.633'. [ 170.437925][ T8204] net_ratelimit: 30 callbacks suppressed [ 170.437943][ T8204] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 170.534124][ T8212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.632'. [ 170.579629][ T6951] hsr_slave_0: left promiscuous mode [ 170.591543][ T6951] hsr_slave_1: left promiscuous mode [ 170.638406][ T6951] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.645859][ T6951] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.676433][ T8220] netlink: 12 bytes leftover after parsing attributes in process `syz.2.632'. [ 170.706771][ T6951] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.733091][ T6951] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.772635][ T6951] veth1_macvtap: left promiscuous mode [ 170.779687][ T6951] veth0_macvtap: left promiscuous mode [ 170.785888][ T6951] veth1_vlan: left promiscuous mode [ 170.796534][ T6951] veth0_vlan: left promiscuous mode [ 171.260218][ T6951] team0 (unregistering): Port device team_slave_1 removed [ 171.260749][ T8226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.635'. [ 171.323295][ T6951] team0 (unregistering): Port device team_slave_0 removed [ 171.343450][ T8231] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 171.619160][ T5844] Bluetooth: hci4: command tx timeout [ 171.703162][ T8217] bridge: RTM_NEWNEIGH with invalid ether address [ 171.714537][ T8169] chnl_net:caif_netlink_parms(): no params data found [ 172.086650][ T8235] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.098962][ T8235] tipc: Resetting bearer [ 172.193789][ T8235] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.203659][ T8235] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.214033][ T8235] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.223039][ T8235] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.354250][ T8169] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.367506][ T8169] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.374769][ T8169] bridge_slave_0: entered allmulticast mode [ 172.393793][ T8169] bridge_slave_0: entered promiscuous mode [ 172.403427][ T8169] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.410773][ T8169] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.418342][ T8169] bridge_slave_1: entered allmulticast mode [ 172.426086][ T8169] bridge_slave_1: entered promiscuous mode [ 172.586518][ T8169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.633223][ T8169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.804634][ T8169] team0: Port device team_slave_0 added [ 172.844875][ T8169] team0: Port device team_slave_1 added [ 172.864739][ T8287] netlink: 'syz.2.652': attribute type 1 has an invalid length. [ 172.979734][ T8169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.988683][ T8169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.016168][ T8169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.039219][ T8169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.046202][ T8169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.082673][ T8169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.145556][ T8300] __nla_validate_parse: 2 callbacks suppressed [ 173.145574][ T8300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.654'. [ 173.225820][ T8304] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 173.266283][ T8169] hsr_slave_0: entered promiscuous mode [ 173.286225][ T8169] hsr_slave_1: entered promiscuous mode [ 173.307526][ T8169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 173.321323][ T8169] Cannot create hsr debugfs directory [ 173.471060][ T8320] delete_channel: no stack [ 173.688415][ T5844] Bluetooth: hci4: command tx timeout [ 173.741032][ T8336] sctp: [Deprecated]: syz.4.665 (pid 8336) Use of int in max_burst socket option. [ 173.741032][ T8336] Use struct sctp_assoc_value instead [ 173.853794][ T8332] netlink: 'syz.2.663': attribute type 10 has an invalid length. [ 173.985755][ T8350] netlink: 20 bytes leftover after parsing attributes in process `syz.0.669'. [ 174.108740][ T8355] netlink: 696 bytes leftover after parsing attributes in process `syz.4.672'. [ 174.127590][ T8358] netlink: 696 bytes leftover after parsing attributes in process `syz.4.672'. [ 174.238019][ T8169] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 174.261131][ T8169] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 174.278843][ T8169] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 174.295824][ T8169] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 174.305176][ T8369] netlink: 'syz.4.676': attribute type 25 has an invalid length. [ 174.404601][ T8382] netlink: 'syz.4.679': attribute type 2 has an invalid length. [ 174.608474][ T8169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.658471][ T8169] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.711943][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.719157][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.760407][ T8396] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 174.762068][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.774811][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.830395][ T8396] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 174.835084][ T8169] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 174.855016][ T8169] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 174.873739][ T8402] netlink: 'syz.2.687': attribute type 10 has an invalid length. [ 174.916390][ T8402] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 174.955086][ T8402] bond0: (slave netdevsim0): Enslaving as an active interface with a down link [ 174.973613][ T8406] netlink: 3 bytes leftover after parsing attributes in process `syz.2.687'. [ 175.003176][ T8406] openvswitch: netlink: Actions may not be safe on all matching packets [ 175.334046][ T8426] netlink: 12 bytes leftover after parsing attributes in process `syz.0.691'. [ 175.406551][ T8169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.465595][ T8437] nbd: must specify a device to reconfigure [ 175.584034][ T8169] veth0_vlan: entered promiscuous mode [ 175.614443][ T8169] veth1_vlan: entered promiscuous mode [ 175.719670][ T8169] veth0_macvtap: entered promiscuous mode [ 175.742501][ T8169] veth1_macvtap: entered promiscuous mode [ 175.764079][ T8453] netlink: 16 bytes leftover after parsing attributes in process `syz.4.700'. [ 175.774024][ T5844] Bluetooth: hci4: command tx timeout [ 175.794094][ T8450] ip6gre1: entered allmulticast mode [ 175.832338][ T8169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.869282][ T8169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.890511][ T8169] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.915765][ T8169] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.924983][ T8169] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.934526][ T8169] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.050259][ T8463] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 176.156873][ T3480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.171985][ T3480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.223486][ T3517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.254627][ T3517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.275673][ T8475] netlink: 22 bytes leftover after parsing attributes in process `syz.4.705'. [ 176.498756][ T8486] netlink: 'syz.2.708': attribute type 11 has an invalid length. [ 176.533737][ T8488] x_tables: unsorted underflow at hook 3 [ 177.411655][ T6964] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.456652][ T8539] netlink: 16 bytes leftover after parsing attributes in process `syz.1.721'. [ 177.763497][ T6964] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.176819][ T8548] netlink: 'syz.2.725': attribute type 13 has an invalid length. [ 178.190115][ T8549] netlink: 'syz.1.724': attribute type 1 has an invalid length. [ 178.202706][ T8549] netlink: 224 bytes leftover after parsing attributes in process `syz.1.724'. [ 178.224737][ T8548] lo: entered promiscuous mode [ 178.231082][ T8548] lo: entered allmulticast mode [ 178.243645][ T8548] tunl0: entered promiscuous mode [ 178.258789][ T8548] tunl0: entered allmulticast mode [ 178.264526][ T8549] netlink: 20 bytes leftover after parsing attributes in process `syz.1.724'. [ 178.296251][ T8548] gre0: entered promiscuous mode [ 178.309225][ T8548] gre0: entered allmulticast mode [ 178.341423][ T8548] gretap0: entered promiscuous mode [ 178.349119][ T8556] vcan0: tx drop: invalid da for name 0xffffffffffffffff [ 178.356535][ T8548] gretap0: entered allmulticast mode [ 178.371865][ T8548] gretap0: refused to change device tx_queue_len [ 178.382307][ T8548] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 178.443628][ T8559] netlink: 'syz.4.726': attribute type 4 has an invalid length. [ 178.503225][ T6964] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.518324][ T8561] netlink: 'syz.4.726': attribute type 4 has an invalid length. [ 178.550547][ T8553] lo: entered allmulticast mode [ 178.578141][ T8563] IPVS: set_ctl: invalid protocol: 136 255.255.255.255:20001 [ 178.632390][ T8543] lo: left allmulticast mode [ 178.643623][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 178.653369][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 178.662146][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 178.671438][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 178.680894][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 178.740948][ T6964] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.785832][ T8570] netlink: 184 bytes leftover after parsing attributes in process `syz.0.730'. [ 178.844355][ T8575] netlink: 184 bytes leftover after parsing attributes in process `syz.0.730'. [ 178.891992][ T8570] team_slave_0: entered allmulticast mode [ 179.136419][ T8584] netlink: 'syz.0.732': attribute type 2 has an invalid length. [ 179.141354][ T8587] syz.2.734: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 179.160129][ T8587] CPU: 1 UID: 0 PID: 8587 Comm: syz.2.734 Not tainted 6.16.0-rc3-syzkaller-00121-g2def09ead4ad #0 PREEMPT(full) [ 179.160154][ T8587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 179.160170][ T8587] Call Trace: [ 179.160178][ T8587] [ 179.160186][ T8587] dump_stack_lvl+0x189/0x250 [ 179.160225][ T8587] ? __pfx_dump_stack_lvl+0x10/0x10 [ 179.160249][ T8587] ? __pfx__printk+0x10/0x10 [ 179.160269][ T8587] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 179.160289][ T8587] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 179.160310][ T8587] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 179.160332][ T8587] warn_alloc+0x214/0x310 [ 179.160351][ T8587] ? stack_depot_save_flags+0x40/0x900 [ 179.160376][ T8587] ? __pfx_warn_alloc+0x10/0x10 [ 179.160397][ T8587] ? kasan_save_track+0x4f/0x80 [ 179.160421][ T8587] ? xskq_create+0x56/0x170 [ 179.160441][ T8587] ? xsk_init_queue+0xb0/0x110 [ 179.160459][ T8587] ? xsk_setsockopt+0x43f/0x710 [ 179.160478][ T8587] ? do_sock_setsockopt+0x25a/0x3e0 [ 179.160495][ T8587] ? __x64_sys_setsockopt+0x18b/0x220 [ 179.160512][ T8587] ? do_syscall_64+0xfa/0x3b0 [ 179.160534][ T8587] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.160560][ T8587] __vmalloc_node_range_noprof+0x125/0x12f0 [ 179.160611][ T8587] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 179.160637][ T8587] ? __kasan_kmalloc+0x93/0xb0 [ 179.160655][ T8587] vmalloc_user_noprof+0xad/0xf0 [ 179.160673][ T8587] ? xskq_create+0xbf/0x170 [ 179.160703][ T8587] xskq_create+0xbf/0x170 [ 179.160729][ T8587] xsk_init_queue+0xb0/0x110 [ 179.160753][ T8587] xsk_setsockopt+0x43f/0x710 [ 179.160778][ T8587] ? __pfx_xsk_setsockopt+0x10/0x10 [ 179.160798][ T8587] ? __lock_acquire+0xab9/0xd20 [ 179.160831][ T8587] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 179.160852][ T8587] ? __pfx_xsk_setsockopt+0x10/0x10 [ 179.160874][ T8587] do_sock_setsockopt+0x25a/0x3e0 [ 179.160897][ T8587] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 179.160921][ T8587] ? __fget_files+0x2a/0x420 [ 179.160949][ T8587] __x64_sys_setsockopt+0x18b/0x220 [ 179.160976][ T8587] do_syscall_64+0xfa/0x3b0 [ 179.160998][ T8587] ? lockdep_hardirqs_on+0x9c/0x150 [ 179.161020][ T8587] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.161037][ T8587] ? clear_bhb_loop+0x60/0xb0 [ 179.161058][ T8587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.161074][ T8587] RIP: 0033:0x7fe80678e929 [ 179.161094][ T8587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.161107][ T8587] RSP: 002b:00007fe8076c5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 179.161125][ T8587] RAX: ffffffffffffffda RBX: 00007fe8069b5fa0 RCX: 00007fe80678e929 [ 179.161138][ T8587] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 179.161148][ T8587] RBP: 00007fe806810b39 R08: 0000000000000004 R09: 0000000000000000 [ 179.161158][ T8587] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.161169][ T8587] R13: 0000000000000000 R14: 00007fe8069b5fa0 R15: 00007ffe94293348 [ 179.161198][ T8587] [ 179.161208][ T8587] Mem-Info: [ 179.233604][ T8592] netlink: 108 bytes leftover after parsing attributes in process `syz.1.733'. [ 179.267505][ T8587] active_anon:4323 inactive_anon:0 isolated_anon:0 [ 179.267505][ T8587] active_file:1175 inactive_file:39866 isolated_file:0 [ 179.267505][ T8587] unevictable:768 dirty:59 writeback:0 [ 179.267505][ T8587] slab_reclaimable:10731 slab_unreclaimable:95765 [ 179.267505][ T8587] mapped:30998 shmem:1362 pagetables:1069 [ 179.267505][ T8587] sec_pagetables:0 bounce:0 [ 179.267505][ T8587] kernel_misc_reclaimable:0 [ 179.267505][ T8587] free:1334050 free_pcp:14582 free_cma:0 [ 179.533714][ T8587] Node 0 active_anon:17292kB inactive_anon:0kB active_file:4700kB inactive_file:159260kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123992kB dirty:236kB writeback:0kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12316kB pagetables:4252kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 179.572945][ T8587] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 179.605638][ T6964] bridge_slave_1: left allmulticast mode [ 179.607610][ T8587] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 179.627595][ T6964] bridge_slave_1: left promiscuous mode [ 179.673926][ T6964] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.683477][ T8587] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 179.689523][ T8587] Node 0 DMA32 free:1426216kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17244kB inactive_anon:0kB active_file:4700kB inactive_file:157432kB unevictable:1536kB writepending:232kB present:3129332kB managed:2561004kB mlocked:0kB bounce:0kB free_pcp:35152kB local_pcp:14068kB free_cma:0kB [ 179.722658][ T8587] lowmem_reserve[]: 0 0 1 1 1 [ 179.728452][ T8587] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1828kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 179.759349][ T8587] lowmem_reserve[]: 0 0 0 0 0 [ 179.764442][ T8587] Node 1 Normal free:3894096kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:23872kB local_pcp:11136kB free_cma:0kB [ 179.799403][ T6964] bridge_slave_0: left allmulticast mode [ 179.805177][ T6964] bridge_slave_0: left promiscuous mode [ 179.809367][ T8587] lowmem_reserve[]: 0 0 0 0 0 [ 179.811907][ T6964] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.831357][ T8587] [ 179.843855][ T8587] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 179.858136][ T8587] Node 0 DMA32: 221*4kB (M) 234*8kB (M) 171*16kB (ME) 217*32kB (UM) 127*64kB (UME) 39*128kB (UME) 37*256kB (UM) 27*512kB (UM) 23*1024kB (UME) 5*2048kB (ME) 328*4096kB (UM) = 1426132kB [ 179.877435][ T8587] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 179.892406][ T8587] Node 1 Normal: 200*4kB (UE) 54*8kB (UME) 42*16kB (UME) 65*32kB (UME) 31*64kB (UME) 4*128kB (UME) 4*256kB (UME) 3*512kB (ME) 2*1024kB (ME) 2*2048kB (UE) 947*4096kB (M) = 3894096kB [ 179.911048][ T8587] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 179.920966][ T8587] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 179.931165][ T8587] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 179.941118][ T8587] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 179.955091][ T8587] 42398 total pagecache pages [ 179.961793][ T8587] 0 pages in swap cache [ 179.966213][ T8587] Free swap = 124996kB [ 179.974214][ T8587] Total swap = 124996kB [ 179.978889][ T8587] 2097051 pages RAM [ 179.982738][ T8587] 0 pages HighMem/MovableOnly [ 179.993325][ T8587] 424694 pages reserved [ 179.997926][ T8587] 0 pages cma reserved [ 180.076844][ T8615] netlink: 32 bytes leftover after parsing attributes in process `syz.0.740'. [ 180.121412][ T8617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.741'. [ 180.132971][ T8617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.741'. [ 180.344830][ T6964] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.356119][ T6964] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.366451][ T6964] bond0 (unregistering): Released all slaves [ 180.546231][ T8620] netlink: 'syz.1.742': attribute type 1 has an invalid length. [ 180.558581][ T8620] netlink: 224 bytes leftover after parsing attributes in process `syz.1.742'. [ 180.593720][ T8620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.742'. [ 180.651796][ T8624] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 180.727840][ T5838] Bluetooth: hci4: command tx timeout [ 180.741803][ T8630] netlink: 'syz.1.746': attribute type 11 has an invalid length. [ 180.804498][ T8629] dvmrp0: entered allmulticast mode [ 180.983662][ T8564] chnl_net:caif_netlink_parms(): no params data found [ 181.173571][ T8646] netlink: 'syz.1.750': attribute type 8 has an invalid length. [ 181.193941][ T6964] hsr_slave_0: left promiscuous mode [ 181.203804][ T6964] hsr_slave_1: left promiscuous mode [ 181.210741][ T6964] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.218689][ T6964] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.226628][ T8652] netlink: 'syz.1.750': attribute type 11 has an invalid length. [ 181.236452][ T6964] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.244714][ T6964] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.273799][ T6964] veth1_macvtap: left promiscuous mode [ 181.279898][ T6964] veth0_macvtap: left promiscuous mode [ 181.286098][ T6964] veth1_vlan: left promiscuous mode [ 181.291852][ T6964] veth0_vlan: left promiscuous mode [ 181.573119][ T8663] netlink: 'syz.0.753': attribute type 2 has an invalid length. [ 181.591746][ T8663] xt_CT: You must specify a L4 protocol and not use inversions on it [ 181.787942][ T6964] team0 (unregistering): Port device team_slave_1 removed [ 181.841932][ T6964] team0 (unregistering): Port device team_slave_0 removed [ 182.664658][ T8564] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.681143][ T8564] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.715382][ T8564] bridge_slave_0: entered allmulticast mode [ 182.754041][ T8564] bridge_slave_0: entered promiscuous mode [ 182.793616][ T8564] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.811261][ T5838] Bluetooth: hci4: command tx timeout [ 182.827419][ T8564] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.834681][ T8564] bridge_slave_1: entered allmulticast mode [ 182.843463][ T8564] bridge_slave_1: entered promiscuous mode [ 182.998572][ T8564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.043894][ T8564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.121744][ T5850] hid-generic 0005:15C2:000B.0002: item fetching failed at offset 0/1 [ 183.141139][ T5850] hid-generic 0005:15C2:000B.0002: probe with driver hid-generic failed with error -22 [ 183.231226][ T8564] team0: Port device team_slave_0 added [ 183.251260][ T8717] __nla_validate_parse: 4 callbacks suppressed [ 183.251277][ T8717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.769'. [ 183.276267][ T8564] team0: Port device team_slave_1 added [ 183.393302][ T8564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.407349][ T8564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.464485][ T8724] netlink: 'syz.4.770': attribute type 39 has an invalid length. [ 183.483802][ T8564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.502205][ T8726] ieee802154 phy0 wpan0: encryption failed: -22 [ 183.515070][ T8726] xt_limit: Overflow, try lower: 0/0 [ 183.532799][ T8720] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 183.556159][ T8734] netlink: 'syz.1.774': attribute type 10 has an invalid length. [ 183.609958][ T8564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.621196][ T8564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.650927][ T8564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.714985][ T8734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.745616][ T8734] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 183.813315][ T8748] netlink: 696 bytes leftover after parsing attributes in process `syz.2.777'. [ 183.908380][ T8564] hsr_slave_0: entered promiscuous mode [ 183.929239][ T8564] hsr_slave_1: entered promiscuous mode [ 183.935607][ T8564] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 183.955309][ T8758] Unknown options in mask 1f4 [ 183.970002][ T8564] Cannot create hsr debugfs directory [ 183.979997][ T8760] netlink: 20 bytes leftover after parsing attributes in process `syz.2.782'. [ 183.993313][ T8762] netlink: 20 bytes leftover after parsing attributes in process `syz.2.782'. [ 184.097595][ T8757] nbd4: detected capacity change from 0 to 63 [ 184.109458][ T8766] xt_l2tp: missing protocol rule (udp|l2tpip) [ 184.115723][ T8767] block nbd4: NBD_DISCONNECT [ 184.121769][ T8767] block nbd4: Disconnected due to user request. [ 184.129716][ T8767] block nbd4: shutting down sockets [ 184.196197][ T8768] netlink: 72 bytes leftover after parsing attributes in process `syz.0.783'. [ 184.205621][ T8768] netlink: 72 bytes leftover after parsing attributes in process `syz.0.783'. [ 184.408678][ T8775] netlink: 64 bytes leftover after parsing attributes in process `syz.2.787'. [ 184.421480][ T8775] netlink: 64 bytes leftover after parsing attributes in process `syz.2.787'. [ 184.482602][ T8781] sctp: [Deprecated]: syz.4.788 (pid 8781) Use of int in maxseg socket option. [ 184.482602][ T8781] Use struct sctp_assoc_value instead [ 184.839418][ T8766] netlink: 4 bytes leftover after parsing attributes in process `syz.1.784'. [ 184.888986][ T5838] Bluetooth: hci4: command tx timeout [ 184.960847][ T8564] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 184.975834][ T8564] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 185.011696][ T8564] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 185.056071][ T8564] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 185.195188][ T8811] sctp: [Deprecated]: syz.0.795 (pid 8811) Use of struct sctp_assoc_value in delayed_ack socket option. [ 185.195188][ T8811] Use struct sctp_sack_info instead [ 185.527853][ T8564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.580309][ T8564] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.610153][ T6964] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.617384][ T6964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.679186][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.686425][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.235859][ T8885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.814'. [ 186.404787][ T8564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.499558][ T8901] SET target dimension over the limit! [ 186.543066][ T8564] veth0_vlan: entered promiscuous mode [ 186.573027][ T8564] veth1_vlan: entered promiscuous mode [ 186.692350][ T8564] veth0_macvtap: entered promiscuous mode [ 186.741945][ T8564] veth1_macvtap: entered promiscuous mode [ 186.781875][ T8564] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.822466][ T8564] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.862953][ T8564] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.883978][ T8564] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.899000][ T8564] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.917441][ T8564] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.969477][ T5838] Bluetooth: hci4: command tx timeout [ 187.136684][ T3517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.172347][ T3517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.236843][ T3480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.258589][ T3480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.264263][ T8933] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.547193][ T8954] netlink: 'syz.1.832': attribute type 1 has an invalid length. [ 187.813097][ T8974] x_tables: duplicate underflow at hook 1 [ 187.899314][ T8978] x_tables: duplicate underflow at hook 1 [ 188.105766][ T8992] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 188.392099][ T9008] netlink: 'syz.4.844': attribute type 93 has an invalid length. [ 188.407000][ T6966] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.483751][ T9003] __nla_validate_parse: 4 callbacks suppressed [ 188.483770][ T9003] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.844'. [ 188.671548][ T6966] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.921762][ T6966] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.019692][ T6966] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.122741][ T6966] bridge_slave_1: left allmulticast mode [ 189.129007][ T6966] bridge_slave_1: left promiscuous mode [ 189.135743][ T6966] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.144691][ T6966] bridge_slave_0: left allmulticast mode [ 189.151076][ T6966] bridge_slave_0: left promiscuous mode [ 189.156880][ T6966] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.808699][ T9043] netlink: 'syz.1.853': attribute type 10 has an invalid length. [ 189.851931][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 189.878692][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 189.892757][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 189.920736][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 189.929090][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 189.964192][ T6966] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.981991][ T6966] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.995170][ T6966] bond0 (unregistering): Released all slaves [ 190.066547][ T9043] team0: Device ipvlan1 failed to register rx_handler [ 190.117730][ T9043] syz.1.853 (9043) used greatest stack depth: 19800 bytes left [ 190.260793][ T9057] x_tables: duplicate underflow at hook 1 [ 190.268952][ T9060] netlink: 16 bytes leftover after parsing attributes in process `syz.4.854'. [ 190.550947][ T6966] hsr_slave_0: left promiscuous mode [ 190.560862][ T6966] hsr_slave_1: left promiscuous mode [ 190.566976][ T6966] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.592851][ T6966] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.610880][ T6966] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.627134][ T6966] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.671418][ T6966] veth1_macvtap: left promiscuous mode [ 190.676952][ T6966] veth0_macvtap: left promiscuous mode [ 190.695947][ T6966] veth1_vlan: left promiscuous mode [ 190.707486][ T6966] veth0_vlan: left promiscuous mode [ 190.842959][ T9059] infiniband syz2: set active [ 190.851586][ T9059] infiniband syz2: added veth1_vlan [ 190.871857][ T9080] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.863'. [ 190.929184][ T9059] RDS/IB: syz2: added [ 190.946910][ T9059] smc: adding ib device syz2 with port count 1 [ 190.964831][ T9059] smc: ib device syz2 port 1 has pnetid [ 191.244119][ T6966] team0 (unregistering): Port device team_slave_1 removed [ 191.286264][ T6966] team0 (unregistering): Port device team_slave_0 removed [ 191.680872][ T9078] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 191.717266][ T9078] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.913205][ T9087] ip6gre1: entered allmulticast mode [ 191.981148][ T9091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.866'. [ 192.007148][ T5838] Bluetooth: hci4: command tx timeout [ 192.047251][ T9091] netlink: 4 bytes leftover after parsing attributes in process `syz.2.866'. [ 192.097629][ T9091] netlink: 'syz.2.866': attribute type 15 has an invalid length. [ 192.199611][ T9044] chnl_net:caif_netlink_parms(): no params data found [ 192.313017][ T9102] netlink: 60 bytes leftover after parsing attributes in process `syz.1.868'. [ 192.338979][ T9100] netlink: 60 bytes leftover after parsing attributes in process `syz.1.868'. [ 192.475118][ T9044] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.507729][ T9044] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.538232][ T9044] bridge_slave_0: entered allmulticast mode [ 192.578624][ T9044] bridge_slave_0: entered promiscuous mode [ 192.612363][ T9044] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.643083][ T9044] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.662755][ T9123] netlink: 36 bytes leftover after parsing attributes in process `syz.4.873'. [ 192.682292][ T9044] bridge_slave_1: entered allmulticast mode [ 192.698363][ T9044] bridge_slave_1: entered promiscuous mode [ 192.831500][ T9044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.864402][ T9044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.041942][ T9044] team0: Port device team_slave_0 added [ 193.055914][ T9044] team0: Port device team_slave_1 added [ 193.246737][ T9135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.282257][ T9044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.311564][ T9044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.383274][ T9044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.442037][ T9044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.474809][ T9044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.557544][ T9162] netlink: 4 bytes leftover after parsing attributes in process `syz.2.883'. [ 193.566520][ T9044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.618936][ T9159] netlink: 'syz.1.881': attribute type 1 has an invalid length. [ 193.769212][ T9177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.883'. [ 193.789483][ T9159] 8021q: adding VLAN 0 to HW filter on device bond3 [ 194.046885][ T9044] hsr_slave_0: entered promiscuous mode [ 194.057743][ T9044] hsr_slave_1: entered promiscuous mode [ 194.064215][ T9044] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 194.075762][ T9044] Cannot create hsr debugfs directory [ 194.090677][ T5838] Bluetooth: hci4: command tx timeout [ 194.214195][ T9190] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.252414][ T9190] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.278817][ T9190] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.297438][ T9190] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.317308][ T9190] geneve2: entered promiscuous mode [ 194.334552][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.338951][ T9190] geneve2: entered allmulticast mode [ 194.364282][ T9190] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.397381][ T9190] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.417116][ T9190] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.426131][ T9190] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.523790][ T9195] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 194.724034][ T9209] netlink: 'syz.1.889': attribute type 5 has an invalid length. [ 194.735552][ T9211] openvswitch: netlink: Duplicate or invalid key (type 0). [ 194.750302][ T9211] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.981279][ T9219] netlink: 'syz.4.892': attribute type 1 has an invalid length. [ 195.004456][ T9218] netlink: 'syz.1.891': attribute type 12 has an invalid length. [ 195.066675][ T9219] tipc: Enabled bearer , priority 10 [ 195.066694][ T9223] netlink: 184 bytes leftover after parsing attributes in process `syz.1.891'. [ 195.472608][ T9243] netlink: 'syz.4.899': attribute type 12 has an invalid length. [ 195.486188][ T9241] netlink: 'syz.0.898': attribute type 1 has an invalid length. [ 195.537690][ T9241] 8021q: adding VLAN 0 to HW filter on device bond1 [ 196.107798][ T9276] netlink: 'syz.0.904': attribute type 13 has an invalid length. [ 196.174272][ T5838] Bluetooth: hci4: command tx timeout [ 196.184459][ T9044] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 196.502793][ T9294] netlink: 'syz.2.907': attribute type 10 has an invalid length. [ 196.535464][ T9276] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.542748][ T9276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.550321][ T9276] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.557617][ T9276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.599238][ T9276] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 196.622003][ T9044] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 196.648282][ T9294] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 196.681319][ T9044] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 196.704889][ T9044] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 196.864807][ T9044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.912593][ T9044] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.935664][ T6951] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.942948][ T6951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.989511][ T6951] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.996730][ T6951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.110405][ T9327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.913'. [ 197.180246][ T9327] bridge_slave_1: left allmulticast mode [ 197.186037][ T9327] bridge_slave_1: left promiscuous mode [ 197.194569][ T9327] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.210221][ T9327] bridge_slave_0: left allmulticast mode [ 197.222666][ T9327] bridge_slave_0: left promiscuous mode [ 197.230576][ T9327] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.577542][ T9348] netlink: 36 bytes leftover after parsing attributes in process `syz.0.921'. [ 197.596768][ T9348] netlink: 16 bytes leftover after parsing attributes in process `syz.0.921'. [ 197.616996][ T30] audit: type=1800 audit(1751242933.760:4): pid=9341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.918" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=1169 res=0 errno=0 [ 197.647400][ T9348] netlink: 36 bytes leftover after parsing attributes in process `syz.0.921'. [ 197.717630][ T9348] netlink: 36 bytes leftover after parsing attributes in process `syz.0.921'. [ 197.741721][ T9357] sch_fq: defrate 0 ignored. [ 197.893490][ T9044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.926111][ T9374] netlink: 'syz.0.926': attribute type 3 has an invalid length. [ 198.026828][ T9377] netlink: 16 bytes leftover after parsing attributes in process `syz.2.928'. [ 198.051011][ T9044] veth0_vlan: entered promiscuous mode [ 198.067582][ T9379] netlink: 32 bytes leftover after parsing attributes in process `syz.4.929'. [ 198.094319][ T9374] xfrm1: entered promiscuous mode [ 198.109318][ T9374] xfrm1: entered allmulticast mode [ 198.156034][ T9044] veth1_vlan: entered promiscuous mode [ 198.248950][ T5838] Bluetooth: hci4: command tx timeout [ 198.270648][ T9044] veth0_macvtap: entered promiscuous mode [ 198.325443][ T9044] veth1_macvtap: entered promiscuous mode [ 198.381164][ T9394] IPv6: NLM_F_CREATE should be specified when creating new route [ 198.401952][ T9044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.433065][ T9044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.462141][ T9044] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.476785][ T9044] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.486708][ T9044] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.503160][ T9044] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.588675][ T9409] __nla_validate_parse: 3 callbacks suppressed [ 198.588694][ T9409] netlink: 24 bytes leftover after parsing attributes in process `syz.4.939'. [ 198.631320][ T6964] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 198.650808][ T6964] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 198.663143][ T5941] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 198.665459][ T9412] netlink: 20 bytes leftover after parsing attributes in process `syz.0.940'. [ 198.715856][ T9414] netlink: 24 bytes leftover after parsing attributes in process `syz.1.938'. [ 198.739123][ T9409] netlink: 71 bytes leftover after parsing attributes in process `syz.4.939'. [ 198.776750][ T9416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.941'. [ 198.800209][ T6954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.810124][ T9416] netlink: 12 bytes leftover after parsing attributes in process `syz.2.941'. [ 198.829598][ T6954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.943126][ T6951] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.961761][ T6951] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.103452][ T9427] xt_socket: unknown flags 0x50 [ 199.109406][ T9427] netlink: 'syz.1.944': attribute type 3 has an invalid length. [ 199.375321][ T9454] nbd: couldn't find a device at index -373156329 [ 199.440002][ T9457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.951'. [ 199.541443][ T9457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.951'. [ 199.595478][ T9461] openvswitch: netlink: Duplicate or invalid key (type 0). [ 199.606293][ T9461] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 199.618272][ T5941] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 199.698939][ T5941] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 199.741920][ T9472] netlink: 'syz.4.954': attribute type 10 has an invalid length. [ 199.799922][ T6966] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.853954][ T9472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.873786][ T9472] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 199.990531][ T6966] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.182398][ T6966] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.332800][ T6966] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.444431][ T6966] bridge_slave_1: left allmulticast mode [ 200.451290][ T6966] bridge_slave_1: left promiscuous mode [ 200.457016][ T6966] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.468736][ T6966] bridge_slave_0: left allmulticast mode [ 200.474408][ T6966] bridge_slave_0: left promiscuous mode [ 200.480233][ T6966] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.848384][ T9480] netlink: zone id is out of range [ 200.878715][ T9480] netlink: zone id is out of range [ 200.883895][ T9480] netlink: zone id is out of range [ 200.892924][ T9480] netlink: zone id is out of range [ 200.905729][ T9480] netlink: zone id is out of range [ 200.924528][ T9480] netlink: zone id is out of range [ 200.940348][ T9480] netlink: zone id is out of range [ 200.964555][ T9480] netlink: zone id is out of range [ 200.974678][ T9480] netlink: zone id is out of range [ 200.997472][ T9480] netlink: zone id is out of range [ 201.093847][ T6966] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.148130][ T6966] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.189115][ T6966] bond0 (unregistering): Released all slaves [ 201.529493][ T5847] Bluetooth: hci1: command 0x0406 tx timeout [ 201.529956][ T5835] Bluetooth: hci2: command 0x0406 tx timeout [ 201.535576][ T5847] Bluetooth: hci3: command 0x0406 tx timeout [ 201.572703][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 201.608883][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 201.629360][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 201.639746][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 201.649046][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 201.711832][ T9535] netlink: 'syz.0.971': attribute type 2 has an invalid length. [ 201.720216][ T9535] netlink: 84 bytes leftover after parsing attributes in process `syz.0.971'. [ 201.731744][ T9532] netlink: 4 bytes leftover after parsing attributes in process `syz.4.969'. [ 201.946349][ T9549] x_tables: duplicate underflow at hook 2 [ 201.954021][ T9549] netlink: 'syz.0.974': attribute type 4 has an invalid length. [ 201.987706][ T9549] netlink: 'syz.0.974': attribute type 4 has an invalid length. [ 202.401821][ T9570] xt_CONNSECMARK: invalid mode: 0 [ 202.522549][ T6966] hsr_slave_0: left promiscuous mode [ 202.575408][ T6966] hsr_slave_1: left promiscuous mode [ 202.582359][ T9574] sctp: [Deprecated]: syz.1.983 (pid 9574) Use of struct sctp_assoc_value in delayed_ack socket option. [ 202.582359][ T9574] Use struct sctp_sack_info instead [ 202.602475][ T6966] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.610750][ T6966] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.617481][ T9574] sctp: [Deprecated]: syz.1.983 (pid 9574) Use of struct sctp_assoc_value in delayed_ack socket option. [ 202.617481][ T9574] Use struct sctp_sack_info instead [ 202.635491][ T6966] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.645936][ T6966] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.711191][ T6966] veth1_macvtap: left promiscuous mode [ 202.719664][ T6966] veth0_macvtap: left promiscuous mode [ 202.727226][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 202.728830][ T6966] veth1_vlan: left promiscuous mode [ 202.750717][ T6966] veth0_vlan: left promiscuous mode [ 203.270683][ T6966] team0 (unregistering): Port device team_slave_1 removed [ 203.311395][ T6966] team0 (unregistering): Port device team_slave_0 removed [ 203.688027][ T5838] Bluetooth: hci4: command tx timeout [ 203.800755][ T9595] netlink: 'syz.2.990': attribute type 2 has an invalid length. [ 203.813135][ T9595] __nla_validate_parse: 4 callbacks suppressed [ 203.813152][ T9595] netlink: 12 bytes leftover after parsing attributes in process `syz.2.990'. [ 203.850177][ T9595] netlink: 4 bytes leftover after parsing attributes in process `syz.2.990'. [ 204.055653][ T9612] netlink: 20 bytes leftover after parsing attributes in process `syz.0.993'. [ 204.173135][ T9612] netlink: 'syz.0.993': attribute type 1 has an invalid length. [ 204.199976][ T9612] netlink: 232 bytes leftover after parsing attributes in process `syz.0.993'. [ 204.216865][ T9612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.993'. [ 204.275557][ T9623] tap0: tun_chr_ioctl cmd 1074025677 [ 204.287340][ T9623] tap0: linktype set to 65534 [ 204.323679][ T9623] macvtap1: entered promiscuous mode [ 204.347599][ T9623] vlan0: entered promiscuous mode [ 204.353126][ T9623] macvtap1: entered allmulticast mode [ 204.385704][ T9623] vlan0: entered allmulticast mode [ 204.398691][ T9623] veth0_vlan: entered allmulticast mode [ 204.402691][ T9634] netlink: 20 bytes leftover after parsing attributes in process `syz.2.998'. [ 204.454903][ T9526] chnl_net:caif_netlink_parms(): no params data found [ 204.831301][ T9526] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.849912][ T9526] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.869699][ T9526] bridge_slave_0: entered allmulticast mode [ 204.897869][ T9526] bridge_slave_0: entered promiscuous mode [ 204.928647][ T9526] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.935908][ T9526] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.971787][ T9526] bridge_slave_1: entered allmulticast mode [ 204.994171][ T9526] bridge_slave_1: entered promiscuous mode [ 205.120077][ T9526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.158678][ T9526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.376529][ T9526] team0: Port device team_slave_0 added [ 205.410605][ T9526] team0: Port device team_slave_1 added [ 205.477298][ T9691] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1014'. [ 205.513850][ T9692] can: request_module (can-proto-0) failed. [ 205.526195][ T9697] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1016'. [ 205.544930][ T9693] can: request_module (can-proto-0) failed. [ 205.548219][ T9697] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1016'. [ 205.566316][ T9526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.567599][ T9697] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1016'. [ 205.582538][ T9526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.582601][ T9526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.704771][ T9526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.717435][ T9526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.745299][ T9526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.771380][ T5838] Bluetooth: hci4: command tx timeout [ 205.915451][ T9526] hsr_slave_0: entered promiscuous mode [ 205.927499][ T9526] hsr_slave_1: entered promiscuous mode [ 205.933993][ T9526] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.947149][ T9526] Cannot create hsr debugfs directory [ 206.000815][ T9718] batman_adv: batadv0: Adding interface: dummy0 [ 206.021941][ T9718] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.061616][ T9718] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 206.473197][ T9746] erspan0: entered promiscuous mode [ 206.483551][ T9746] erspan0: entered allmulticast mode [ 206.559039][ T9755] netlink: 'syz.4.1030': attribute type 17 has an invalid length. [ 206.605532][ T5941] IPVS: starting estimator thread 0... [ 206.707376][ T9758] IPVS: using max 27 ests per chain, 64800 per kthread [ 206.779887][ T9766] net_ratelimit: 395 callbacks suppressed [ 206.779906][ T9766] openvswitch: netlink: nsh attribute has 13 unknown bytes. [ 206.824114][ T9766] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.993179][ T9778] netlink: 'syz.0.1039': attribute type 3 has an invalid length. [ 207.027648][ T9774] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 207.071051][ T9777] syzkaller1: entered promiscuous mode [ 207.076921][ T9777] syzkaller1: entered allmulticast mode [ 207.246566][ T9526] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 207.271544][ T9526] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 207.298907][ T9526] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 207.313424][ T9526] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 207.541385][ T9526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.576862][ T9809] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 207.603713][ T9810] C: renamed from lo [ 207.619190][ T9526] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.664926][ T6964] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.672181][ T6964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.695668][ T6964] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.702902][ T6964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.847381][ T5838] Bluetooth: hci4: command tx timeout [ 207.994248][ T9841] netlink: 'syz.4.1057': attribute type 7 has an invalid length. [ 208.027452][ T9841] netlink: 'syz.4.1057': attribute type 8 has an invalid length. [ 208.055241][ T9835] tap0: tun_chr_ioctl cmd 2148553947 [ 208.075475][ T9841] ip6gretap0: entered promiscuous mode [ 208.084309][ T9841] batadv_slave_1: entered promiscuous mode [ 208.098819][ T9841] ip6gretap0: left promiscuous mode [ 208.105356][ T9841] batadv_slave_1: left promiscuous mode [ 208.215478][ T9849] veth5: entered allmulticast mode [ 208.322120][ T9526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.385573][ T9526] veth0_vlan: entered promiscuous mode [ 208.416361][ T9526] veth1_vlan: entered promiscuous mode [ 208.473782][ T9526] veth0_macvtap: entered promiscuous mode [ 208.486985][ T9526] veth1_macvtap: entered promiscuous mode [ 208.510773][ T9526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.526941][ T9526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.546178][ T9526] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.564701][ T9526] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.584301][ T9526] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.595991][ T9526] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.752051][ T6964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.770273][ T6964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.892484][ T6954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.901141][ T6954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.383757][ T9907] __nla_validate_parse: 80 callbacks suppressed [ 209.383776][ T9907] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1081'. [ 209.421824][ T9907] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1081'. [ 209.448481][ T9907] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1081'. [ 209.475325][ T9907] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1081'. [ 209.638693][ T9913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1082'. [ 209.795413][ T9915] vlan0: entered promiscuous mode [ 209.800701][ T9915] bridge0: entered promiscuous mode [ 209.947982][ T9921] xt_CONNSECMARK: invalid mode: 0 [ 210.330266][ T3517] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.967233][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 211.009789][ T3517] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.226180][ T3517] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.333145][ T3517] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.337472][ T9950] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 211.418177][ T9953] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 211.437163][ T9954] tap0: tun_chr_ioctl cmd 1074025672 [ 211.454227][ T9954] tap0: ignored: set checksum disabled [ 211.480971][ T9951] tap0: tun_chr_ioctl cmd 1074025673 [ 212.108666][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 212.121990][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 212.134918][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 212.144456][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 212.154295][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 213.513391][ T3517] bridge_slave_1: left allmulticast mode [ 213.528175][ T3517] bridge_slave_1: left promiscuous mode [ 213.561095][ T3517] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.590194][ T3517] bridge_slave_0: left allmulticast mode [ 213.595902][ T3517] bridge_slave_0: left promiscuous mode [ 213.606779][ T3517] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.608763][ T9997] netlink: 'syz.0.1101': attribute type 1 has an invalid length. [ 213.643138][ T9997] netlink: 216 bytes leftover after parsing attributes in process `syz.0.1101'. [ 213.654094][T10002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1103'. [ 213.655703][T10004] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 214.048602][ T3517] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.060351][ T3517] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.070663][ T3517] bond0 (unregistering): Released all slaves [ 214.187376][T10017] netlink: 'syz.0.1106': attribute type 1 has an invalid length. [ 214.195170][T10017] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1106'. [ 214.247795][ T5838] Bluetooth: hci4: command tx timeout [ 214.320361][T10027] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1108'. [ 214.588003][T10041] netlink: 'syz.1.1112': attribute type 3 has an invalid length. [ 214.711371][T10044] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 214.724044][T10045] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1112'. [ 215.061928][T10059] netlink: 'syz.4.1117': attribute type 1 has an invalid length. [ 215.084747][T10059] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1117'. [ 215.321538][ T3517] hsr_slave_0: left promiscuous mode [ 215.358963][ T3517] hsr_slave_1: left promiscuous mode [ 215.382897][ T3517] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.400041][ T3517] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.411880][ T3517] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.420324][ T3517] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.472723][ T3517] veth1_macvtap: left promiscuous mode [ 215.480043][ T3517] veth0_macvtap: left promiscuous mode [ 215.485778][ T3517] veth1_vlan: left promiscuous mode [ 215.491413][ T3517] veth0_vlan: left promiscuous mode [ 215.964361][ T3517] team0 (unregistering): Port device team_slave_1 removed [ 216.011983][ T3517] team0 (unregistering): Port device team_slave_0 removed [ 216.330063][ T5838] Bluetooth: hci4: command tx timeout [ 216.701745][ T9990] chnl_net:caif_netlink_parms(): no params data found [ 216.730096][T10110] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1129'. [ 216.903642][T10123] netlink: 'syz.4.1133': attribute type 4 has an invalid length. [ 217.004716][ T9990] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.017850][ T9990] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.025157][ T9990] bridge_slave_0: entered allmulticast mode [ 217.033877][ T9990] bridge_slave_0: entered promiscuous mode [ 217.053492][ T9990] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.062393][ T9990] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.070020][ T9990] bridge_slave_1: entered allmulticast mode [ 217.078913][ T9990] bridge_slave_1: entered promiscuous mode [ 217.165487][ T9990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.228163][ T9990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.420601][ T9990] team0: Port device team_slave_0 added [ 217.430206][ T9990] team0: Port device team_slave_1 added [ 217.483778][T10146] netlink: 'syz.4.1141': attribute type 2 has an invalid length. [ 217.492055][T10146] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1141'. [ 217.508703][T10147] IPv6: NLM_F_CREATE should be specified when creating new route [ 217.572147][ T9990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.588933][ T9990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.641503][ T9990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.660814][T10152] gtp1: entered promiscuous mode [ 217.666738][T10152] gtp1: entered allmulticast mode [ 217.674698][T10152] x_tables: duplicate underflow at hook 1 [ 217.682053][ T9990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.691754][ T9990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.718083][ T9990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.805773][ T9990] hsr_slave_0: entered promiscuous mode [ 217.834085][ T9990] hsr_slave_1: entered promiscuous mode [ 217.840613][ T9990] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.857689][ T9990] Cannot create hsr debugfs directory [ 218.012124][T10176] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1148'. [ 218.296255][T10186] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1152'. [ 218.300631][T10188] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1153'. [ 218.320962][T10188] netlink: 'syz.0.1153': attribute type 4 has an invalid length. [ 218.407278][ T5838] Bluetooth: hci4: command tx timeout [ 218.468055][T10192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1154'. [ 218.681147][ T9990] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 218.712018][ T9990] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 218.719607][T10205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1158'. [ 218.732663][T10205] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1158'. [ 218.748019][ T9990] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 218.766108][T10207] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 218.780064][T10205] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 218.813205][ T9990] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 218.960954][T10219] netlink: 'syz.4.1162': attribute type 7 has an invalid length. [ 219.065428][ T9990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.122144][ T9990] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.142139][ T6966] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.149433][ T6966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.168773][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.176167][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.655367][ T9990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.820384][T10258] IPVS: nq: UDP 224.0.0.2:20004 - no destination available [ 219.828274][ T44] IPVS: starting estimator thread 0... [ 219.836668][ T9990] veth0_vlan: entered promiscuous mode [ 219.850497][T10263] __nla_validate_parse: 3 callbacks suppressed [ 219.850516][T10263] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1171'. [ 219.874064][ T9990] veth1_vlan: entered promiscuous mode [ 219.910579][T10263] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1171'. [ 219.930627][T10262] IPVS: using max 35 ests per chain, 84000 per kthread [ 219.965898][T10263] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1171'. [ 220.007757][T10263] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1171'. [ 220.026982][ T9990] veth0_macvtap: entered promiscuous mode [ 220.056938][T10263] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1171'. [ 220.074809][ T9990] veth1_macvtap: entered promiscuous mode [ 220.083880][T10263] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1171'. [ 220.112722][T10268] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1172'. [ 220.123689][T10263] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1171'. [ 220.124413][ T9990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.156070][T10263] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1171'. [ 220.184765][ T9990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.195922][T10263] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1171'. [ 220.203210][ T9990] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.223351][ T9990] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.235862][ T9990] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.246716][ T9990] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.472602][T10285] netlink: 'syz.2.1175': attribute type 13 has an invalid length. [ 220.491637][ T5838] Bluetooth: hci4: command tx timeout [ 220.506157][T10285] netlink: 'syz.2.1175': attribute type 58 has an invalid length. [ 220.586828][T10287] geneve2: entered promiscuous mode [ 220.604231][T10287] geneve2: entered allmulticast mode [ 220.652360][ T6951] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.671409][T10295] netlink: 'syz.4.1177': attribute type 29 has an invalid length. [ 220.687459][ T6951] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.689447][T10287] can: request_module (can-proto-0) failed. [ 220.763892][ T6954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.773320][ T6954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.839311][T10299] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 221.035384][T10308] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20001 [ 221.304034][T10318] x_tables: ip_tables: osf match: only valid for protocol 6 [ 221.316526][T10318] netlink: 'syz.2.1186': attribute type 1 has an invalid length. [ 221.660806][T10331] xt_connbytes: Forcing CT accounting to be enabled [ 221.792973][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.323809][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.572780][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.651968][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.745472][ T12] bridge_slave_1: left allmulticast mode [ 222.751341][ T12] bridge_slave_1: left promiscuous mode [ 222.757108][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.766088][ T12] bridge_slave_0: left allmulticast mode [ 222.772163][ T12] bridge_slave_0: left promiscuous mode [ 222.778071][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.349160][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 223.366558][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 223.393717][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 223.420525][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 223.442987][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 223.535499][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.548094][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.559014][ T12] bond0 (unregistering): Released all slaves [ 223.930183][T10379] sctp: [Deprecated]: syz.1.1207 (pid 10379) Use of int in maxseg socket option. [ 223.930183][T10379] Use struct sctp_assoc_value instead [ 223.956626][T10382] netlink: 'syz.4.1209': attribute type 1 has an invalid length. [ 224.465056][T10404] netlink: 'syz.4.1216': attribute type 1 has an invalid length. [ 224.578890][T10404] 8021q: adding VLAN 0 to HW filter on device bond2 [ 224.606168][T10415] veth5: entered promiscuous mode [ 224.649970][T10411] 8021q: adding VLAN 0 to HW filter on device bond2 [ 224.661827][T10411] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 224.673435][T10411] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 224.701426][ T12] hsr_slave_0: left promiscuous mode [ 224.707504][ T12] hsr_slave_1: left promiscuous mode [ 224.713393][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.721589][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.729916][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.741652][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.765614][ T12] veth1_macvtap: left promiscuous mode [ 224.771227][ T12] veth0_macvtap: left promiscuous mode [ 224.776796][ T12] veth1_vlan: left promiscuous mode [ 224.782419][ T12] veth0_vlan: left promiscuous mode [ 225.225848][ T12] team0 (unregistering): Port device team_slave_1 removed [ 225.275344][ T12] team0 (unregistering): Port device team_slave_0 removed [ 225.527338][ T5847] Bluetooth: hci4: command tx timeout [ 225.883208][T10358] chnl_net:caif_netlink_parms(): no params data found [ 225.968418][T10429] __nla_validate_parse: 35 callbacks suppressed [ 225.968438][T10429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1222'. [ 225.989131][T10429] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1222'. [ 226.023847][T10429] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1222'. [ 226.038626][T10437] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1222'. [ 226.092753][T10441] ipt_ECN: cannot use operation on non-tcp rule [ 226.135974][T10442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1224'. [ 226.157647][T10358] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.164821][T10358] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.173410][T10358] bridge_slave_0: entered allmulticast mode [ 226.182537][T10358] bridge_slave_0: entered promiscuous mode [ 226.196629][T10358] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.204754][T10358] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.212180][T10358] bridge_slave_1: entered allmulticast mode [ 226.225138][T10358] bridge_slave_1: entered promiscuous mode [ 226.360104][T10451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1228'. [ 226.366005][T10358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.402865][T10358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.415734][T10447] syzkaller1: entered promiscuous mode [ 226.421905][T10447] syzkaller1: entered allmulticast mode [ 226.518455][T10358] team0: Port device team_slave_0 added [ 226.529159][T10358] team0: Port device team_slave_1 added [ 226.556750][T10358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.564006][T10358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.598012][T10358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.620088][T10358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.631822][T10358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.659967][T10358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.752885][T10358] hsr_slave_0: entered promiscuous mode [ 226.759940][T10358] hsr_slave_1: entered promiscuous mode [ 226.766058][T10358] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 226.774377][T10358] Cannot create hsr debugfs directory [ 227.376645][T10358] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 227.409430][T10358] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 227.427761][T10358] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 227.474504][T10486] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1238'. [ 227.500309][T10501] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1240'. [ 227.506565][T10494] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1238'. [ 227.512070][T10501] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1240'. [ 227.528157][T10358] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 227.607427][ T5838] Bluetooth: hci4: command tx timeout [ 227.710373][T10358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.791154][T10358] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.808007][ T6954] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.815249][ T6954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.862720][ T6954] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.870006][ T6954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.072543][T10531] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 228.130961][T10531] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 228.247275][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 228.402867][T10546] netem: change failed [ 228.430178][T10358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.543788][T10358] veth0_vlan: entered promiscuous mode [ 228.572144][T10358] veth1_vlan: entered promiscuous mode [ 228.626748][T10556] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 228.668239][T10556] batman_adv: batadv0: Removing interface: dummy0 [ 228.685459][T10556] bond0: (slave batadv0): Releasing backup interface [ 228.709284][T10563] netlink: 'syz.4.1255': attribute type 10 has an invalid length. [ 228.718017][T10556] bond0: (slave bond_slave_0): Releasing backup interface [ 228.738048][T10556] bond0: (slave bond_slave_1): Releasing backup interface [ 228.753624][T10556] team0: Port device team_slave_0 removed [ 228.766074][T10556] team0: Port device team_slave_1 removed [ 228.776561][T10556] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.798783][T10358] veth0_macvtap: entered promiscuous mode [ 228.805576][T10563] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 228.819134][T10563] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 228.831343][T10568] bond0: (slave wlan1): Releasing backup interface [ 228.867594][T10572] netlink: 'syz.1.1259': attribute type 2 has an invalid length. [ 228.893903][T10358] veth1_macvtap: entered promiscuous mode [ 228.949519][T10358] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.976125][T10358] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.016700][T10358] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.031264][T10358] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.041440][T10358] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.053979][T10358] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.230228][ T6954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.251426][ T6954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.306290][ T3480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.326232][ T3480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.442105][T10592] SET target dimension over the limit! [ 230.096393][T10631] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 230.203283][T10641] bond0: entered promiscuous mode [ 230.215687][T10641] bond_slave_0: entered promiscuous mode [ 230.228680][T10641] bond_slave_1: entered promiscuous mode [ 230.234749][T10641] batadv0: entered promiscuous mode [ 230.245977][ T925] srz1: Port: 1 Link DOWN [ 230.470986][ T6964] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.517989][T10661] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 230.571628][ C0] ------------[ cut here ]------------ [ 230.577180][ C0] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 230.590456][ C0] WARNING: CPU: 0 PID: 10337 at net/mac80211/rate.c:403 __rate_control_send_low+0x5df/0x820 [ 230.600704][ C0] Modules linked in: [ 230.604798][ C0] CPU: 0 UID: 0 PID: 10337 Comm: syz-executor Not tainted 6.16.0-rc3-syzkaller-00121-g2def09ead4ad #0 PREEMPT(full) [ 230.617088][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 230.627514][ C0] RIP: 0010:__rate_control_send_low+0x5df/0x820 [ 230.633798][ C0] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 80 7b ae 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 02 1b a6 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 230.653549][ C0] RSP: 0018:ffffc90000007538 EFLAGS: 00010246 [ 230.659954][ C0] RAX: 08ee4065e12a7700 RBX: 000000000000000c RCX: ffff88802696da00 [ 230.668061][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 230.676052][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 230.684083][ C0] R10: dffffc0000000000 R11: fffffbfff1bfaa04 R12: ffff8880766683e8 [ 230.692179][ C0] R13: 0000000000000000 R14: ffff888020fb8e40 R15: ffff888020fbb0d8 [ 230.700188][ C0] FS: 0000000000000000(0000) GS:ffff888125c50000(0000) knlGS:0000000000000000 [ 230.709152][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 230.715726][ C0] CR2: 000000110c376bfa CR3: 0000000075d8e000 CR4: 00000000003526f0 [ 230.723716][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 230.731740][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 230.739801][ C0] Call Trace: [ 230.743108][ C0] [ 230.745961][ C0] rate_control_send_low+0x194/0x7a0 [ 230.751279][ C0] rate_control_get_rate+0x20b/0x5d0 [ 230.756651][ C0] ieee80211_beacon_get_finish+0x38c/0x6b0 [ 230.762639][ C0] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 230.769019][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 230.774400][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 230.780331][ C0] ieee80211_beacon_get_ap+0x1478/0x19e0 [ 230.786064][ C0] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 230.792072][ C0] ? __ieee80211_beacon_get+0x36/0x17b0 [ 230.797671][ C0] ? __ieee80211_beacon_get+0x36/0x17b0 [ 230.803245][ C0] __ieee80211_beacon_get+0x1179/0x17b0 [ 230.808829][ C0] ? __ieee80211_beacon_get+0x36/0x17b0 [ 230.814377][ C0] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 230.820110][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 230.826175][ C0] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 230.831759][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 230.839028][ C0] __iterate_interfaces+0x2a8/0x590 [ 230.844241][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 230.850324][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 230.857648][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 230.863760][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 230.870838][ C0] mac80211_hwsim_beacon+0xbb/0x1c0 [ 230.876058][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 230.881886][ C0] __hrtimer_run_queues+0x529/0xc60 [ 230.887134][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 230.892928][ C0] ? read_tsc+0x9/0x20 [ 230.896999][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 230.902864][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 230.907998][ C0] handle_softirqs+0x286/0x870 [ 230.912763][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 230.917579][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 230.922905][ C0] __irq_exit_rcu+0xca/0x1f0 [ 230.927647][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 230.932966][ C0] irq_exit_rcu+0x9/0x30 [ 230.937329][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 230.942985][ C0] [ 230.945905][ C0] [ 230.948857][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 230.954834][ C0] RIP: 0010:lock_acquire+0x175/0x360 [ 230.960139][ C0] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 3b dd fe 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 230.979803][ C0] RSP: 0018:ffffc9000bd576d8 EFLAGS: 00000206 [ 230.986013][ C0] RAX: 08ee4065e12a7700 RBX: 0000000000000000 RCX: 08ee4065e12a7700 [ 230.994057][ C0] RDX: 0000000000000001 RSI: ffffffff8db6efd1 RDI: ffffffff8be28d40 [ 231.002093][ C0] RBP: ffffffff81728af5 R08: 0000000000000000 R09: ffffffff81728af5 [ 231.010106][ C0] R10: ffffc9000bd57898 R11: ffffffff81ace6a0 R12: 0000000000000002 [ 231.018255][ C0] R13: ffffffff8e13ee60 R14: 0000000000000000 R15: 0000000000000246 [ 231.026227][ C0] ? unwind_next_frame+0xa5/0x2390 [ 231.031367][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 231.037555][ C0] ? unwind_next_frame+0xa5/0x2390 [ 231.042858][ C0] ? unwind_next_frame+0x19ae/0x2390 [ 231.048197][ C0] ? stack_trace_save+0x9c/0xe0 [ 231.053154][ C0] ? unwind_next_frame+0xa5/0x2390 [ 231.058406][ C0] unwind_next_frame+0xc2/0x2390 [ 231.063447][ C0] ? unwind_next_frame+0xa5/0x2390 [ 231.068702][ C0] ? arch_stack_walk+0xe4/0x150 [ 231.074017][ C0] ? __unwind_start+0x5b9/0x760 [ 231.078990][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 231.085151][ C0] arch_stack_walk+0x11c/0x150 [ 231.090049][ C0] ? stack_trace_save+0x9c/0xe0 [ 231.094920][ C0] stack_trace_save+0x9c/0xe0 [ 231.099610][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 231.104982][ C0] save_stack+0xf5/0x1f0 [ 231.109266][ C0] ? __pfx_save_stack+0x10/0x10 [ 231.114155][ C0] ? page_ext_put+0x97/0xc0 [ 231.118875][ C0] __reset_page_owner+0x71/0x1f0 [ 231.123842][ C0] __free_frozen_pages+0xc71/0xe70 [ 231.129130][ C0] vfree+0x25a/0x400 [ 231.133058][ C0] ? __pfx_kcov_close+0x10/0x10 [ 231.137931][ C0] kcov_close+0x28/0x50 [ 231.142142][ C0] __fput+0x449/0xa70 [ 231.146120][ C0] task_work_run+0x1d1/0x260 [ 231.150734][ C0] ? __pfx_task_work_run+0x10/0x10 [ 231.155874][ C0] ? kmem_cache_free+0x18f/0x400 [ 231.160832][ C0] do_exit+0x6b5/0x22e0 [ 231.164984][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 231.170389][ C0] ? __pfx_do_exit+0x10/0x10 [ 231.174995][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 231.180582][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 231.185966][ C0] do_group_exit+0x21c/0x2d0 [ 231.190620][ C0] __x64_sys_exit_group+0x3f/0x40 [ 231.195694][ C0] x64_sys_call+0x21ba/0x21c0 [ 231.200404][ C0] do_syscall_64+0xfa/0x3b0 [ 231.204901][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 231.210136][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.216223][ C0] ? clear_bhb_loop+0x60/0xb0 [ 231.220920][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.226804][ C0] RIP: 0033:0x7f805bb8e929 [ 231.231241][ C0] Code: Unable to access opcode bytes at 0x7f805bb8e8ff. [ 231.238263][ C0] RSP: 002b:00007ffc72a2c798 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 231.246856][ C0] RAX: ffffffffffffffda RBX: 0000000000000043 RCX: 00007f805bb8e929 [ 231.254894][ C0] RDX: 00007f805bb8d3a0 RSI: 0000000000000004 RDI: 0000000000000043 [ 231.262880][ C0] RBP: 00007f805bdb6738 R08: 00007ffc72a2a536 R09: 0000000000000008 [ 231.270876][ C0] R10: 000000000000001a R11: 0000000000000246 R12: 0000000000000008 [ 231.278950][ C0] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 231.286957][ C0] [ 231.290030][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 231.297332][ C0] CPU: 0 UID: 0 PID: 10337 Comm: syz-executor Not tainted 6.16.0-rc3-syzkaller-00121-g2def09ead4ad #0 PREEMPT(full) [ 231.309622][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 231.319686][ C0] Call Trace: [ 231.323051][ C0] [ 231.325969][ C0] dump_stack_lvl+0x99/0x250 [ 231.330573][ C0] ? __asan_memcpy+0x40/0x70 [ 231.335169][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 231.340461][ C0] ? __pfx__printk+0x10/0x10 [ 231.345059][ C0] panic+0x2db/0x790 [ 231.348965][ C0] ? __pfx_panic+0x10/0x10 [ 231.353402][ C0] __warn+0x31b/0x4b0 [ 231.357387][ C0] ? __rate_control_send_low+0x5df/0x820 [ 231.363020][ C0] ? __rate_control_send_low+0x5df/0x820 [ 231.368664][ C0] report_bug+0x2be/0x4f0 [ 231.372998][ C0] ? __rate_control_send_low+0x5df/0x820 [ 231.378638][ C0] ? __rate_control_send_low+0x5df/0x820 [ 231.384640][ C0] ? __rate_control_send_low+0x5e1/0x820 [ 231.390572][ C0] handle_bug+0x84/0x160 [ 231.394830][ C0] exc_invalid_op+0x1a/0x50 [ 231.399378][ C0] asm_exc_invalid_op+0x1a/0x20 [ 231.404252][ C0] RIP: 0010:__rate_control_send_low+0x5df/0x820 [ 231.410590][ C0] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 80 7b ae 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 02 1b a6 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 231.430411][ C0] RSP: 0018:ffffc90000007538 EFLAGS: 00010246 [ 231.436506][ C0] RAX: 08ee4065e12a7700 RBX: 000000000000000c RCX: ffff88802696da00 [ 231.444498][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 231.452581][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 231.460563][ C0] R10: dffffc0000000000 R11: fffffbfff1bfaa04 R12: ffff8880766683e8 [ 231.468552][ C0] R13: 0000000000000000 R14: ffff888020fb8e40 R15: ffff888020fbb0d8 [ 231.476554][ C0] ? __rate_control_send_low+0x5de/0x820 [ 231.482227][ C0] rate_control_send_low+0x194/0x7a0 [ 231.487561][ C0] rate_control_get_rate+0x20b/0x5d0 [ 231.492984][ C0] ieee80211_beacon_get_finish+0x38c/0x6b0 [ 231.498836][ C0] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 231.505212][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 231.510614][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 231.516355][ C0] ieee80211_beacon_get_ap+0x1478/0x19e0 [ 231.522107][ C0] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 231.528171][ C0] ? __ieee80211_beacon_get+0x36/0x17b0 [ 231.533789][ C0] ? __ieee80211_beacon_get+0x36/0x17b0 [ 231.539354][ C0] __ieee80211_beacon_get+0x1179/0x17b0 [ 231.544911][ C0] ? __ieee80211_beacon_get+0x36/0x17b0 [ 231.550608][ C0] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 231.556089][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 231.562182][ C0] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 231.567760][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 231.574998][ C0] __iterate_interfaces+0x2a8/0x590 [ 231.580221][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 231.586302][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 231.593519][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 231.599599][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 231.606751][ C0] mac80211_hwsim_beacon+0xbb/0x1c0 [ 231.611982][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 231.617913][ C0] __hrtimer_run_queues+0x529/0xc60 [ 231.623161][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 231.628896][ C0] ? read_tsc+0x9/0x20 [ 231.633057][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 231.638967][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 231.644105][ C0] handle_softirqs+0x286/0x870 [ 231.648977][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 231.654032][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 231.659351][ C0] __irq_exit_rcu+0xca/0x1f0 [ 231.664254][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 231.669485][ C0] irq_exit_rcu+0x9/0x30 [ 231.673756][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 231.680194][ C0] [ 231.683235][ C0] [ 231.686162][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 231.692314][ C0] RIP: 0010:lock_acquire+0x175/0x360 [ 231.697647][ C0] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 3b dd fe 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 231.717269][ C0] RSP: 0018:ffffc9000bd576d8 EFLAGS: 00000206 [ 231.723362][ C0] RAX: 08ee4065e12a7700 RBX: 0000000000000000 RCX: 08ee4065e12a7700 [ 231.731350][ C0] RDX: 0000000000000001 RSI: ffffffff8db6efd1 RDI: ffffffff8be28d40 [ 231.739348][ C0] RBP: ffffffff81728af5 R08: 0000000000000000 R09: ffffffff81728af5 [ 231.747327][ C0] R10: ffffc9000bd57898 R11: ffffffff81ace6a0 R12: 0000000000000002 [ 231.755292][ C0] R13: ffffffff8e13ee60 R14: 0000000000000000 R15: 0000000000000246 [ 231.763269][ C0] ? unwind_next_frame+0xa5/0x2390 [ 231.768391][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 231.774546][ C0] ? unwind_next_frame+0xa5/0x2390 [ 231.779677][ C0] ? unwind_next_frame+0x19ae/0x2390 [ 231.784971][ C0] ? stack_trace_save+0x9c/0xe0 [ 231.789817][ C0] ? unwind_next_frame+0xa5/0x2390 [ 231.794934][ C0] unwind_next_frame+0xc2/0x2390 [ 231.799882][ C0] ? unwind_next_frame+0xa5/0x2390 [ 231.805001][ C0] ? arch_stack_walk+0xe4/0x150 [ 231.809854][ C0] ? __unwind_start+0x5b9/0x760 [ 231.814720][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 231.820891][ C0] arch_stack_walk+0x11c/0x150 [ 231.825673][ C0] ? stack_trace_save+0x9c/0xe0 [ 231.830527][ C0] stack_trace_save+0x9c/0xe0 [ 231.835202][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 231.840668][ C0] save_stack+0xf5/0x1f0 [ 231.844919][ C0] ? __pfx_save_stack+0x10/0x10 [ 231.849815][ C0] ? page_ext_put+0x97/0xc0 [ 231.854340][ C0] __reset_page_owner+0x71/0x1f0 [ 231.859293][ C0] __free_frozen_pages+0xc71/0xe70 [ 231.864420][ C0] vfree+0x25a/0x400 [ 231.868331][ C0] ? __pfx_kcov_close+0x10/0x10 [ 231.873183][ C0] kcov_close+0x28/0x50 [ 231.877360][ C0] __fput+0x449/0xa70 [ 231.881354][ C0] task_work_run+0x1d1/0x260 [ 231.885973][ C0] ? __pfx_task_work_run+0x10/0x10 [ 231.891118][ C0] ? kmem_cache_free+0x18f/0x400 [ 231.896068][ C0] do_exit+0x6b5/0x22e0 [ 231.900235][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 231.905630][ C0] ? __pfx_do_exit+0x10/0x10 [ 231.910241][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 231.915530][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 231.920843][ C0] do_group_exit+0x21c/0x2d0 [ 231.925529][ C0] __x64_sys_exit_group+0x3f/0x40 [ 231.930548][ C0] x64_sys_call+0x21ba/0x21c0 [ 231.935241][ C0] do_syscall_64+0xfa/0x3b0 [ 231.939746][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 231.944987][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.951143][ C0] ? clear_bhb_loop+0x60/0xb0 [ 231.955825][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.961733][ C0] RIP: 0033:0x7f805bb8e929 [ 231.966147][ C0] Code: Unable to access opcode bytes at 0x7f805bb8e8ff. [ 231.973156][ C0] RSP: 002b:00007ffc72a2c798 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 231.981593][ C0] RAX: ffffffffffffffda RBX: 0000000000000043 RCX: 00007f805bb8e929 [ 231.989654][ C0] RDX: 00007f805bb8d3a0 RSI: 0000000000000004 RDI: 0000000000000043 [ 231.997621][ C0] RBP: 00007f805bdb6738 R08: 00007ffc72a2a536 R09: 0000000000000008 [ 232.005625][ C0] R10: 000000000000001a R11: 0000000000000246 R12: 0000000000000008 [ 232.013602][ C0] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 232.021656][ C0] [ 232.024954][ C0] Kernel Offset: disabled [ 232.029284][ C0] Rebooting in 86400 seconds..