last executing test programs: 1m17.761484986s ago: executing program 4 (id=130): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[@ANYBLOB="020300000e00000028bd7000fdffffff05000600338000000a000000000000000000000000000000000000000000090100000000000000000200010000000000fc00020c030000a005000500008000000a"], 0x70}, 0x1, 0x7}, 0x8000) 1m5.018938795s ago: executing program 4 (id=130): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[@ANYBLOB="020300000e00000028bd7000fdffffff05000600338000000a000000000000000000000000000000000000000000090100000000000000000200010000000000fc00020c030000a005000500008000000a"], 0x70}, 0x1, 0x7}, 0x8000) 51.098320316s ago: executing program 4 (id=130): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[@ANYBLOB="020300000e00000028bd7000fdffffff05000600338000000a000000000000000000000000000000000000000000090100000000000000000200010000000000fc00020c030000a005000500008000000a"], 0x70}, 0x1, 0x7}, 0x8000) 39.537447492s ago: executing program 4 (id=130): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[@ANYBLOB="020300000e00000028bd7000fdffffff05000600338000000a000000000000000000000000000000000000000000090100000000000000000200010000000000fc00020c030000a005000500008000000a"], 0x70}, 0x1, 0x7}, 0x8000) 27.363842375s ago: executing program 4 (id=130): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[@ANYBLOB="020300000e00000028bd7000fdffffff05000600338000000a000000000000000000000000000000000000000000090100000000000000000200010000000000fc00020c030000a005000500008000000a"], 0x70}, 0x1, 0x7}, 0x8000) 13.243547978s ago: executing program 4 (id=130): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[@ANYBLOB="020300000e00000028bd7000fdffffff05000600338000000a000000000000000000000000000000000000000000090100000000000000000200010000000000fc00020c030000a005000500008000000a"], 0x70}, 0x1, 0x7}, 0x8000) 4.956675144s ago: executing program 1 (id=678): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000002c0)={0x402, {{0xa, 0x0, 0x200, @mcast2}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x808}, 0x20000000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={0x0, 0x24}, &(0x7f0000000200)=0x8) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1e00000005000000010400000800000008800000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000001000000050000000f00000000000000", @ANYRES32, @ANYBLOB="171cb917"], 0x50) recvmmsg(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x22, &(0x7f0000000300)=[{&(0x7f0000000240)=""/130, 0x82}], 0x1}, 0xfffffffd}], 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4400000010001fff2bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000098120100240012800b00010062726964676500001400028005002c000600010005002b000200000030f0374fc95ca0ba7e1989497f709b4c2e9c827768a00ab66d75a34ba1ade2ebf5bf1610101dc1e512ad029136", @ANYBLOB="ed7c2d681a51bc0a57892ca64d04598d6069bcc5032b40226321c6deb1e8fcd9773eae5f5e444231f323ed49b512b156d5309e39e9c76fffdb5ab87914a677e0b7a056a5d80d3ee1f9a8e4ce6a80c76f6843b3289493edd8c8f33ed0b31422cb25ac28d0c0f68e0984a469ffb0e4d00c147d3e823418cdd0cbd1daad0f38ede9406e9df2b3ace0bf744b7ff623c9e2170e6070197e73cd55d1dfb4d1cf595a641cae482c27bab257b4e56f0e7f48c02a18ed39f44a4ee8751570dd59cce1fe7d8dc8f1c8198569a9b2bef10637122cd4617b5d27c12418b3107e51fce37e40aa", @ANYRESOCT], 0x44}}, 0x4000) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x4, 0xfffff034}, {0x40, 0x40, 0xff, 0xfffffffe}, {0x6, 0x0, 0x40, 0x1}]}, 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r6 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r6, 0x400442c8, &(0x7f0000000540)=ANY=[@ANYRES32=r5]) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x800442d2, &(0x7f0000000440)={0x1, &(0x7f0000000340)=[{0x0, 0x0, 0x0, @remote}]}) setsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000140), 0x4) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0xe8) sendto$inet(r4, &(0x7f0000000080)="8f", 0x1, 0x1, &(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000002000000000000000000000000033f58be227af0000", @ANYRES32=0x0, @ANYBLOB="300000000000000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x506d5ab82f05a8d8}, 0x4004015) close(r0) 3.852086782s ago: executing program 1 (id=681): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={0x0, 0x94}}, 0x0) 3.734911133s ago: executing program 1 (id=683): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x35) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)=@polexpire={0xd8, 0x1b, 0x1, 0x70bd2d, 0x25dfdbfd, {{{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x0, 0x4e23, 0x4, 0xa, 0x0, 0x80, 0x32}, {0x800, 0x80, 0xfffffffffffffff8, 0x1ff, 0x1, 0x8000000000000001, 0x9, 0x1158000000000}, {0x2, 0x1, 0xfd, 0x4}, 0x7, 0x0, 0x0, 0x0, 0x2, 0x3}, 0x29}, [@mark={0xc, 0x15, {0x350753, 0x4}}, @sec_ctx={0xc, 0x8, {0xfdb1, 0x8, 0x1, 0x5, 0xfffffda9}}]}, 0xd8}, 0x1, 0x0, 0x0, 0xc040}, 0x8010) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 3.531788313s ago: executing program 1 (id=684): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x77}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xb, 0x41, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r4}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000072009fb300000000fedbdf2507000000", @ANYRES32=r7, @ANYBLOB="080001"], 0x20}, 0x1, 0x0, 0x0, 0x24004800}, 0x4) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r8 = socket(0x10, 0x803, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettaction={0x58, 0x32, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0x14, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x6}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8a}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x58}}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e23, 0x7, @empty, 0xfffffffb}, 0x1c) r13 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r13, 0x84, 0x1, &(0x7f0000000280)={0x0, 0x7, 0x9, 0x9, 0x6}, 0x14) 2.790522534s ago: executing program 1 (id=689): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0130210100ff"}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000580)={0x40000000, 0x0, &(0x7f00000005c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="e3bef4fec0602e5849fc3a1bae0151fbe6c10883c4c68b33671cc68ae4797488d138c63e05a43f68eb393e83789a0c81dad06f5cc39ce223f6221f113f7dddfe307ef96ef2f5610601f8ecde23cafa6dfecaaf5d3056713c5afb60b053f15b86da152fb900451fb8f04314fa3b858bcbeb9caa1a628e75212f6939acc12ebdbf9d138a13525c343076073c8545e041b84ed64753fae38d2a51e4b60096c91b7ee630ca051371048cf2f74bf92c5eb2f3c6a030062166751884f74bf3c125de9cbd55595d", @ANYRES64=r4], 0x10}}, 0x4000811) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000d40000000000000000000000000a20000000000a03000000000000000000010000000900010073797a3000000000bc000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000009000038008000240000000007c00038014000100626f6e64300000000000000000000000140001006970766c616e31000000000000000000140001006970766c616e300000000000000000001400010073697430000000000000fbffffffffffffff0100776c616e300000000000000000000000140001006772653000000000000000000000040008000140000000005c000000180a01010000000000000000010000000900020073797a3000000000090001"], 0x4b0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000200)={0x2, 0x4e21, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000180), r2) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="10022abd7004fcdbdf252100000014000700ff02000000000000000000000000000108000800e000000900fe880000000000000000000000000101"], 0x50}, 0x1, 0x0, 0x0, 0x50}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) unshare(0x40020000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@rand_addr=0xac1414aa, 0x4e23, 0x10000, 0x1cb, 0x12d5e, 0x12d58}}, 0x44) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf09"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 2.336447611s ago: executing program 0 (id=694): close(0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$kcm(0xa, 0x7, 0x3a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sys_enter\x00'}, 0x18) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) close(0xffffffffffffffff) (async) socket$packet(0x11, 0x2, 0x300) (async) socket$unix(0x1, 0x1, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) listen(r1, 0x0) (async) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) socket$kcm(0xa, 0x7, 0x3a) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sys_enter\x00'}, 0x18) (async) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) (async) 2.321205811s ago: executing program 3 (id=695): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x48, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5561e00f}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="5400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e000018000280040012000800150000080007"], 0x54}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="5400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e000018000280040012000800150000080007"], 0x54}}, 0x0) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000530400012dbd7000ffdbdf250700"], 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x4000040) unshare(0x24020400) (async) unshare(0x24020400) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r4, 0x891e) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x62) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) (async) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 2.040074797s ago: executing program 2 (id=697): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) recvmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/47, 0x2f}], 0x1}, 0x3ff}], 0x1, 0x123, 0x0) shutdown(r0, 0x1) unshare(0x20000400) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$xdp(0x2c, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000104000000000000000000002000", @ANYRES32=0x0, @ANYBLOB="03000000000000002c0012800c0001006d6163766c616e001c000280080001000800000006ef0200010000001ffe02000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @fd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 2.039633381s ago: executing program 0 (id=698): syz_emit_ethernet(0xe, &(0x7f0000000300)={@broadcast, @local, @void, {@generic={0x2}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000500)=@can_delroute={0x34, 0x19, 0x1, 0xfffffffe, 0x80000, {0x1d, 0x1, 0x7}, [@CGW_MOD_XOR={0x15, 0x3, {{{0x2, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "49fd003900"}, 0x4}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffff7, 0x4, 0x2, 0xcc}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000300)={@broadcast, @local, @void, {@generic={0x2}}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000500)=@can_delroute={0x34, 0x19, 0x1, 0xfffffffe, 0x80000, {0x1d, 0x1, 0x7}, [@CGW_MOD_XOR={0x15, 0x3, {{{0x2, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "49fd003900"}, 0x4}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffff7, 0x4, 0x2, 0xcc}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) 1.927350167s ago: executing program 3 (id=699): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x200, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfffa}, {0xffe0, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x8000) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xe, 0x9}, {0xfff3, 0x5}, {0xe, 0x2613a1b406814a86}}}, 0x24}}, 0x44804) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, 0x7}}}, 0x84) (async) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x80) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, 0x0, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) unshare(0x68060200) (async) unshare(0x6a040000) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000000), 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xd, 0x17, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$can_bcm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800000000000000", @ANYRES64=0x0], 0x80}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r7 = socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 64) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r8, 0x29, 0x3a, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x8031, 0xffffffffffffffff, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) 1.901238757s ago: executing program 0 (id=700): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket(0x1, 0x803, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="b40800000000000073114100000000008510000002000000b7000000000000009500c2000000000095000012000000000e09b9445761db3ed82f7be4b9f1628b9a5c40384cb45e62e827e611f21a01a76f66f616553959b478ad3c46bb20e558783b21dd5307760617deec8b1b75c00853ee69e33ba2c01c28950365dd46fcc9f2ac6d20197fd68292e8445824f49b6fba41a316e13e462e31ca00d2622d56318d78e271d364329e7ae732bf8dade587bb30d67e23f78662621b74aabfd8eaf399893bab50fed33101f5a1085f991877907bd6117db675155932860499977f7384a8d94e810492c284fc7cc784ed942bf11d72897a7896f5f8c957984312e9d39eaa478a3065afd52404cb058b"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000a80)='mm_page_free_batched\x00', r5}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) close(r5) (async, rerun: 32) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async, rerun: 32) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="150000000800000002"], 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000008000000000005fcc394366391ea6d21229f17400001811faffa36ded2b010000000000000024ac98264066453ff6eb6e465df6a9079dfc710a690abaa7918b15edb04cd5a247fc5b099f864cef070000004dbb083d9ff1a74d459d17f95063669d12081f60ba57cd10b6", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r8, 0x0, 0x0}, 0x10) close(r4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r9) (async) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r1, 0x0, 0x0}, 0x10) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r9, r1, 0x4, r1}, 0x10) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x25, &(0x7f0000000000)={r11, @in6={{0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}}, 0xffc0}, 0x90) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000445b9599040000081b6ae606", @ANYRES32=0x0, @ANYBLOB="00010000000000001c00128009000100626f6e64000000000c00028005001d0000000000"], 0x3c}}, 0x54) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x4000000) 1.828309793s ago: executing program 2 (id=701): r0 = socket$netlink(0x10, 0x3, 0x15) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e21, 0xe, @dev={0xfe, 0x80, '\x00', 0xd}, 0x1}, 0x1c) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000003500)={0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000000000)={0xe0, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="f3c1837c3e366b798e3a850b657658215cbbbe26ac11b044d3e84eceaf37ff81b7bcefe98ef957720913fc8e5edcfec4f94edfbb6e1609f174d456c1c9e2e74a9f4b3f73abfa3e0230ef46a4e42a205a5ced53a7f47d0ba57f878b7e450fc5aa987be913ff399ee61468ead339f7bea14e47efca647b84b7011486a831efacbbfaf463512583fe6b57dddf604aded13a6d74080a46a51ad6d430160ea5f2480359d0cd5bd51a917e84b9838d628b52fe1f92d9f956890dde89888be65fdf94eaa0a337571c"]}, 0xe0}], 0x1}, 0x0) 1.673051521s ago: executing program 2 (id=702): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff11, 0x0, 0xffffffffffffffff, 0xfffffffffffffea5, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0xfffffffc}}}}}}}}, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) socket$inet(0x2, 0x4000000805, 0x0) (async, rerun: 64) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) r1 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4084, 0xff4}, 0x40000140) (async) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r5, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44054}, 0x4000) r6 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f0000000480), 0x4) (async) sendmsg$tipc(r6, &(0x7f0000000200)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x8}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000040)="0087eb6f6a72eb4c4bec405a6a3600994c", 0x11}, {&(0x7f0000000580)="b04ac7e450abd112", 0x8}], 0x2}, 0x4000000) (async) recvmmsg(r6, &(0x7f00000070c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a40)=""/188, 0xbc}], 0x1, &(0x7f0000000500)=""/87, 0x57}}], 0x1, 0x0, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="640000001080030400"/20, @ANYRES32=r0, @ANYRES64, @ANYRES32=r1, @ANYRES8=r1, @ANYRES64, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 1.476994432s ago: executing program 2 (id=703): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x3d, 0x800000, 0x8, 0x7, 0x2, 0x81}) write$bt_hci(r4, &(0x7f0000000080)=ANY=[], 0x6) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) unshare(0x24020400) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r6, 0x0, 0xb, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x20, r8, 0x30d, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000680)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000300)={0x30c, r8, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x1a4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa51e}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdd80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3a76}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd7}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x180}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa1d3386d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4197}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x77be}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MEDIA={0xa8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc08}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa5f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7cd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x99}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x67}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xaf2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}]}]}, 0x30c}, 0x1, 0x0, 0x0, 0x4000881}, 0x850) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x38, r9, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0xfffdfffd, 0xfffffffd, 0x9d]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8000}]}]}, 0x38}}, 0x800) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r10, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010025db7000fbdbdf25070000000a0004007770616e3400000008000500020000000c0006400300000000000000080003005f383c"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4080080) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) 1.071826251s ago: executing program 2 (id=704): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x2, 0x8, 0xd0eb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x98}}, 0x4048010) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @loopback, 0xfcb}, 0x1c) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x29, 0x5, 0x0) pipe(0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f00000000c0)={0x5, &(0x7f0000000000)=[{0x2d, 0x0, 0x3}, {}, {}, {}, {0x6}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=r0, @ANYBLOB="00000000000000000000000000000000000000000f0626c312ca4bd5b878bbedd4c490bad6c1a2fda91e538df808fb9c11e203f51854afa641c9dc251bc9c170842602a43e90ead8827ab68861ba0309f391df00d474", @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000880)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x4a, 0x0, &(0x7f0000000140)="d510faffffdb674c5ae4000b0094", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="0130010100ff"}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x1, @loopback, 0x2}]}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x6}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f00000002c0)={r8, @in={{0x2, 0x4e20, @multicast1}}}, 0x84) 917.997546ms ago: executing program 0 (id=705): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0x6, 0x81, 0x0, @mcast1, @loopback, 0x8, 0x40, 0x4, 0x23}}) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xa, 0x8, 0x7fff, 0x4, 0x40404, r0, 0xd, '\x00', r1, 0xffffffffffffffff, 0x4, 0x3, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000071000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="0c0001800800010003000100200001"], 0x44}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0xaf14, 0x5, 0xa, 0x2000, r2, 0x4, '\x00', r5, 0xffffffffffffffff, 0x1, 0x3, 0x5, 0x4, @void, @value, @void, @value}, 0x50) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x20, 0x0, {0x1c, 0x14, 0x0, 0x0, 0x0, 0x0, 0xfd}}, 0x1c}}, 0x0) 813.885752ms ago: executing program 3 (id=706): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={0x0, 0x94}}, 0x0) 712.645932ms ago: executing program 1 (id=707): socket$inet6(0xa, 0x2, 0x3a) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x37e, &(0x7f0000000740)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0200", 0x348, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, [{0x0, 0x3, "a78ce54006598080a8030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0502"}, {0x1f, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x7, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x5, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x5, 0x11, "3f14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e2eeb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05"}, {0x5, 0x1, "fc0fe85e8ee7"}]}}}}}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) sendmsg$inet(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000540)="6012d0", 0x3}], 0x2}, 0x4010) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) writev(r3, &(0x7f00000006c0)=[{&(0x7f00000005c0)="49e61f481e890871c1aa811bc86486153f9ea22745b15a6e7a630f51255d974d", 0x20}, {0x0}], 0x2) sendmsg$inet6(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='h', 0x1}], 0x1}, 0x20044800) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x1, 0x20}, 0xc) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000100)) write$tun(r0, &(0x7f0000000340)={@void, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void, {0x8100, 0x2, 0x0, 0x2}}, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00', 0x8, 0x11, 0x0, @empty, @mcast2, {[], {0x4f1c, 0x4e20, 0x8}}}}}}}, 0x42) r4 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x18000}, {0xa, 0x0, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x3}, 0x4}, 0x0, {[0x6, 0x200, 0x1, 0xfffffefc, 0x2d, 0x1, 0x0, 0x200000]}}, 0x50) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg(r5, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2c000011) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e) socket$nl_generic(0x10, 0x3, 0x10) 638.290115ms ago: executing program 0 (id=708): pipe(&(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90b24fc60", 0x8c0}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000100)=""/189, 0xbd}, {&(0x7f0000002b80)=""/191, 0xbf}, {&(0x7f00000001c0)=""/124, 0x7c}, {&(0x7f0000000740)=""/195, 0xc3}, {&(0x7f0000003cc0)=""/4077, 0xfed}, {&(0x7f00000002c0)=""/193, 0xc1}, {&(0x7f00000003c0)=""/139, 0x8b}, {&(0x7f0000000480)=""/81, 0x51}, {&(0x7f00000070c0)=""/4096, 0x1000}], 0x9}, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000002c0)={'veth0\x00', 0xe00}) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a0000002900", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000cb9f2cfcc837c14b000000000000000000000000000000000000000200000000000000ffffe2ffe0ffffff000000000000000000000000000000000000000000000000000000000000e1069346585daf1fd01200000200"/121], 0xb8}}, 0x4004) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000002000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff0000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000220000"], 0xb8}}, 0x0) write(r3, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) 632.654951ms ago: executing program 3 (id=709): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540), 0x0, 0x40861) 516.054939ms ago: executing program 3 (id=710): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@var={0x3, 0x0, 0x0, 0x11, 0x3}, @typedef={0x0, 0x0, 0x0, 0x4}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="a00000000001010400000000000000000a0000003c0001802c00018014000300000000000000000000000000000000001401040000000000f5ff00000000ffffac1414000c00028005000100000000003c0002802c0001800400fc0200000000000000000000000000000c00028005000100000000000800074000000000040018800800044000000000000000000000f6db84d8b7689bcf3b7c59bf5737415a27d2"], 0xa0}, 0x1, 0xfffff000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000440)=@framed={{0x18, 0x5, 0x0, 0x0, 0x63, 0x0, 0x0, 0x0, 0xfffffffe}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 488.463943ms ago: executing program 3 (id=711): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x2, 0x8, 0xd0eb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @loopback, 0xfcb}, 0x1c) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r2}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x29, 0x5, 0x0) pipe(0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f00000000c0)={0x5, &(0x7f0000000000)=[{0x2d, 0x0, 0x3}, {}, {}, {}, {0x6}]}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000880)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0x4a, 0x0, &(0x7f0000000140)="d510faffffdb674c5ae4000b0094", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x1, @loopback, 0x2}]}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x85, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x6}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, &(0x7f00000002c0)={r10, @in6={{0xa, 0x4e23, 0x5, @private2, 0x6}}}, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 223.377473ms ago: executing program 0 (id=712): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="120000000f0000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f0000000180), &(0x7f0000000100)=r2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r3, &(0x7f0000000040), 0x0}, 0x20) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000200)={0x3, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @remote}}}, 0x108) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000400000000000000020000130200000002008802"], &(0x7f0000000780)=""/224, 0x40, 0xe0, 0xa, 0x0, 0x0, @void, @value}, 0x28) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(0xffffffffffffffff, &(0x7f00000005c0)={@val={0x0, 0x1c}, @void, @llc={@llc={0x8e, 0xdc, "d480", "5cc4d5d6fe42f6e61d20fd24ebe00a43c4b43a4d32970f59b14c71457e67d6e3db4c894ea9d02131ed759d551aa64fda42bf43056718b17f5a44ee31ffa781d84bf6b0a11724791db146bd1f0a0f41e57d7f3e7b9b28104d3fd4a6672a57802f287c29926ef97637f872eaa2f761ac5d2f703184a45e7b2f76b178eb48651d9c2fe58bac6d82c581ce849b8e2a5a0865b76f548f023b0ba66d3160e7ef7509d2a823df70d0fb175b2bffb5155e3de63a08988ae256e0b063c31dc7ce8b3c18d8ae"}}}, 0xc9) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @broadcast}) write$tun(r7, &(0x7f0000000180)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0xfffa, 0x14}, @ipv4=@tcp={{0x6, 0x4, 0x0, 0x4, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010101, @multicast1, {[@end]}}, {{0x8100, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5}}}}, 0x3a) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e40)={0x28, 0x2b, 0xb, 0x0, 0x0, {0x9}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r9}]}, 0x28}}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r10, 0x0) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040bf080000000000027b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r11, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f00000001c0)='GPL\x00', 0x3, 0xff6, &(0x7f0000001e00)=""/4086, 0x41000, 0xa, '\x00', 0x0, 0x0, r10, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r6}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r10}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'syzkaller0\x00'}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev={0xac, 0x14, 0x14, 0x1c}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4804}, 0x4000000) write$tun(r1, &(0x7f0000000240)=ANY=[], 0xfdef) bind$alg(r0, &(0x7f0000000080)={0x2, 'aead\x00', 0x0, 0x0, 'rfc7539esp(chacha20-generic,ghash-clmulni)\x00'}, 0x58) 0s ago: executing program 2 (id=713): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40050) (async) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40050) socket$inet_smc(0x2b, 0x1, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x182204, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="89e7ee", 0x3}, {&(0x7f0000000140)="9c74dfbf77572856c888a8", 0xb}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) (async) r5 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r5, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x2a, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYRES16=r4, @ANYRES8=r8, @ANYRES16=r8, @ANYRES32=0x0], 0x40}, 0x1, 0x0, 0x0, 0x24000891}, 0x24000845) sendmsg$DCCPDIAG_GETSOCK(r6, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYRES32=r9, @ANYBLOB="0400000008000000090080000800000004000100"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0xc855) (async) sendmsg$DCCPDIAG_GETSOCK(r6, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYRES32=r9, @ANYBLOB="0400000008000000090080000800000004000100"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0xc855) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) kernel console output (not intermixed with test programs): [ T5848] team0: Port device team_slave_1 added [ 93.240956][ T5846] team0: Port device team_slave_1 added [ 93.267648][ T5834] hsr_slave_0: entered promiscuous mode [ 93.274402][ T5834] hsr_slave_1: entered promiscuous mode [ 93.280505][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.288869][ T5834] Cannot create hsr debugfs directory [ 93.375380][ T5838] hsr_slave_0: entered promiscuous mode [ 93.381811][ T5838] hsr_slave_1: entered promiscuous mode [ 93.388358][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.396088][ T5838] Cannot create hsr debugfs directory [ 93.402509][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.410689][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.436785][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.449274][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.456339][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.482345][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.496641][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.503687][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.535604][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.548521][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.555707][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.581743][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.743119][ T5848] hsr_slave_0: entered promiscuous mode [ 93.749464][ T5848] hsr_slave_1: entered promiscuous mode [ 93.756359][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.764042][ T5848] Cannot create hsr debugfs directory [ 93.809566][ T5846] hsr_slave_0: entered promiscuous mode [ 93.816249][ T5846] hsr_slave_1: entered promiscuous mode [ 93.822398][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.830526][ T5846] Cannot create hsr debugfs directory [ 94.283765][ T5842] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.315916][ T5842] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.341246][ T5842] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.352745][ T5842] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.412711][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.437953][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.462398][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.481717][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.517288][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.547535][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.573902][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.607972][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.726885][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.735674][ T5844] Bluetooth: hci0: command tx timeout [ 94.735983][ T5848] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.754579][ T5848] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.767153][ T5848] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.801382][ T5848] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.808263][ T5844] Bluetooth: hci2: command tx timeout [ 94.884885][ T5844] Bluetooth: hci1: command tx timeout [ 94.897183][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.908124][ T5846] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.919807][ T5846] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.930484][ T5846] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.942284][ T5846] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.964464][ T5845] Bluetooth: hci4: command tx timeout [ 94.970186][ T5844] Bluetooth: hci3: command tx timeout [ 94.981081][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.018648][ T3490] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.026000][ T3490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.051015][ T3490] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.058241][ T3490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.118031][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.160644][ T3490] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.167826][ T3490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.201132][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.208279][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.248795][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.340899][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.375078][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.419023][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.426269][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.465731][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.472994][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.506511][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.559932][ T3490] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.567140][ T3490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.605009][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.681546][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.689511][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.734205][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.790272][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.797521][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.858798][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.866036][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.909005][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.994755][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.158243][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.221755][ T5842] veth0_vlan: entered promiscuous mode [ 96.243485][ T5834] veth0_vlan: entered promiscuous mode [ 96.288497][ T5842] veth1_vlan: entered promiscuous mode [ 96.328292][ T5834] veth1_vlan: entered promiscuous mode [ 96.448286][ T5838] veth0_vlan: entered promiscuous mode [ 96.467398][ T5838] veth1_vlan: entered promiscuous mode [ 96.510131][ T5842] veth0_macvtap: entered promiscuous mode [ 96.530424][ T5842] veth1_macvtap: entered promiscuous mode [ 96.552864][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.579725][ T5834] veth0_macvtap: entered promiscuous mode [ 96.610785][ T5838] veth0_macvtap: entered promiscuous mode [ 96.630557][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.654857][ T5834] veth1_macvtap: entered promiscuous mode [ 96.667135][ T5838] veth1_macvtap: entered promiscuous mode [ 96.680425][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.707025][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.718679][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.731199][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.742246][ T5842] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.751890][ T5842] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.760762][ T5842] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.770088][ T5842] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.797367][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.804870][ T5844] Bluetooth: hci0: command tx timeout [ 96.831079][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.842574][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.855673][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.866750][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.879141][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.886666][ T5844] Bluetooth: hci2: command tx timeout [ 96.898627][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.910391][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.921972][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.941153][ T5846] veth0_vlan: entered promiscuous mode [ 96.965893][ T5844] Bluetooth: hci1: command tx timeout [ 96.978761][ T5838] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.989314][ T5838] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.998613][ T5838] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.008902][ T5838] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.030032][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.042566][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.053190][ T5844] Bluetooth: hci3: command tx timeout [ 97.053239][ T5844] Bluetooth: hci4: command tx timeout [ 97.079488][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.090118][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.101774][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.147839][ T5846] veth1_vlan: entered promiscuous mode [ 97.160594][ T5834] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.172720][ T5834] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.181798][ T5834] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.191123][ T5834] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.351835][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.364224][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.420713][ T5846] veth0_macvtap: entered promiscuous mode [ 97.442785][ T5848] veth0_vlan: entered promiscuous mode [ 97.463036][ T5846] veth1_macvtap: entered promiscuous mode [ 97.469244][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.480893][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.489384][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.490962][ T5848] veth1_vlan: entered promiscuous mode [ 97.501496][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.590749][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.600505][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.604312][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.708279][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.733736][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.742106][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.768177][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.784698][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.797668][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.809515][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.824341][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.838870][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.859656][ T5848] veth0_macvtap: entered promiscuous mode [ 97.882527][ T5914] batadv1: entered allmulticast mode [ 97.891399][ T5914] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 97.899479][ T5914] bridge0: port 3(batadv1) entered blocking state [ 97.910847][ T5915] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 97.916017][ T5914] bridge0: port 3(batadv1) entered disabled state [ 97.931957][ T5914] batadv1: entered promiscuous mode [ 97.940825][ T5914] bridge0: port 3(batadv1) entered blocking state [ 97.947606][ T5914] bridge0: port 3(batadv1) entered forwarding state [ 97.961355][ T5888] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.979613][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.983101][ T5888] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.003072][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.041774][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.070560][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.088899][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.123236][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.145905][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.202192][ T5846] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.212169][ T5846] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.222657][ T5846] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.231846][ T5846] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.248237][ T5848] veth1_macvtap: entered promiscuous mode [ 98.394761][ T13] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 98.404694][ T13] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 98.448496][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.475900][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.507988][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.541884][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.555742][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.566873][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.577244][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.588572][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.608095][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.669059][ T5923] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 98.683672][ T5925] vlan2: entered promiscuous mode [ 98.693920][ T5925] vlan2: entered allmulticast mode [ 98.702995][ T5925] hsr_slave_1: entered allmulticast mode [ 98.722572][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.750071][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.763366][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.789530][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.803767][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.837041][ T5931] Driver unsupported XDP return value 0 on prog (id 4) dev N/A, expect packet loss! [ 98.839216][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.865230][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.878171][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.889441][ T5845] Bluetooth: hci0: command tx timeout [ 98.906639][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.963377][ T5845] Bluetooth: hci2: command tx timeout [ 98.968180][ T5848] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.981146][ T5848] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.990337][ T5848] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.999611][ T5848] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.043331][ T5845] Bluetooth: hci1: command tx timeout [ 99.124106][ T5845] Bluetooth: hci4: command tx timeout [ 99.129605][ T5844] Bluetooth: hci3: command tx timeout [ 99.147449][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.202212][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.271631][ T3581] IPVS: starting estimator thread 0... [ 99.347249][ T5937] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8'. [ 99.384805][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.393374][ T5936] IPVS: using max 28 ests per chain, 67200 per kthread [ 99.430551][ T5937] Zero length message leads to an empty skb [ 99.438250][ T5937] Bluetooth: MGMT ver 1.23 [ 99.464235][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.487654][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.506287][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.621036][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.633548][ T5941] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.683458][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.712720][ T5943] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 47808 - 0 [ 99.735945][ T5943] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 47808 - 0 [ 99.750675][ T5943] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 47808 - 0 [ 99.761521][ T5946] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.762645][ T5943] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 47808 - 0 [ 99.789200][ T5943] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 51028 - 0 [ 99.800310][ T5943] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 51028 - 0 [ 99.817424][ T5949] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 99.830159][ T5943] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 51028 - 0 [ 99.840635][ T5943] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 51028 - 0 [ 99.858646][ T5943] geneve2: entered promiscuous mode [ 99.868638][ T5943] geneve2: entered allmulticast mode [ 99.980497][ T5948] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 100.027935][ T5954] netlink: 'syz.2.13': attribute type 1 has an invalid length. [ 100.308279][ T5967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15'. [ 100.824175][ T5992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19'. [ 101.176375][ T6006] pim6reg1: entered allmulticast mode [ 101.429885][ T6021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.28'. [ 101.509849][ T6026] netlink: 308 bytes leftover after parsing attributes in process `syz.4.29'. [ 101.520817][ T6021] bond0: entered promiscuous mode [ 101.571325][ T30] audit: type=1804 audit(1746939598.477:2): pid=6030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.27" name="/newroot/6/cgroup.controllers" dev="tmpfs" ino=49 res=1 errno=0 [ 101.573395][ T6028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.30'. [ 101.612430][ T6021] bond_slave_0: entered promiscuous mode [ 101.631314][ T6021] bond_slave_1: entered promiscuous mode [ 101.639642][ T6029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.30'. [ 101.693225][ T6021] bond0: left promiscuous mode [ 101.698086][ T6021] bond_slave_0: left promiscuous mode [ 101.703081][ T30] audit: type=1800 audit(1746939598.477:3): pid=6030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.27" name="cgroup.controllers" dev="tmpfs" ino=49 res=0 errno=0 [ 101.788928][ T6021] bond_slave_1: left promiscuous mode [ 102.409401][ T6062] vlan0: entered promiscuous mode [ 102.462769][ T6063] netlink: 132 bytes leftover after parsing attributes in process `syz.0.37'. [ 102.856924][ T6066] IPVS: set_ctl: invalid protocol: 59 172.20.20.44:20000 [ 102.888590][ T6079] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 102.922322][ T6079] warning: `syz.1.40' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 102.926477][ T6078] netlink: 20 bytes leftover after parsing attributes in process `syz.2.41'. [ 103.190838][ T6085] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 104.094103][ T6093] vxcan2: entered promiscuous mode [ 104.180978][ T6107] !: renamed from dummy0 (while UP) [ 104.465182][ T6129] __nla_validate_parse: 1 callbacks suppressed [ 104.465202][ T6129] netlink: 8 bytes leftover after parsing attributes in process `syz.4.51'. [ 105.246602][ T6178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.56'. [ 105.607980][ T6196] netlink: 'syz.1.60': attribute type 8 has an invalid length. [ 105.699075][ T6204] netlink: 'syz.2.62': attribute type 1 has an invalid length. [ 105.713798][ T6207] syz.4.63 uses obsolete (PF_INET,SOCK_PACKET) [ 105.728168][ T6204] netlink: 224 bytes leftover after parsing attributes in process `syz.2.62'. [ 105.828620][ T6206] netlink: 'syz.2.62': attribute type 1 has an invalid length. [ 105.842809][ T6206] netlink: 224 bytes leftover after parsing attributes in process `syz.2.62'. [ 105.858264][ T6206] workqueue: Failed to create a rescuer kthread for wq "phy3": -EINTR [ 105.988268][ T6215] can: request_module (can-proto-0) failed. [ 106.224133][ T6231] Cannot find set identified by id 0 to match [ 106.308034][ T6237] netlink: 28 bytes leftover after parsing attributes in process `syz.0.70'. [ 106.452297][ T6244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.72'. [ 106.487759][ T6244] syz.4.72: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 106.510794][ T6244] CPU: 1 UID: 0 PID: 6244 Comm: syz.4.72 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) [ 106.510840][ T6244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 106.510859][ T6244] Call Trace: [ 106.510871][ T6244] [ 106.510881][ T6244] dump_stack_lvl+0x189/0x250 [ 106.510923][ T6244] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 106.510951][ T6244] ? __pfx_dump_stack_lvl+0x10/0x10 [ 106.510989][ T6244] ? __pfx__printk+0x10/0x10 [ 106.511010][ T6244] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 106.511032][ T6244] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 106.511062][ T6244] warn_alloc+0x214/0x310 [ 106.511100][ T6244] ? __pfx_warn_alloc+0x10/0x10 [ 106.511129][ T6244] ? kasan_save_track+0x4f/0x80 [ 106.511151][ T6244] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 106.511176][ T6244] ? xskq_create+0x56/0x170 [ 106.511207][ T6244] ? __x64_sys_setsockopt+0x18b/0x220 [ 106.511233][ T6244] ? do_syscall_64+0xf6/0x210 [ 106.511251][ T6244] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.511284][ T6244] __vmalloc_node_range_noprof+0x125/0x12c0 [ 106.511346][ T6244] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 106.511379][ T6244] ? __kasan_kmalloc+0x93/0xb0 [ 106.511409][ T6244] vmalloc_user_noprof+0x74/0x80 [ 106.511437][ T6244] ? xskq_create+0xbf/0x170 [ 106.511467][ T6244] xskq_create+0xbf/0x170 [ 106.511500][ T6244] xsk_init_queue+0xb0/0x110 [ 106.511534][ T6244] xsk_setsockopt+0x43f/0x710 [ 106.511567][ T6244] ? __pfx_xsk_setsockopt+0x10/0x10 [ 106.511609][ T6244] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 106.511632][ T6244] ? __pfx_xsk_setsockopt+0x10/0x10 [ 106.511664][ T6244] do_sock_setsockopt+0x257/0x3e0 [ 106.511694][ T6244] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 106.511719][ T6244] ? __fget_files+0x2a/0x420 [ 106.511751][ T6244] ? __fget_files+0x3a0/0x420 [ 106.511776][ T6244] ? __fget_files+0x2a/0x420 [ 106.511811][ T6244] __x64_sys_setsockopt+0x18b/0x220 [ 106.511846][ T6244] do_syscall_64+0xf6/0x210 [ 106.511868][ T6244] ? clear_bhb_loop+0x45/0xa0 [ 106.511893][ T6244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.511912][ T6244] RIP: 0033:0x7f6abf98e969 [ 106.511938][ T6244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.511955][ T6244] RSP: 002b:00007f6ac0833038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 106.511984][ T6244] RAX: ffffffffffffffda RBX: 00007f6abfbb5fa0 RCX: 00007f6abf98e969 [ 106.511999][ T6244] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 106.512011][ T6244] RBP: 00007f6abfa10ab1 R08: 0000000000000004 R09: 0000000000000000 [ 106.512036][ T6244] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.512047][ T6244] R13: 0000000000000000 R14: 00007f6abfbb5fa0 R15: 00007fff7c8fe848 [ 106.512079][ T6244] [ 106.512092][ T6244] Mem-Info: [ 106.801657][ T6250] Bluetooth: MGMT ver 1.23 [ 106.821636][ T6244] active_anon:5068 inactive_anon:0 isolated_anon:0 [ 106.821636][ T6244] active_file:1288 inactive_file:39825 isolated_file:0 [ 106.821636][ T6244] unevictable:768 dirty:1535 writeback:0 [ 106.821636][ T6244] slab_reclaimable:9943 slab_unreclaimable:97803 [ 106.821636][ T6244] mapped:29283 shmem:1366 pagetables:921 [ 106.821636][ T6244] sec_pagetables:0 bounce:0 [ 106.821636][ T6244] kernel_misc_reclaimable:0 [ 106.821636][ T6244] free:1350305 free_pcp:323 free_cma:0 [ 106.938582][ T6244] Node 0 active_anon:20400kB inactive_anon:0kB active_file:5152kB inactive_file:159096kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121276kB dirty:6140kB writeback:0kB shmem:3924kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11496kB pagetables:3572kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 106.969892][ T6262] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 107.042345][ T6244] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 107.104408][ T6244] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 107.223075][ T6244] lowmem_reserve[]: 0 2503 2504 2504 2504 [ 107.233929][ T6244] Node 0 DMA32 free:1478292kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:20392kB inactive_anon:0kB active_file:5152kB inactive_file:159004kB unevictable:1536kB writepending:6140kB present:3129332kB managed:2564056kB mlocked:0kB bounce:0kB free_pcp:1676kB local_pcp:980kB free_cma:0kB [ 107.234038][ T6267] netlink: 47 bytes leftover after parsing attributes in process `syz.1.77'. [ 107.310984][ T6244] lowmem_reserve[]: 0 0 0 0 0 [ 107.357084][ T6252] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 107.387698][ T6244] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 107.450338][ T6244] lowmem_reserve[]: 0 0 0 0 0 [ 107.459412][ T6244] Node 1 Normal free:3908540kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:0kB free_cma:0kB [ 107.494202][ T6244] lowmem_reserve[]: 0 0 0 0 0 [ 107.502318][ T6244] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 107.537326][ T6244] Node 0 DMA32: 10*4kB (UM) 426*8kB (UE) 459*16kB (UME) 41*32kB (UME) 141*64kB (UME) 77*128kB (UME) 30*256kB (UM) 7*512kB (UME) 7*1024kB (UME) 6*2048kB (UME) 345*4096kB (M) = 1474824kB [ 107.560834][ T6244] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 107.580016][ T6244] Node 1 Normal: 267*4kB (UME) 64*8kB (UME) 43*16kB (UME) 232*32kB (UME) 107*64kB (UME) 27*128kB (UME) 16*256kB (UM) 11*512kB (UME) 2*1024kB (ME) 3*2048kB (UE) 945*4096kB (M) = 3908636kB [ 107.607177][ T6244] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 107.618144][ T6244] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 107.637342][ T6244] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 107.648774][ T6244] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 107.661691][ T6244] 42474 total pagecache pages [ 107.687482][ T6244] 0 pages in swap cache [ 107.699718][ T6244] Free swap = 124996kB [ 107.720063][ T6244] Total swap = 124996kB [ 107.740056][ T6244] 2097051 pages RAM [ 107.757796][ T6244] 0 pages HighMem/MovableOnly [ 107.772825][ T6244] 424379 pages reserved [ 107.787853][ T6244] 0 pages cma reserved [ 107.969076][ T6289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.83'. [ 108.035880][ T6289] netlink: 24 bytes leftover after parsing attributes in process `syz.0.83'. [ 108.186314][ T6296] netlink: 'syz.2.84': attribute type 11 has an invalid length. [ 108.209194][ T6300] netlink: 12 bytes leftover after parsing attributes in process `syz.4.85'. [ 108.261273][ T6300] vlan2: entered allmulticast mode [ 108.275454][ T6300] hsr0: entered allmulticast mode [ 108.291695][ T6300] hsr_slave_0: entered allmulticast mode [ 108.308870][ T6300] hsr_slave_1: entered allmulticast mode [ 108.620347][ T6310] tipc: Enabling of bearer rejected, failed to enable media [ 108.876055][ T6316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.926708][ T6316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.973036][ T6316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.014465][ T6316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.024764][ T6316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.043815][ T6316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.065375][ T6316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.086990][ T6316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.489698][ T6340] __nla_validate_parse: 6 callbacks suppressed [ 109.489719][ T6340] netlink: 20 bytes leftover after parsing attributes in process `syz.4.97'. [ 109.523210][ T5844] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 109.862761][ T6350] syzkaller1: entered promiscuous mode [ 109.868709][ T6350] syzkaller1: entered allmulticast mode [ 110.043440][ T6353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.104'. [ 110.897850][ T6398] Dead loop on virtual device ip6_vti0, fix it urgently! [ 110.917015][ T6398] Dead loop on virtual device ip6_vti0, fix it urgently! [ 110.926201][ T6398] Dead loop on virtual device ip6_vti0, fix it urgently! [ 110.934192][ T6398] Dead loop on virtual device ip6_vti0, fix it urgently! [ 110.941825][ T6398] Dead loop on virtual device ip6_vti0, fix it urgently! [ 110.955172][ T6398] Dead loop on virtual device ip6_vti0, fix it urgently! [ 110.969410][ T6401] netlink: 'syz.3.115': attribute type 16 has an invalid length. [ 110.978157][ T6401] netlink: 'syz.3.115': attribute type 17 has an invalid length. [ 112.211798][ T6401] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.220029][ T6401] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.721788][ T6401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.767008][ T6401] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.768338][ T6439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.126'. [ 112.815425][ T6439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.126'. [ 112.975691][ T6401] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.006509][ T6401] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.043364][ T6401] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.057672][ T6401] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.474900][ T6456] netlink: 'syz.3.127': attribute type 7 has an invalid length. [ 113.505081][ T6456] netlink: 28 bytes leftover after parsing attributes in process `syz.3.127'. [ 113.614254][ T6458] netlink: 'syz.1.129': attribute type 5 has an invalid length. [ 113.621966][ T6458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.129'. [ 113.690606][ T6459] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 3, id = 0 [ 114.082053][ T6464] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 114.110500][ T6472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.135'. [ 114.356582][ C0] vcan0: j1939_tp_rxtimer: 0xffff888023177800: rx timeout, send abort [ 114.402185][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 114.411440][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 114.420227][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 114.438963][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 114.447936][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 114.857354][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807bcb8c00: rx timeout, send abort [ 114.865887][ C0] vcan0: j1939_tp_rxtimer: 0xffff888023177800: abort rx timeout. Force session deactivation [ 115.368540][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807bcb8c00: abort rx timeout. Force session deactivation [ 115.503987][ T6482] netlink: 264 bytes leftover after parsing attributes in process `syz.0.136'. [ 115.682608][ T6492] netlink: 'syz.3.138': attribute type 1 has an invalid length. [ 115.790862][ T6492] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.938811][ T6497] bond1: (slave veth3): Enslaving as an active interface with a down link [ 116.089579][ T6512] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.141'. [ 116.488040][ T5845] Bluetooth: hci4: command tx timeout [ 116.748897][ T6484] chnl_net:caif_netlink_parms(): no params data found [ 117.379778][ T6484] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.398598][ T6484] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.418498][ T6484] bridge_slave_0: entered allmulticast mode [ 117.427455][ T6484] bridge_slave_0: entered promiscuous mode [ 117.456495][ T6484] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.485686][ T6484] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.509661][ T6484] bridge_slave_1: entered allmulticast mode [ 117.526717][ T6484] bridge_slave_1: entered promiscuous mode [ 117.661592][ T6551] netlink: 28 bytes leftover after parsing attributes in process `syz.3.154'. [ 117.745591][ T6552] veth2: entered allmulticast mode [ 117.762400][ T6552] veth3: entered promiscuous mode [ 117.794671][ T6484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.829010][ T6484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.970825][ T6484] team0: Port device team_slave_0 added [ 117.996460][ T6484] team0: Port device team_slave_1 added [ 118.000991][ T6566] netlink: 16 bytes leftover after parsing attributes in process `syz.0.155'. [ 118.146152][ T6484] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.164553][ T6484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.198849][ T6484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.234037][ T6484] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.249678][ T6484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.296851][ T6484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.326718][ T6578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.159'. [ 118.336873][ T6578] netlink: 4 bytes leftover after parsing attributes in process `syz.1.159'. [ 118.399088][ T6578] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.408216][ T6578] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.417057][ T6578] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.426995][ T6578] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.552407][ T6589] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 118.558861][ T6484] hsr_slave_0: entered promiscuous mode [ 118.564981][ T5845] Bluetooth: hci4: command tx timeout [ 118.577591][ T6484] hsr_slave_1: entered promiscuous mode [ 118.584315][ T6484] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 118.591918][ T6484] Cannot create hsr debugfs directory [ 119.312277][ T6615] bond0: entered promiscuous mode [ 119.321294][ T6615] bond_slave_0: entered promiscuous mode [ 119.333439][ T6615] bond_slave_1: entered promiscuous mode [ 119.362458][ T6615] bond0: left promiscuous mode [ 119.381215][ T6615] bond_slave_0: left promiscuous mode [ 119.388544][ T6615] bond_slave_1: left promiscuous mode [ 119.492329][ T6623] netlink: 'syz.2.171': attribute type 1 has an invalid length. [ 119.553187][ T6623] netlink: 224 bytes leftover after parsing attributes in process `syz.2.171'. [ 119.618479][ T6484] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.699389][ T6447] IPVS: starting estimator thread 0... [ 119.805915][ T6633] IPVS: using max 30 ests per chain, 72000 per kthread [ 119.846392][ T6640] netlink: 20 bytes leftover after parsing attributes in process `syz.3.177'. [ 119.896674][ T6484] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.031285][ T6484] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.050558][ T6649] netlink: 52 bytes leftover after parsing attributes in process `syz.3.177'. [ 120.076347][ T6649] netlink: 12 bytes leftover after parsing attributes in process `syz.3.177'. [ 120.227370][ T6484] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.643422][ T5845] Bluetooth: hci4: command tx timeout [ 120.668637][ T6484] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 120.760199][ T6677] __nla_validate_parse: 3 callbacks suppressed [ 120.760219][ T6677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.187'. [ 120.868149][ T6484] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 120.965625][ T6484] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 121.041887][ T6484] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 121.447312][ T6711] netlink: 40 bytes leftover after parsing attributes in process `syz.1.194'. [ 121.526158][ T6714] netlink: 40 bytes leftover after parsing attributes in process `syz.1.194'. [ 121.610172][ T6484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.693802][ T6484] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.713524][ T6132] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.720723][ T6132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.793825][ T6132] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.801066][ T6132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.851480][ T6728] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 122.239498][ T6746] netlink: 4 bytes leftover after parsing attributes in process `syz.0.202'. [ 122.291715][ T6749] netlink: 20 bytes leftover after parsing attributes in process `syz.0.202'. [ 122.415997][ T6741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.202'. [ 122.445618][ T6755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.207'. [ 122.723256][ T5845] Bluetooth: hci4: command tx timeout [ 122.789720][ T6764] netlink: 56 bytes leftover after parsing attributes in process `syz.0.210'. [ 122.850249][ T5847] udevd[5847]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 122.946071][ T5847] udevd[5847]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 122.994059][ T6484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.074288][ T6773] netlink: 'syz.3.212': attribute type 1 has an invalid length. [ 123.212799][ T6780] netlink: 8 bytes leftover after parsing attributes in process `syz.3.212'. [ 124.065569][ T6484] veth0_vlan: entered promiscuous mode [ 124.109598][ T6484] veth1_vlan: entered promiscuous mode [ 124.195242][ T6484] veth0_macvtap: entered promiscuous mode [ 124.231252][ T6484] veth1_macvtap: entered promiscuous mode [ 124.233074][ T6813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.218'. [ 124.322508][ T6484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.339027][ T6484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.351929][ T6484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.381759][ T6484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.418872][ T6484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.432529][ T6484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.461312][ T6484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.492424][ T6484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.514551][ T6484] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.597793][ T6484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.620990][ T6484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.631132][ T6484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.646518][ T6484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.657385][ T6484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.672448][ T6484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.687667][ T6484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.698248][ T6484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.715498][ T6484] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.762347][ T6484] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.785517][ T6484] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.810752][ T6484] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.835654][ T6484] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.307791][ T6141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.340079][ T6141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.516386][ T6150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.532982][ T6150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.786191][ T6858] __nla_validate_parse: 10 callbacks suppressed [ 125.786210][ T6858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.229'. [ 125.830021][ T6861] netlink: 'syz.1.230': attribute type 6 has an invalid length. [ 126.130495][ T6882] netlink: 'syz.1.234': attribute type 4 has an invalid length. [ 126.221580][ T6886] Cannot find del_set index 1 as target [ 126.254669][ T6886] Cannot find del_set index 1 as target [ 126.305304][ T6150] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.466735][ T6150] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.936449][ T6150] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.120138][ T30] audit: type=1804 audit(1746939624.027:4): pid=6911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.240" name="/newroot/54/cgroup.controllers" dev="tmpfs" ino=298 res=1 errno=0 [ 127.164728][ T30] audit: type=1800 audit(1746939624.027:5): pid=6911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.240" name="cgroup.controllers" dev="tmpfs" ino=298 res=0 errno=0 [ 127.223700][ T6150] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.268622][ T30] audit: type=1800 audit(1746939624.027:6): pid=6911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.240" name="cgroup.controllers" dev="tmpfs" ino=298 res=0 errno=0 [ 127.602453][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 127.623076][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 127.639711][ T5494] dhcpcd (5494) used greatest stack depth: 20440 bytes left [ 127.647431][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 127.690797][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 127.723152][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 127.759160][ T6920] xt_TPROXY: Can be used only with -p tcp or -p udp [ 127.774842][ T6928] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.245'. [ 127.786538][ T6929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.244'. [ 127.803232][ T6150] bridge_slave_1: left allmulticast mode [ 127.808803][ T6922] xt_TPROXY: Can be used only with -p tcp or -p udp [ 127.822514][ T6150] bridge_slave_1: left promiscuous mode [ 127.836814][ T6150] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.842196][ T6923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.243'. [ 127.869593][ T6150] bridge_slave_0: left allmulticast mode [ 127.881852][ T6923] netlink: 68 bytes leftover after parsing attributes in process `syz.3.243'. [ 127.883027][ T6150] bridge_slave_0: left promiscuous mode [ 127.901729][ T6150] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.415647][ T6150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.429195][ T6150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.441825][ T6150] bond0 (unregistering): Released all slaves [ 129.014587][ T6962] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 129.226820][ T6150] hsr_slave_0: left promiscuous mode [ 129.245058][ T6150] hsr_slave_1: left promiscuous mode [ 129.257825][ T6150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.275501][ T6150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.293088][ T6150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.322130][ T6980] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 129.332988][ T6150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.408978][ T6150] veth1_macvtap: left promiscuous mode [ 129.415101][ T6150] veth0_macvtap: left promiscuous mode [ 129.421328][ T6150] veth1_vlan: left promiscuous mode [ 129.427324][ T6150] veth0_vlan: left promiscuous mode [ 129.775887][ T5845] Bluetooth: hci4: command tx timeout [ 129.930779][ T6150] team0 (unregistering): Port device team_slave_1 removed [ 129.968517][ T6150] team0 (unregistering): Port device team_slave_0 removed [ 130.379051][ T6983] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.402394][ T6980] bridge0: port 3(syz_tun) entered blocking state [ 130.415020][ T6980] bridge0: port 3(syz_tun) entered disabled state [ 130.421637][ T6980] syz_tun: entered allmulticast mode [ 130.431676][ T6980] syz_tun: entered promiscuous mode [ 130.438146][ T6980] bridge0: port 3(syz_tun) entered blocking state [ 130.444759][ T6980] bridge0: port 3(syz_tun) entered forwarding state [ 130.538397][ T6983] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.596001][ T6997] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 130.647777][ T7001] gre1: entered allmulticast mode [ 130.748497][ T6983] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.812193][ T7009] netlink: 12 bytes leftover after parsing attributes in process `syz.3.264'. [ 130.837138][ T7009] netlink: 16 bytes leftover after parsing attributes in process `syz.3.264'. [ 130.912453][ T6983] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.129444][ T7023] tipc: Started in network mode [ 131.136844][ T7023] tipc: Node identity -, cluster identity 4711 [ 131.148813][ T7023] tipc: Enabling of bearer rejected, failed to enable media [ 131.392765][ T7041] sctp: [Deprecated]: syz.0.268 (pid 7041) Use of struct sctp_assoc_value in delayed_ack socket option. [ 131.392765][ T7041] Use struct sctp_sack_info instead [ 131.504165][ T6983] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.539646][ T6983] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.570904][ T6921] chnl_net:caif_netlink_parms(): no params data found [ 131.629475][ T6983] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.708587][ T6983] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.857772][ T5845] Bluetooth: hci4: command tx timeout [ 131.931869][ T7047] netlink: 'syz.2.271': attribute type 4 has an invalid length. [ 131.990329][ T7048] netlink: 'syz.2.271': attribute type 4 has an invalid length. [ 132.069823][ T7056] netlink: 'syz.0.273': attribute type 1 has an invalid length. [ 132.080869][ T7056] netlink: 232 bytes leftover after parsing attributes in process `syz.0.273'. [ 132.133879][ T7047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.271'. [ 132.148615][ T7048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.271'. [ 132.149832][ T7047] netlink: 24 bytes leftover after parsing attributes in process `syz.2.271'. [ 132.158954][ T7048] netlink: 24 bytes leftover after parsing attributes in process `syz.2.271'. [ 132.180608][ T6921] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.188421][ T6921] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.196059][ T6921] bridge_slave_0: entered allmulticast mode [ 132.207392][ T6921] bridge_slave_0: entered promiscuous mode [ 132.225506][ T6921] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.232990][ T6921] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.240363][ T6921] bridge_slave_1: entered allmulticast mode [ 132.249516][ T6921] bridge_slave_1: entered promiscuous mode [ 132.360858][ T6921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.397275][ T6921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.635916][ T6921] team0: Port device team_slave_0 added [ 132.648780][ T7075] netlink: 36 bytes leftover after parsing attributes in process `syz.2.280'. [ 132.670932][ T7075] IPv4: Oversized IP packet from 127.202.26.0 [ 132.690050][ T6921] team0: Port device team_slave_1 added [ 132.809455][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.819280][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.917880][ T7086] Cannot find del_set index 0 as target [ 132.930258][ T6921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.938244][ T7085] syz.2.281 (7085) used obsolete PPPIOCDETACH ioctl [ 132.947979][ T6921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.977930][ T6921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.004801][ T6921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.013383][ T6921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.040049][ T6921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.196572][ T6921] hsr_slave_0: entered promiscuous mode [ 133.214930][ T6921] hsr_slave_1: entered promiscuous mode [ 133.221409][ T6921] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 133.229716][ T7093] Bluetooth: MGMT ver 1.23 [ 133.243944][ T6921] Cannot create hsr debugfs directory [ 133.391130][ T7101] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 133.403279][ T7101] syzkaller0: linktype set to 774 [ 133.768912][ T7111] vlan2: entered allmulticast mode [ 133.779668][ T7111] veth1: entered allmulticast mode [ 133.923401][ T5845] Bluetooth: hci4: command tx timeout [ 134.718646][ T6921] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 134.740431][ T6921] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 134.761419][ T6921] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 134.808507][ T6921] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 134.878992][ T7119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.293'. [ 134.898204][ T7119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.293'. [ 134.992700][ T6921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.027232][ T6921] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.136214][ T6150] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.143461][ T6150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.158927][ T6150] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.166223][ T6150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.326937][ T7143] netlink: 'syz.3.299': attribute type 4 has an invalid length. [ 135.336592][ T7143] netlink: 'syz.3.299': attribute type 17 has an invalid length. [ 135.467873][ T9] IPVS: starting estimator thread 0... [ 135.583750][ T7150] IPVS: using max 28 ests per chain, 67200 per kthread [ 135.883832][ T6921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.003389][ T5845] Bluetooth: hci4: command tx timeout [ 136.191741][ T7179] bridge_slave_0: left allmulticast mode [ 136.205995][ T7179] bridge_slave_0: left promiscuous mode [ 136.229807][ T7179] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.316710][ T7179] bridge_slave_1: left allmulticast mode [ 136.329651][ T7179] bridge_slave_1: left promiscuous mode [ 136.343230][ T7179] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.364222][ T7179] bond0: (slave bond_slave_0): Releasing backup interface [ 136.378455][ T7179] bond0: (slave bond_slave_1): Releasing backup interface [ 136.414264][ T7179] team0: Port device team_slave_0 removed [ 136.428352][ T7179] team0: Port device team_slave_1 removed [ 136.438623][ T7179] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.447612][ T7179] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.457028][ T7179] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.465611][ T7179] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.494278][ T7179] batadv1: left promiscuous mode [ 136.499532][ T7179] bridge0: port 3(batadv1) entered disabled state [ 136.946683][ T6921] veth0_vlan: entered promiscuous mode [ 137.002002][ T6921] veth1_vlan: entered promiscuous mode [ 137.085718][ T6921] veth0_macvtap: entered promiscuous mode [ 137.155844][ T6921] veth1_macvtap: entered promiscuous mode [ 137.250615][ T6921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.271633][ T6921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.285859][ T7216] netlink: 'syz.0.312': attribute type 1 has an invalid length. [ 137.288986][ T6921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.304624][ T6921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.315236][ T6921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.316294][ T7216] __nla_validate_parse: 2 callbacks suppressed [ 137.316323][ T7216] netlink: 224 bytes leftover after parsing attributes in process `syz.0.312'. [ 137.343079][ T6921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.364641][ T6921] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.398852][ T6921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.426860][ T7223] netlink: 48 bytes leftover after parsing attributes in process `syz.0.312'. [ 137.439782][ T6921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.450153][ T6921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.467333][ T6921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.520293][ T6921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.531988][ T6921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.551029][ T6921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.688056][ T6921] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.699900][ T6921] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.723548][ T6921] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.736984][ T6921] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.809986][ T7234] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 137.828805][ T7234] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 138.038708][ T7242] netlink: 44 bytes leftover after parsing attributes in process `syz.3.318'. [ 138.226334][ T7246] netlink: 'syz.0.319': attribute type 10 has an invalid length. [ 138.270543][ T7252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.320'. [ 138.420799][ T7246] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 138.433976][ T7260] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 138.596990][ T7259] bridge0: port 3(syz_tun) entered disabled state [ 138.650072][ T7259] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.657834][ T7259] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.700044][ T7259] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 138.828144][ T6146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.863827][ T6146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.935303][ T7279] netlink: 40 bytes leftover after parsing attributes in process `syz.2.324'. [ 138.945244][ T7280] netlink: 304 bytes leftover after parsing attributes in process `syz.0.326'. [ 138.959727][ T6158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.969676][ T6158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.977393][ T7279] netlink: 40 bytes leftover after parsing attributes in process `syz.2.324'. [ 139.035245][ T7285] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 139.059027][ T7287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.326'. [ 139.780798][ T7296] tipc: Started in network mode [ 139.787289][ T7296] tipc: Node identity _, cluster identity 4711 [ 139.896453][ T7302] netem: incorrect ge model size [ 139.901731][ T7302] netem: change failed [ 140.261236][ T6148] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.444102][ T6148] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.580675][ T6148] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.637104][ T7327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.337'. [ 140.637368][ T7330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.338'. [ 140.664647][ T7330] bridge_slave_1: left allmulticast mode [ 140.670351][ T7330] bridge_slave_1: left promiscuous mode [ 140.680709][ T7330] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.714291][ T7330] bridge_slave_0: left allmulticast mode [ 140.733106][ T7330] bridge_slave_0: left promiscuous mode [ 140.755537][ T7330] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.987647][ T6148] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.258068][ T7345] x_tables: ip_tables: osf match: only valid for protocol 6 [ 141.299250][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 141.315458][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 141.324957][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 141.336339][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 141.344671][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 141.405869][ T7356] netlink: 'syz.1.343': attribute type 4 has an invalid length. [ 141.674970][ T7365] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20004 [ 141.701002][ T6148] bridge_slave_1: left allmulticast mode [ 141.707092][ T6148] bridge_slave_1: left promiscuous mode [ 141.718282][ T6148] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.735309][ T7369] netlink: 'syz.2.348': attribute type 5 has an invalid length. [ 141.750295][ T6148] bridge_slave_0: left allmulticast mode [ 141.769553][ T6148] bridge_slave_0: left promiscuous mode [ 141.779884][ T6148] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.218112][ T6148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.230412][ T6148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.241765][ T6148] bond0 (unregistering): Released all slaves [ 142.267550][ T7369] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 142.279950][ T7369] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 142.288206][ T7369] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 142.296649][ T7369] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 142.306563][ T7369] geneve2: entered promiscuous mode [ 142.311977][ T7369] geneve2: entered allmulticast mode [ 142.332748][ T7381] 8021q: VLANs not supported on nlmon0 [ 142.559893][ T7393] __nla_validate_parse: 35 callbacks suppressed [ 142.559912][ T7393] netlink: 12 bytes leftover after parsing attributes in process `syz.3.353'. [ 142.788691][ T7346] chnl_net:caif_netlink_parms(): no params data found [ 142.896794][ T7405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.356'. [ 142.924771][ T6148] hsr_slave_0: left promiscuous mode [ 142.943011][ T6148] hsr_slave_1: left promiscuous mode [ 142.949549][ T6148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.966547][ T6148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.984683][ T6148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.999399][ T6148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.050848][ T6148] veth1_macvtap: left promiscuous mode [ 143.063250][ T6148] veth0_macvtap: left promiscuous mode [ 143.069185][ T6148] veth1_vlan: left promiscuous mode [ 143.075514][ T6148] veth0_vlan: left promiscuous mode [ 143.447467][ T5844] Bluetooth: hci4: command tx timeout [ 143.695882][ T6148] team0 (unregistering): Port device team_slave_1 removed [ 143.736564][ T6148] team0 (unregistering): Port device team_slave_0 removed [ 144.262160][ T7413] netlink: 'syz.3.357': attribute type 4 has an invalid length. [ 144.278152][ T7416] netlink: 24 bytes leftover after parsing attributes in process `syz.1.358'. [ 144.293350][ T7416] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 144.463585][ T7422] netlink: 'syz.3.359': attribute type 1 has an invalid length. [ 144.503552][ T7422] netlink: 224 bytes leftover after parsing attributes in process `syz.3.359'. [ 144.650941][ T7346] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.663110][ T7346] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.670497][ T7346] bridge_slave_0: entered allmulticast mode [ 144.689694][ T7346] bridge_slave_0: entered promiscuous mode [ 144.726622][ T7346] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.737164][ T7346] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.744784][ T7346] bridge_slave_1: entered allmulticast mode [ 144.752735][ T7346] bridge_slave_1: entered promiscuous mode [ 144.807672][ T7346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.836853][ T7346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.927804][ T7440] netlink: 48 bytes leftover after parsing attributes in process `syz.3.364'. [ 144.958829][ T7441] ip_vti0: entered promiscuous mode [ 145.010254][ T7346] team0: Port device team_slave_0 added [ 145.160009][ T7346] team0: Port device team_slave_1 added [ 145.224808][ T7446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.367'. [ 145.276833][ T7346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.300309][ T7346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.334183][ T7346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.367650][ T7451] netlink: 12 bytes leftover after parsing attributes in process `syz.0.369'. [ 145.378369][ T7346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.403109][ T7346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.461660][ T7346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.550030][ T5844] Bluetooth: hci4: command tx timeout [ 145.653835][ T7346] hsr_slave_0: entered promiscuous mode [ 145.661778][ T7346] hsr_slave_1: entered promiscuous mode [ 145.671972][ T7346] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 145.679785][ T7346] Cannot create hsr debugfs directory [ 145.784239][ T7459] ip6gre1: entered promiscuous mode [ 145.895637][ T7466] netlink: 'syz.1.374': attribute type 2 has an invalid length. [ 145.913588][ T7466] netlink: 'syz.1.374': attribute type 2 has an invalid length. [ 146.067275][ T7473] netlink: 24 bytes leftover after parsing attributes in process `syz.3.377'. [ 146.248834][ T7477] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 146.263733][ T7477] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 146.307048][ T7480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.379'. [ 146.328507][ T7483] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 146.354989][ T7483] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 146.660255][ T7497] netlink: 100 bytes leftover after parsing attributes in process `syz.3.387'. [ 147.018532][ T7516] team_slave_0: entered promiscuous mode [ 147.024524][ T7516] team_slave_1: entered promiscuous mode [ 147.068752][ T7516] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 147.086894][ T7516] team_slave_0: left promiscuous mode [ 147.092446][ T7516] team_slave_1: left promiscuous mode [ 147.147512][ T7346] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 147.168562][ T7346] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 147.204232][ T7346] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 147.262399][ T7346] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 147.288705][ T7528] 8021q: VLANs not supported on ip6_vti0 [ 147.301555][ T7526] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 147.310732][ T7526] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 147.553396][ T7346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.579805][ T7544] netlink: 'syz.2.401': attribute type 2 has an invalid length. [ 147.604994][ T5844] Bluetooth: hci4: command tx timeout [ 147.611001][ T7346] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.616989][ T7544] __nla_validate_parse: 4 callbacks suppressed [ 147.617009][ T7544] netlink: 12 bytes leftover after parsing attributes in process `syz.2.401'. [ 147.680520][ T6158] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.687741][ T6158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.725494][ T6158] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.732785][ T6158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.767711][ T7551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.403'. [ 147.949002][ T7555] vlan2: entered allmulticast mode [ 147.969146][ T7555] bond0: entered allmulticast mode [ 147.987753][ T7555] bond_slave_0: entered allmulticast mode [ 148.019017][ T7555] bond_slave_1: entered allmulticast mode [ 148.048983][ T7555] macvlan2: entered allmulticast mode [ 148.063892][ T7555] team0: entered allmulticast mode [ 148.069084][ T7555] team_slave_0: entered allmulticast mode [ 148.084638][ T7555] team_slave_1: entered allmulticast mode [ 148.198776][ T7573] lo speed is unknown, defaulting to 1000 [ 148.212751][ T7573] lo speed is unknown, defaulting to 1000 [ 148.249244][ T7573] lo speed is unknown, defaulting to 1000 [ 148.309109][ T7573] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 148.489678][ T7573] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 148.691105][ T7586] xt_CT: No such helper "snmp" [ 148.712696][ T7573] lo speed is unknown, defaulting to 1000 [ 148.753743][ T7582] netlink: 'syz.3.412': attribute type 1 has an invalid length. [ 148.833169][ T7573] lo speed is unknown, defaulting to 1000 [ 148.841040][ T7573] lo speed is unknown, defaulting to 1000 [ 148.868812][ T7573] lo speed is unknown, defaulting to 1000 [ 148.897033][ T7573] lo speed is unknown, defaulting to 1000 [ 148.942726][ T7573] lo speed is unknown, defaulting to 1000 [ 149.082638][ T7346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.359821][ T7602] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 149.599487][ T7617] netlink: 'syz.2.422': attribute type 3 has an invalid length. [ 149.683843][ T5844] Bluetooth: hci4: command tx timeout [ 149.893421][ T7627] sctp: [Deprecated]: syz.1.423 (pid 7627) Use of struct sctp_assoc_value in delayed_ack socket option. [ 149.893421][ T7627] Use struct sctp_sack_info instead [ 149.918090][ T7633] netlink: 'syz.2.427': attribute type 39 has an invalid length. [ 149.982477][ T7637] xt_CT: No such helper "snmp" [ 150.041966][ T7346] veth0_vlan: entered promiscuous mode [ 150.081108][ T7346] veth1_vlan: entered promiscuous mode [ 150.167925][ T7346] veth0_macvtap: entered promiscuous mode [ 150.195393][ T7346] veth1_macvtap: entered promiscuous mode [ 150.233734][ T7346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.252019][ T7646] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 150.261622][ T7346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.277844][ T30] audit: type=1800 audit(1746939647.187:7): pid=7645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.430" name="memory.events" dev="tmpfs" ino=530 res=0 errno=0 [ 150.283136][ T7346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.311763][ T7346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.324390][ T7346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.336647][ T7346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.348464][ T30] audit: type=1804 audit(1746939647.247:8): pid=7650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.430" name="/newroot/100/memory.events" dev="tmpfs" ino=530 res=1 errno=0 [ 150.353561][ T7346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.383440][ T7647] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 150.401444][ T7646] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 150.424164][ T7346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.442684][ T7346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.473076][ T7346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.513525][ T7346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.540903][ T7346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.551569][ T7346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.577153][ T7346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.624726][ T7346] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.666426][ T7346] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.690153][ T7346] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.709497][ T7346] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.806475][ T7669] openvswitch: netlink: Key 18 has unexpected len 4 expected 2 [ 150.873060][ T7669] netlink: 68 bytes leftover after parsing attributes in process `syz.2.437'. [ 150.933702][ T6148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.941583][ T6148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.992186][ T6148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.010466][ T7675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.438'. [ 151.015251][ T6148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.037981][ T7675] netlink: 24 bytes leftover after parsing attributes in process `syz.3.438'. [ 151.610047][ T7690] geneve3: entered promiscuous mode [ 151.653716][ T7696] netlink: 16 bytes leftover after parsing attributes in process `syz.3.446'. [ 151.766093][ T6447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.832359][ T6148] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.925656][ T6148] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.020630][ T6148] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.267130][ T6148] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.358029][ T6148] bridge_slave_1: left allmulticast mode [ 152.363879][ T6148] bridge_slave_1: left promiscuous mode [ 152.369618][ T6148] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.380448][ T6148] bridge_slave_0: left allmulticast mode [ 152.390544][ T6148] bridge_slave_0: left promiscuous mode [ 152.398030][ T6148] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.530643][ T7711] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 152.590461][ T7722] xt_bpf: check failed: parse error [ 152.614419][ T7712] xt_CT: No such helper "pptp" [ 152.677797][ T7712] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 152.807384][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.965014][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 152.981753][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 152.990695][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 153.012380][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 153.030853][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 153.098779][ T6148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.110337][ T6148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.120780][ T6148] bond0 (unregistering): Released all slaves [ 153.127482][ T974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.168166][ T7714] netlink: 'syz.2.450': attribute type 1 has an invalid length. [ 153.241801][ T7729] lo speed is unknown, defaulting to 1000 [ 153.286428][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.385061][ T7716] lo speed is unknown, defaulting to 1000 [ 153.509807][ T7737] netlink: 340 bytes leftover after parsing attributes in process `syz.3.454'. [ 153.849607][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.886300][ T7749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.459'. [ 153.906085][ T6148] hsr_slave_0: left promiscuous mode [ 153.912591][ T6148] hsr_slave_1: left promiscuous mode [ 153.927280][ T6148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.927539][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.941051][ T6148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.958561][ T6148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.967391][ T6148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.991845][ T6148] veth1_macvtap: left promiscuous mode [ 153.998786][ T6148] veth0_macvtap: left promiscuous mode [ 154.006748][ T6148] veth1_vlan: left promiscuous mode [ 154.012145][ T6148] veth0_vlan: left promiscuous mode [ 154.088004][ T7754] nbd: must specify at least one socket [ 154.100085][ T7754] openvswitch: netlink: Missing key (keys=40, expected=80) [ 154.111504][ T7754] netlink: 'syz.1.458': attribute type 10 has an invalid length. [ 154.888811][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.008658][ T6148] team0 (unregistering): Port device team_slave_1 removed [ 155.047642][ T6148] team0 (unregistering): Port device team_slave_0 removed [ 155.126097][ T5844] Bluetooth: hci4: command tx timeout [ 155.465205][ T7754] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 155.479045][ T7759] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 155.505641][ T7759] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 155.740211][ T7775] netlink: 'syz.2.464': attribute type 23 has an invalid length. [ 155.838185][ T7780] netlink: 24 bytes leftover after parsing attributes in process `syz.3.466'. [ 155.851238][ T6151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.859706][ T6151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.929493][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.960464][ T7729] chnl_net:caif_netlink_parms(): no params data found [ 156.000290][ T7784] !: renamed from dummy0 [ 156.176134][ T7782] netlink: 'syz.0.465': attribute type 10 has an invalid length. [ 156.193949][ T7782] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 156.214951][ T7794] syz_tun: left allmulticast mode [ 156.258502][ T7794] syz_tun: left promiscuous mode [ 156.281033][ T7803] openvswitch: netlink: Flow key attr not present in new flow. [ 156.295576][ T7794] bridge0: port 3(syz_tun) entered disabled state [ 156.345301][ T7809] netlink: 28 bytes leftover after parsing attributes in process `syz.1.470'. [ 156.382282][ T7793] netlink: 28 bytes leftover after parsing attributes in process `syz.2.468'. [ 156.411535][ T7794] bridge_slave_0: left allmulticast mode [ 156.418441][ T7794] bridge_slave_0: left promiscuous mode [ 156.452449][ T7794] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.513958][ T7794] bridge_slave_1: left allmulticast mode [ 156.519682][ T7794] bridge_slave_1: left promiscuous mode [ 156.553204][ T7794] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.596427][ T7794] bond0: (slave bond_slave_0): Releasing backup interface [ 156.641286][ T7794] bond0: (slave bond_slave_1): Releasing backup interface [ 156.703884][ T7794] team0: Port device team_slave_0 removed [ 156.770775][ T7794] team0: Port device team_slave_1 removed [ 156.796509][ T7794] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.826736][ T7794] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.880050][ T7794] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.910285][ T7794] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.964056][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.101104][ T7794] bond0: (slave wlan1): Releasing backup interface [ 157.203643][ T5844] Bluetooth: hci4: command tx timeout [ 157.464885][ T7805] lo speed is unknown, defaulting to 1000 [ 157.470982][ T7729] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.492215][ T7729] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.513565][ T7729] bridge_slave_0: entered allmulticast mode [ 157.521551][ T7729] bridge_slave_0: entered promiscuous mode [ 157.545665][ T7729] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.563551][ T7729] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.570884][ T7729] bridge_slave_1: entered allmulticast mode [ 157.595985][ T7729] bridge_slave_1: entered promiscuous mode [ 157.767423][ T7791] lo speed is unknown, defaulting to 1000 [ 157.776508][ T7729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.809318][ T7729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.004552][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.040946][ T7729] team0: Port device team_slave_0 added [ 158.063979][ T7729] team0: Port device team_slave_1 added [ 158.205574][ T7729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.213610][ T7729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.240233][ T7729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.298842][ T7729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.306197][ T7729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.334040][ T7729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.481719][ T7729] hsr_slave_0: entered promiscuous mode [ 158.502469][ T7729] hsr_slave_1: entered promiscuous mode [ 158.513863][ T7729] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.521480][ T7729] Cannot create hsr debugfs directory [ 158.613151][ T7859] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 158.620769][ T7859] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 158.883612][ T974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.946493][ T7864] ieee802154 phy0 wpan0: encryption failed: -90 [ 159.047813][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.210440][ T7873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.481'. [ 159.220867][ T7873] netlink: 20 bytes leftover after parsing attributes in process `syz.2.481'. [ 159.250388][ T7873] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.259187][ T7873] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.267559][ T7873] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.276652][ T7873] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.290549][ T5844] Bluetooth: hci4: command tx timeout [ 159.306605][ T7881] netlink: 28 bytes leftover after parsing attributes in process `syz.3.483'. [ 159.316207][ T7881] netlink: 28 bytes leftover after parsing attributes in process `syz.3.483'. [ 159.506036][ T7881] netlink: 20 bytes leftover after parsing attributes in process `syz.3.483'. [ 159.520314][ T7886] netlink: 20 bytes leftover after parsing attributes in process `syz.2.484'. [ 159.544569][ T7729] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 159.561176][ T7886] netlink: 12 bytes leftover after parsing attributes in process `syz.2.484'. [ 159.571738][ T7886] netlink: 16 bytes leftover after parsing attributes in process `syz.2.484'. [ 159.581537][ T7886] netlink: 12 bytes leftover after parsing attributes in process `syz.2.484'. [ 159.593846][ T7886] netlink: 16 bytes leftover after parsing attributes in process `syz.2.484'. [ 159.605378][ T7729] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 159.633533][ T7729] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 159.668415][ T7729] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 159.817839][ T7888] tipc: Can't bind to reserved service type 3 [ 160.020792][ T7729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.038741][ T7897] netlink: 'syz.1.487': attribute type 30 has an invalid length. [ 160.084024][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.130759][ T7906] syz.2.488 uses old SIOCAX25GETINFO [ 160.188885][ T7729] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.221571][ T6132] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.228843][ T6132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.276516][ T6132] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.283762][ T6132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.337996][ T7911] syzkaller1: entered promiscuous mode [ 160.351984][ T7911] syzkaller1: entered allmulticast mode [ 160.392494][ T7917] netlink: zone id is out of range [ 160.398548][ T7917] netlink: zone id is out of range [ 160.405379][ T7917] netlink: zone id is out of range [ 160.411428][ T7917] netlink: zone id is out of range [ 160.420075][ T7917] netlink: zone id is out of range [ 160.430796][ T7915] netlink: 'syz.2.493': attribute type 4 has an invalid length. [ 160.481699][ T7917] netlink: zone id is out of range [ 160.521338][ T7917] netlink: zone id is out of range [ 160.549179][ T7917] netlink: zone id is out of range [ 160.557877][ T7922] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 160.626101][ T7922] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 160.834343][ T7928] lo speed is unknown, defaulting to 1000 [ 161.009423][ T7729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.137886][ T7946] netlink: 'syz.1.498': attribute type 5 has an invalid length. [ 161.163013][ T7938] lo speed is unknown, defaulting to 1000 [ 161.363843][ T5844] Bluetooth: hci4: command tx timeout [ 161.471484][ T7957] netlink: 'syz.1.502': attribute type 21 has an invalid length. [ 161.507961][ T7950] mac80211_hwsim hwsim6 syzkaller0: Caught tx_queue_len zero misconfig [ 161.921536][ T7971] nbd: must specify at least one socket [ 161.978834][ T7729] veth0_vlan: entered promiscuous mode [ 162.022592][ T7729] veth1_vlan: entered promiscuous mode [ 162.067327][ T7979] IPv6: Can't replace route, no match found [ 162.144186][ T7729] veth0_macvtap: entered promiscuous mode [ 162.185707][ T7729] veth1_macvtap: entered promiscuous mode [ 162.239818][ T7729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.287194][ T7729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.302875][ T7729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.333014][ T7729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.349940][ T7729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.386085][ T7985] batadv_slave_1: entered promiscuous mode [ 162.398142][ T7984] batadv_slave_1: left promiscuous mode [ 162.416657][ T7729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.451728][ T7729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.478220][ T7729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.498079][ T7729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.511450][ T7729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.527547][ T7729] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.539457][ T7729] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.550987][ T7729] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.577439][ T7729] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.704190][ T8003] block nbd1: NBD_DISCONNECT [ 162.711977][ T8003] block nbd1: Disconnected due to user request. [ 162.734849][ T8003] block nbd1: shutting down sockets [ 162.933045][ T6148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.940928][ T6148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.020563][ T6148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.040825][ T6148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.072640][ T8022] netlink: 'syz.0.524': attribute type 1 has an invalid length. [ 163.080816][ T8022] netlink: 'syz.0.524': attribute type 1 has an invalid length. [ 163.089211][ T8022] netlink: 'syz.0.524': attribute type 1 has an invalid length. [ 163.098086][ T8022] netlink: 'syz.0.524': attribute type 1 has an invalid length. [ 163.111729][ T8022] netlink: 'syz.0.524': attribute type 1 has an invalid length. [ 163.120514][ T8022] netlink: 'syz.0.524': attribute type 1 has an invalid length. [ 163.130104][ T8022] netlink: 'syz.0.524': attribute type 1 has an invalid length. [ 163.138278][ T8022] netlink: 'syz.0.524': attribute type 1 has an invalid length. [ 163.600615][ T8041] pim6reg: entered allmulticast mode [ 163.772679][ T6141] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.856819][ T6141] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.935461][ T6141] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.047292][ T6141] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.191714][ T6141] bridge_slave_1: left allmulticast mode [ 164.198115][ T6141] bridge_slave_1: left promiscuous mode [ 164.204212][ T6141] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.216699][ T6141] bridge_slave_0: left allmulticast mode [ 164.222388][ T6141] bridge_slave_0: left promiscuous mode [ 164.228593][ T6141] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.589509][ T6141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.649499][ T6141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.707452][ T6141] bond0 (unregistering): Released all slaves [ 164.734004][ T8065] __nla_validate_parse: 49 callbacks suppressed [ 164.734024][ T8065] netlink: 12 bytes leftover after parsing attributes in process `syz.0.536'. [ 164.750048][ T5844] Bluetooth: hci3: link tx timeout [ 164.756002][ T5844] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 164.756826][ T8065] netlink: 4 bytes leftover after parsing attributes in process `syz.0.536'. [ 165.108344][ T8079] netlink: 20 bytes leftover after parsing attributes in process `syz.3.538'. [ 165.333778][ T5822] net_ratelimit: 9 callbacks suppressed [ 165.333798][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.370497][ T8079] netlink: 4 bytes leftover after parsing attributes in process `syz.3.538'. [ 165.380561][ T8059] lo speed is unknown, defaulting to 1000 [ 165.414476][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 165.433609][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 165.442406][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 165.454272][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 165.463761][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 165.492742][ T8064] lo speed is unknown, defaulting to 1000 [ 165.596099][ T8095] netlink: 224 bytes leftover after parsing attributes in process `syz.3.543'. [ 165.606545][ T8095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.543'. [ 165.627402][ T8096] netlink: 32 bytes leftover after parsing attributes in process `syz.0.542'. [ 165.698246][ T6141] hsr_slave_0: left promiscuous mode [ 165.704886][ T6141] hsr_slave_1: left promiscuous mode [ 165.711130][ T6141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.721315][ T6141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.730412][ T6141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.738184][ T6141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.767893][ T6141] veth1_macvtap: left promiscuous mode [ 165.773770][ T6141] veth0_macvtap: left promiscuous mode [ 165.779483][ T6141] veth1_vlan: left promiscuous mode [ 165.785307][ T6141] veth0_vlan: left promiscuous mode [ 166.287297][ T30] audit: type=1800 audit(1746939663.197:9): pid=8102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.544" name="memory.events" dev="tmpfs" ino=713 res=0 errno=0 [ 166.365360][ T8099] validate_nla: 26 callbacks suppressed [ 166.365381][ T8099] netlink: 'syz.3.544': attribute type 1 has an invalid length. [ 166.406064][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.623398][ T6141] team0 (unregistering): Port device team_slave_1 removed [ 166.675905][ T6141] team0 (unregistering): Port device team_slave_0 removed [ 166.723970][ T6132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.800133][ T8117] netlink: 'syz.2.547': attribute type 3 has an invalid length. [ 166.809157][ T5845] Bluetooth: hci3: command 0x0406 tx timeout [ 166.820367][ T8117] netlink: 64 bytes leftover after parsing attributes in process `syz.2.547'. [ 167.070935][ T8088] lo speed is unknown, defaulting to 1000 [ 167.219588][ T8099] 8021q: adding VLAN 0 to HW filter on device bond4 [ 167.232282][ T8125] netlink: 20 bytes leftover after parsing attributes in process `syz.0.549'. [ 167.244164][ T8116] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 167.370121][ T8115] lo speed is unknown, defaulting to 1000 [ 167.444835][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.524323][ T5844] Bluetooth: hci4: command tx timeout [ 167.825307][ T8129] netlink: 248 bytes leftover after parsing attributes in process `syz.0.550'. [ 167.871896][ T8132] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (1452) ! [ 168.005555][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.007456][ T8135] syzkaller1: entered promiscuous mode [ 168.040498][ T8135] syzkaller1: entered allmulticast mode [ 168.068807][ T8088] chnl_net:caif_netlink_parms(): no params data found [ 168.454715][ T8088] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.462719][ T8088] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.463598][ T8158] trusted_key: syz.1.559 sent an empty control message without MSG_MORE. [ 168.470334][ T8088] bridge_slave_0: entered allmulticast mode [ 168.485499][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.527029][ T8088] bridge_slave_0: entered promiscuous mode [ 168.693685][ T8088] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.719302][ T8088] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.731643][ T8088] bridge_slave_1: entered allmulticast mode [ 168.739974][ T8088] bridge_slave_1: entered promiscuous mode [ 169.022169][ T8088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.066097][ T8088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.329210][ T8088] team0: Port device team_slave_0 added [ 169.353371][ T8088] team0: Port device team_slave_1 added [ 169.500942][ T8088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.517734][ T8213] sctp: [Deprecated]: syz.3.572 (pid 8213) Use of int in maxseg socket option. [ 169.517734][ T8213] Use struct sctp_assoc_value instead [ 169.535507][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.540012][ T8088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.580771][ T8088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.594472][ T8088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.601528][ T8088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.638863][ T5845] Bluetooth: hci4: command tx timeout [ 169.661969][ T8088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.765383][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.818433][ T8223] __nla_validate_parse: 6 callbacks suppressed [ 169.818452][ T8223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.573'. [ 169.889538][ T8088] hsr_slave_0: entered promiscuous mode [ 169.902221][ T8088] hsr_slave_1: entered promiscuous mode [ 169.927471][ T8088] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.944539][ T8088] Cannot create hsr debugfs directory [ 169.962143][ T8223] gretap0: entered promiscuous mode [ 169.968056][ T8223] macsec1: entered allmulticast mode [ 169.973648][ T8223] gretap0: entered allmulticast mode [ 169.993558][ T8223] gretap0: left allmulticast mode [ 169.998778][ T8223] gretap0: left promiscuous mode [ 170.006767][ T8229] netlink: 'syz.2.576': attribute type 7 has an invalid length. [ 170.040486][ T8231] netlink: 16 bytes leftover after parsing attributes in process `syz.0.577'. [ 170.076656][ T8229] : entered promiscuous mode [ 170.330526][ T8240] netlink: 28 bytes leftover after parsing attributes in process `syz.1.580'. [ 170.435193][ T8244] syz.3.581 (8244) used greatest stack depth: 20000 bytes left [ 170.564573][ T6446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.679864][ T8256] vlan0: entered promiscuous mode [ 170.695193][ T8256] vlan0: entered allmulticast mode [ 170.711243][ T8256] hsr_slave_1: entered allmulticast mode [ 170.723726][ T5844] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 170.842039][ T8258] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.864563][ T8258] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.881124][ T8258] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 47808 - 0 [ 170.900298][ T8258] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 51028 - 0 [ 171.058556][ T8258] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.087576][ T8258] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.159918][ T8258] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 47808 - 0 [ 171.197414][ T8258] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 51028 - 0 [ 171.212244][ T8264] netlink: 52 bytes leftover after parsing attributes in process `syz.3.587'. [ 171.360728][ T8258] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.412897][ T8258] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.432887][ T8258] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 47808 - 0 [ 171.453554][ T8258] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 51028 - 0 [ 171.603399][ T6446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.644956][ T8258] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.665263][ T8258] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.677830][ T8258] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 47808 - 0 [ 171.690198][ T8258] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 51028 - 0 [ 171.690685][ T5844] Bluetooth: hci4: command tx timeout [ 171.952562][ T8088] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 171.974029][ T8277] netlink: 36 bytes leftover after parsing attributes in process `syz.3.590'. [ 172.007154][ T8258] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.045903][ T8258] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 51028 - 0 [ 172.062887][ T8258] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 47808 - 0 [ 172.071204][ T8258] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 172.082072][ T8088] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 172.112298][ T8088] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 172.144997][ T8258] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.163165][ T8258] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 51028 - 0 [ 172.181858][ T8258] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 47808 - 0 [ 172.196703][ T8258] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 172.206754][ T8088] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 172.240683][ T8258] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.249508][ T8258] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 51028 - 0 [ 172.258453][ T8258] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 47808 - 0 [ 172.267387][ T8258] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 172.295459][ T8258] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.305676][ T8258] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 51028 - 0 [ 172.318300][ T8258] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 47808 - 0 [ 172.337887][ T8258] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 172.494301][ T6155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.575119][ T8088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.621340][ T8088] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.639182][ T6141] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.646413][ T6141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.663446][ T6447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.698387][ T6141] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.705662][ T6141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.201671][ T8088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.424186][ T8328] netlink: 12 bytes leftover after parsing attributes in process `syz.0.603'. [ 173.622711][ T8337] netlink: 'syz.0.605': attribute type 1 has an invalid length. [ 173.659750][ T8339] netlink: zone id is out of range [ 173.674401][ T8337] netlink: 3 bytes leftover after parsing attributes in process `syz.0.605'. [ 173.690538][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.728107][ T8339] netlink: zone id is out of range [ 173.751898][ T8337] batadv1: entered promiscuous mode [ 173.773172][ T5844] Bluetooth: hci4: command tx timeout [ 173.778723][ T8339] netlink: zone id is out of range [ 173.792101][ T8337] batadv1: entered allmulticast mode [ 173.793573][ T8339] netlink: zone id is out of range [ 173.811883][ T8339] netlink: zone id is out of range [ 173.884493][ T8341] netlink: 48 bytes leftover after parsing attributes in process `syz.0.605'. [ 173.987307][ T8345] smc: net device bond0 applied user defined pnetid SYZ0 [ 174.005283][ T8343] lo speed is unknown, defaulting to 1000 [ 174.012166][ T8088] veth0_vlan: entered promiscuous mode [ 174.060292][ T8345] smc: net device bond0 erased user defined pnetid SYZ0 [ 174.245004][ T8088] veth1_vlan: entered promiscuous mode [ 174.491756][ T8088] veth0_macvtap: entered promiscuous mode [ 174.528153][ T8088] veth1_macvtap: entered promiscuous mode [ 174.702813][ T8375] syzkaller0: entered promiscuous mode [ 174.713467][ T8375] syzkaller0: entered allmulticast mode [ 174.717929][ T8389] netlink: 64 bytes leftover after parsing attributes in process `syz.3.618'. [ 174.777825][ T8380] tipc: Enabling of bearer rejected, failed to enable media [ 174.797033][ T8088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.810246][ T8088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.851959][ T8088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.126858][ T8088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.143565][ T8088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.154831][ T8088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.165814][ T8088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.166471][ T8405] netlink: 4 bytes leftover after parsing attributes in process `syz.2.624'. [ 175.177706][ T8088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.201544][ T8088] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.210801][ T8088] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.225699][ T8088] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.230938][ T8406] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 175.238079][ T8088] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.423966][ T8409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.622'. [ 175.765419][ T6446] net_ratelimit: 18 callbacks suppressed [ 175.765441][ T6446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.014087][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.334107][ T6447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.808676][ T6447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.895651][ T8402] lo speed is unknown, defaulting to 1000 [ 176.899183][ T8414] netlink: 'syz.2.625': attribute type 1 has an invalid length. [ 177.190991][ T8416] tipc: Enabled bearer , priority 10 [ 177.246692][ T6150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.263835][ T6150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.338635][ T8423] syzkaller1: entered promiscuous mode [ 177.349120][ T8423] syzkaller1: entered allmulticast mode [ 177.416840][ T6155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.436205][ T6155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.767247][ T8435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.632'. [ 177.858769][ T6447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.914527][ T8444] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.920339][ T6148] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.962524][ T8444] netlink: 28 bytes leftover after parsing attributes in process `syz.2.635'. [ 177.997497][ T8435] lo speed is unknown, defaulting to 1000 [ 178.122290][ T6148] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.250711][ T6155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.273336][ T6148] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.306223][ T974] tipc: Node number set to 1828728365 [ 178.438142][ T6148] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.601204][ T6148] bridge_slave_1: left allmulticast mode [ 178.609077][ T6148] bridge_slave_1: left promiscuous mode [ 178.615476][ T6148] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.625593][ T6148] bridge_slave_0: left allmulticast mode [ 178.632187][ T6148] bridge_slave_0: left promiscuous mode [ 178.638068][ T6148] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.897040][ T6447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.922292][ T6148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.935006][ T6148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.946305][ T6148] bond0 (unregistering): Released all slaves [ 179.149894][ T8455] netlink: 28 bytes leftover after parsing attributes in process `syz.0.636'. [ 179.176288][ T8455] netlink: 28 bytes leftover after parsing attributes in process `syz.0.636'. [ 179.208394][ T8455] netlink: 28 bytes leftover after parsing attributes in process `syz.0.636'. [ 179.641089][ T6148] hsr_slave_0: left promiscuous mode [ 179.657245][ T6148] hsr_slave_1: left promiscuous mode [ 179.670244][ T6148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.687515][ T6148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.727196][ T6148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.742675][ T6148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.796688][ T6148] veth1_macvtap: left promiscuous mode [ 179.814296][ T6148] veth0_macvtap: left promiscuous mode [ 179.820304][ T6148] veth1_vlan: left promiscuous mode [ 179.825966][ T6148] veth0_vlan: left promiscuous mode [ 179.827166][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 179.841078][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 179.852100][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 179.871140][ T8490] netlink: 16 bytes leftover after parsing attributes in process `syz.0.643'. [ 179.881595][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 179.890867][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 179.923681][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.156655][ T8494] netlink: 20 bytes leftover after parsing attributes in process `syz.2.646'. [ 180.437676][ T6148] team0 (unregistering): Port device team_slave_1 removed [ 180.480966][ T6148] team0 (unregistering): Port device team_slave_0 removed [ 180.963614][ T6447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.283492][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.934126][ T5844] Bluetooth: hci4: command tx timeout [ 182.006855][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.087400][ T6447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.323615][ T8486] lo speed is unknown, defaulting to 1000 [ 182.844435][ T8486] chnl_net:caif_netlink_parms(): no params data found [ 183.046214][ T6447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.132756][ T8530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.655'. [ 183.198181][ T8486] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.216052][ T8486] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.230488][ T8486] bridge_slave_0: entered allmulticast mode [ 183.255095][ T8486] bridge_slave_0: entered promiscuous mode [ 183.275372][ T8486] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.282768][ T8486] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.296010][ T8486] bridge_slave_1: entered allmulticast mode [ 183.325358][ T8486] bridge_slave_1: entered promiscuous mode [ 183.456042][ T8486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.497282][ T8486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.639199][ T8486] team0: Port device team_slave_0 added [ 183.656568][ T8486] team0: Port device team_slave_1 added [ 183.768970][ T8486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.783412][ T8486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.842901][ T8486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.865158][ T8486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.872175][ T8486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.903318][ T8486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.990896][ T8486] hsr_slave_0: entered promiscuous mode [ 184.003013][ T5844] Bluetooth: hci4: command tx timeout [ 184.012491][ T6158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.013735][ T8486] hsr_slave_1: entered promiscuous mode [ 184.046660][ T8486] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.056029][ T8486] Cannot create hsr debugfs directory [ 184.083474][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.888864][ T8583] lo speed is unknown, defaulting to 1000 [ 185.031267][ T8486] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 185.049650][ T8486] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 185.064231][ T8486] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 185.077638][ T8486] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 185.123830][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.166250][ T8593] lo speed is unknown, defaulting to 1000 [ 185.560344][ T8486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.582305][ T8600] lo speed is unknown, defaulting to 1000 [ 185.749637][ T8486] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.953121][ T6141] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.960357][ T6141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.030485][ T6141] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.037749][ T6141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.083373][ T5844] Bluetooth: hci4: command tx timeout [ 186.169675][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.390973][ T8609] sctp: [Deprecated]: syz.1.678 (pid 8609) Use of struct sctp_assoc_value in delayed_ack socket option. [ 186.390973][ T8609] Use struct sctp_sack_info instead [ 186.482276][ T8609] sctp: [Deprecated]: syz.1.678 (pid 8609) Use of int in max_burst socket option deprecated. [ 186.482276][ T8609] Use struct sctp_assoc_value instead [ 187.081808][ T8625] netlink: 'syz.0.680': attribute type 10 has an invalid length. [ 187.141866][ T8618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.245182][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.255103][ T8615] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.294953][ T8615] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.499700][ T8615] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.510285][ T8615] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.548724][ T8615] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.570788][ T8615] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.641483][ T8615] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 187.657504][ T8615] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 187.669953][ T8615] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 256 - 0 [ 187.682330][ T8615] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 256 - 0 [ 187.692288][ T8615] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 256 - 0 [ 187.723261][ T8615] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 256 - 0 [ 187.758333][ T8615] geneve2: left promiscuous mode [ 187.766956][ T8615] geneve2: left allmulticast mode [ 187.788122][ T8615] ip6gre1: left promiscuous mode [ 187.813350][ T8615] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.822077][ T8615] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.830802][ T8615] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.839275][ T8615] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.887588][ T8625] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 187.906874][ T8625] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 187.945103][ T8625] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 188.160444][ T8651] veth1_to_bond: entered allmulticast mode [ 188.177713][ T5844] Bluetooth: hci4: command tx timeout [ 188.200369][ T8486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.200943][ T8656] netlink: 248 bytes leftover after parsing attributes in process `syz.3.688'. [ 188.218841][ T8657] netlink: 40 bytes leftover after parsing attributes in process `syz.2.686'. [ 188.243800][ T8651] veth1_to_bond: entered promiscuous mode [ 188.323884][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.385135][ T8650] veth1_to_bond: left promiscuous mode [ 188.409174][ T8650] veth1_to_bond: left allmulticast mode [ 188.446957][ T8665] !: renamed from dummy0 (while UP) [ 188.507381][ T8665] netlink: 48 bytes leftover after parsing attributes in process `syz.1.689'. [ 188.730482][ T8669] lo speed is unknown, defaulting to 1000 [ 188.878659][ T8686] netlink: 44 bytes leftover after parsing attributes in process `syz.2.696'. [ 188.891188][ T8682] netlink: 12 bytes leftover after parsing attributes in process `syz.3.695'. [ 188.893613][ T8685] netlink: 12 bytes leftover after parsing attributes in process `syz.3.695'. [ 188.960655][ T8685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.695'. [ 189.012963][ T8682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.695'. [ 189.044883][ T6141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.091743][ T8696] netlink: 16 bytes leftover after parsing attributes in process `syz.2.697'. [ 189.127733][ T6447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.214818][ T8486] veth0_vlan: entered promiscuous mode [ 189.268375][ T8486] veth1_vlan: entered promiscuous mode [ 189.363800][ T6446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.395790][ T8486] veth0_macvtap: entered promiscuous mode [ 189.403366][ T8701] lo speed is unknown, defaulting to 1000 [ 189.473587][ T8704] lo speed is unknown, defaulting to 1000 [ 189.495997][ T8486] veth1_macvtap: entered promiscuous mode [ 189.855411][ T8486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.879650][ T8486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.899325][ T8486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.975654][ T8486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.002923][ T8486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.030927][ T8486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.075074][ T8486] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.090143][ T8486] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.106965][ T8725] netlink: 'syz.2.704': attribute type 2 has an invalid length. [ 190.107707][ T8486] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.128828][ T8486] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.164202][ T8725] netlink: 32 bytes leftover after parsing attributes in process `syz.2.704'. [ 190.375933][ T8725] : renamed from bond_slave_0 [ 190.454214][ T3581] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.463679][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.746122][ T8741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.790614][ T6155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.801217][ T6155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.847894][ T8745] bond0: (slave bridge0): Releasing backup interface [ 191.014662][ T6148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.033120][ T6148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.044222][ T8749] syzkaller1: entered promiscuous mode [ 191.049771][ T8749] syzkaller1: entered allmulticast mode [ 191.090466][ T8749] netlink: 'syz.0.712': attribute type 1 has an invalid length. [ 191.209883][ T8613] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 191.221842][ T8613] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 191.230308][ T8613] CPU: 0 UID: 0 PID: 8613 Comm: kbnepd bnep0 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) [ 191.242499][ T8613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 191.252590][ T8613] RIP: 0010:klist_del+0x49/0x110 [ 191.257579][ T8613] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 39 60 d4 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 1b 60 d4 f6 4d 8b 7e 58 4c 89 f7 e8 bf 41 [ 191.277224][ T8613] RSP: 0018:ffffc9000405f7a8 EFLAGS: 00010202 [ 191.283344][ T8613] RAX: 000000000000000b RBX: ffff888033e6f860 RCX: ffff888030765a00 [ 191.291351][ T8613] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 191.299349][ T8613] RBP: ffffc9000405f8d0 R08: ffff88805da79f03 R09: 1ffff1100bb4f3e0 [ 191.307357][ T8613] R10: dffffc0000000000 R11: ffffed100bb4f3e1 R12: dffffc0000000000 [ 191.315363][ T8613] R13: 1ffff110067cdf0c R14: 0000000000000000 R15: ffff888057e0e768 [ 191.323378][ T8613] FS: 0000000000000000(0000) GS:ffff8881260c0000(0000) knlGS:0000000000000000 [ 191.332345][ T8613] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 191.339011][ T8613] CR2: 00007efe12d5bf98 CR3: 000000005ddf0000 CR4: 00000000003526f0 [ 191.347017][ T8613] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 191.355016][ T8613] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 191.363025][ T8613] Call Trace: [ 191.366333][ T8613] [ 191.369283][ T8613] device_del+0x280/0x8e0 [ 191.373640][ T8613] ? _raw_spin_unlock_irq+0x2e/0x50 [ 191.378853][ T8613] ? pm_runtime_set_memalloc_noio+0x1f4/0x260 [ 191.384929][ T8613] ? __pfx_device_del+0x10/0x10 [ 191.389789][ T8613] ? netdev_unregister_kobject+0x344/0x450 [ 191.395621][ T8613] unregister_netdevice_many_notify+0x1d52/0x2320 [ 191.402048][ T8613] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 191.408808][ T8613] ? rcu_is_watching+0x15/0xb0 [ 191.413591][ T8613] ? __mutex_lock+0xa6d/0xe80 [ 191.418277][ T8613] ? __mutex_lock+0x51b/0xe80 [ 191.422966][ T8613] unregister_netdevice_queue+0x33c/0x380 [ 191.428700][ T8613] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 191.434958][ T8613] ? rtnl_net_dev_lock+0x36/0x2f0 [ 191.439990][ T8613] ? rtnl_net_dev_lock+0x2de/0x2f0 [ 191.445111][ T8613] unregister_netdev+0x1f/0x60 [ 191.449882][ T8613] bnep_session+0x294d/0x2b40 [ 191.454585][ T8613] ? trace_sched_exit_tp+0x38/0x120 [ 191.459798][ T8613] ? __schedule+0x1700/0x4cd0 [ 191.464492][ T8613] ? __lock_acquire+0xaac/0xd20 [ 191.469366][ T8613] ? __pfx_bnep_session+0x10/0x10 [ 191.474400][ T8613] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 191.480305][ T8613] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 191.486657][ T8613] ? __pfx_woken_wake_function+0x10/0x10 [ 191.492311][ T8613] ? __kthread_parkme+0x7b/0x200 [ 191.497256][ T8613] ? __kthread_parkme+0x1a1/0x200 [ 191.502298][ T8613] kthread+0x70e/0x8a0 [ 191.506379][ T8613] ? __pfx_bnep_session+0x10/0x10 [ 191.511413][ T8613] ? __pfx_kthread+0x10/0x10 [ 191.516011][ T8613] ? __pfx_kthread+0x10/0x10 [ 191.520612][ T8613] ? _raw_spin_unlock_irq+0x23/0x50 [ 191.525840][ T8613] ? lockdep_hardirqs_on+0x9c/0x150 [ 191.531054][ T8613] ? __pfx_kthread+0x10/0x10 [ 191.535654][ T8613] ret_from_fork+0x4b/0x80 [ 191.540073][ T8613] ? __pfx_kthread+0x10/0x10 [ 191.544672][ T8613] ret_from_fork_asm+0x1a/0x30 [ 191.549445][ T8613] [ 191.552464][ T8613] Modules linked in: [ 191.557871][ T8613] ---[ end trace 0000000000000000 ]--- [ 191.568055][ T8613] RIP: 0010:klist_del+0x49/0x110 [ 191.570169][ T3581] net_ratelimit: 1 callbacks suppressed [ 191.570189][ T3581] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.574080][ T8613] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 39 60 d4 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 1b 60 d4 f6 4d 8b 7e 58 4c 89 f7 e8 bf 41 [ 191.608375][ T8613] RSP: 0018:ffffc9000405f7a8 EFLAGS: 00010202 [ 191.615876][ T8613] RAX: 000000000000000b RBX: ffff888033e6f860 RCX: ffff888030765a00 [ 191.624497][ T8613] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 191.632563][ T8613] RBP: ffffc9000405f8d0 R08: ffff88805da79f03 R09: 1ffff1100bb4f3e0 [ 191.641574][ T8613] R10: dffffc0000000000 R11: ffffed100bb4f3e1 R12: dffffc0000000000 [ 191.649954][ T8613] R13: 1ffff110067cdf0c R14: 0000000000000000 R15: ffff888057e0e768 [ 191.658281][ T8613] FS: 0000000000000000(0000) GS:ffff8881260c0000(0000) knlGS:0000000000000000 [ 191.667429][ T8613] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 191.674709][ T8613] CR2: 00007efe12d5bf98 CR3: 000000005ef54000 CR4: 00000000003526f0 [ 191.682987][ T8613] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 191.691998][ T8613] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 191.700190][ T8613] Kernel panic - not syncing: Fatal exception [ 191.707041][ T8613] Kernel Offset: disabled [ 191.711370][ T8613] Rebooting in 86400 seconds..