last executing test programs: 58.502605246s ago: executing program 3 (id=306): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x14, 0x52, 0x1, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x3, {0x1, 0xf1, 0x3}, 0x2}, 0x18) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000600), &(0x7f0000000640)=0x4) 48.774564112s ago: executing program 3 (id=306): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x14, 0x52, 0x1, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x3, {0x1, 0xf1, 0x3}, 0x2}, 0x18) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000600), &(0x7f0000000640)=0x4) 37.665011948s ago: executing program 3 (id=306): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x14, 0x52, 0x1, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x3, {0x1, 0xf1, 0x3}, 0x2}, 0x18) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000600), &(0x7f0000000640)=0x4) 25.512143668s ago: executing program 3 (id=306): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x14, 0x52, 0x1, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x3, {0x1, 0xf1, 0x3}, 0x2}, 0x18) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000600), &(0x7f0000000640)=0x4) 10.498730996s ago: executing program 3 (id=306): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x14, 0x52, 0x1, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x3, {0x1, 0xf1, 0x3}, 0x2}, 0x18) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000600), &(0x7f0000000640)=0x4) 1.742609368s ago: executing program 2 (id=1651): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@typedef={0x4, 0x0, 0x0, 0x12, 0x2}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x42}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000100)=@ethtool_sfeatures={0x3b, 0x2, [{0x5, 0x4}, {0x400, 0x5}]}}) 1.552820464s ago: executing program 2 (id=1655): pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f00000005c0)={0x69, 0x7, 0x4, 0xb, 0x7}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="c400000019000100fcffffff00000000ac141428000000000000000000000000fe8000000000000000000000000000aa4e2300004e2300000a00006000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000010feffffffffffffff000000400000000000000000000000001a000000000000000100000000000000feffffffffffffff770000000000000005000000000000000000000000000000ff7f000000000000080000000000000001", @ANYRESDEC, @ANYRESOCT=r1], 0xc4}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000080)='g', 0x1, 0x0, &(0x7f00000000c0)={0x11, 0xd, r6, 0x1, 0x0, 0x6, @remote}, 0x14) r7 = socket(0x2000000015, 0x80005, 0x0) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000000080)={'macvtap0\x00', 0x57e6}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r7) sendmsg$NL80211_CMD_SET_WIPHY(r7, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000228bd7000f6dbdf25020000000400d10005003e000600000008000a010004000008000a01f7ffffff08002600f3160000080026006c090000080061007f000000"], 0x48}, 0x1, 0x0, 0x0, 0x8008090}, 0x20000080) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendto$inet6(r1, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) 1.373233226s ago: executing program 2 (id=1658): r0 = socket$kcm(0x2, 0x1, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000080), 0x12) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) ioctl$HCIINQUIRY(r3, 0x400448e1, &(0x7f0000000000)={0x0, 0x0, "957008"}) close(r2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020200000a0000000000000000000000030006000000000002000000000000000000000000000000020001000000000000000a0000000000030005000000001402"], 0x50}, 0x1, 0x7}, 0x4050) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWSET={0x8c, 0x9, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_DESC={0x68, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x64, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffcfb1}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x16}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff5}]}]}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xe6}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}]}]}]}], {0x14, 0x10}}, 0x168}}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x4a, &(0x7f0000000040), 0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff}) socket$inet(0x2, 0x800, 0xda36) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r6) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2, 0x4, &(0x7f00000000c0)=ANY=[@ANYRES16=r1], &(0x7f0000000600)='GPL\x00', 0xffff, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f0000000000)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000680)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000001a00)=""/116, 0x74}, &(0x7f0000001b40)=[{&(0x7f0000001a80)=""/79, 0xffffff63}], 0x1, 0x20}}], 0x48, 0x20000005}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 900.279105ms ago: executing program 1 (id=1663): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448df, &(0x7f00000002c0)) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, &(0x7f0000000e80)="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", &(0x7f0000000000)=""/65}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x1ff, 0x0}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@updpolicy={0x1fc, 0x19, 0x100, 0x0, 0x3, {{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x200}, [@tmpl={0x144, 0x5, [{{@in=@multicast1, 0x4d4, 0x3c}, 0x2, @in=@multicast1, 0x3507, 0x4, 0x3, 0x7, 0x8, 0x4, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x4d3, 0x6c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3501, 0x2, 0x0, 0x73, 0x8001, 0x4, 0x7}, {{@in6=@mcast2, 0x4d3, 0x3c}, 0x2, @in=@multicast1, 0x3506, 0x2, 0x3, 0x7, 0x5, 0x3, 0x7}, {{@in6=@loopback, 0x4d4, 0x32}, 0x2, @in6=@mcast1, 0x3502, 0x3, 0x1, 0x7, 0x5, 0x3, 0x7}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x12}, 0x80000001, 0x3c}, 0xa, @in=@remote, 0x0, 0x1, 0x1, 0x9, 0x8, 0xe7, 0x7}]}]}, 0x1fc}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd2b, 0x25dfdbfd, {0x2, 0x0, 0x0, 0xcb, r7}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010101}, @IFA_FLAGS={0x8, 0x8, 0x10}, @IFA_RT_PRIORITY={0x8, 0x9, 0xeb}, @IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_RT_PRIORITY={0x8, 0x9, 0x31}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}]}, 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x28}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x5, 0x0, 0x5, 0x0}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x19, 0x0, 0x0, 0x0}, 0x94) 821.908532ms ago: executing program 1 (id=1665): unshare(0x22020400) (async) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={0x120, 0x0, 0x2, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x10001}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'ftp-20000\x00'}, @CTA_EXPECT_MASK={0x88, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}]}, 0x120}}, 0x0) (async) close(r0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) (async) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, 0x0, 0x8000) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x40000011) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140e00000020c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket(0x848000000015, 0x805, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, 0x0) (async) sendmsg$netlink(r4, 0x0, 0x2000c084) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r7, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x14, 0x17, {0xd, 0x0, @l2={'ib', 0x3a, 'lo\x00'}}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x810) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$netlink(0x10, 0x3, 0xb) sendmsg$TIPC_CMD_DISABLE_BEARER(r9, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0x34, r7, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x18, 0x13, @l2={'eth', 0x3a, 'veth1_virt_wifi\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x48011}, 0x40000) (async) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x14, 0x16, 0x1, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0) (async) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000500)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x10, 0x0, 0x20040001, 0xffffffff, 0x7f, 0x20, 0x0, 0x5}}) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000000)=@bpf_lsm={0x1e, 0x20000000000001eb, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x24}, 0x94) socket$inet_smc(0x2b, 0x1, 0x0) (async) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r10, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) 759.8388ms ago: executing program 4 (id=1666): syz_emit_ethernet(0x2c, &(0x7f0000000040)={@broadcast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "8bb78c", 0xc, 0x2f, 0x0, @private0, @mcast2, {[], {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) r0 = socket(0x2a, 0x80005, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x48}}, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x757b, 0x3) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38010000100001000000000000000000fe880000000000000000000000000001ffffffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1e0101000000000000000000000000000000002b0000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000002000001000000000000000048000200636263286165732900"/240], 0x138}}, 0x0) 689.28663ms ago: executing program 0 (id=1667): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x70) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000800)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0}}], 0x30}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYRES64=r1], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) write(r2, &(0x7f00000000c0)="b57c80807a02484d3774e627e6084ab06099eda8dd46ce8935860f385e15beaf4ac9b73a82bfb31a567d37550504e3060d6667266b40208434931844bdf23750509e4d643741aa1541181b8e139409745ec120effcb45280bbff7411865eb50bc8f2b1b218", 0x65) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 688.790808ms ago: executing program 1 (id=1668): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockopt$inet_tcp_int(r1, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b80)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}, {0x0, 0xed27c9fa5277b9b7}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x8}]}}]}, 0x3c}}, 0x20008000) 663.610183ms ago: executing program 4 (id=1669): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000010140)={0x44, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_PAN_COORD={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_SF_ORD={0x5}]}, 0x44}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000003c000b0000000000fcffffff04000000040000800c000100091c", @ANYRES16, @ANYRES64=r2], 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 604.520573ms ago: executing program 0 (id=1670): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r5 = socket$inet6(0xa, 0x5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x24, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r9}, @typed={0x8, 0x9f, 0x0, 0x0, @pid=r8}, @nested={0x4, 0x1}]}, 0x24}], 0x1}, 0x0) r11 = getgid() r12 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0}, &(0x7f0000000540)=0xc) r14 = gettid() r15 = socket$phonet(0x23, 0x2, 0x1) r16 = socket$netlink(0x10, 0x3, 0xc) getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f0000002840)={0x0, 0x0}, &(0x7f0000002880)=0xc) sendmsg$netlink(r16, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000640)=ANY=[@ANYBLOB="1000000064e1278319bd7000ffdbdf85d072ce8642c6e9062ee3e83abd25"], 0x10}], 0x1, &(0x7f0000002900)=[@cred={{0x1c, 0x1, 0x2, {0x0, r18}}}], 0x20, 0x50}, 0x40880) r19 = getgid() sendmsg$netlink(r1, &(0x7f0000000600)={&(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfe}, 0xc, &(0x7f00000004c0)=[{&(0x7f0000000400)={0xb8, 0x42, 0x428, 0x70bd2a, 0x25dfdbfc, "", [@typed={0x8, 0xd7, 0x0, 0x0, @pid=r17}, @nested={0x4, 0xd3}, @generic="1b031dcd72383519f015c56f1350030ce6b95c0ff31a321ab245fe9389b85df308765a3efcb4f26bf2825d11a88e79525d7da347965a4b5a8972787bd6be00072bc6eee52f0d45697d4430fe1aa6b0fa789712124cce6c2232386d0f5b47108ade66d5a311f7d03ef512426b6cf4743f57c446b83a71062730cd7560590c074bee666b227db43f2cd96dd9732feaecc83b2e7284977019c2fd0bd2"]}, 0xb8}], 0x1, &(0x7f0000000580)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r9, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, r10}}}, @cred={{0x1c, 0x1, 0x2, {r14, r18, r19}}}, @rights={{0x14, 0x1, 0x1, [r5]}}], 0x78, 0x44001}, 0x44081) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000280)=0x3fa, 0x4) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000004300)={&(0x7f0000000100)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c804}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000680)={0x50, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x8, 0x7b}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x6}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x20000000) poll(&(0x7f0000000040), 0x55, 0x0) r20 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r20, 0x101, 0xa, &(0x7f0000000040)=0x2c5, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x4, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000080000006a0a00ff000000002e00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="100000000000002505000000000000009500ecff00000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x494}, 0x94) 532.923243ms ago: executing program 1 (id=1671): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xb0400, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x3, 0x7, 0x3, 0x7}, {0x6, 0xf2, 0xb, 0x78b4}]}) socketpair(0x1d, 0x0, 0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e24, @multicast1}, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x35}}, 0x18, 0x0, 0x0, 0x0, 0xd, &(0x7f0000000100)='veth0_virt_wifi\x00', 0x5, 0xbd27, 0x3}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) write$tun(r3, &(0x7f0000000200)={@void, @val={0x0, 0x3, 0x100, 0x3, 0x2000, 0x2}, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x26) pwrite64(r0, &(0x7f0000000240)="c5ff5b4956693e7f45554286daf0ef5f56cb48432df664", 0x17, 0x8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x2f, 0x7, 0xe1, 0x7, 0x7c, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x40, 0x3ff, 0x8}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000380)={'ip_vti0\x00', 0x0, 0x10, 0x10, 0xd17d57a, 0x9358, {{0x21, 0x4, 0x3, 0x25, 0x84, 0x65, 0x0, 0xfd, 0x29, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010101, {[@generic={0x44, 0x2}, @timestamp_prespec={0x44, 0xc, 0xc7, 0x3, 0x6, [{@broadcast, 0x3}]}, @ssrr={0x89, 0xb, 0x3b, [@local, @multicast2]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x7, 0xd5, [@rand_addr=0x64010100]}, @timestamp_prespec={0x44, 0x3c, 0xfe, 0x3, 0xd, [{@loopback, 0x2}, {@private=0xa010101, 0x101}, {@local, 0x4}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x81}, {@local, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@broadcast, 0x2}]}, @timestamp={0x44, 0xc, 0xb3, 0x0, 0x4, [0xfffeffff, 0x6]}]}}}}}) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000480)={@broadcast, @remote, 0x0}, &(0x7f00000004c0)=0xc) sendmsg$nl_route(r2, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@mpls_getnetconf={0x44, 0x52, 0xa00, 0x70bd2b, 0x25dfdbfc, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r4}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x3}, @NETCONFA_IFINDEX={0x8, 0x1, r5}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x2}, @NETCONFA_IFINDEX={0x8}, @NETCONFA_IFINDEX={0x8, 0x1, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4090}, 0x240000d0) syz_extract_tcp_res(&(0x7f0000000600)={0x41424344}, 0x400, 0x800) syz_extract_tcp_res$synack(&(0x7f0000000640)={0x41424344}, 0x1, 0x0) write$tun(r3, &(0x7f0000000680)={@val={0x0, 0x883e}, @void, @ipv6=@tcp={0x8, 0x6, "c782ac", 0x3b0, 0x6, 0x1, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[@srh={0x2b, 0x10, 0x4, 0x8, 0x7a, 0x0, 0x5, [@remote, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @private0, @loopback]}, @hopopts={0xb, 0x10, '\x00', [@jumbo={0xc2, 0x4, 0x6}, @pad1, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @ra={0x5, 0x2, 0x9}, @calipso={0x7, 0x48, {0x3, 0x10, 0x2, 0x7, [0xe9000000000000, 0x9, 0x6469, 0xa5, 0xfffffffffffffffe, 0x100, 0x4, 0x3]}}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @enc_lim={0x4, 0x1, 0x81}, @enc_lim={0x4, 0x1, 0x2}]}, @hopopts={0x11, 0x22, '\x00', [@jumbo={0xc2, 0x4, 0xffff}, @generic={0x4, 0xdb, "ffd3b81bde93cb2b030e46dcff34f4e6257ee4e89dc6a6219c333a47d094d2f1f900eb39fd9e38ebe6b7da810e389792f990fd573136663649aac97a1521d86a45bde1158d1eb2631a8b5238c42696ab5ca19d87446c722ee4ce97b447519b171e8ea6fa6f3067eee780a992d725d8b8beb772017a16996ae5ab56aabdb4ffdedd8c5bbb7686222bacb833baa7bf809098b6e5ccffc71c8ce4706a7345a40a5a6cba6246444b914977382fc2cdfdbe76762970ceb2d67e1c200f9a0117f910a46c459637fae1833f8fba849f69f7ab762bffaef285fa0d352343fe"}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}}, @enc_lim={0x4, 0x1, 0x9}, @enc_lim={0x4, 0x1, 0x8}, @generic={0x1, 0x10, "304a6a5c29791a739220d8013e2ad2e6"}, @pad1, @enc_lim={0x4, 0x1, 0x8}]}, @fragment={0x1, 0x0, 0x4a, 0x0, 0x0, 0x4, 0x64}, @routing={0x2e, 0xa, 0x0, 0x81, 0x0, [@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00']}], {{0x4e22, 0x4e20, r7, r8, 0x1, 0x0, 0xb, 0xa7e7507ddf48058e, 0xe7, 0x0, 0x4, {[@window={0x3, 0x3, 0x7}, @mss={0x2, 0x4, 0x800}, @mss={0x2, 0x4, 0x2}, @fastopen={0x22, 0x8, "2058fb6f1b16"}, @mss={0x2, 0x4, 0x6}, @nop]}}, {"690670df977d5783f9624f23b9b5c8c00546de6dd9c814ffe357dac42b306ae80fd2574534573779fe6a103f9192fd80c1ce1754b6ce014c6d33f9670cb7ed34eface47bf53f4f13e2096b4aa9728f59005e41b0c8cba17064bea7e7be270f2084da48229f8ddf3d2b251d1ab127584814e2597092f3e27d761f7d04351500475a9949631c5b10e7442fc1bcfd95e04e6bd6b9bcf20f19db8b125b6e9989452f1a032abfbfc8f1306b753d30bd5fa17bdc500e1abddfab53b2e15520e5359933c53793128b3c206f1b0454b59167e65933336017189a1789de575563d6a1f60e2894c5a6f81fdb3b405f30d8"}}}}}, 0x3dc) sendto$inet6(r3, &(0x7f0000000a80)="0bc685c0d2e19e90886f0e4f8ccb2954e9ada098cf62e9e3e2936475a0468664d72c8b3a74fc7174803207c1f40643adc0568e148ec40a0df744ca48de676003f0adb911cfbf212bb3668ecddf7143b271b6e0789e726623a89635f1300d3fb68743a5d6690820e8b9cacf10182ee4ebb10b65d6a1f7639355b7bbd52aa5df1c99c2ca8f15c5285258f60667537ec717257c84252954efddb095bc6579847691a180cde7e5ccb0a51099d633e2360c83abfb64149a996c6f8fb7cae402f7704ad2", 0xc1, 0x40004, &(0x7f0000000b80)={0xa, 0x4e22, 0xf, @remote, 0xe2a9}, 0x1c) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000c00)={0x5, &(0x7f0000000bc0)=[{0x5, 0x2b, 0x1, 0x8}, {0x0, 0x6, 0x6, 0x948}, {0x9, 0x8, 0x7, 0x2}, {0x2, 0x41, 0x1, 0x2}, {0x9, 0x25, 0x5, 0xb}]}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c40)={'nicvf0\x00'}) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000c80)=0xfffffff8, 0x4) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000cc0)={0xff, 0x1, 0x6b, 0x5, 0x3, 0x8, 0x6, 0xdc, 0x2c, 0x7, 0xa0, 0x6, 0x7f, 0x8}, 0xe) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r9, &(0x7f0000001100)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000d80)={0x328, r10, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0xb8, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x90, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfff}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7ff}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x100}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}, @NL802154_ATTR_SEC_DEVKEY={0xf8, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xf}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}]}, @NL802154_DEVKEY_ATTR_ID={0x34, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7f}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_DEVKEY_ATTR_ID={0x70, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xbd6b}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}]}, @NL802154_ATTR_SEC_DEVKEY={0x12c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2000}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7ff}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_ID={0x70, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xfffc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x300}}]}]}, @NL802154_DEVKEY_ATTR_ID={0xa0, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xd110}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}]}]}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x328}, 0x1, 0x0, 0x0, 0x4040}, 0x4801) write$bt_hci(r3, &(0x7f0000001140)={0x1, @le_conn_param_req_reply={{0x2020, 0xe}, {0xc9, 0x1, 0x80, 0x0, 0x20be, 0xfffd, 0xd2f7}}}, 0x12) r11 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r11, 0x11b, 0x3, &(0x7f0000001180)=0x20200, 0x4) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000001200)={0x0, {0x2, 0x4e23, @remote}, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e21, @remote}, 0x324, 0x0, 0x0, 0x0, 0xfffc, &(0x7f00000011c0)='wlan0\x00', 0x1, 0xe1a2, 0x40}) r12 = syz_genetlink_get_family_id$batadv(&(0x7f00000012c0), r3) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000013c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x44, r12, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xe}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x401}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004040}, 0x48c1) getsockopt$IP_SET_OP_GET_BYINDEX(r2, 0x1, 0x53, &(0x7f0000001400)={0x7, 0x7, 0x1}, &(0x7f0000001440)=0x28) pipe(&(0x7f0000001480)) 532.260339ms ago: executing program 4 (id=1672): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x48582, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00'}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r3}, 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1}}, 0xee) 480.338122ms ago: executing program 0 (id=1673): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000640)="98", 0x1}], 0x1) r4 = accept4$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) recvmsg(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)=""/70, 0x46}], 0x1}, 0x4c2103a0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f0000000440)=[0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd2, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xfa, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1c, 0x1a, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xf73c}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x601fce96}}]}, &(0x7f0000000280)='syzkaller\x00', 0x4bc52213, 0xb1, &(0x7f00000002c0)=""/177, 0x41000, 0x3e, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x0, 0x2, 0x100}, 0x10, r6, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000700)=[{0x0, 0x2, 0x0, 0x5}, {0x4, 0x4, 0x6, 0x9}], 0x10, 0x7}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 398.790259ms ago: executing program 2 (id=1674): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000080), 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="1300000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bond\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r3 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r3, &(0x7f0000000000)={0x2a, 0x1, 0x2}, 0xc) bind$qrtr(r3, &(0x7f00000000c0)={0x2a, 0x3, 0x2}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x437, 0xfffffffe, 0x3, {0x0, 0x0, 0x0, 0x0, 0x4243b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c050}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000008900000008000300", @ANYRES32, @ANYBLOB="180006"], 0x34}}, 0x0) 398.41022ms ago: executing program 4 (id=1675): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000000100000100000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000700000000000000000000000000009aff0000000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='fib6_table_lookup\x00', r1, 0x0, 0x8000000000000000}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MACADDR={0xa}]}}}]}, 0x48}}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010800000000084) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r5, 0x0, 0xb9b}, 0x18) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) sendmmsg$inet6(r3, &(0x7f0000000640)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0, 0x400}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}], 0x1, 0x4008040) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe9, &(0x7f0000000180)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x23, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000500)={@private0, @rand_addr=' \x01\x00', @remote, 0x0, 0x0, 0x6, 0x400, 0x2d5d88b000000, 0x20400a8, r6}) 294.336348ms ago: executing program 0 (id=1676): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) syz_emit_ethernet(0x62, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @void, {@arp={0x806, @generic={0x108, 0x8864, 0x6, 0x0, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}}}}, 0x0) (async) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000003c0)={r3, 0xcb}, 0x8) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0x9, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, &(0x7f0000000c00), {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast, [0xff000000, 0xffffff00, 0x0, 0xffffff00], 0x4e20, 0x4e20, 0x4e23, 0x4e20, 0xe0, 0x0, 0x6, 0x4, 0xfdd8}}}, {{@ip={@multicast1, @multicast2, 0xff, 0xffffff00, 'vcan0\x00', 'veth1\x00', {0xff}, {}, 0x67, 0x0, 0x21}, 0x0, 0x100, 0x120, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth0\x00', {}, 'batadv_slave_1\x00', {}, 0x3}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f00000003c0)={r6, 0xcb}, 0x8) (async, rerun: 32) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000600)={0x0, 0x96}, &(0x7f0000000640)=0x8) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000a00)={0x0, 0xa, 0x6, 0x2c}, &(0x7f0000000a40)=0x10) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000008000b00040000000000003b000000000000000000000000eb01"], 0x24}, 0x1, 0x0, 0x0, 0x20002911}, 0x0) (async) sendmmsg$inet_sctp(r1, &(0x7f0000000b40)=[{&(0x7f0000000280)=@in6={0xa, 0x4e24, 0x1, @remote, 0x4}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000340)="8b1c55e3cb6cc3735121a593b9126e892b086db7efb952eb224b1850ebc8089f24702699c388fbe0eb8f424801253fbe26c4dd073e9f547c0bf6f56ea25a76215ba2c324c9470eba57c07dd1bcb60b7d24ae0e197feee0f3b0ae35814d14d1b7c1484ceb315c8ea192653dac75c6339ab4f0cf0e74376f8ca3571c0363391f8cdf6fc65d02578ee0dab8021dc079fd1d61cb32810858f2ddcedd550d17c53457cfb30a80532e80b193959b79fe2b4b4af630a75a49d4466fd1c0224acf4bfbc8c074c15cd1", 0xc5}, {&(0x7f00000002c0)="cf8fa08c32467bff6c0e73fcb3b3d59a6c89a645c29d1aa52c7c4f1ac8973489dc975b", 0x23}], 0x2, &(0x7f00000000c0)=[@prinfo={0x18, 0x84, 0x5, {0x20, 0x7}}], 0x18, 0x80}, {&(0x7f00000004c0)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10, &(0x7f00000005c0)=[{&(0x7f00000011c0)="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", 0x20e}], 0x1, &(0x7f0000001400)=ANY=[], 0x128, 0x44142}, {&(0x7f0000000680)=@in={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f00000009c0)=[{&(0x7f00000006c0)="3389ef980ede5b4dfdada9487ebf357fa7cf2e4bb83ca391439f39dead5197c52fa32533808c854413efd10ee1e229d8f6d2015c4a84d9e856238f7f295c68009b0c44a22701006c1a1d547bd6661eeb9291136f70e10a5908f03c234a3925fdf8b37e1865f4", 0x66}, {&(0x7f00000008c0)="566cbae0fdd2d86b5e6b26f2769a4172a096956a8555c4660ed568531b1194d365bf6f4218fcbe610fd4870ee49f5c4a0843a6188b015299b7cce6a65460015163557e4e27dc554e8fd6b87094c9f7baea87c53265a6ebb5c39888712034ed6938", 0x61}, {&(0x7f0000000940)="62f50962cf0f454e5c414a95accd7a7cd3119037f61d773dd63c2da811e65ced33ee025b70835f14338f1af12a0515fe67f09d98372da09df92c9732b4d184e18d7d8b1696de8079075cc3062916cc922fd648bcc4cbf6b15a3734393b1fd514db077b288394f74f6491f81139d16cd28e21d666b32f911168865fa2", 0x7c}], 0x3, &(0x7f0000000a80)=[@authinfo={0x42, 0x84, 0x6, {0x2}}, @authinfo={0x18, 0x84, 0x6, {0x6}}, @sndinfo={0x20, 0x84, 0x2, {0x3, 0x0, 0x7, 0x8, r7}}, @dstaddrv6={0x20, 0x84, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x6}}], 0x88, 0x4}], 0x3, 0x24004000) (async) r11 = socket(0x10, 0x803, 0x0) sendto(r11, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x4000, 0x0, 0x0) (async) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) recvmmsg(r11, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2040000, 0x0) (async) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x4e20, @private=0xa010102}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x6, {0x2, 0x4e20, @multicast1}, 'geneve1\x00'}) (async) socket$inet(0x2, 0x6, 0x7) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r0}) 228.198644ms ago: executing program 1 (id=1677): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x8d, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x16}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff720af0fff8ffffff71a4f0ff000000002d040000000000003d400300000000006504000001ed000079110000000000006c440000000000007a0ab0fe000000007b13000000000000c500f9ffffff00009500000000000000023bc065b7a379d17cf9333379fc9e94af05000000f1a864a710aad58db6a693002e6b3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a715bc5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7a29aa0d7d600c095199fe3ff3128c4e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d0800af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d390dd65be2467b373eafd9aa58f2077184b6a89adaf17b0a6041bdef728d236619074d6ebdf098bc908f523d228a40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c5da18ec0ae564162a27afea62d84f3a10746443d64364f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b93d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6ffc3a15d96c2ea3e2e04cfe0e669e51731b2875353193f82ade69d0540059fe6c7fe7cd86975023cb08cc7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c5538a294270a1ad10c80fef7c24c87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513cdc6c0e17fb1c1ca571380d7b4ead35a655e0b4a26b702396df7e0cbe02b6e4314f244a94aa8e98b0b263f0083bf93f05beb72f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba5823a34a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208165b9cdbae2ed9dc06000000000000008fe26e37037f27f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e05000000d03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d0a874c74b777df005c55fc30511d00000000c85265b2bd83d64a532869d708000000000000007baa5b6a682b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323a56edbd287eba77f35c35d91f3c62a0ca74836a640224de85f2b4a5fee500bbc584328a6a7a4628c4378c9b71dff64075b74a6520adb187b40d2cccbcb08c0634ee74658d3e23bf2871ed2aa2a05e319374511c8b0bf1b69d2b3782b3f481c314e7bd4615dbbf24c06ac95bd639e68d0e6aa7f0d07bf69a93365f803f0144af37236ea133c2255b0613bf8ba1d538e06c2411e8d70053b712084fd0e313de9bb19266e49a3a2190cb039c6f89610acd896319b9c8d1b8aac2eaa5a4f8be7419a09e3fb5be3be2fcdadd2299839cc40e684e6e2b4e1385fde7a0babcb0be672110268a34dad364fddee69e564119cebb6940c6356ff83ca527c573d700000000000000c6299263e6d9097f225de969485bce3d7dc471c0669bb6a467cf0de54dfcc1857048fe22a19dbb1b3cb9babaa839f1f6e817a62d95a5b971ff96a5c66c338c6f2a2da4644519f40761402e9c81013d76c7152c95ba5efa24ce1930f23a2277f057ffb6b0144f3b434a2adc456ef4d2fbdf7c6238c2bb00ffcf2d23d68cb9b027f3b22589f7956b66c5692b46ea03abb6a404c8ccceaa4ba4161409fcb54b86eaca26b24464e0ff504b87c90697ec2a82bbfd1c31713190d3e6e502c434909d6ba06cd0361a0fd90552272f24519ea9938413947edd3a0a7aa780c1dcdddf13b46ca94f37c89664c9cc1857d64ca371fa1b6131"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x50}, 0x48) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x7, &(0x7f0000000040)=0x8000, 0x4) 179.619722ms ago: executing program 0 (id=1678): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000005000000000000000100000400000000010000000400000003180000002e5f2e"], 0x0, 0x35}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x4e, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_PLIMIT={0x0, 0x2, 0x16000000}, @TCA_FQ_QUANTUM={0x0, 0x3, 0x10001}]}}]}, 0x48}}, 0x40004080) 179.423351ms ago: executing program 2 (id=1679): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000031401002cbd7000fcdbdf250900020073797a3200000000080041"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="650a0000000000006111a400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0xfffffffffffffff6) 113.095279ms ago: executing program 4 (id=1680): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f00000001c0)=0x67e, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0xfffffffb}, @FRA_DST={0x8, 0x1, @initdev={0xac, 0x1e, 0x4, 0x0}}, @FRA_FLOW={0x8, 0xb, 0xccb}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x40) recvmsg(r0, &(0x7f0000000580)={0x0, 0x4a, 0x0}, 0x10122) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000400000002000000000000110300000000001500000000000100000d000000000f00000000000000020000000000000c02000000000061"], 0x0, 0x4c}, 0x20) 77.479418ms ago: executing program 2 (id=1681): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x74}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2faf0aa2f92d833e}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x1308, r4, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7ff, 0x41}}}}, [@NL80211_ATTR_SCAN_SSIDS={0x4c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0x8, 0x0, @random="a6b74802"}, {0x12, 0x0, @random="993b9cfafa619d850b720809a09b"}, {0xa, 0x0, @default_ibss_ssid}, {0x11, 0x0, @random="a27d3f9aff691fc62f1428c3f3"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0xe7}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x1}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x120c, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x6, 0x2, "928f"}, @NL80211_BAND_5GHZ={0xea, 0x1, "66d28434f6e35d7e0eeaeefeffa7534578cf1fb894439070872ea2ed138e647f6e7765a4a8e42da76c45d15343fb7880c55605206189a74a72affdb123e1dc943a134fbdcf908a663385482ca3765902e5962ccf6ac997ca842ffb1635c4a45bd007d5ebc519ac897b29ed64ce5fc27134d2625bc5cf6d373953b5d1b52f374bd75292647af38578a5db0f07a292f4143e85b452608fb7f7e35894bec4bc5b85a8c7607b5e2241c6a43f9d5154023df84084e13d3e604a56acbd4bcfebd540c4800c96d0872cb587bfcc124c6668d45215bf638c81156ed60c484ca9835bd8acb449c80bfab4"}, @NL80211_BAND_60GHZ={0xbe, 0x2, "46ce2f6a07f8e2bdcf0cb1f4a3b5d94f379267c75af41ef82e32d80c7af91ebfd72235047df833a2a36c5d00218ecf4709e16cc698a414be668eca6ec0d745d20b3993801d5b4895205c809e301b3db3d928732a622f0b6c38954642397d25a1c1cac8f4b7d6e3286b79f21aa23b1644e91d96d6d4ca0ba98e8be06275e964625ab1f0e3239333fe2822b0672987ea17d7653ade1bb144ee70117b2222483eb909f0b3d94e2a690a87ab825f9a5cbef9f80edfe35edbee5accbc"}, @NL80211_BAND_5GHZ={0x50, 0x1, "5e1cd8c36b040762642cda91296d99b79632d56768e2bb7005618b45093e5f3c46b0b6e237a148f9e75f1de9c630e38c096d0f8b09a7e1397de052841aff4d94406a2c9f68b0db040ed1bf46"}, @NL80211_BAND_6GHZ={0x1004, 0x3, "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"}]}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x64, 0x84, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x80000000}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0xd}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x5}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x6}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x8000}]}]}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x2}]}, 0x1308}, 0x1, 0x0, 0x0, 0x40001}, 0x34040804) 66.680805ms ago: executing program 1 (id=1682): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000000)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000200)=r1) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000240)={'dvmrp0\x00'}) socketpair(0x2a, 0x5, 0x2, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) getsockopt$TIPC_CONN_TIMEOUT(r3, 0x10f, 0x82, &(0x7f0000000300), &(0x7f0000000340)=0x4) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_opts(r4, 0x0, 0x0, &(0x7f0000000380)=""/198, &(0x7f0000000480)=0xc6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x8905, &(0x7f00000004c0)) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000500)=@generic={0x0, 0xa00000000000000, 0x7}) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000580)={'veth1_macvtap\x00', 0x2d}) getpeername$tipc(r3, &(0x7f00000005c0)=@id, &(0x7f0000000600)=0x10) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r8, 0xc0109414, &(0x7f0000000640)={0xac9, 0x7, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000010a40)={@cgroup=r6, 0x26, 0x0, 0x7, &(0x7f0000010940)=[0x0], 0x1, 0x0, &(0x7f0000010980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000109c0)=[0x0, 0x0, 0x0], &(0x7f0000010a00)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000010a80)={@map=r2, r6, 0x37, 0x2018, 0x0, @value=r7, @void, @void, @void, r9}, 0x20) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r7, 0x84, 0x1a, &(0x7f0000010ac0)={0x0, 0x1000, "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"}, &(0x7f0000011b00)=0x1008) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000011bc0)={r10, 0x64, &(0x7f0000011b40)=[@in6={0xa, 0x4e23, 0x400, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, @in6={0xa, 0x4e21, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e23, 0x1, @remote, 0xffff3ee8}]}, &(0x7f0000011c00)=0x10) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r5, 0x4008941a, &(0x7f0000011c40)=0x2) sendmsg$key(r2, &(0x7f0000012e40)={0x0, 0x0, &(0x7f0000012e00)={&(0x7f0000011c80)={0x2, 0x10, 0x1, 0x9, 0x22f, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_spirange={0x2, 0x10, 0x4d6, 0x4d3}, @sadb_x_sec_ctx={0xc, 0x18, 0x4, 0xf5, 0x51, "d2ea671368a03c9e597d9797c3e789781ae0ebe3e91c70a7ed73ee26acafcf41f1b7ed2231dae33cf8ce6c6defa0d28749090533b7fa3eda1d08c0cbaac1f75d8d5a326d4baed273a2828ae069876f9457"}, @sadb_x_filter={0x5, 0x1a, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@rand_addr=0x64010102, 0x2a, 0x4, 0x10}, @sadb_key={0x14, 0x9, 0x4c0, 0x0, "71bd9da2724afc7299d9ac3e0bbd672a3d8338810c9c8cf1c6d9318f1d85ed9bbcb8005939db18d2ea4eeb8606cf0fb6376bd65d5eca634a7ff3ff23ecd323246895d68934bf0cd739c262c30b9886409f9da2448585d0bd0d0391f9c759fd5407949c816486b53fa0014c5e2b633f0200ca0f0cba88e395a191aa9e6615f607e128542371ccfbacb37ac3dff74be92fd53e15edacb0c4e7"}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e24, @multicast1}}, @sadb_x_sec_ctx={0x201, 0x18, 0x6, 0xc, 0x1000, "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"}]}, 0x1178}}, 0x44000) getsockname$ax25(r3, &(0x7f0000012e80)={{}, [@default, @rose, @rose, @null, @default, @rose]}, &(0x7f0000012f00)=0x48) r11 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000012f40)={{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000013040)=0xe8) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000013080), &(0x7f00000130c0)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r11, 0x8936, &(0x7f0000013100)={@loopback, 0x48, r12}) ioctl$INCFS_IOC_CREATE_FILE(r4, 0xc058671e, &(0x7f0000013480)={{'\x00', 0x3}, {0x4}, 0x4, 0x0, 0x0, &(0x7f0000013140)='./file0\x00', &(0x7f0000013180)='./file0\x00', &(0x7f00000131c0)="7d30bae495b96e0832e379b2e2916da09ead3e268a5579a5c5f26dc50a531329f8e6ec57920d1856610d331ca0ee666307b4e43af30b03c56a06aaa804eb11a4a9bfb6cc4b6027f194bcabaa67b4576a6d478efab7a1fd94f8ac1c0cd74247cf8b8be9ae8fd152c217a1b126055d42f8ac9eefdd00bfcafb0a029d5dda0c336e6fd1566f268cb9", 0x87, 0x0, &(0x7f0000013280)={0x2, 0x119, {0x0, 0xc, 0xc1, "25518027e5001192e790cb8524beb1f97f2bc6126022f8fd5dac0b0bd53fedcd6dbca942dd96e33daa5a1ebb9669e5acc20fae05c23587ffb93a3abd58fe6b201df1cfcec1262f0676a9dbcf6881c10e0145b1f007d0f7ba8bbffee84d956cc291b2d3757dd7c716dcb9f7e6ad2d6a170374a950aacb66f6445c33fc445948f71dddee0edabbca37413e41a214bda8a7317c8a66f57b8c16b02c26f08d8bc08a86c44676480d530cc3f01488b7363b863f50fcdc5742c7bb1d6030a6da6117c82a", 0x4b, "9f9aac14bf2402eef65dce26290e687dfa756e55524e2b204a0fb8f8cd6226eb8e66422be390ee6a7d530a4877c4ba76e95d2597066ca7c4ddaf617eb7d4cb5476cf3d61eca815d82f6f29"}, 0x9e, "05b58d4e32a9e7fac3a14e435ec49e28fef4a530ca9f5a79304dfbe3ad515daf036f4086d9ae61f5bfb9f83a54ca1019ae9a4bdf9f31a0779039384b20d3dc7bdd2830b2ecd7687451384b8d9417c5cfec231fb86e2d3f681da8f712b4df649e316fc8d088680654d51ffc10e9ae60a55316415a3ae1f9eec61d8785a80b1d5047bb3d68741d434f76b5db1460ff0240624449fd1f824345d88f1a85a77d"}, 0x1c3}) ioctl$IMGETVERSION(r3, 0x80044942, &(0x7f0000013500)) 21.287954ms ago: executing program 4 (id=1683): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1200000007000000080000002220000000000000", @ANYRES32, @ANYBLOB="01000100000000000000000000006eb319da0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="05"], 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000002080)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="04"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) close(r0) 16.395357ms ago: executing program 3 (id=306): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x14, 0x52, 0x1, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x3, {0x1, 0xf1, 0x3}, 0x2}, 0x18) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000600), &(0x7f0000000640)=0x4) 0s ago: executing program 0 (id=1684): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r1, 0x101, 0x70bd27, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) syz_init_net_socket$ax25(0x3, 0x5, 0x1) kernel console output (not intermixed with test programs): etlink: 'syz.4.566': attribute type 1 has an invalid length. [ 154.698733][ T3560] bridge_slave_1: left allmulticast mode [ 154.713574][ T3560] bridge_slave_1: left promiscuous mode [ 154.735693][ T3560] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.773580][ T3560] bridge_slave_0: left allmulticast mode [ 154.792257][ T3560] bridge_slave_0: left promiscuous mode [ 154.815969][ T3560] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.130916][ T8134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.569'. [ 155.145097][ T8134] net_ratelimit: 25 callbacks suppressed [ 155.145122][ T8134] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 155.162886][ T8134] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 155.560244][ T3560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.571497][ T3560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.585390][ T3560] bond0 (unregistering): Released all slaves [ 155.764916][ T8147] Bluetooth: MGMT ver 1.23 [ 155.916677][ T8151] xt_CT: No such helper "snmp" [ 156.284051][ T8168] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.544208][ T5844] Bluetooth: hci0: command tx timeout [ 156.985234][ T8201] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.164631][ T8104] chnl_net:caif_netlink_parms(): no params data found [ 157.270502][ T3560] hsr_slave_0: left promiscuous mode [ 157.303960][ T3560] hsr_slave_1: left promiscuous mode [ 157.310187][ T3560] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.340876][ T3560] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.359906][ T3560] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.377235][ T3560] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.437694][ T3560] veth1_macvtap: left promiscuous mode [ 157.443766][ T3560] veth0_macvtap: left promiscuous mode [ 157.470670][ T3560] veth1_vlan: left promiscuous mode [ 157.485084][ T3560] veth0_vlan: left promiscuous mode [ 157.976445][ T3560] team0 (unregistering): Port device team_slave_1 removed [ 158.018368][ T3560] team0 (unregistering): Port device team_slave_0 removed [ 158.516609][ T8231] openvswitch: netlink: Message has -1 unknown bytes. [ 158.588879][ T8231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.621764][ T8240] netlink: 45 bytes leftover after parsing attributes in process `syz.2.590'. [ 158.631406][ T5844] Bluetooth: hci0: command tx timeout [ 158.646486][ T8240] netlink: 'syz.2.590': attribute type 7 has an invalid length. [ 158.710165][ T8242] netlink: 'syz.2.590': attribute type 7 has an invalid length. [ 158.759469][ T8250] batadv1: entered allmulticast mode [ 158.975294][ T8257] x_tables: unsorted entry at hook 2 [ 159.026738][ T8104] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.059398][ T8104] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.099385][ T8104] bridge_slave_0: entered allmulticast mode [ 159.121641][ T8104] bridge_slave_0: entered promiscuous mode [ 159.161582][ T8104] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.199894][ T8104] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.234165][ T8104] bridge_slave_1: entered allmulticast mode [ 159.242027][ T8104] bridge_slave_1: entered promiscuous mode [ 159.333202][ T8275] netlink: 'syz.4.598': attribute type 1 has an invalid length. [ 159.371777][ T8279] netlink: 348 bytes leftover after parsing attributes in process `syz.1.597'. [ 159.511308][ T8104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.581326][ T8104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.750366][ T8291] bridge_slave_0: left allmulticast mode [ 159.755642][ T8298] netlink: 236 bytes leftover after parsing attributes in process `syz.0.600'. [ 159.791042][ T8291] bridge_slave_0: left promiscuous mode [ 159.809111][ T8291] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.827010][ T8304] netlink: 16 bytes leftover after parsing attributes in process `syz.0.600'. [ 159.937466][ T8291] bridge_slave_1: left allmulticast mode [ 159.943188][ T8291] bridge_slave_1: left promiscuous mode [ 160.006138][ T8291] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.049524][ T8291] bond0: (slave bond_slave_0): Releasing backup interface [ 160.076923][ T8291] bond0: (slave bond_slave_1): Releasing backup interface [ 160.123693][ T8291] team0: Port device team_slave_0 removed [ 160.155614][ T8291] team0: Port device team_slave_1 removed [ 160.168089][ T8291] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.179040][ T8291] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.191983][ T8291] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.200258][ T8291] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.230128][ T8293] tipc: Enabling of bearer rejected, failed to enable media [ 160.248798][ T8312] netlink: 'syz.2.604': attribute type 1 has an invalid length. [ 160.268009][ T8312] netlink: 144 bytes leftover after parsing attributes in process `syz.2.604'. [ 160.285129][ T8312] netlink: 'syz.2.604': attribute type 1 has an invalid length. [ 160.298461][ T8312] netlink: 'syz.2.604': attribute type 2 has an invalid length. [ 160.311899][ T8312] netlink: 64 bytes leftover after parsing attributes in process `syz.2.604'. [ 160.338355][ T8104] team0: Port device team_slave_0 added [ 160.406313][ T8104] team0: Port device team_slave_1 added [ 160.551939][ T8104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.593999][ T8104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.666800][ T8104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.702993][ T8104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.711252][ T5844] Bluetooth: hci0: command tx timeout [ 160.724320][ T8104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.751024][ T8104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.960349][ T8104] hsr_slave_0: entered promiscuous mode [ 160.977590][ T8104] hsr_slave_1: entered promiscuous mode [ 160.991291][ T8104] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.015702][ T8104] Cannot create hsr debugfs directory [ 161.062807][ T8336] netlink: 'syz.1.611': attribute type 8 has an invalid length. [ 161.718396][ T8363] netlink: 12 bytes leftover after parsing attributes in process `syz.4.616'. [ 162.543350][ T8391] netlink: 12 bytes leftover after parsing attributes in process `syz.2.625'. [ 162.573206][ T8104] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 162.679280][ T8395] xt_ecn: cannot match TCP bits for non-tcp packets [ 162.786045][ T5844] Bluetooth: hci0: command tx timeout [ 163.375150][ T8104] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 163.405621][ T8104] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 163.421301][ T8419] netlink: 56 bytes leftover after parsing attributes in process `syz.0.629'. [ 163.469372][ T8415] netlink: 132 bytes leftover after parsing attributes in process `syz.1.628'. [ 163.533636][ T8104] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 163.541621][ T8423] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 163.581966][ T8423] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 163.597816][ T8419] netlink: 'syz.0.629': attribute type 3 has an invalid length. [ 163.613930][ T8423] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.636081][ T8419] __nla_validate_parse: 3 callbacks suppressed [ 163.636099][ T8419] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.629'. [ 163.857463][ T8104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.000742][ T8104] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.060240][ T6473] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.067539][ T6473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.095012][ T8449] x_tables: duplicate underflow at hook 1 [ 164.129088][ T6473] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.136486][ T6473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.226017][ T8452] netlink: 36 bytes leftover after parsing attributes in process `syz.4.636'. [ 164.548400][ T8470] netlink: 44 bytes leftover after parsing attributes in process `syz.0.640'. [ 164.681627][ T8476] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 164.715851][ T8476] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 165.080318][ T8104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.282994][ T8503] netlink: 'syz.4.646': attribute type 4 has an invalid length. [ 165.291733][ T8503] netlink: 8 bytes leftover after parsing attributes in process `syz.4.646'. [ 165.347033][ T8104] veth0_vlan: entered promiscuous mode [ 165.400882][ T8104] veth1_vlan: entered promiscuous mode [ 165.471185][ T8510] netlink: 'syz.2.647': attribute type 83 has an invalid length. [ 165.559824][ T8104] veth0_macvtap: entered promiscuous mode [ 165.577235][ T8518] IPVS: length: 157 != 24 [ 165.612312][ T8104] veth1_macvtap: entered promiscuous mode [ 165.741009][ T8104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.800953][ T8104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.869773][ T8104] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.929007][ T8104] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.947687][ T8104] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.975608][ T8104] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.999009][ T8536] netlink: 248 bytes leftover after parsing attributes in process `syz.1.653'. [ 166.355309][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.363176][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.503199][ T8552] netlink: 24 bytes leftover after parsing attributes in process `syz.0.658'. [ 166.529800][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.570485][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.695194][ T8564] netlink: 24 bytes leftover after parsing attributes in process `syz.2.660'. [ 166.814221][ T8574] IPVS: length: 8 != 65730823296 [ 166.819994][ T8574] netlink: 12 bytes leftover after parsing attributes in process `syz.4.661'. [ 167.160428][ T8588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.664'. [ 167.504106][ T5841] Bluetooth: hci0: command 0x0405 tx timeout [ 167.987469][ T8621] veth3: entered promiscuous mode [ 167.992589][ T8621] veth3: entered allmulticast mode [ 168.012544][ T8631] netlink: 'syz.0.675': attribute type 39 has an invalid length. [ 168.115403][ T6473] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.209819][ T8634] netlink: 132 bytes leftover after parsing attributes in process `syz.4.676'. [ 168.299274][ T6473] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.404230][ T6473] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.516483][ T6473] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.668806][ T6473] bridge_slave_1: left allmulticast mode [ 168.675477][ T6473] bridge_slave_1: left promiscuous mode [ 168.681704][ T6473] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.693265][ T6473] bridge_slave_0: left allmulticast mode [ 168.699318][ T6473] bridge_slave_0: left promiscuous mode [ 168.705988][ T6473] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.054315][ T8659] netlink: 4 bytes leftover after parsing attributes in process `syz.4.682'. [ 169.171025][ T8667] netlink: 'syz.2.684': attribute type 1 has an invalid length. [ 169.291159][ T6473] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.304857][ T6473] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.316277][ T6473] bond0 (unregistering): Released all slaves [ 169.401838][ T8667] 8021q: adding VLAN 0 to HW filter on device bond1 [ 169.489387][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 169.499604][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 169.509551][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 169.526517][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 169.536823][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 169.644199][ T8682] netlink: 12 bytes leftover after parsing attributes in process `syz.0.687'. [ 169.830937][ T8685] veth7: entered promiscuous mode [ 170.076356][ T10] hid-generic 0005:04F3:FFF9.0002: item fetching failed at offset 0/1 [ 170.106655][ T10] hid-generic 0005:04F3:FFF9.0002: probe with driver hid-generic failed with error -22 [ 170.273366][ T8711] vxcan1: tx address claim with dest, not broadcast [ 170.710407][ T24] page_pool_release_retry() stalled pool shutdown: id 25, 1 inflight 60 sec [ 170.769703][ T8734] netlink: 60 bytes leftover after parsing attributes in process `syz.2.699'. [ 170.855780][ T8737] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 170.915494][ T8739] x_tables: duplicate underflow at hook 2 [ 171.027095][ T8740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.701'. [ 171.166308][ T8748] tipc: Started in network mode [ 171.171257][ T8748] tipc: Node identity fe80000000000000000000000000002a, cluster identity 4711 [ 171.241391][ T8748] tipc: Enabling of bearer rejected, failed to enable media [ 171.254350][ T8752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.706'. [ 171.584384][ T5844] Bluetooth: hci0: command tx timeout [ 171.597399][ T8766] netlink: 24 bytes leftover after parsing attributes in process `syz.1.709'. [ 171.639484][ T8754] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.707'. [ 171.871892][ T6473] hsr_slave_0: left promiscuous mode [ 171.955389][ T6473] hsr_slave_1: left promiscuous mode [ 171.961769][ T6473] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.980562][ T6473] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.998044][ T6473] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.015307][ T6473] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.056337][ T6473] veth1_macvtap: left promiscuous mode [ 172.065196][ T6473] veth0_macvtap: left promiscuous mode [ 172.074222][ T6473] veth1_vlan: left promiscuous mode [ 172.081948][ T6473] veth0_vlan: left promiscuous mode [ 172.927256][ T6473] team0 (unregistering): Port device team_slave_1 removed [ 172.980111][ T6473] team0 (unregistering): Port device team_slave_0 removed [ 173.675186][ T5844] Bluetooth: hci0: command tx timeout [ 173.724677][ T8821] netlink: 72 bytes leftover after parsing attributes in process `syz.2.722'. [ 173.777454][ T8827] ipt_REJECT: ECHOREPLY no longer supported. [ 173.828488][ T8827] xt_TCPMSS: Only works on TCP SYN packets [ 173.842050][ T5919] IPVS: starting estimator thread 0... [ 173.984469][ T8829] IPVS: using max 24 ests per chain, 57600 per kthread [ 174.053625][ T8837] netlink: 24 bytes leftover after parsing attributes in process `syz.0.723'. [ 174.215077][ T8674] chnl_net:caif_netlink_parms(): no params data found [ 174.295304][ T8850] netlink: 'syz.4.726': attribute type 1 has an invalid length. [ 174.361538][ T8854] ksmbd: Unknown IPC event: 3, ignore. [ 174.369299][ T8851] netlink: 72 bytes leftover after parsing attributes in process `syz.4.726'. [ 174.539557][ T8850] 8021q: adding VLAN 0 to HW filter on device bond1 [ 174.590377][ T8864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.730'. [ 174.914467][ T8881] openvswitch: netlink: Key type 10512 is out of range max 32 [ 175.018797][ T8674] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.021452][ T8890] netlink: 'syz.0.736': attribute type 10 has an invalid length. [ 175.036873][ T8674] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.045071][ T8884] nbd: must specify a size in bytes for the device [ 175.060529][ T8674] bridge_slave_0: entered allmulticast mode [ 175.071025][ T8674] bridge_slave_0: entered promiscuous mode [ 175.103177][ T8674] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.120985][ T8674] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.141251][ T8674] bridge_slave_1: entered allmulticast mode [ 175.155887][ T8674] bridge_slave_1: entered promiscuous mode [ 175.291598][ T8900] netlink: 'syz.1.739': attribute type 11 has an invalid length. [ 175.301916][ T8900] netlink: 'syz.1.739': attribute type 11 has an invalid length. [ 175.351616][ T8900] netlink: 224 bytes leftover after parsing attributes in process `syz.1.739'. [ 175.408879][ T8905] netlink: 244 bytes leftover after parsing attributes in process `syz.1.739'. [ 175.609007][ T8674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.679025][ T8674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.756469][ T5844] Bluetooth: hci0: command tx timeout [ 175.836613][ T8923] netlink: 24 bytes leftover after parsing attributes in process `syz.2.744'. [ 175.911638][ T8674] team0: Port device team_slave_0 added [ 175.978038][ T8674] team0: Port device team_slave_1 added [ 176.077569][ T8674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.086728][ T8674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.204052][ T8674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.283622][ T8674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.350611][ T8942] tipc: Can't bind to reserved service type 2 [ 176.356864][ T8674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.494034][ T8674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.895794][ T8674] hsr_slave_0: entered promiscuous mode [ 176.902518][ T8674] hsr_slave_1: entered promiscuous mode [ 176.948537][ T8674] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.979517][ T8674] Cannot create hsr debugfs directory [ 177.240420][ T8970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.755'. [ 177.278603][ T8970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.755'. [ 177.570979][ T8980] netlink: 4 bytes leftover after parsing attributes in process `syz.1.758'. [ 177.604213][ T8982] netlink: 24 bytes leftover after parsing attributes in process `syz.0.757'. [ 177.827840][ T5844] Bluetooth: hci0: command tx timeout [ 178.091288][ T9003] IPv4: Oversized IP packet from 127.202.26.0 [ 178.417313][ T9008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.762'. [ 178.512732][ T8984] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 178.663707][ T9020] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 179.579944][ T8674] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 179.646892][ T8674] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 179.708259][ T8674] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 179.768672][ T9063] netlink: 'syz.1.774': attribute type 5 has an invalid length. [ 179.793893][ T8674] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 179.926067][ T9079] __nla_validate_parse: 2 callbacks suppressed [ 179.926085][ T9079] netlink: 12 bytes leftover after parsing attributes in process `syz.1.776'. [ 179.955154][ T9079] netlink: 'syz.1.776': attribute type 1 has an invalid length. [ 179.962972][ T9079] netlink: 'syz.1.776': attribute type 1 has an invalid length. [ 180.020489][ T9079] netlink: 'syz.1.776': attribute type 2 has an invalid length. [ 180.051270][ T9079] netlink: 68 bytes leftover after parsing attributes in process `syz.1.776'. [ 180.229238][ T8674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.300240][ T8674] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.340945][ T6480] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.348172][ T6480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.837388][ T9098] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.847247][ T9098] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.856335][ T9098] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.866352][ T9098] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.939778][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.947056][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.085913][ T9116] netlink: 28 bytes leftover after parsing attributes in process `syz.0.784'. [ 181.098613][ T9116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.784'. [ 181.434602][ T9136] x_tables: duplicate underflow at hook 2 [ 181.545503][ T9141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.791'. [ 181.558051][ T9142] netlink: 4 bytes leftover after parsing attributes in process `syz.0.791'. [ 181.761700][ T8674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.880997][ T8674] veth0_vlan: entered promiscuous mode [ 181.907227][ T8674] veth1_vlan: entered promiscuous mode [ 182.036405][ T8674] veth0_macvtap: entered promiscuous mode [ 182.083493][ T8674] veth1_macvtap: entered promiscuous mode [ 182.143011][ T8674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.193742][ T9172] netlink: 'syz.4.799': attribute type 15 has an invalid length. [ 182.371420][ T8674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.455287][ T8674] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.477498][ T8674] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.490029][ T8674] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.513115][ T8674] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.906420][ T3560] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.984030][ T3560] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.244059][ T6473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.268242][ T6473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.655967][ T9250] netlink: 24 bytes leftover after parsing attributes in process `syz.2.811'. [ 183.741906][ T9243] netlink: 16 bytes leftover after parsing attributes in process `syz.1.810'. [ 183.776576][ T9243] netlink: 'syz.1.810': attribute type 7 has an invalid length. [ 183.791628][ T9254] netlink: 'syz.0.813': attribute type 2 has an invalid length. [ 183.802923][ T9243] netlink: 4 bytes leftover after parsing attributes in process `syz.1.810'. [ 183.808960][ T9254] netlink: 'syz.0.813': attribute type 2 has an invalid length. [ 183.860612][ T9243] erspan0: entered promiscuous mode [ 183.868399][ T9243] gretap0: entered promiscuous mode [ 183.875034][ T9243] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 183.885947][ T9243] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 184.077639][ T6475] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.277299][ T6475] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.409872][ T6475] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.492517][ T6475] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.635732][ T6475] bridge_slave_1: left allmulticast mode [ 184.641435][ T6475] bridge_slave_1: left promiscuous mode [ 184.648878][ T6475] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.661299][ T6475] bridge_slave_0: left allmulticast mode [ 184.668256][ T6475] bridge_slave_0: left promiscuous mode [ 184.675017][ T6475] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.357625][ T6475] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.387334][ T6475] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.416576][ T6475] bond0 (unregistering): Released all slaves [ 185.708213][ T9304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.773613][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 185.783639][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 185.794326][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 185.811129][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 185.821813][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 186.000451][ T9310] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.823'. [ 186.322974][ T9325] netlink: 'syz.0.825': attribute type 7 has an invalid length. [ 187.019562][ T9352] netlink: 12 bytes leftover after parsing attributes in process `syz.4.833'. [ 187.109384][ T9352] 8021q: adding VLAN 0 to HW filter on device bond2 [ 187.153623][ T9349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.832'. [ 187.327094][ T9361] netlink: 8 bytes leftover after parsing attributes in process `syz.4.834'. [ 187.344257][ T9361] netlink: 8 bytes leftover after parsing attributes in process `syz.4.834'. [ 187.654473][ T6475] hsr_slave_0: left promiscuous mode [ 187.687522][ T6475] hsr_slave_1: left promiscuous mode [ 187.693668][ T6475] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.733395][ T6475] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.782349][ T6475] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.810583][ T6475] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.857381][ T6475] veth1_macvtap: left promiscuous mode [ 187.862982][ T6475] veth0_macvtap: left promiscuous mode [ 187.868928][ T6475] veth1_vlan: left promiscuous mode [ 187.874712][ T6475] veth0_vlan: left promiscuous mode [ 187.904067][ T5841] Bluetooth: hci0: command tx timeout [ 188.542638][ T6475] team0 (unregistering): Port device team_slave_1 removed [ 188.588174][ T6475] team0 (unregistering): Port device team_slave_0 removed [ 189.571438][ T9400] netlink: 'syz.4.842': attribute type 7 has an invalid length. [ 189.610575][ T9400] netlink: 104 bytes leftover after parsing attributes in process `syz.4.842'. [ 189.662768][ T9306] chnl_net:caif_netlink_parms(): no params data found [ 189.795376][ T9408] netlink: 28 bytes leftover after parsing attributes in process `syz.1.844'. [ 190.008572][ T5841] Bluetooth: hci0: command tx timeout [ 190.114163][ T9408] tipc: Started in network mode [ 190.120214][ T9408] tipc: Node identity fe80000000000000000000000000002c, cluster identity 4711 [ 190.138218][ T9408] tipc: Enabling of bearer rejected, failed to enable media [ 190.322025][ T9432] netlink: 'syz.4.849': attribute type 5 has an invalid length. [ 190.368354][ T9306] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.374134][ T9432] netlink: 140 bytes leftover after parsing attributes in process `syz.4.849'. [ 190.379576][ T9306] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.406647][ T9306] bridge_slave_0: entered allmulticast mode [ 190.416576][ T9440] netlink: 'syz.1.850': attribute type 32 has an invalid length. [ 190.426397][ T9306] bridge_slave_0: entered promiscuous mode [ 190.460187][ T9306] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.481529][ T9306] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.504097][ T9306] bridge_slave_1: entered allmulticast mode [ 190.522751][ T9306] bridge_slave_1: entered promiscuous mode [ 190.640151][ T9450] netlink: 'syz.1.854': attribute type 5 has an invalid length. [ 190.701582][ T9306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.732965][ T9306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.939392][ T9468] xt_CT: You must specify a L4 protocol and not use inversions on it [ 190.942862][ T9306] team0: Port device team_slave_0 added [ 191.001469][ T9306] team0: Port device team_slave_1 added [ 191.241625][ T9306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.252839][ T9306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.286292][ T9306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.304721][ T9484] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 191.314407][ T9306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.332205][ T9306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.402787][ T9306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.545406][ T9494] netlink: 4 bytes leftover after parsing attributes in process `syz.4.862'. [ 191.583744][ T9291] Set syz1 is full, maxelem 65536 reached [ 191.597423][ T9499] netlink: 72 bytes leftover after parsing attributes in process `syz.4.862'. [ 191.691610][ T9306] hsr_slave_0: entered promiscuous mode [ 191.710621][ T9306] hsr_slave_1: entered promiscuous mode [ 191.724911][ T9306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 191.733013][ T9502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.864'. [ 191.742729][ T9306] Cannot create hsr debugfs directory [ 191.879723][ T9498] syzkaller0: entered promiscuous mode [ 191.888137][ T9498] syzkaller0: entered allmulticast mode [ 192.071363][ T5841] Bluetooth: hci0: command tx timeout [ 193.711242][ T5841] Bluetooth: hci4: link tx timeout [ 193.716768][ T5841] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 193.926998][ T9502] team1: entered promiscuous mode [ 193.933366][ T9502] team1: entered allmulticast mode [ 194.148716][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.149911][ T5844] Bluetooth: hci0: command tx timeout [ 194.169173][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.402845][ T9580] lo: entered promiscuous mode [ 194.485638][ T9579] lo: left promiscuous mode [ 194.542556][ T9600] netlink: 4 bytes leftover after parsing attributes in process `syz.4.875'. [ 194.567591][ T9603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.877'. [ 194.569813][ T9604] nftables ruleset with unbound chain [ 194.668740][ T9609] netlink: 'syz.1.878': attribute type 5 has an invalid length. [ 194.910974][ T9609] xt_CT: No such helper "snmp" [ 194.939488][ T9622] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 194.994291][ T9628] netlink: 'syz.4.881': attribute type 11 has an invalid length. [ 195.002361][ T9628] netlink: 224 bytes leftover after parsing attributes in process `syz.4.881'. [ 195.045869][ T9306] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 195.058092][ T9628] netlink: 252 bytes leftover after parsing attributes in process `syz.4.881'. [ 195.089494][ T9306] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 195.147815][ T9306] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 195.176369][ T9306] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 195.666202][ T9306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.738761][ T9306] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.744084][ T5844] Bluetooth: hci4: command 0x0406 tx timeout [ 195.762299][ T9668] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.846868][ T9674] netlink: 'syz.2.891': attribute type 25 has an invalid length. [ 195.972311][ T6482] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.979617][ T6482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.997829][ T9676] xt_CT: No such helper "syz0" [ 196.036181][ T9674] IPVS: Error connecting to the multicast addr [ 196.070770][ T9684] : left promiscuous mode [ 196.152255][ T9461] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.159523][ T9461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.424545][ T9695] netlink: 16 bytes leftover after parsing attributes in process `syz.2.894'. [ 196.605332][ T9704] macsec2: entered allmulticast mode [ 196.622630][ T9704] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 196.777388][ T9704] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 196.918639][ T9713] ip6gre2: entered allmulticast mode [ 196.968892][ T9717] Bluetooth: MGMT ver 1.23 [ 197.225534][ T9733] netlink: 48 bytes leftover after parsing attributes in process `syz.4.900'. [ 197.284422][ T9733] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 197.309228][ T9306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.336848][ T9738] netlink: 4 bytes leftover after parsing attributes in process `syz.2.902'. [ 197.418692][ T9306] veth0_vlan: entered promiscuous mode [ 197.431704][ T9306] veth1_vlan: entered promiscuous mode [ 197.689541][ T9306] veth0_macvtap: entered promiscuous mode [ 197.758542][ T9306] veth1_macvtap: entered promiscuous mode [ 197.804935][ T9760] openvswitch: netlink: Message has -1 unknown bytes. [ 197.838758][ T9306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.867449][ T9765] netlink: 40 bytes leftover after parsing attributes in process `syz.1.910'. [ 197.888875][ T9306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.907290][ T9765] nbd: must specify at least one socket [ 197.933597][ T9306] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.978313][ T9306] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.032111][ T9306] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.060861][ T9306] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.081792][ T9777] xt_l2tp: v2 doesn't support IP mode [ 198.124949][ T9776] netlink: 'syz.0.914': attribute type 1 has an invalid length. [ 198.364824][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.373259][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.468265][ T9461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.493469][ T9784] bridge_slave_1: default FDB implementation only supports local addresses [ 198.508722][ T9461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.916381][ T9800] netlink: 128 bytes leftover after parsing attributes in process `syz.4.922'. [ 198.965251][ T9800] netlink: 12 bytes leftover after parsing attributes in process `syz.4.922'. [ 199.136155][ T6482] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.321468][ T6482] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.416493][ T6482] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.630882][ T6482] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.820500][ T6482] bridge_slave_1: left allmulticast mode [ 199.830134][ T6482] bridge_slave_1: left promiscuous mode [ 199.836506][ T6482] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.849415][ T6482] bridge_slave_0: left allmulticast mode [ 199.857548][ T6482] bridge_slave_0: left promiscuous mode [ 199.863358][ T6482] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.394852][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 200.405078][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 200.414876][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 200.428499][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 200.438199][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 200.691030][ T6482] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.710027][ T6482] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.726260][ T6482] bond0 (unregistering): Released all slaves [ 201.124005][ T9872] netlink: 'syz.1.928': attribute type 29 has an invalid length. [ 201.132255][ T9877] netlink: 'syz.1.928': attribute type 29 has an invalid length. [ 201.153141][ T9872] netlink: 500 bytes leftover after parsing attributes in process `syz.1.928'. [ 201.256360][ T9884] IPVS: Error joining to the multicast group [ 201.490905][ T9899] netlink: 4 bytes leftover after parsing attributes in process `syz.4.932'. [ 201.511226][ T9887] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 201.584058][ T9888] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 201.790813][ T9908] netlink: 'syz.2.937': attribute type 1 has an invalid length. [ 201.897421][ T9915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.940'. [ 201.934249][ T9915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.940'. [ 201.943148][ T9915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.940'. [ 202.259392][ T9929] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 202.325334][ T6482] hsr_slave_0: left promiscuous mode [ 202.353428][ T6482] hsr_slave_1: left promiscuous mode [ 202.383663][ T6482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.393413][ T6482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.451059][ T6482] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.472675][ T6482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.554099][ T5841] Bluetooth: hci0: command tx timeout [ 202.579492][ T9948] netlink: 24 bytes leftover after parsing attributes in process `syz.4.943'. [ 202.630408][ T6482] veth1_macvtap: left promiscuous mode [ 202.648843][ T6482] veth0_macvtap: left promiscuous mode [ 202.660488][ T6482] veth1_vlan: left promiscuous mode [ 202.668411][ T6482] veth0_vlan: left promiscuous mode [ 203.107984][ T6482] team0 (unregistering): Port device team_slave_1 removed [ 203.152799][ T6482] team0 (unregistering): Port device team_slave_0 removed [ 203.643326][ T9855] chnl_net:caif_netlink_parms(): no params data found [ 203.985295][ T9983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.952'. [ 204.195454][ T9988] netlink: 4 bytes leftover after parsing attributes in process `syz.4.954'. [ 204.225717][ T9991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.953'. [ 204.252661][ T9994] netlink: 12 bytes leftover after parsing attributes in process `syz.4.954'. [ 204.267527][ T9855] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.282750][ T9855] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.292819][ T9855] bridge_slave_0: entered allmulticast mode [ 204.301584][ T9855] bridge_slave_0: entered promiscuous mode [ 204.308692][ T9993] netlink: 'syz.2.955': attribute type 4 has an invalid length. [ 204.343209][ T9993] netlink: 'syz.2.955': attribute type 39 has an invalid length. [ 204.474711][ T9997] netlink: 8 bytes leftover after parsing attributes in process `syz.4.954'. [ 204.487829][ T9855] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.497539][ T9855] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.515451][ T9855] bridge_slave_1: entered allmulticast mode [ 204.529960][ T9855] bridge_slave_1: entered promiscuous mode [ 204.624314][ T5841] Bluetooth: hci0: command tx timeout [ 204.704732][ T9855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.711363][T10009] netlink: 28 bytes leftover after parsing attributes in process `syz.4.957'. [ 204.718233][ T9855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.756549][T10009] netlink: 'syz.4.957': attribute type 7 has an invalid length. [ 204.823493][T10009] netlink: 'syz.4.957': attribute type 8 has an invalid length. [ 204.849717][T10009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.957'. [ 204.882638][ T9855] team0: Port device team_slave_0 added [ 204.893657][T10018] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.960'. [ 204.917189][ T9855] team0: Port device team_slave_1 added [ 204.939435][T10009] erspan0: entered promiscuous mode [ 204.965186][T10009] gretap0: entered promiscuous mode [ 204.986025][T10009] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 205.003947][T10009] Cannot create hsr debugfs directory [ 205.009617][T10009] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 205.044014][T10009] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 205.310467][ T9855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.341950][ T9855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.386149][ T9855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.408064][T10039] netlink: 72 bytes leftover after parsing attributes in process `syz.0.963'. [ 205.459211][ T9855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.474237][ T9855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.559543][ T9855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.561601][T10045] sctp: [Deprecated]: syz.1.966 (pid 10045) Use of struct sctp_assoc_value in delayed_ack socket option. [ 205.561601][T10045] Use struct sctp_sack_info instead [ 205.920896][T10016] bond2 (unregistering): Released all slaves [ 206.030876][ T9855] hsr_slave_0: entered promiscuous mode [ 206.042726][ T9855] hsr_slave_1: entered promiscuous mode [ 206.051627][ T9855] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.059753][ T9855] Cannot create hsr debugfs directory [ 206.254379][T10070] netlink: 'syz.1.973': attribute type 21 has an invalid length. [ 206.271383][T10070] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 206.421594][T10075] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.588260][T10082] smc: net device erspan0 applied user defined pnetid SYZ0 [ 206.703933][ T5841] Bluetooth: hci0: command tx timeout [ 206.874462][T10094] SET target dimension over the limit! [ 206.902290][ T9855] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 206.962548][ T9855] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 207.006721][ T9855] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 207.039614][ T9855] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 207.501590][ T9855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.587858][ T9855] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.638454][ T9462] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.645695][ T9462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.689784][ T9462] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.697068][ T9462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.760983][T10133] __nla_validate_parse: 7 callbacks suppressed [ 207.761003][T10133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.987'. [ 207.788632][T10133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.987'. [ 207.821742][T10133] netlink: 60 bytes leftover after parsing attributes in process `syz.1.987'. [ 207.857898][T10135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.902193][T10133] netlink: 12 bytes leftover after parsing attributes in process `syz.1.987'. [ 208.116529][T10145] x_tables: duplicate underflow at hook 3 [ 208.207824][T10150] netlink: 232 bytes leftover after parsing attributes in process `syz.4.992'. [ 208.233632][T10150] netlink: 100 bytes leftover after parsing attributes in process `syz.4.992'. [ 208.259912][ T30] audit: type=1800 audit(1751526350.773:3): pid=10152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.991" name="bpf-map" dev="anon_inodefs" ino=35 res=0 errno=0 [ 208.420430][ T9855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.481208][T10155] netlink: 20 bytes leftover after parsing attributes in process `syz.4.993'. [ 208.494469][T10155] netlink: 108 bytes leftover after parsing attributes in process `syz.4.993'. [ 208.553928][T10155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.993'. [ 208.570709][ T9855] veth0_vlan: entered promiscuous mode [ 208.609823][ T9855] veth1_vlan: entered promiscuous mode [ 208.659493][T10160] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.706791][ T9855] veth0_macvtap: entered promiscuous mode [ 208.728613][ T9855] veth1_macvtap: entered promiscuous mode [ 208.755750][ T9855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.784728][ T5841] Bluetooth: hci0: command tx timeout [ 208.787334][ T9855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.843036][ T9855] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.853067][ T9855] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.862277][ T9855] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.875869][ T9855] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.921085][T10168] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.997092][ T9463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.017689][ T9463] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.044080][T10170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.998'. [ 209.111153][ T6482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.119599][T10172] sctp: [Deprecated]: syz.1.999 (pid 10172) Use of int in max_burst socket option deprecated. [ 209.119599][T10172] Use struct sctp_assoc_value instead [ 209.137847][ T6482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.461377][T10184] syz.4.1002 uses old SIOCAX25GETINFO [ 210.109275][T10217] sctp: [Deprecated]: syz.2.1010 (pid 10217) Use of int in maxseg socket option. [ 210.109275][T10217] Use struct sctp_assoc_value instead [ 210.203025][ T9462] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.284164][T10222] IPVS: sync thread started: state = MASTER, mcast_ifn = tunl0, syncid = 2, id = 0 [ 210.732293][ T9462] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.230265][T10228] x_tables: duplicate underflow at hook 2 [ 211.259646][T10232] netlink: 'syz.0.1012': attribute type 21 has an invalid length. [ 211.285396][T10232] netlink: 'syz.0.1012': attribute type 22 has an invalid length. [ 211.299000][ T9462] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.308050][T10232] netlink: 'syz.0.1012': attribute type 23 has an invalid length. [ 211.337840][T10232] netlink: 'syz.0.1012': attribute type 25 has an invalid length. [ 211.371839][T10232] netlink: 'syz.0.1012': attribute type 26 has an invalid length. [ 211.497082][ T9462] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.585205][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 211.591311][ T5837] Bluetooth: hci1: command 0x0406 tx timeout [ 211.591380][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 211.845196][T10253] syz.1.1021: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 211.884804][T10253] CPU: 0 UID: 0 PID: 10253 Comm: syz.1.1021 Not tainted 6.16.0-rc3-syzkaller-00144-gbd475eeaaf3c #0 PREEMPT(full) [ 211.884854][T10253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 211.884866][T10253] Call Trace: [ 211.884874][T10253] [ 211.884882][T10253] dump_stack_lvl+0x189/0x250 [ 211.884928][T10253] ? __pfx_dump_stack_lvl+0x10/0x10 [ 211.884955][T10253] ? __pfx__printk+0x10/0x10 [ 211.884976][T10253] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 211.884997][T10253] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 211.885017][T10253] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 211.885040][T10253] warn_alloc+0x214/0x310 [ 211.885061][T10253] ? stack_depot_save_flags+0x40/0x900 [ 211.885091][T10253] ? __pfx_warn_alloc+0x10/0x10 [ 211.885113][T10253] ? kasan_save_track+0x4f/0x80 [ 211.885140][T10253] ? xskq_create+0x56/0x170 [ 211.885167][T10253] ? xsk_init_queue+0xb0/0x110 [ 211.885192][T10253] ? xsk_setsockopt+0x43f/0x710 [ 211.885217][T10253] ? do_sock_setsockopt+0x257/0x3e0 [ 211.885239][T10253] ? __x64_sys_setsockopt+0x18b/0x220 [ 211.885261][T10253] ? do_syscall_64+0xfa/0x3b0 [ 211.885288][T10253] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.885318][T10253] __vmalloc_node_range_noprof+0x125/0x12f0 [ 211.885375][T10253] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 211.885406][T10253] ? __kasan_kmalloc+0x93/0xb0 [ 211.885430][T10253] vmalloc_user_noprof+0xad/0xf0 [ 211.885453][T10253] ? xskq_create+0xbf/0x170 [ 211.885484][T10253] xskq_create+0xbf/0x170 [ 211.885518][T10253] xsk_init_queue+0xb0/0x110 [ 211.885548][T10253] xsk_setsockopt+0x43f/0x710 [ 211.885579][T10253] ? __pfx_xsk_setsockopt+0x10/0x10 [ 211.885604][T10253] ? __lock_acquire+0xab9/0xd20 [ 211.885645][T10253] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 211.885671][T10253] ? __pfx_xsk_setsockopt+0x10/0x10 [ 211.885700][T10253] do_sock_setsockopt+0x257/0x3e0 [ 211.885727][T10253] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 211.885757][T10253] ? __fget_files+0x2a/0x420 [ 211.885789][T10253] __x64_sys_setsockopt+0x18b/0x220 [ 211.885832][T10253] do_syscall_64+0xfa/0x3b0 [ 211.885849][T10253] ? lockdep_hardirqs_on+0x9c/0x150 [ 211.885880][T10253] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.885900][T10253] ? clear_bhb_loop+0x60/0xb0 [ 211.885926][T10253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.885946][T10253] RIP: 0033:0x7f9446d8e929 [ 211.885972][T10253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.885990][T10253] RSP: 002b:00007f9447c78038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 211.886012][T10253] RAX: ffffffffffffffda RBX: 00007f9446fb5fa0 RCX: 00007f9446d8e929 [ 211.886028][T10253] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 211.886040][T10253] RBP: 00007f9446e10b39 R08: 0000000000000004 R09: 0000000000000000 [ 211.886052][T10253] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.886065][T10253] R13: 0000000000000000 R14: 00007f9446fb5fa0 R15: 00007ffe7a58a308 [ 211.886098][T10253] [ 211.886107][T10253] Mem-Info: [ 212.096946][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 212.098675][T10253] active_anon:4652 inactive_anon:0 isolated_anon:0 [ 212.098675][T10253] active_file:1405 inactive_file:39918 isolated_file:0 [ 212.098675][T10253] unevictable:768 dirty:111 writeback:0 [ 212.098675][T10253] slab_reclaimable:11055 slab_unreclaimable:111998 [ 212.098675][T10253] mapped:28985 shmem:1381 pagetables:1076 [ 212.098675][T10253] sec_pagetables:0 bounce:0 [ 212.098675][T10253] kernel_misc_reclaimable:0 [ 212.098675][T10253] free:1303553 free_pcp:29080 free_cma:0 [ 212.098735][T10253] Node 0 active_anon:18608kB inactive_anon:0kB active_file:5620kB inactive_file:159472kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115940kB dirty:444kB writeback:0kB shmem:3988kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13388kB pagetables:4180kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 212.098792][T10253] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 212.107934][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 212.133877][T10253] Node 0 [ 212.147236][ T9462] bridge_slave_1: left allmulticast mode [ 212.260175][T10253] DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 212.361543][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 212.375542][ T9462] bridge_slave_1: left promiscuous mode [ 212.381927][ T9462] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.384484][T10253] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 212.401053][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 212.410666][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 212.443029][T10253] Node 0 DMA32 free:1291932kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18560kB inactive_anon:0kB active_file:5620kB inactive_file:157644kB unevictable:1536kB writepending:444kB present:3129332kB managed:2561004kB mlocked:0kB bounce:0kB free_pcp:102760kB local_pcp:89584kB free_cma:0kB [ 212.484431][ T9462] bridge_slave_0: left allmulticast mode [ 212.490154][ T9462] bridge_slave_0: left promiscuous mode [ 212.494153][T10253] lowmem_reserve[]: 0 0 1 1 1 [ 212.495997][ T9462] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.509618][T10253] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1828kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 212.556754][T10253] lowmem_reserve[]: 0 0 0 0 0 [ 212.561577][T10253] Node 1 Normal free:3906836kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:14400kB local_pcp:8672kB free_cma:0kB [ 212.686963][T10253] lowmem_reserve[]: 0 0 0 0 0 [ 212.691768][T10253] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 212.743070][T10253] Node 0 DMA32: 533*4kB (ME) 429*8kB (ME) 236*16kB (ME) 501*32kB (UME) 179*64kB (UM) 17*128kB (UM) 6*256kB (UME) 2*512kB (ME) 7*1024kB (UME) 1*2048kB (E) 303*4096kB (M) = 1291868kB [ 212.771728][T10280] __nla_validate_parse: 3 callbacks suppressed [ 212.771747][T10280] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1028'. [ 212.774426][T10253] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 212.812804][T10253] Node 1 Normal: 161*4kB (U) 58*8kB (UME) 44*16kB (UME) 96*32kB (UME) 36*64kB (UME) 4*128kB (UM) 3*256kB (ME) 2*512kB (M) 2*1024kB (ME) 2*2048kB (UE) 950*4096kB (M) = 3906836kB [ 212.836888][T10253] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 212.848473][T10253] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 212.858496][T10253] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 212.868536][T10253] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 212.877950][T10253] 42700 total pagecache pages [ 212.882670][T10253] 0 pages in swap cache [ 212.886952][T10253] Free swap = 124996kB [ 212.891166][T10253] Total swap = 124996kB [ 212.898261][T10253] 2097051 pages RAM [ 212.902106][T10253] 0 pages HighMem/MovableOnly [ 212.906869][T10253] 424694 pages reserved [ 212.911064][T10253] 0 pages cma reserved [ 212.990610][T10286] netlink: 'syz.1.1029': attribute type 1 has an invalid length. [ 213.128412][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805987d400: rx timeout, send abort [ 213.138475][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802ffa9800: rx timeout, send abort [ 213.147560][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802ffa9800: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 213.215061][T10294] netlink: 'syz.1.1031': attribute type 83 has an invalid length. [ 213.283015][ T9462] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.300902][ T9462] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.311911][ T9462] bond0 (unregistering): Released all slaves [ 213.637766][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805987d400: abort rx timeout. Force session deactivation [ 213.691712][T10308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1034'. [ 213.873401][T10312] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 214.030204][T10319] xt_hashlimit: max too large, truncated to 1048576 [ 214.253769][ T9462] hsr_slave_0: left promiscuous mode [ 214.275136][ T9462] hsr_slave_1: left promiscuous mode [ 214.288815][ T9462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.296763][ T9462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.312705][ T9462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.320661][ T9462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.357591][ T9462] veth1_macvtap: left promiscuous mode [ 214.363186][ T9462] veth0_macvtap: left promiscuous mode [ 214.369188][ T9462] veth1_vlan: left promiscuous mode [ 214.374799][ T9462] veth0_vlan: left promiscuous mode [ 214.426516][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802ffaa800: rx timeout, send abort [ 214.435084][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802ffaa800: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 214.544443][ T5846] Bluetooth: hci0: command tx timeout [ 215.017289][ T9462] team0 (unregistering): Port device team_slave_1 removed [ 215.073128][ T9462] team0 (unregistering): Port device team_slave_0 removed [ 215.078470][T10352] netlink: 'syz.4.1048': attribute type 39 has an invalid length. [ 215.580082][T10258] chnl_net:caif_netlink_parms(): no params data found [ 215.765486][T10366] netlink: 'syz.2.1052': attribute type 27 has an invalid length. [ 215.770019][T10367] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1054'. [ 215.801090][T10366] netdevsim netdevsim2: Direct firmware load for ..€ failed with error -2 [ 215.812948][T10366] netdevsim netdevsim2: Falling back to sysfs fallback for: ..€ [ 215.877922][T10258] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.904092][T10258] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.914620][T10258] bridge_slave_0: entered allmulticast mode [ 215.941286][T10258] bridge_slave_0: entered promiscuous mode [ 215.980678][T10258] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.988588][T10258] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.000758][T10258] bridge_slave_1: entered allmulticast mode [ 216.021883][T10258] bridge_slave_1: entered promiscuous mode [ 216.064212][T10379] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1057'. [ 216.081053][T10258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.107775][T10258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.215964][T10258] team0: Port device team_slave_0 added [ 216.225746][T10258] team0: Port device team_slave_1 added [ 216.303132][T10258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.310985][T10258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.348808][T10258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.360991][T10389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1059'. [ 216.363042][T10258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.381765][T10258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.410929][T10389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1059'. [ 216.430533][T10258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.605723][T10397] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1063'. [ 216.620787][T10397] netlink: 'syz.1.1063': attribute type 10 has an invalid length. [ 216.629460][T10397] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1063'. [ 216.634196][ T5841] Bluetooth: hci0: command tx timeout [ 216.680258][T10258] hsr_slave_0: entered promiscuous mode [ 216.687256][T10258] hsr_slave_1: entered promiscuous mode [ 216.693642][T10258] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.701368][T10258] Cannot create hsr debugfs directory [ 216.709718][T10397] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.726419][T10397] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.735774][T10397] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.745285][T10397] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.761394][T10397] team0: Port device geneve0 added [ 216.770821][T10405] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 217.168395][T10415] tipc: Enabling of bearer rejected, failed to enable media [ 217.415654][T10432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1070'. [ 217.667400][T10438] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1072'. [ 217.671908][T10258] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 217.715167][T10258] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 217.748936][T10258] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 217.767562][T10258] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 217.933760][T10456] openvswitch: netlink: Key type 300 is out of range max 32 [ 218.179154][T10258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.246202][T10258] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.269678][T10471] netlink: 'syz.0.1079': attribute type 1 has an invalid length. [ 218.289511][ T9463] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.296744][ T9463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.344659][ T9462] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.351866][ T9462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.501011][T10479] netlink: 'syz.1.1082': attribute type 21 has an invalid length. [ 218.514150][T10479] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1082'. [ 218.704560][ T5841] Bluetooth: hci0: command 0x040f tx timeout [ 218.737635][T10488] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1085'. [ 218.772678][T10492] netlink: 'syz.4.1086': attribute type 11 has an invalid length. [ 218.791338][T10492] netlink: 'syz.4.1086': attribute type 11 has an invalid length. [ 218.802546][T10492] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1086'. [ 218.909892][T10495] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1087'. [ 218.950176][T10495] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1087'. [ 219.132872][T10258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.231922][T10512] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1092'. [ 219.308945][T10258] veth0_vlan: entered promiscuous mode [ 219.358776][T10258] veth1_vlan: entered promiscuous mode [ 219.373165][T10520] sctp: [Deprecated]: syz.0.1094 (pid 10520) Use of struct sctp_assoc_value in delayed_ack socket option. [ 219.373165][T10520] Use struct sctp_sack_info instead [ 219.459459][T10258] veth0_macvtap: entered promiscuous mode [ 219.472812][T10258] veth1_macvtap: entered promiscuous mode [ 219.514367][T10258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.559286][T10258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.573353][T10258] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.582730][T10258] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.596697][T10258] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.608708][T10258] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.621906][T10529] ip6t_srh: unknown srh match flags 536B [ 219.637256][T10529] ip6t_srh: unknown srh match flags 536B [ 219.652535][T10531] IPVS: set_ctl: invalid protocol: 136 172.20.20.170:20000 [ 219.746118][ T9461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.787480][ T9461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.841465][ T6481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.851407][ T6481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.147086][T10553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1103'. [ 220.450010][T10570] netlink: 'syz.2.1108': attribute type 1 has an invalid length. [ 220.451994][T10569] netlink: 'syz.1.1109': attribute type 33 has an invalid length. [ 220.458229][T10570] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1108'. [ 220.486173][T10569] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1109'. [ 220.614840][T10578] xt_hashlimit: max too large, truncated to 1048576 [ 220.856215][ T6473] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.323311][ T6473] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.669010][ T6473] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.951764][T10599] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 221.984575][ T6473] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.044040][T10608] netdevsim netdevsim0 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 222.146064][T10611] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1118'. [ 222.358748][ T6473] bridge_slave_1: left allmulticast mode [ 222.379114][ T6473] bridge_slave_1: left promiscuous mode [ 222.397155][ T6473] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.425811][ T6473] bridge_slave_0: left allmulticast mode [ 222.443862][ T6473] bridge_slave_0: left promiscuous mode [ 222.462583][ T6473] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.613774][T10629] netlink: 'syz.4.1123': attribute type 10 has an invalid length. [ 222.683651][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 222.693616][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 222.702190][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 222.711432][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 222.719645][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 222.979696][ T6473] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.990930][ T6473] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.002220][ T6473] bond0 (unregistering): Released all slaves [ 223.017712][T10624] tipc: Cannot configure node identity twice [ 223.184576][T10644] netlink: 'syz.0.1126': attribute type 1 has an invalid length. [ 223.270004][T10650] netlink: 'syz.2.1129': attribute type 1 has an invalid length. [ 223.288482][T10650] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 223.642124][T10671] netlink: 'syz.0.1136': attribute type 1 has an invalid length. [ 223.660283][T10671] netlink: 'syz.0.1136': attribute type 1 has an invalid length. [ 223.670361][T10671] netlink: 'syz.0.1136': attribute type 1 has an invalid length. [ 223.700387][T10671] netlink: 'syz.0.1136': attribute type 2 has an invalid length. [ 223.727095][T10671] __nla_validate_parse: 3 callbacks suppressed [ 223.727112][T10671] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1136'. [ 224.044881][T10687] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1141'. [ 224.172443][T10692] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1144'. [ 224.272174][ T6473] hsr_slave_0: left promiscuous mode [ 224.290593][ T6473] hsr_slave_1: left promiscuous mode [ 224.301537][ T6473] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.312045][ T6473] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.320513][ T6473] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.330057][ T6473] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.386351][ T6473] veth1_macvtap: left promiscuous mode [ 224.401888][ T6473] veth0_macvtap: left promiscuous mode [ 224.409824][ T6473] veth1_vlan: left promiscuous mode [ 224.415474][ T6473] veth0_vlan: left promiscuous mode [ 224.798418][ T5841] Bluetooth: hci0: command tx timeout [ 224.973314][ T6473] team0 (unregistering): Port device team_slave_1 removed [ 225.014916][ T6473] team0 (unregistering): Port device team_slave_0 removed [ 225.489713][T10693] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.557300][T10693] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.569844][T10693] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.579017][T10693] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.595037][T10693] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.696876][ T9239] syz1: Port: 1 Link DOWN [ 225.825207][T10723] x_tables: ip_tables: osf match: only valid for protocol 6 [ 225.899277][T10636] chnl_net:caif_netlink_parms(): no params data found [ 225.925745][T10723] netlink: 'syz.4.1149': attribute type 2 has an invalid length. [ 226.306081][T10745] netdevsim netdevsim1: Direct firmware load for /.€ failed with error -2 [ 226.320178][T10636] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.356569][T10745] netdevsim netdevsim1: Falling back to sysfs fallback for: /.€ [ 226.358198][T10636] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.399924][T10636] bridge_slave_0: entered allmulticast mode [ 226.425122][T10636] bridge_slave_0: entered promiscuous mode [ 226.465710][T10636] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.472932][T10636] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.504639][T10751] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 226.514344][T10636] bridge_slave_1: entered allmulticast mode [ 226.534525][T10636] bridge_slave_1: entered promiscuous mode [ 226.747033][T10636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.764682][T10636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.874450][ T5841] Bluetooth: hci0: command tx timeout [ 226.890281][T10636] team0: Port device team_slave_0 added [ 226.913130][T10636] team0: Port device team_slave_1 added [ 226.935838][T10780] netlink: 'syz.4.1164': attribute type 1 has an invalid length. [ 227.000438][T10780] 8021q: adding VLAN 0 to HW filter on device bond3 [ 227.010476][T10636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.017942][T10636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.045223][T10636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.071984][T10780] bond3: (slave ip6erspan0): making interface the new active one [ 227.084581][T10780] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 227.098654][T10636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.107646][T10636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.135090][T10636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.140496][T10780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1164'. [ 227.209219][T10780] macvlan3: entered promiscuous mode [ 227.217157][T10780] macvlan3: entered allmulticast mode [ 227.261190][T10636] hsr_slave_0: entered promiscuous mode [ 227.277727][T10636] hsr_slave_1: entered promiscuous mode [ 227.292007][T10636] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.310813][T10636] Cannot create hsr debugfs directory [ 227.661598][T10808] xt_SECMARK: invalid mode: 0 [ 227.793324][T10811] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1174'. [ 228.219808][T10841] erspan0: entered promiscuous mode [ 228.237333][T10841] erspan0: entered allmulticast mode [ 228.246890][T10636] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 228.248929][T10841] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 228.275633][T10636] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 228.316668][T10636] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 228.342400][T10636] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 228.473400][T10857] vxcan1: entered allmulticast mode [ 228.523637][T10861] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1189'. [ 228.592119][T10636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.681586][T10870] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 228.711859][T10636] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.736847][T10870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1193'. [ 228.754690][ T6473] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.761984][ T6473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.772332][ T6473] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.779568][ T6473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.947407][ T5841] Bluetooth: hci0: command tx timeout [ 228.966002][T10636] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 229.172761][T10892] 8021q: adding VLAN 0 to HW filter on device bond2 [ 229.182342][T10892] bond0: (slave bond2): Enslaving as an active interface with an up link [ 229.410167][T10908] netlink: 18 bytes leftover after parsing attributes in process `syz.4.1203'. [ 229.477891][T10636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.553399][T10918] set match dimension is over the limit! [ 229.576395][T10636] veth0_vlan: entered promiscuous mode [ 229.622949][T10636] veth1_vlan: entered promiscuous mode [ 229.657686][T10923] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1209'. [ 229.683756][T10922] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1209'. [ 229.742764][T10636] veth0_macvtap: entered promiscuous mode [ 229.761013][T10923] tipc: Enabled bearer , priority 12 [ 229.773755][T10926] tipc: Enabling of bearer rejected, already enabled [ 229.800072][T10923] gtp0: entered promiscuous mode [ 229.810608][T10923] gtp0: entered allmulticast mode [ 229.839740][T10930] netlink: 'syz.2.1210': attribute type 5 has an invalid length. [ 229.875020][T10636] veth1_macvtap: entered promiscuous mode [ 229.956501][T10636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.992618][T10636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.041418][T10636] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.066712][T10936] netlink: 'syz.2.1213': attribute type 4 has an invalid length. [ 230.074573][T10636] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.083388][T10636] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.103216][T10940] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1216'. [ 230.103744][T10636] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.113418][T10938] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1214'. [ 230.158149][T10938] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1214'. [ 230.409322][ T9467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.440876][ T9467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.498179][ T9470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.517965][ T9470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.600475][T10960] tipc: Enabled bearer , priority 10 [ 230.859853][T10980] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1227'. [ 230.963543][T10987] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 231.096457][T10992] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 231.137097][T10992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1232'. [ 231.148989][T10992] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1232'. [ 231.409705][T11007] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 231.715641][ T5906] tipc: Node number set to 4269801514 [ 231.906644][ T6477] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.351625][ T6477] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.480680][ T6477] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.543203][ T6477] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.726725][ T6477] bridge_slave_1: left allmulticast mode [ 232.732406][ T6477] bridge_slave_1: left promiscuous mode [ 232.740452][ T6477] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.749903][ T6477] bridge_slave_0: left allmulticast mode [ 232.756069][ T6477] bridge_slave_0: left promiscuous mode [ 232.761820][ T6477] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.253049][ T6477] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.279638][ T6477] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.300557][ T6477] bond0 (unregistering): Released all slaves [ 233.568672][T11063] SET target dimension over the limit! [ 233.587384][T11058] macvtap1: entered promiscuous mode [ 233.593216][T11058] vlan0: entered promiscuous mode [ 233.644997][T11058] macvtap1: entered allmulticast mode [ 233.650455][T11058] vlan0: entered allmulticast mode [ 233.693859][T11058] veth0_vlan: entered allmulticast mode [ 233.844945][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 233.854900][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 233.866980][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 233.881601][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 233.902266][T11078] __nla_validate_parse: 2 callbacks suppressed [ 233.902284][T11078] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1256'. [ 233.932799][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 234.334426][T11095] netlink: 'syz.1.1263': attribute type 1 has an invalid length. [ 234.348249][T11096] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1264'. [ 234.422213][T11103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1263'. [ 234.442020][T11095] 8021q: adding VLAN 0 to HW filter on device bond4 [ 234.700612][T11111] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1265'. [ 234.822589][T11119] openvswitch: netlink: Duplicate or invalid key (type 0). [ 234.833188][T11119] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 234.893633][ T6477] hsr_slave_0: left promiscuous mode [ 234.911959][ T6477] hsr_slave_1: left promiscuous mode [ 234.930782][ T6477] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.953377][ T6477] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.964224][T11121] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1266'. [ 234.979628][ T6477] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.996914][ T6477] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.090965][ T6477] veth1_macvtap: left promiscuous mode [ 235.096835][ T6477] veth0_macvtap: left promiscuous mode [ 235.102637][ T6477] veth1_vlan: left promiscuous mode [ 235.109515][ T6477] veth0_vlan: left promiscuous mode [ 235.642900][ T6477] team0 (unregistering): Port device team_slave_1 removed [ 235.688918][ T6477] team0 (unregistering): Port device team_slave_0 removed [ 235.984628][ T5846] Bluetooth: hci0: command tx timeout [ 236.230740][T11130] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:0 [ 236.391805][T11072] chnl_net:caif_netlink_parms(): no params data found [ 236.674363][T11148] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1273'. [ 236.891331][T11160] netlink: 'syz.4.1275': attribute type 11 has an invalid length. [ 236.949437][T11160] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1275'. [ 237.035951][T11072] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.056226][T11072] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.065396][T11072] bridge_slave_0: entered allmulticast mode [ 237.073261][T11072] bridge_slave_0: entered promiscuous mode [ 237.090012][T11072] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.098640][T11072] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.112350][T11072] bridge_slave_1: entered allmulticast mode [ 237.130273][T11072] bridge_slave_1: entered promiscuous mode [ 237.412212][T11072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.426336][T11072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.545771][T11072] team0: Port device team_slave_0 added [ 237.581176][T11072] team0: Port device team_slave_1 added [ 237.595686][T11188] netlink: 'syz.1.1281': attribute type 11 has an invalid length. [ 237.620386][T11188] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1281'. [ 237.801599][T11072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.802428][T11188] netlink: 'syz.1.1281': attribute type 11 has an invalid length. [ 237.822774][T11188] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1281'. [ 237.823897][T11072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.891867][T11072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.937923][T11072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.950384][T11072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.978908][T11072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.020592][T11188] netlink: 'syz.1.1281': attribute type 11 has an invalid length. [ 238.044385][T11188] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1281'. [ 238.064146][ T5846] Bluetooth: hci0: command tx timeout [ 238.158812][T11072] hsr_slave_0: entered promiscuous mode [ 238.185175][T11072] hsr_slave_1: entered promiscuous mode [ 238.191564][T11072] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.203040][T11072] Cannot create hsr debugfs directory [ 238.237857][T11188] netlink: 'syz.1.1281': attribute type 11 has an invalid length. [ 238.376316][T11188] netlink: 'syz.1.1281': attribute type 11 has an invalid length. [ 238.651732][T11221] openvswitch: netlink: Message has -1 unknown bytes. [ 238.785713][T11226] netlink: 'syz.4.1294': attribute type 11 has an invalid length. [ 238.885450][T11229] netlink: 'syz.2.1293': attribute type 4 has an invalid length. [ 238.990840][T11233] __nla_validate_parse: 4 callbacks suppressed [ 238.990859][T11233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1295'. [ 239.058718][T11238] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1296'. [ 239.447329][T11259] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1303'. [ 239.486698][T11072] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 239.513590][T11072] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 239.541487][T11072] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 239.596296][T11072] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 239.836048][T11072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.884255][T11282] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1309'. [ 239.921743][T11072] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.962414][ T9467] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.969772][ T9467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.019412][ T9470] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.026765][ T9470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.167392][ T5846] Bluetooth: hci0: command tx timeout [ 240.265744][T11306] netlink: 496 bytes leftover after parsing attributes in process `syz.2.1316'. [ 240.359024][T11305] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1314'. [ 240.590748][T11321] netlink: 'syz.2.1321': attribute type 1 has an invalid length. [ 240.612542][T11321] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1321'. [ 240.640987][T11321] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1321'. [ 240.817226][T11072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.994959][T11072] veth0_vlan: entered promiscuous mode [ 241.044131][T11072] veth1_vlan: entered promiscuous mode [ 241.152702][T11072] veth0_macvtap: entered promiscuous mode [ 241.191325][T11072] veth1_macvtap: entered promiscuous mode [ 241.224772][T11351] unknown channel width for channel at 909000KHz? [ 241.260938][T11350] gtp1: entered promiscuous mode [ 241.270577][T11350] gtp1: entered allmulticast mode [ 241.302304][T11072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.312395][T11350] netlink: 'syz.0.1332': attribute type 1 has an invalid length. [ 241.331738][T11072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.392950][T11072] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.415089][T11072] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.442311][T11072] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.464109][T11072] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.544494][T11364] nbd: must specify an index to disconnect [ 241.754838][ T3560] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.769391][ T3560] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.830034][T11379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1340'. [ 241.897764][ T3560] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.922130][ T3560] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.235738][T11387] can: request_module (can-proto-0) failed. [ 242.385080][T11396] nbd0: detected capacity change from 0 to 63 [ 242.449115][ T5846] block nbd0: Receive control failed (result -32) [ 242.717119][T11417] gtp2: entered promiscuous mode [ 242.854640][ T9467] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.883351][T11419] tipc: Cannot configure node identity twice [ 243.051780][ T9467] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.198459][ T9467] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.288088][ T9467] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.421799][ T9467] bridge_slave_1: left allmulticast mode [ 243.432177][ T9467] bridge_slave_1: left promiscuous mode [ 243.439184][ T9467] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.449234][ T9467] bridge_slave_0: left allmulticast mode [ 243.455435][ T9467] bridge_slave_0: left promiscuous mode [ 243.461174][ T9467] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.768099][ T9467] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.781860][ T9467] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.792119][ T9467] bond0 (unregistering): Released all slaves [ 244.136271][ T9467] hsr_slave_0: left promiscuous mode [ 244.142210][ T9467] hsr_slave_1: left promiscuous mode [ 244.149027][ T9467] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.156871][ T9467] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.227476][ T9467] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.252041][ T9467] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.261934][T11431] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1354'. [ 244.329845][ T9467] veth1_macvtap: left promiscuous mode [ 244.347644][ T9467] veth0_macvtap: left promiscuous mode [ 244.365404][T11438] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1353'. [ 244.367038][ T9467] veth1_vlan: left promiscuous mode [ 244.375299][T11438] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1353'. [ 244.400224][ T9467] veth0_vlan: left promiscuous mode [ 244.799065][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 244.808144][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 244.823286][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 244.831884][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 244.842261][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 245.003702][ T9467] team0 (unregistering): Port device team_slave_1 removed [ 245.041630][ T9467] team0 (unregistering): Port device team_slave_0 removed [ 245.503716][T11450] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1357'. [ 245.708246][T11461] Bluetooth: MGMT ver 1.23 [ 245.713379][T11461] netlink: 'syz.4.1361': attribute type 11 has an invalid length. [ 246.024252][T11473] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1364'. [ 246.057561][T11475] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 246.252813][T11478] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 246.569672][T11491] netlink: 'syz.1.1368': attribute type 11 has an invalid length. [ 246.611810][T11491] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1368'. [ 246.661615][T11494] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1370'. [ 246.808322][T11491] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1368'. [ 246.883881][ T5846] Bluetooth: hci0: command tx timeout [ 247.127589][T11506] netlink: 'syz.1.1373': attribute type 4 has an invalid length. [ 247.143108][T11447] chnl_net:caif_netlink_parms(): no params data found [ 247.216454][T11509] netlink: 'syz.1.1373': attribute type 1 has an invalid length. [ 247.755765][T11447] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.788374][T11447] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.812713][T11447] bridge_slave_0: entered allmulticast mode [ 247.828629][T11535] openvswitch: netlink: IP tunnel dst address not specified [ 247.832544][T11447] bridge_slave_0: entered promiscuous mode [ 247.861877][T11447] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.886833][T11447] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.928122][T11447] bridge_slave_1: entered allmulticast mode [ 247.953551][T11447] bridge_slave_1: entered promiscuous mode [ 248.011780][T11548] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1382'. [ 248.190663][T11447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.231309][T11447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.452017][T11447] team0: Port device team_slave_0 added [ 248.478738][T11568] netlink: 'syz.4.1387': attribute type 12 has an invalid length. [ 248.535325][T11447] team0: Port device team_slave_1 added [ 248.702825][ T9231] IPVS: starting estimator thread 0... [ 248.729322][T11588] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1389'. [ 248.740788][T11447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.771177][T11447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.804725][T11586] IPVS: using max 25 ests per chain, 60000 per kthread [ 248.832880][T11447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.853512][T11447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.873884][T11447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.946784][ T5846] Bluetooth: hci0: command tx timeout [ 249.023173][T11447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.177090][T11604] netlink: 'syz.1.1393': attribute type 2 has an invalid length. [ 249.287959][T11447] hsr_slave_0: entered promiscuous mode [ 249.299993][T11447] hsr_slave_1: entered promiscuous mode [ 249.317220][T11447] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 249.384101][T11447] Cannot create hsr debugfs directory [ 249.427783][T11620] __nla_validate_parse: 1 callbacks suppressed [ 249.427804][T11620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1398'. [ 249.543120][T11621] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1396'. [ 249.567002][T11618] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1396'. [ 250.075274][T11647] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1405'. [ 250.172726][T11656] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1407'. [ 250.186589][T11652] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1405'. [ 250.410616][T11447] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 250.448548][T11447] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 250.475984][T11663] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1408'. [ 250.493382][T11447] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 250.555008][T11447] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 250.779272][T11680] netlink: 'syz.4.1412': attribute type 1 has an invalid length. [ 250.844415][T11680] netlink: 'syz.4.1412': attribute type 1 has an invalid length. [ 250.852222][T11680] netlink: 'syz.4.1412': attribute type 1 has an invalid length. [ 250.884437][T11680] netlink: 'syz.4.1412': attribute type 1 has an invalid length. [ 250.902244][T11447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.907164][T11680] netlink: 'syz.4.1412': attribute type 1 has an invalid length. [ 250.919663][T11686] netlink: 'syz.2.1414': attribute type 19 has an invalid length. [ 250.969834][T11447] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.005710][ T1037] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.013050][ T1037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.025084][ T5846] Bluetooth: hci0: command tx timeout [ 251.138086][ T9460] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.145313][ T9460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.258787][T11698] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 251.343282][T11709] netlink: 'syz.2.1420': attribute type 1 has an invalid length. [ 251.419729][T11716] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1420'. [ 251.420452][T11709] 8021q: adding VLAN 0 to HW filter on device bond3 [ 251.520020][T11709] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1420'. [ 252.141231][T11735] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1424'. [ 252.237782][T11447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.345731][T11447] veth0_vlan: entered promiscuous mode [ 252.385249][T11447] veth1_vlan: entered promiscuous mode [ 252.465059][T11447] veth0_macvtap: entered promiscuous mode [ 252.499349][T11447] veth1_macvtap: entered promiscuous mode [ 252.514784][T11748] netlink: 'syz.2.1429': attribute type 11 has an invalid length. [ 252.665322][T11447] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.678095][T11447] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.732379][T11447] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.741828][T11447] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.752420][T11447] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.783837][T11447] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.891435][T11760] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 253.041609][T11771] netlink: 'syz.1.1435': attribute type 1 has an invalid length. [ 253.081740][T11767] vlan2: entered allmulticast mode [ 253.105772][ T5846] Bluetooth: hci0: command tx timeout [ 253.141688][ T9460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.183852][ T9460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.249758][ T9470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.272090][ T9470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.416994][T11788] ipvlan2: entered promiscuous mode [ 253.435578][T11788] bridge0: port 1(ipvlan2) entered blocking state [ 253.442293][T11788] bridge0: port 1(ipvlan2) entered disabled state [ 253.450440][T11788] ipvlan2: entered allmulticast mode [ 253.456353][T11788] bridge0: entered allmulticast mode [ 253.466085][T11788] ipvlan2: left allmulticast mode [ 253.471247][T11788] bridge0: left allmulticast mode [ 253.517952][T11787] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 253.996396][T11793] dummy0: entered allmulticast mode [ 254.309872][T11807] tap0: tun_chr_ioctl cmd 1074025672 [ 254.326596][T11807] tap0: ignored: set checksum disabled [ 254.566067][T11821] netlink: 'syz.0.1447': attribute type 12 has an invalid length. [ 254.575865][T11821] netlink: 'syz.0.1447': attribute type 29 has an invalid length. [ 254.583724][T11821] __nla_validate_parse: 3 callbacks suppressed [ 254.583737][T11821] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1447'. [ 254.637743][T11829] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1447'. [ 254.646081][T11821] netlink: 39 bytes leftover after parsing attributes in process `syz.0.1447'. [ 254.666185][T11831] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1450'. [ 254.683368][T11831] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1450'. [ 254.841539][T11843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1452'. [ 254.881394][T11844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1452'. [ 255.090911][ T9467] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.227554][ T9467] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.449400][ T9467] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.537445][ T9467] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.707064][ T9467] bridge_slave_1: left allmulticast mode [ 255.712748][ T9467] bridge_slave_1: left promiscuous mode [ 255.738597][ T9467] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.748668][ T9467] bridge_slave_0: left allmulticast mode [ 255.761989][ T9467] bridge_slave_0: left promiscuous mode [ 255.770125][ T9467] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.150003][ T9467] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.160949][ T9467] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.171810][ T9467] bond0 (unregistering): Released all slaves [ 256.581026][T11874] validate_nla: 3 callbacks suppressed [ 256.581046][T11874] netlink: 'syz.1.1456': attribute type 3 has an invalid length. [ 256.629183][ T9467] hsr_slave_0: left promiscuous mode [ 256.651294][T11882] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 256.660201][ T9467] hsr_slave_1: left promiscuous mode [ 256.668223][ T9467] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.677397][ T9467] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.705725][ T9467] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.713186][ T9467] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.782085][ T9467] veth1_macvtap: left promiscuous mode [ 256.799390][ T9467] veth0_macvtap: left promiscuous mode [ 256.805321][ T9467] veth1_vlan: left promiscuous mode [ 256.810949][ T9467] veth0_vlan: left promiscuous mode [ 257.012794][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 257.023479][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 257.031834][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 257.047173][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 257.056469][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 257.107310][ T5838] page_pool_release_retry() stalled pool shutdown: id 61, 1 inflight 60 sec [ 257.371515][ T9467] team0 (unregistering): Port device team_slave_1 removed [ 257.408529][ T9467] team0 (unregistering): Port device team_slave_0 removed [ 257.885959][T11897] ipt_rpfilter: unknown options [ 257.894163][T11898] netlink: 'syz.4.1461': attribute type 2 has an invalid length. [ 258.002995][T11904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1463'. [ 258.341863][T11923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1469'. [ 258.351965][T11922] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 258.723166][T11943] xt_time: unknown flags 0x4 [ 258.924961][T11893] chnl_net:caif_netlink_parms(): no params data found [ 259.051187][T11957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1479'. [ 259.087729][T11960] netlink: 'syz.2.1480': attribute type 1 has an invalid length. [ 259.105810][ T5841] Bluetooth: hci0: command tx timeout [ 259.167768][T11967] netlink: 'syz.4.1482': attribute type 7 has an invalid length. [ 259.174464][T11957] syzkaller0: entered promiscuous mode [ 259.181023][T11957] syzkaller0: entered allmulticast mode [ 259.358956][T11981] sctp: [Deprecated]: syz.0.1483 (pid 11981) Use of struct sctp_assoc_value in delayed_ack socket option. [ 259.358956][T11981] Use struct sctp_sack_info instead [ 261.103226][T11967] : entered promiscuous mode [ 261.184197][ T5841] Bluetooth: hci0: command tx timeout [ 261.243185][T11893] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.259093][T11893] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.286685][T11893] bridge_slave_0: entered allmulticast mode [ 261.306009][T11893] bridge_slave_0: entered promiscuous mode [ 261.331983][T12007] __nla_validate_parse: 2 callbacks suppressed [ 261.332000][T12007] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1492'. [ 261.356486][T11893] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.363666][T11893] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.391632][T11893] bridge_slave_1: entered allmulticast mode [ 261.406320][T11893] bridge_slave_1: entered promiscuous mode [ 261.556555][T11893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.600642][T11893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.705625][T11893] team0: Port device team_slave_0 added [ 261.735872][T11893] team0: Port device team_slave_1 added [ 261.834708][T11893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.841740][T11893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.869659][T11893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.902030][T11893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.911544][T11893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.960411][T11893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.139971][T12056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1508'. [ 262.160543][T12058] netlink: 'syz.2.1509': attribute type 5 has an invalid length. [ 262.162070][T11893] hsr_slave_0: entered promiscuous mode [ 262.168697][T12056] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1508'. [ 262.176142][T12058] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1509'. [ 262.207057][T11893] hsr_slave_1: entered promiscuous mode [ 262.213748][T11893] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.228661][T11893] Cannot create hsr debugfs directory [ 262.365915][T12064] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1510'. [ 262.586736][T12072] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1511'. [ 262.701646][T12077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1514'. [ 262.749010][T12079] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1515'. [ 262.782959][T12077] bridge_slave_1 (unregistering): left allmulticast mode [ 262.792218][T12077] bridge_slave_1 (unregistering): left promiscuous mode [ 262.799515][T12077] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.853491][T12086] netlink: 'syz.4.1517': attribute type 12 has an invalid length. [ 262.898121][T12086] netlink: 'syz.4.1517': attribute type 1 has an invalid length. [ 262.906031][T12086] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1517'. [ 262.987350][T12090] xt_hashlimit: size too large, truncated to 1048576 [ 263.055497][T12090] Cannot find add_set index 2 as target [ 263.082223][T12094] netlink: 'syz.1.1519': attribute type 1 has an invalid length. [ 263.107415][T12094] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1519'. [ 263.116805][T12095] : renamed from bridge_slave_0 [ 263.132385][T12094] netlink: 'syz.1.1519': attribute type 1 has an invalid length. [ 263.264793][ T5841] Bluetooth: hci0: command tx timeout [ 263.332020][T11893] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 263.358747][T11893] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 263.388982][T11893] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 263.453230][T11893] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 263.637728][T12121] netlink: 'syz.1.1527': attribute type 24 has an invalid length. [ 263.822461][T11893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.968257][T11893] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.018102][ T6473] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.025355][ T6473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.085577][ T6473] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.092815][ T6473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.341651][T12147] syzkaller0: entered promiscuous mode [ 264.356397][T12147] syzkaller0: entered allmulticast mode [ 265.344092][ T5841] Bluetooth: hci0: command tx timeout [ 266.201748][T12151] ip6gre1: entered allmulticast mode [ 267.581498][T12181] netlink: 'syz.1.1541': attribute type 39 has an invalid length. [ 267.880246][T12195] __nla_validate_parse: 3 callbacks suppressed [ 267.880266][T12195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1545'. [ 267.896936][T12195] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1545'. [ 267.917234][T12195] IPVS: length: 8 != 61342120 [ 267.980291][T11893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.147028][T11893] veth0_vlan: entered promiscuous mode [ 268.160890][T11893] veth1_vlan: entered promiscuous mode [ 268.281997][T11893] veth0_macvtap: entered promiscuous mode [ 268.321272][T11893] veth1_macvtap: entered promiscuous mode [ 268.400509][T11893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.454800][T11893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.495941][T11893] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.526440][T11893] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.561770][T11893] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.591721][T11893] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.883078][T12210] pimreg3: entered allmulticast mode [ 268.888872][ T9460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.904788][ T9460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.020306][T12219] netlink: 'syz.2.1554': attribute type 3 has an invalid length. [ 269.030999][ T6473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.043072][T12219] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1554'. [ 269.046903][ T6473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.095924][T12223] sch_tbf: burst 4398 is lower than device lo mtu (65499) ! [ 269.200119][T12231] netlink: 'syz.1.1555': attribute type 1 has an invalid length. [ 269.315337][T12231] gretap1: entered promiscuous mode [ 269.691516][T12257] netlink: 'syz.1.1562': attribute type 1 has an invalid length. [ 269.797278][T12257] 8021q: adding VLAN 0 to HW filter on device bond5 [ 269.862182][T12262] bond5: (slave ip6erspan0): making interface the new active one [ 269.907398][T12262] bond5: (slave ip6erspan0): Enslaving as an active interface with an up link [ 269.925784][T12264] gretap1: entered promiscuous mode [ 269.936205][T12264] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 270.012769][ T9459] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.139194][T12257] macvlan2: entered promiscuous mode [ 270.183977][T12257] macvlan2: entered allmulticast mode [ 270.190443][T12257] bond5: entered promiscuous mode [ 270.201295][T12257] ip6erspan0: entered promiscuous mode [ 270.208325][T12257] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 270.227850][T12257] bond5: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 270.250518][T12257] bond5: left promiscuous mode [ 270.256256][T12257] ip6erspan0: left promiscuous mode [ 270.332983][ T9459] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.469839][ T9459] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.556141][ T9459] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.647589][ T9459] bridge_slave_1: left allmulticast mode [ 270.653270][ T9459] bridge_slave_1: left promiscuous mode [ 270.659542][ T9459] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.669014][ T9459] bridge_slave_0: left allmulticast mode [ 270.676059][ T9459] bridge_slave_0: left promiscuous mode [ 270.681782][ T9459] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.982457][ T9459] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 270.999003][ T9459] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.010147][ T9459] bond0 (unregistering): Released all slaves [ 271.417220][ T9459] hsr_slave_0: left promiscuous mode [ 271.423111][ T9459] hsr_slave_1: left promiscuous mode [ 271.429527][ T9459] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.437173][ T9459] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.446240][ T9459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.453691][ T9459] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.476911][ T9459] veth1_macvtap: left promiscuous mode [ 271.482486][ T9459] veth0_macvtap: left promiscuous mode [ 271.488804][ T9459] veth1_vlan: left promiscuous mode [ 271.494317][ T9459] veth0_vlan: left promiscuous mode [ 271.681019][T12273] xt_CT: You must specify a L4 protocol and not use inversions on it [ 272.192424][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 272.208192][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 272.220734][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 272.230027][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 272.239022][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 272.423964][ T9459] team0 (unregistering): Port device team_slave_1 removed [ 272.494369][ T9459] team0 (unregistering): Port device team_slave_0 removed [ 272.620718][T12304] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1571'. [ 273.386384][T12320] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.423915][T12320] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.455048][T12320] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.468861][T12320] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.558338][T12320] team0: Port device geneve0 removed [ 273.589421][T12320] bond5: (slave ip6erspan0): Releasing active interface [ 273.599590][T12320] bond5: (slave ip6erspan0): the permanent HWaddr of slave - ee:52:f2:9a:4b:2f - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 273.664397][T12320] bond5: (slave gretap1): making interface the new active one [ 273.740120][T12320] bond5: (slave gretap1): Releasing active interface [ 274.237420][T12363] x_tables: duplicate underflow at hook 1 [ 274.250998][T12356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1588'. [ 274.272688][T12356] SET target dimension over the limit! [ 274.301706][T12297] chnl_net:caif_netlink_parms(): no params data found [ 274.316099][ T5841] Bluetooth: hci0: command tx timeout [ 274.575242][T12297] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.582710][T12297] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.596202][T12297] bridge_slave_0: entered allmulticast mode [ 274.606202][T12382] netlink: 912 bytes leftover after parsing attributes in process `syz.4.1594'. [ 274.608973][T12297] bridge_slave_0: entered promiscuous mode [ 274.624523][T12382] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1594'. [ 274.631377][T12297] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.643727][T12297] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.656856][T12297] bridge_slave_1: entered allmulticast mode [ 274.669620][T12297] bridge_slave_1: entered promiscuous mode [ 274.680991][T12378] netlink: 'syz.0.1593': attribute type 3 has an invalid length. [ 274.692547][T12378] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1593'. [ 274.777507][T12297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.797341][T12297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.897869][T12297] team0: Port device team_slave_0 added [ 274.928499][T12297] team0: Port device team_slave_1 added [ 274.957997][T12396] Bluetooth: MGMT ver 1.23 [ 275.066151][T12297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.082709][T12297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.110110][T12297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.122992][T12403] netlink: 51 bytes leftover after parsing attributes in process `syz.2.1599'. [ 275.141127][T12297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.154620][T12297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.191087][T12297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.370326][T12297] hsr_slave_0: entered promiscuous mode [ 275.378845][T12297] hsr_slave_1: entered promiscuous mode [ 275.395031][T12297] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 275.413023][T12297] Cannot create hsr debugfs directory [ 275.486315][T12420] netlink: 'syz.1.1605': attribute type 6 has an invalid length. [ 275.506990][T12420] netlink: 'syz.1.1605': attribute type 1 has an invalid length. [ 275.522838][T12420] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.1605'. [ 275.642286][T12425] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1607'. [ 275.679330][T12427] netlink: 'syz.0.1608': attribute type 4 has an invalid length. [ 275.816219][T12430] Bluetooth: MGMT ver 1.23 [ 275.831319][T12430] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1609'. [ 275.862255][T12432] veth0: entered promiscuous mode [ 275.899469][T12432] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1610'. [ 275.997824][T12432] veth0: left promiscuous mode [ 276.004693][T12443] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1613'. [ 276.386042][ T5841] Bluetooth: hci0: command tx timeout [ 276.393455][T12473] 0ªX¹¦D: renamed from gretap0 [ 276.425885][T12473] 0ªX¹¦D: entered allmulticast mode [ 276.450480][T12473] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 276.462707][T12477] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input5 [ 276.788029][T12492] xt_HMARK: spi-set and port-set can't be combined [ 276.828766][T12297] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 276.874391][T12297] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 276.887256][T12496] mac80211_hwsim hwsim10 wlan1: left promiscuous mode [ 276.894759][T12496] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 276.902327][T12297] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 276.920038][T12297] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 277.061828][T12507] netlink: 'syz.1.1631': attribute type 5 has an invalid length. [ 277.108332][T12507] netem: invalid attributes len -24 [ 277.125777][T12507] netem: change failed [ 277.301074][T12297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.408652][T12297] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.432748][ T6473] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.440103][ T6473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.512114][ T6473] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.519392][ T6473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.026932][T12548] netlink: 'syz.1.1642': attribute type 1 has an invalid length. [ 278.042817][T12297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.317233][T12297] veth0_vlan: entered promiscuous mode [ 278.342133][T12297] veth1_vlan: entered promiscuous mode [ 278.366796][T12559] lo: entered promiscuous mode [ 278.384660][T12559] netlink: 'syz.0.1647': attribute type 2 has an invalid length. [ 278.392463][T12559] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 278.462765][T12297] veth0_macvtap: entered promiscuous mode [ 278.465574][ T5841] Bluetooth: hci0: command tx timeout [ 278.493556][T12561] tipc: Enabling of bearer rejected, media not registered [ 278.511298][T12297] veth1_macvtap: entered promiscuous mode [ 278.548303][T12297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.565371][T12297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.576718][T12297] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.593940][T12297] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.610435][T12297] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.654184][T12297] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.911912][ T6473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.937468][ T6473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.002510][ T9459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.027947][ T9459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.463613][T12602] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 279.584342][T12606] __nla_validate_parse: 9 callbacks suppressed [ 279.584363][T12606] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1664'. [ 279.662523][T12612] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1666'. [ 279.916339][T12587] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 279.957729][T12628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1673'. [ 279.974485][T12628] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1673'. [ 280.028218][T12624] can: request_module (can-proto-5) failed. [ 280.071742][T12634] x_tables: duplicate underflow at hook 3 [ 280.088930][T12632] netlink: 'syz.2.1674': attribute type 11 has an invalid length. [ 280.206597][T12640] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1677'. [ 280.539811][ T9467] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.612029][T12649] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 280.651607][T12649] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 280.748483][ T9467] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.837219][ T9467] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.138835][ T9467] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.184108][ C1] ================================================================== [ 281.192230][ C1] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x471/0x4b0 [ 281.200153][ C1] Read of size 2 at addr ffff88806da4fc2a by task swapper/1/0 [ 281.207639][ C1] [ 281.210007][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc3-syzkaller-00144-gbd475eeaaf3c #0 PREEMPT(full) [ 281.210033][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 281.210046][ C1] Call Trace: [ 281.210055][ C1] [ 281.210064][ C1] dump_stack_lvl+0x189/0x250 [ 281.210100][ C1] ? __virt_addr_valid+0x1c8/0x5c0 [ 281.210120][ C1] ? rcu_is_watching+0x15/0xb0 [ 281.210152][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 281.210183][ C1] ? rcu_is_watching+0x15/0xb0 [ 281.210214][ C1] ? lock_release+0x4b/0x3e0 [ 281.210244][ C1] ? __virt_addr_valid+0x1c8/0x5c0 [ 281.210263][ C1] ? __virt_addr_valid+0x4a5/0x5c0 [ 281.210284][ C1] print_report+0xd2/0x2b0 [ 281.210311][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 281.210329][ C1] kasan_report+0x118/0x150 [ 281.210352][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 281.210376][ C1] rose_timer_expiry+0x471/0x4b0 [ 281.210397][ C1] call_timer_fn+0x17e/0x5f0 [ 281.210424][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 281.210443][ C1] ? call_timer_fn+0xbe/0x5f0 [ 281.210468][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 281.210500][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 281.210526][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 281.210560][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 281.210580][ C1] __run_timer_base+0x61a/0x860 [ 281.210603][ C1] ? ktime_get+0x3e/0x1f0 [ 281.210629][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 281.210651][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 281.210682][ C1] run_timer_softirq+0xb7/0x180 [ 281.210707][ C1] handle_softirqs+0x286/0x870 [ 281.210758][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 281.210793][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 281.210828][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 281.210856][ C1] __irq_exit_rcu+0xca/0x1f0 [ 281.210887][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 281.210924][ C1] irq_exit_rcu+0x9/0x30 [ 281.210954][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 281.210985][ C1] [ 281.210991][ C1] [ 281.211000][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 281.211025][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 281.211056][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 75 21 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 281.211076][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 281.211097][ C1] RAX: d7c7edbef5678900 RBX: ffffffff81974d58 RCX: d7c7edbef5678900 [ 281.211114][ C1] RDX: 0000000000000001 RSI: ffffffff8d9822f0 RDI: ffffffff8be28d40 [ 281.211131][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f5b R09: 1ffff110170e65eb [ 281.211148][ C1] R10: dffffc0000000000 R11: ffffed10170e65ec R12: ffffffff8fa10cf0 [ 281.211164][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003a56b40 [ 281.211183][ C1] ? do_idle+0x1e8/0x510 [ 281.211208][ C1] default_idle+0x13/0x20 [ 281.211229][ C1] default_idle_call+0x74/0xb0 [ 281.211251][ C1] do_idle+0x1e8/0x510 [ 281.211273][ C1] ? __pfx_do_idle+0x10/0x10 [ 281.211290][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 281.211331][ C1] cpu_startup_entry+0x44/0x60 [ 281.211351][ C1] start_secondary+0x101/0x110 [ 281.211378][ C1] common_startup_64+0x13e/0x147 [ 281.211412][ C1] [ 281.211419][ C1] [ 281.533290][ C1] Allocated by task 9470: [ 281.537626][ C1] kasan_save_track+0x3e/0x80 [ 281.542322][ C1] __kasan_kmalloc+0x93/0xb0 [ 281.546926][ C1] __kmalloc_cache_noprof+0x230/0x3d0 [ 281.552303][ C1] batadv_forw_packet_alloc+0x1e9/0x390 [ 281.557868][ C1] batadv_iv_ogm_queue_add+0x85f/0xd30 [ 281.563341][ C1] batadv_iv_ogm_schedule+0xabd/0xea0 [ 281.568727][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x6c6/0x7e0 [ 281.575768][ C1] process_scheduled_works+0xae1/0x17b0 [ 281.581329][ C1] worker_thread+0x8a0/0xda0 [ 281.585937][ C1] kthread+0x70e/0x8a0 [ 281.590018][ C1] ret_from_fork+0x3fc/0x770 [ 281.594625][ C1] ret_from_fork_asm+0x1a/0x30 [ 281.599396][ C1] [ 281.601726][ C1] Freed by task 6473: [ 281.605709][ C1] kasan_save_track+0x3e/0x80 [ 281.610395][ C1] kasan_save_free_info+0x46/0x50 [ 281.615423][ C1] __kasan_slab_free+0x62/0x70 [ 281.620189][ C1] kfree+0x18e/0x440 [ 281.624122][ C1] process_scheduled_works+0xae1/0x17b0 [ 281.629690][ C1] worker_thread+0x8a0/0xda0 [ 281.634293][ C1] kthread+0x70e/0x8a0 [ 281.638367][ C1] ret_from_fork+0x3fc/0x770 [ 281.642962][ C1] ret_from_fork_asm+0x1a/0x30 [ 281.647754][ C1] [ 281.650082][ C1] Last potentially related work creation: [ 281.655801][ C1] kasan_save_stack+0x3e/0x60 [ 281.660496][ C1] kasan_record_aux_stack+0xbd/0xd0 [ 281.665723][ C1] insert_work+0x3d/0x330 [ 281.670076][ C1] __queue_work+0xcfc/0xfe0 [ 281.674584][ C1] call_timer_fn+0x17e/0x5f0 [ 281.679180][ C1] __run_timer_base+0x646/0x860 [ 281.684042][ C1] run_timer_softirq+0xb7/0x180 [ 281.688915][ C1] handle_softirqs+0x286/0x870 [ 281.693692][ C1] __irq_exit_rcu+0xca/0x1f0 [ 281.698289][ C1] irq_exit_rcu+0x9/0x30 [ 281.702542][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 281.708189][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 281.714188][ C1] [ 281.716519][ C1] The buggy address belongs to the object at ffff88806da4fc00 [ 281.716519][ C1] which belongs to the cache kmalloc-512 of size 512 [ 281.730583][ C1] The buggy address is located 42 bytes inside of [ 281.730583][ C1] freed 512-byte region [ffff88806da4fc00, ffff88806da4fe00) [ 281.744316][ C1] [ 281.746687][ C1] The buggy address belongs to the physical page: [ 281.753107][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6da4c [ 281.761875][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 281.770377][ C1] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 281.778365][ C1] page_type: f5(slab) [ 281.782354][ C1] raw: 00fff00000000040 ffff88801a441c80 0000000000000000 dead000000000001 [ 281.790946][ C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 281.799540][ C1] head: 00fff00000000040 ffff88801a441c80 0000000000000000 dead000000000001 [ 281.808233][ C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 281.816909][ C1] head: 00fff00000000002 ffffea0001b69301 00000000ffffffff 00000000ffffffff [ 281.825588][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 281.834268][ C1] page dumped because: kasan: bad access detected [ 281.840694][ C1] page_owner tracks the page as allocated [ 281.846423][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 49, tgid 49 (kworker/u8:3), ts 96791703313, free_ts 86425441940 [ 281.865380][ C1] post_alloc_hook+0x240/0x2a0 [ 281.870156][ C1] get_page_from_freelist+0x21e4/0x22c0 [ 281.875726][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 281.881547][ C1] alloc_pages_mpol+0x232/0x4a0 [ 281.886405][ C1] allocate_slab+0x8a/0x3b0 [ 281.890923][ C1] ___slab_alloc+0xbfc/0x1480 [ 281.895606][ C1] __kmalloc_noprof+0x305/0x4f0 [ 281.900460][ C1] fib6_info_alloc+0x30/0xf0 [ 281.905063][ C1] ip6_route_info_create+0x142/0x860 [ 281.910362][ C1] ip6_route_add+0x49/0x1b0 [ 281.914879][ C1] addrconf_add_linklocal+0x45f/0x6c0 [ 281.920270][ C1] addrconf_addr_gen+0x490/0x580 [ 281.925217][ C1] addrconf_init_auto_addrs+0x711/0xb50 [ 281.930784][ C1] addrconf_notify+0xacc/0x1010 [ 281.935648][ C1] notifier_call_chain+0x1b3/0x3e0 [ 281.940795][ C1] netif_state_change+0x284/0x3a0 [ 281.945820][ C1] page last free pid 5820 tgid 5820 stack trace: [ 281.952142][ C1] free_unref_folios+0xc66/0x14d0 [ 281.957173][ C1] folios_put_refs+0x559/0x640 [ 281.961950][ C1] free_pages_and_swap_cache+0x277/0x520 [ 281.967589][ C1] tlb_flush_mmu+0x3a0/0x680 [ 281.972192][ C1] tlb_finish_mmu+0xc3/0x1d0 [ 281.976797][ C1] vms_clear_ptes+0x42c/0x540 [ 281.981493][ C1] vms_complete_munmap_vmas+0x206/0x8a0 [ 281.987063][ C1] do_vmi_align_munmap+0x358/0x420 [ 281.992205][ C1] do_vmi_munmap+0x253/0x2e0 [ 281.996821][ C1] __vm_munmap+0x23b/0x3d0 [ 282.001261][ C1] __x64_sys_munmap+0x60/0x70 [ 282.005973][ C1] do_syscall_64+0xfa/0x3b0 [ 282.010484][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.016391][ C1] [ 282.018731][ C1] Memory state around the buggy address: [ 282.024367][ C1] ffff88806da4fb00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 282.032436][ C1] ffff88806da4fb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 282.040505][ C1] >ffff88806da4fc00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 282.048574][ C1] ^ [ 282.053951][ C1] ffff88806da4fc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 282.062020][ C1] ffff88806da4fd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 282.070077][ C1] ================================================================== [ 282.078205][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 282.085429][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc3-syzkaller-00144-gbd475eeaaf3c #0 PREEMPT(full) [ 282.097082][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 282.107169][ C1] Call Trace: [ 282.110455][ C1] [ 282.113307][ C1] dump_stack_lvl+0x99/0x250 [ 282.117922][ C1] ? __asan_memcpy+0x40/0x70 [ 282.122524][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 282.127769][ C1] ? __pfx__printk+0x10/0x10 [ 282.132381][ C1] panic+0x2db/0x790 [ 282.136290][ C1] ? __pfx_panic+0x10/0x10 [ 282.140723][ C1] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 282.146643][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 282.152548][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 282.158882][ C1] ? print_memory_metadata+0x314/0x400 [ 282.164359][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 282.169481][ C1] check_panic_on_warn+0x89/0xb0 [ 282.174432][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 282.179555][ C1] end_report+0x78/0x160 [ 282.183818][ C1] kasan_report+0x129/0x150 [ 282.188340][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 282.193455][ C1] rose_timer_expiry+0x471/0x4b0 [ 282.198403][ C1] call_timer_fn+0x17e/0x5f0 [ 282.203002][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 282.208463][ C1] ? call_timer_fn+0xbe/0x5f0 [ 282.213154][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 282.218283][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 282.223497][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 282.228712][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 282.234182][ C1] __run_timer_base+0x61a/0x860 [ 282.239052][ C1] ? ktime_get+0x3e/0x1f0 [ 282.243408][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 282.248826][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 282.255092][ C1] run_timer_softirq+0xb7/0x180 [ 282.259989][ C1] handle_softirqs+0x286/0x870 [ 282.264787][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 282.269579][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 282.274892][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 282.280113][ C1] __irq_exit_rcu+0xca/0x1f0 [ 282.284728][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 282.289950][ C1] irq_exit_rcu+0x9/0x30 [ 282.294205][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 282.299872][ C1] [ 282.302808][ C1] [ 282.305747][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 282.311762][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 282.317505][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 75 21 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 282.337117][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 282.343191][ C1] RAX: d7c7edbef5678900 RBX: ffffffff81974d58 RCX: d7c7edbef5678900 [ 282.351200][ C1] RDX: 0000000000000001 RSI: ffffffff8d9822f0 RDI: ffffffff8be28d40 [ 282.359188][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f5b R09: 1ffff110170e65eb [ 282.367166][ C1] R10: dffffc0000000000 R11: ffffed10170e65ec R12: ffffffff8fa10cf0 [ 282.375159][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003a56b40 [ 282.383161][ C1] ? do_idle+0x1e8/0x510 [ 282.387454][ C1] default_idle+0x13/0x20 [ 282.391818][ C1] default_idle_call+0x74/0xb0 [ 282.396592][ C1] do_idle+0x1e8/0x510 [ 282.400677][ C1] ? __pfx_do_idle+0x10/0x10 [ 282.405281][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 282.410497][ C1] cpu_startup_entry+0x44/0x60 [ 282.415274][ C1] start_secondary+0x101/0x110 [ 282.420045][ C1] common_startup_64+0x13e/0x147 [ 282.425007][ C1] [ 282.428367][ C1] Kernel Offset: disabled [ 282.432705][ C1] Rebooting in 86400 seconds..