last executing test programs: 17.48143244s ago: executing program 4 (id=997): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@RTM_NEWMDB={0x78, 0x54, 0x400, 0x70bd2c, 0x25dfdbfe, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x1, 0x0, {@ip4=@broadcast}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x1, 0x2, 0x3, {@in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0x1, {@ip4=@dev={0xac, 0x14, 0x14, 0x36}, 0x800}}}]}, 0x78}}, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) (async) ioctl$TUNSETLINK(r4, 0x400454cd, 0x10e) (async) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x5) 17.021728983s ago: executing program 4 (id=1002): r0 = socket$netlink(0x10, 0x3, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000200)=0x14) (async) r1 = socket$key(0xf, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) (async) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x2c, 0x19, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, 0x2c}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async, rerun: 32) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async, rerun: 32) socketpair(0xa, 0x0, 0x4, &(0x7f0000000140)) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000007c0)={r5, &(0x7f0000000740)="8a0d", &(0x7f00000006c0)=""/46}, 0x20) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000340)={r3, r3, 0x8, 0x0, 0x0, 0x2, 0x11, 0x15be, 0x5886, 0x801, 0x0, 0x8, 'syz0\x00'}) (async, rerun: 32) shutdown(r3, 0x0) (async, rerun: 32) write(r3, 0x0, 0x0) (async) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, 0x1, 0x9, 0x301, 0x0, 0x0, {0x1}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000850}, 0x40000) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket(0x11, 0x3, 0x1000) (async, rerun: 32) r8 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 32) ioctl$sock_inet_SIOCADDRT(r8, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x1, @dev}, {0x2, 0x0, @local}, {0x2, 0x4e20, @broadcast}, 0x19b, 0x0, 0x0, 0x0, 0xfffd}) (async, rerun: 32) ioctl$sock_inet_SIOCDELRT(r7, 0x890c, &(0x7f0000000000)={0x0, {0x2, 0x0, @dev}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}}) (async, rerun: 32) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r9}, 0x8) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) (rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81, 0x4310}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE2={0x8, 0x2, r10}, @IFLA_HSR_VERSION={0x5, 0x6, 0x3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x50}}, 0x0) 16.838430135s ago: executing program 4 (id=1004): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@nat={'nat\x00', 0x1b, 0x5, 0x530, 0x328, 0xf8, 0xffffffff, 0x0, 0xf8, 0x460, 0x460, 0xffffffff, 0x460, 0x460, 0x5, &(0x7f0000000180), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x1a, 0x53}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x2}}}, {{@ipv6={@private0, @private1, [0x0, 0x0, 0xff, 0xffffffff], [0x100fffeff, 0xff, 0x0, 0xffffffff], 'veth1_to_team\x00', 'virt_wifi0\x00', {0xff}, {0xff}, 0xff, 0x8, 0x1, 0x40}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0x2}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1, @ipv6=@local, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, @port=0x4e21, @port=0x4e23}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28}, {0x10, "3fa0"}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@empty, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @gre_key=0x9, @port=0x4e23}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@dst={{0x48}, {0x3, 0x3, 0x0, [0xd, 0x641, 0x0, 0x1, 0x1eb, 0x7, 0x1ff, 0x8, 0x6, 0xfb59, 0x7, 0x200, 0x9, 0xd, 0x9, 0x41]}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x1, @ipv6=@loopback, @ipv4=@local, @port=0x4e22, @port=0x4e22}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x7f}]}, &(0x7f00000005c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) accept4(r0, 0x0, &(0x7f0000000140), 0x800) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a400014002000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x5e}, 0x0) 16.650827983s ago: executing program 4 (id=1005): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x63}]}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="02"], 0x10) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) 16.567170954s ago: executing program 4 (id=1006): nanosleep(&(0x7f0000000000)={0x0, 0x3938700}, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x856}]}}}]}, 0x40}}, 0x0) 16.369421522s ago: executing program 4 (id=1007): r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8916, &(0x7f0000000040)={'bond_slave_1\x00', @random="0200ac7ffe03"}) recvmmsg(r0, &(0x7f0000001880)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000100)=""/4096, 0x1000}, 0x6}, {{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000001100)=""/206, 0xce}, {&(0x7f0000001200)=""/84, 0x54}], 0x2, &(0x7f00000012c0)=""/207, 0xcf}, 0x7fff}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000013c0)=""/249, 0xf9}, {&(0x7f00000014c0)=""/246, 0xf6}, {&(0x7f00000015c0)=""/26, 0x1a}, {&(0x7f0000001600)=""/73, 0x49}, {&(0x7f0000001680)=""/78, 0x4e}, {&(0x7f0000001700)=""/167, 0xa7}], 0x6, &(0x7f0000001840)=""/13, 0xd}, 0x80000000}], 0x3, 0x1, &(0x7f0000001940)={0x0, 0x989680}) 3.535594992s ago: executing program 0 (id=1118): socket$can_bcm(0x1d, 0x2, 0x2) (async) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000280), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "25f87df99dc48af4"}}, 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 3.21926047s ago: executing program 0 (id=1121): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="0218000010000000000000f9ffffffff020006000000000042000004000000000000000000000000080012000000000000000000000000003000000000000000000000000000000002000001000000000000000000000000fc020000000000000000000000000000030005000000000002"], 0x80}}, 0x4000000) 2.967005913s ago: executing program 0 (id=1124): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r5, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000180)={'icmp6\x00'}, &(0x7f00000002c0)=0x1e) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @link_local={0x3}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) close(r8) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x2a) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000020002001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x4c}}, 0x4000) 2.965875029s ago: executing program 1 (id=1125): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000000)={r3}, &(0x7f00000002c0)=0x8) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x9, 0x3, 0x278, 0xe0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@ip={@multicast2, @broadcast, 0x0, 0xff, 'dvmrp0\x00', 'nr0\x00', {0xff}, {}, 0x21, 0x3, 0x30}, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@socket0={{0x20}}, @common=@icmp={{0x28}, {0x3, "ff4c"}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@rand_addr=0x64010102, @remote, 0xffffff00, 0x0, 'syz_tun\x00', 'vlan1\x00', {}, {}, 0x21, 0x2, 0x41}, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x2, 0x4, 0x8000, 0x5, 'netbios-ns\x00', 'syz1\x00', {0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="13000000080000000800"/20, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000986a96c9c9265381638f970a25a2164e7787f8b4423a94c3d2ed66f8ce401c50900176db4567", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r6, 0x0, 0x0}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r7}, 0x10) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r8}, 0x8) close(r10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r6, 0x0, 0x0}, 0x10) 2.910484854s ago: executing program 2 (id=1126): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r3, &(0x7f0000000980), 0xe) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000000, 0x11, r4, 0xdcc2c000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000280), 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12, 0x80000000}]}}]}, 0x38}}, 0x40) socket$netlink(0x10, 0x3, 0x8) 2.639089973s ago: executing program 2 (id=1128): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) socket$key(0xf, 0x3, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x58, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x4}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3ff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xda}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xf46d}]}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xfffffffffffffff9}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14}}, 0x100}}, 0x4) 2.627744006s ago: executing program 1 (id=1129): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x7, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000000000a50a000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@deltaction={0xac, 0x31, 0x1, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_INDEX}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x56, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0xac}}, 0x0) 2.421819951s ago: executing program 3 (id=1130): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000006000061"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", "05e2e505", "12000700"}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@dellink={0x28, 0x11, 0x101, 0x0, 0x0, {}, [@IFLA_NET_NS_FD={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) 2.396863208s ago: executing program 2 (id=1131): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000008500000061000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f2f, 0x22, 0x0, &(0x7f0000000440)="9f44947021919559684010a408002d7a5d4153f0226dcacf36a548ab01b5cb16afce", 0x0, 0x0, 0x0, 0x0, 0xc0, 0x0, &(0x7f0000000580)="06000000e163a1e841f40df2cd0bf7059fa3e938181322c860b54b1365fdcf07b3b6cee510ae46cb0900001000000000f8d81d246c7ce9e66f813f64f1df9ff13a660358ca101ac28ae055fa04fa324e3a45ede8471c652ee3804f1c95fbb6f8d89dc0517ad21e3b517c0d343f47b91fe7bcea724fe3656487a7925a1c71daf5e46b870cfd506007fdba7370fd0054b201b8750b15ddffff77f438e2aa32c8fe6314ee831756f39012683df6ceb8e449ea96f260d17dd86ec4ac553a5b92bd84"}, 0x50) r1 = socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080089064803", 0xd888, 0x0, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) r4 = socket$netlink(0x10, 0x3, 0x9) (async) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) (async) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg(r6, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000001ac0)="9ab5108bcaa247044550fa5114fa67188d4769300eb25a72cfcdefefb447", 0x1e}], 0x1}}], 0x1, 0x0) (async) r7 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r7, 0x0, 0x0) (async) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000001380)={'caif0\x00', &(0x7f0000001340)=@ethtool_cmd={0x18, 0x1ff, 0xffff38ce, 0x5, 0x48, 0x1, 0x2, 0x3, 0x3, 0x3, 0x9, 0x2, 0x6, 0xb4, 0x3, 0x6, [0x9, 0x1]}}) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) 2.247121183s ago: executing program 2 (id=1132): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) r3 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e21, 0xe253, @mcast1, 0xfffffffb}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e21, @private=0xa010100}, @in6={0xa, 0x4e21, 0xfeb7, @empty, 0x4}, @in6={0xa, 0x4e20, 0x4, @remote, 0xb59}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x94) close(0x3) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'pim6reg0\x00', 0x2000}) close(0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x6e}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2.246291693s ago: executing program 3 (id=1133): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x3ec0) close(r2) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5}]}}}]}, 0x44}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x18, 0x14, 0x21, 0x0, 0x0, {0x23}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @dev, @loopback}, &(0x7f0000000080)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmmsg$inet(r3, &(0x7f0000000600)=[{{&(0x7f0000000400)={0x2, 0x4e22, @private=0xa010102}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000440)="0cc426aaddd133", 0x7}, {&(0x7f0000000480)="8dc2774fbba13e906c76fadc12dfb6b8899ad70ae2ab025c987949857cdfc7cb244ad8f6c509a29b270ac87615ff88c86ab691f22eab328e029a2d7964e23d824d018882dec9326b230d92b55d02ada05dfe002855df8229c5cc9ae5be03f379ea8fd1ef75ef4234b484ba836f48134c08c33592841516bca60b5cb1e9ac277cb46235be4b7aa77914d391ac728697ad9993881728a8b93011d3be97f2b8ad5830c04319131e1fca5e4cedf5ab275d0372aa5a3d12e023ceb4b24ef015d79771a9aa16d66c190573fe6200c12c7ce049ec14413e08f9b47b246bd62ac0ef7a", 0xdf}, {&(0x7f00000006c0)="f622e2e97169f5c3a68ddaf551c3f6b17e70c2b02bac03a1f0a64ff9e61cf77b5df30c794d6a3d18abb86c7abfb70ca1a69972f735a4c687ced4b44ead4c191a4f9e5fc0cc3d010a18abdbcc54908d5f4c0fa78ef4ed61b08adc38f24b98ae2fee5d3831355afd3c4050a482718aadfc28959d24eab3fb821b34e6f96a94b5840e4959ad4297ae6f8d5505af52e4e1c4cb5747990a9934ab892332a1e001378957eb", 0xa2}, {&(0x7f0000000780)="d0fa896de25b0460a88cad9edb82df219f0f1af07bf1e27c4ab6cfcc0c36ca9ec8fb2b6226e4c2209d85ec9919b95d054fa90ff49e18e3bca44c99ec511ee9feb02038122d7ccb7f68dad3a1e4d45d13e89b791946312012ea84720560d5744dee90472eb36b18", 0x67}, {&(0x7f0000000580)="d05eab5151db114876e9fabf9e2e3b2484abe9cdd7429e095d62a5a30f0527a7f48fa993e4a4c03e365447e16a44e0", 0x2f}], 0x5}}], 0x1, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=@getnexthop={0x54, 0x6a, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r4}, @NHA_ID={0x8}, @NHA_MASTER={0x8}, @NHA_MASTER={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_FDB={0x4}, @NHA_OIF={0x8, 0x5, r5}, @NHA_ID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x80) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, r7, 0x711}, 0x14}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x94, r7, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xf313}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r8, 0x29, 0x7, 0x0, &(0x7f0000000180)) 2.230109753s ago: executing program 1 (id=1134): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'caif0\x00', &(0x7f0000000900)=@ethtool_sfeatures={0x3b, 0x2, [{0x5751, 0x7fffffff}, {0x6, 0x11fa}]}}) r2 = socket(0x1, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x4a, &(0x7f0000000000), 0x20000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@delqdisc={0x2c, 0x25, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xa, 0x1}, {0x10, 0xb84e42438fbbcf0c}, {0x2, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x4, 0xff}}]}, 0x2c}}, 0x8048) 1.580960493s ago: executing program 3 (id=1135): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6087fb7e00000000fe880000000000000000000000000001fc0200000000000000000000000000000002000000000000040100010100c20476"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="740000001200030600"/20, @ANYRES32=0x0, @ANYBLOB="2fedaa88000000003800128009000100766c616e000000002800028006000100000000000c0002000000000000000000100004800c00010000000000", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x74}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000024010000050a01020000000000000000010000000c00024000000000000000010900010073797a3100000000040004800a000700726f75746500"], 0x1ac}}, 0x0) 635.094299ms ago: executing program 1 (id=1136): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000024010000050a01020000000000000000010000000c00024000000000000000010900010073797a3100000000040004800a000700726f75746500"], 0x1ac}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000002140)={'wg2\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000000)=0x3, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000340)={@multicast, @random="866304000800", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3a, 0x20, 0x0, 0x0, 0xf9, 0x11, 0x0, @empty, @multicast1}, {0xfffe, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x3, 0x100, @void}}}}}}}, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4018f50b, &(0x7f0000000080)={0x0, 0xff, 0x6}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18ffff000000000800000000000000c63bb5671ea0cf8360612f0000008a0000e70599cd367317cf918d7afdb42e5d30f29937ab020095"], &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="18db8725070000000000feffffff000000000000", @ANYRES32=r2], 0x18}}, 0x0) 634.174118ms ago: executing program 3 (id=1137): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000014000107000000000000000002000000ba5256dd70816df231b34bbb3890dcdf4ed27ab66373aec790aa371954d8d167b4497cf69f97fe29b8671d055def6654719db6a320a4cc39ed41f73c779534"], 0x14}, 0x1, 0x0, 0x0, 0xc4}, 0x44) 610.130641ms ago: executing program 2 (id=1138): r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) getsockopt$inet6_buf(r2, 0x29, 0x3d, &(0x7f0000000780)=""/4096, &(0x7f0000001780)=0x1000) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES16=r3, @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100", @ANYRES32=r3, @ANYBLOB="3c00038038000100240000006e6f747166795f70656572735f626f756e740000000000000000000000000000050003000e"], 0x58}}, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="b9feffff", @ANYRES16=0x0, @ANYBLOB="000325bd7000fbdbdf25050000000c00098008000200030000005c000780080001000900000008000100080000000c00030081000000000000000c00040001000000000000002d81030002000000000000000800021a0900000008000200010000000c000400ff0f0000000000000800020081000000"], 0x7c}}, 0x4004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001940)=@newtaction={0xf0, 0x30, 0x51b, 0x0, 0x1, {}, [{0xdc, 0x1, [@m_skbmod={0x88, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xa2c, 0x20, 0x20000000, 0x9, 0x4}, 0xe}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x9}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="fc04f3b81af0"}]}, {0x4, 0x14}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x6, {0x0, 0x3}}}}, @m_ct={0x50, 0x2, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "ef072a8eecffbafdef0d9ab7becbc8d3"}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x3}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xf0}}, 0x20000000) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf250801f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r1) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000005c0)={&(0x7f0000000300)={0x5c, r6, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8}, 0x2c841) syz_emit_ethernet(0xbe, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000b00000000000119078000000000000006d528379a425f27c1814c41900000017c1009c90780100000001000000717c72635f3b384bdfc23b7cdbd1617d91a3756391fe0a9a66d40838dbc96ba13dd069ce9c1099890915a06c22e110516ac8db72cf46be8a2cd2288112c641ae96fd6321aabb617c72097b8d57a7c7bce1276d915e2d6d05e53c86a47b318a3ac04c5dd388537719eecd7b1f5591c287cd8bdc5cb100705e0032"], 0x0) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000017c0)={'gretap0\x00', &(0x7f0000001840)={'syztnl1\x00', r3, 0x40, 0x8000, 0x5, 0xd, {{0x30, 0x4, 0x1, 0x30, 0xc0, 0x65, 0x0, 0x7, 0x29, 0x0, @rand_addr=0x64010102, @multicast1, {[@timestamp={0x44, 0x8, 0xe8, 0x0, 0x8, [0x2]}, @ssrr={0x89, 0x1f, 0x17, [@rand_addr=0x64010100, @remote, @dev={0xac, 0x14, 0x14, 0x2f}, @rand_addr=0x64010100, @broadcast, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x2f, 0xffffffffffffffff, [{0x5, 0x11, "01bb8c0eb37233de2dcad429657e31"}, {0x1, 0x7, "6ada78cb7c"}, {0x6, 0x4, "0817"}, {0x1, 0xd, "82ae51b0cbf646aadd29a9"}]}, @cipso={0x86, 0x55, 0x2, [{0x7, 0x9, "6c93b4adcbea91"}, {0x1, 0x2}, {0x5, 0x10, "9d00374aa4d2f165eb1c09daf9ca"}, {0x0, 0x5, "9c4377"}, {0x5, 0x9, "09c5de705ba576"}, {0x1, 0x12, "01008694c994e09ce4c48a6edefe4a3d"}, {0x2, 0x12, "5902704df554641fa8303d635e27673f"}, {0x6, 0x2}]}]}}}}}) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r8, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000640)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb08004500001c00200020fc029078ac1e0101e0000300c251f458a9173f69a00000907800688417"], 0x0) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000240)=0x9, 0x4) sendmsg$nl_crypto(r0, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000001a40)=ANY=[@ANYBLOB="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"], 0xe8}, 0x1, 0x0, 0x0, 0x90}, 0x4000) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000013000100000000000000000008"], 0x14}], 0x1}, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0xf0}}, 0x20000001) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000001800)=ANY=[@ANYBLOB="10000000140000022bbd7000fefbdf253960fd8fa478bd32bd"], 0x10}, 0x1, 0x0, 0x0, 0x41}, 0x4004805) 514.994809ms ago: executing program 0 (id=1139): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000000030805000000000000000000000000000c0004800800014000000000060002400000000005000300ff"], 0x30}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f00000003c0)='V', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a05000000000000000000020000000900020073797a31000000000900010073797a3000000000140003800800024000000400080001400000000014000000110001"], 0x68}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYRES64=r1], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r4 = socket(0xa, 0x3, 0x3a) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x4a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x1f2f, 0xf, 0x3253, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000004e00010000006ed06dbb2f8b58e9"], 0x14}}, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0xfd, [0x0, 0x0, 0xffffffff, 0xc, 0x0, 0x0, 0x0, 0x2]}}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r3) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r3) recvmmsg(r3, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0xfd}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000001a00)=""/4104, 0x1008}, {&(0x7f00000004c0)=""/159, 0x9f}, {&(0x7f00000005c0)=""/233, 0xe9}, {&(0x7f0000000340)=""/112, 0x70}, {&(0x7f00000006c0)=""/4091, 0xffb}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f0000000400)=""/181, 0xb5}], 0x7}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x5}], 0x5, 0x8142, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000174fd28493346af3fa4e4361832eccf50a010800200000000000000200000509de010073797a30000000000900020073797a3100000000"], 0x2c}}, 0x0) 443.143725ms ago: executing program 1 (id=1140): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x14, 0x17, 0xa, 0x401}, 0x14}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000060a0b040000000000000000020000001c00048018000180080001006c6f67000c00028008000640000000210900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x70}}, 0x20000080) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x65}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xa3d}, @qdisc_kind_options=@q_cbq={{0x8}, {0x4}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8800}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x10, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x6}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x4000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d80000001800eb054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00060004010c00080008000c4004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cb8b4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e002c2a73ae028d1b34ff4f8cc430bb5a360db598262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d930000", 0xd8}], 0x1}, 0x0) 380.612518ms ago: executing program 3 (id=1141): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'geneve1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=r3, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r4, @ANYBLOB="7c005a807400008005000700020000001e0001000a300c9f4816161b091b030430300109093006220b5112093003000007000100182418"], 0x98}, 0x1, 0x0, 0x0, 0x40080}, 0x20008840) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r0) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r5, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}, ["", "", "", "", "", ""]}, 0x2c}}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'geneve1\x00'}) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=r3, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r4, @ANYBLOB="7c005a807400008005000700020000001e0001000a300c9f4816161b091b030430300109093006220b5112093003000007000100182418"], 0x98}, 0x1, 0x0, 0x0, 0x40080}, 0x20008840) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r0) (async) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r5, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}, ["", "", "", "", "", ""]}, 0x2c}}, 0x4000) (async) 206.942234ms ago: executing program 0 (id=1142): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="19000000040000000800000002007af47b70fc68920a22660019000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$isdn(0x22, 0x3, 0x22) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) (async) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="19000000040000000800000002007af47b70fc68920a22660019000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) socket$isdn(0x22, 0x3, 0x22) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) 129.877001ms ago: executing program 2 (id=1143): unshare(0x22020600) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r0, &(0x7f00000005c0)="04", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffff9, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) sendto$inet6(r0, &(0x7f0000000000)="b34ee8e9004ab4da56b1b89b1113c649", 0x10, 0x8000, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c00000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000006700028008001c00", @ANYRES32=r2, @ANYBLOB="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"], 0x3c}}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'tunl0\x00', {}, 0xea}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x0, 0x0, 0x0, 0xf}}) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000000)={r6, 0x5, 0x7}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000001c0)={r6, 0x544}, &(0x7f00000003c0)=0x8) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000001c0)={r6, 0x544}, &(0x7f00000003c0)=0x8) socket$inet_sctp(0x2, 0x5, 0x84) (async) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000040)={r9, 0x5}, 0x8) (async) setsockopt$inet_sctp_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000040)={r9, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={r9, 0x6, 0x20}, 0xc) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={r9, 0x6, 0x20}, 0xc) 63.0705ms ago: executing program 1 (id=1144): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) poll(&(0x7f0000000040)=[{r1, 0x16842e9bd142d0d5}], 0x1, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x22800, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f0000000f40)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffffff}, 0x1c, 0x0}}, {{&(0x7f0000000d00)={0xa, 0x4e20, 0xff, @private0, 0x10001}, 0x1c, 0x0, 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="180000e6ff01000029000000390000003c00030000000000"], 0x18}}], 0x2, 0x40000) ioctl$TUNSETSTEERINGEBPF(r2, 0x400454da, &(0x7f0000000000)) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000012c00048028000180080001006f7366001c000280080003400000b6ed6c9d0001080001400000001205000200010000000900010073797a30400000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x80}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) poll(&(0x7f0000000040)=[{r1, 0x16842e9bd142d0d5}], 0x1, 0x94) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x22800, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) sendmmsg$inet6(r3, &(0x7f0000000f40)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffffff}, 0x1c, 0x0}}, {{&(0x7f0000000d00)={0xa, 0x4e20, 0xff, @private0, 0x10001}, 0x1c, 0x0, 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="180000e6ff01000029000000390000003c00030000000000"], 0x18}}], 0x2, 0x40000) (async) ioctl$TUNSETSTEERINGEBPF(r2, 0x400454da, &(0x7f0000000000)) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000012c00048028000180080001006f7366001c000280080003400000b6ed6c9d0001080001400000001205000200010000000900010073797a30400000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x80}}, 0x0) (async) 56.187034ms ago: executing program 3 (id=1145): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "ac"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}, 0x1, 0x0, 0x0, 0x40010}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x2c, 0x2b, 0x107, 0x8000000, 0x0, {0x5, 0x7c}, [@nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@local}]}]}, 0x2c}}, 0x40080c0) 0s ago: executing program 0 (id=1146): r0 = socket(0x22, 0x2, 0x3) getsockopt$packet_buf(r0, 0x107, 0x16, &(0x7f0000000240)=""/1, &(0x7f0000002180)=0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000000000007111af00000000008510000002000000850000000500000095000000000000009500a505000000005160b53d4aaf0ecda3e967683918fabfc90ec1e06c5f48cb9ce64e815b7b74d0c3e9365f188f6a00591b"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xf, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1e, 0xe, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2c9d}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x50}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x2}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x4}, @map_val={0x18, 0x8, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x65e}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @jmp={0x5, 0x1, 0x1, 0x3, 0x2, 0x4, 0xffffffffffffffff}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.164' (ED25519) to the list of known hosts. [ 85.468966][ T5818] cgroup: Unknown subsys name 'net' [ 85.584230][ T5818] cgroup: Unknown subsys name 'cpuset' [ 85.593760][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 87.379239][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.603149][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.622496][ T5850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.637309][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.645359][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.654152][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.662586][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.668003][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.671115][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.678556][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.685035][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.695254][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.705559][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.707931][ T5141] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.715081][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.730544][ T5141] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.740170][ T5141] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.749778][ T5141] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.758399][ T5141] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.766073][ T5141] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.774726][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.777781][ T5141] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.783750][ T5850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.798030][ T5141] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.809283][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.828701][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.008329][ T1207] cfg80211: failed to load regulatory.db [ 92.562793][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 92.584429][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 92.703903][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 92.721345][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 92.784104][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 92.943702][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.951363][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.960243][ T5841] bridge_slave_0: entered allmulticast mode [ 92.967742][ T5841] bridge_slave_0: entered promiscuous mode [ 92.989286][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.997416][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.004740][ T5843] bridge_slave_0: entered allmulticast mode [ 93.012818][ T5843] bridge_slave_0: entered promiscuous mode [ 93.022237][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.029615][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.036814][ T5843] bridge_slave_1: entered allmulticast mode [ 93.045338][ T5843] bridge_slave_1: entered promiscuous mode [ 93.071447][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.078618][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.086330][ T5841] bridge_slave_1: entered allmulticast mode [ 93.093830][ T5841] bridge_slave_1: entered promiscuous mode [ 93.204800][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.217177][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.224550][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.232099][ T5834] bridge_slave_0: entered allmulticast mode [ 93.239464][ T5834] bridge_slave_0: entered promiscuous mode [ 93.290922][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.314013][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.321902][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.329112][ T5834] bridge_slave_1: entered allmulticast mode [ 93.336706][ T5834] bridge_slave_1: entered promiscuous mode [ 93.356773][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.364700][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.372077][ T5846] bridge_slave_0: entered allmulticast mode [ 93.379421][ T5846] bridge_slave_0: entered promiscuous mode [ 93.391000][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.443512][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.450939][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.458235][ T5846] bridge_slave_1: entered allmulticast mode [ 93.466216][ T5846] bridge_slave_1: entered promiscuous mode [ 93.489321][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.502190][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.509595][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.516826][ T5832] bridge_slave_0: entered allmulticast mode [ 93.524974][ T5832] bridge_slave_0: entered promiscuous mode [ 93.535304][ T5843] team0: Port device team_slave_0 added [ 93.546458][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.582600][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.592441][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.599887][ T5832] bridge_slave_1: entered allmulticast mode [ 93.607353][ T5832] bridge_slave_1: entered promiscuous mode [ 93.629938][ T5843] team0: Port device team_slave_1 added [ 93.638059][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.663191][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.728705][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.756623][ T5834] team0: Port device team_slave_0 added [ 93.768446][ T5841] team0: Port device team_slave_0 added [ 93.775168][ T5838] Bluetooth: hci0: command tx timeout [ 93.786920][ T5841] team0: Port device team_slave_1 added [ 93.796300][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.809747][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.840410][ T5838] Bluetooth: hci1: command tx timeout [ 93.849065][ T5834] team0: Port device team_slave_1 added [ 93.855332][ T5838] Bluetooth: hci2: command tx timeout [ 93.902777][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.910565][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.919809][ T5845] Bluetooth: hci4: command tx timeout [ 93.937919][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.942639][ T5838] Bluetooth: hci3: command tx timeout [ 93.957747][ T5846] team0: Port device team_slave_0 added [ 93.969061][ T5846] team0: Port device team_slave_1 added [ 94.016118][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.023434][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.049695][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.095199][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.102597][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.129175][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.141089][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.148161][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.174652][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.188705][ T5832] team0: Port device team_slave_0 added [ 94.199762][ T5832] team0: Port device team_slave_1 added [ 94.207358][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.214775][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.241206][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.253177][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.260401][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.286499][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.298313][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.305468][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.331842][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.377972][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.386919][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.413425][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.458510][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.465704][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.492060][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.567258][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.574370][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.601275][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.653109][ T5841] hsr_slave_0: entered promiscuous mode [ 94.660029][ T5841] hsr_slave_1: entered promiscuous mode [ 94.672898][ T5843] hsr_slave_0: entered promiscuous mode [ 94.680291][ T5843] hsr_slave_1: entered promiscuous mode [ 94.687004][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.694962][ T5843] Cannot create hsr debugfs directory [ 94.738801][ T5834] hsr_slave_0: entered promiscuous mode [ 94.745377][ T5834] hsr_slave_1: entered promiscuous mode [ 94.752306][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.760490][ T5834] Cannot create hsr debugfs directory [ 94.816037][ T5846] hsr_slave_0: entered promiscuous mode [ 94.823530][ T5846] hsr_slave_1: entered promiscuous mode [ 94.830004][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.837603][ T5846] Cannot create hsr debugfs directory [ 94.889625][ T5832] hsr_slave_0: entered promiscuous mode [ 94.897136][ T5832] hsr_slave_1: entered promiscuous mode [ 94.904695][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.913450][ T5832] Cannot create hsr debugfs directory [ 95.489918][ T5841] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.510776][ T5841] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.542825][ T5841] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.554517][ T5841] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.600046][ T5843] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.646996][ T5843] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.659182][ T5843] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.672425][ T5843] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.758563][ T5834] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.780566][ T5834] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.792137][ T5834] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.829204][ T5834] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.845881][ T5838] Bluetooth: hci0: command tx timeout [ 95.919683][ T5845] Bluetooth: hci1: command tx timeout [ 95.925276][ T5838] Bluetooth: hci2: command tx timeout [ 95.940525][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.955951][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.966057][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.999017][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.006532][ T5838] Bluetooth: hci4: command tx timeout [ 96.010246][ T5838] Bluetooth: hci3: command tx timeout [ 96.052874][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.087773][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.158003][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.166023][ T5846] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.203741][ T2930] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.211137][ T2930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.223258][ T5846] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.243314][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.253353][ T5846] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.286060][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.293406][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.305708][ T5846] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.332039][ T2930] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.339190][ T2930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.397064][ T2930] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.404331][ T2930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.440937][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.478922][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.532614][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.554224][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.582017][ T2930] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.589161][ T2930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.620836][ T2930] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.628043][ T2930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.643970][ T2930] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.651176][ T2930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.663352][ T2930] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.670550][ T2930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.972493][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.062201][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.125143][ T2996] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.132486][ T2996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.211933][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.219146][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.297578][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.433952][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.551772][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.678710][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.697806][ T5843] veth0_vlan: entered promiscuous mode [ 97.732028][ T5843] veth1_vlan: entered promiscuous mode [ 97.821977][ T5834] veth0_vlan: entered promiscuous mode [ 97.881149][ T5843] veth0_macvtap: entered promiscuous mode [ 97.903115][ T5843] veth1_macvtap: entered promiscuous mode [ 97.915604][ T5832] veth0_vlan: entered promiscuous mode [ 97.929541][ T5838] Bluetooth: hci0: command tx timeout [ 97.951379][ T5832] veth1_vlan: entered promiscuous mode [ 97.963964][ T5834] veth1_vlan: entered promiscuous mode [ 98.001215][ T5838] Bluetooth: hci2: command tx timeout [ 98.002599][ T5845] Bluetooth: hci1: command tx timeout [ 98.026456][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.048308][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.064396][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.081735][ T5845] Bluetooth: hci3: command tx timeout [ 98.081903][ T5838] Bluetooth: hci4: command tx timeout [ 98.092982][ T5843] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.104448][ T5843] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.113817][ T5843] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.123078][ T5843] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.196847][ T5832] veth0_macvtap: entered promiscuous mode [ 98.208738][ T5832] veth1_macvtap: entered promiscuous mode [ 98.223779][ T5834] veth0_macvtap: entered promiscuous mode [ 98.233114][ T5841] veth0_vlan: entered promiscuous mode [ 98.287623][ T5834] veth1_macvtap: entered promiscuous mode [ 98.295837][ T5846] veth0_vlan: entered promiscuous mode [ 98.331482][ T5841] veth1_vlan: entered promiscuous mode [ 98.378199][ T5846] veth1_vlan: entered promiscuous mode [ 98.398227][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.425846][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.438634][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.451246][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.506698][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.519143][ T5832] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.528265][ T5832] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.540860][ T5832] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.549758][ T5832] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.570683][ T5841] veth0_macvtap: entered promiscuous mode [ 98.584104][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.595873][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.604769][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.629391][ T5846] veth0_macvtap: entered promiscuous mode [ 98.648190][ T5841] veth1_macvtap: entered promiscuous mode [ 98.656797][ T5846] veth1_macvtap: entered promiscuous mode [ 98.666263][ T5834] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.676543][ T5834] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.685996][ T5834] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.694875][ T5834] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.753610][ T5843] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.798746][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.817765][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.845705][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.864179][ T5846] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.875103][ T5846] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.902994][ T5846] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.917501][ T5846] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.988681][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.009847][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.023639][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.063852][ T5841] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.074738][ T5841] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.085050][ T5841] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.094848][ T5841] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.163103][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.174159][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.284097][ T3007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.319694][ T3007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.369769][ T3007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.380313][ T3007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.484867][ T5928] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1'. [ 99.524261][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.546710][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.603079][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.642380][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.754459][ T2996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.774771][ T2996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.930983][ T5939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 99.941518][ T5936] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8'. [ 99.952224][ T5936] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8'. [ 100.001184][ T5838] Bluetooth: hci0: command tx timeout [ 100.061049][ T5946] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.080321][ T5838] Bluetooth: hci2: command tx timeout [ 100.080815][ T5845] Bluetooth: hci1: command tx timeout [ 100.162074][ T5845] Bluetooth: hci4: command tx timeout [ 100.162097][ T5838] Bluetooth: hci3: command tx timeout [ 100.386029][ T3007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.399159][ T3007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.436052][ T5960] syz.3.12 uses obsolete (PF_INET,SOCK_PACKET) [ 100.478729][ T5960] xt_l2tp: v2 sid > 0xffff: 262144 [ 100.596491][ T5964] Zero length message leads to an empty skb [ 100.635358][ T5965] veth1_to_team: entered promiscuous mode [ 100.671494][ T5970] bridge: RTM_NEWNEIGH with invalid ether address [ 100.713591][ T5968] netdevsim netdevsim1: Direct firmware load for ./file1 failed with error -2 [ 100.786029][ T5962] veth1_to_team: left promiscuous mode [ 100.820273][ T5968] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file1 [ 100.894864][ T5973] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5'. [ 101.112358][ T5984] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.154513][ T5984] warning: `syz.4.19' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 101.763694][ T6004] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 101.886629][ T6017] netlink: 68 bytes leftover after parsing attributes in process `syz.0.28'. [ 101.962032][ T6017] team0: No ports can be present during mode change [ 102.036690][ T6031] syzkaller1: entered promiscuous mode [ 102.042342][ T6031] syzkaller1: entered allmulticast mode [ 102.308367][ T6042] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 102.528961][ T6054] delete_channel: no stack [ 102.600578][ T6058] netlink: 36 bytes leftover after parsing attributes in process `syz.1.37'. [ 102.703581][ T6061] netlink: 'syz.0.40': attribute type 5 has an invalid length. [ 102.765890][ T6066] netlink: 28 bytes leftover after parsing attributes in process `syz.4.42'. [ 102.810277][ T6068] netlink: 24 bytes leftover after parsing attributes in process `syz.2.43'. [ 103.037822][ T6081] openvswitch: netlink: IPv6 tunnel dst address is zero [ 103.084914][ T6087] openvswitch: netlink: IPv6 tunnel dst address is zero [ 103.117772][ T6086] netlink: 404 bytes leftover after parsing attributes in process `syz.4.47'. [ 103.722380][ T6105] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 103.758727][ T6109] IPVS: set_ctl: invalid protocol: 1 127.0.0.1:20001 [ 104.423167][ T30] audit: type=1107 audit(1747331363.098:2): pid=6134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 104.432121][ T5201] udevd[5201]: worker [5888] terminated by signal 33 (Unknown signal 33) [ 104.562340][ T6139] __nla_validate_parse: 8 callbacks suppressed [ 104.562360][ T6139] netlink: 24 bytes leftover after parsing attributes in process `syz.0.65'. [ 104.629623][ T6141] netlink: 120 bytes leftover after parsing attributes in process `syz.3.66'. [ 104.787595][ T5201] udevd[5201]: worker [5888] failed while handling '/devices/virtual/block/loop0' [ 105.034503][ T6161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.73'. [ 105.418308][ T6173] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 105.607341][ T6181] netlink: 'syz.0.77': attribute type 1 has an invalid length. [ 105.626344][ T6181] netlink: 12 bytes leftover after parsing attributes in process `syz.0.77'. [ 105.642062][ T63] tipc: Subscription rejected, illegal request [ 105.663479][ T6179] syz.3.75 (6179) used greatest stack depth: 19712 bytes left [ 105.868759][ T6187] x_tables: duplicate entry at hook 2 [ 105.898391][ T6196] sock: sock_timestamping_bind_phc: sock not bind to device [ 105.941528][ T6198] netlink: 20 bytes leftover after parsing attributes in process `syz.0.80'. [ 106.005477][ T6198] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 106.011652][ T6197] netlink: 20 bytes leftover after parsing attributes in process `syz.4.78'. [ 106.078614][ T6197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.78'. [ 106.093204][ T6198] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.102596][ T6198] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.939691][ T6226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.91'. [ 107.009748][ T6226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.91'. [ 107.109252][ T6233] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 107.145997][ T47] IPVS: starting estimator thread 0... [ 107.242000][ T6243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.94'. [ 107.249901][ T6237] IPVS: using max 25 ests per chain, 60000 per kthread [ 108.421265][ T6268] netlink: 'syz.0.104': attribute type 1 has an invalid length. [ 109.645026][ T6322] ipip0: entered promiscuous mode [ 109.894895][ T6343] __nla_validate_parse: 7 callbacks suppressed [ 109.894922][ T6343] netlink: 244 bytes leftover after parsing attributes in process `syz.4.127'. [ 109.895885][ T6340] netlink: 14 bytes leftover after parsing attributes in process `syz.1.125'. [ 110.064845][ T6351] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 110.103533][ T6352] TCP: TCP_TX_DELAY enabled [ 110.107252][ T6353] netlink: 28 bytes leftover after parsing attributes in process `syz.4.128'. [ 110.233489][ T6340] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.283868][ T6340] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.316606][ T6340] bond0 (unregistering): Released all slaves [ 110.354865][ T6363] netlink: 12 bytes leftover after parsing attributes in process `syz.3.132'. [ 110.372075][ T6363] netlink: 252 bytes leftover after parsing attributes in process `syz.3.132'. [ 110.624087][ T6370] netlink: 28 bytes leftover after parsing attributes in process `syz.2.134'. [ 110.637950][ T6374] ip6t_srh: unknown srh invflags 5F00 [ 110.792584][ T6379] netlink: 12 bytes leftover after parsing attributes in process `syz.0.137'. [ 110.831261][ T6379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.137'. [ 110.857142][ T6379] netlink: 12 bytes leftover after parsing attributes in process `syz.0.137'. [ 110.884638][ T6379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.137'. [ 110.916284][ T6379] ipvlan2: entered allmulticast mode [ 110.927852][ T6379] veth0_vlan: entered allmulticast mode [ 110.938899][ T6383] syzkaller1: entered promiscuous mode [ 110.947680][ T6387] netlink: 'syz.0.137': attribute type 10 has an invalid length. [ 110.952142][ T6383] syzkaller1: entered allmulticast mode [ 111.158595][ T6387] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 111.588512][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880244be800: rx timeout, send abort [ 111.599737][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff8880244be800: 0x3ff01: (3) A timeout occurred and this is the connection abort to close the session. [ 113.803721][ T6521] ieee802154 phy0 wpan0: encryption failed: -22 [ 115.136640][ T6576] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 115.762522][ T6619] __nla_validate_parse: 9 callbacks suppressed [ 115.762555][ T6619] netlink: 68 bytes leftover after parsing attributes in process `syz.2.198'. [ 115.803090][ T6612] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.915745][ T6626] netlink: 'syz.0.197': attribute type 21 has an invalid length. [ 115.924155][ T5920] IPVS: starting estimator thread 0... [ 115.953547][ T6626] netlink: 128 bytes leftover after parsing attributes in process `syz.0.197'. [ 115.970537][ T6629] netlink: 12 bytes leftover after parsing attributes in process `syz.4.200'. [ 115.994977][ T6630] netlink: 12 bytes leftover after parsing attributes in process `syz.4.200'. [ 116.040511][ T6627] IPVS: using max 27 ests per chain, 64800 per kthread [ 116.064363][ T6626] netlink: 'syz.0.197': attribute type 5 has an invalid length. [ 116.083770][ T6626] netlink: 3 bytes leftover after parsing attributes in process `syz.0.197'. [ 116.353893][ T6646] netem: change failed [ 116.566111][ T6655] bridge_slave_0: left allmulticast mode [ 116.583993][ T6655] bridge_slave_0: left promiscuous mode [ 116.594929][ T6655] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.626615][ T6655] bridge_slave_1: left allmulticast mode [ 116.635444][ T6655] bridge_slave_1: left promiscuous mode [ 116.643991][ T6655] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.684591][ T6655] team0: Port device team_slave_0 removed [ 116.718635][ T6655] team0: Port device team_slave_1 removed [ 116.727793][ T6655] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.739919][ T6655] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.756578][ T6655] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.764532][ T6655] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.225504][ T6699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.218'. [ 118.328447][ T6687] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 118.649074][ T6707] openvswitch: netlink: Actions may not be safe on all matching packets [ 119.028139][ T6703] veth3: entered allmulticast mode [ 119.152638][ T6723] netlink: 16 bytes leftover after parsing attributes in process `syz.4.227'. [ 119.238106][ T6730] vxcan0: tx address claim with dest, not broadcast [ 119.600147][ T5838] Bluetooth: hci4: command 0x0401 tx timeout [ 119.606086][ T6749] netlink: 'syz.2.236': attribute type 10 has an invalid length. [ 119.660155][ T6749] netlink: 40 bytes leftover after parsing attributes in process `syz.2.236'. [ 119.684400][ T6749] batadv0: entered promiscuous mode [ 119.690172][ T6749] batadv0: entered allmulticast mode [ 119.712713][ T6753] netlink: 'syz.2.236': attribute type 10 has an invalid length. [ 119.715960][ T6749] bridge0: port 3(batadv0) entered blocking state [ 119.732694][ T6749] bridge0: port 3(batadv0) entered disabled state [ 119.764687][ T6759] netlink: 'syz.2.236': attribute type 4 has an invalid length. [ 119.793168][ T6759] netlink: 152 bytes leftover after parsing attributes in process `syz.2.236'. [ 119.832563][ T6749] bridge0: port 3(batadv0) entered blocking state [ 119.839157][ T6749] bridge0: port 3(batadv0) entered forwarding state [ 119.867780][ T6753] bridge0: port 3(batadv0) entered disabled state [ 119.874506][ T6753] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.882347][ T6753] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.910713][ T6769] netlink: 4 bytes leftover after parsing attributes in process `syz.0.240'. [ 119.951407][ T6753] bridge0: port 3(batadv0) entered blocking state [ 119.958034][ T6753] bridge0: port 3(batadv0) entered forwarding state [ 119.965641][ T6753] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.972898][ T6753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.980478][ T6753] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.987665][ T6753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.003106][ T6753] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 120.042410][ T6011] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 120.052857][ T6011] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 120.121244][ T6759] syz.2.236 (6759) used greatest stack depth: 19592 bytes left [ 121.116560][ T6815] ip6t_REJECT: ECHOREPLY is not supported [ 121.164738][ T6822] netlink: 'syz.4.257': attribute type 1 has an invalid length. [ 121.174825][ T6822] netlink: 'syz.4.257': attribute type 1 has an invalid length. [ 121.319720][ T6829] No such timeout policy "syz0" [ 121.722238][ T6846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.945585][ T6853] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 121.976335][ T6853] netlink: 20 bytes leftover after parsing attributes in process `syz.3.267'. [ 122.091824][ T6857] syzkaller0: entered promiscuous mode [ 122.109910][ T6857] syzkaller0: entered allmulticast mode [ 122.860450][ T6894] netlink: 72 bytes leftover after parsing attributes in process `syz.1.276'. [ 123.021225][ T6895] netlink: 72 bytes leftover after parsing attributes in process `syz.1.276'. [ 124.691170][ T6933] netlink: 84 bytes leftover after parsing attributes in process `syz.2.287'. [ 124.831129][ T6938] netlink: 144 bytes leftover after parsing attributes in process `syz.1.288'. [ 124.854401][ T6938] netlink: 144 bytes leftover after parsing attributes in process `syz.1.288'. [ 125.400404][ T6961] netlink: 48 bytes leftover after parsing attributes in process `syz.0.294'. [ 125.730417][ T6977] netlink: 'syz.0.298': attribute type 4 has an invalid length. [ 125.777094][ T6980] netlink: 'syz.0.298': attribute type 4 has an invalid length. [ 126.693527][ T7034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.314'. [ 126.754897][ T7032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.314'. [ 126.985541][ T7048] netlink: 'syz.3.317': attribute type 39 has an invalid length. [ 127.111541][ T7055] netlink: 256 bytes leftover after parsing attributes in process `syz.1.320'. [ 127.138706][ T7055] netlink: 12 bytes leftover after parsing attributes in process `syz.1.320'. [ 127.163361][ T7053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.319'. [ 127.196229][ T7034] team0 (unregistering): Port device team_slave_0 removed [ 127.234194][ T7034] team0 (unregistering): Port device team_slave_1 removed [ 127.235085][ T7058] netlink: 40 bytes leftover after parsing attributes in process `syz.4.321'. [ 127.432217][ T7053] bridge0: port 3(batadv0) entered disabled state [ 127.460076][ T7053] bridge_slave_1: left allmulticast mode [ 127.465920][ T7053] bridge_slave_1: left promiscuous mode [ 127.487409][ T7053] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.514736][ T7053] bridge_slave_0: left allmulticast mode [ 127.533523][ T7053] bridge_slave_0: left promiscuous mode [ 127.545071][ T7053] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.612666][ T7053] bond0: (slave bridge0): Releasing backup interface [ 127.857891][ T7078] netlink: 12 bytes leftover after parsing attributes in process `syz.0.325'. [ 127.940099][ T7078] xfrm1: entered promiscuous mode [ 127.945216][ T7078] xfrm1: entered allmulticast mode [ 128.664931][ T7125] netlink: 'syz.4.333': attribute type 12 has an invalid length. [ 128.699534][ T7125] netlink: 'syz.4.333': attribute type 29 has an invalid length. [ 128.722223][ T7125] netlink: 148 bytes leftover after parsing attributes in process `syz.4.333'. [ 128.761585][ T7132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.333'. [ 128.781772][ T7125] netlink: 'syz.4.333': attribute type 1 has an invalid length. [ 128.792337][ T7125] netlink: 47 bytes leftover after parsing attributes in process `syz.4.333'. [ 129.254113][ T7151] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.338'. [ 129.381507][ T7156] netlink: 'syz.2.341': attribute type 1 has an invalid length. [ 129.548176][ T7171] xt_l2tp: unknown flags: 18 [ 129.555610][ T7156] 8021q: adding VLAN 0 to HW filter on device bond1 [ 129.977313][ T7188] netlink: 132 bytes leftover after parsing attributes in process `syz.4.352'. [ 130.236230][ T7205] sctp: [Deprecated]: syz.2.354 (pid 7205) Use of struct sctp_assoc_value in delayed_ack socket option. [ 130.236230][ T7205] Use struct sctp_sack_info instead [ 130.586575][ T7225] netlink: 'syz.1.359': attribute type 10 has an invalid length. [ 130.904640][ T7225] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 130.913870][ T7225] team0: Failed to send options change via netlink (err -105) [ 130.931462][ T7225] team0: Port device geneve0 added [ 131.164226][ T7256] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 131.339994][ T7261] openvswitch: netlink: Port 10289156 exceeds max allowable 65535 [ 131.954854][ T7298] netlink: 'syz.1.378': attribute type 1 has an invalid length. [ 132.345196][ T7322] bond0: entered promiscuous mode [ 132.370180][ T7322] bond_slave_0: entered promiscuous mode [ 132.406453][ T7322] bond_slave_1: entered promiscuous mode [ 132.552861][ T7326] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.600634][ T7326] __nla_validate_parse: 12 callbacks suppressed [ 132.600654][ T7326] netlink: 28 bytes leftover after parsing attributes in process `syz.3.385'. [ 132.620000][ T7329] netlink: 4 bytes leftover after parsing attributes in process `syz.4.386'. [ 132.638891][ T7332] netlink: 'syz.2.387': attribute type 9 has an invalid length. [ 132.687135][ T7329] netlink: 12 bytes leftover after parsing attributes in process `syz.4.386'. [ 132.736654][ T7329] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 132.754090][ T7329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.386'. [ 132.810181][ T7329] netlink: 12 bytes leftover after parsing attributes in process `syz.4.386'. [ 132.840810][ T7337] netlink: 44 bytes leftover after parsing attributes in process `syz.3.389'. [ 132.988230][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.997766][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.160730][ T7351] netlink: 'syz.1.394': attribute type 58 has an invalid length. [ 133.188713][ T7351] netlink: 20 bytes leftover after parsing attributes in process `syz.1.394'. [ 133.458209][ T7367] netlink: 24 bytes leftover after parsing attributes in process `syz.2.397'. [ 133.762590][ T7383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.401'. [ 133.866612][ T7390] netlink: 32 bytes leftover after parsing attributes in process `syz.2.402'. [ 134.427614][ T7420] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 134.932718][ T7449] syzkaller0: entered promiscuous mode [ 134.938354][ T7449] syzkaller0: entered allmulticast mode [ 135.087753][ T7450] tipc: Started in network mode [ 135.111038][ T7450] tipc: Node identity ca1907ff5244, cluster identity 4711 [ 135.142218][ T7450] tipc: Enabled bearer , priority 0 [ 135.170067][ T7457] syzkaller0: entered promiscuous mode [ 135.175614][ T7457] syzkaller0: entered allmulticast mode [ 135.237330][ T7450] tipc: Resetting bearer [ 135.281416][ T7443] tipc: Resetting bearer [ 135.400523][ T7443] tipc: Disabling bearer [ 135.731354][ T7477] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 135.761574][ T7477] netlink: 'syz.4.421': attribute type 6 has an invalid length. [ 136.127717][ T5890] IPVS: starting estimator thread 0... [ 136.239553][ T7503] IPVS: using max 30 ests per chain, 72000 per kthread [ 136.338399][ T7513] netlink: 'syz.3.433': attribute type 3 has an invalid length. [ 136.956849][ T7543] netlink: 'syz.4.444': attribute type 2 has an invalid length. [ 137.003131][ T7543] netlink: 'syz.4.444': attribute type 10 has an invalid length. [ 137.054298][ T7543] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 137.091215][ T7553] veth1_macvtap: mtu less than device minimum [ 137.570138][ T7578] netlink: 'syz.0.454': attribute type 7 has an invalid length. [ 137.603524][ T7579] nbd: illegal input index 61504 [ 138.046512][ T7596] __nla_validate_parse: 13 callbacks suppressed [ 138.046533][ T7596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.462'. [ 138.065427][ T7597] netlink: 76 bytes leftover after parsing attributes in process `syz.2.461'. [ 138.122230][ T7588] tap0: tun_chr_ioctl cmd 1074025677 [ 138.132233][ T7588] tap0: linktype set to 781 [ 138.153497][ T7588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.459'. [ 138.164479][ T7596] af_packet: tpacket_rcv: packet too big, clamped from 65075 to 3936. macoff=96 [ 138.168566][ T7602] netlink: 256 bytes leftover after parsing attributes in process `syz.4.465'. [ 138.198514][ T7596] netlink: 16390 bytes leftover after parsing attributes in process `syz.0.462'. [ 138.250321][ T7598] netlink: 16390 bytes leftover after parsing attributes in process `syz.0.462'. [ 138.593024][ T7616] netlink: 10 bytes leftover after parsing attributes in process `syz.2.469'. [ 138.856335][ T7634] pimreg3: entered allmulticast mode [ 139.071863][ T7641] netlink: 104 bytes leftover after parsing attributes in process `syz.3.480'. [ 139.126677][ T7645] trusted_key: syz.1.482 sent an empty control message without MSG_MORE. [ 139.179101][ T7644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.481'. [ 139.300057][ T7652] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 139.353756][ T7656] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 139.624909][ T7666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.489'. [ 139.752207][ T7672] IPv6: NLM_F_CREATE should be specified when creating new route [ 139.765125][ T7674] Bluetooth: MGMT ver 1.23 [ 139.984009][ T7685] netlink: 'syz.4.493': attribute type 11 has an invalid length. [ 140.028542][ T7685] netlink: 'syz.4.493': attribute type 11 has an invalid length. [ 140.584348][ T7708] delete_channel: no stack [ 140.877349][ T7725] netlink: 'syz.1.507': attribute type 5 has an invalid length. [ 141.684827][ T7770] netlink: 'syz.0.520': attribute type 1 has an invalid length. [ 141.891659][ T7776] netlink: 'syz.0.522': attribute type 4 has an invalid length. [ 143.162125][ T7811] Driver unsupported XDP return value 0 on prog (id 151) dev N/A, expect packet loss! [ 145.954783][ T7840] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 145.973487][ T7826] __nla_validate_parse: 8 callbacks suppressed [ 145.973506][ T7826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.536'. [ 146.291904][ T7849] netlink: 4 bytes leftover after parsing attributes in process `syz.4.540'. [ 146.363513][ T7849] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.372765][ T7849] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.383687][ T7849] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.393178][ T7849] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.472955][ T7849] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.482087][ T7849] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.492263][ T7849] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.501805][ T7849] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.595273][ T7869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.545'. [ 146.724126][ T7873] netlink: 'syz.0.546': attribute type 1 has an invalid length. [ 146.801029][ T7873] netlink: 'syz.0.546': attribute type 12 has an invalid length. [ 146.809101][ T7873] netlink: 'syz.0.546': attribute type 29 has an invalid length. [ 146.844121][ T7880] netlink: 12 bytes leftover after parsing attributes in process `syz.0.546'. [ 146.846622][ T7873] netlink: 148 bytes leftover after parsing attributes in process `syz.0.546'. [ 146.911051][ T7884] netlink: zone id is out of range [ 146.926850][ T7884] netlink: zone id is out of range [ 146.932704][ T7873] netlink: 'syz.0.546': attribute type 1 has an invalid length. [ 146.949176][ T7873] netlink: 'syz.0.546': attribute type 2 has an invalid length. [ 146.959573][ T7884] netlink: zone id is out of range [ 146.964752][ T7884] netlink: zone id is out of range [ 146.996241][ T7884] netlink: zone id is out of range [ 146.999079][ T7873] netlink: 'syz.0.546': attribute type 3 has an invalid length. [ 147.009462][ T7884] netlink: zone id is out of range [ 147.009494][ T7884] netlink: zone id is out of range [ 147.009504][ T7884] netlink: zone id is out of range [ 147.009513][ T7884] netlink: zone id is out of range [ 147.101926][ T7873] netlink: 19 bytes leftover after parsing attributes in process `syz.0.546'. [ 147.194558][ T7896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.548'. [ 147.207779][ T7872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.209193][ T7953] netlink: 12 bytes leftover after parsing attributes in process `syz.0.562'. [ 148.516742][ T7967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.563'. [ 148.888696][ T7967] team0: Port device team_slave_0 removed [ 148.917407][ T7974] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 148.984589][ T7978] netlink: 16 bytes leftover after parsing attributes in process `syz.4.568'. [ 149.445174][ T7994] netlink: 'syz.4.574': attribute type 12 has an invalid length. [ 149.695573][ T8012] netlink: 'syz.0.579': attribute type 4 has an invalid length. [ 149.717975][ T8018] blkio.reset_stats is deprecated [ 149.779192][ T8021] netlink: 'syz.4.580': attribute type 2 has an invalid length. [ 149.808364][ T8021] netlink: 'syz.4.580': attribute type 3 has an invalid length. [ 150.816734][ T8078] sctp: [Deprecated]: syz.2.592 (pid 8078) Use of int in maxseg socket option. [ 150.816734][ T8078] Use struct sctp_assoc_value instead [ 151.014786][ T8085] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 151.067566][ T8089] sch_fq: defrate 0 ignored. [ 151.155639][ T8092] __nla_validate_parse: 11 callbacks suppressed [ 151.155663][ T8092] netlink: 4 bytes leftover after parsing attributes in process `syz.4.597'. [ 151.177486][ T8092] netlink: 12 bytes leftover after parsing attributes in process `syz.4.597'. [ 151.285816][ T8049] netlink: 28 bytes leftover after parsing attributes in process `syz.3.585'. [ 151.297791][ T8098] netlink: 20 bytes leftover after parsing attributes in process `syz.0.599'. [ 151.391643][ T8102] net_ratelimit: 399 callbacks suppressed [ 151.391666][ T8102] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 151.458889][ T8111] netlink: 12 bytes leftover after parsing attributes in process `syz.2.600'. [ 151.912225][ T8124] netlink: 24 bytes leftover after parsing attributes in process `syz.2.605'. [ 152.212836][ T8145] netlink: 20 bytes leftover after parsing attributes in process `syz.3.609'. [ 152.251574][ T8145] openvswitch: netlink: Flow key attr not present in new flow. [ 152.533503][ T8158] set match dimension is over the limit! [ 152.790022][ T8175] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 152.863730][ T8175] validate_nla: 2 callbacks suppressed [ 152.863748][ T8175] netlink: 'syz.4.617': attribute type 10 has an invalid length. [ 153.073375][ T8188] netlink: 44 bytes leftover after parsing attributes in process `syz.2.620'. [ 153.119508][ T8190] netlink: 44 bytes leftover after parsing attributes in process `syz.2.620'. [ 153.120145][ T8192] netlink: 28 bytes leftover after parsing attributes in process `syz.1.619'. [ 153.274557][ T8192] netlink: 'syz.1.619': attribute type 10 has an invalid length. [ 153.420895][ T8203] bridge_slave_1: left allmulticast mode [ 153.462484][ T8203] bridge_slave_1: left promiscuous mode [ 153.484107][ T5838] Bluetooth: hci4: link tx timeout [ 153.489115][ T8203] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.489645][ T5838] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.541581][ T8203] bridge_slave_0: left allmulticast mode [ 153.547306][ T8203] bridge_slave_0: left promiscuous mode [ 153.602648][ T8203] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.130981][ T8243] netlink: 'syz.1.637': attribute type 33 has an invalid length. [ 154.376275][ T8256] tipc: Started in network mode [ 154.384471][ T8256] tipc: Node identity , cluster identity 4711 [ 154.392675][ T8256] tipc: Failed to obtain node identity [ 154.398447][ T8256] tipc: Enabling of bearer rejected, failed to enable media [ 154.446979][ T5920] hid-generic 0005:0458:0009.0001: unknown main item tag 0x0 [ 154.501640][ T5920] hid-generic 0005:0458:0009.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 154.528115][ T8263] pim6reg1: entered promiscuous mode [ 154.538296][ T8263] pim6reg1: entered allmulticast mode [ 154.746495][ T8271] IPVS: set_ctl: invalid protocol: 24 0.0.0.0:0 [ 154.780353][ T8270] IPVS: set_ctl: invalid protocol: 24 0.0.0.0:0 [ 155.013350][ T8284] netlink: 'syz.1.649': attribute type 1 has an invalid length. [ 155.056101][ T8284] netlink: 'syz.1.649': attribute type 1 has an invalid length. [ 155.288689][ T8301] sctp: [Deprecated]: syz.0.656 (pid 8301) Use of struct sctp_assoc_value in delayed_ack socket option. [ 155.288689][ T8301] Use struct sctp_sack_info instead [ 155.397696][ T8301] netlink: 'syz.0.656': attribute type 1 has an invalid length. [ 155.521068][ T5838] Bluetooth: hci4: command 0x0401 tx timeout [ 155.590076][ T8315] netlink: 'syz.3.660': attribute type 4 has an invalid length. [ 155.836682][ T8328] Bluetooth: MGMT ver 1.23 [ 155.881840][ T8330] netlink: 'syz.0.666': attribute type 1 has an invalid length. [ 155.962419][ T8334] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 3, id = 0 [ 155.962731][ T8332] IPVS: stopping backup sync thread 8334 ... [ 156.074742][ T8341] netlink: 'syz.0.672': attribute type 1 has an invalid length. [ 156.198626][ T8337] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 156.204742][ T8337] syzkaller0: Linktype set failed because interface is up [ 156.222155][ T8337] netlink: 'syz.4.670': attribute type 10 has an invalid length. [ 156.224199][ T9] syzkaller0: tun_net_xmit 76 [ 156.248702][ T8337] __nla_validate_parse: 21 callbacks suppressed [ 156.248718][ T8337] netlink: 40 bytes leftover after parsing attributes in process `syz.4.670'. [ 156.259771][ T9] syzkaller0: tun_net_xmit 76 [ 156.326309][ T8337] team0: Port device geneve0 added [ 156.898720][ T8385] netlink: 24 bytes leftover after parsing attributes in process `syz.3.680'. [ 156.967299][ T8388] netlink: 44 bytes leftover after parsing attributes in process `syz.3.680'. [ 158.147214][ T8379] netlink: 4 bytes leftover after parsing attributes in process `syz.3.680'. [ 158.156882][ T8384] netlink: 'syz.0.681': attribute type 12 has an invalid length. [ 158.165648][ T8384] netlink: 132 bytes leftover after parsing attributes in process `syz.0.681'. [ 158.178650][ T8385] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 158.441491][ T8407] netlink: 52 bytes leftover after parsing attributes in process `syz.4.686'. [ 158.466988][ T8407] netlink: 52 bytes leftover after parsing attributes in process `syz.4.686'. [ 158.479183][ T8414] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 158.494630][ T8414] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 158.510508][ T8407] netlink: 52 bytes leftover after parsing attributes in process `syz.4.686'. [ 158.661049][ T8410] bond2: entered promiscuous mode [ 158.667491][ T8410] bond2: entered allmulticast mode [ 158.673982][ T8410] 8021q: adding VLAN 0 to HW filter on device bond2 [ 158.793905][ T8410] bond2 (unregistering): Released all slaves [ 158.837354][ T8423] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 158.861809][ T8423] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 158.883416][ T8423] netlink: 20 bytes leftover after parsing attributes in process `syz.2.691'. [ 159.151320][ T8442] netlink: 'syz.1.694': attribute type 1 has an invalid length. [ 159.151638][ T8439] netlink: 76 bytes leftover after parsing attributes in process `syz.2.696'. [ 159.220977][ T8443] x_tables: duplicate entry at hook 2 [ 160.066247][ T8485] netlink: 'syz.0.708': attribute type 6 has an invalid length. [ 160.231029][ T8498] netlink: 'syz.1.711': attribute type 3 has an invalid length. [ 160.408235][ T8505] netlink: 'syz.0.713': attribute type 3 has an invalid length. [ 160.488092][ T8511] netlink: 'syz.0.713': attribute type 3 has an invalid length. [ 160.771587][ T8521] syzkaller0: entered promiscuous mode [ 160.789611][ T8521] syzkaller0: entered allmulticast mode [ 160.828442][ T8521] netlink: 'syz.0.718': attribute type 4 has an invalid length. [ 162.345881][ T8606] __nla_validate_parse: 7 callbacks suppressed [ 162.345903][ T8606] netlink: 8 bytes leftover after parsing attributes in process `syz.3.740'. [ 162.383761][ T8603] netlink: 16 bytes leftover after parsing attributes in process `syz.4.738'. [ 162.514116][ T8609] netlink: 16 bytes leftover after parsing attributes in process `syz.2.742'. [ 162.760101][ T8628] netlink: 8 bytes leftover after parsing attributes in process `syz.4.749'. [ 162.798414][ T8630] netlink: 12 bytes leftover after parsing attributes in process `syz.4.749'. [ 162.834298][ T8629] netlink: 4 bytes leftover after parsing attributes in process `syz.3.750'. [ 162.913307][ T8630] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 163.326523][ T8665] netlink: 'syz.3.756': attribute type 10 has an invalid length. [ 163.363707][ T8665] team0: Device veth1_macvtap failed to register rx_handler [ 163.567408][ T8680] netlink: 'syz.1.758': attribute type 25 has an invalid length. [ 163.791167][ T8690] sock: sock_timestamping_bind_phc: sock not bind to device [ 163.795447][ T8695] netlink: 'syz.3.764': attribute type 10 has an invalid length. [ 163.811502][ T8695] veth0_vlan: entered allmulticast mode [ 163.828787][ T8695] veth0_vlan: left promiscuous mode [ 163.838955][ T8695] veth0_vlan: entered promiscuous mode [ 163.851391][ T8695] team0: Device veth0_vlan failed to register rx_handler [ 163.904292][ T8699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.765'. [ 163.913602][ T8699] netlink: 12 bytes leftover after parsing attributes in process `syz.2.765'. [ 164.327912][ T8718] netlink: 'syz.2.770': attribute type 64 has an invalid length. [ 164.361023][ T8717] netlink: 'syz.2.770': attribute type 64 has an invalid length. [ 164.380762][ T8717] netlink: 5 bytes leftover after parsing attributes in process `syz.2.770'. [ 164.393658][ T8718] netlink: 5 bytes leftover after parsing attributes in process `syz.2.770'. [ 164.568441][ T8726] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 164.627130][ T8730] geneve2: entered promiscuous mode [ 164.639674][ T8730] geneve2: entered allmulticast mode [ 164.815297][ T8738] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.937398][ T8738] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.257256][ T8765] netlink: 'syz.1.785': attribute type 23 has an invalid length. [ 165.486020][ T8778] tap0: tun_chr_ioctl cmd 1074025678 [ 165.491686][ T8778] tap0: group set to 0 [ 165.508008][ T8778] tap0: tun_chr_ioctl cmd 21731 [ 165.560638][ T8780] netlink: zone id is out of range [ 165.565829][ T8780] netlink: zone id is out of range [ 165.592204][ T8784] netlink: zone id is out of range [ 165.595314][ T8786] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 165.597380][ T8784] netlink: zone id is out of range [ 165.597391][ T8784] netlink: zone id is out of range [ 165.597400][ T8784] netlink: zone id is out of range [ 165.597408][ T8784] netlink: zone id is out of range [ 165.597417][ T8784] netlink: zone id is out of range [ 165.626456][ T8780] IPv6: sit1: Disabled Multicast RS [ 165.652974][ T8782] team0: entered promiscuous mode [ 165.658093][ T8782] team_slave_0: entered promiscuous mode [ 165.668802][ T8782] team_slave_1: entered promiscuous mode [ 165.715914][ T8782] hsr1: entered promiscuous mode [ 165.732429][ T8782] hsr1: entered allmulticast mode [ 165.737534][ T8782] team0: entered allmulticast mode [ 165.788174][ T8782] team_slave_0: entered allmulticast mode [ 165.804585][ T8782] team_slave_1: entered allmulticast mode [ 165.843152][ T8801] bridge2: entered promiscuous mode [ 165.848767][ T8801] bridge2: entered allmulticast mode [ 165.947444][ T8808] tipc: Can't bind to reserved service type 1 [ 165.985390][ T8813] netlink: 'syz.2.797': attribute type 1 has an invalid length. [ 166.039095][ T8814] netlink: 'syz.2.797': attribute type 6 has an invalid length. [ 166.048991][ T8814] netlink: 'syz.2.797': attribute type 5 has an invalid length. [ 166.057216][ T8816] netlink: 'syz.2.797': attribute type 6 has an invalid length. [ 166.446634][ T8844] netlink: 'syz.2.803': attribute type 11 has an invalid length. [ 167.791085][ T8933] __nla_validate_parse: 25 callbacks suppressed [ 167.791104][ T8933] netlink: 76 bytes leftover after parsing attributes in process `syz.3.828'. [ 168.016900][ T8939] netlink: 28 bytes leftover after parsing attributes in process `syz.0.830'. [ 168.086639][ T8942] nbd: must specify an index to disconnect [ 168.161342][ T8947] netlink: 20 bytes leftover after parsing attributes in process `syz.3.831'. [ 168.265530][ T8939] netlink: 28 bytes leftover after parsing attributes in process `syz.0.830'. [ 168.289973][ T8939] netlink: 28 bytes leftover after parsing attributes in process `syz.0.830'. [ 168.314051][ T8951] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 168.340495][ T8939] netlink: 28 bytes leftover after parsing attributes in process `syz.0.830'. [ 168.362041][ T8939] netlink: 28 bytes leftover after parsing attributes in process `syz.0.830'. [ 168.372583][ T8939] netlink: 28 bytes leftover after parsing attributes in process `syz.0.830'. [ 168.387352][ T8939] netlink: 28 bytes leftover after parsing attributes in process `syz.0.830'. [ 168.415328][ T8939] netlink: 28 bytes leftover after parsing attributes in process `syz.0.830'. [ 168.528028][ T8953] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.535880][ T8953] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.749008][ T8963] validate_nla: 4 callbacks suppressed [ 168.749028][ T8963] netlink: 'syz.4.839': attribute type 4 has an invalid length. [ 169.368663][ T8995] netlink: 'syz.2.847': attribute type 21 has an invalid length. [ 169.388141][ T8990] syz.0.846 (8990) used greatest stack depth: 17272 bytes left [ 169.397456][ T8995] netlink: 'syz.2.847': attribute type 20 has an invalid length. [ 169.410007][ T8995] IPv6: NLM_F_CREATE should be specified when creating new route [ 169.436160][ T8994] netlink: 'syz.2.847': attribute type 21 has an invalid length. [ 169.477864][ T8994] netlink: 'syz.2.847': attribute type 20 has an invalid length. [ 169.498164][ T9000] netlink: 'syz.1.850': attribute type 1 has an invalid length. [ 169.509641][ T9000] netlink: 'syz.1.850': attribute type 10 has an invalid length. [ 169.809051][ T9007] bond0: (slave bond_slave_0): Releasing backup interface [ 169.839842][ T9007] bond_slave_0: left promiscuous mode [ 169.856562][ T9007] bond0: (slave bond_slave_1): Releasing backup interface [ 169.887483][ T9007] bond_slave_1: left promiscuous mode [ 169.904558][ T9007] team_slave_0: left promiscuous mode [ 169.911515][ T9007] team_slave_0: left allmulticast mode [ 169.937263][ T9007] team0: Port device team_slave_0 removed [ 169.951010][ T9007] team_slave_1: left promiscuous mode [ 169.957128][ T9007] team_slave_1: left allmulticast mode [ 169.984733][ T9007] team0: Port device team_slave_1 removed [ 169.997057][ T9007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.006926][ T9007] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.016671][ T9007] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.024261][ T9007] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.062494][ T9026] sctp: [Deprecated]: syz.0.857 (pid 9026) Use of struct sctp_assoc_value in delayed_ack socket option. [ 170.062494][ T9026] Use struct sctp_sack_info instead [ 170.290397][ T9034] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 170.298046][ T9034] IPv6: NLM_F_CREATE should be set when creating new route [ 170.717660][ T9042] ieee802154 phy0 wpan0: encryption failed: -22 [ 171.546144][ T9112] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 171.585274][ T9112] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 171.634801][ T9112] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 171.720930][ T9123] net_ratelimit: 42 callbacks suppressed [ 171.720950][ T9123] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 171.801191][ T9124] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 172.670743][ T9168] x_tables: duplicate underflow at hook 2 [ 172.763487][ T9170] netdevsim netdevsim1 : set [0, 0] type 1 family 0 port 8472 - 0 [ 172.772097][ T9170] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.781274][ T9170] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.790167][ T9170] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.078828][ T9187] __nla_validate_parse: 35 callbacks suppressed [ 173.078848][ T9187] netlink: 104 bytes leftover after parsing attributes in process `syz.2.895'. [ 173.225994][ T9189] 8021q: adding VLAN 0 to HW filter on device bond3 [ 173.285823][ T9189] bond0: (slave bond3): Enslaving as an active interface with an up link [ 173.906002][ T9232] netlink: 16 bytes leftover after parsing attributes in process `syz.0.904'. [ 174.321906][ T9253] sch_fq: defrate 0 ignored. [ 174.620506][ T9262] netlink: 'syz.3.908': attribute type 4 has an invalid length. [ 174.633026][ T9262] xt_CT: You must specify a L4 protocol and not use inversions on it [ 174.720448][ T9268] netlink: 'syz.4.909': attribute type 1 has an invalid length. [ 174.769156][ T9270] netlink: ct family unspecified [ 174.779065][ T9268] netlink: 17 bytes leftover after parsing attributes in process `syz.4.909'. [ 174.809882][ T9270] openvswitch: netlink: Actions may not be safe on all matching packets [ 174.908391][ T9274] netlink: 116 bytes leftover after parsing attributes in process `syz.0.912'. [ 174.971903][ T9280] x_tables: duplicate underflow at hook 2 [ 175.018845][ T9283] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 175.156918][ T9287] netlink: 40 bytes leftover after parsing attributes in process `syz.0.917'. [ 175.679297][ T9324] netlink: 28 bytes leftover after parsing attributes in process `syz.3.926'. [ 175.825749][ T9331] netlink: 'syz.0.928': attribute type 4 has an invalid length. [ 175.854024][ T9331] netlink: 17 bytes leftover after parsing attributes in process `syz.0.928'. [ 175.881864][ T9334] netlink: 4 bytes leftover after parsing attributes in process `syz.3.930'. [ 175.937277][ T9335] netlink: 12 bytes leftover after parsing attributes in process `syz.3.930'. [ 175.964041][ T9337] xt_connbytes: Forcing CT accounting to be enabled [ 175.986855][ T9337] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 175.998393][ T9334] netlink: 'syz.3.930': attribute type 1 has an invalid length. [ 176.017630][ T9334] netlink: 4 bytes leftover after parsing attributes in process `syz.3.930'. [ 176.093172][ T9341] netlink: 'syz.0.932': attribute type 1 has an invalid length. [ 176.333819][ T9352] netlink: 'syz.1.935': attribute type 1 has an invalid length. [ 178.100014][ T9454] netlink: 'syz.4.961': attribute type 1 has an invalid length. [ 178.149645][ T9454] __nla_validate_parse: 7 callbacks suppressed [ 178.149665][ T9454] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.961'. [ 178.337095][ T9474] netlink: 28 bytes leftover after parsing attributes in process `syz.4.968'. [ 178.353957][ T9473] openvswitch: netlink: Port 10289156 exceeds max allowable 65535 [ 178.505019][ T9480] netlink: 'syz.3.970': attribute type 4 has an invalid length. [ 178.538828][ T9480] netlink: 'syz.3.970': attribute type 4 has an invalid length. [ 178.601488][ T9483] netlink: 45 bytes leftover after parsing attributes in process `syz.4.971'. [ 178.623222][ T9486] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 178.642385][ T9490] netlink: 48 bytes leftover after parsing attributes in process `syz.1.972'. [ 178.700639][ T9493] netlink: 'syz.2.973': attribute type 21 has an invalid length. [ 178.710333][ T9493] netlink: 132 bytes leftover after parsing attributes in process `syz.2.973'. [ 179.017314][ T9507] Bluetooth: MGMT ver 1.23 [ 179.094090][ T9511] netlink: 4 bytes leftover after parsing attributes in process `syz.4.979'. [ 179.166604][ T9518] netlink: 36 bytes leftover after parsing attributes in process `syz.2.981'. [ 179.181895][ T9518] netlink: 36 bytes leftover after parsing attributes in process `syz.2.981'. [ 179.363093][ T9527] netlink: 76 bytes leftover after parsing attributes in process `syz.2.985'. [ 179.375874][ T9527] nbd: illegal input index -8454144 [ 179.468329][ T9535] netlink: 12 bytes leftover after parsing attributes in process `syz.1.987'. [ 179.482045][ T9529] dvmrp0: entered allmulticast mode [ 180.038305][ T9561] validate_nla: 2 callbacks suppressed [ 180.038326][ T9561] netlink: 'syz.1.995': attribute type 1 has an invalid length. [ 180.701415][ T9604] x_tables: duplicate underflow at hook 1 [ 181.058372][ T9601] batadv_slave_1: default FDB implementation only supports local addresses [ 181.291595][ T6021] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.379939][ T6021] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.505027][ T6021] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.677783][ T6021] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.195963][ T9648] netlink: 'syz.1.1012': attribute type 2 has an invalid length. [ 182.285240][ T6021] bridge_slave_1: left allmulticast mode [ 182.320723][ T6021] bridge_slave_1: left promiscuous mode [ 182.355116][ T6021] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.407164][ T6021] bridge_slave_0: left allmulticast mode [ 182.421360][ T6021] bridge_slave_0: left promiscuous mode [ 182.436877][ T6021] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.811854][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 182.824376][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 182.838160][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 182.853582][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 182.864657][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 183.303516][ T6021] team0: Port device geneve0 removed [ 183.805231][ T6021] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.821694][ T6021] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.838094][ T6021] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 183.850034][ T6021] bond0 (unregistering): Released all slaves [ 184.139751][ T9728] __nla_validate_parse: 6 callbacks suppressed [ 184.139771][ T9728] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1026'. [ 184.140147][ T9727] netlink: 'syz.3.1027': attribute type 1 has an invalid length. [ 184.207923][ T9727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1027'. [ 184.221400][ T9728] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1026'. [ 184.256106][ T9728] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 184.858062][ T9682] chnl_net:caif_netlink_parms(): no params data found [ 184.961246][ T5838] Bluetooth: hci2: command tx timeout [ 185.158410][ T9773] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1034'. [ 185.253209][ T9773] ipvlan4: entered allmulticast mode [ 185.396453][ T9682] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.416053][ T9682] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.434823][ T9682] bridge_slave_0: entered allmulticast mode [ 185.458115][ T9682] bridge_slave_0: entered promiscuous mode [ 185.489012][ T9682] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.549643][ T9682] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.556954][ T9682] bridge_slave_1: entered allmulticast mode [ 185.612384][ T9682] bridge_slave_1: entered promiscuous mode [ 185.889103][ T9682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.111547][ T9819] netlink: 'syz.3.1044': attribute type 4 has an invalid length. [ 186.132235][ T9682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.141625][ T9820] netlink: 'syz.3.1044': attribute type 4 has an invalid length. [ 186.196511][ T9826] netlink: 'syz.3.1044': attribute type 4 has an invalid length. [ 186.242210][ T9827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1046'. [ 186.261709][ T9827] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 186.280987][ T9827] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 186.352937][ T9682] team0: Port device team_slave_0 added [ 186.438793][ T9837] sctp: [Deprecated]: syz.3.1049 (pid 9837) Use of struct sctp_assoc_value in delayed_ack socket option. [ 186.438793][ T9837] Use struct sctp_sack_info instead [ 186.552058][ T9682] team0: Port device team_slave_1 added [ 186.785105][ T9855] netlink: 'syz.2.1055': attribute type 1 has an invalid length. [ 186.793194][ T9855] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1055'. [ 186.914465][ T9859] netlink: 'syz.0.1057': attribute type 1 has an invalid length. [ 186.930580][ T9682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.944621][ T9855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1055'. [ 186.949897][ T9859] netlink: 'syz.0.1057': attribute type 2 has an invalid length. [ 186.962553][ T9865] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1058'. [ 186.964312][ T9682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.024482][ T9682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.037989][ T9860] netlink: 'syz.2.1055': attribute type 2 has an invalid length. [ 187.039728][ T5838] Bluetooth: hci2: command 0x041b tx timeout [ 187.049928][ T9682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.065102][ T9682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.138318][ T9682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.224971][ T6021] hsr_slave_0: left promiscuous mode [ 187.250989][ T6021] hsr_slave_1: left promiscuous mode [ 187.263738][ T6021] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.276874][ T6021] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.302158][ T6021] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.319457][ T6021] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.375178][ T9883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1060'. [ 187.379563][ T6021] veth1_macvtap: left promiscuous mode [ 187.409628][ T6021] veth0_macvtap: left promiscuous mode [ 187.415407][ T6021] veth1_vlan: left promiscuous mode [ 187.449634][ T6021] veth0_vlan: left promiscuous mode [ 188.124800][ T6021] team0 (unregistering): Port device team_slave_1 removed [ 188.164459][ T6021] team0 (unregistering): Port device team_slave_0 removed [ 188.569662][ T9903] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 188.858203][ T9682] hsr_slave_0: entered promiscuous mode [ 188.892846][ T9682] hsr_slave_1: entered promiscuous mode [ 188.893297][ T9915] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 188.997746][ T9924] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1070'. [ 189.119599][ T5838] Bluetooth: hci2: command 0x041b tx timeout [ 189.345222][ T9933] netlink: zone id is out of range [ 189.532170][ T9942] bond0: left promiscuous mode [ 189.667424][ T6021] IPVS: stop unused estimator thread 0... [ 190.446498][ T9985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1085'. [ 190.605666][ T9682] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 190.666011][ T9682] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 190.695453][ T9682] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 190.731877][T10004] netlink: 'syz.0.1090': attribute type 1 has an invalid length. [ 190.801690][ T9682] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 190.870766][T10013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1090'. [ 190.889716][ T5845] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 190.897558][T10003] 8021q: adding VLAN 0 to HW filter on device bond2 [ 191.197765][T10003] bond2 (unregistering): Released all slaves [ 191.204770][ T5845] Bluetooth: hci2: command 0x041b tx timeout [ 191.237595][T10013] bond4: entered allmulticast mode [ 191.244050][T10013] 8021q: adding VLAN 0 to HW filter on device bond4 [ 191.344035][T10028] netlink: 'syz.1.1093': attribute type 21 has an invalid length. [ 191.380176][T10034] netlink: 'syz.0.1094': attribute type 1 has an invalid length. [ 191.537609][T10041] netlink: 'syz.0.1094': attribute type 1 has an invalid length. [ 191.584337][T10041] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1094'. [ 191.735315][T10034] veth5: entered promiscuous mode [ 191.870912][T10039] erspan0: entered allmulticast mode [ 191.925243][ T9682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.021980][ T9682] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.114598][ T6034] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.122801][ T6034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.238897][ T6034] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.246176][ T6034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.787640][T10095] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1107'. [ 192.933427][T10100] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1108'. [ 192.980391][T10100] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1108'. [ 193.128151][ T9682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.185597][T10111] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20002 [ 193.279949][ T5845] Bluetooth: hci2: command 0x041b tx timeout [ 193.637617][T10131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1113'. [ 193.741231][T10131] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.750079][T10131] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.758819][T10131] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.767780][T10131] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.015896][ T9682] veth0_vlan: entered promiscuous mode [ 194.079075][ T9682] veth1_vlan: entered promiscuous mode [ 194.269101][ T9682] veth0_macvtap: entered promiscuous mode [ 194.324368][ T9682] veth1_macvtap: entered promiscuous mode [ 194.404572][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.464314][ T9682] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.544908][ T9682] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.586405][T10179] netlink: 'syz.0.1124': attribute type 1 has an invalid length. [ 194.603195][ T9682] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.623645][T10172] xt_CT: No such helper "pptp" [ 194.649423][ T9682] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.668437][T10183] x_tables: duplicate underflow at hook 3 [ 194.681966][ T9682] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.699428][ T9682] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.973923][T10195] netlink: 'syz.3.1127': attribute type 4 has an invalid length. [ 195.161176][T10197] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1129'. [ 195.170693][T10197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1129'. [ 195.189464][T10197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1129'. [ 195.995727][T10226] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1135'. [ 196.759170][T10225] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1135'. [ 196.907893][T10228] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1136'. [ 197.004640][T10233] netlink: 'syz.2.1138': attribute type 1 has an invalid length. [ 197.029008][ T6032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.052089][T10233] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1138'. [ 197.064170][ T6032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.153012][T10233] syz_tun: entered allmulticast mode [ 197.216966][T10244] netlink: 'syz.1.1140': attribute type 21 has an invalid length. [ 197.236176][T10244] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1140'. [ 197.276964][T10247] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1141'. [ 197.281245][T10231] syz_tun: left allmulticast mode [ 197.288662][ T6034] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.310014][ T6034] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.463812][T10256] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1143'. [ 197.497345][T10259] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1144'. [ 197.572705][T10267] netlink: 'syz.3.1145': attribute type 1 has an invalid length. [ 197.615156][ T9682] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 197.627133][ T9682] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 197.635690][ T9682] CPU: 1 UID: 0 PID: 9682 Comm: syz-executor Not tainted 6.15.0-rc5-syzkaller-00163-g09db7a4d287d #0 PREEMPT(full) [ 197.647877][ T9682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 197.657963][ T9682] RIP: 0010:klist_remove+0x14a/0x340 [ 197.663286][ T9682] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 99 6d d5 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 7a 6d d5 f6 49 8b 44 24 58 48 89 44 24 08 [ 197.682908][ T9682] RSP: 0018:ffffc9001aee7840 EFLAGS: 00010202 [ 197.689001][ T9682] RAX: 000000000000000b RBX: ffff888057adbc00 RCX: 0000000000000000 [ 197.696984][ T9682] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 197.705075][ T9682] RBP: ffffc9001aee7928 R08: ffffffff8f6567e3 R09: 1ffffffff1ecacfc [ 197.713071][ T9682] R10: dffffc0000000000 R11: fffffbfff1ecacfd R12: 0000000000000000 [ 197.721066][ T9682] R13: 1ffff11029a5ab8c R14: ffff88814d2d5c60 R15: dffffc0000000000 [ 197.729137][ T9682] FS: 0000000000000000(0000) GS:ffff8881261cc000(0000) knlGS:0000000000000000 [ 197.738101][ T9682] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 197.744697][ T9682] CR2: 00007f5f23d2ef98 CR3: 0000000060dc8000 CR4: 00000000003526f0 [ 197.752683][ T9682] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 197.760661][ T9682] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 197.768644][ T9682] Call Trace: [ 197.771930][ T9682] [ 197.774869][ T9682] ? __pfx_klist_remove+0x10/0x10 [ 197.779908][ T9682] ? __pfx_kobject_move+0x10/0x10 [ 197.784939][ T9682] ? get_device_parent+0x366/0x3a0 [ 197.790056][ T9682] device_move+0x193/0x700 [ 197.794484][ T9682] hci_conn_del_sysfs+0xb8/0x170 [ 197.799450][ T9682] hci_conn_del+0x8f5/0xca0 [ 197.803962][ T9682] hci_conn_hash_flush+0x191/0x230 [ 197.809112][ T9682] hci_dev_close_sync+0xaef/0x1330 [ 197.814251][ T9682] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 197.819812][ T9682] ? up_write+0x1c4/0x420 [ 197.824147][ T9682] hci_unregister_dev+0x206/0x500 [ 197.829184][ T9682] vhci_release+0x80/0xd0 [ 197.833519][ T9682] ? __pfx_vhci_release+0x10/0x10 [ 197.838545][ T9682] __fput+0x449/0xa70 [ 197.842544][ T9682] task_work_run+0x1d1/0x260 [ 197.847146][ T9682] ? __pfx_task_work_run+0x10/0x10 [ 197.852298][ T9682] ? kmem_cache_free+0x192/0x3f0 [ 197.857244][ T9682] do_exit+0x8d6/0x2550 [ 197.861412][ T9682] ? __pfx_do_exit+0x10/0x10 [ 197.866014][ T9682] ? _raw_spin_unlock_irq+0x23/0x50 [ 197.871216][ T9682] ? lockdep_hardirqs_on+0x9c/0x150 [ 197.876419][ T9682] do_group_exit+0x21c/0x2d0 [ 197.881020][ T9682] __x64_sys_exit_group+0x3f/0x40 [ 197.886064][ T9682] x64_sys_call+0x21ba/0x21c0 [ 197.890747][ T9682] do_syscall_64+0xf6/0x210 [ 197.895261][ T9682] ? clear_bhb_loop+0x45/0xa0 [ 197.899940][ T9682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.905836][ T9682] RIP: 0033:0x7f821e38e969 [ 197.910268][ T9682] Code: Unable to access opcode bytes at 0x7f821e38e93f. [ 197.917287][ T9682] RSP: 002b:00007ffc157f3498 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 197.925713][ T9682] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f821e38e969 [ 197.933707][ T9682] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 197.941684][ T9682] RBP: 00007f821e3ee8f0 R08: 00007ffc157f1237 R09: 0000000000000003 [ 197.949673][ T9682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.957650][ T9682] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007ffc157f3650 [ 197.965632][ T9682] [ 197.968661][ T9682] Modules linked in: [ 197.974880][ T9682] ---[ end trace 0000000000000000 ]--- [ 197.989471][ T9682] RIP: 0010:klist_remove+0x14a/0x340 [ 197.995034][ T9682] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 99 6d d5 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 7a 6d d5 f6 49 8b 44 24 58 48 89 44 24 08 [ 198.042438][ T9682] RSP: 0018:ffffc9001aee7840 EFLAGS: 00010202 [ 198.062783][ T9682] RAX: 000000000000000b RBX: ffff888057adbc00 RCX: 0000000000000000 [ 198.075410][ T9682] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 198.087071][ T9682] RBP: ffffc9001aee7928 R08: ffffffff8f6567e3 R09: 1ffffffff1ecacfc [ 198.095181][ T9682] R10: dffffc0000000000 R11: fffffbfff1ecacfd R12: 0000000000000000 [ 198.103386][ T9682] R13: 1ffff11029a5ab8c R14: ffff88814d2d5c60 R15: dffffc0000000000 [ 198.111468][ T9682] FS: 0000000000000000(0000) GS:ffff8881261cc000(0000) knlGS:0000000000000000 [ 198.120867][ T9682] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 198.127524][ T9682] CR2: 000055642a02a950 CR3: 000000002fd9c000 CR4: 00000000003526f0 [ 198.139920][ T9682] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 198.149539][ T9682] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 198.157567][ T9682] Kernel panic - not syncing: Fatal exception [ 198.163896][ T9682] Kernel Offset: disabled [ 198.168225][ T9682] Rebooting in 86400 seconds..