last executing test programs: 51.503183062s ago: executing program 0 (id=940): bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x5}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000300)=@framed={{}, [@map_fd={0x18, 0x5, 0x1, 0x0, r0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000), 0xc, &(0x7f0000000480)={&(0x7f00000001c0)={0xbc, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x4}, @TIPC_NLA_MEDIA={0xa4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8000}, 0x40080) 51.119985194s ago: executing program 0 (id=945): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, r0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x88}, 0x1, 0x0, 0x0, 0x44801}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0), 0x0, 0x4040880) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000140)={'wpan3\x00'}) sendmsg$IEEE802154_LIST_IFACE(r1, 0x0, 0x4800) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r3, 0x1, 0x70bd25, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r4) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000040)={0x34, r5, 0x1, 0x400000, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 41.06751651s ago: executing program 0 (id=945): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, r0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x88}, 0x1, 0x0, 0x0, 0x44801}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0), 0x0, 0x4040880) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000140)={'wpan3\x00'}) sendmsg$IEEE802154_LIST_IFACE(r1, 0x0, 0x4800) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r3, 0x1, 0x70bd25, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r4) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000040)={0x34, r5, 0x1, 0x400000, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 31.929240446s ago: executing program 0 (id=945): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, r0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x88}, 0x1, 0x0, 0x0, 0x44801}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0), 0x0, 0x4040880) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000140)={'wpan3\x00'}) sendmsg$IEEE802154_LIST_IFACE(r1, 0x0, 0x4800) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r3, 0x1, 0x70bd25, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r4) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000040)={0x34, r5, 0x1, 0x400000, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 26.783307837s ago: executing program 2 (id=1227): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x140f, 0x100, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x24004001}, 0x4000014) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb0}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, 0x0, &(0x7f0000000380)) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000540)=@bridge_getvlan={0x20, 0x72, 0x301, 0x4000001, 0x4, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x12}]}, 0x20}, 0x1, 0xf00, 0x0, 0x40091}, 0x0) 26.571849171s ago: executing program 2 (id=1232): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="020000000200000000000000", @ANYRES32, @ANYBLOB="56f791453d9e99665f457da3535bcc82a69e650f060086fc3d000000", @ANYRES64=0x0], 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r2, &(0x7f0000000280)='cpu.pressure\x00', 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x2}, 0x1c) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="02d3460362582965a700000030f2838886d04eb27e3e21026c4904b4160653f285daf595c51a7a43074118ed818e753d05a567858aefebb0c264d1f8f11b1e324f01552409a8544976e5be78a4a06ee5757458f10195a1a5554ba15d61f92bfb01ec5fb11fda6517875137e9a72fe411715f3cd1e600e7a499d2eac21b0f099a733b70761bedaaa303c965adf616af1cd5cb8cb4c16c4ea0c5e87916aaf36305f9b1368196", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) socket$inet6(0xa, 0x2, 0x0) 26.515197597s ago: executing program 2 (id=1234): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x6c, 0x0, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7}}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x44850}, 0x1c0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000d001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000130014000000020a010200000000000000000000000030000000160a01010000000000000000010000000900020073797a30000000000900010073797a300000000004000380140000001000010000000000000000000000000a"], 0x8c}}, 0x0) 26.419400841s ago: executing program 2 (id=1235): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e20}, 0x6e) bind$unix(r0, &(0x7f0000000080)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000100)=0x219, 0x4) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000140)=[{0x1, 0x0, {0x0, 0x0, 0x1}, {0x2, 0xff, 0x1}, 0xff, 0xff}, {0x1, 0x2, {0x0, 0x0, 0x2}, {0x1, 0xff, 0x4}, 0x2, 0x2}, {0x2, 0x0, {0x2, 0xff}, {0x2, 0xff, 0x3}, 0x1, 0x1}, {0x2, 0x3, {0x0, 0x0, 0x4}, {0x0, 0xf0, 0x1}, 0xfe, 0x1}, {0x2, 0x3, {0x1, 0xff}, {0x0, 0x1, 0x2}, 0x2}, {0x2, 0x1, {0x0, 0x1, 0x2}, {0x1, 0x0, 0x3}, 0xfd}], 0xc0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x29, 0xbb, 0x7, 0x81, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, 0x10, 0x706, 0x24, 0x1}}) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@delqdisc={0x34, 0x25, 0x200, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x9, 0xfff3}, {0x10, 0x489bf0db97d06210}, {0xffff, 0x1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000880}, 0x40000) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5d8, 0x0, 0x0, 0x0, 0x3e0, 0x1f0, 0x508, 0x508, 0x508, 0x508, 0x508, 0x6, &(0x7f00000003c0), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x15}, @local, [0xffffffff], [0xff000000, 0x0, 0xff000000, 0xffffffff], 'bridge_slave_0\x00', 'pim6reg\x00', {0xff}, {}, 0x6c, 0x7}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x5}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0xf5}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xa9ad}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @remote, [0xffffff00, 0xffffff00, 0xffffffff], [0xffffffff, 0xffffffff, 0xff], 'veth0_virt_wifi\x00', 'pim6reg0\x00', {}, {0xff}, 0x29, 0x1, 0x0, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0xeb}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh={{0x30}, {0x16, 0x1, 0xc0, 0xba, 0xfffc, 0x0, 0x454}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x10, 0x7f}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x638) r5 = socket$nl_crypto(0x10, 0x3, 0x15) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x18, 0x1e, &(0x7f0000000a80)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x1}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x7}, @map_fd={0x18, 0x1, 0x1, 0x0, 0x1}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}], &(0x7f0000000b80)='GPL\x00', 0x3, 0x82, &(0x7f0000000bc0)=""/130, 0x40f00, 0x10, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c80)={0x7, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000cc0)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000d00)=[{0x1, 0x4, 0xc, 0x6}, {0x5, 0x3, 0x6, 0x4}], 0x10, 0x8000}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000e00)=r6, 0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x12, r2, 0xf73bd000) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000000e40)={'veth1_macvtap\x00', 0x2}) sendmsg$nl_route_sched(r3, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)=@getqdisc={0x48, 0x26, 0x400, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xfff2, 0xc}, {0xe, 0xfff1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x14}, 0x40004) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000fc0)={'veth1_macvtap\x00', {0x2, 0x0, @dev}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000001000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001280)={r6, 0x0, 0x48, 0xd2, &(0x7f0000001040)="5b891b96eb7f427313b8cf908274b687269eb256d92e6749c19e5c1ea52acd760d23c61e0fb65c26bde64fe0bd3879570d1c1a8740e17e386125d229d2faeab6d57da29f6935b79b", &(0x7f00000010c0)=""/210, 0xfffff988, 0x0, 0x1f, 0x50, &(0x7f00000011c0)="05d1716d85593d55a15f32c67e5f1a18a25747e97d339315d3ec026df2de18", &(0x7f0000001200)="540f1b4e67e86a437f93f10021a15a09317df538e151a12d1e58ab1c251d2dbc97ebda524d39929186b157e51d17b2f054cf7b2f24a0a4a288fd17fba26684a6b3bda5145eeba0e238b22e944ac427bb", 0x6, 0x0, 0x4}, 0x50) r8 = socket$isdn(0x22, 0x3, 0x4) clock_gettime(0x0, &(0x7f0000001340)={0x0, 0x0}) ppoll(&(0x7f0000001300)=[{r8, 0x2400}], 0x1, &(0x7f0000001380)={r9, r10+10000000}, &(0x7f00000013c0)={[0x5]}, 0x8) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000001400)=[{0x1, 0x1, {0x2, 0x1}, {0x2, 0x1, 0x4}}, {0x1, 0x0, {0x0, 0xf0, 0x4}, {0x2, 0x1, 0x1}, 0x1}], 0x40) accept4(r2, &(0x7f0000001440)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f00000014c0)=0x80, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001580)={{0x1, 0xffffffffffffffff}, &(0x7f0000001500), &(0x7f0000001540)=r3}, 0x20) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001700)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001840)={0x6, 0x11, &(0x7f00000015c0)=@raw=[@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5c76}}], &(0x7f0000001680)='syzkaller\x00', 0x4, 0x35, &(0x7f00000016c0)=""/53, 0x40f00, 0x5f, '\x00', 0x0, 0x25, r12, 0x8, &(0x7f0000001740)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000001780)={0x4, 0x8, 0x2, 0x4}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f00000017c0)=[{0x5, 0x2, 0x5, 0xc}, {0x0, 0x2, 0xb, 0x8}, {0x1, 0x3, 0x4, 0x9}, {0x4, 0x4, 0xd}, {0x0, 0x3, 0x2, 0x3}, {0x2, 0x3, 0x7}], 0x10, 0x7}, 0x94) close(r6) 20.187292571s ago: executing program 0 (id=945): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, r0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x88}, 0x1, 0x0, 0x0, 0x44801}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0), 0x0, 0x4040880) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000140)={'wpan3\x00'}) sendmsg$IEEE802154_LIST_IFACE(r1, 0x0, 0x4800) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r3, 0x1, 0x70bd25, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r4) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000040)={0x34, r5, 0x1, 0x400000, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 12.575811024s ago: executing program 2 (id=1235): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e20}, 0x6e) bind$unix(r0, &(0x7f0000000080)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000100)=0x219, 0x4) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000140)=[{0x1, 0x0, {0x0, 0x0, 0x1}, {0x2, 0xff, 0x1}, 0xff, 0xff}, {0x1, 0x2, {0x0, 0x0, 0x2}, {0x1, 0xff, 0x4}, 0x2, 0x2}, {0x2, 0x0, {0x2, 0xff}, {0x2, 0xff, 0x3}, 0x1, 0x1}, {0x2, 0x3, {0x0, 0x0, 0x4}, {0x0, 0xf0, 0x1}, 0xfe, 0x1}, {0x2, 0x3, {0x1, 0xff}, {0x0, 0x1, 0x2}, 0x2}, {0x2, 0x1, {0x0, 0x1, 0x2}, {0x1, 0x0, 0x3}, 0xfd}], 0xc0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x29, 0xbb, 0x7, 0x81, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, 0x10, 0x706, 0x24, 0x1}}) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@delqdisc={0x34, 0x25, 0x200, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x9, 0xfff3}, {0x10, 0x489bf0db97d06210}, {0xffff, 0x1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000880}, 0x40000) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5d8, 0x0, 0x0, 0x0, 0x3e0, 0x1f0, 0x508, 0x508, 0x508, 0x508, 0x508, 0x6, &(0x7f00000003c0), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x15}, @local, [0xffffffff], [0xff000000, 0x0, 0xff000000, 0xffffffff], 'bridge_slave_0\x00', 'pim6reg\x00', {0xff}, {}, 0x6c, 0x7}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x5}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0xf5}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xa9ad}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @remote, [0xffffff00, 0xffffff00, 0xffffffff], [0xffffffff, 0xffffffff, 0xff], 'veth0_virt_wifi\x00', 'pim6reg0\x00', {}, {0xff}, 0x29, 0x1, 0x0, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0xeb}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh={{0x30}, {0x16, 0x1, 0xc0, 0xba, 0xfffc, 0x0, 0x454}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x10, 0x7f}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x638) r5 = socket$nl_crypto(0x10, 0x3, 0x15) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x18, 0x1e, &(0x7f0000000a80)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x1}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x7}, @map_fd={0x18, 0x1, 0x1, 0x0, 0x1}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}], &(0x7f0000000b80)='GPL\x00', 0x3, 0x82, &(0x7f0000000bc0)=""/130, 0x40f00, 0x10, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c80)={0x7, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000cc0)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000d00)=[{0x1, 0x4, 0xc, 0x6}, {0x5, 0x3, 0x6, 0x4}], 0x10, 0x8000}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000e00)=r6, 0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x12, r2, 0xf73bd000) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000000e40)={'veth1_macvtap\x00', 0x2}) sendmsg$nl_route_sched(r3, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)=@getqdisc={0x48, 0x26, 0x400, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xfff2, 0xc}, {0xe, 0xfff1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x14}, 0x40004) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000fc0)={'veth1_macvtap\x00', {0x2, 0x0, @dev}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000001000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001280)={r6, 0x0, 0x48, 0xd2, &(0x7f0000001040)="5b891b96eb7f427313b8cf908274b687269eb256d92e6749c19e5c1ea52acd760d23c61e0fb65c26bde64fe0bd3879570d1c1a8740e17e386125d229d2faeab6d57da29f6935b79b", &(0x7f00000010c0)=""/210, 0xfffff988, 0x0, 0x1f, 0x50, &(0x7f00000011c0)="05d1716d85593d55a15f32c67e5f1a18a25747e97d339315d3ec026df2de18", &(0x7f0000001200)="540f1b4e67e86a437f93f10021a15a09317df538e151a12d1e58ab1c251d2dbc97ebda524d39929186b157e51d17b2f054cf7b2f24a0a4a288fd17fba26684a6b3bda5145eeba0e238b22e944ac427bb", 0x6, 0x0, 0x4}, 0x50) r8 = socket$isdn(0x22, 0x3, 0x4) clock_gettime(0x0, &(0x7f0000001340)={0x0, 0x0}) ppoll(&(0x7f0000001300)=[{r8, 0x2400}], 0x1, &(0x7f0000001380)={r9, r10+10000000}, &(0x7f00000013c0)={[0x5]}, 0x8) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000001400)=[{0x1, 0x1, {0x2, 0x1}, {0x2, 0x1, 0x4}}, {0x1, 0x0, {0x0, 0xf0, 0x4}, {0x2, 0x1, 0x1}, 0x1}], 0x40) accept4(r2, &(0x7f0000001440)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f00000014c0)=0x80, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001580)={{0x1, 0xffffffffffffffff}, &(0x7f0000001500), &(0x7f0000001540)=r3}, 0x20) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001700)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001840)={0x6, 0x11, &(0x7f00000015c0)=@raw=[@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5c76}}], &(0x7f0000001680)='syzkaller\x00', 0x4, 0x35, &(0x7f00000016c0)=""/53, 0x40f00, 0x5f, '\x00', 0x0, 0x25, r12, 0x8, &(0x7f0000001740)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000001780)={0x4, 0x8, 0x2, 0x4}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f00000017c0)=[{0x5, 0x2, 0x5, 0xc}, {0x0, 0x2, 0xb, 0x8}, {0x1, 0x3, 0x4, 0x9}, {0x4, 0x4, 0xd}, {0x0, 0x3, 0x2, 0x3}, {0x2, 0x3, 0x7}], 0x10, 0x7}, 0x94) close(r6) 8.314556054s ago: executing program 0 (id=945): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, r0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x88}, 0x1, 0x0, 0x0, 0x44801}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0), 0x0, 0x4040880) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000140)={'wpan3\x00'}) sendmsg$IEEE802154_LIST_IFACE(r1, 0x0, 0x4800) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r3, 0x1, 0x70bd25, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r4) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000040)={0x34, r5, 0x1, 0x400000, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 1.70902132s ago: executing program 4 (id=1439): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x0, 0x802e2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}}) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'tunl0\x00', &(0x7f0000000740)={'syztnl0\x00', 0x0, 0x10, 0x8, 0x94, 0xffffff80, {{0x21, 0x4, 0x0, 0x7, 0x84, 0x66, 0x0, 0x81, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@cipso={0x86, 0x3f, 0x3, [{0x1, 0xe, "13dbdbe383f54af4fd05e95b"}, {0x2, 0xa, "ff14a33cb2061db4"}, {0x6, 0xe, "9ca1dea2899026bf044bdfee"}, {0x1, 0x6, "f087a9d9"}, {0x0, 0xd, "092485c4c3c71230f4309a"}]}, @noop, @cipso={0x86, 0x2e, 0x3, [{0x0, 0x3, 'D'}, {0x5, 0xa, "7275dbff5ea77647"}, {0x7, 0x4, "196c"}, {0x0, 0x3, '$'}, {0x7, 0x10, "9547299fd0c239a2af63834bf51c"}, {0x5, 0x4, "778f"}]}]}}}}}) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="88d9f354f9c6fd3e5ea0b63e4c933e0192913163a4f595388f60ff93ab4fea1708eeb37aa5642f2de57084e39ba1e716d458bd5486d525da991c68c4ce4a2039a73527eb3aa178b66ead0e25822db74b91a78cbc2bfe76b29db591b64d01902690148322663f1dfa7e3c4fe3e887089cf8804896a00d996a559c20d3afc3b1467642bc3313f86760f2cdc37b7932b556bd0dbecc680c78c91f37c458dbb26176f300e109a1944ad02a3459ca3e0d7ed213e15200dee3e7826f9d6c1f575b4bae1e3fa37eec7242f7845f4d2140b6ada972299fc1c0c878c0cfd82524501eda887e5ce52244311cd3711d8c1573fce264bc695d", 0xf3}, {&(0x7f0000000200)="67c98b731b6a5674e78e0467c5d9f279fb7a38d237d5e4074418c875d4715f557190e2882f769f47a2419d557e8b06bdbc2c14f8a6f5e5ae43ea570cba2bedd422d43161762aebe72f936008a05568d79f3cdbc168464aea3c982e4ae3606316e89cfb8c7373ef7445932b415f0c1316b9d872b5100796230dc3c3e966e4b6299aa0476d39f927fad3e1ee31229373eb74f0a46d0e2d6ad41a4e3cd0963b43d2788d172d5949208acca7c11e6a703890186676ea116467", 0xb7}, {&(0x7f00000002c0)="d51bd8ec48cd4932f4f2fdce4dbd7e973a43a8d29630cb278489bf73a81b6f75d925949e54268f51f200fd3083f5b8d620974e5f3b90dd8b9370b4b87a4fdba68f134fa4f786529543818599c94785ea2ebc1425356a444cb25e46fb3813b0dfb2d336b71275a20ae7", 0x69}, {&(0x7f0000000340)="ac3457777ac3b614e1f184e18a4ab490eb512d46bf9928f38252a9f431a82e2a55ce39f57c8ebec2627a3be545dff2c04dfdf87ef2b04e5830461216f74bc8dbee32ddc572229fdc266155463cb2cabf062e76d7245ca40301a84e48387249bc57813b15b276640b48e6568011cb50d49a0e11a839ab85a96899c50e0c0c31dd788b0ec28364bbd0ddbc88e73b2653db76d7d65d4e4edb966eaf43b51c08a05e66f883fa7d583e3f2c65c8c86f43d6e6565559761782d949e0309a20c4a55d6f365961e6b89659a796bc87821eb57c7663384c76e4", 0xd5}, {&(0x7f0000000440)="6bb45afcc357c88f6adbc5cfa7711cf13841577cc99c4cc4a7471a99cc80bdf3091cecb4e91e7d9d5683c2ce1e5552232a556d276a353c708b59ddcaa1198476dc5ab153baaf6e04aec5d9aba2a5bc6c249f261a12bdbda2263733f65eda4d457ac943c758604a4834348cfce6b78a40d22bc14be92f21ace3324aa63a4693ff3298f138ce6b286907a86f132ca3e8abc1bed56240df672f6a9a6c92216ca252df6bba87e187f53bbbcaa271b0da01ee8007d5a1cf7552", 0xb7}, {&(0x7f0000000580)="233c0d66c41fe7c5588473af994350bc6b019fad5aeeac2788b66b2c10378273bb46e4e43cf468c6060f35a83dfde02a3748a839154d3455203f8ed3d3c84451a79eb74ed19d790f499eaf78ff9c012fdf0d944e4f9d48841bd0e6d4bc30ebd4459aea7f5e65bf82744b6fc66b998125df54dc74535423d544713da99125b8c6f89cf4b2f3a749b9a65f276866bf654430fe61f079c007bae544c36e68e853896c69bef24ab3f37734699c975786eaac2261b37200", 0xb5}], 0x6, &(0x7f0000000800)=[@ip_retopts={{0x60, 0x0, 0x7, {[@lsrr={0x83, 0x13, 0xe5, [@remote, @loopback, @multicast2, @private=0xa010101]}, @end, @end, @timestamp_addr={0x44, 0xc, 0x45, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x44d}]}, @timestamp_prespec={0x44, 0x2c, 0xd6, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x50}, {@empty, 0x2}, {@rand_addr=0x64010100, 0x5}, {@broadcast, 0x7}, {@multicast1, 0x7fff}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @multicast1, @dev={0xac, 0x14, 0x14, 0x37}}}}], 0x80}, 0x4040000) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x3c, r1, 0x20, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x6b63d15d}]}, 0x3c}}, 0x0) 1.462201189s ago: executing program 3 (id=1440): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000f10000000000000020000018010000202070250000000000202020db09f8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000ca00000095"], &(0x7f0000000400)='GPL\x00', 0x1}, 0x94) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000700000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) getsockopt$sock_buf(r0, 0x1, 0x48, 0x0, &(0x7f00000003c0)) 1.461648457s ago: executing program 4 (id=1441): r0 = socket$unix(0x1, 0x2, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003fc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000050a05000000000000000000020000060c00024000000000000000020b00070066696c74657200000c000240000000000000000108000b40000000040900010073797a30000000000900010073797a300000000020000000080a05000000000000000000020000000900010073797a30"], 0x1ce0}}, 0x40000) (async) sendmsg$unix(r0, &(0x7f0000000140)={&(0x7f0000000300)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x96, 0x0, 0x0, &(0x7f0000000580)=[@rights={{0x14}}], 0x18}, 0x0) (async) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f00000005c0)={0x21c, 0x15, 0x1, 0x70bd2a, 0x25dfdbff, {0x18, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x15, 0x1, "19e7cfbe181ae291a5a4517ce1f292c975"}, @INET_DIAG_REQ_BYTECODE={0x21, 0x1, "e624ab69324df396149289083345aa95e208969843a536418b4a1133ec"}, @INET_DIAG_REQ_BYTECODE={0xd0, 0x1, "19d1bd9d60f62c908d595f8935adc4ed87e47f169f66a08091552f2bb11e493688be0a831bbee2beb5b589de59bad14296d0520ae0d29caac7a5598375d708e89271e951f13bd503f6dda5130f91f6e94e199d16b87d55cb05346d24f74aa39c1033618be257b49e38770ca18dbffd1dc956a67403a80cda2ec9e233381aa7a9ff73d44d111061f3baadc863f9283c15e0b2b2ce6ebdc2e71fcf89ed3c112f66bf4c6307d339d34c24c8ac10d480b66e4b2d9f6fc84f04a55829c90833a7241ee581483f31d56d14905a93bf"}, @INET_DIAG_REQ_BYTECODE={0xfb, 0x1, "26d15f07d0d1425070401c8080a33561e21f9dabeb63381eaebdd1504c0ea48e16705f9c270660ba28b4043a4dd8d98f4421d3aba459ff4c9b20ca8d88317f5fcb4d9da3f8abd5e6e79f8eaa7406b4fc875007d4ea5685658c22f5028b392f3e1246fac025058b87b0ddc48ba40e48bfc132fa3c3ac41a51acd84d2b702a4b89b09594f6f17035bd4668b882ffbd7ba91443f7a23da919ee7ed6f0c41a118b5274f8d195688f5d37826fadd39438071f4a5d094fe6a48a0661745c4c67b4674668a7c5bc5aa3aaf41bbf816fb270c32546310f257fbd1e53b618124691b92c664c254cf4d0a0ea9a480b9ab7559b20ec79aedda6057135"}]}, 0x21c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000000) 1.359808397s ago: executing program 3 (id=1442): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000100000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xfffffd1f, 0x2, [@TCA_CODEL_LIMIT={0x8, 0x2, 0xbbe}]}}]}, 0x3c}}, 0x804c080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x7f}]}, &(0x7f00000005c0)='GPL\x00', 0x5}, 0x94) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0xfffc, 0x2}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000000c0)={r5, @in={{0x2, 0x4e24, @multicast1}}}, &(0x7f0000000180)=0x84) 1.350636029s ago: executing program 4 (id=1443): r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000001, 0x10, r0, 0x33867000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000040)={0x2, 0x71, "1f775dd39ebe05bc2228e8d1c577b2ca0ee4a4f8b1edb31a10fb67362a9b1083c62c1f77e70cb74ce15203a2cfaaf07ddcaddcad2996acbe9cbc4ef38c76c1464b1a16ea3e25356294020d0822f548ff0aab99ac188d3b1b4c5359061aafd143592ea8128b4538a6ddc51309299f5f6ff6"}) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000100)={0x7fffffff, 0x10, '\x00', 0x0, &(0x7f00000000c0)=[0x0, 0x0]}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e21, 0x80000001, @mcast1, 0x3}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@getae={0x58, 0x1f, 0x400, 0x70bd2a, 0x25dfdbfc, {{@in6=@mcast2, 0x4d5, 0xa, 0xff}, @in6=@dev={0xfe, 0x80, '\x00', 0x42}, 0x4}, [@extra_flags={0x8, 0x18, 0x5}, @replay_val={0x10, 0xa, {0x70bd28, 0x70bd2d, 0x2}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000040}, 0xe044) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x121702, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000300)={r2}) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000340)=0x31, 0x4) bind$xdp(r4, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x3b, r4}, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r4) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r5, 0x2, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4884}, 0x48000) readv(r2, &(0x7f0000000900)=[{&(0x7f0000000500)=""/86, 0x56}, {&(0x7f0000000580)=""/136, 0x88}, {&(0x7f0000000640)=""/92, 0x5c}, {&(0x7f00000006c0)=""/227, 0xe3}, {&(0x7f00000007c0)=""/38, 0x26}, {&(0x7f0000000800)=""/194, 0xc2}], 0x6) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000980)=0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000009c0)={'vxcan1\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000a00)={{{@in=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}}}, &(0x7f0000000b00)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000b40)={{{@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4e20, 0x9, 0x4e20, 0x0, 0x2, 0x80, 0xc0, 0x3b, r6, r8}, {0x6, 0x100000001, 0x7fffffffffffffff, 0x7, 0xff, 0x1400000000000, 0x32cd, 0x101}, {0xffffffff, 0x7fff, 0xe0000, 0x8000}, 0x80000000, 0x6e6bb9, 0x0, 0x0, 0x3}, {{@in=@multicast1, 0x4d4, 0x63}, 0x2, @in6=@mcast1, 0x3502, 0x2, 0x0, 0x2, 0x9, 0x800, 0xffff5edb}}, 0xe8) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000c40)=0x10, 0x4) sendmsg$ETHTOOL_MSG_DEBUG_GET(r4, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x40084) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000d80)='caif0\x00', 0x10) pipe(&(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f80)={r9, 0x0, 0xf, 0x1, &(0x7f0000000e00)="ed53832245fd1ae46a84e6c8fe5caf", &(0x7f0000000e40)=""/1, 0x2, 0x0, 0x13, 0xc0, &(0x7f0000000e80)="3ed28da29e9de4d6b2d7768adab3e7e84333e6", &(0x7f0000000ec0)="e22e611d96df1b71f8c3862233d97de25d0f8dfbf3700da6bc01f13ecc57bd806bdc94270566b0e7c42f96c2e4f3548a27b4a335cb26f7d03ff8a0fbd738f277521d6e693f496a42bb5fc4766838b361621c8556cde6c098e15b26b40268d23912df9c65247273d6b8f18bc084c9b8d8a2ca1ef16869f7772140a7a5b2c065c902265aefce33b370e01518cbe33ffc82c837fb52105b702876430bdaf44f26975a0b6dda1362f46965ab59864ce506cc6eff2b1c3e6e7542b061b7e1eb3bd385", 0x1, 0x0, 0xfffffff0}, 0x50) bind$bt_l2cap(r10, &(0x7f0000001000)={0x1f, 0xdd02, @any, 0x54b7, 0x2602096564e9a1b7}, 0xe) r11 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(r11, 0x4018f514, &(0x7f0000001040)={0x7, 0x9ee2, 0x2}) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0x2, 0x8001, 0x9, 0xff, 0x10080, r10, 0xfff, '\x00', r7, r10, 0x5, 0x3, 0x4, 0x0, @void, @value, @value=r9}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001340)=@bpf_tracing={0x1a, 0x15, &(0x7f0000001080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0xffffffffffffffff}, @exit, @call={0x85, 0x0, 0x0, 0x55}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001140)='GPL\x00', 0x7, 0x5d, &(0x7f0000001180)=""/93, 0x41000, 0x20, '\x00', r7, 0x0, r11, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001200)={0x5, 0xf, 0x22b, 0x9}, 0x10, 0x3425, 0xffffffffffffffff, 0x1, &(0x7f00000012c0)=[r0, r10, r12], &(0x7f0000001300)=[{0x1, 0x1, 0x3, 0x8}], 0x10, 0x200}, 0x94) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000001400)=[@in6={0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x1}, @in6={0xa, 0x4e22, 0x7, @local, 0xfffffffa}, @in6={0xa, 0x4e24, 0x6, @loopback, 0x5}, @in6={0xa, 0x4e22, 0x40, @mcast2, 0x7}], 0x70) 1.187865971s ago: executing program 3 (id=1444): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002000)=[{{&(0x7f0000000340)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f00000007c0)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x8084) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x52, 0x3ab3666c4349b199, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) (async) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r1, 0x4010744d, &(0x7f0000000080)=0xc) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r3, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916d, 0x15}}}}}, 0x20}}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="500000001800010000000000000000000ae0"], 0x50}, 0x1, 0x0, 0x0, 0x4000844}, 0x4010) 1.186883139s ago: executing program 1 (id=1445): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x4, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000fedbdf25fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc"], 0xb8}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001000000000000"], 0xb8}}, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newqdisc={0x2c, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x8}, {0xa, 0xfff3}, {0x0, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x15}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) 1.021605826s ago: executing program 1 (id=1446): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000680)="170000000200010000ffbe8c5ee17688a2006c000301000a000002a2576e5ed9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000fc0607bdca67a622c45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000ea000000000000000062068f5ee50ce5af9b1c56835382e9d969ba5149e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded241482cfe17c3778a", 0xb8) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x22, 0x0, &(0x7f0000000100)) syz_emit_ethernet(0x3e, &(0x7f0000001600)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa00080045000030000000000001907864010100ac1414aa0b009078030000000000ac1414aa"], 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000b80)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) close(r3) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000003c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x7, &(0x7f00000000c0)="f7ffffff", 0x4) sendto$inet6(r4, &(0x7f0000000480)="06dffa2910a341513604899bae51f7683ba71c4aba37ce0386a9130de5cd3d", 0x1f, 0x4004001, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001000)) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"/24], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r6}, 0x10) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r7}, 0x8) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x0, @local}, 0x2}}, 0x2e) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) connect$inet6(r10, &(0x7f00000000c0)={0xa, 0x4e22, 0x85, @mcast2, 0x5}, 0x1c) r12 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r12, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2, 0x9800}}, 0x2e) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="1100"/12, @ANYRES32=r8, @ANYBLOB="2510182bc3a8956744d6d8fa3bd31d7a1420d35c33384b578b49ee0b215ebc014839d89ded51114258f56e1952ef1c535e6e579b1404d07c1dfafa4581e90c2e4c", @ANYRES64=0x0], 0x20) write$cgroup_int(r8, &(0x7f0000000180)=0x8, 0x12) 932.07111ms ago: executing program 1 (id=1447): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e1d, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @multicast1}, "00186371ae9b1c03"}}}}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) r4 = socket(0x2, 0x80805, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f0000000340)={'ip6gre0\x00', 0x0, 0x29, 0x2, 0x7, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, 0x0, 0x80, 0x95b, 0xffffffff}}) recvfrom$packet(r4, &(0x7f0000000480)=""/181, 0xb5, 0x2100, &(0x7f0000000580)={0x11, 0x4, r5, 0x1, 0xdc}, 0x14) sendmmsg$inet(r4, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000004d00)='f', 0x1}], 0x1}}], 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000001590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800000068000100030010000000008000000000000000000c00020001000000150000000c000c80080002000a0001000600030001000000"], 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) 884.150274ms ago: executing program 4 (id=1448): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, 0x0, &(0x7f0000000180)) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x40000000000}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) (async) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, 0x0, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r4, 0x400, 0x925d, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20008000) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) 880.726756ms ago: executing program 3 (id=1449): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4480, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0xa7c5ed82d30d70ff) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000140)=0x1, 0x4) r2 = socket$netlink(0x10, 0x3, 0x5) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r2) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x1, 0x42, 0x40, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x107d, r4}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001dc0)={r4, &(0x7f0000000d00), &(0x7f0000000dc0)=""/4096}, 0x20) getsockopt$MRT6(r3, 0x29, 0xd1, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) 725.272792ms ago: executing program 4 (id=1450): r0 = socket$isdn(0x22, 0x2, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4887c002}]}]}], {0x14}}, 0xcc}}, 0x0) close(r0) 709.113552ms ago: executing program 2 (id=1235): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e20}, 0x6e) bind$unix(r0, &(0x7f0000000080)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000100)=0x219, 0x4) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000140)=[{0x1, 0x0, {0x0, 0x0, 0x1}, {0x2, 0xff, 0x1}, 0xff, 0xff}, {0x1, 0x2, {0x0, 0x0, 0x2}, {0x1, 0xff, 0x4}, 0x2, 0x2}, {0x2, 0x0, {0x2, 0xff}, {0x2, 0xff, 0x3}, 0x1, 0x1}, {0x2, 0x3, {0x0, 0x0, 0x4}, {0x0, 0xf0, 0x1}, 0xfe, 0x1}, {0x2, 0x3, {0x1, 0xff}, {0x0, 0x1, 0x2}, 0x2}, {0x2, 0x1, {0x0, 0x1, 0x2}, {0x1, 0x0, 0x3}, 0xfd}], 0xc0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x29, 0xbb, 0x7, 0x81, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, 0x10, 0x706, 0x24, 0x1}}) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@delqdisc={0x34, 0x25, 0x200, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x9, 0xfff3}, {0x10, 0x489bf0db97d06210}, {0xffff, 0x1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000880}, 0x40000) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5d8, 0x0, 0x0, 0x0, 0x3e0, 0x1f0, 0x508, 0x508, 0x508, 0x508, 0x508, 0x6, &(0x7f00000003c0), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x15}, @local, [0xffffffff], [0xff000000, 0x0, 0xff000000, 0xffffffff], 'bridge_slave_0\x00', 'pim6reg\x00', {0xff}, {}, 0x6c, 0x7}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x5}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0xf5}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xa9ad}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @remote, [0xffffff00, 0xffffff00, 0xffffffff], [0xffffffff, 0xffffffff, 0xff], 'veth0_virt_wifi\x00', 'pim6reg0\x00', {}, {0xff}, 0x29, 0x1, 0x0, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0xeb}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh={{0x30}, {0x16, 0x1, 0xc0, 0xba, 0xfffc, 0x0, 0x454}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x10, 0x7f}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x638) r5 = socket$nl_crypto(0x10, 0x3, 0x15) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x18, 0x1e, &(0x7f0000000a80)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x1}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x7}, @map_fd={0x18, 0x1, 0x1, 0x0, 0x1}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}], &(0x7f0000000b80)='GPL\x00', 0x3, 0x82, &(0x7f0000000bc0)=""/130, 0x40f00, 0x10, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c80)={0x7, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000cc0)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000d00)=[{0x1, 0x4, 0xc, 0x6}, {0x5, 0x3, 0x6, 0x4}], 0x10, 0x8000}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000e00)=r6, 0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x12, r2, 0xf73bd000) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000000e40)={'veth1_macvtap\x00', 0x2}) sendmsg$nl_route_sched(r3, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)=@getqdisc={0x48, 0x26, 0x400, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xfff2, 0xc}, {0xe, 0xfff1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x14}, 0x40004) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000fc0)={'veth1_macvtap\x00', {0x2, 0x0, @dev}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000001000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001280)={r6, 0x0, 0x48, 0xd2, &(0x7f0000001040)="5b891b96eb7f427313b8cf908274b687269eb256d92e6749c19e5c1ea52acd760d23c61e0fb65c26bde64fe0bd3879570d1c1a8740e17e386125d229d2faeab6d57da29f6935b79b", &(0x7f00000010c0)=""/210, 0xfffff988, 0x0, 0x1f, 0x50, &(0x7f00000011c0)="05d1716d85593d55a15f32c67e5f1a18a25747e97d339315d3ec026df2de18", &(0x7f0000001200)="540f1b4e67e86a437f93f10021a15a09317df538e151a12d1e58ab1c251d2dbc97ebda524d39929186b157e51d17b2f054cf7b2f24a0a4a288fd17fba26684a6b3bda5145eeba0e238b22e944ac427bb", 0x6, 0x0, 0x4}, 0x50) r8 = socket$isdn(0x22, 0x3, 0x4) clock_gettime(0x0, &(0x7f0000001340)={0x0, 0x0}) ppoll(&(0x7f0000001300)=[{r8, 0x2400}], 0x1, &(0x7f0000001380)={r9, r10+10000000}, &(0x7f00000013c0)={[0x5]}, 0x8) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000001400)=[{0x1, 0x1, {0x2, 0x1}, {0x2, 0x1, 0x4}}, {0x1, 0x0, {0x0, 0xf0, 0x4}, {0x2, 0x1, 0x1}, 0x1}], 0x40) accept4(r2, &(0x7f0000001440)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f00000014c0)=0x80, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001580)={{0x1, 0xffffffffffffffff}, &(0x7f0000001500), &(0x7f0000001540)=r3}, 0x20) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001700)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001840)={0x6, 0x11, &(0x7f00000015c0)=@raw=[@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5c76}}], &(0x7f0000001680)='syzkaller\x00', 0x4, 0x35, &(0x7f00000016c0)=""/53, 0x40f00, 0x5f, '\x00', 0x0, 0x25, r12, 0x8, &(0x7f0000001740)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000001780)={0x4, 0x8, 0x2, 0x4}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f00000017c0)=[{0x5, 0x2, 0x5, 0xc}, {0x0, 0x2, 0xb, 0x8}, {0x1, 0x3, 0x4, 0x9}, {0x4, 0x4, 0xd}, {0x0, 0x3, 0x2, 0x3}, {0x2, 0x3, 0x7}], 0x10, 0x7}, 0x94) close(r6) 359.677184ms ago: executing program 1 (id=1451): r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@can={0x1d, 0x0}, &(0x7f0000000080)=0x80, 0x80000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000000c0)={r0, 0x2f72, 0x6, 0x3}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl0\x00', r1, 0x0, 0x7, 0x7, 0x3, {{0x43, 0x4, 0x3, 0x9, 0x10c, 0x67, 0x0, 0x3, 0x4, 0x0, @remote, @broadcast, {[@timestamp={0x44, 0x14, 0x27, 0x0, 0x9, [0x30000000, 0x5, 0x200, 0x50f]}, @noop, @cipso={0x86, 0x48, 0xffffffffffffffff, [{0x0, 0x4, '_\\'}, {0x1, 0x10, "0905105a7d1eb31e45f1619801a3"}, {0x7, 0x6, "10da0cc3"}, {0x5, 0x11, "07e286e3be31e5badb875f61a4d07c"}, {0x2, 0x3, '<'}, {0x5, 0xd, "a69ee9684023327d5c0ecd"}, {0x6, 0x7, "7b3becbb47"}]}, @timestamp_prespec={0x44, 0x3c, 0x2e, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x15}, 0x7fffffff}, {@rand_addr=0x64010100, 0x9}, {@multicast2, 0x9}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x3}, {@remote, 0x6}, {@loopback, 0x101}, {@dev={0xac, 0x14, 0x14, 0x14}}]}, @timestamp_addr={0x44, 0x24, 0x76, 0x1, 0x9, [{@multicast2, 0x7}, {@multicast1, 0x9}, {@rand_addr=0x64010101, 0x6}, {@broadcast, 0xff}]}, @end, @end, @timestamp_prespec={0x44, 0x1c, 0x36, 0x3, 0xf, [{@broadcast, 0x8}, {@local, 0xfffffbff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xa}]}, @timestamp_prespec={0x44, 0x1c, 0x65, 0x3, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x3f}, {@multicast1, 0x3}]}, @noop]}}}}}) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000280)=0x4, &(0x7f00000002c0)=0x4) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000300)=r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r3) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='netfs_rreq_ref\x00', r2, 0x0, 0x3}, 0x18) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, 0x1410, 0x100, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000005c0)={{{@in=@multicast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f00000006c0)=0xe8) sendmsg$nl_generic(r0, &(0x7f0000000d00)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000700)={0x5b4, 0x18, 0x8, 0x70bd25, 0x25dfdbfe, {0x11}, [@nested={0x5d, 0x29, 0x0, 0x1, [@typed={0x14, 0x64, 0x0, 0x0, @str='@@\\-\xb7][/D\\]$%{{\x00'}, @generic="62c5338ee3d6c504", @generic="6f494807476297511f8510eb96e49966fb31eacdfb7ad86b598b85e72ff1e9d4fdc087959991322f95ffd3eff714e22631a2fa6da39158b0fb", @typed={0x4, 0x37}]}, @generic="2a6a7fd56f99f0d48ec56dba9a9b073ce5efa3d0be9c2448f6c19b25242c031b1cc9739f7d52a4e27ff98bb03dfbef27a960bbcc96860adae60cd7e5000ddfe84f7d77913a96dd8cd0fb59793936a95a79640e178c281abe96f577d6ef541aff61f7870aa05a69df00c1757c994b14fbcd71cc899abb704567f7947346b998c02f", @nested={0x122, 0x5, 0x0, 0x1, [@generic="3be35c44d8f161b34eee622571d772e51ce00709329f0da01fc980c011094f8cc277ea770fcbef5b2bbf508e2aaaae8b8c62a47e", @generic="475a6926a2d18249e0a1a88d70c33acce6c68fe073c2fa629e33a816e272ee12eece21b9107e9f1332040dbe3c382b49e2764b9a9cc1185900dd724dda", @typed={0x4, 0x57}, @typed={0x8, 0x59, 0x0, 0x0, @uid=r5}, @typed={0x8, 0x116, 0x0, 0x0, @uid=r6}, @typed={0x4, 0x45}, @nested={0x4, 0x11a}, @typed={0x4, 0x5a}, @generic="fa8bb4862adf32c5f660b3d698bcc67eb301719d2e35", @generic="e8c7cca4cf43fad882c906360931dbae77e0315775244c2ef7d4321fd0bad8c0503260ecb48c8ec553e3485601ffcb87f7f5a1a2f8f891eeb4bac939f3593d2850ede421c47dc2008883f2e26843c591d3312d6b3782906584e462fc0ec2b9648604f8cc6b53fc62f4a63dd6a377f2034f2e7439ba692c"]}, @nested={0x143, 0x62, 0x0, 0x1, [@nested={0x4, 0x89}, @generic="3c6a17e8a2b8e5627bbf0f7fac99d96f7f11845123c61943706221659a139c27aff6a673e7db2b0df865a9351a936a17acb194a25cf2a8b5888a59ddc4dcaaea1c0ee7adfd2f9cced5fba359901da0ce419999779bb2e79cbf48393e541ba42b1c9738a722d171b4", @generic="81436df2ed6d754996790c7aabd4d7907604850054f4be8dd9ef5059b85b500892d33681818bc054250ea4746d7d34cc884a8cdacc1b5cfaf48659c72a01eec12eec284fa7630fb07af4ffe8f6ad9637322f8a033bd284e9ef99736ea0d2ea7275659e7351f6ebf89499b411a7d9e785d18553e130b71cf97ea6108032a07a21bcd2409789de605c3aaf2e9d1b2dcbdeb7fe91e432cf741fb0a91d73d6466d6b4a4ead063589f67a9587b5ebe96f39fb47aaf57c4fba19ae45697dc6f6b6be3d3724c5044e4979", @nested={0x4, 0x149}, @nested={0x4, 0x115}, @nested={0x4, 0x6d}]}, @generic="e640c516025da245af0163ae96b349b325fa7a45cefd9368d33bed44220d752fdc9ebadc16eb80b3ad810cce8494fafec7cbacc8503005eaf3abfb225099f951409817b3942425763783637b5b6d68cd8012282d60df22672add73f4803ae0f10934b4b78fa0fee7632a8d", @generic="9c162ba936af1af756a80b157fc2726379a4a904c520ec46cfcac61b38278c6ee7317894bf4622b7b3cee444aabed28a59d634a046a9b4c7e23982d7f24bef6af8d60f87090708eb7506f64c361f392d10563e8933fd1d80db716d0c86df1a6c18e8f731f3", @typed={0x14, 0xb5, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @nested={0x168, 0x123, 0x0, 0x1, [@generic="496d451a5f99553d1068d0f5f8914ed28e0c1bd23556d7b3add4cee97f5c212ae2c3522af6bf71afdbcd215633538775aff7ba16475f15596a24425e7aafd5204d1b6d9586d4d46f81032d65422368c12d49838921a971a5fa1b21f8db58f952ed68cf4ce3f2a8d135f2670fd1fbff2e430a2816ba507d49040a3eff628495c6f2ef74fbd1b5f725818d6b5dadc10670f61070eebc1f3b351b4c4a6798ef6e12cb1bd5f5b29798566ec75b8b1a4047cb00db6565451d0ad2fc84cf2bde39311899b45ac4f5cf33d1036e454932", @typed={0x4, 0x88}, @generic="a7cde340b1ff989b91d1d25c65a020942c14f2cf7d0378b3afdfa565b48dbc21ba435b17bcea82801edc189e65ed55576a659b10f91698e62142374415a93b6c456452883e7fa585b9e25ec46315e4d715cb338c263d69672c2b873b0579bd043ba6ae79537f84db5db86ebba28a7dbc28fb864425c67afdacca0d0ff9400fd78576a67ac5bdefdd36798394764c555929584f"]}, @typed={0x8, 0x55, 0x0, 0x0, @u32=0x2}]}, 0x5b4}, 0x1, 0x0, 0x0, 0x40000}, 0x24008090) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000d40)={0x0, 0x30}, &(0x7f0000000d80)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r7, 0x84, 0x19, &(0x7f0000000dc0)={r8, 0x4}, 0x8) getpid() ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000e00)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000e80)={0x0, 0x0}, &(0x7f0000000ec0)=0xc) sendmsg$nl_generic(r0, &(0x7f0000000f80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x30, 0x16, 0x100, 0x70bd2c, 0x25dfdbfb, {0x19}, [@typed={0x14, 0xe, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @remote}}, @typed={0x8, 0xf4, 0x0, 0x0, @uid=r9}]}, 0x30}, 0x1, 0x0, 0x0, 0x8081}, 0x4004) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000001080)={r8, 0xa0, &(0x7f0000000fc0)=[@in={0x2, 0x4e22, @rand_addr=0x64010101}, @in6={0xa, 0x4e24, 0x10001, @mcast1, 0x2}, @in6={0xa, 0x4e23, 0x2, @loopback, 0x5}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e22, 0x8, @local, 0x3}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x34}}, @in6={0xa, 0x4e22, 0x83280000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}]}, &(0x7f00000010c0)=0x10) getpeername$l2tp(r10, &(0x7f0000001100), &(0x7f0000001140)=0x10) bind$unix(r2, &(0x7f0000001180)=@abs={0x1, 0x0, 0x4e22}, 0x6e) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000001200)={0x8000000000000001, 0x4}) syz_emit_ethernet(0x40c, &(0x7f0000001240)={@remote, @local, @val={@void, {0x8100, 0x2, 0x1, 0x1}}, {@mpls_mc={0x8848, {[{0x8}, {0x867}, {0x5}], @ipv6=@udp={0x3, 0x6, "38ebd6", 0x3c6, 0x11, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, {[@dstopts={0x2e, 0xd, '\x00', [@pad1, @calipso={0x7, 0x10, {0x2, 0x2, 0x4, 0x8, [0x3]}}, @ra={0x5, 0x2, 0x9}, @pad1, @padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @calipso={0x7, 0x40, {0x3, 0xe, 0x5, 0x6, [0x8, 0x6, 0xc, 0x1, 0xa773, 0x4, 0x6]}}, @pad1, @jumbo={0xc2, 0x4, 0x5}]}, @hopopts={0x4, 0x2, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @loopback}}]}, @srh={0x2b, 0x6, 0x4, 0x3, 0x6, 0x50, 0x3, [@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote]}, @dstopts={0x84, 0x2, '\x00', [@calipso={0x7, 0x10, {0x3, 0x2, 0x7, 0x4, [0x1d]}}]}, @hopopts={0x2b, 0x42, '\x00', [@generic={0x80, 0x8d, "28a238bde5ea0f8454b2fe89164d6266f7777e121eccd8ea767303a2e9980f1bfabd4d07213c09924331f4a413e5c3f89c8255cf7b150949255f89c6b589318e52404be3f122ed0347be092834d5f4fddd9752032e3c3a3b6ea85d052acc571becec47d7fa82dbd0bd8d64326639df28719e65470ee10cddddd3b30a04bafee4258d40ad280a6245ab4b6fe566"}, @generic={0x7f, 0xd4, "1180cd9580857867c55a5e394dae1b38833be95d61342f7987f848d1c1f2d679d994b9f29cffe9af04c60d0a8834767ec50dab4fe7e0dc1f5bffa477bde874157b118906f30a48a93fee09c541d30c49562fd0213a81f5b42fdda1ffadfbaa4d366fe8ccb618d6c6804e22d90972414ef99a6565327dc20ef699aeddd9e261082b9c7d508854f6e1dd9808b01f1fa35f44d39e966ab15dc5eba146a5600020e287d11d7890d0f9ef3a9a2694b4dd848781e0a68a4156061d826c494b3b257e1530257158d9f926fc82092291c58c2a3bf25efe9b"}, @hao={0xc9, 0x10, @remote}, @hao={0xc9, 0x10, @mcast1}, @generic={0x0, 0x5e, "8f29bec48ebac2b00153f1af2f0e27b67b69e023bdb487f2e9ba21e711847784627693a31b465c079d24b132912a0f7b9070bdda6e6290c94c24762d3041d9582efed2e7c977e74e72592dddb1673d1e8fcb3fb1877a2304be71e95cd59c"}, @hao={0xc9, 0x10, @remote}, @padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @local}]}, @routing={0x62, 0x8, 0x0, 0x6, 0x0, [@loopback, @mcast2, @empty, @mcast2]}, @dstopts={0x3a, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x2}, @ra={0x5, 0x2, 0x3}]}, @routing={0x32, 0x2, 0x2, 0xfa, 0x0, [@remote]}], {0x4e22, 0x4e24, 0x4e, 0x0, @gue={{0x1, 0x1, 0x2, 0x6, 0x0, @void}, "b0020f776f1b268461bedb5105a6f325d8b21eb76ddcb123d4fbc7bf7c32607babb30aaaab0e820920108e9985d870e1ef4688627980a0a3e458022669d2013d5875"}}}}}}}}, &(0x7f0000001680)={0x1, 0x2, [0xd10, 0xdc6, 0x195, 0xf50]}) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000001700), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000001800)={&(0x7f00000016c0), 0xc, &(0x7f00000017c0)={&(0x7f0000001740)={0x64, r11, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x20040081) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r4, 0xf50f, 0x0) gettid() ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001840)={'wlan1\x00'}) 307.898594ms ago: executing program 3 (id=1452): r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0x0, 0xffffffff, 0xffffffff, 0x158, 0xffffffff, 0x390, 0xfeffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x138, 0x158, 0x60030000, {0x0, 0xff000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x208, 0x238, 0x0, {}, [@common=@rt={{0x138}, {0x4000000, [], 0x0, 0x9, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @local, @ipv4={'\x00', '\xff\xff', @multicast1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev, @mcast2, @private2]}}, @common=@unspec=@cpu={{0x28}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0) setsockopt$packet_add_memb(r2, 0x107, 0x18, &(0x7f0000000800)={r1, 0x1, 0x6, @local}, 0x10) r4 = accept4$rose(0xffffffffffffffff, &(0x7f0000000000)=@short={0xb, @dev, @rose, 0x1, @rose}, &(0x7f0000000040)=0x1c, 0x800) r5 = socket$l2tp(0x2, 0x2, 0x73) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)={0x34, r8, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4044040) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r9, 0x84, 0x74, &(0x7f00000000c0)={r10, 0x1, 0x10, 0x0, 0x4}, &(0x7f0000000300)=0x18) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000000c0)={r10, @in6={{0xa, 0x4e21, 0xbb6, @dev={0xfe, 0x80, '\x00', 0x44}, 0x2}}, 0x9, 0x7, 0x1, 0x9, 0x40, 0x8, 0x5}, 0x9c) ioctl$FICLONE(r4, 0x40049409, r5) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0xfffffffffffffffc, r11) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r11) 307.376772ms ago: executing program 4 (id=1453): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x336) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) syz_emit_ethernet(0x0, 0x0, 0x0) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x336) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) close(r1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async) syz_emit_ethernet(0x0, 0x0, 0x0) (async) close(r0) (async) 241.278043ms ago: executing program 1 (id=1454): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x2d}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000140)={r1, 0x1, 0x6, @broadcast}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000180)={'veth0_to_batadv\x00', {0x2, 0x0, @multicast2=0xac14143c}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) ioctl$int_in(r2, 0x5421, &(0x7f0000000240)) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newnexthop={0x3c, 0x68, 0x2, 0x70bd28, 0x25dfdbfc, {0xa, 0x0, 0x3, 0x0, 0x1}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x2}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_HOPLIMIT={0x5, 0x4, 0x6}}, @NHA_OIF={0x8, 0x5, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 180.83981ms ago: executing program 3 (id=1455): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) (async) r2 = socket(0x10, 0x803, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {}, {0xb, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) socket$kcm(0x10, 0x400000002, 0x0) 0s ago: executing program 1 (id=1456): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'macsec0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r2) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x28, r3, 0x223, 0x0, 0x0, {0x3}, [@SEG6_ATTR_DST={0x14, 0x1, @loopback={0xe0ffff00000000}}]}, 0x28}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x94, r3, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xdb}, @SEG6_ATTR_SECRET={0x14, 0x4, [0xa7b1, 0x4, 0x2, 0x4]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfffffff7}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x5, 0xf7b, 0xefb, 0x200]}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}]}, 0x94}, 0x1, 0x0, 0x0, 0x79ac2a00e7ae5325}, 0x20000000) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000005c0), 0x10) recvmmsg(r5, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000b00)=""/55, 0x37}, {0x0, 0x38}], 0x2}}], 0x2, 0x10002, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010300000020000000ee15660000080006000200000018000180140002007665746830"], 0x34}}, 0x44800) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r1], 0x54}}, 0x800) kernel console output (not intermixed with test programs): 65][ T5901] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.443603][ T5901] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.453348][ T5901] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.464061][ T5901] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.518084][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.531724][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.592532][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.608749][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.639426][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.656779][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.691595][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.706794][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.807580][ T3546] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.836429][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.847727][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.849133][ T3546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.022071][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.066225][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.155606][ T3546] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.172331][ T3546] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.223191][ T6024] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 259.254570][ T6024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9'. [ 259.268049][ T6024] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9'. [ 259.320530][ T6026] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 259.474718][ T6031] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10'. [ 259.992944][ T5965] IPVS: starting estimator thread 0... [ 260.003234][ T6048] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 260.088326][ T5891] Bluetooth: hci1: command tx timeout [ 260.108331][ T6051] IPVS: using max 39 ests per chain, 93600 per kthread [ 260.168041][ T5891] Bluetooth: hci0: command tx timeout [ 260.168051][ T5899] Bluetooth: hci3: command tx timeout [ 260.177395][ T5899] Bluetooth: hci2: command tx timeout [ 260.249929][ T5899] Bluetooth: hci4: command tx timeout [ 260.325511][ T6059] can: request_module (can-proto-5) failed. [ 260.558164][ T6076] netlink: 4 bytes leftover after parsing attributes in process `syz.3.24'. [ 260.746206][ T6088] Bluetooth: MGMT ver 1.23 [ 260.785760][ T6093] netlink: 36 bytes leftover after parsing attributes in process `syz.2.27'. [ 260.951469][ T6101] netlink: 24 bytes leftover after parsing attributes in process `syz.0.30'. [ 260.965441][ T6101] netlink: 156 bytes leftover after parsing attributes in process `syz.0.30'. [ 261.149161][ T6108] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 261.166706][ T6111] netlink: 28 bytes leftover after parsing attributes in process `syz.1.33'. [ 261.411190][ T6117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.494000][ T6129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.572407][ T6117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.769058][ C0] Illegal XDP return value 16128 on prog (id 12) dev bond_slave_0, expect packet loss! [ 261.813077][ T6134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 261.831551][ T6134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.847896][ T6134] bond0 (unregistering): Released all slaves [ 262.067835][ T6158] netlink: 'syz.3.45': attribute type 8 has an invalid length. [ 262.849005][ T6201] netlink: 'syz.3.59': attribute type 10 has an invalid length. [ 262.901936][ T6201] veth0_vlan: entered allmulticast mode [ 262.962059][ T6201] veth0_vlan: left promiscuous mode [ 262.990347][ T6201] veth0_vlan: entered promiscuous mode [ 263.001268][ T6201] team0: Device veth0_vlan failed to register rx_handler [ 263.042065][ T6201] syz.3.59 (6201) used greatest stack depth: 19352 bytes left [ 263.218821][ T6219] __nla_validate_parse: 11 callbacks suppressed [ 263.218840][ T6219] netlink: 20 bytes leftover after parsing attributes in process `syz.4.65'. [ 263.267779][ T6214] Zero length message leads to an empty skb [ 263.468064][ T6229] netlink: 12 bytes leftover after parsing attributes in process `syz.3.67'. [ 264.134381][ T6272] netlink: 4 bytes leftover after parsing attributes in process `syz.4.78'. [ 264.153603][ T6268] sctp: failed to load transform for md5: -2 [ 264.399535][ T6288] netlink: 'syz.3.82': attribute type 29 has an invalid length. [ 264.408231][ T6288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.82'. [ 264.425053][ T6293] netlink: 72 bytes leftover after parsing attributes in process `syz.4.81'. [ 264.595644][ T6302] netlink: 24 bytes leftover after parsing attributes in process `syz.2.87'. [ 264.630943][ T6302] netlink: 88 bytes leftover after parsing attributes in process `syz.2.87'. [ 264.786649][ T6317] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 264.975344][ T6331] netlink: 12 bytes leftover after parsing attributes in process `syz.0.95'. [ 264.998547][ T6330] netlink: 12 bytes leftover after parsing attributes in process `syz.0.95'. [ 265.034004][ T6333] sctp: [Deprecated]: syz.1.90 (pid 6333) Use of int in maxseg socket option. [ 265.034004][ T6333] Use struct sctp_assoc_value instead [ 265.053657][ T6323] xt_CT: No such helper "syz0" [ 265.119629][ T6338] netlink: 'syz.0.97': attribute type 21 has an invalid length. [ 265.200570][ T6341] netlink: 'syz.0.97': attribute type 21 has an invalid length. [ 265.333288][ T6349] ip6t_REJECT: ECHOREPLY is not supported [ 265.465109][ T6355] netlink: 20 bytes leftover after parsing attributes in process `syz.2.102'. [ 265.530933][ T6364] netlink: 'syz.4.104': attribute type 13 has an invalid length. [ 265.545529][ T6361] Dead loop on virtual device ip6_vti0, fix it urgently! [ 265.556688][ T6355] veth3: entered allmulticast mode [ 265.575125][ T6364] lo: entered promiscuous mode [ 265.601038][ T6364] lo: entered allmulticast mode [ 265.609468][ T6366] ipt_ECN: cannot use operation on non-tcp rule [ 265.654714][ T6367] xt_TPROXY: Can be used only with -p tcp or -p udp [ 265.662797][ T6364] tunl0: entered promiscuous mode [ 265.707173][ T6364] tunl0: entered allmulticast mode [ 265.723914][ T6364] gre0: entered promiscuous mode [ 265.739342][ T6364] gre0: entered allmulticast mode [ 265.810396][ T6364] gretap0: entered promiscuous mode [ 265.815756][ T6364] gretap0: entered allmulticast mode [ 265.857077][ T6364] gretap0: refused to change device tx_queue_len [ 265.883722][ T6364] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 266.209035][ T6398] syzkaller1: entered promiscuous mode [ 266.230214][ T6398] syzkaller1: entered allmulticast mode [ 266.300049][ T6407] netlink: 'syz.2.114': attribute type 3 has an invalid length. [ 266.324131][ T6407] netlink: 'syz.2.114': attribute type 3 has an invalid length. [ 266.406161][ T6412] x_tables: ip_tables: osf match: only valid for protocol 6 [ 266.424463][ T6412] netlink: 'syz.3.115': attribute type 4 has an invalid length. [ 267.017465][ T6443] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.576725][ T6475] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 268.007108][ T3589] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 268.050235][ T3589] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 268.058310][ T978] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 268.276725][ T978] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 268.338913][ T6525] netlink: 'syz.1.145': attribute type 1 has an invalid length. [ 268.680271][ T6544] netlink: 'syz.2.152': attribute type 39 has an invalid length. [ 268.963049][ T6559] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.969685][ T6556] netlink: ct family unspecified [ 268.988983][ T6556] openvswitch: netlink: Actions may not be safe on all matching packets [ 269.052746][ T978] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 269.089442][ T6561] __nla_validate_parse: 9 callbacks suppressed [ 269.089458][ T6561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.158'. [ 269.129659][ T6563] netlink: 'syz.4.159': attribute type 26 has an invalid length. [ 269.158752][ T6561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.158'. [ 269.215457][ T6566] netlink: 20 bytes leftover after parsing attributes in process `syz.0.160'. [ 269.307140][ T6571] warning: `syz.4.162' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 269.344893][ T6572] netlink: 8 bytes leftover after parsing attributes in process `syz.3.163'. [ 269.495032][ T6586] netlink: 'syz.2.166': attribute type 21 has an invalid length. [ 269.516431][ T6586] netlink: 132 bytes leftover after parsing attributes in process `syz.2.166'. [ 269.591989][ T6588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.167'. [ 269.613748][ T6590] netlink: 'syz.4.169': attribute type 4 has an invalid length. [ 269.664111][ T6590] netlink: 'syz.4.169': attribute type 4 has an invalid length. [ 269.744730][ T6599] Cannot find add_set index 0 as target [ 269.912920][ T6606] netlink: 104 bytes leftover after parsing attributes in process `syz.0.174'. [ 269.947759][ T6615] netlink: 20 bytes leftover after parsing attributes in process `syz.2.176'. [ 269.969345][ T6607] netlink: 'syz.3.172': attribute type 8 has an invalid length. [ 270.255696][ T6626] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 270.707272][ T6660] No such timeout policy "syz0" [ 270.792021][ T6668] netlink: 24 bytes leftover after parsing attributes in process `syz.2.193'. [ 270.809177][ T6665] netlink: 'syz.4.192': attribute type 6 has an invalid length. [ 270.848960][ T6666] netlink: 180 bytes leftover after parsing attributes in process `syz.4.192'. [ 272.169013][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 272.521205][ T6769] bridge_slave_0: left allmulticast mode [ 272.570482][ T6769] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.614907][ T6769] bridge_slave_1: left allmulticast mode [ 272.628469][ T6769] bridge_slave_1: left promiscuous mode [ 272.653986][ T6769] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.672442][ T6776] Bluetooth: MGMT ver 1.23 [ 272.692518][ T6769] bond0: (slave bond_slave_0): Releasing backup interface [ 272.707670][ T6769] bond0: (slave bond_slave_1): Releasing backup interface [ 272.729892][ T6769] team0: Port device team_slave_0 removed [ 272.745553][ T6769] team0: Port device team_slave_1 removed [ 272.752931][ T6769] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.760909][ T6769] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.770728][ T6769] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.781307][ T6769] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.026507][ T6799] netlink: 'syz.2.222': attribute type 4 has an invalid length. [ 273.780068][ T6837] SET target dimension over the limit! [ 274.098808][ T6849] xt_hashlimit: max too large, truncated to 1048576 [ 274.290322][ T6864] __nla_validate_parse: 11 callbacks suppressed [ 274.290340][ T6864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.243'. [ 274.663890][ T6884] raw_sendmsg: syz.1.250 forgot to set AF_INET. Fix it! [ 274.743647][ T6890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.253'. [ 274.921275][ T6897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.255'. [ 274.968586][ T6902] netlink: 'syz.0.256': attribute type 1 has an invalid length. [ 275.008747][ T6902] netlink: 20 bytes leftover after parsing attributes in process `syz.0.256'. [ 275.041101][ T6902] tipc: Invalid UDP bearer configuration [ 275.041154][ T6902] tipc: Enabling of bearer rejected, failed to enable media [ 275.219173][ T6902] gretap1: entered promiscuous mode [ 275.427170][ T6936] netlink: 'syz.4.266': attribute type 13 has an invalid length. [ 275.440721][ T6938] xt_TCPMSS: Only works on TCP SYN packets [ 275.579316][ T6936] bond0: entered promiscuous mode [ 275.589611][ T6936] bond0: entered allmulticast mode [ 275.595338][ T6936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.704453][ T6936] bond0 (unregistering): Released all slaves [ 275.730142][ T6948] netlink: 32 bytes leftover after parsing attributes in process `syz.0.267'. [ 275.740145][ T6947] netlink: 32 bytes leftover after parsing attributes in process `syz.0.267'. [ 275.931882][ T6961] netlink: 'syz.0.272': attribute type 1 has an invalid length. [ 276.061941][ T6974] netlink: 12 bytes leftover after parsing attributes in process `syz.0.272'. [ 276.183402][ T6966] bond1: (slave gretap2): making interface the new active one [ 276.229057][ T6966] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 276.288855][ T6974] 8021q: adding VLAN 0 to HW filter on device bond1 [ 276.295341][ T6981] netlink: 'syz.4.275': attribute type 142 has an invalid length. [ 276.595737][ T7000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.282'. [ 276.662295][ T7000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.282'. [ 276.704739][ T7000] netlink: 176 bytes leftover after parsing attributes in process `syz.2.282'. [ 276.738497][ T7000] netlink: 'syz.2.282': attribute type 5 has an invalid length. [ 276.795872][ T7015] tipc: Started in network mode [ 276.801044][ T7015] tipc: Node identity 7f000001, cluster identity 4711 [ 276.811412][ T7015] tipc: Enabled bearer , priority 10 [ 277.020814][ T7021] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 277.217016][ T7033] xt_SECMARK: invalid mode: 0 [ 277.483352][ T7043] netlink: 'syz.0.296': attribute type 21 has an invalid length. [ 277.500003][ T7043] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 277.510543][ T7043] tipc: Enabled bearer , priority 10 [ 278.021511][ T7058] netlink: 'syz.2.302': attribute type 39 has an invalid length. [ 278.024101][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056a96400: rx timeout, send abort [ 278.038282][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880449b9800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 278.180579][ T7070] sock: sock_timestamping_bind_phc: sock not bind to device [ 278.464087][ C0] vcan0: j1939_tp_rxtimer: 0xffff888033b00400: rx timeout, send abort [ 278.472971][ C0] vcan0: j1939_tp_rxtimer: 0xffff888033b03000: rx timeout, send abort [ 278.507868][ T978] tipc: Node number set to 2130706433 [ 278.537835][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056a96400: abort rx timeout. Force session deactivation [ 278.693445][ T7097] netem: change failed [ 278.972462][ C0] vcan0: j1939_tp_rxtimer: 0xffff888033b00400: abort rx timeout. Force session deactivation [ 278.983331][ C0] vcan0: j1939_tp_rxtimer: 0xffff888033b03000: abort rx timeout. Force session deactivation [ 279.474950][ T7144] __nla_validate_parse: 12 callbacks suppressed [ 279.474968][ T7144] netlink: 88 bytes leftover after parsing attributes in process `syz.3.324'. [ 279.846679][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 280.087140][ T5899] Bluetooth: hci4: command tx timeout [ 280.368329][ T7154] netlink: 'syz.3.326': attribute type 10 has an invalid length. [ 280.441329][ T7154] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 280.497267][ T7161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.329'. [ 280.525593][ T7166] netlink: 'syz.1.330': attribute type 11 has an invalid length. [ 280.535098][ T7166] netlink: 64 bytes leftover after parsing attributes in process `syz.1.330'. [ 280.702092][ T7175] netlink: 'syz.0.332': attribute type 10 has an invalid length. [ 280.724625][ T7180] IPVS: set_ctl: invalid protocol: 4 172.30.0.5:20004 [ 280.790264][ T7175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.827493][ T7175] team0: Port device bond0 added [ 280.923336][ T7187] bond0: entered promiscuous mode [ 280.945504][ T7187] bond_slave_0: entered promiscuous mode [ 280.962964][ T7187] bond_slave_1: entered promiscuous mode [ 281.004725][ T7187] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 281.086534][ T7187] bond0: left promiscuous mode [ 281.092703][ T7187] bond_slave_0: left promiscuous mode [ 281.141707][ T7187] bond_slave_1: left promiscuous mode [ 281.166491][ T7187] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 281.236951][ T7198] netlink: 36 bytes leftover after parsing attributes in process `syz.2.338'. [ 281.274289][ T7209] netlink: 'syz.4.341': attribute type 17 has an invalid length. [ 281.379291][ T7213] netlink: 'syz.0.342': attribute type 3 has an invalid length. [ 281.514032][ T7217] netlink: 40 bytes leftover after parsing attributes in process `syz.0.344'. [ 281.842977][ T7233] netlink: 20 bytes leftover after parsing attributes in process `syz.4.350'. [ 281.859845][ T7230] netlink: 16 bytes leftover after parsing attributes in process `syz.3.348'. [ 281.861008][ T7234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.349'. [ 281.965979][ T7235] netlink: 8 bytes leftover after parsing attributes in process `syz.4.350'. [ 281.986865][ T7238] netlink: 'syz.3.351': attribute type 3 has an invalid length. [ 282.002143][ T7238] netlink: 136 bytes leftover after parsing attributes in process `syz.3.351'. [ 282.154660][ T7243] netlink: 'syz.0.352': attribute type 33 has an invalid length. [ 282.600986][ T7260] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 282.703563][ T7261] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.816456][ T7267] syz.4.360: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 282.837678][ T7267] CPU: 0 UID: 0 PID: 7267 Comm: syz.4.360 Not tainted 6.16.0-rc4-syzkaller-00109-gb9fd9888a565 #0 PREEMPT(full) [ 282.837717][ T7267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 282.837734][ T7267] Call Trace: [ 282.837742][ T7267] [ 282.837749][ T7267] dump_stack_lvl+0x189/0x250 [ 282.837785][ T7267] ? __pfx_dump_stack_lvl+0x10/0x10 [ 282.837807][ T7267] ? __pfx__printk+0x10/0x10 [ 282.837832][ T7267] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 282.837857][ T7267] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 282.837883][ T7267] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 282.837910][ T7267] warn_alloc+0x214/0x310 [ 282.837936][ T7267] ? stack_depot_save_flags+0x429/0x900 [ 282.837967][ T7267] ? __pfx_warn_alloc+0x10/0x10 [ 282.837995][ T7267] ? kasan_save_track+0x4f/0x80 [ 282.838016][ T7267] ? xskq_create+0x56/0x170 [ 282.838042][ T7267] ? xsk_init_queue+0xb0/0x110 [ 282.838075][ T7267] ? xsk_setsockopt+0x43f/0x710 [ 282.838097][ T7267] ? do_sock_setsockopt+0x25a/0x3e0 [ 282.838116][ T7267] ? __x64_sys_setsockopt+0x18b/0x220 [ 282.838141][ T7267] ? do_syscall_64+0xfa/0x3b0 [ 282.838157][ T7267] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.838181][ T7267] __vmalloc_node_range_noprof+0x125/0x12f0 [ 282.838233][ T7267] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 282.838263][ T7267] ? __kasan_kmalloc+0x93/0xb0 [ 282.838292][ T7267] vmalloc_user_noprof+0xad/0xf0 [ 282.838315][ T7267] ? xskq_create+0xbf/0x170 [ 282.838341][ T7267] xskq_create+0xbf/0x170 [ 282.838369][ T7267] xsk_init_queue+0xb0/0x110 [ 282.838396][ T7267] xsk_setsockopt+0x43f/0x710 [ 282.838422][ T7267] ? __pfx_xsk_setsockopt+0x10/0x10 [ 282.838445][ T7267] ? __lock_acquire+0xab9/0xd20 [ 282.838472][ T7267] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 282.838487][ T7267] ? __pfx_xsk_setsockopt+0x10/0x10 [ 282.838513][ T7267] do_sock_setsockopt+0x25a/0x3e0 [ 282.838537][ T7267] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 282.838563][ T7267] ? __fget_files+0x2a/0x420 [ 282.838594][ T7267] __x64_sys_setsockopt+0x18b/0x220 [ 282.838622][ T7267] do_syscall_64+0xfa/0x3b0 [ 282.838637][ T7267] ? lockdep_hardirqs_on+0x9c/0x150 [ 282.838663][ T7267] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.838680][ T7267] ? clear_bhb_loop+0x60/0xb0 [ 282.838701][ T7267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.838717][ T7267] RIP: 0033:0x7fc2fe98e929 [ 282.838735][ T7267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.838749][ T7267] RSP: 002b:00007fc2ff7f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 282.838766][ T7267] RAX: ffffffffffffffda RBX: 00007fc2febb6080 RCX: 00007fc2fe98e929 [ 282.838779][ T7267] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 282.838789][ T7267] RBP: 00007fc2fea10b39 R08: 0000000000000004 R09: 0000000000000000 [ 282.838799][ T7267] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 282.838809][ T7267] R13: 0000000000000000 R14: 00007fc2febb6080 R15: 00007ffd20ca73a8 [ 282.838837][ T7267] [ 282.839113][ T7267] Mem-Info: [ 283.152951][ T7267] active_anon:5454 inactive_anon:0 isolated_anon:0 [ 283.152951][ T7267] active_file:1068 inactive_file:39835 isolated_file:0 [ 283.152951][ T7267] unevictable:768 dirty:19 writeback:0 [ 283.152951][ T7267] slab_reclaimable:10188 slab_unreclaimable:98829 [ 283.152951][ T7267] mapped:31051 shmem:1362 pagetables:1116 [ 283.152951][ T7267] sec_pagetables:0 bounce:0 [ 283.152951][ T7267] kernel_misc_reclaimable:0 [ 283.152951][ T7267] free:1329868 free_pcp:14124 free_cma:0 [ 283.206331][ T7267] Node 0 active_anon:21816kB inactive_anon:0kB active_file:4272kB inactive_file:159136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124204kB dirty:76kB writeback:0kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12400kB pagetables:4316kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 283.243186][ T7261] bridge_slave_1 (unregistering): left allmulticast mode [ 283.263631][ T7261] bridge_slave_1 (unregistering): left promiscuous mode [ 283.271099][ T7261] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.279544][ T7267] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 283.325048][ T7267] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 283.357799][ T7267] lowmem_reserve[]: 0 2498 2500 2500 2500 [ 283.364375][ T7267] Node 0 DMA32 free:1401244kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21772kB inactive_anon:0kB active_file:4272kB inactive_file:157556kB unevictable:1536kB writepending:76kB present:3129332kB managed:2558404kB mlocked:0kB bounce:0kB free_pcp:40876kB local_pcp:20500kB free_cma:0kB [ 283.397127][ T7267] lowmem_reserve[]: 0 0 1 1 1 [ 283.401960][ T7267] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 283.431962][ T7267] lowmem_reserve[]: 0 0 0 0 0 [ 283.436848][ T7267] Node 1 Normal free:3902656kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:15908kB local_pcp:4288kB free_cma:0kB [ 283.546109][ T7267] lowmem_reserve[]: 0 0 0 0 0 [ 283.557952][ T7267] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 283.587033][ T7267] Node 0 DMA32: 7*4kB (UME) 348*8kB (UM) 82*16kB (UME) 133*32kB (UME) 20*64kB (UE) 11*128kB (UME) 17*256kB (UME) 13*512kB (UM) 14*1024kB (UM) 4*2048kB (UME) 331*4096kB (M) = 1400380kB [ 283.717092][ T7267] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 283.756110][ T7267] Node 1 Normal: 198*4kB (UE) 53*8kB (UME) 44*16kB (UME) 86*32kB (UME) 24*64kB (UME) 9*128kB (UME) 4*256kB (UME) 4*512kB (UME) 1*1024kB (M) 2*2048kB (UE) 949*4096kB (M) = 3902656kB [ 283.790888][ T7284] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 283.865540][ T7267] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 283.894922][ T7267] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 283.911241][ T7267] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 283.921512][ T7267] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 283.932426][ T7267] 42264 total pagecache pages [ 283.937450][ T7267] 0 pages in swap cache [ 283.941621][ T7267] Free swap = 124996kB [ 283.945926][ T7267] Total swap = 124996kB [ 283.950557][ T7267] 2097051 pages RAM [ 283.954383][ T7267] 0 pages HighMem/MovableOnly [ 283.960348][ T7267] 425408 pages reserved [ 283.964573][ T7267] 0 pages cma reserved [ 284.362089][ T7296] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 284.867511][ T7330] __nla_validate_parse: 7 callbacks suppressed [ 284.867528][ T7330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.374'. [ 284.922800][ T7330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.374'. [ 285.279353][ T7343] syzkaller0: refused to change device tx_queue_len [ 285.305909][ T7347] netlink: 8 bytes leftover after parsing attributes in process `syz.4.378'. [ 285.337329][ T7347] netlink: 12 bytes leftover after parsing attributes in process `syz.4.378'. [ 285.357351][ T7350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.379'. [ 285.380895][ T7347] netlink: 'syz.4.378': attribute type 7 has an invalid length. [ 285.950345][ T7376] trusted_key: syz.4.386 sent an empty control message without MSG_MORE. [ 286.631517][ T7414] No such timeout policy "syz0" [ 287.003463][ T7433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.394'. [ 287.017264][ T7434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.394'. [ 287.027639][ T7434] netlink: 12 bytes leftover after parsing attributes in process `syz.3.394'. [ 287.052792][ T7433] netlink: 12 bytes leftover after parsing attributes in process `syz.3.394'. [ 287.670863][ T7463] netlink: 12 bytes leftover after parsing attributes in process `syz.3.401'. [ 288.897729][ T7513] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 289.112486][ T7519] macvtap1: entered allmulticast mode [ 289.148825][ T7519] veth0_macvtap: entered allmulticast mode [ 289.222379][ T7204] Set syz1 is full, maxelem 65536 reached [ 289.243551][ T7527] pim6reg: entered allmulticast mode [ 289.817403][ T7548] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 289.959701][ T7548] __nla_validate_parse: 3 callbacks suppressed [ 289.959717][ T7548] netlink: 224 bytes leftover after parsing attributes in process `syz.1.426'. [ 290.275167][ T7562] netlink: 212296 bytes leftover after parsing attributes in process `syz.1.430'. [ 290.429721][ T7568] netlink: 44 bytes leftover after parsing attributes in process `syz.4.429'. [ 290.616965][ T7576] netlink: 'syz.0.434': attribute type 2 has an invalid length. [ 290.658900][ T7579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.435'. [ 290.727786][ T7579] netlink: 28 bytes leftover after parsing attributes in process `syz.4.435'. [ 290.780830][ T7579] netlink: 28 bytes leftover after parsing attributes in process `syz.4.435'. [ 291.030844][ T7595] netlink: 28 bytes leftover after parsing attributes in process `syz.1.438'. [ 291.061562][ T7598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.441'. [ 291.116243][ T7599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.441'. [ 291.273730][ T7608] netlink: 28 bytes leftover after parsing attributes in process `syz.4.445'. [ 291.285311][ T7606] netlink: 'syz.1.443': attribute type 10 has an invalid length. [ 291.329489][ T7606] team0: Device ipvlan1 failed to register rx_handler [ 291.434874][ T7606] netlink: 'syz.1.443': attribute type 10 has an invalid length. [ 291.531254][ T7606] team0: Device ipvlan1 failed to register rx_handler [ 291.588299][ T7606] netlink: 'syz.1.443': attribute type 10 has an invalid length. [ 291.654033][ T7606] team0: Device ipvlan1 failed to register rx_handler [ 291.679804][ T7628] netlink: 'syz.0.452': attribute type 11 has an invalid length. [ 291.717608][ T7606] netlink: 'syz.1.443': attribute type 10 has an invalid length. [ 291.777397][ T7606] team0: Device ipvlan1 failed to register rx_handler [ 291.818621][ T7606] netlink: 'syz.1.443': attribute type 10 has an invalid length. [ 291.879697][ T7635] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 291.892730][ T7606] team0: Device ipvlan1 failed to register rx_handler [ 291.932244][ T7606] netlink: 'syz.1.443': attribute type 10 has an invalid length. [ 291.993821][ T7606] team0: Device ipvlan1 failed to register rx_handler [ 292.013320][ T7606] netlink: 'syz.1.443': attribute type 10 has an invalid length. [ 292.101171][ T7606] team0: Device ipvlan1 failed to register rx_handler [ 292.534039][ T7675] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 292.920715][ T7692] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 292.966876][ T7692] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 293.045301][ T7694] IPVS: Scheduler module ip_vs_sip not found [ 293.460797][ T7713] gretap0: left allmulticast mode [ 293.476661][ T7722] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 294.106597][ T7761] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 294.120641][ T7758] tipc: Enabling of bearer rejected, already enabled [ 294.289518][ T7766] netlink: 'syz.3.498': attribute type 12 has an invalid length. [ 294.783662][ T7782] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 295.186734][ T7805] __nla_validate_parse: 12 callbacks suppressed [ 295.186751][ T7805] netlink: 80 bytes leftover after parsing attributes in process `syz.2.512'. [ 295.272142][ T7805] netlink: 80 bytes leftover after parsing attributes in process `syz.2.512'. [ 295.390780][ T7818] netlink: 156 bytes leftover after parsing attributes in process `syz.1.514'. [ 295.650383][ T7829] validate_nla: 5 callbacks suppressed [ 295.650401][ T7829] netlink: 'syz.3.519': attribute type 1 has an invalid length. [ 295.665521][ T7827] netlink: 12 bytes leftover after parsing attributes in process `syz.1.518'. [ 295.687645][ T7829] netlink: 'syz.3.519': attribute type 3 has an invalid length. [ 295.714869][ T7829] netlink: 224 bytes leftover after parsing attributes in process `syz.3.519'. [ 295.756189][ T7829] NCSI netlink: No device for ifindex 0 [ 295.795661][ T7833] netlink: 252 bytes leftover after parsing attributes in process `syz.2.520'. [ 295.856301][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 295.909049][ T7840] netlink: 'syz.4.521': attribute type 21 has an invalid length. [ 295.936413][ T7840] IPv6: NLM_F_CREATE should be specified when creating new route [ 295.957209][ T7840] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 295.964659][ T7840] IPv6: NLM_F_CREATE should be set when creating new route [ 295.972008][ T7840] IPv6: NLM_F_CREATE should be set when creating new route [ 295.979309][ T7840] IPv6: NLM_F_CREATE should be set when creating new route [ 296.258065][ T7840] syzkaller0: entered promiscuous mode [ 296.280553][ T7840] syzkaller0: entered allmulticast mode [ 296.311059][ T7834] veth1_macvtap: left promiscuous mode [ 296.320037][ T7834] macsec0: entered promiscuous mode [ 296.345761][ T7834] macsec0: entered allmulticast mode [ 297.382251][ T7839] veth1_macvtap: entered promiscuous mode [ 297.388260][ T7839] veth1_macvtap: entered allmulticast mode [ 297.394374][ T7839] macsec0: left promiscuous mode [ 297.399632][ T7839] macsec0: left allmulticast mode [ 297.404709][ T7839] veth1_macvtap: left allmulticast mode [ 297.438524][ T7868] netlink: 28 bytes leftover after parsing attributes in process `syz.0.523'. [ 297.706230][ T7888] bridge0: entered allmulticast mode [ 297.755884][ T7889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.528'. [ 297.811016][ T7889] bridge_slave_0: left allmulticast mode [ 297.842939][ T7889] bridge_slave_0: left promiscuous mode [ 297.866961][ T7889] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.957368][ T7889] bridge0 (unregistering): left allmulticast mode [ 298.097606][ T7908] netlink: 'syz.1.533': attribute type 1 has an invalid length. [ 298.364572][ T7923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.536'. [ 298.399891][ T7922] xt_CT: No such helper "snmp" [ 298.880035][ T7950] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 299.517952][ T7967] bond2 (unregistering): Released all slaves [ 299.860895][ T7979] netlink: 24 bytes leftover after parsing attributes in process `syz.2.548'. [ 300.014406][ T7994] netlink: 'syz.0.553': attribute type 21 has an invalid length. [ 300.077513][ T7996] openvswitch: netlink: Message has 4 unknown bytes. [ 300.246015][ T8005] __nla_validate_parse: 2 callbacks suppressed [ 300.296098][ T8005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.555'. [ 300.326635][ T8008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.556'. [ 300.352334][ T8005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.555'. [ 300.689579][ T8026] netlink: 'syz.3.560': attribute type 1 has an invalid length. [ 300.724953][ T8029] netlink: 20 bytes leftover after parsing attributes in process `syz.2.561'. [ 300.732587][ T8026] netlink: 220 bytes leftover after parsing attributes in process `syz.3.560'. [ 300.942199][ T8040] netlink: 4 bytes leftover after parsing attributes in process `syz.3.562'. [ 300.953597][ T8042] xt_connbytes: Forcing CT accounting to be enabled [ 300.971930][ T8042] Cannot find add_set index 0 as target [ 300.996483][ T8040] netlink: 4 bytes leftover after parsing attributes in process `syz.3.562'. [ 301.006595][ T8041] netlink: 20 bytes leftover after parsing attributes in process `syz.0.563'. [ 301.551821][ T8068] netlink: 32 bytes leftover after parsing attributes in process `syz.0.571'. [ 301.673277][ T8075] netlink: 72 bytes leftover after parsing attributes in process `syz.4.573'. [ 302.209608][ T8100] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 302.520316][ T8103] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 302.717401][ T8112] macsec0: entered promiscuous mode [ 302.808079][ T5965] IPVS: starting estimator thread 0... [ 302.811533][ T8123] !€ÿ: renamed from bond_slave_0 [ 302.926133][ T8124] IPVS: using max 32 ests per chain, 76800 per kthread [ 303.386883][ T8145] netlink: set zone limit has 8 unknown bytes [ 303.442815][ T8150] delete_channel: no stack [ 303.570954][ T8150] netlink: 'syz.3.594': attribute type 3 has an invalid length. [ 304.761798][ T8227] netlink: 'syz.2.613': attribute type 10 has an invalid length. [ 305.375512][ T8257] __nla_validate_parse: 7 callbacks suppressed [ 305.375530][ T8257] netlink: 51 bytes leftover after parsing attributes in process `syz.2.620'. [ 305.520767][ T8267] block nbd1: not configured, cannot reconfigure [ 305.643977][ T5899] Bluetooth: hci4: link tx timeout [ 305.649852][ T5899] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 305.659511][ T5891] Bluetooth: hci4: link tx timeout [ 305.664860][ T5891] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 305.731177][ T8281] netlink: 'syz.0.626': attribute type 4 has an invalid length. [ 305.783086][ T8290] netlink: 'syz.0.626': attribute type 4 has an invalid length. [ 305.842648][ T8291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.630'. [ 306.155501][ T8306] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 306.162176][ T8306] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 306.210017][ T8306] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 306.216522][ T8306] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 306.253270][ T8306] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 306.259746][ T8306] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 306.311761][ T8306] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 306.318279][ T8306] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 306.401944][ T8321] netlink: 20 bytes leftover after parsing attributes in process `syz.2.638'. [ 306.408724][ T8306] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 306.417291][ T8306] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 306.447389][ T8321] netlink: 120 bytes leftover after parsing attributes in process `syz.2.638'. [ 306.484614][ T8321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.638'. [ 306.566627][ T8328] netlink: 16 bytes leftover after parsing attributes in process `syz.0.642'. [ 307.013163][ T8351] netlink: 'syz.4.648': attribute type 2 has an invalid length. [ 307.586300][ T8374] netlink: 12 bytes leftover after parsing attributes in process `syz.3.653'. [ 307.686347][ T5891] Bluetooth: hci4: command 0x0406 tx timeout [ 307.699793][ T8374] 8021q: adding VLAN 0 to HW filter on device bond2 [ 307.730663][ T8379] macvlan0: entered promiscuous mode [ 307.738250][ T8379] macvlan0: entered allmulticast mode [ 307.747182][ T8379] bond2: entered promiscuous mode [ 307.753916][ T8379] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 307.802109][ T8379] bond2: left promiscuous mode [ 308.269946][ T8409] netlink: 16 bytes leftover after parsing attributes in process `syz.3.661'. [ 308.309966][ T8409] netlink: 16 bytes leftover after parsing attributes in process `syz.3.661'. [ 308.452203][ T8418] netlink: 232 bytes leftover after parsing attributes in process `syz.1.665'. [ 308.670417][ T8436] xt_hashlimit: max too large, truncated to 1048576 [ 309.615921][ T8474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.640619][ T8474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.655523][ T8474] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 309.702824][ T8474] bond0 (unregistering): Released all slaves [ 310.884345][ T8531] __nla_validate_parse: 15 callbacks suppressed [ 310.884362][ T8531] netlink: 60 bytes leftover after parsing attributes in process `syz.2.698'. [ 310.901742][ T8531] netlink: 60 bytes leftover after parsing attributes in process `syz.2.698'. [ 311.529530][ T8558] netlink: 16 bytes leftover after parsing attributes in process `syz.0.707'. [ 311.564485][ T8558] netlink: 'syz.0.707': attribute type 83 has an invalid length. [ 311.594248][ T8562] syzkaller1: entered promiscuous mode [ 311.617013][ T8562] syzkaller1: entered allmulticast mode [ 312.233974][ T8580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.713'. [ 312.454430][ T8588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.519403][ T8590] netlink: 36 bytes leftover after parsing attributes in process `syz.3.718'. [ 312.537090][ T8591] netlink: 36 bytes leftover after parsing attributes in process `syz.3.718'. [ 312.922905][ T8600] netlink: 16 bytes leftover after parsing attributes in process `syz.0.722'. [ 312.932160][ T8601] netlink: 16 bytes leftover after parsing attributes in process `syz.0.722'. [ 312.949904][ T8600] netlink: 12 bytes leftover after parsing attributes in process `syz.0.722'. [ 313.275261][ T8609] netlink: 'syz.3.726': attribute type 10 has an invalid length. [ 313.318265][ T8609] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 314.081304][ T8648] netlink: 71 bytes leftover after parsing attributes in process `syz.1.737'. [ 314.095313][ T8648] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.103491][ T8648] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.273131][ T8655] Bluetooth: MGMT ver 1.23 [ 314.644173][ T8668] sctp: [Deprecated]: syz.1.742 (pid 8668) Use of struct sctp_assoc_value in delayed_ack socket option. [ 314.644173][ T8668] Use struct sctp_sack_info instead [ 315.222551][ T8695] netlink: 'syz.0.748': attribute type 1 has an invalid length. [ 315.503862][ T8705] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 315.696594][ T8715] net_ratelimit: 67 callbacks suppressed [ 315.696612][ T8715] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 316.061168][ T8731] __nla_validate_parse: 11 callbacks suppressed [ 316.061187][ T8731] netlink: 96 bytes leftover after parsing attributes in process `syz.3.760'. [ 316.096167][ T8731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.760'. [ 316.417979][ T8742] netlink: 4 bytes leftover after parsing attributes in process `syz.3.763'. [ 316.447585][ T8515] Set syz1 is full, maxelem 65536 reached [ 316.662628][ T8757] netlink: 60 bytes leftover after parsing attributes in process `syz.4.765'. [ 316.696417][ T8751] netlink: 60 bytes leftover after parsing attributes in process `syz.4.765'. [ 316.974670][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.039637][ T8776] netlink: 'syz.4.773': attribute type 2 has an invalid length. [ 317.118707][ T8780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.153985][ T8780] netlink: 'syz.0.775': attribute type 10 has an invalid length. [ 317.182271][ T8782] netlink: 'syz.4.774': attribute type 11 has an invalid length. [ 317.215856][ T8780] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 317.253130][ T8786] openvswitch: netlink: VXLAN extension message has 12 unknown bytes. [ 317.621757][ T8805] netlink: 156 bytes leftover after parsing attributes in process `syz.1.779'. [ 317.626419][ T8808] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.780'. [ 319.134071][ T8861] tipc: Failed to obtain node identity [ 319.158138][ T8861] tipc: Enabling of bearer rejected, failed to enable media [ 319.386522][ T8876] netlink: 51 bytes leftover after parsing attributes in process `syz.0.802'. [ 319.434535][ T8874] netlink: 51 bytes leftover after parsing attributes in process `syz.0.802'. [ 319.508057][ T8876] netlink: 'syz.0.802': attribute type 83 has an invalid length. [ 319.561786][ T8884] netlink: 4 bytes leftover after parsing attributes in process `syz.4.804'. [ 319.584678][ T8884] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.695233][ T8884] bridge_slave_1 (unregistering): left allmulticast mode [ 319.720765][ T8884] bridge_slave_1 (unregistering): left promiscuous mode [ 319.745180][ T8884] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.977223][ T8897] netlink: 'syz.0.807': attribute type 1 has an invalid length. [ 319.985243][ T8897] netlink: 'syz.0.807': attribute type 1 has an invalid length. [ 320.044528][ T8897] netlink: 'syz.0.807': attribute type 1 has an invalid length. [ 320.090834][ T8897] netlink: 'syz.0.807': attribute type 1 has an invalid length. [ 320.667926][ T8939] FAULT_INJECTION: forcing a failure. [ 320.667926][ T8939] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 320.767066][ T8939] CPU: 0 UID: 0 PID: 8939 Comm: syz.3.815 Not tainted 6.16.0-rc4-syzkaller-00109-gb9fd9888a565 #0 PREEMPT(full) [ 320.767104][ T8939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 320.767115][ T8939] Call Trace: [ 320.767122][ T8939] [ 320.767129][ T8939] dump_stack_lvl+0x189/0x250 [ 320.767154][ T8939] ? __pfx____ratelimit+0x10/0x10 [ 320.767182][ T8939] ? __pfx_dump_stack_lvl+0x10/0x10 [ 320.767202][ T8939] ? __pfx__printk+0x10/0x10 [ 320.767226][ T8939] ? __might_fault+0xb0/0x130 [ 320.767258][ T8939] should_fail_ex+0x414/0x560 [ 320.767288][ T8939] _copy_from_user+0x2d/0xb0 [ 320.767310][ T8939] ___sys_recvmsg+0x12e/0x510 [ 320.767339][ T8939] ? __pfx____sys_recvmsg+0x10/0x10 [ 320.767394][ T8939] ? __fget_files+0x3a0/0x420 [ 320.767428][ T8939] __x64_sys_recvmsg+0x198/0x260 [ 320.767454][ T8939] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 320.767487][ T8939] ? __pfx_ksys_write+0x10/0x10 [ 320.767505][ T8939] ? rcu_is_watching+0x15/0xb0 [ 320.767530][ T8939] ? do_syscall_64+0xbe/0x3b0 [ 320.767563][ T8939] do_syscall_64+0xfa/0x3b0 [ 320.767582][ T8939] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.767598][ T8939] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 320.767614][ T8939] ? clear_bhb_loop+0x60/0xb0 [ 320.767635][ T8939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.767651][ T8939] RIP: 0033:0x7fda2f78e929 [ 320.767666][ T8939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.767680][ T8939] RSP: 002b:00007fda3066a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 320.767699][ T8939] RAX: ffffffffffffffda RBX: 00007fda2f9b5fa0 RCX: 00007fda2f78e929 [ 320.767712][ T8939] RDX: 0000000000000043 RSI: 00002000000003c0 RDI: 0000000000000003 [ 320.767722][ T8939] RBP: 00007fda3066a090 R08: 0000000000000000 R09: 0000000000000000 [ 320.767733][ T8939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.767742][ T8939] R13: 0000000000000000 R14: 00007fda2f9b5fa0 R15: 00007ffffdc0f458 [ 320.767769][ T8939] [ 321.118118][ T8944] __nla_validate_parse: 1 callbacks suppressed [ 321.118137][ T8944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.817'. [ 321.218683][ T8962] netlink: 4 bytes leftover after parsing attributes in process `syz.3.821'. [ 321.563775][ T8986] sctp: [Deprecated]: syz.2.824 (pid 8986) Use of int in maxseg socket option. [ 321.563775][ T8986] Use struct sctp_assoc_value instead [ 321.634489][ T8990] netlink: 256 bytes leftover after parsing attributes in process `syz.3.826'. [ 321.768428][ T8993] openvswitch: netlink: Missing key (keys=40, expected=80) [ 321.857895][ T9000] netlink: 'syz.4.827': attribute type 1 has an invalid length. [ 321.895866][ T8997] netlink: 'syz.4.827': attribute type 1 has an invalid length. [ 321.920199][ T9000] netlink: 12 bytes leftover after parsing attributes in process `syz.4.827'. [ 321.966091][ T8997] netlink: 12 bytes leftover after parsing attributes in process `syz.4.827'. [ 322.241840][ T9018] netlink: 116 bytes leftover after parsing attributes in process `syz.1.832'. [ 322.317633][ T9022] netlink: 36 bytes leftover after parsing attributes in process `syz.4.834'. [ 322.386943][ T9022] netlink: 16 bytes leftover after parsing attributes in process `syz.4.834'. [ 322.433022][ T9022] netlink: 36 bytes leftover after parsing attributes in process `syz.4.834'. [ 322.445717][ T9030] netlink: 12 bytes leftover after parsing attributes in process `syz.3.836'. [ 322.502022][ T9029] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 322.552042][ T9030] netlink: 'syz.3.836': attribute type 10 has an invalid length. [ 323.348200][ T9085] syzkaller0: entered allmulticast mode [ 323.405729][ T9091] syzkaller0 (unregistering): left allmulticast mode [ 323.625796][ T9104] netlink: 'syz.0.852': attribute type 1 has an invalid length. [ 323.636344][ T9102] IPVS: set_ctl: invalid protocol: 103 224.0.0.2:20003 [ 323.665327][ T9102] 8021q: VLANs not supported on lo [ 323.770737][ T9109] 8021q: adding VLAN 0 to HW filter on device bond3 [ 323.783223][ T9109] bond2: (slave bond3): making interface the new active one [ 323.791150][ T9109] bond2: (slave bond3): Enslaving as an active interface with an up link [ 323.830212][ T9104] bond2: (slave gretap3): Enslaving as a backup interface with an up link [ 323.858642][ T9109] 8021q: adding VLAN 0 to HW filter on device bond2 [ 324.707879][ T9155] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 324.935328][ T9160] tipc: Started in network mode [ 324.963534][ T9160] tipc: Node identity e0000002, cluster identity 4711 [ 324.981387][ T9160] tipc: Enabling of bearer rejected, failed to enable media [ 325.041912][ T9151] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 325.407774][ T9203] netlink: 'syz.1.875': attribute type 5 has an invalid length. [ 325.421070][ T9204] vxcan1: tx address claim with dest, not broadcast [ 325.650834][ T9216] netlink: 'syz.4.879': attribute type 21 has an invalid length. [ 325.994054][ T9231] netlink: 'syz.2.883': attribute type 10 has an invalid length. [ 326.009404][ T9237] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 326.344742][ T9250] __nla_validate_parse: 15 callbacks suppressed [ 326.344764][ T9250] netlink: 108 bytes leftover after parsing attributes in process `syz.2.886'. [ 326.399516][ T9212] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 326.621189][ T9264] netlink: 808 bytes leftover after parsing attributes in process `syz.3.888'. [ 326.941693][ T9275] netlink: 'syz.1.893': attribute type 11 has an invalid length. [ 327.031274][ T9278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.893'. [ 327.055517][ T9280] netlink: 596 bytes leftover after parsing attributes in process `syz.4.891'. [ 327.112484][ T9279] nbd: must specify at least one socket [ 327.132091][ T9274] netlink: 'syz.4.891': attribute type 29 has an invalid length. [ 327.183103][ T9276] netlink: 'syz.4.891': attribute type 29 has an invalid length. [ 327.193557][ T9275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.893'. [ 327.207116][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 327.261796][ T9274] netlink: 16 bytes leftover after parsing attributes in process `syz.4.891'. [ 327.606258][ T5899] Bluetooth: hci0: command 0x0c20 tx timeout [ 328.033852][ T9313] netlink: 240 bytes leftover after parsing attributes in process `syz.1.901'. [ 328.058328][ T9314] netlink: 147400 bytes leftover after parsing attributes in process `syz.2.902'. [ 328.101003][ T56] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 328.146685][ T56] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 328.154446][ T981] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 328.314187][ T9319] netlink: 5 bytes leftover after parsing attributes in process `syz.0.903'. [ 328.329374][ T9319] netlink: 5 bytes leftover after parsing attributes in process `syz.0.903'. [ 328.351264][ T30] audit: type=1107 audit(1751803246.022:2): pid=9323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 328.431460][ T9328] openvswitch: netlink: Missing key (keys=40, expected=100) [ 328.646585][ T981] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 329.126871][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 329.646640][ T9367] FAULT_INJECTION: forcing a failure. [ 329.646640][ T9367] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 329.660204][ T9367] CPU: 1 UID: 0 PID: 9367 Comm: syz.1.908 Not tainted 6.16.0-rc4-syzkaller-00109-gb9fd9888a565 #0 PREEMPT(full) [ 329.660233][ T9367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 329.660245][ T9367] Call Trace: [ 329.660252][ T9367] [ 329.660261][ T9367] dump_stack_lvl+0x189/0x250 [ 329.660290][ T9367] ? __pfx____ratelimit+0x10/0x10 [ 329.660321][ T9367] ? __pfx_dump_stack_lvl+0x10/0x10 [ 329.660346][ T9367] ? __pfx__printk+0x10/0x10 [ 329.660373][ T9367] ? __might_fault+0xb0/0x130 [ 329.660411][ T9367] should_fail_ex+0x414/0x560 [ 329.660445][ T9367] _copy_from_user+0x2d/0xb0 [ 329.660471][ T9367] do_sock_getsockopt+0x1cd/0x650 [ 329.660500][ T9367] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 329.660525][ T9367] ? do_syscall_64+0x40/0x3b0 [ 329.660544][ T9367] ? __fget_files+0x3a0/0x420 [ 329.660570][ T9367] ? __fget_files+0x2a/0x420 [ 329.660605][ T9367] __x64_sys_getsockopt+0x1a5/0x250 [ 329.660630][ T9367] ? do_syscall_64+0x40/0x3b0 [ 329.660651][ T9367] ? do_syscall_64+0x40/0x3b0 [ 329.660675][ T9367] do_syscall_64+0xfa/0x3b0 [ 329.660693][ T9367] ? lockdep_hardirqs_on+0x9c/0x150 [ 329.660723][ T9367] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.660743][ T9367] ? clear_bhb_loop+0x60/0xb0 [ 329.660777][ T9367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.660796][ T9367] RIP: 0033:0x7f291fd8e929 [ 329.660813][ T9367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.660829][ T9367] RSP: 002b:00007f2920ba0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 329.660850][ T9367] RAX: ffffffffffffffda RBX: 00007f291ffb6160 RCX: 00007f291fd8e929 [ 329.660864][ T9367] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004 [ 329.660876][ T9367] RBP: 00007f2920ba0090 R08: 0000200000000040 R09: 0000000000000000 [ 329.660889][ T9367] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 329.660901][ T9367] R13: 0000000000000000 R14: 00007f291ffb6160 R15: 00007ffd61483428 [ 329.660933][ T9367] [ 332.019223][ T9397] __nla_validate_parse: 4 callbacks suppressed [ 332.019243][ T9397] netlink: 11 bytes leftover after parsing attributes in process `syz.4.922'. [ 332.034529][ T9397] netlink: 11 bytes leftover after parsing attributes in process `syz.4.922'. [ 332.119721][ T9400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 332.211063][ T9400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 332.214289][ T9405] ieee802154 phy0 wpan0: encryption failed: -22 [ 332.278939][ T9400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 332.486491][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 332.563492][ T9420] netlink: 128 bytes leftover after parsing attributes in process `syz.4.928'. [ 332.688021][ T9417] netlink: 'syz.4.928': attribute type 8 has an invalid length. [ 333.385899][ T9455] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 333.547370][ T9460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.942'. [ 333.973096][ T9171] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.067894][ T9171] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.169661][ T9171] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.400670][ T9171] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 334.427475][ T9171] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.428841][ T9484] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 334.580247][ T9493] netlink: 1000 bytes leftover after parsing attributes in process `syz.3.952'. [ 334.606933][ T9493] netlink: 1000 bytes leftover after parsing attributes in process `syz.3.952'. [ 334.690663][ T9493] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 334.761146][ T9500] netlink: 84 bytes leftover after parsing attributes in process `syz.2.953'. [ 335.302209][ T5891] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 335.311223][ T5891] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 335.320677][ T5891] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 335.329727][ T5891] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 335.339608][ T5891] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 336.034704][ T9528] netlink: 'syz.4.961': attribute type 3 has an invalid length. [ 336.366651][ T9171] bond1 (unregistering): (slave gretap2): Releasing active interface [ 336.383691][ T9171] bond2 (unregistering): (slave gretap3): Releasing backup interface [ 336.575817][ T9171] team0: Port device bond0 removed [ 336.584279][ T9171] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 336.595166][ T9171] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 336.605853][ T9171] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 336.622352][ T9171] bond0 (unregistering): Released all slaves [ 336.697824][ T9171] bond1 (unregistering): Released all slaves [ 336.770234][ T9171] bond2 (unregistering): (slave bond3): Releasing backup interface [ 336.779350][ T9171] bond2 (unregistering): Released all slaves [ 336.851491][ T9171] bond3 (unregistering): Released all slaves [ 336.940634][ T9530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.962'. [ 337.062428][ T9171] tipc: Disabling bearer [ 337.072892][ T9171] tipc: Disabling bearer [ 337.078710][ T9171] tipc: Left network mode [ 337.190528][ T9540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.966'. [ 337.202003][ T9541] netlink: 12 bytes leftover after parsing attributes in process `syz.1.966'. [ 337.220062][ T9540] netlink: 'syz.1.966': attribute type 1 has an invalid length. [ 337.240676][ T9540] netlink: 'syz.1.966': attribute type 1 has an invalid length. [ 337.266884][ T9540] netlink: 'syz.1.966': attribute type 2 has an invalid length. [ 337.275578][ T9540] netlink: 68 bytes leftover after parsing attributes in process `syz.1.966'. [ 337.309546][ T9541] netlink: 'syz.1.966': attribute type 1 has an invalid length. [ 337.359350][ T9541] netlink: 'syz.1.966': attribute type 1 has an invalid length. [ 337.367367][ T5899] Bluetooth: hci0: command tx timeout [ 337.373374][ T9541] netlink: 'syz.1.966': attribute type 2 has an invalid length. [ 337.385654][ T9541] netlink: 68 bytes leftover after parsing attributes in process `syz.1.966'. [ 337.605081][ T9516] chnl_net:caif_netlink_parms(): no params data found [ 337.776264][ T9171] hsr_slave_0: left promiscuous mode [ 337.794961][ T9171] hsr_slave_1: left promiscuous mode [ 337.806743][ T9171] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.824448][ T9171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.842331][ T9171] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.853103][ T9171] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.898647][ T9171] veth1_macvtap: left promiscuous mode [ 337.904303][ T9171] veth0_macvtap: left promiscuous mode [ 337.926666][ T9171] veth1_vlan: left promiscuous mode [ 337.932099][ T9171] veth0_vlan: left promiscuous mode [ 338.014928][ T9572] netlink: 24 bytes leftover after parsing attributes in process `syz.3.973'. [ 338.055252][ T9572] netlink: 68 bytes leftover after parsing attributes in process `syz.3.973'. [ 338.454099][ T9171] team0 (unregistering): Port device team_slave_1 removed [ 338.486062][ T9171] team0 (unregistering): Port device team_slave_0 removed [ 338.862910][ T9562] syz.1.970 (9562) used greatest stack depth: 17576 bytes left [ 338.975532][ T9587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.977'. [ 339.006551][ T9587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.977'. [ 339.028018][ T9587] netlink: 'syz.1.977': attribute type 15 has an invalid length. [ 339.050376][ T9516] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.057855][ T9516] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.065292][ T9516] bridge_slave_0: entered allmulticast mode [ 339.073811][ T9516] bridge_slave_0: entered promiscuous mode [ 339.100776][ T9516] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.121713][ T9516] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.145971][ T9516] bridge_slave_1: entered allmulticast mode [ 339.172417][ T9516] bridge_slave_1: entered promiscuous mode [ 339.266424][ T9602] IPVS: set_ctl: invalid protocol: 44 172.20.20.56:20003 [ 339.280933][ T9516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.316345][ T9516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.428009][ T9612] netlink: 'syz.3.983': attribute type 4 has an invalid length. [ 339.442859][ T9516] team0: Port device team_slave_0 added [ 339.456571][ T5899] Bluetooth: hci0: command tx timeout [ 339.487925][ T9616] netlink: 12 bytes leftover after parsing attributes in process `syz.1.986'. [ 339.515105][ T9618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.987'. [ 339.515945][ T9516] team0: Port device team_slave_1 added [ 339.551512][ T9616] macvtap1: entered promiscuous mode [ 339.557449][ T9616] vlan0: entered promiscuous mode [ 339.562884][ T9616] macvtap1: entered allmulticast mode [ 339.568529][ T9616] vlan0: entered allmulticast mode [ 339.573682][ T9616] veth0_vlan: entered allmulticast mode [ 339.615415][ T9620] macvtap2: entered promiscuous mode [ 339.621019][ T9620] macvtap2: entered allmulticast mode [ 339.659311][ T9516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.669327][ T9516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.698411][ T9516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.713081][ T9516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.720690][ T9516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.759206][ T9516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.781380][ T9624] IPVS: set_ctl: invalid protocol: 103 172.20.20.170:20004 [ 339.890202][ T9630] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 339.890603][ T9516] hsr_slave_0: entered promiscuous mode [ 339.904495][ T9629] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 339.914997][ T9516] hsr_slave_1: entered promiscuous mode [ 339.921562][ T9516] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 339.944893][ T9516] Cannot create hsr debugfs directory [ 340.681418][ T9516] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 340.712980][ T9678] x_tables: duplicate underflow at hook 1 [ 340.724458][ T9516] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 340.741708][ T9516] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 340.772164][ T9516] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 340.974535][ T9516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.004239][ T9516] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.021120][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.028321][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.044170][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.051488][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.286175][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 341.419583][ T9717] netlink: 'syz.1.1014': attribute type 10 has an invalid length. [ 341.460006][ T9516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.490594][ T9717] netlink: 'syz.1.1014': attribute type 10 has an invalid length. [ 341.509474][ T9717] batadv0: entered promiscuous mode [ 341.514717][ T9717] batadv0: entered allmulticast mode [ 341.538510][ T5899] Bluetooth: hci0: command tx timeout [ 341.547812][ T9717] bridge0: port 3(batadv0) entered blocking state [ 341.564687][ T9717] bridge0: port 3(batadv0) entered disabled state [ 341.634794][ T9723] netlink: 'syz.4.1015': attribute type 10 has an invalid length. [ 341.650175][ T9723] veth1_vlan: entered allmulticast mode [ 341.683092][ T9723] team0: Device veth1_vlan failed to register rx_handler [ 341.717231][ T9172] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 341.726897][ T9172] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 341.766560][ T9516] veth0_vlan: entered promiscuous mode [ 341.824042][ T9516] veth1_vlan: entered promiscuous mode [ 341.897452][ T9516] veth0_macvtap: entered promiscuous mode [ 341.977469][ T9516] veth1_macvtap: entered promiscuous mode [ 342.033653][ T9516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.071079][ T9516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.089963][ T9516] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.106489][ T9516] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.122211][ T9516] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.126571][ T9759] netlink: 'syz.4.1024': attribute type 30 has an invalid length. [ 342.131016][ T9516] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.402314][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.440444][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.494534][ T9781] netlink: 'syz.3.1032': attribute type 6 has an invalid length. [ 342.523785][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.538385][ T9781] __nla_validate_parse: 11 callbacks suppressed [ 342.538402][ T9781] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1032'. [ 342.561401][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.844118][ T9796] xt_CT: You must specify a L4 protocol and not use inversions on it [ 342.961809][ T9803] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 342.999988][ T9804] ieee802154 phy0 wpan0: encryption failed: -90 [ 343.006397][ T9804] ieee802154 phy0 wpan0: encryption failed: -90 [ 343.124008][ T9816] netlink: 'syz.1.1042': attribute type 1 has an invalid length. [ 343.588034][ T9835] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1050'. [ 343.630286][ T9837] netlink: 'syz.2.1051': attribute type 6 has an invalid length. [ 343.660744][ T9839] netlink: 'syz.4.1052': attribute type 4 has an invalid length. [ 343.831473][ T9853] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1055'. [ 343.907920][ T9172] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.248270][ T9866] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1059'. [ 344.288028][ T9871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1057'. [ 344.708666][ T9887] netlink: 'syz.2.1067': attribute type 1 has an invalid length. [ 344.752986][ T5891] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 344.762397][ T5891] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 344.770196][ T5891] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 344.778534][ T5891] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 344.786241][ T5891] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 344.820431][ T9887] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1067'. [ 344.829805][ T9888] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1067'. [ 345.020607][ T9890] chnl_net:caif_netlink_parms(): no params data found [ 345.114959][ T9899] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1069'. [ 345.189511][ T9172] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.347643][ T9172] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.434508][ T9172] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.502263][ T9890] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.510269][ T9890] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.517576][ T9890] bridge_slave_0: entered allmulticast mode [ 345.525264][ T9890] bridge_slave_0: entered promiscuous mode [ 345.544267][ T9890] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.589822][ T9890] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.615880][ T9890] bridge_slave_1: entered allmulticast mode [ 345.646528][ T9890] bridge_slave_1: entered promiscuous mode [ 345.675898][ T9926] netlink: 'syz.3.1076': attribute type 1 has an invalid length. [ 345.712585][ T9926] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1076'. [ 345.758796][ T9926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1076'. [ 345.761933][ T9936] netlink: 'syz.4.1078': attribute type 9 has an invalid length. [ 345.814183][ T9931] xt_CT: No such helper "syz0" [ 345.860365][ T9890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.914363][ T9890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.035675][ T9944] tipc: Started in network mode [ 346.042822][ T9944] tipc: Node identity 5, cluster identity 4 [ 346.052023][ T9944] tipc: Node number set to 5 [ 346.102271][ T9890] team0: Port device team_slave_0 added [ 346.138205][ T9890] team0: Port device team_slave_1 added [ 346.333354][ T9959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.358081][ T9959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 346.385551][ T9890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.392965][ T9890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.419824][ T9890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.438688][ T9890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.445654][ T9890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.471746][ T9890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.593276][ T9172] bridge_slave_1: left allmulticast mode [ 346.599632][ T9172] bridge_slave_1: left promiscuous mode [ 346.606358][ T9172] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.634296][ T9172] bridge_slave_0: left allmulticast mode [ 346.655805][ T9172] bridge_slave_0: left promiscuous mode [ 346.666224][ T9172] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.806551][ T5891] Bluetooth: hci0: command tx timeout [ 346.954980][ T9172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 346.965867][ T9172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.977298][ T9172] bond0 (unregistering): Released all slaves [ 347.111233][ T9985] Bluetooth: MGMT ver 1.23 [ 347.134775][ T9987] netlink: 'syz.3.1090': attribute type 21 has an invalid length. [ 347.162396][ T9890] hsr_slave_0: entered promiscuous mode [ 347.169730][ T9890] hsr_slave_1: entered promiscuous mode [ 347.177035][ T9890] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 347.184783][ T9890] Cannot create hsr debugfs directory [ 347.318019][ T9995] SET target dimension over the limit! [ 347.328998][ T9995] SET target dimension over the limit! [ 347.351118][ T9995] SET target dimension over the limit! [ 347.365327][ T9995] SET target dimension over the limit! [ 347.371691][ T9995] SET target dimension over the limit! [ 347.377664][ T9995] SET target dimension over the limit! [ 347.539572][ T9172] hsr_slave_0: left promiscuous mode [ 347.545948][ T9172] hsr_slave_1: left promiscuous mode [ 347.559704][ T9172] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.570359][ T9172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.590664][ T9172] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.612409][ T9172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.646146][ T9172] veth1_macvtap: left promiscuous mode [ 347.652931][ T9172] veth0_macvtap: left promiscuous mode [ 347.660190][ T9172] veth1_vlan: left promiscuous mode [ 347.665657][ T9172] veth0_vlan: left promiscuous mode [ 347.917329][T10018] __nla_validate_parse: 4 callbacks suppressed [ 347.917345][T10018] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1099'. [ 348.183650][ T9172] team0 (unregistering): Port device team_slave_1 removed [ 348.275564][ T9172] team0 (unregistering): Port device team_slave_0 removed [ 348.487447][T10039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1104'. [ 348.628067][T10045] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1106'. [ 348.782736][T10036] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 348.819150][T10036] macsec0: entered allmulticast mode [ 348.832753][T10036] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 348.861461][T10036] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 348.884210][T10036] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 348.891181][ T5891] Bluetooth: hci0: command tx timeout [ 348.923271][T10057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1109'. [ 349.571006][T10082] xt_CT: You must specify a L4 protocol and not use inversions on it [ 349.887966][T10100] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1120'. [ 350.031813][ T9890] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 350.059061][ T9890] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 350.114930][ T9890] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 350.130292][ T9890] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 350.229237][T10122] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1125'. [ 350.288712][ T9890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.337862][ T9890] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.364121][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.371424][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.404316][ T9172] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.411529][ T9172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.893469][T10157] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1138'. [ 350.968924][ T5891] Bluetooth: hci0: command tx timeout [ 350.990857][ T9890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.037218][ T9890] veth0_vlan: entered promiscuous mode [ 351.069251][T10163] gretap0: vlans aren't supported yet for dev_uc|mc_add() [ 351.089750][ T9890] veth1_vlan: entered promiscuous mode [ 351.225354][ T9890] veth0_macvtap: entered promiscuous mode [ 351.250479][ T9890] veth1_macvtap: entered promiscuous mode [ 351.274393][T10172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1142'. [ 351.288103][ T9890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.307239][T10172] bridge_slave_1: left allmulticast mode [ 351.312926][T10172] bridge_slave_1: left promiscuous mode [ 351.319411][T10172] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.335468][T10172] : left allmulticast mode [ 351.341703][T10172] : left promiscuous mode [ 351.349999][T10172] bridge0: port 1() entered disabled state [ 351.415124][T10181] xt_hashlimit: size too large, truncated to 1048576 [ 351.431525][ T9890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.451674][ T9890] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.472173][ T9890] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.490146][ T9890] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.503786][ T9890] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.612983][T10190] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 351.649248][T10192] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1146'. [ 351.738267][T10194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1146'. [ 351.858231][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.893455][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.991308][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.008859][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.095239][T10206] vlan0: entered allmulticast mode [ 352.106492][T10206] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 352.142249][T10210] x_tables: duplicate underflow at hook 2 [ 352.149687][T10210] x_tables: duplicate underflow at hook 2 [ 352.832189][T10249] netlink: 'syz.1.1158': attribute type 10 has an invalid length. [ 353.028999][ T56] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.106337][T10258] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 353.375437][T10273] lo: left allmulticast mode [ 353.385035][T10273] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 353.524781][T10279] netlink: 'syz.3.1170': attribute type 7 has an invalid length. [ 353.592615][T10279] : entered promiscuous mode [ 353.707040][T10293] netlink: 'syz.4.1173': attribute type 1 has an invalid length. [ 353.894022][T10302] __nla_validate_parse: 3 callbacks suppressed [ 353.894039][T10302] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1176'. [ 353.977029][ T5899] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 353.993063][ T56] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.011541][T10309] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1177'. [ 354.021832][ T5899] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 354.032364][ T5899] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 354.046484][T10307] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1175'. [ 354.057459][ T5899] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 354.065397][ T5899] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 354.091391][T10309] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 354.099119][T10309] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 354.158410][ T56] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.345006][ T56] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.390868][T10327] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1181'. [ 354.467124][T10323] xt_CT: No such helper "syz0" [ 354.671480][T10341] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1185'. [ 354.832794][ T56] bridge_slave_1: left allmulticast mode [ 354.841768][ T56] bridge_slave_1: left promiscuous mode [ 354.849745][T10354] sctp: [Deprecated]: syz.2.1188 (pid 10354) Use of struct sctp_assoc_value in delayed_ack socket option. [ 354.849745][T10354] Use struct sctp_sack_info instead [ 354.870857][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.879900][T10353] netlink: 'syz.1.1189': attribute type 1 has an invalid length. [ 354.895242][ T56] bridge_slave_0: left allmulticast mode [ 354.901209][T10353] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1189'. [ 354.914480][ T56] bridge_slave_0: left promiscuous mode [ 354.920450][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.244419][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.262322][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.273553][ T56] bond0 (unregistering): Released all slaves [ 355.282219][T10360] delete_channel: no stack [ 355.317520][T10305] chnl_net:caif_netlink_parms(): no params data found [ 355.717694][T10305] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.729316][T10383] netlink: 'syz.4.1198': attribute type 12 has an invalid length. [ 355.737473][T10305] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.745933][T10305] bridge_slave_0: entered allmulticast mode [ 355.754002][T10305] bridge_slave_0: entered promiscuous mode [ 355.765026][T10387] netlink: 'syz.1.1200': attribute type 1 has an invalid length. [ 355.825419][T10305] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.843202][T10305] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.856185][T10305] bridge_slave_1: entered allmulticast mode [ 355.879062][T10305] bridge_slave_1: entered promiscuous mode [ 355.989037][ T56] hsr_slave_0: left promiscuous mode [ 355.997579][ T56] hsr_slave_1: left promiscuous mode [ 356.003543][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.028830][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.045828][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.059224][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.086481][T10405] netlink: 'syz.1.1206': attribute type 10 has an invalid length. [ 356.122508][ T56] veth1_macvtap: left promiscuous mode [ 356.137061][ T56] veth0_macvtap: left promiscuous mode [ 356.142996][ T56] veth1_vlan: left promiscuous mode [ 356.148607][ T56] veth0_vlan: left promiscuous mode [ 356.166123][ T5891] Bluetooth: hci0: command tx timeout [ 356.193911][T10413] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1207'. [ 356.522707][ T56] team0 (unregistering): Port device team_slave_1 removed [ 356.555393][ T56] team0 (unregistering): Port device team_slave_0 removed [ 356.851011][T10305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.876455][T10405] bridge_slave_1: left allmulticast mode [ 356.882137][T10405] bridge_slave_1: left promiscuous mode [ 356.900383][T10405] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.915398][T10408] ipvlan0: entered promiscuous mode [ 356.926131][T10408] ipvlan0: entered allmulticast mode [ 356.931471][T10408] veth0_vlan: entered allmulticast mode [ 356.957147][T10415] netlink: 'syz.2.1208': attribute type 2 has an invalid length. [ 356.959292][T10413] bridge_slave_0: left allmulticast mode [ 356.978071][T10413] bridge_slave_0: left promiscuous mode [ 356.983896][T10413] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.128700][T10305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.187262][T10417] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1209'. [ 357.259483][T10305] team0: Port device team_slave_0 added [ 357.283862][T10305] team0: Port device team_slave_1 added [ 357.449959][T10305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 357.492492][T10305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.520256][T10305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 357.563109][T10444] netlink: 'syz.1.1216': attribute type 1 has an invalid length. [ 357.577634][T10305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 357.584614][T10305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.620316][T10305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 357.631006][T10444] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1216'. [ 357.701306][T10452] xt_limit: Overflow, try lower: 2147483649/128 [ 357.834070][T10305] hsr_slave_0: entered promiscuous mode [ 357.857192][T10305] hsr_slave_1: entered promiscuous mode [ 357.865553][T10305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 357.893955][T10305] Cannot create hsr debugfs directory [ 357.913095][T10459] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1221'. [ 357.922888][T10459] tc_dump_action: action bad kind [ 357.928324][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 358.246545][ T5891] Bluetooth: hci0: command tx timeout [ 358.586299][T10305] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 358.597347][T10305] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 358.618166][T10305] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 358.635948][T10305] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 358.825216][T10305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.875409][T10305] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.991839][ T9172] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.999025][ T9172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.035726][ T9172] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.042913][ T9172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.071658][T10514] veth0: entered promiscuous mode [ 359.091731][T10511] veth0: left promiscuous mode [ 359.544375][ T9173] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.579379][ T5899] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 359.589714][ T5899] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 359.597889][ T5899] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 359.605871][T10539] netlink: 'syz.4.1246': attribute type 1 has an invalid length. [ 359.616205][ T5899] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 359.626625][ T5899] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 359.694922][T10539] bond0: (slave bridge0): making interface the new active one [ 359.704652][T10539] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 359.769552][ T9173] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.860247][T10550] __nla_validate_parse: 1 callbacks suppressed [ 359.860265][T10550] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1250'. [ 359.894152][ T9173] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.934310][T10305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.032187][ T9173] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.326286][ T5891] Bluetooth: hci0: command tx timeout [ 360.365028][T10577] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1258'. [ 360.372235][T10578] netlink: 'syz.1.1259': attribute type 10 has an invalid length. [ 360.381895][T10305] veth0_vlan: entered promiscuous mode [ 360.387694][T10577] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1258'. [ 360.417284][T10578] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 360.427974][T10578] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 360.573044][T10305] veth1_vlan: entered promiscuous mode [ 361.268092][ T9173] bond0 (unregistering): Released all slaves [ 361.288107][ T9173] bond1 (unregistering): Released all slaves [ 361.313236][ T9173] bond2 (unregistering): Released all slaves [ 361.510679][T10305] veth0_macvtap: entered promiscuous mode [ 361.561992][T10538] chnl_net:caif_netlink_parms(): no params data found [ 361.577816][T10305] veth1_macvtap: entered promiscuous mode [ 361.601982][T10592] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1261'. [ 361.633947][T10593] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1261'. [ 361.687432][ T5891] Bluetooth: hci2: command tx timeout [ 361.705856][T10597] ieee802154 phy0 wpan0: encryption failed: -22 [ 361.740210][T10305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.785510][T10305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.849908][T10305] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.897396][T10305] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.918373][T10305] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.940251][T10305] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.377833][T10538] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.406162][ T5891] Bluetooth: hci0: command tx timeout [ 362.413039][T10538] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.432656][T10538] bridge_slave_0: entered allmulticast mode [ 362.447895][T10538] bridge_slave_0: entered promiscuous mode [ 362.584146][T10538] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.600463][T10538] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.616500][T10538] bridge_slave_1: entered allmulticast mode [ 362.624152][T10538] bridge_slave_1: entered promiscuous mode [ 362.703491][ T9173] hsr_slave_0: left promiscuous mode [ 362.720311][ T9173] hsr_slave_1: left promiscuous mode [ 362.764568][ T9173] veth1_macvtap: left promiscuous mode [ 362.773010][ T9173] veth0_macvtap: left promiscuous mode [ 362.900860][ T9173] pim6reg (unregistering): left allmulticast mode [ 363.501494][T10538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.534060][T10650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1276'. [ 363.560875][T10538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.682509][ T3589] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.703355][ T3589] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.753626][T10538] team0: Port device team_slave_0 added [ 363.769984][ T5891] Bluetooth: hci2: command tx timeout [ 363.790185][T10538] team0: Port device team_slave_1 added [ 363.931828][T10538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.959260][T10538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.005699][T10538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.050676][T10538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.067255][T10538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.174744][T10538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.199333][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.222306][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.295767][T10676] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1285'. [ 364.368611][ T9173] IPVS: stop unused estimator thread 0... [ 364.369908][T10538] hsr_slave_0: entered promiscuous mode [ 364.409748][T10538] hsr_slave_1: entered promiscuous mode [ 364.422079][T10538] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 364.445542][T10538] Cannot create hsr debugfs directory [ 364.581356][T10686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1288'. [ 364.602015][T10684] netlink: 'syz.1.1284': attribute type 1 has an invalid length. [ 364.627517][T10684] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 364.730777][T10694] openvswitch: netlink: IPv6 tunnel dst address is zero [ 364.805904][ T9173] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.932641][ T9173] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.000599][ T9173] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.071832][ T9173] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.171418][ T9173] bridge_slave_1: left allmulticast mode [ 365.178942][ T9173] bridge_slave_1: left promiscuous mode [ 365.184722][ T9173] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.194069][ T9173] bridge_slave_0: left allmulticast mode [ 365.200129][ T9173] bridge_slave_0: left promiscuous mode [ 365.205862][ T9173] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.720137][T10710] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7 [ 365.847908][ T5891] Bluetooth: hci2: command tx timeout [ 365.874745][ T9173] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 365.905952][ T9173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 365.917995][ T5899] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 365.925918][ T5899] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 365.934791][ T5899] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 365.943661][ T5899] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 365.952517][ T9173] bond0 (unregistering): Released all slaves [ 365.962649][ T5899] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 366.307192][T10737] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1300'. [ 366.381584][T10740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1301'. [ 366.410310][T10737] 8021q: adding VLAN 0 to HW filter on device bond4 [ 366.431308][T10737] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1300'. [ 366.459279][T10739] macvlan0: entered promiscuous mode [ 366.468457][T10739] macvlan0: entered allmulticast mode [ 366.481091][T10739] bond4: entered promiscuous mode [ 366.496820][T10739] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 366.514475][T10739] bond4: left promiscuous mode [ 366.732515][T10737] pim6reg: entered allmulticast mode [ 366.740752][T10538] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 366.836477][T10750] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.871608][T10754] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1304'. [ 366.885227][ T9173] hsr_slave_0: left promiscuous mode [ 366.892068][ T9173] hsr_slave_1: left promiscuous mode [ 366.898433][ T9173] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 366.912781][ T9173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 366.922891][ T9173] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 366.930894][ T9173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 366.954730][ T9173] veth1_macvtap: left promiscuous mode [ 366.960586][ T9173] veth0_macvtap: left promiscuous mode [ 366.966819][ T9173] veth1_vlan: left promiscuous mode [ 366.972906][ T9173] veth0_vlan: left promiscuous mode [ 367.332988][ T9173] team0 (unregistering): Port device team_slave_1 removed [ 367.371210][ T9173] team0 (unregistering): Port device team_slave_0 removed [ 367.646626][T10538] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 367.693190][T10750] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.710778][T10538] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 367.753994][T10538] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 367.841965][T10750] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.862300][T10769] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1308'. [ 367.888780][T10765] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 367.897972][T10765] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 367.905786][T10765] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 367.921499][T10765] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 367.926712][ T5891] Bluetooth: hci2: command tx timeout [ 367.993925][T10750] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.006182][ T5891] Bluetooth: hci0: command tx timeout [ 368.052141][T10720] chnl_net:caif_netlink_parms(): no params data found [ 368.133126][T10783] IPv6: sit1: Disabled Multicast RS [ 368.164226][T10783] netdevsim netdevsim1 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 368.295476][T10796] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1313'. [ 368.304844][T10796] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1313'. [ 368.314929][T10796] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1313'. [ 368.343384][T10750] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.395469][T10800] netlink: 'syz.1.1312': attribute type 1 has an invalid length. [ 368.449070][T10750] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.456307][T10794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1312'. [ 368.467757][T10794] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1312'. [ 368.481060][T10750] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.528280][T10800] 8021q: adding VLAN 0 to HW filter on device bond1 [ 368.539468][T10720] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.550276][T10720] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.558300][T10720] bridge_slave_0: entered allmulticast mode [ 368.567847][T10720] bridge_slave_0: entered promiscuous mode [ 368.588554][T10750] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.601968][T10720] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.610173][T10720] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.617425][T10720] bridge_slave_1: entered allmulticast mode [ 368.625688][T10720] bridge_slave_1: entered promiscuous mode [ 368.653824][T10794] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 368.746872][T10794] vlan2: entered allmulticast mode [ 368.752050][T10794] bond1: entered allmulticast mode [ 368.817651][T10814] netlink: 'syz.3.1318': attribute type 11 has an invalid length. [ 368.817914][T10720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.872798][T10720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.972066][T10538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.982941][T10720] team0: Port device team_slave_0 added [ 368.993596][T10720] team0: Port device team_slave_1 added [ 369.092814][T10538] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.104471][T10720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.113843][T10720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.148683][T10720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.164129][T10824] tipc: Enabling of bearer rejected, failed to enable media [ 369.187194][T10829] xt_bpf: check failed: parse error [ 369.187533][ T9171] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.199563][ T9171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.208755][T10720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.215935][T10720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.248479][T10720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.274300][ T9171] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.281467][ T9171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.370063][T10720] hsr_slave_0: entered promiscuous mode [ 369.377490][T10720] hsr_slave_1: entered promiscuous mode [ 369.383879][T10720] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 369.391999][T10720] Cannot create hsr debugfs directory [ 369.416839][T10838] netlink: 'syz.1.1327': attribute type 6 has an invalid length. [ 369.435017][T10838] netlink: 'syz.1.1327': attribute type 5 has an invalid length. [ 369.517149][T10843] netlink: 'syz.3.1329': attribute type 6 has an invalid length. [ 369.885081][T10863] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 370.045672][T10538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.055432][T10870] netlink: 'syz.3.1335': attribute type 1 has an invalid length. [ 370.087437][ T5891] Bluetooth: hci0: command tx timeout [ 370.101161][T10870] bond5: entered promiscuous mode [ 370.107975][T10870] 8021q: adding VLAN 0 to HW filter on device bond5 [ 370.174036][T10871] 8021q: adding VLAN 0 to HW filter on device bond5 [ 370.185873][T10871] bond5: (slave wireguard1): The slave device specified does not support setting the MAC address [ 370.198204][T10871] bond5: (slave wireguard1): Setting fail_over_mac to active for active-backup mode [ 370.255504][T10871] bond5: (slave wireguard1): making interface the new active one [ 370.263869][T10871] wireguard1: entered promiscuous mode [ 370.280570][T10871] bond5: (slave wireguard1): Enslaving as an active interface with an up link [ 370.344407][T10880] hsr_slave_0: left promiscuous mode [ 370.354938][T10880] hsr_slave_1: left promiscuous mode [ 370.411677][T10887] team_slave_0: entered promiscuous mode [ 370.448862][T10885] pim6reg1: entered promiscuous mode [ 370.464369][T10885] pim6reg1: entered allmulticast mode [ 370.645305][T10538] veth0_vlan: entered promiscuous mode [ 370.682380][T10720] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 370.704383][T10538] veth1_vlan: entered promiscuous mode [ 370.722776][T10720] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 370.733953][T10905] netlink: 'syz.4.1345': attribute type 10 has an invalid length. [ 370.760178][T10720] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 370.830849][T10913] netlink: 'syz.4.1345': attribute type 10 has an invalid length. [ 370.853761][T10905] veth0_vlan: left promiscuous mode [ 370.855437][T10917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 370.873983][T10905] veth0_vlan: entered promiscuous mode [ 370.881403][T10905] team0: Device veth0_vlan failed to register rx_handler [ 370.906542][T10720] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 370.923761][T10913] veth0_vlan: left promiscuous mode [ 370.930389][T10913] veth0_vlan: entered promiscuous mode [ 370.942237][T10913] team0: Device veth0_vlan failed to register rx_handler [ 371.036403][T10538] veth0_macvtap: entered promiscuous mode [ 371.050981][T10538] veth1_macvtap: entered promiscuous mode [ 371.103239][T10538] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.128840][T10538] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.153785][T10538] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.169607][T10538] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.191564][T10538] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.200531][T10538] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.335736][T10720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.359674][T10720] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.512302][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.519519][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.589584][ T9173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.596303][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.599905][ T9173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.604601][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.620147][T10948] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 371.756877][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.764773][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.816838][T10950] __nla_validate_parse: 15 callbacks suppressed [ 371.816856][T10950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1355'. [ 371.883296][T10950] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1355'. [ 371.965171][T10962] netlink: 'syz.3.1358': attribute type 1 has an invalid length. [ 371.981904][T10962] netlink: 'syz.3.1358': attribute type 2 has an invalid length. [ 372.166428][ T5899] Bluetooth: hci0: command tx timeout [ 372.362377][ T9173] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.421908][T10720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.687363][ T9173] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.849739][T10989] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1368'. [ 372.867903][ T9173] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.913029][T10989] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1368'. [ 372.945621][T10720] veth0_vlan: entered promiscuous mode [ 372.957330][T10989] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1368'. [ 372.981835][T10989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 372.991722][T10989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.012672][T10989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.038701][T10989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.170607][ T9173] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.248353][T10720] veth1_vlan: entered promiscuous mode [ 373.331118][ T5172] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 373.331388][T11011] openvswitch: netlink: Message has 199 unknown bytes. [ 373.349657][ T5172] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 373.364319][ T5172] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 373.372802][T10720] veth0_macvtap: entered promiscuous mode [ 373.386823][ T5172] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 373.395654][ T5172] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 373.400188][T11011] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.418738][T11014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1373'. [ 373.441472][T10720] veth1_macvtap: entered promiscuous mode [ 373.498263][T11018] netlink: 'syz.4.1374': attribute type 1 has an invalid length. [ 373.517111][ T9173] bridge_slave_1: left allmulticast mode [ 373.522792][ T9173] bridge_slave_1: left promiscuous mode [ 373.530107][T11015] xt_CT: No such helper "syz1" [ 373.536039][ T9173] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.564387][ T9173] bridge_slave_0: left allmulticast mode [ 373.586171][ T9173] bridge_slave_0: left promiscuous mode [ 373.592033][ T9173] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.069199][ T9173] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 374.080965][ T9173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 374.090979][ T9173] bond0 (unregistering): Released all slaves [ 374.162995][T10720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.199730][T11044] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1379'. [ 374.246150][ T5172] Bluetooth: hci0: command tx timeout [ 374.324097][T10720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.364935][T10720] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.394377][T10720] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.416135][T10720] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.430349][T10720] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.641788][ T9173] hsr_slave_0: left promiscuous mode [ 374.661441][ T9173] hsr_slave_1: left promiscuous mode [ 374.671567][ T9173] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 374.683586][ T9173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 374.699476][ T9173] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 374.724145][ T9173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 374.753266][ T9173] veth1_macvtap: left promiscuous mode [ 374.762075][ T9173] veth0_macvtap: left promiscuous mode [ 374.767828][ T9173] veth1_vlan: left promiscuous mode [ 374.773230][ T9173] veth0_vlan: left promiscuous mode [ 374.832737][T11038] delete_channel: no stack [ 374.937740][T11073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1386'. [ 374.989277][T11074] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1386'. [ 375.178934][ T9173] team0 (unregistering): Port device team_slave_1 removed [ 375.213991][ T9173] team0 (unregistering): Port device team_slave_0 removed [ 375.367950][ T5903] Bluetooth: hci3: command 0x0406 tx timeout [ 375.376186][ T5172] Bluetooth: hci1: command 0x0406 tx timeout [ 375.448079][ T5891] Bluetooth: hci2: command tx timeout [ 375.560964][T11071] veth1_macvtap: left promiscuous mode [ 375.662736][T11081] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1387'. [ 375.844096][ T3526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.903554][ T3526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.011093][T11094] netlink: 'syz.3.1390': attribute type 1 has an invalid length. [ 376.019252][T11010] chnl_net:caif_netlink_parms(): no params data found [ 376.054016][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.072441][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.092155][T11105] netlink: 'syz.4.1392': attribute type 1 has an invalid length. [ 376.360700][T11010] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.373213][T11010] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.394075][T11010] bridge_slave_0: entered allmulticast mode [ 376.408590][T11010] bridge_slave_0: entered promiscuous mode [ 376.461423][T11010] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.473943][T11010] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.490189][T11010] bridge_slave_1: entered allmulticast mode [ 376.507708][T11010] bridge_slave_1: entered promiscuous mode [ 376.791040][T11010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.884111][T11010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.989587][T11010] team0: Port device team_slave_0 added [ 376.998556][T11010] team0: Port device team_slave_1 added [ 377.054300][T11010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.061431][T11010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.087511][T11010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.099890][T11010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.106897][T11010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.133244][T11010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.179956][T11010] hsr_slave_0: entered promiscuous mode [ 377.186550][T11010] hsr_slave_1: entered promiscuous mode [ 377.192608][T11010] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 377.200747][T11010] Cannot create hsr debugfs directory [ 377.241889][ T9173] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.319699][ T9173] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.378778][ T9173] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.429925][ T9173] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.526270][ T5891] Bluetooth: hci2: command tx timeout [ 377.540710][ T9173] bridge_slave_1: left allmulticast mode [ 377.546613][ T9173] bridge_slave_1: left promiscuous mode [ 377.552626][ T9173] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.583030][T11142] x_tables: duplicate underflow at hook 1 [ 377.610758][ T9173] bridge_slave_0: left allmulticast mode [ 377.627367][ T9173] bridge_slave_0: left promiscuous mode [ 377.646974][ T9173] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.930792][ T5899] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 377.940567][ T5899] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 377.948603][ T5899] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 377.957738][ T5899] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 377.965792][ T5899] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 378.043099][ T9173] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 378.054123][ T9173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 378.064115][ T9173] bond0 (unregistering): Released all slaves [ 378.293252][T11173] sctp: [Deprecated]: syz.1.1405 (pid 11173) Use of int in max_burst socket option. [ 378.293252][T11173] Use struct sctp_assoc_value instead [ 378.329107][T11172] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 378.345558][T11172] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 378.395209][T11182] sctp: [Deprecated]: syz.3.1406 (pid 11182) Use of int in maxseg socket option. [ 378.395209][T11182] Use struct sctp_assoc_value instead [ 378.418801][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.420202][T11182] __nla_validate_parse: 4 callbacks suppressed [ 378.420219][T11182] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1406'. [ 378.596357][T11190] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1409'. [ 378.617920][T11189] tipc: Enabled bearer , priority 0 [ 378.644949][ T9173] hsr_slave_0: left promiscuous mode [ 378.658999][ T9173] hsr_slave_1: left promiscuous mode [ 378.665217][ T9173] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.674076][ T9173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.685773][ T9173] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.694818][ T9173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.719694][ T9173] veth1_macvtap: left promiscuous mode [ 378.725274][ T9173] veth0_macvtap: left promiscuous mode [ 378.731116][ T9173] veth1_vlan: left promiscuous mode [ 378.738724][ T9173] veth0_vlan: left promiscuous mode [ 379.100679][ T9173] team0 (unregistering): Port device team_slave_1 removed [ 379.130462][ T9173] team0 (unregistering): Port device team_slave_0 removed [ 379.467066][T11211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1415'. [ 379.563034][T11189] syzkaller0: entered promiscuous mode [ 379.568667][T11189] syzkaller0: entered allmulticast mode [ 379.574901][T11189] tipc: Resetting bearer [ 379.616366][ T5891] Bluetooth: hci2: command tx timeout [ 379.646397][ T9172] tipc: Resetting bearer [ 379.659970][T11188] tipc: Resetting bearer [ 379.797540][ T981] tipc: Node number set to 3758096386 [ 380.009973][ T5891] Bluetooth: hci0: command tx timeout [ 380.665822][T11188] tipc: Disabling bearer [ 380.685833][T11010] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 380.700447][T11010] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 380.736294][T11010] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 380.772808][T11010] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 380.850138][T11229] netlink: 'syz.3.1417': attribute type 7 has an invalid length. [ 380.864412][T11229] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1417'. [ 380.999849][T11010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.022849][T11010] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.043079][T11162] chnl_net:caif_netlink_parms(): no params data found [ 381.094429][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.101620][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.111079][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.118256][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.257748][T11162] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.265218][T11162] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.273111][T11162] bridge_slave_0: entered allmulticast mode [ 381.281399][T11162] bridge_slave_0: entered promiscuous mode [ 381.296221][T11162] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.303598][T11162] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.310992][T11162] bridge_slave_1: entered allmulticast mode [ 381.319132][T11162] bridge_slave_1: entered promiscuous mode [ 381.381095][T11162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.399309][T11250] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1421'. [ 381.404869][T11162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.462747][T11162] team0: Port device team_slave_0 added [ 381.473854][T11162] team0: Port device team_slave_1 added [ 381.590802][T11162] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.602637][T11162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.633666][T11162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.686251][ T5891] Bluetooth: hci2: command tx timeout [ 381.731704][T11162] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.745405][T11162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.779082][T11162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.950758][T11162] hsr_slave_0: entered promiscuous mode [ 381.957668][T11162] hsr_slave_1: entered promiscuous mode [ 381.963943][T11162] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 381.981702][T11162] Cannot create hsr debugfs directory [ 381.992044][T11270] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1426'. [ 382.089012][ T5891] Bluetooth: hci0: command tx timeout [ 382.145863][T11010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.167743][T11273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1427'. [ 382.215097][T11273] tunl0: left allmulticast mode [ 382.221357][T11275] openvswitch: netlink: Tunnel attr 303 out of range max 16 [ 382.230294][T11273] netlink: 'syz.4.1427': attribute type 3 has an invalid length. [ 382.238391][T11273] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1427'. [ 382.385212][T11280] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1430'. [ 382.387993][T11010] veth0_vlan: entered promiscuous mode [ 382.465513][T11282] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1430'. [ 382.534672][T11010] veth1_vlan: entered promiscuous mode [ 382.604661][T11010] veth0_macvtap: entered promiscuous mode [ 382.668855][T11010] veth1_macvtap: entered promiscuous mode [ 382.708952][T11010] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.749711][T11010] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.790742][T11010] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.809401][T11010] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.820340][T11010] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.830446][T11010] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.982312][T11162] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 382.994577][T11162] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 383.026533][T11162] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 383.050018][T11162] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 383.063386][ T9172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.094745][ T9172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.145829][ T9172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.153939][ T9172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.373471][T11162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.405665][T11162] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.428763][ T9169] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.435956][ T9169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.475097][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.482307][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.571084][T11328] __nla_validate_parse: 2 callbacks suppressed [ 383.571101][T11328] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1442'. [ 383.730636][T11338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1445'. [ 383.750094][T11338] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1445'. [ 383.832999][T11335] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1444'. [ 383.949617][T11162] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.033005][T11162] veth0_vlan: entered promiscuous mode [ 384.051176][T11349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1448'. [ 384.064029][T11162] veth1_vlan: entered promiscuous mode [ 384.070090][T11349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1448'. [ 384.119133][T11162] veth0_macvtap: entered promiscuous mode [ 384.138543][T11162] veth1_macvtap: entered promiscuous mode [ 384.166755][ T5891] Bluetooth: hci0: command tx timeout [ 384.210965][T11358] delete_channel: no stack [ 384.288447][ T9169] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.330999][T11162] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.354797][T11162] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.371982][T11162] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.380866][T11162] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.389956][T11162] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.399542][T11162] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.475793][ T3526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.496142][ T3526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.571290][ T9169] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.711334][ T9169] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.754443][ T3526] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.770156][T11371] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1455'. [ 384.777142][ T3526] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.945986][ T9169] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.965093][T11379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1456'. [ 385.022408][T11379] macsec0: entered promiscuous mode [ 385.027883][T11379] team0: entered promiscuous mode [ 385.032936][T11379] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:579 [ 385.042258][T11379] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 11379, name: syz.1.1456 [ 385.051421][T11379] preempt_count: 201, expected: 0 [ 385.056490][T11379] RCU nest depth: 0, expected: 0 [ 385.061447][T11379] 3 locks held by syz.1.1456/11379: [ 385.066698][T11379] #0: ffffffff8fa219b8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 385.076313][T11379] #1: ffffffff8f51c5c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 385.085428][T11379] #2: ffff888028ade368 (&macsec_netdev_addr_lock_key#2/2){+...}-{3:3}, at: dev_uc_add+0x67/0x120 [ 385.096178][T11379] Preemption disabled at: [ 385.096190][T11379] [] dev_uc_add+0x56/0x120 [ 385.106555][T11379] CPU: 0 UID: 0 PID: 11379 Comm: syz.1.1456 Not tainted 6.16.0-rc4-syzkaller-00109-gb9fd9888a565 #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 385.106576][T11379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 385.106587][T11379] Call Trace: [ 385.106595][T11379] [ 385.106602][T11379] dump_stack_lvl+0x189/0x250 [ 385.106630][T11379] ? __pfx_dump_stack_lvl+0x10/0x10 [ 385.106648][T11379] ? __pfx__printk+0x10/0x10 [ 385.106673][T11379] ? print_lock_name+0xde/0x100 [ 385.106693][T11379] ? dev_uc_add+0x56/0x120 [ 385.106720][T11379] __might_resched+0x495/0x610 [ 385.106742][T11379] ? dev_uc_add+0x56/0x120 [ 385.106760][T11379] ? __pfx___might_resched+0x10/0x10 [ 385.106781][T11379] ? is_printk_cpu_sync_owner+0x32/0x40 [ 385.106818][T11379] __mutex_lock+0x106/0xe80 [ 385.106838][T11379] ? xfd_validate_state+0x6d/0x150 [ 385.106864][T11379] ? team_change_rx_flags+0x38/0x220 [ 385.106885][T11379] ? __pfx___mutex_lock+0x10/0x10 [ 385.106900][T11379] ? netdev_info+0x10a/0x160 [ 385.106926][T11379] ? __sock_sendmsg+0x219/0x270 [ 385.106945][T11379] ? __pfx_netdev_info+0x10/0x10 [ 385.106979][T11379] team_change_rx_flags+0x38/0x220 [ 385.107002][T11379] ? __pfx_team_change_rx_flags+0x10/0x10 [ 385.107021][T11379] __dev_set_promiscuity+0x534/0x740 [ 385.107045][T11379] ? __pfx_netdev_info+0x10/0x10 [ 385.107075][T11379] netif_set_promiscuity+0x50/0xe0 [ 385.107097][T11379] dev_set_promiscuity+0x126/0x260 [ 385.107119][T11379] ? __pfx_macsec_dev_change_rx_flags+0x10/0x10 [ 385.107136][T11379] __dev_set_promiscuity+0x534/0x740 [ 385.107169][T11379] ? __hw_addr_add_ex+0x3c5/0x770 [ 385.107195][T11379] __dev_set_rx_mode+0x17c/0x260 [ 385.107218][T11379] dev_uc_add+0xc8/0x120 [ 385.107241][T11379] macsec_dev_open+0xd9/0x530 [ 385.107261][T11379] ? ib_device_get_by_netdev+0x46b/0x4d0 [ 385.107279][T11379] ? __pfx_macsec_dev_open+0x10/0x10 [ 385.107300][T11379] ? ib_device_get_by_netdev+0x84/0x4d0 [ 385.107317][T11379] ? hsr_netdev_notify+0x29e/0xcf0 [ 385.107338][T11379] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 385.107354][T11379] ? udp_tunnel_nic_netdevice_event+0x1b6/0x1500 [ 385.107381][T11379] ? ip6_route_dev_notify+0x9a/0x5b0 [ 385.107403][T11379] ? notifier_call_chain+0x3bf/0x3e0 [ 385.107434][T11379] __dev_open+0x470/0x880 [ 385.107461][T11379] ? __pfx___dev_open+0x10/0x10 [ 385.107491][T11379] __dev_change_flags+0x1ea/0x6d0 [ 385.107516][T11379] ? validate_linkmsg+0x765/0x950 [ 385.107545][T11379] ? __pfx___dev_change_flags+0x10/0x10 [ 385.107576][T11379] rtnl_newlink_create+0x555/0xb00 [ 385.107606][T11379] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 385.107625][T11379] ? rtnl_newlink+0x8db/0x1c70 [ 385.107646][T11379] ? __pfx___mutex_lock+0x10/0x10 [ 385.107673][T11379] ? ns_capable+0x8a/0xf0 [ 385.107697][T11379] rtnl_newlink+0x16d6/0x1c70 [ 385.107719][T11379] ? netlink_sendmsg+0x805/0xb30 [ 385.107754][T11379] ? __pfx_rtnl_newlink+0x10/0x10 [ 385.107798][T11379] ? kasan_quarantine_put+0xdd/0x220 [ 385.107818][T11379] ? lockdep_hardirqs_on+0x9c/0x150 [ 385.107852][T11379] ? nlmon_xmit+0xb0/0x100 [ 385.107870][T11379] ? kmem_cache_free+0x18f/0x400 [ 385.107901][T11379] ? __local_bh_enable_ip+0x12d/0x1c0 [ 385.107923][T11379] ? lockdep_hardirqs_on+0x9c/0x150 [ 385.107952][T11379] ? __local_bh_enable_ip+0x12d/0x1c0 [ 385.107972][T11379] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 385.107997][T11379] ? __dev_queue_xmit+0x27e/0x3a70 [ 385.108036][T11379] ? __lock_acquire+0xab9/0xd20 [ 385.108079][T11379] ? __pfx_rtnl_newlink+0x10/0x10 [ 385.108100][T11379] rtnetlink_rcv_msg+0x7cc/0xb70 [ 385.108123][T11379] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 385.108152][T11379] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 385.108168][T11379] ? ref_tracker_free+0x63a/0x7d0 [ 385.108184][T11379] ? __copy_skb_header+0xa7/0x550 [ 385.108207][T11379] ? __pfx_ref_tracker_free+0x10/0x10 [ 385.108225][T11379] ? __skb_clone+0x63/0x7a0 [ 385.108257][T11379] netlink_rcv_skb+0x205/0x470 [ 385.108281][T11379] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 385.108300][T11379] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 385.108332][T11379] ? netlink_deliver_tap+0x2e/0x1b0 [ 385.108353][T11379] ? netlink_deliver_tap+0x2e/0x1b0 [ 385.108380][T11379] netlink_unicast+0x758/0x8d0 [ 385.108411][T11379] netlink_sendmsg+0x805/0xb30 [ 385.108444][T11379] ? __pfx_netlink_sendmsg+0x10/0x10 [ 385.108470][T11379] ? aa_sock_msg_perm+0x94/0x160 [ 385.108499][T11379] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 385.108516][T11379] ? __pfx_netlink_sendmsg+0x10/0x10 [ 385.108539][T11379] __sock_sendmsg+0x219/0x270 [ 385.108560][T11379] ____sys_sendmsg+0x505/0x830 [ 385.108592][T11379] ? __pfx_____sys_sendmsg+0x10/0x10 [ 385.108625][T11379] ? import_iovec+0x74/0xa0 [ 385.108652][T11379] ___sys_sendmsg+0x21f/0x2a0 [ 385.108677][T11379] ? __pfx____sys_sendmsg+0x10/0x10 [ 385.108738][T11379] ? __fget_files+0x2a/0x420 [ 385.108763][T11379] ? __fget_files+0x3a0/0x420 [ 385.108798][T11379] __x64_sys_sendmsg+0x19b/0x260 [ 385.108823][T11379] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 385.108856][T11379] ? rcu_is_watching+0x15/0xb0 [ 385.108882][T11379] ? do_syscall_64+0xbe/0x3b0 [ 385.108906][T11379] do_syscall_64+0xfa/0x3b0 [ 385.108922][T11379] ? lockdep_hardirqs_on+0x9c/0x150 [ 385.108948][T11379] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.108964][T11379] ? clear_bhb_loop+0x60/0xb0 [ 385.108986][T11379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.109005][T11379] RIP: 0033:0x7f291fd8e929 [ 385.109022][T11379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.109037][T11379] RSP: 002b:00007f2920bc1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 385.109054][T11379] RAX: ffffffffffffffda RBX: 00007f291ffb6080 RCX: 00007f291fd8e929 [ 385.109067][T11379] RDX: 0000000000000800 RSI: 0000200000000280 RDI: 0000000000000005 [ 385.109079][T11379] RBP: 00007f291fe10b39 R08: 0000000000000000 R09: 0000000000000000 [ 385.109090][T11379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 385.109094][ T5899] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 385.109100][T11379] R13: 0000000000000000 R14: 00007f291ffb6080 R15: 00007ffd61483428 [ 385.109129][T11379] [ 385.109157][T11379] [ 385.121982][ T5899] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 385.131240][T11379] ============================= [ 385.131250][T11379] [ BUG: Invalid wait context ] [ 385.131260][T11379] 6.16.0-rc4-syzkaller-00109-gb9fd9888a565 #0 Tainted: G W [ 385.131272][T11379] ----------------------------- [ 385.131279][T11379] syz.1.1456/11379 is trying to lock: [ 385.131288][T11379] ffff88807a700e00 (team->team_lock_key#4){+.+.}-{4:4}, at: team_change_rx_flags+0x38/0x220 [ 385.131339][T11379] other info that might help us debug this: [ 385.131346][T11379] context-{5:5} [ 385.131354][T11379] 3 locks held by syz.1.1456/11379: [ 385.131364][T11379] #0: ffffffff8fa219b8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 385.131424][T11379] #1: ffffffff8f51c5c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 385.131468][T11379] #2: ffff888028ade368 [ 385.135702][ T5899] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 385.137681][T11379] (&macsec_netdev_addr_lock_key#2/2){+...}-{3:3}, at: dev_uc_add+0x67/0x120 [ 385.143073][ T5899] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 385.147552][T11379] stack backtrace: [ 385.147567][T11379] CPU: 0 UID: 0 PID: 11379 Comm: syz.1.1456 Tainted: G W 6.16.0-rc4-syzkaller-00109-gb9fd9888a565 #0 PREEMPT(full) [ 385.147593][T11379] Tainted: [W]=WARN [ 385.147599][T11379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 385.147610][T11379] Call Trace: [ 385.147618][T11379] [ 385.147626][T11379] dump_stack_lvl+0x189/0x250 [ 385.147656][T11379] ? __pfx_dump_stack_lvl+0x10/0x10 [ 385.147681][T11379] ? __pfx__printk+0x10/0x10 [ 385.147711][T11379] ? print_lock_name+0xde/0x100 [ 385.147740][T11379] __lock_acquire+0xbcb/0xd20 [ 385.147765][T11379] ? team_change_rx_flags+0x38/0x220 [ 385.147787][T11379] lock_acquire+0x120/0x360 [ 385.147804][T11379] ? team_change_rx_flags+0x38/0x220 [ 385.147834][T11379] __mutex_lock+0x182/0xe80 [ 385.147853][T11379] ? team_change_rx_flags+0x38/0x220 [ 385.147874][T11379] ? xfd_validate_state+0x6d/0x150 [ 385.147897][T11379] ? team_change_rx_flags+0x38/0x220 [ 385.147920][T11379] ? __pfx___mutex_lock+0x10/0x10 [ 385.147938][T11379] ? netdev_info+0x10a/0x160 [ 385.147967][T11379] ? __sock_sendmsg+0x219/0x270 [ 385.147987][T11379] ? __pfx_netdev_info+0x10/0x10 [ 385.148021][T11379] team_change_rx_flags+0x38/0x220 [ 385.148045][T11379] ? __pfx_team_change_rx_flags+0x10/0x10 [ 385.148067][T11379] __dev_set_promiscuity+0x534/0x740 [ 385.148092][T11379] ? __pfx_netdev_info+0x10/0x10 [ 385.148123][T11379] netif_set_promiscuity+0x50/0xe0 [ 385.148156][T11379] dev_set_promiscuity+0x126/0x260 [ 385.148181][T11379] ? __pfx_macsec_dev_change_rx_flags+0x10/0x10 [ 385.148205][T11379] __dev_set_promiscuity+0x534/0x740 [ 385.148231][T11379] ? __hw_addr_add_ex+0x3c5/0x770 [ 385.148258][T11379] __dev_set_rx_mode+0x17c/0x260 [ 385.148283][T11379] dev_uc_add+0xc8/0x120 [ 385.148310][T11379] macsec_dev_open+0xd9/0x530 [ 385.148331][T11379] ? ib_device_get_by_netdev+0x46b/0x4d0 [ 385.148351][T11379] ? __pfx_macsec_dev_open+0x10/0x10 [ 385.148371][T11379] ? ib_device_get_by_netdev+0x84/0x4d0 [ 385.148390][T11379] ? hsr_netdev_notify+0x29e/0xcf0 [ 385.148433][T11379] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 385.148453][T11379] ? udp_tunnel_nic_netdevice_event+0x1b6/0x1500 [ 385.148481][T11379] ? ip6_route_dev_notify+0x9a/0x5b0 [ 385.148505][T11379] ? notifier_call_chain+0x3bf/0x3e0 [ 385.148535][T11379] __dev_open+0x470/0x880 [ 385.148557][T11379] ? __pfx___dev_open+0x10/0x10 [ 385.148583][T11379] __dev_change_flags+0x1ea/0x6d0 [ 385.148608][T11379] ? validate_linkmsg+0x765/0x950 [ 385.148638][T11379] ? __pfx___dev_change_flags+0x10/0x10 [ 385.148668][T11379] rtnl_newlink_create+0x555/0xb00 [ 385.148700][T11379] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 385.148724][T11379] ? rtnl_newlink+0x8db/0x1c70 [ 385.148745][T11379] ? __pfx___mutex_lock+0x10/0x10 [ 385.148769][T11379] ? ns_capable+0x8a/0xf0 [ 385.148792][T11379] rtnl_newlink+0x16d6/0x1c70 [ 385.148815][T11379] ? netlink_sendmsg+0x805/0xb30 [ 385.148845][T11379] ? __pfx_rtnl_newlink+0x10/0x10 [ 385.148878][T11379] ? kasan_quarantine_put+0xdd/0x220 [ 385.148902][T11379] ? lockdep_hardirqs_on+0x9c/0x150 [ 385.148935][T11379] ? nlmon_xmit+0xb0/0x100 [ 385.148954][T11379] ? kmem_cache_free+0x18f/0x400 [ 385.148983][T11379] ? __local_bh_enable_ip+0x12d/0x1c0 [ 385.149005][T11379] ? lockdep_hardirqs_on+0x9c/0x150 [ 385.149035][T11379] ? __local_bh_enable_ip+0x12d/0x1c0 [ 385.149057][T11379] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 385.149083][T11379] ? __dev_queue_xmit+0x27e/0x3a70 [ 385.149118][T11379] ? __lock_acquire+0xab9/0xd20 [ 385.149163][T11379] ? __pfx_rtnl_newlink+0x10/0x10 [ 385.149185][T11379] rtnetlink_rcv_msg+0x7cc/0xb70 [ 385.149208][T11379] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 385.149227][T11379] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 385.149248][T11379] ? ref_tracker_free+0x63a/0x7d0 [ 385.149265][T11379] ? __copy_skb_header+0xa7/0x550 [ 385.149294][T11379] ? __pfx_ref_tracker_free+0x10/0x10 [ 385.149311][T11379] ? __skb_clone+0x63/0x7a0 [ 385.149341][T11379] netlink_rcv_skb+0x205/0x470 [ 385.149365][T11379] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 385.149386][T11379] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 385.149416][T11379] ? netlink_deliver_tap+0x2e/0x1b0 [ 385.149439][T11379] ? netlink_deliver_tap+0x2e/0x1b0 [ 385.149466][T11379] netlink_unicast+0x758/0x8d0 [ 385.149492][T11379] netlink_sendmsg+0x805/0xb30 [ 385.149521][T11379] ? __pfx_netlink_sendmsg+0x10/0x10 [ 385.149547][T11379] ? aa_sock_msg_perm+0x94/0x160 [ 385.149578][T11379] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 385.149595][T11379] ? __pfx_netlink_sendmsg+0x10/0x10 [ 385.149619][T11379] __sock_sendmsg+0x219/0x270 [ 385.149640][T11379] ____sys_sendmsg+0x505/0x830 [ 385.149667][T11379] ? __pfx_____sys_sendmsg+0x10/0x10 [ 385.149698][T11379] ? import_iovec+0x74/0xa0 [ 385.149723][T11379] ___sys_sendmsg+0x21f/0x2a0 [ 385.149750][T11379] ? __pfx____sys_sendmsg+0x10/0x10 [ 385.149794][T11379] ? __fget_files+0x2a/0x420 [ 385.149821][T11379] ? __fget_files+0x3a0/0x420 [ 385.149853][T11379] __x64_sys_sendmsg+0x19b/0x260 [ 385.149879][T11379] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 385.149966][T11379] ? rcu_is_watching+0x15/0xb0 [ 385.149997][T11379] ? do_syscall_64+0xbe/0x3b0 [ 385.150017][T11379] do_syscall_64+0xfa/0x3b0 [ 385.150036][T11379] ? lockdep_hardirqs_on+0x9c/0x150 [ 385.150065][T11379] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.150085][T11379] ? clear_bhb_loop+0x60/0xb0 [ 385.150172][T11379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.150196][T11379] RIP: 0033:0x7f291fd8e929 [ 385.150216][T11379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.150233][T11379] RSP: 002b:00007f2920bc1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 385.150252][T11379] RAX: ffffffffffffffda RBX: 00007f291ffb6080 RCX: 00007f291fd8e929 [ 385.150267][T11379] RDX: 0000000000000800 RSI: 0000200000000280 RDI: 0000000000000005 [ 385.150281][T11379] RBP: 00007f291fe10b39 R08: 0000000000000000 R09: 0000000000000000 [ 385.150294][T11379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 385.150305][T11379] R13: 0000000000000000 R14: 00007f291ffb6080 R15: 00007ffd61483428 [ 385.150328][T11379] [ 385.150555][T11379] team_slave_1: entered promiscuous mode [ 385.152781][ T5899] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 386.247690][ T5172] Bluetooth: hci0: command tx timeout [ 386.432045][T11380] chnl_net:caif_netlink_parms(): no params data found [ 386.677240][T11380] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.684349][T11380] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.717025][T11380] bridge_slave_0: entered allmulticast mode [ 386.723910][T11380] bridge_slave_0: entered promiscuous mode [ 386.803053][T11380] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.836230][T11380] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.843450][T11380] bridge_slave_1: entered allmulticast mode [ 386.863648][T11380] bridge_slave_1: entered promiscuous mode [ 386.871251][ T9169] bridge_slave_1: left allmulticast mode [ 386.879180][ T9169] bridge_slave_1: left promiscuous mode [ 386.884874][ T9169] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.894217][ T9169] bridge_slave_0: left allmulticast mode [ 386.909448][ T9169] bridge_slave_0: left promiscuous mode [ 386.915202][ T9169] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.032410][ T9169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.042427][ T9169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.052109][ T9169] bond0 (unregistering): Released all slaves [ 387.123750][T11380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.148407][T11380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.172142][T11380] team0: Port device team_slave_0 added [ 387.181858][T11380] team0: Port device team_slave_1 added [ 387.208330][T11380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 387.215288][T11380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.242793][T11380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 387.255264][T11380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 387.262313][T11380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.290089][T11380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.329879][T11380] hsr_slave_0: entered promiscuous mode [ 387.336908][T11380] hsr_slave_1: entered promiscuous mode [ 387.342834][T11380] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 387.350615][T11380] Cannot create hsr debugfs directory [ 387.359649][ T9169] hsr_slave_0: left promiscuous mode [ 387.365390][ T9169] hsr_slave_1: left promiscuous mode [ 387.371259][ T9169] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 387.378706][ T9169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 387.386802][ T9169] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 387.394208][ T9169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.404145][ T9169] veth1_macvtap: left promiscuous mode [ 387.409703][ T9169] veth0_macvtap: left promiscuous mode [ 387.415689][ T9169] veth1_vlan: left promiscuous mode [ 387.421122][ T9169] veth0_vlan: left promiscuous mode [ 387.574769][ T9169] team0 (unregistering): Port device team_slave_1 removed [ 387.598723][ T9169] team0 (unregistering): Port device team_slave_0 removed [ 387.985070][ T9169] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.015675][T11380] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 388.025506][T11380] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 388.040631][T11380] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 388.051888][ T9169] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.063666][T11380] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 388.101335][ T9169] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.125441][T11380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.143535][T11380] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.154385][ T9169] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.169320][ T9171] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.176429][ T9171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.188796][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.195867][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.241866][ T9169] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.288468][ T9169] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.327728][ T5172] Bluetooth: hci2: command tx timeout [ 388.337101][ T9169] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.360238][T11380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.385571][ T9169] netdevsim netdevsim1 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.409087][T11380] veth0_vlan: entered promiscuous mode [ 388.418239][T11380] veth1_vlan: entered promiscuous mode [ 388.436588][T11380] veth0_macvtap: entered promiscuous mode [ 388.444551][T11380] veth1_macvtap: entered promiscuous mode [ 388.468350][T11380] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.487783][T11380] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.499530][ T9169] bridge_slave_1: left allmulticast mode [ 388.505197][ T9169] bridge_slave_1: left promiscuous mode [ 388.511873][ T9169] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.520262][ T9169] bridge_slave_0: left allmulticast mode [ 388.525911][ T9169] bridge_slave_0: left promiscuous mode [ 388.532250][ T9169] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.541499][ T9169] bridge0: port 3(batadv0) entered disabled state [ 388.549480][ T9169] bridge_slave_0: left allmulticast mode [ 388.555121][ T9169] bridge_slave_0: left promiscuous mode [ 388.561328][ T9169] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.673660][ T9169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.684475][ T9169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.695744][ T9169] bond0 (unregistering): Released all slaves [ 388.948650][ T9169] bond0 (unregistering): Released all slaves [ 389.018738][ T9169] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 389.028658][ T9169] bond1 (unregistering): Released all slaves [ 389.039681][T11380] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.049267][T11380] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.058140][T11380] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.066931][T11380] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.100875][T11380] ieee80211 phy37: Selected rate control algorithm 'minstrel_ht' [ 389.114648][ T9169] tipc: Left network mode [ 389.141109][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.142717][T11380] ieee80211 phy38: Selected rate control algorithm 'minstrel_ht' [ 389.149482][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.180455][ T9172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.189073][ T9172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.424111][ T9169] hsr_slave_0: left promiscuous mode [ 389.429949][ T9169] hsr_slave_1: left promiscuous mode [ 389.435864][ T9169] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.443311][ T9169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.451638][ T9169] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 389.459078][ T9169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.470689][ T9169] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.478133][ T9169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.485697][ T9169] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 389.493148][ T9169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.504118][ T9169] veth1_macvtap: left promiscuous mode [ 389.509658][ T9169] veth0_macvtap: left promiscuous mode [ 389.515199][ T9169] veth1_vlan: left promiscuous mode [ 389.520786][ T9169] veth0_vlan: left promiscuous mode [ 389.528127][ T9169] team0: left promiscuous mode [ 389.533227][ T9169] team_slave_1: left promiscuous mode [ 389.538865][ T9169] team_slave_0: left promiscuous mode [ 389.544398][ T9169] vlan0: left allmulticast mode [ 389.549536][ T9169] veth0_vlan: left allmulticast mode [ 389.554837][ T9169] vlan0: left promiscuous mode [ 389.559926][ T9169] veth1_vlan: left promiscuous mode [ 389.565177][ T9169] veth0_vlan: left promiscuous mode [ 389.729920][ T9169] team0 (unregistering): Port device team_slave_1 removed [ 389.747527][ T9169] team0 (unregistering): Port device team_slave_0 removed [ 389.938359][ T9169] team0 (unregistering): Port device team_slave_1 removed [ 389.967740][ T9169] team0 (unregistering): Port device team_slave_0 removed [ 390.473768][ T9169] IPVS: stop unused estimator thread 0... [ 390.731330][ T9173] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.206155][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 392.170410][ T9173] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.230105][ T9173] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.290753][ T9173] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.343365][ T9173] bridge_slave_1: left allmulticast mode [ 392.349202][ T9173] bridge_slave_1: left promiscuous mode [ 392.354907][ T9173] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.363143][ T9173] bridge_slave_0: left allmulticast mode [ 392.368928][ T9173] bridge_slave_0: left promiscuous mode [ 392.374601][ T9173] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.460598][ T9173] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 392.470507][ T9173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 392.480603][ T9173] bond0 (unregistering): Released all slaves [ 392.662676][ T9173] hsr_slave_0: left promiscuous mode [ 392.668978][ T9173] hsr_slave_1: left promiscuous mode [ 392.674585][ T9173] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.682189][ T9173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.689791][ T9173] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.698048][ T9173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.707910][ T9173] veth1_macvtap: left promiscuous mode [ 392.713396][ T9173] veth0_macvtap: left promiscuous mode [ 392.719060][ T9173] veth1_vlan: left promiscuous mode [ 392.724310][ T9173] veth0_vlan: left promiscuous mode [ 392.825112][ T9173] team0 (unregistering): Port device team_slave_1 removed [ 392.835951][ T9173] team0 (unregistering): Port device team_slave_0 removed