last executing test programs: 1m11.300209952s ago: executing program 1 (id=684): syz_emit_ethernet(0x79, &(0x7f0000000400)={@broadcast, @random="000400", @void, {@generic={0x805, "8d9c5c61e7ecaf3b2dc875987f647e1226119b45c8dacbd9d9b042895aa0c73baf24549f676d5de05ad5422842efc8750b257ae34d34b1a0d5e56c75d2a8f0caa8efb9265d0df1e97a96dd7f126e26e4ef9b7557139dc66822950b92b9ef8e707a0ee87dcc6b59c3d926fe"}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$caif_stream(0x25, 0x1, 0x0) sendmsg$sock(r1, &(0x7f00000002c0)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="6c0000000001810400000000141a000002000000240001801400018008000100e000000508000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000f6070016"], 0x6c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) read(r2, &(0x7f00000000c0)=""/81, 0xfdef) 56.607087632s ago: executing program 1 (id=684): syz_emit_ethernet(0x79, &(0x7f0000000400)={@broadcast, @random="000400", @void, {@generic={0x805, "8d9c5c61e7ecaf3b2dc875987f647e1226119b45c8dacbd9d9b042895aa0c73baf24549f676d5de05ad5422842efc8750b257ae34d34b1a0d5e56c75d2a8f0caa8efb9265d0df1e97a96dd7f126e26e4ef9b7557139dc66822950b92b9ef8e707a0ee87dcc6b59c3d926fe"}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$caif_stream(0x25, 0x1, 0x0) sendmsg$sock(r1, &(0x7f00000002c0)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="6c0000000001810400000000141a000002000000240001801400018008000100e000000508000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000f6070016"], 0x6c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) read(r2, &(0x7f00000000c0)=""/81, 0xfdef) 41.754071685s ago: executing program 1 (id=684): syz_emit_ethernet(0x79, &(0x7f0000000400)={@broadcast, @random="000400", @void, {@generic={0x805, "8d9c5c61e7ecaf3b2dc875987f647e1226119b45c8dacbd9d9b042895aa0c73baf24549f676d5de05ad5422842efc8750b257ae34d34b1a0d5e56c75d2a8f0caa8efb9265d0df1e97a96dd7f126e26e4ef9b7557139dc66822950b92b9ef8e707a0ee87dcc6b59c3d926fe"}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$caif_stream(0x25, 0x1, 0x0) sendmsg$sock(r1, &(0x7f00000002c0)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="6c0000000001810400000000141a000002000000240001801400018008000100e000000508000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000f6070016"], 0x6c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) read(r2, &(0x7f00000000c0)=""/81, 0xfdef) 29.36256681s ago: executing program 1 (id=684): syz_emit_ethernet(0x79, &(0x7f0000000400)={@broadcast, @random="000400", @void, {@generic={0x805, "8d9c5c61e7ecaf3b2dc875987f647e1226119b45c8dacbd9d9b042895aa0c73baf24549f676d5de05ad5422842efc8750b257ae34d34b1a0d5e56c75d2a8f0caa8efb9265d0df1e97a96dd7f126e26e4ef9b7557139dc66822950b92b9ef8e707a0ee87dcc6b59c3d926fe"}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$caif_stream(0x25, 0x1, 0x0) sendmsg$sock(r1, &(0x7f00000002c0)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="6c0000000001810400000000141a000002000000240001801400018008000100e000000508000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000f6070016"], 0x6c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) read(r2, &(0x7f00000000c0)=""/81, 0xfdef) 18.98081629s ago: executing program 1 (id=684): syz_emit_ethernet(0x79, &(0x7f0000000400)={@broadcast, @random="000400", @void, {@generic={0x805, "8d9c5c61e7ecaf3b2dc875987f647e1226119b45c8dacbd9d9b042895aa0c73baf24549f676d5de05ad5422842efc8750b257ae34d34b1a0d5e56c75d2a8f0caa8efb9265d0df1e97a96dd7f126e26e4ef9b7557139dc66822950b92b9ef8e707a0ee87dcc6b59c3d926fe"}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$caif_stream(0x25, 0x1, 0x0) sendmsg$sock(r1, &(0x7f00000002c0)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="6c0000000001810400000000141a000002000000240001801400018008000100e000000508000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000f6070016"], 0x6c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) read(r2, &(0x7f00000000c0)=""/81, 0xfdef) 10.943303328s ago: executing program 4 (id=1522): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, 0x4) socket(0x1d, 0x5, 0x7) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) 10.743417191s ago: executing program 4 (id=1525): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x6, 0x74a4be44, 0x10000, 0x20009, 0xffffffffffffffff, 0xfffff057, '\x00', r3, r0, 0x4, 0x2, 0x4, 0xc, @void, @value, @void, @value}, 0x50) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0xf3a, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0xffffff98) socket$igmp(0x2, 0x3, 0x2) socket$inet(0x2, 0x3, 0x2) r5 = openat$cgroup_ro(r0, &(0x7f0000000480)='cgroup.controllers\x00', 0x26e1, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0x8000, 0x1800, 0x83, 0x2}, 0x20) close(r5) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB="f4ffcd"], 0x9) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000380)={{0x2, 0x2000, @local}, {0x306, @broadcast}, 0x24, {0x2, 0x4e24, @multicast2}, 'bridge0\x00'}) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x29, 0x5, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000008900020073797a30000000000800044000000000090011007379969637300000000008000340000000011400000011000100"/100], 0x64}}, 0x0) 9.245932526s ago: executing program 1 (id=684): syz_emit_ethernet(0x79, &(0x7f0000000400)={@broadcast, @random="000400", @void, {@generic={0x805, "8d9c5c61e7ecaf3b2dc875987f647e1226119b45c8dacbd9d9b042895aa0c73baf24549f676d5de05ad5422842efc8750b257ae34d34b1a0d5e56c75d2a8f0caa8efb9265d0df1e97a96dd7f126e26e4ef9b7557139dc66822950b92b9ef8e707a0ee87dcc6b59c3d926fe"}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$caif_stream(0x25, 0x1, 0x0) sendmsg$sock(r1, &(0x7f00000002c0)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="6c0000000001810400000000141a000002000000240001801400018008000100e000000508000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000f6070016"], 0x6c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) read(r2, &(0x7f00000000c0)=""/81, 0xfdef) 7.752132005s ago: executing program 2 (id=1554): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000080)=@sack_info={r3, 0x5, 0x1}, 0xc) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r3, 0x5, 0x30000000}, &(0x7f0000000040)=0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8003, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r6, 0x0, &(0x7f0000001700)=""/53}, 0x20) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xec}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000002100)=@dellink={0x34, 0x11, 0x90d, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20c01}, [@IFLA_IFNAME={0x14, 0x3, 'batadv_slave_0\x00'}]}, 0x34}}, 0x0) 7.584601172s ago: executing program 4 (id=1555): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c00038004"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f00000014c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)}, 0xfffffff8}], 0x1, 0x832b, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r1, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r3, &(0x7f0000000e80)="0d0ad7c36d6617110e434332d6ac582208222cfb7c37ce1148f448455bc37f5f70c92774dcb201629979039d7c8943b207e5bdf9ab8eed9ace110469c51f4f211dd9fad815eb5b273ac04e1edc679bcdf0a0d24482de5454be9003cb80714a95e136bb704ee58e707d1e69b3c3a1c2c37f9c0402e14abdeb32086a49aff25e5c0f0131d59b4783316b9fa2c71c51ce76942d5f519145c9e3bf0d4182b4a62970b2ce81d35a7afc8384b387b8e21f2051d90d92323a710cabe5275d335b64453e759251a140de480541d8dd7662a14296a59eba99b95bfdf5b22992c323865b471d13ad79867e2692fd4eece299a81e2b33336b6801f51c2ae8d73e4df90c9bd70cd535b72cbdf67754acdc44b3780450308d9c5527c3314eb7b2cc38b61e96403a30a8ba0c8a357aa04d3c62bc51bcf55cf214f44a909b29c30c18c3a43c86472612086664a80f2aa8490e58352732acb96eb46deab42895d1957a6029ad86e7a5ced6bde89c158aaee721954beeebe5973059007f7dd5459029af6d3f1d73d35f07d19b7cedfc80d1d7ef37f8b113f564afd0f093202929fef43e788619ca522c7f679dd2f27949d879b4dab46581a0e054b4ed1db37e43f528748b56ec5a54b7af198d4ae551046f7814fe3a5cbc1cc7cb6655fc198939b049f3c02443148c588e34d6ebef81096b4e48f468016d2bde0828664c0874d71e2d88b3bc04079d4a504255a83c3f07a4f1c3e5a4c66f55f36e51e344392487c8299d8d1bfb568780c0d57df48990cb5d6b35c3f7445f80312186d8598faf61072d4eefc961fb5a7e72b971c8f94a8346effd27362cee8d72a98b55e317de280d2d63ee83ca7140b7913122d402c536d914c8510c81d08f0ad1c952f5b7ad5e7ef72d7c58cb4d5bafbea535b381df6ebe94c62cf782cf7ab81c017c296a88ca91d641b45748d230cf5e87e5dbee4764ea4d131ae022e6bbf3ffc3ea7b264737d9db44354bfffa63d79bc403d3ac23fb615edc382d18b0daf1bbb2fbd708d1830ddac1c3f098b8cb1ef9a0019d804bf5d953110f12f3b9a8b9b7e0c61cb5d34116add1fc9a92721ffa5fdc83e1488cf88aa6e56ad2dd55e0aadd827cc7b4e7242f01241f49e905e5e7451092c28c3f6560a6a0002e5d91fc253a5a8fd8f27e42f4f02f5849528b7d93df9b0c568022acaff410e797e88d2f8eeadbba66e423335b843df734d203fa62a861b712da8f33d5ea721767871aa2cd53e659e505507de9a54d7e6fa3c20bbfb28cd6dd2b314dabbb59e9ce15c0a94ec3b3efc54eaaa27bd7576a687dcaf58dc182662539943014a02e76dc89f48c9f83cc7199038418f965ad3dc866098b89cabcac8691b0f51ffb71902337e49293309c4480a8f1b32411cc1b55a0ec0fe2c2572fe9d488a25bfc12ba74048e1d7beee93321c7aa49ea17cb9728dc46e5272154b3b995feacbacb8885621b335274af4df9365f8c8121ff323b572d320c8fc46acd6218b9579d43005e7b0506ccb14d9a0dac4cc6efaf5366c44342eaea8b5a11457f5afbea913ce4975ab67e6a85bc46e714ca5741da38a7cceb9e85d77fd03f83f7a5ecc7241e69e2bda327f769b48ba5f13662585c72778d12bd0e9a62a3d0dbe376d1aee81e6845c2cf23f42c458ae5668c8d387bf9ab224bc9703f1c08347be810d2f19278fe8d97560b3c9f1816667d0461a25e778eb1404dcaac1ed0a6a0745f3a5d2dc1b6babf98f5135d531cb26334ef2fec4c78c95b7193935139664fc65f17b047eb3dc39e251ba52ce33f8099719f1a789db1690347355e7b02d4c522692b9597fd31abb90f973ae4eb0bd0d900cdd887ff01d4845d7f0aee39b220a65a5aeee0fd386054070723c841c042d5339cc6325f07f0f733d124c6524f388ef7419f42c06278b8fceaa3a16b202dfb539b129762397e29cdd679ca6240272fa0c3e2e8c0a27aaa407f30b4024d0638dfca1bc9483db3ccc2880f", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38) r4 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f00000004c0)=[{0x28, 0x0, 0x5, 0xfffff034}, {0x80000006, 0x0, 0x12, 0xf9}]}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000280)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000001500)={{r3}, r7, 0x8, @inherit={0x60, &(0x7f0000000540)=ANY=[@ANYBLOB="0000a331fdaf5b00000000000003f7ffffff0000000200000000000000010000000000000008000000000000007f0000000000000004000000000000000100000001000000090000000000006aeed2fbf5793fa243dfdbd6b9000600000000000000a9000000000000000800000000000000e2bc89e1e40755e7816ec065cab9f929ab66ef8ff4fc"]}, @subvolid=0x31}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r3, 0x8000000000000000, 0x77, 0x7}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00000008060102000000000000000000000000050001"], 0x1c}}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000008c0)=@newtaction={0x70, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x32, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_FD={0x8, 0x5, r10}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000002500)=ANY=[@ANYBLOB="61109c00000000006113740000000000bfa00000000000000700000008ffffffd503010017740040950000000000000069163a0000000000bf67000000000000350607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004d83dde4c375000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369226066812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20ceddf4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a1f37302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a1a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4c6ea9604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a09d8be0fc5beecf153236c19740be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c7476", @ANYRESDEC=r0, @ANYRES32=r6, @ANYBLOB="0d5f5f7470f6dc48754a0af0e987313b3cd2839810b6027f832cf5d1ca8d11e499775d5a8993eb3f5bad1dd6d3721d3a7275647c6036e22c5b0e23a879d9e105a6ae49f7880eb5c4152005fa31ebf804b469f082ba945c1b5b734014b266275f7e6c79c90dba933d7a9cb3ff9c0e6a44d22dca976fba7abb99d5f9cea4b92d0ffbb46623309e22ab132b", @ANYBLOB="945282b690dc3b4770ba5c31e654a8b7e723fb3859c93b5ae0685082dae352dfda649f8d29427a5cf992cde39f5f97131425f033a479aa5bdb8c83cbb8d87d3c32b9767c12289f01e9c9b31c00d4ee1f33909db85a937d52d98b3277da8b1aa6", @ANYRES16=r8, @ANYRESOCT=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 7.573591136s ago: executing program 0 (id=1556): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x2, 0x4, 0x3a8, 0xffffffff, 0x1c0, 0xd0, 0x0, 0xfeffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [0x0, 0x0, 0x0, 0xff], [], 'macsec0\x00', 'bond_slave_0\x00', {0xff}, {0xff}, 0x6, 0x0, 0x1, 0x48}, 0x2f2, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x7, 0x50cc}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1, 'syz0\x00', {0x42b5}}}}, {{@ipv6={@private2, @mcast1, [0x0, 0xffffffff, 0xffffffff, 0xffffff00], [0x0, 0xffffffff, 0xffffff00], 'macvlan1\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0x6c, 0x6, 0x6}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28}, {0x0, 0x80, 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x1, 0x0, 0x2, {0x0, 0x0, 0x0, r2, 0x18f40, 0x2200a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e24}]}}}]}, 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006b113e00000000008510000002000000850000000500000095003300000000009500250500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xb8, &(0x7f000000cf3d)=""/184, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 7.399398066s ago: executing program 0 (id=1557): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = syz_open_procfs$namespace(0x0, &(0x7f00000025c0)='ns/cgroup\x00') preadv(r3, 0x0, 0x0, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), r1) sendmsg$SMC_PNETID_DEL(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="000200006b0b0d702527921a16d339e05cfe8bff3bbb2f4a961ce4d78f3ae0b1d6db6574bd4286aa0587c7a8f87ed8ad0db0136b91e4f2fde597ff4a92c116d04029a43ed42a1b74caf47a1ca21fa90b6848c1d388271a1376ab4e82cb397c9862928f3f5039906355531db626c06a6b1d3347b1db5625cd8847e3827bdca6c0190803a1b3a8b544cd177478144cd73a9366af424b2ea1ddbbaba40aab9bc44cb86c8232fee6f3", @ANYRES16=r5, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x2000c084}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={0x0, 0x0, 0x18}, 0x18) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r2, @ANYRES16=r0, @ANYBLOB="09002abd7000feffffff0a00000008000300", @ANYRES32=r2, @ANYBLOB="050408000400000004002800"], 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 7.344755123s ago: executing program 2 (id=1558): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000)=0x6, &(0x7f0000000040)=0x1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x80, 0xeaa9ff9117314d92, 0x1, 0x9, {{0x6, 0x4, 0x2, 0x2, 0x18, 0x66, 0x0, 0x9, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, {[@noop, @end, @end]}}}}}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x18, &(0x7f00000000c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @generic={0x81, 0x8, 0x8, 0x2, 0x179}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}], &(0x7f0000000180)='GPL\x00', 0x9, 0x56, &(0x7f00000001c0)=""/86, 0x40f00, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0xc, 0x0, 0x3}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x6, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r5, 0x10, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x24001805) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), r4) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r4, &(0x7f0000000880)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000600)={0x23c, r6, 0x8, 0x70bd25, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x80}, {0x6}, {0x8, 0x15, 0x81}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x8}}, {0x8, 0xb, 0xb}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0x40}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0xd04}, {0x8, 0x15, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x11, 0x8}, {0x8, 0x15, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x80000001}, {0x6, 0x11, 0xd}, {0x8, 0x15, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0x200}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x3}, {0x8, 0x15, 0x8617}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x2}}]}, 0x23c}, 0x1, 0x0, 0x0, 0x8001}, 0x8000) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000008c0)=@abs, 0x6e, &(0x7f0000000940)}, 0x10040) r7 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f00000009c0), &(0x7f0000000a40)=0x60, 0x80800) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000a80)={'team0\x00', 0x0}) r9 = socket(0x1, 0x5, 0x1d) sendmsg$nl_route(r9, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)=@ipv4_getroute={0x1c, 0x1a, 0x2, 0x70bd29, 0x25dfdbfd, {0x2, 0x10, 0x20, 0x6, 0xfe, 0x2, 0xc8, 0x1, 0x1e00}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f0000000bc0)={r9}) getsockopt$inet_pktinfo(r9, 0x0, 0x8, &(0x7f0000000c40)={0x0, @multicast1, @local}, &(0x7f0000000c80)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r10, &(0x7f0000001400)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000013c0)={&(0x7f0000000cc0)={0x700, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [{{0x8, 0x1, r8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r2}, {0x1b0, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x30}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r2}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r2}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}]}}, {{0x8, 0x1, r8}, {0x1a8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r8}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc42}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}]}, 0x700}, 0x1, 0x0, 0x0, 0x40000}, 0x480c0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000001480)={'team0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001540)={r1, 0x58, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000001bc0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001b80)={&(0x7f0000001580)={0x5fc, r5, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8, 0x1, r12}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r11}, {0x13c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r2}, {0x298, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r13}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7534}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x5, 0x7, 0x80, 0x9}, {0xcbf, 0x1b, 0x8, 0x7}, {0x0, 0x3, 0x5, 0x7}, {0xfff7, 0x7, 0x1, 0x200}, {0xffff, 0x2, 0x3, 0x2}, {0xfffd, 0xb2, 0x2, 0x400}, {0x80d, 0x5, 0x7, 0x80000001}, {0x2, 0x6, 0x1, 0x8000}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}]}}, {{0x8, 0x1, r8}, {0x178, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x5, 0x5a, 0x6, 0x3}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}]}}]}, 0x5fc}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000004) r14 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001c40), r10) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000001d00)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x1c, r14, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001d40)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x80000, '\x00', r2, 0xffffffffffffffff, 0x3, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r7, 0x40189429, &(0x7f0000001dc0)={0x1, 0x8dc, 0x7}) setsockopt$IP_VS_SO_SET_ZERO(r10, 0x0, 0x48f, &(0x7f0000001e00)={0x0, @local, 0x4e21, 0x0, 'lc\x00', 0x4, 0x0, 0x7d}, 0x2c) r15 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001e80), r9) sendmsg$IPVS_CMD_FLUSH(r10, &(0x7f0000002080)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002040)={&(0x7f0000001ec0)={0x168, r15, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3, 0x10}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}]}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010101}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x39}}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xde}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x48}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x77}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'virt_wifi0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4000040}, 0x20001) r16 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002100), r4) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r9, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x74, r16, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x82}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x24044804}, 0x4008000) 7.132133621s ago: executing program 2 (id=1559): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x7, 0x4, 0x300, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000000), 0x0}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0xd1383000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f000040b000/0x2000)=nil, 0x2000, 0xa, 0x12, r2, 0xffffe000) r3 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2=0xe0000001}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x1, 0x1000000}}}}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_getaddrlabel={0x30, 0x1a, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x30}}, 0x0) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x7, 0x4, 0x300, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000000), 0x0}, 0x20) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) (async) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0xd1383000) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) (async) mmap(&(0x7f000040b000/0x2000)=nil, 0x2000, 0xa, 0x12, r2, 0xffffe000) (async) socket$packet(0x11, 0x3, 0x300) (async) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2=0xe0000001}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x1, 0x1000000}}}}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_getaddrlabel={0x30, 0x1a, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x30}}, 0x0) (async) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r3, 0x0) (async) 6.955517716s ago: executing program 2 (id=1560): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000600)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x4000) r1 = socket(0xf, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) recvfrom(r3, &(0x7f0000000100)=""/181, 0xb5, 0x10040, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3, 0x1, 0x4, 0x1}}, 0x80) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r4, 0x0, 0x1, &(0x7f0000001780)=""/93, &(0x7f0000001800)=0x5d) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfc], 0x0, [0x8, 0x4], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_newnexthop={0x28, 0x68, 0x400, 0x70bd2a, 0x25dfdbfe, {0xa, 0x0, 0x4, 0x0, 0x21}, [@NHA_OIF={0x8, 0x5, r2}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) 6.917013885s ago: executing program 0 (id=1562): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x4, 0x0, 0x1, 0x1, 0x74, 0x81, 0x8, 0x40, 0x8, 0x9, 0x0, 0x7, 0x9, 0x7}, 0xe) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080211000000040000a118000200e014000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmmsg$inet(r1, &(0x7f0000000680)=[{{&(0x7f0000000300)={0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000340)="81ec", 0x2}], 0x1}}], 0x1, 0x4008010) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0xa, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000a6", @ANYRES16=r5, @ANYBLOB="000429bd7000fddbdf250100000014000680050002000400000005000200ff00000005000500800000000800030001000000"], 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x4008040) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = socket(0x2a, 0x2, 0x0) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@newtfilter={0x478, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x448, 0x2, [@TCA_BASIC_POLICE={0x444, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x62, 0x2, 0x0, 0xc, 0x2, 0x7fff, 0x0, 0xffffff70, 0x19, 0xffffffa9, 0xf6, 0x7, 0x80000001, 0x7, 0x3, 0x9, 0xc, 0x4, 0x6, 0x5d0bef1f, 0x400, 0x5, 0x837, 0xffffffff, 0x9fec, 0x401, 0x2000068, 0x7fff, 0xdd64, 0x4, 0x8, 0x8001, 0xfffffffe, 0x6, 0x1, 0xfffffff7, 0xfff, 0xfffffff1, 0xffff, 0x4, 0xf, 0x7, 0x7469, 0xb, 0x0, 0x203, 0xff32, 0x6, 0xca, 0x4ec1, 0x1, 0x9, 0x80, 0x0, 0x10000, 0x9, 0xb4, 0x7, 0x6, 0x0, 0x0, 0x8156b2a, 0x2, 0x7, 0x4, 0xa0, 0x5, 0x267, 0x1, 0x0, 0x81, 0xff, 0xffffffff, 0xe6b, 0x9, 0xa, 0xc8c, 0x1, 0xd2a, 0x6, 0xf4e, 0x9, 0x3a0, 0x3, 0x8, 0x7ff, 0x44, 0x2, 0x9, 0x800, 0x3, 0x8, 0x0, 0x8e5e00, 0x922e, 0x0, 0x8, 0x2, 0xf, 0x100, 0x2, 0x2c000, 0x80, 0x1, 0x1, 0x2, 0x5, 0xffffffff, 0xb, 0x6, 0x0, 0x3365, 0xa82f, 0x5, 0xffffffff, 0x1000, 0x0, 0x4, 0x0, 0x1, 0xa, 0x81, 0x111, 0x7, 0x5c20, 0x7b, 0x0, 0xe, 0x4, 0x2, 0x391, 0x0, 0x0, 0x3, 0x9, 0xc95d90a, 0xff, 0x5, 0x7, 0xd, 0xc7, 0x0, 0x7, 0x0, 0x9, 0xffffffff, 0x9, 0xffffffff, 0x4, 0xd, 0x9, 0x9, 0x10, 0x2, 0xfff, 0x2, 0x6, 0xe56d, 0x600000, 0x1, 0x6, 0x0, 0x10000, 0x0, 0x3, 0x9, 0x0, 0x1000, 0x6, 0x9, 0x0, 0x10000, 0x81, 0x4, 0xffff6c4b, 0x1, 0x7, 0x5, 0x7fff, 0x8, 0xffffffff, 0x9, 0x6, 0x0, 0x40, 0x67e1, 0x80000000, 0x5, 0x603c, 0x80000004, 0x4, 0x0, 0xfffffff8, 0x7, 0x3, 0x10, 0x400, 0xfffffe00, 0x4, 0x3, 0x0, 0xffff, 0x4, 0x6, 0x8, 0x0, 0x400, 0x1, 0x8a, 0x10, 0x4, 0x0, 0xfffffffd, 0x4003, 0x7, 0x616, 0x2, 0x2, 0xd1, 0x2, 0x0, 0x8, 0xe, 0x800, 0x1, 0x4, 0xd87, 0x80000001, 0x48e0, 0x8, 0x9, 0x40, 0x400, 0x6, 0x2, 0x4e1b, 0x1, 0x1000, 0x8, 0x4, 0x3, 0x0, 0x2, 0x9, 0xa2, 0x3, 0x10001, 0xffff, 0x4d, 0xd, 0x8, 0x2, 0x2, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x20002, 0x5, 0x1, 0x2, 0xfff, {0x5, 0x0, 0x9, 0xf9e, 0xfff, 0x7}, {0xf8, 0x2, 0x0, 0x4, 0x6fb}, 0x6, 0xdd7e}}]}]}}]}, 0x478}}, 0x4000) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x50, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r6, 0x1, 0x0, 0x0, {0x3d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x82}}]}, 0x58}}, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000631108000000000007000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff7b, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 6.693432569s ago: executing program 3 (id=1564): r0 = socket$inet(0x2, 0x2, 0x1) socket$netlink(0x10, 0x3, 0x14) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) connect$unix(r1, &(0x7f00000019c0)=@abs, 0x6e) (async) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f00000011c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x4, 0x6a, 0x0, 0xf}]}}}], 0x18}, 0x0) 6.651067942s ago: executing program 4 (id=1565): ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x4030582a, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x30, 0x80, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x2, 0x800000000008}, 0x4}}, 0xb8}}, 0x40) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1c}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00"/27], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000020ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000880)={0x1, 0xffffffffffffffff}, 0x4) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000008c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xc, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000940)={0xffffffffffffffff, 0x1, 0x1c}, 0xc) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000009c0)=@generic={&(0x7f0000000440)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000a00), &(0x7f0000000a40)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b40)={{}, &(0x7f0000000ac0), &(0x7f0000000b00)='%pI4 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x20, 0x1e, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x80}, {}, {}, [@exit, @generic={0x6, 0x9, 0x5, 0x0, 0x102}, @jmp={0x5, 0x0, 0x6, 0x4, 0xb, 0xffffffffffffffe0, 0x1}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x3}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xaf}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0x10, 0x4, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000b80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r8, r9, r10, r11, r12, 0xffffffffffffffff], &(0x7f0000000bc0)=[{0x1, 0x2, 0xe, 0x7}, {0x3, 0x5, 0xe, 0xa}, {0x6, 0x5, 0x10, 0xa}, {0x3, 0x4, 0x5}, {0x3, 0x2, 0x6}, {0x0, 0x2, 0x8, 0xb}], 0x10, 0x5, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r13, @ANYBLOB="040018"], 0x2c}}, 0x0) r14 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r14, 0x29, 0x22, &(0x7f0000000480)={{0xa, 0x0, 0x101, @empty}, {0xa, 0x4e22, 0x0, @dev}, 0xfffd, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, 0x5c) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r4, &(0x7f0000000140)={0xfffffffffffffffd, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x100, r6, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x18}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x51}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x45}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2f9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x19d}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3b8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x33}], @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x3}]}, 0x100}, 0x1, 0x0, 0x0, 0x10}, 0x4008040) socket(0x10, 0x803, 0x0) 6.647996866s ago: executing program 3 (id=1566): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYRES64=0x0], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', r0, 0x4000, r0}, 0x18) 6.534896107s ago: executing program 3 (id=1567): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @empty}]}}}]}, 0x4c}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaa3d63403aaaaaaaa0180c2001f196871f19a000086dd2c7b57843c127eb9cd602a84350014060000000000000400", @ANYRES8=r0], 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) 6.507949081s ago: executing program 3 (id=1568): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000006800010000000000feffffff0a000000000000000600070002000000080008800400010008000500", @ANYRES32=r1, @ANYBLOB="f3c970bc74db3032ec793eee1c736330b5954e61e3d53d530fe18fcc8c22916a72f5643eeffdd470e14843ebe092e72bbaf5971b859a79841b2f8f615f5f11c01255d516f2cfb6d8be09bb7996f0c5a3901b8ca14d87aa97e954873d3dfb7a4384460c008d5c2446001cd62e"], 0x30}}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x2}, 0x38) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x200, 0x0, 0x0, 0x0, 0x168, 0x0, 0x168, 0x1f0, 0x1f0, 0x168, 0x1f0, 0x3, 0x0, {[{{@ip={@dev, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wlan1\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0xffffffffa0028000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'vlan0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x260) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 6.29028809s ago: executing program 2 (id=1569): r0 = socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2}}, 0x2e) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x81, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024001d00120511a09798bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab9d25bf46050d3c3a2b04", 0x4c}], 0x1}, 0x4008000) (async) recvfrom(r3, 0x0, 0x0, 0x40000000, 0x0, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000080)={0x0, 0x3a, &(0x7f0000000100)={&(0x7f00000005c0)={0x34, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x800, 0x0, 0x3, 0x1}, 0x20) (async) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) (async) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x3, 0x0, &(0x7f0000000040)=0xffffffffffffff5f) (async) r7 = socket$xdp(0x2c, 0x3, 0x0) accept$ax25(r7, 0x0, 0x0) (async) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r8, 0x89eb, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x10, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xffffff80}}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{0x5, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000200)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-neon\x00'}, 0x58) (async) r11 = accept4(r0, 0x0, 0x0, 0x0) (async) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r12, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x24, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r15}, @typed={0x8, 0x9f, 0x0, 0x0, @pid=r14}, @nested={0x4, 0x1}]}, 0x24}], 0x1}, 0x0) (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@mcast2}}, &(0x7f0000000400)=0xe8) sendmmsg$unix(r11, &(0x7f0000002100)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000005c0)="bb57170b6e2c61a6b10d245fbc24caebc3bc95b0ed67b92d253f46276c26e38cb044ae76030b53589696991185b6ecf0b2ebfefa6c7bb3c2c60b4c67c3e19aacb69b994d3b19d49c072aaa3bee8318669ce42d5f2203919d8ad9a6888ea63063877bd53c055c5ace6c23b2c24e", 0x6d}, {&(0x7f0000000640)="8c3ecceab483e1fa2fff0cc30e910c96d9a2a352277a4682cc67d0c34488697a03aa55d391f06efd4fce8209e19480ded98a1f", 0x33}], 0x2, 0x0, 0x0, 0x40080}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000e00)="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", 0x1000}], 0x1, &(0x7f0000000700)=[@rights={{0x1c, 0x1, 0x1, [r5, r6, r0]}}, @rights={{0x14, 0x1, 0x1, [r8]}}, @cred={{0x1c, 0x1, 0x2, {r14, r17}}}, @rights={{0x34, 0x1, 0x1, [r9, r7, r10, 0xffffffffffffffff, r10, r11, r8, 0xffffffffffffffff, r9]}}, @rights={{0x34, 0x1, 0x1, [r11, r0, r8, r6, r5, 0xffffffffffffffff, r10, r5, r6]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r3]}}], 0xe0, 0x4008000}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)="c429ef643f7326715165f2c9020f4bd110c91ee5da69ba3b276f7ed06d976da25e3e48220d4161462dd15b370fb15d9ce14814a56528a97b7f84baeced0fb98a79f270f4ab018b4fc1dcfae347f7da9c9718080c1696fe6f071ab6f68fb547475feba146fae98b39672351cfb36c227da7918c14b1334a49f8fc3a6e2cd5fd93dc317e414e95cd67e0ce7bf2dd642efde82d863a70b8697c480d3ea7ee703ecdd66e4ea40f27a317aecdc991fbaa217030ded3d07149dc8a9405780dff1b125dee67", 0xc2}, {&(0x7f0000000a80)="b861c856b8e55fc813f69f0e18ad5c9aec102a3feb7ddd3d76154370b1c15481182790487b89a652c74ff478cbf5e283ed0243538fa7b99e4cd9de4ed3b3c7410dc53ef4e11c20efb8a441fbea94a717feaed555641a8877a7d470041bc0c6cd7ce41a08bb4b5ad098e7a94ce48085c8c908a690ad98846f7d1894757bfef6eff38e1568828342a723361672cda6deaf30d8987d5d1e719569c020fff041346661975cc0c72fdb5df6dc8a39816c0a91b8ad700a59bf1eeee05a3731447e02be7676a7f4b9fe93acff57e89441d1034c2f0ca2e4e86c", 0xd6}, {&(0x7f0000000500)="33ac0bfd24c4f9396e003d00f86b8536a0edce6592d2", 0x16}, {&(0x7f0000000b80)="29ee7e6e06f6ee006fe487c0ad79a27c1d4ce51afa683b4103980813588962198745bfc5bc50ec53ea8c155be2e1dbc8edfc8322f14301724f8e1613fe44d01fb3c1b4214f463fc3d9a1c8309ec15f7af029ff6ed13d557d33e33d01d141df1a5b04c54689b4aab9b87e4a1ff16872d257ae15919be7e58dbd8c0d0267bcc189e66101e71f04d452c77d56b7b6dcf8884e930444cef0291e71b924c32bac78693275b0783dde58e6fa406232e651d6a129fd70272081e13bd1ea1dd51c9e209dbfcc3f989d72cb993ac881a3794cf2feda426590cecf4b7d3b7f45e9e32a67f2f52bafa5eba36589d0da", 0xea}, {&(0x7f0000000c80)="05d87ece7edfcbb3012eb3cac4140a3a5bf8a8751bf3f68720cc7dffd96fab8dbcdb8a514d3f4d2173186ba700719c71e1c4eb7419865447cf65cf1d35164961ee57caf956c0b2a3207fe93b171350cc9a4a5810fa3b2b106182ce49bdddbb2226e8e8cd818b451cf968aff4b87599a1e79de90ff5a10c6eed50b26b9a", 0x7d}], 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r14, @ANYRES32=r15, @ANYRES32=r16, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r15, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32=r10, @ANYRES32, @ANYRES32=r2, @ANYRES32=r12, @ANYRES32=r10, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r15, @ANYRES32=r16, @ANYBLOB="0000000024000000000000000100630001000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r5, @ANYRES32, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32=r11, @ANYRES32, @ANYRES32, @ANYRES32=r9, @ANYRES32=r2], 0xf0, 0x1}}, {{&(0x7f0000001f00)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000800)=[{&(0x7f0000001f80)="05b61ca2282323eed0b4161dc5a1ba2626a2d371df606cc46cb7dcfbcc8f7c581781b9c51dd4ef7d6d631871408e9f41e7dc22ea64cccbed620339432a1f8b2df165e371d024cbbf7d17b920dd5a82e782b3cb17f3d67e2defa987cc7968826af338723f4a6edd51ccf793179a4851b638cab3926dd681d653cd8ed898f27a8c9e26f9f6ab86fdb52e252bb818f1beafa3c393b4410c6a04804cd5891a41cf9982d325e8311d422768892aad731730f516ce669dbed7f0c334ab20659f195f189aeb2587d73161e8899997aa56cfc8e5c2c2068ac8a9656b", 0xd8}], 0x1, &(0x7f0000002080)=[@cred={{0x1c, 0x1, 0x2, {0x0, r17}}}, @rights={{0x1c, 0x1, 0x1, [r8, r0, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58, 0x44000}}], 0x4, 0x4888) 6.21147354s ago: executing program 4 (id=1570): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) (async) listen(r1, 0x0) (async) r2 = socket$packet(0x11, 0x2, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x373c2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1820000000090000000000060000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bdaa, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffa}}}]}, 0x38}}, 0x20000004) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x5}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20001810}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) socket(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) (async) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r6) 6.211087759s ago: executing program 3 (id=1571): getpid() (async, rerun: 32) r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000480)={@dev={0xfe, 0x80, '\x00', 0xfd}}, 0x14) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00"/36, @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000e0270300000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000650d000000000000e1000000000000000007000000ff0f"], 0x254}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f0000000180)={@remote, 0x0, 0x1, 0x0, 0x0, 0x7}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x0, 0x2}, 0x20) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001880)=ANY=[@ANYBLOB="380000001800010300000000fbdbdf250a800000ff0300060200000014000100fc"], 0x38}}, 0x0) (async) close(r3) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) (rerun: 32) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (async) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r10, 0x6, 0x14, &(0x7f0000000340)=0x3, 0x4) (async, rerun: 32) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000140)={@dev={0xfe, 0x80, '\x00', 0x13}, 0x7a, r7}) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) (async) bind$xdp(r8, &(0x7f0000000100)={0x2c, 0x0, r11}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r7, 0x0, r8}, 0x60) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe}}}, 0x24}}, 0x0) 6.087890263s ago: executing program 3 (id=1572): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000001780)={0x1, 'vlan1\x00', {}, 0x8}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4c8800, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGCAUSE(r3, 0x8917, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETLINK(r2, 0x400454cd, 0x30a) 6.012116285s ago: executing program 2 (id=1573): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r1, 0xa2, &(0x7f00000003c0)={0x0, 0x0}}, 0x10) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001040)={r2}, 0xc) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000f62d76"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x8, 0x1c, &(0x7f0000000300)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b70300000300000085000000b2000000bf0900000000000055090100000000009500000000000000b7020000000000007b2af0ff00000000d609080000000000db9af0ff41000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(r3) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8085}, 0x24004000) recvmmsg(r6, &(0x7f0000001800)=[{{0x0, 0x0, 0x0}, 0x701}, {{0x0, 0x0, 0x0}, 0xfffefffc}, {{0x0, 0x0, 0x0}, 0x8001}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/26, 0x1a}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001680)=""/114, 0x72}, {&(0x7f00000014c0)=""/252, 0xfc}, {&(0x7f00000015c0)=""/14, 0xe}, {&(0x7f0000001600)=""/93, 0x5d}], 0x7}, 0xb91}], 0x4, 0x22, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffe5d, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x33, 0x1, 0x70bd2b, 0x25dbdbfe, {0x4}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x5, 0x0, 0x0, @uid}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="180200000000010000000000000000008500000054000000850000000800000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r9, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x97}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4c080}, 0x0) recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) 5.919490036s ago: executing program 0 (id=1574): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000040)={'gre0\x00', 0x0, 0x1, 0x7800, 0x1, 0x1, {{0x28, 0x4, 0x1, 0x3d, 0xa0, 0x65, 0x0, 0x6, 0x0, 0x0, @multicast2, @remote, {[@cipso={0x86, 0x36, 0x1, [{0x3, 0x7, "3c7fb11f19"}, {0x2e29d633ad3f2adb, 0x11, "57c4fb842319d4775a69d69710e394"}, {0x7, 0x2}, {0x2, 0x2}, {0x1, 0xa, "37cd81285ed09fec"}, {0x0, 0x2}, {0x5, 0x2}, {0x5, 0x6, "b841f20e"}]}, @ssrr={0x89, 0x2b, 0x9e, [@empty, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x1f}, @loopback, @loopback, @empty, @broadcast, @multicast1, @broadcast, @broadcast]}, @lsrr={0x83, 0x7, 0xdf, [@loopback]}, @timestamp_addr={0x44, 0x24, 0x69, 0x1, 0x4, [{@empty, 0x8}, {@multicast2, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@empty, 0x100}]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x98, 0x10, 0x10, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2205, 0xa202}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x8}}]}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}, @IFLA_GRE_IKEY={0x8, 0x4, 0x9}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x5}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}, @IFLA_GRE_LINK={0x8, 0x1, r1}]}}}]}, 0x98}, 0x1, 0xba01}, 0x0) 5.918816468s ago: executing program 4 (id=1575): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2b, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @qdisc_kind_options=@q_ingress={0xc}]}, 0x38}}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$802154_raw(r1, &(0x7f0000000080)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14) bind$packet(r1, &(0x7f0000000000)={0x11, 0x3, r2, 0x1, 0xea, 0x6, @random="0fdcec287a66"}, 0x14) r5 = socket(0x10, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x3, [0xa, 0x9, 0xc, 0x8, 0x5, 0xb, 0x10, 0x5, 0xe, 0xf, 0xa, 0xf, 0x8, 0x7, 0x1, 0xf], 0x1, [0x5f1, 0x3, 0xdd64, 0x7, 0xfffa, 0x200, 0x5, 0xdb7, 0x9, 0x9d, 0xa, 0x5cb6, 0x4, 0x2, 0xd, 0xfbff], [0x0, 0x8, 0x4, 0x4, 0x6, 0x4, 0x2, 0x1, 0x4, 0xfffd, 0x2, 0x0, 0x5, 0x4d, 0x7, 0x3ff]}}}}]}, 0x88}}, 0x0) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r9, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000040)={0x30, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}]}]}, 0x30}}, 0x0) write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) bind$unix(r1, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}, 0x40}], 0x1, 0x2000, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000000e14012508003c0005000000080001", @ANYRES64=r0, @ANYRES64=r4, @ANYRES32], 0x28}, 0x1, 0x0, 0x0, 0x844}, 0x8044) sendmsg$nl_route(r0, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000003a40)={&(0x7f0000003900)=ANY=[@ANYRESHEX=0x0, @ANYRES32=0x0, @ANYBLOB="02000000c04004001400030067726530000000000000000000000000180034801400350062726964676530000000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) 5.85424268s ago: executing program 0 (id=1576): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x69, 0x10, 0x16}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x74, 0x0, 0x0, 0x1}, {0x6}]}, 0x10) 0s ago: executing program 0 (id=1577): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8000f27, 0x0) sendmmsg$inet6(r0, &(0x7f00000071c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)='H', 0x1}], 0x1}}], 0x1, 0x0) kernel console output (not intermixed with test programs): t 1(bridge_slave_0) entered forwarding state [ 84.117221][ T2982] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.124458][ T2982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.159086][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.255062][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.322366][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.335452][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.376976][ T2975] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.384204][ T2975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.407864][ T2975] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.415155][ T2975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.436219][ T2975] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.443490][ T2975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.488273][ T2975] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.495503][ T2975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.607995][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.676603][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.915554][ T5837] veth0_vlan: entered promiscuous mode [ 84.965372][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.003429][ T5837] veth1_vlan: entered promiscuous mode [ 85.117505][ T5837] veth0_macvtap: entered promiscuous mode [ 85.169779][ T5837] veth1_macvtap: entered promiscuous mode [ 85.228523][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.267976][ T5829] veth0_vlan: entered promiscuous mode [ 85.284070][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.306512][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.328349][ T5829] veth1_vlan: entered promiscuous mode [ 85.336942][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.373626][ T5837] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.384001][ T5837] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.394596][ T5837] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.404214][ T5837] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.514623][ T5845] veth0_vlan: entered promiscuous mode [ 85.532299][ T55] Bluetooth: hci1: command tx timeout [ 85.533259][ T5840] Bluetooth: hci0: command tx timeout [ 85.594934][ T5834] veth0_vlan: entered promiscuous mode [ 85.604905][ T5828] veth0_vlan: entered promiscuous mode [ 85.615463][ T5829] veth0_macvtap: entered promiscuous mode [ 85.631849][ T5845] veth1_vlan: entered promiscuous mode [ 85.653714][ T5828] veth1_vlan: entered promiscuous mode [ 85.661616][ T5834] veth1_vlan: entered promiscuous mode [ 85.668188][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.691355][ T5840] Bluetooth: hci4: command tx timeout [ 85.696643][ T5829] veth1_macvtap: entered promiscuous mode [ 85.701669][ T5840] Bluetooth: hci3: command tx timeout [ 85.706475][ T55] Bluetooth: hci2: command tx timeout [ 85.715243][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.778955][ T2975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.794287][ T2975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.798240][ T5845] veth0_macvtap: entered promiscuous mode [ 85.836489][ T5845] veth1_macvtap: entered promiscuous mode [ 85.845129][ T5834] veth0_macvtap: entered promiscuous mode [ 85.858931][ T5834] veth1_macvtap: entered promiscuous mode [ 85.870745][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.885876][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 85.904329][ T5828] veth0_macvtap: entered promiscuous mode [ 85.933622][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.943704][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.959556][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.976561][ T5828] veth1_macvtap: entered promiscuous mode [ 85.990074][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.016342][ T5834] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.036766][ T5834] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.056247][ T5834] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.066618][ T5834] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.105258][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.165579][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.187320][ T5845] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.200746][ T5845] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.209827][ T5845] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.218777][ T5845] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.240949][ T5829] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.249661][ T5829] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.258752][ T5829] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.268029][ T5829] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.296692][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.381903][ T5828] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.392532][ T5828] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.402430][ T5828] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.411570][ T5828] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.609454][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.618751][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.666831][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.686997][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.783969][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.799768][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.826795][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.835933][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.877006][ T2982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.906121][ T2982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.946189][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.957751][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.978865][ T24] cfg80211: failed to load regulatory.db [ 87.088334][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.129132][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.261845][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.269729][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.305188][ T5943] warning: `syz.2.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 87.317866][ T5946] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 87.330344][ T5943] Bluetooth: MGMT ver 1.23 [ 87.400940][ T5947] tipc: Started in network mode [ 87.406517][ T5947] tipc: Node identity , cluster identity 4711 [ 87.422555][ T5947] tipc: Failed to obtain node identity [ 87.436771][ T5947] tipc: Enabling of bearer rejected, failed to enable media [ 87.461080][ T5952] netlink: 72 bytes leftover after parsing attributes in process `syz.3.10'. [ 87.620928][ T55] Bluetooth: hci0: command tx timeout [ 87.626409][ T55] Bluetooth: hci1: command tx timeout [ 87.714013][ T5966] nft_compat: unsupported protocol 1 [ 87.781338][ T55] Bluetooth: hci2: command tx timeout [ 87.786868][ T5840] Bluetooth: hci3: command tx timeout [ 87.793162][ T5843] Bluetooth: hci4: command tx timeout [ 88.637838][ T5974] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 88.721326][ T5980] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 88.763864][ T5980] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 88.885046][ T5991] IPVS: set_ctl: invalid protocol: 29 100.1.1.0:20002 [ 89.227433][ T5986] netlink: 'syz.0.17': attribute type 21 has an invalid length. [ 89.246108][ T5986] netlink: 156 bytes leftover after parsing attributes in process `syz.0.17'. [ 89.259802][ T6000] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21'. [ 89.410967][ T6000] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 89.447745][ T6003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22'. [ 89.469539][ T6003] bridge_slave_1: left allmulticast mode [ 89.529388][ T6003] bridge_slave_1: left promiscuous mode [ 89.546805][ T6003] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.567695][ T6007] netlink: 'syz.3.24': attribute type 1 has an invalid length. [ 89.633214][ T6010] xt_l2tp: invalid flags combination: 4 [ 89.635683][ T6003] bridge_slave_0: left allmulticast mode [ 89.654627][ T6003] bridge_slave_0: left promiscuous mode [ 89.658501][ T6013] netlink: 'syz.3.24': attribute type 3 has an invalid length. [ 89.661875][ T6003] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.754658][ T6016] netlink: 28 bytes leftover after parsing attributes in process `syz.0.23'. [ 89.775930][ T6016] netlink: 'syz.0.23': attribute type 7 has an invalid length. [ 89.787797][ T6016] netlink: 'syz.0.23': attribute type 8 has an invalid length. [ 89.796069][ T6016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23'. [ 90.198340][ T6037] x_tables: duplicate underflow at hook 1 [ 90.456642][ T6051] netlink: 'syz.1.36': attribute type 9 has an invalid length. [ 90.469361][ T6051] netlink: 48 bytes leftover after parsing attributes in process `syz.1.36'. [ 90.504868][ T6047] Bluetooth: MGMT ver 1.23 [ 90.695528][ T6057] delete_channel: no stack [ 91.028836][ T6074] netlink: 3648 bytes leftover after parsing attributes in process `syz.4.43'. [ 91.087096][ T6074] netlink: 3648 bytes leftover after parsing attributes in process `syz.4.43'. [ 91.380223][ T6093] syz.2.48 uses obsolete (PF_INET,SOCK_PACKET) [ 91.482260][ T6101] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 91.482517][ T6098] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 91.902194][ T6113] trusted_key: syz.2.55 sent an empty control message without MSG_MORE. [ 91.969210][ T6103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.987640][ T6103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.005679][ T6103] bond0 (unregistering): Released all slaves [ 92.499423][ T5890] IPVS: starting estimator thread 0... [ 92.640652][ T6143] IPVS: using max 28 ests per chain, 67200 per kthread [ 92.668528][ T6151] __nla_validate_parse: 4 callbacks suppressed [ 92.668548][ T6151] netlink: 24 bytes leftover after parsing attributes in process `syz.2.66'. [ 92.891748][ T6162] netlink: 72 bytes leftover after parsing attributes in process `syz.4.70'. [ 92.959218][ T6168] netlink: 84 bytes leftover after parsing attributes in process `syz.0.69'. [ 93.030592][ T6172] syz_tun: entered allmulticast mode [ 93.074306][ T6172] netlink: 24 bytes leftover after parsing attributes in process `syz.1.72'. [ 93.101818][ T6178] netlink: 60 bytes leftover after parsing attributes in process `syz.4.74'. [ 93.114555][ T6172] syz_tun: left allmulticast mode [ 93.289859][ T6190] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 93.289939][ T6182] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 93.310471][ T52] IPVS: starting estimator thread 0... [ 93.315811][ T6184] netlink: 'syz.0.78': attribute type 32 has an invalid length. [ 93.401030][ T6192] IPVS: using max 31 ests per chain, 74400 per kthread [ 93.486083][ T6198] netlink: 8 bytes leftover after parsing attributes in process `syz.4.80'. [ 93.528223][ T6198] netlink: 4 bytes leftover after parsing attributes in process `syz.4.80'. [ 93.568430][ T6198] netlink: 'syz.4.80': attribute type 14 has an invalid length. [ 93.586226][ T6198] netlink: 'syz.4.80': attribute type 13 has an invalid length. [ 93.756209][ T6213] sock: sock_timestamping_bind_phc: sock not bind to device [ 94.073558][ T6230] netlink: 36 bytes leftover after parsing attributes in process `syz.4.89'. [ 94.126544][ T6236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.90'. [ 94.293763][ T6243] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 94.384127][ T6247] netlink: 'syz.2.95': attribute type 1 has an invalid length. [ 94.471256][ T6258] raw_sendmsg: syz.4.97 forgot to set AF_INET. Fix it! [ 94.948159][ T6285] netlink: 'syz.2.108': attribute type 1 has an invalid length. [ 95.057592][ T6285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.108'. [ 95.101430][ T6291] netlink: 'syz.1.106': attribute type 11 has an invalid length. [ 95.179585][ T6290] veth3: entered promiscuous mode [ 95.440398][ T6285] ip6gretap1: entered allmulticast mode [ 95.488711][ T6308] netlink: 'syz.0.112': attribute type 1 has an invalid length. [ 95.506706][ T6308] netlink: 'syz.0.112': attribute type 4 has an invalid length. [ 95.524675][ T6308] NCSI netlink: No device for ifindex 458760 [ 95.675359][ T6297] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.683186][ T6297] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.881312][ T6337] netlink: 'syz.4.117': attribute type 1 has an invalid length. [ 96.132485][ T6297] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.167716][ T6297] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.194293][ T6344] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 96.350695][ T6297] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.359644][ T6297] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.370770][ T6297] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.385442][ T6297] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.491032][ T6332] netem: incorrect ge model size [ 96.500732][ T6332] netem: change failed [ 96.651581][ T6360] netlink: 'syz.2.122': attribute type 1 has an invalid length. [ 96.926891][ T6360] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.971267][ T55] Bluetooth: hci4: command tx timeout [ 96.998430][ T6365] veth3: entered promiscuous mode [ 97.089998][ T6368] Zero length message leads to an empty skb [ 97.091747][ T6380] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20003 [ 97.117434][ T6376] bridge0: port 3(vlan3) entered blocking state [ 97.125486][ T6376] bridge0: port 3(vlan3) entered disabled state [ 97.154171][ T6376] vlan3: entered allmulticast mode [ 97.168327][ T6376] bridge0: entered allmulticast mode [ 97.197425][ T6376] vlan3: left allmulticast mode [ 97.203108][ T6376] bridge0: left allmulticast mode [ 97.856286][ T6409] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 98.560088][ T6443] netlink: 'syz.2.152': attribute type 5 has an invalid length. [ 98.739223][ T6449] syzkaller1: entered promiscuous mode [ 98.758681][ T6449] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 98.995338][ T6461] __nla_validate_parse: 10 callbacks suppressed [ 98.995358][ T6461] netlink: 20 bytes leftover after parsing attributes in process `syz.2.159'. [ 99.021092][ T6461] tipc: Invalid UDP bearer configuration [ 99.021173][ T6461] tipc: Enabling of bearer rejected, failed to enable media [ 99.056594][ T55] Bluetooth: hci4: command 0x0405 tx timeout [ 99.115364][ T6458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.158'. [ 99.442117][ T6480] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 99.547493][ T30] audit: type=1107 audit(1748492085.680:2): pid=6490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 99.647721][ T6498] netlink: 'syz.2.171': attribute type 3 has an invalid length. [ 99.674532][ T6497] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 99.989653][ T6518] netlink: 112 bytes leftover after parsing attributes in process `syz.1.178'. [ 100.232462][ T6512] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 100.255055][ T6512] team0: Device macvtap1 is already an upper device of the team interface [ 100.422892][ T6534] netlink: 64985 bytes leftover after parsing attributes in process `syz.1.181'. [ 100.556082][ T6539] netlink: 9 bytes leftover after parsing attributes in process `syz.2.182'. [ 100.593979][ T6539] 0·: renamed from hsr_slave_1 [ 100.616761][ T6539] 0·: entered allmulticast mode [ 100.656496][ T6539] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 100.738826][ T6552] gtp0: entered promiscuous mode [ 100.762436][ T6552] gtp0: entered allmulticast mode [ 100.831444][ T6554] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 100.857293][ T6554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.187'. [ 100.866753][ T6554] netlink: 12 bytes leftover after parsing attributes in process `syz.1.187'. [ 100.979021][ T6567] netlink: 13 bytes leftover after parsing attributes in process `syz.2.190'. [ 101.009134][ T6562] veth3: entered allmulticast mode [ 101.391069][ T6604] netlink: 16 bytes leftover after parsing attributes in process `syz.0.197'. [ 101.769896][ T6648] Cannot find set identified by id 0 to match [ 101.770288][ T6645] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 101.799956][ T6645] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 101.809039][ T6645] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 101.818044][ T6645] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 101.827765][ T6645] geneve2: entered promiscuous mode [ 101.835355][ T6645] geneve2: entered allmulticast mode [ 102.435466][ T6678] Driver unsupported XDP return value 0 on prog (id 48) dev N/A, expect packet loss! [ 102.634351][ T6692] netlink: 24 bytes leftover after parsing attributes in process `syz.2.217'. [ 102.668692][ T6692] netlink: 'syz.2.217': attribute type 2 has an invalid length. [ 102.711921][ T6692] tipc: Started in network mode [ 102.716999][ T6692] tipc: Node identity ac14140f, cluster identity 4711 [ 102.754872][ T6692] tipc: New replicast peer: 255.255.255.255 [ 102.775048][ T6692] tipc: Enabled bearer , priority 10 [ 102.791845][ T6696] syz_tun: entered allmulticast mode [ 103.467538][ T6726] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 103.620124][ T6731] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 103.677785][ T6731] xt_CT: You must specify a L4 protocol and not use inversions on it [ 103.771996][ T6736] 8021q: adding VLAN 0 to HW filter on device bond2 [ 103.786358][ T6736] bond0: (slave bond2): Enslaving as an active interface with an up link [ 103.891922][ T5891] tipc: Node number set to 2886997007 [ 104.072699][ T6757] __nla_validate_parse: 3 callbacks suppressed [ 104.072718][ T6757] netlink: 32 bytes leftover after parsing attributes in process `syz.1.235'. [ 104.307211][ T6771] netlink: 4 bytes leftover after parsing attributes in process `syz.0.239'. [ 104.488643][ T6789] tipc: Can't bind to reserved service type 1 [ 104.650317][ T6794] SET target dimension over the limit! [ 104.688687][ T6771] team0 (unregistering): Port device team_slave_0 removed [ 104.703727][ T6771] team0 (unregistering): Port device team_slave_1 removed [ 104.843749][ T6800] tipc: Enabling of bearer rejected, failed to enable media [ 104.932352][ T6803] netlink: 12 bytes leftover after parsing attributes in process `syz.0.249'. [ 105.322590][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 105.645413][ T6846] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 105.939256][ T6862] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.668805][ T6885] netlink: 8 bytes leftover after parsing attributes in process `syz.4.271'. [ 106.970640][ T55] Bluetooth: hci4: command 0x0405 tx timeout [ 107.015424][ T6902] netlink: 'syz.1.276': attribute type 1 has an invalid length. [ 107.048167][ T6902] netlink: 216 bytes leftover after parsing attributes in process `syz.1.276'. [ 107.102122][ T6903] netlink: 40 bytes leftover after parsing attributes in process `syz.1.276'. [ 107.168515][ T6902] netlink: 40 bytes leftover after parsing attributes in process `syz.1.276'. [ 107.267961][ T6902] netlink: 36 bytes leftover after parsing attributes in process `syz.1.276'. [ 107.687856][ T6937] netlink: 4 bytes leftover after parsing attributes in process `syz.4.288'. [ 107.701775][ T6937] netlink: 'syz.4.288': attribute type 3 has an invalid length. [ 108.014707][ T6959] netlink: 12 bytes leftover after parsing attributes in process `syz.1.293'. [ 108.047281][ T6959] geneve2: entered promiscuous mode [ 108.054856][ T6956] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 108.137934][ T6956] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 108.715439][ T6998] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 108.985175][ T7010] x_tables: duplicate underflow at hook 1 [ 108.991198][ T7009] x_tables: duplicate underflow at hook 1 [ 109.009027][ T7019] netlink: 'syz.4.312': attribute type 4 has an invalid length. [ 109.203783][ T7029] __nla_validate_parse: 2 callbacks suppressed [ 109.203800][ T7029] netlink: 4 bytes leftover after parsing attributes in process `syz.4.315'. [ 109.246013][ T7029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.315'. [ 109.246194][ T7027] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 109.277028][ T7031] netlink: 'syz.1.316': attribute type 15 has an invalid length. [ 109.527863][ T7050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.322'. [ 109.733478][ T7063] sock: sock_set_timeout: `syz.4.323' (pid 7063) tries to set negative timeout [ 109.945135][ T7074] netlink: 20 bytes leftover after parsing attributes in process `syz.3.328'. [ 110.017565][ T7077] netlink: 56 bytes leftover after parsing attributes in process `syz.4.330'. [ 110.219890][ T7088] netlink: 16 bytes leftover after parsing attributes in process `syz.4.333'. [ 110.424083][ T7097] lo speed is unknown, defaulting to 1000 [ 110.458887][ T7097] lo speed is unknown, defaulting to 1000 [ 110.492644][ T7097] lo speed is unknown, defaulting to 1000 [ 110.516486][ T7100] x_tables: duplicate underflow at hook 2 [ 110.669867][ T7112] netlink: 60 bytes leftover after parsing attributes in process `syz.0.335'. [ 110.705497][ T7100] netlink: 60 bytes leftover after parsing attributes in process `syz.0.335'. [ 111.355499][ T7149] netlink: 204 bytes leftover after parsing attributes in process `syz.0.348'. [ 111.426724][ T7153] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 111.468852][ T7153] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 111.498535][ T7153] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 111.529007][ T7153] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 111.557921][ T7153] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 111.579627][ T7097] infiniband syz0: set active [ 111.581159][ T7153] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 111.586362][ T6352] lo speed is unknown, defaulting to 1000 [ 111.608880][ T7153] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 111.623292][ T7097] infiniband syz0: added lo [ 111.629350][ T7097] syz0: rxe_create_cq: returned err = -12 [ 111.639536][ T7153] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 111.657977][ T7097] infiniband syz0: Couldn't create ib_mad CQ [ 111.666161][ T7153] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 111.677495][ T7097] infiniband syz0: Couldn't open port 1 [ 111.689425][ T7153] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 111.742593][ T7164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.354'. [ 111.767569][ T7097] RDS/IB: syz0: added [ 111.795158][ T7097] smc: adding ib device syz0 with port count 1 [ 111.827441][ T7097] smc: ib device syz0 port 1 has pnetid [ 111.863592][ T5889] lo speed is unknown, defaulting to 1000 [ 111.891801][ T7097] lo speed is unknown, defaulting to 1000 [ 111.949814][ T7170] xt_CT: No such helper "snmp_trap" [ 111.986584][ T7175] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 112.031062][ T7175] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 112.039913][ T7175] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 112.088372][ T7175] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 112.118134][ T7175] geneve2: entered promiscuous mode [ 112.132022][ T7175] geneve2: entered allmulticast mode [ 112.162388][ T7182] netlink: 'syz.3.358': attribute type 4 has an invalid length. [ 112.714311][ T7097] lo speed is unknown, defaulting to 1000 [ 113.043741][ T7213] xt_HMARK: proto mask must be zero with L3 mode [ 113.050283][ T7213] xt_HMARK: proto mask must be zero with L3 mode [ 113.586013][ T7235] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.599633][ T7235] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 113.765536][ T7235] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.803961][ T7235] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 113.842902][ T7097] lo speed is unknown, defaulting to 1000 [ 113.968454][ T7235] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.980559][ T7235] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 114.195551][ T7235] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.233365][ T7235] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 114.415707][ T7277] __nla_validate_parse: 1 callbacks suppressed [ 114.415724][ T7277] netlink: 32 bytes leftover after parsing attributes in process `syz.3.384'. [ 114.556867][ T7235] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 114.581322][ T7235] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 114.614794][ T7097] lo speed is unknown, defaulting to 1000 [ 114.679617][ T7235] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 114.714408][ T7235] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 114.990276][ T7235] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 115.037615][ T7235] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 115.123830][ T7235] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 115.165936][ T7235] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 115.784861][ T7097] lo speed is unknown, defaulting to 1000 [ 115.845347][ T7338] netlink: 'syz.2.399': attribute type 6 has an invalid length. [ 115.917857][ T7338] netlink: 64 bytes leftover after parsing attributes in process `syz.2.399'. [ 116.310070][ T7363] netlink: 24 bytes leftover after parsing attributes in process `syz.0.404'. [ 116.661340][ T7382] netlink: 'syz.4.409': attribute type 1 has an invalid length. [ 116.725158][ T7382] netlink: 228 bytes leftover after parsing attributes in process `syz.4.409'. [ 116.747673][ T7388] xt_l2tp: v2 doesn't support IP mode [ 116.870944][ T7382] dvmrp0: entered allmulticast mode [ 116.958515][ T7394] netlink: 36 bytes leftover after parsing attributes in process `syz.3.413'. [ 117.165937][ T7414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.532262][ T7429] netlink: 27 bytes leftover after parsing attributes in process `syz.3.421'. [ 117.763084][ T7439] netlink: 24 bytes leftover after parsing attributes in process `syz.1.425'. [ 117.923382][ T7447] netlink: 8 bytes leftover after parsing attributes in process `syz.4.427'. [ 117.964568][ T7447] netlink: 12 bytes leftover after parsing attributes in process `syz.4.427'. [ 118.017462][ T7452] netlink: 'syz.1.429': attribute type 1 has an invalid length. [ 118.038018][ T7452] netlink: 232 bytes leftover after parsing attributes in process `syz.1.429'. [ 118.248480][ T7467] sctp: [Deprecated]: syz.0.430 (pid 7467) Use of struct sctp_assoc_value in delayed_ack socket option. [ 118.248480][ T7467] Use struct sctp_sack_info instead [ 118.295614][ T7466] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 118.342840][ T7458] "syz.4.431" (7458) uses obsolete ecb(arc4) skcipher [ 118.518827][ T7476] netlink: 'syz.0.435': attribute type 24 has an invalid length. [ 119.633537][ T7557] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.641497][ T7557] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.650183][ T7557] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.658868][ T7557] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.706272][ T7544] netlink: 'syz.0.456': attribute type 12 has an invalid length. [ 119.715667][ T7544] __nla_validate_parse: 3 callbacks suppressed [ 119.715682][ T7544] netlink: 132 bytes leftover after parsing attributes in process `syz.0.456'. [ 119.733707][ T7553] net_ratelimit: 23 callbacks suppressed [ 119.733724][ T7553] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 119.749715][ T7558] netlink: 80 bytes leftover after parsing attributes in process `syz.3.459'. [ 119.983096][ T7576] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 120.134756][ T7576] bond0: entered promiscuous mode [ 120.155949][ T7576] bond0: entered allmulticast mode [ 120.182445][ T7576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.329358][ T7593] netlink: 32 bytes leftover after parsing attributes in process `syz.1.469'. [ 120.433295][ T7602] netlink: 14528 bytes leftover after parsing attributes in process `syz.3.472'. [ 120.953592][ T7630] ipt_rpfilter: unknown options [ 120.962726][ T7638] netlink: 71 bytes leftover after parsing attributes in process `syz.4.484'. [ 121.450153][ T7668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.493'. [ 121.647648][ T7683] netlink: 8 bytes leftover after parsing attributes in process `syz.3.497'. [ 122.007802][ T7704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.503'. [ 122.016858][ T7703] openvswitch: netlink: Duplicate or invalid key (type 0). [ 122.016894][ T7703] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.022856][ T7703] netlink: 'syz.4.504': attribute type 10 has an invalid length. [ 122.055195][ T7706] netlink: 40 bytes leftover after parsing attributes in process `syz.2.502'. [ 122.079743][ T7703] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.126499][ T7703] bond0: (slave team0): Enslaving as an active interface with an up link [ 122.150314][ T7708] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 122.183336][ T7709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.505'. [ 122.340892][ T7719] netlink: 'syz.4.507': attribute type 1 has an invalid length. [ 122.362209][ T7721] netlink: 'syz.0.509': attribute type 8 has an invalid length. [ 122.521653][ T7719] 8021q: adding VLAN 0 to HW filter on device bond2 [ 122.780750][ T7745] tipc: Enabling of bearer rejected, failed to enable media [ 123.217198][ T7772] tipc: MTU too low for tipc bearer [ 123.348285][ T7782] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 123.485070][ T7786] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.537697][ T7791] netlink: 'syz.4.529': attribute type 1 has an invalid length. [ 123.635311][ T7786] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.748213][ T7793] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 123.787047][ T7793] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 123.844201][ T7793] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 123.976785][ T7810] Cannot find del_set index 4 as target [ 123.990169][ T7808] xfrm1: entered promiscuous mode [ 124.020619][ T7808] xfrm1: entered allmulticast mode [ 124.313509][ T7824] bond0: entered promiscuous mode [ 124.318783][ T7824] bond_slave_0: entered promiscuous mode [ 124.332227][ T7824] bond_slave_1: entered promiscuous mode [ 124.352200][ T7824] batadv0: entered promiscuous mode [ 124.402014][ T7824] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 124.478641][ T7824] bond0: left promiscuous mode [ 124.500813][ T7824] bond_slave_0: left promiscuous mode [ 124.507266][ T7824] bond_slave_1: left promiscuous mode [ 124.516016][ T7839] syz.4.543 uses old SIOCAX25GETINFO [ 124.525599][ T7824] batadv0: left promiscuous mode [ 124.622605][ T7834] sch_tbf: burst 0 is lower than device bridge_slave_0 mtu (1514) ! [ 125.043733][ T7868] __nla_validate_parse: 9 callbacks suppressed [ 125.043751][ T7868] netlink: 256 bytes leftover after parsing attributes in process `syz.4.551'. [ 125.068200][ T7869] netlink: 'syz.1.552': attribute type 1 has an invalid length. [ 125.126179][ T7868] IPv6: Can't replace route, no match found [ 125.224773][ T7877] xt_nat: multiple ranges no longer supported [ 125.291456][ T7881] netlink: 4 bytes leftover after parsing attributes in process `syz.4.557'. [ 125.304977][ T7883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.554'. [ 125.333211][ T7883] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 125.379727][ T7888] netlink: 256 bytes leftover after parsing attributes in process `syz.3.558'. [ 125.457710][ T7884] netlink: 32 bytes leftover after parsing attributes in process `syz.3.558'. [ 125.562412][ T7897] macvlan2: entered promiscuous mode [ 125.567758][ T7897] macvlan2: entered allmulticast mode [ 125.624731][ T7899] openvswitch: netlink: IP tunnel dst address not specified [ 125.817651][ T7907] netlink: 96 bytes leftover after parsing attributes in process `syz.2.565'. [ 125.841821][ T7907] 8021q: VLANs not supported on gre0 [ 125.996836][ T7917] netlink: 'syz.4.568': attribute type 10 has an invalid length. [ 126.004732][ T7917] vlan0: entered allmulticast mode [ 126.032945][ T7917] veth0_vlan: entered allmulticast mode [ 126.183617][ T7925] openvswitch: netlink: IP tunnel dst address not specified [ 126.270783][ T7938] netlink: 14 bytes leftover after parsing attributes in process `syz.3.574'. [ 126.335702][ T7943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.575'. [ 126.593226][ T7938] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.607047][ T7938] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.620321][ T7938] bond0 (unregistering): Released all slaves [ 126.791459][ T7943] team0 (unregistering): Port device team_slave_0 removed [ 126.809795][ T7943] team0 (unregistering): Port device team_slave_1 removed [ 126.836751][ T7948] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 126.899776][ T7953] mac80211_hwsim hwsim11 wlan1 (unregistering): left allmulticast mode [ 126.986544][ T7956] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.995638][ T7956] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.012618][ T7956] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.024303][ T7956] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.033490][ T7956] geneve2: entered promiscuous mode [ 127.038725][ T7956] geneve2: entered allmulticast mode [ 127.056767][ T7956] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.069858][ T7956] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.078963][ T7956] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.093056][ T7956] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.338598][ T7986] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 127.339363][ T7990] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 127.590646][ T7998] netlink: 'syz.3.589': attribute type 1 has an invalid length. [ 127.877376][ T8008] block nbd0: NBD_DISCONNECT [ 127.900695][ T8018] netlink: 12 bytes leftover after parsing attributes in process `syz.3.596'. [ 127.914685][ T8008] block nbd0: Disconnected due to user request. [ 127.930209][ T8008] block nbd0: shutting down sockets [ 128.017311][ T8023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.597'. [ 128.480190][ T8045] netlink: 'syz.1.602': attribute type 1 has an invalid length. [ 128.529582][ T8045] netlink: 'syz.1.602': attribute type 3 has an invalid length. [ 128.969830][ T8075] netlink: 'syz.3.608': attribute type 4 has an invalid length. [ 129.282325][ T8085] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 129.350687][ T8094] netlink: 'syz.2.613': attribute type 62 has an invalid length. [ 129.492298][ T8104] netlink: 'syz.4.617': attribute type 10 has an invalid length. [ 129.538840][ T8104] team0: Device hsr_slave_0 failed to register rx_handler [ 130.311705][ T8160] netlink: 'syz.1.634': attribute type 18 has an invalid length. [ 130.400719][ T8171] __nla_validate_parse: 8 callbacks suppressed [ 130.400736][ T8171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.635'. [ 130.525179][ T8177] netlink: 40 bytes leftover after parsing attributes in process `syz.3.639'. [ 130.567703][ T8180] netlink: 'syz.2.641': attribute type 1 has an invalid length. [ 130.577185][ T8159] netlink: 40 bytes leftover after parsing attributes in process `syz.0.635'. [ 130.770118][ T8192] netlink: 'syz.4.643': attribute type 1 has an invalid length. [ 130.869421][ T8192] 8021q: adding VLAN 0 to HW filter on device bond3 [ 131.040998][ T8206] tun0: tun_chr_ioctl cmd 1074025675 [ 131.046430][ T8206] tun0: persist disabled [ 131.090624][ T8216] netlink: 'syz.2.652': attribute type 5 has an invalid length. [ 131.486308][ T8247] netlink: 'syz.4.661': attribute type 12 has an invalid length. [ 131.506553][ T8247] netlink: 132 bytes leftover after parsing attributes in process `syz.4.661'. [ 131.599156][ T8255] netlink: 8 bytes leftover after parsing attributes in process `syz.4.665'. [ 131.667755][ T8260] netlink: 16 bytes leftover after parsing attributes in process `syz.0.666'. [ 131.772786][ T8266] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 131.816889][ T8271] : renamed from veth0_macvtap (while UP) [ 132.392736][ T8298] delete_channel: no stack [ 132.655421][ T75] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.738780][ T75] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.841310][ T8315] netlink: 'syz.4.689': attribute type 13 has an invalid length. [ 132.860000][ T8315] netlink: 'syz.4.689': attribute type 17 has an invalid length. [ 132.883994][ T75] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.978669][ T8315] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 133.026827][ T75] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.056069][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.066717][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.080072][ T8319] netlink: 28 bytes leftover after parsing attributes in process `syz.3.688'. [ 133.115107][ T8323] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 133.262700][ T8329] xt_nat: multiple ranges no longer supported [ 133.543259][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 133.557415][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 133.557719][ T5900] IPVS: starting estimator thread 0... [ 133.582138][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 133.604685][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 133.616740][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 133.720584][ T8344] IPVS: using max 32 ests per chain, 76800 per kthread [ 134.093745][ T75] bond0 (unregistering): Released all slaves [ 134.215745][ T8340] lo speed is unknown, defaulting to 1000 [ 134.419247][ T8367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.699'. [ 134.576709][ T8374] netlink: 144 bytes leftover after parsing attributes in process `syz.0.700'. [ 134.887211][ T8357] lo speed is unknown, defaulting to 1000 [ 135.612374][ T8340] chnl_net:caif_netlink_parms(): no params data found [ 135.691580][ T5843] Bluetooth: hci4: command tx timeout [ 135.935293][ T8445] netlink: 'syz.3.716': attribute type 11 has an invalid length. [ 135.983808][ T8434] bridge0: entered allmulticast mode [ 136.151521][ T8448] netlink: 'syz.3.716': attribute type 25 has an invalid length. [ 136.414919][ T8457] netlink: 'syz.0.718': attribute type 4 has an invalid length. [ 136.444128][ T75] hsr_slave_0: left promiscuous mode [ 136.473402][ T75] hsr_slave_1: left promiscuous mode [ 136.518218][ T8461] netlink: 'syz.0.718': attribute type 1 has an invalid length. [ 136.523671][ T75] veth1_macvtap: left promiscuous mode [ 136.542945][ T75] veth0_macvtap: left promiscuous mode [ 136.546457][ T8461] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.718'. [ 136.558348][ T75] veth1_vlan: left promiscuous mode [ 136.569093][ T75] veth0_vlan: left promiscuous mode [ 137.228344][ T6598] tipc: Subscription rejected, illegal request [ 137.393791][ T6626] smc: removing ib device syz0 [ 137.400250][ T8340] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.419799][ T8340] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.431633][ T8340] bridge_slave_0: entered allmulticast mode [ 137.445613][ T8340] bridge_slave_0: entered promiscuous mode [ 137.571505][ T5891] lo speed is unknown, defaulting to 1000 [ 137.590852][ T8340] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.598237][ T8340] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.611919][ T5891] syz0: Port: 1 Link DOWN [ 137.623716][ T8340] bridge_slave_1: entered allmulticast mode [ 137.649194][ T8487] netlink: 256 bytes leftover after parsing attributes in process `syz.0.724'. [ 137.670966][ T8487] unsupported nlmsg_type 40 [ 137.692315][ T8490] netlink: 27 bytes leftover after parsing attributes in process `syz.2.726'. [ 137.723336][ T8340] bridge_slave_1: entered promiscuous mode [ 137.776583][ T5843] Bluetooth: hci4: command tx timeout [ 138.056523][ T8503] netlink: 60 bytes leftover after parsing attributes in process `syz.3.730'. [ 138.268124][ T8498] netlink: 16 bytes leftover after parsing attributes in process `syz.0.728'. [ 138.303982][ T8340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.389872][ T8340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.490737][ T5843] Bluetooth: hci2: command tx timeout [ 138.534209][ T8519] x_tables: unsorted entry at hook 2 [ 138.537702][ T8521] netlink: 'syz.2.732': attribute type 1 has an invalid length. [ 138.550905][ T8521] netlink: 20 bytes leftover after parsing attributes in process `syz.2.732'. [ 138.584333][ T8520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.734'. [ 138.597859][ T8517] netlink: 12 bytes leftover after parsing attributes in process `syz.2.732'. [ 138.773757][ T8340] team0: Port device team_slave_0 added [ 138.869012][ T8340] team0: Port device team_slave_1 added [ 138.957573][ T8528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.736'. [ 139.123254][ T8540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.736'. [ 139.306889][ T8340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.341697][ T8340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.397456][ T8340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.527827][ T8340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.570580][ T8340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.687588][ T8340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.743990][ T8561] netlink: 'syz.0.744': attribute type 1 has an invalid length. [ 139.785144][ T8561] nbd: error processing sock list [ 139.852681][ T5843] Bluetooth: hci4: command tx timeout [ 139.919844][ T8569] xt_l2tp: missing protocol rule (udp|l2tpip) [ 140.147367][ T8340] hsr_slave_0: entered promiscuous mode [ 140.184506][ T8340] hsr_slave_1: entered promiscuous mode [ 140.218612][ T8340] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 140.237230][ T8340] Cannot create hsr debugfs directory [ 140.299698][ T8573] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 140.398997][ T8585] batadv1: entered allmulticast mode [ 141.088401][ T8623] xt_TCPMSS: Only works on TCP SYN packets [ 141.433392][ T8636] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 141.442400][ T8636] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 141.517727][ T8644] netlink: 'syz.4.761': attribute type 8 has an invalid length. [ 141.604846][ T8648] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.941638][ T5843] Bluetooth: hci4: command tx timeout [ 142.288503][ T8685] __nla_validate_parse: 7 callbacks suppressed [ 142.288522][ T8685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.771'. [ 142.367480][ T8685] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 142.563048][ T8690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.773'. [ 142.616927][ T8694] netlink: 4 bytes leftover after parsing attributes in process `syz.0.773'. [ 142.648803][ T8708] netlink: 12 bytes leftover after parsing attributes in process `syz.4.778'. [ 142.701190][ T8706] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.713510][ T8706] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.722344][ T8706] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.732015][ T8706] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.769744][ T8706] vxlan0: entered promiscuous mode [ 142.789719][ T8706] vxlan0: entered allmulticast mode [ 142.807148][ T8708] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.815161][ T8708] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.928749][ T8711] tipc: Enabling not permitted [ 142.935814][ T8711] tipc: Enabling of bearer rejected, failed to enable media [ 142.957049][ T8340] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 143.057769][ T8340] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 143.087221][ T8340] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 143.121033][ T8340] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 143.266958][ T8724] vlan4: entered promiscuous mode [ 143.296183][ T8724] bridge0: entered promiscuous mode [ 143.315233][ T8724] vlan4: entered allmulticast mode [ 143.343633][ T8724] bridge0: entered allmulticast mode [ 143.473327][ T8742] bridge0: port 3(batadv1) entered blocking state [ 143.480123][ T8742] bridge0: port 3(batadv1) entered disabled state [ 143.490748][ T8742] batadv1: entered allmulticast mode [ 143.516574][ T8742] batadv1: entered promiscuous mode [ 143.800127][ T8340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.843888][ T8762] xt_CT: You must specify a L4 protocol and not use inversions on it [ 143.854273][ T8756] netlink: 64 bytes leftover after parsing attributes in process `syz.4.787'. [ 143.906911][ T8340] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.950849][ T6605] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 143.960859][ T6605] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 144.047261][ T6608] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.054529][ T6608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.111809][ T6608] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.119020][ T6608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.411909][ T8340] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 144.585740][ T8789] netlink: 28 bytes leftover after parsing attributes in process `syz.3.794'. [ 144.610998][ T8789] netlink: 4 bytes leftover after parsing attributes in process `syz.3.794'. [ 144.619965][ T8789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.794'. [ 144.708381][ T8795] netlink: 12 bytes leftover after parsing attributes in process `syz.4.795'. [ 144.858960][ T8340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.950007][ T8810] netlink: 4388 bytes leftover after parsing attributes in process `syz.4.798'. [ 145.040229][ T8340] veth0_vlan: entered promiscuous mode [ 145.090373][ T8340] veth1_vlan: entered promiscuous mode [ 145.136630][ T30] audit: type=1107 audit(1748492131.270:3): pid=8819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='EÜ'üax8y¢\+¹§R…¯2—"'ÎL„÷÷G' [ 145.239991][ T8816] pim6reg527: entered allmulticast mode [ 145.267571][ T8340] veth0_macvtap: entered promiscuous mode [ 145.322439][ T8340] veth1_macvtap: entered promiscuous mode [ 145.404175][ T8340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.462848][ T8340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.499029][ T8340] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.529666][ T8340] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.569267][ T8340] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.580031][ T8340] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.777872][ T8850] batadv0: entered promiscuous mode [ 145.799225][ T8850] batadv0: left promiscuous mode [ 146.040143][ T8857] sch_tbf: burst 0 is lower than device bridge_slave_0 mtu (1514) ! [ 146.077413][ T6605] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.107832][ T6605] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.286295][ T6626] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.337243][ T6626] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.494572][ T5843] Bluetooth: hci4: command tx timeout [ 148.129646][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 148.156178][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 148.176550][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 148.189631][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 148.199755][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 149.557366][ T6602] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.706013][ T6602] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.759198][ T8969] netlink: 'syz.3.825': attribute type 10 has an invalid length. [ 149.897632][ T6602] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.058811][ T8985] __nla_validate_parse: 5 callbacks suppressed [ 150.058829][ T8985] netlink: 32 bytes leftover after parsing attributes in process `syz.4.830'. [ 150.209815][ T6602] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.251286][ T55] Bluetooth: hci4: command tx timeout [ 150.377827][ T9002] netlink: 12 bytes leftover after parsing attributes in process `syz.3.835'. [ 150.404238][ T8977] syz.0.828 (8977) used greatest stack depth: 16424 bytes left [ 150.454401][ T9005] xfrm0: entered promiscuous mode [ 150.469708][ T9005] xfrm0: entered allmulticast mode [ 150.561902][ T9009] netlink: 236 bytes leftover after parsing attributes in process `syz.2.834'. [ 151.132206][ T9019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.838'. [ 151.157541][ T8940] chnl_net:caif_netlink_parms(): no params data found [ 151.362200][ T9025] netlink: 28 bytes leftover after parsing attributes in process `syz.3.839'. [ 151.377196][ T9025] netlink: 'syz.3.839': attribute type 7 has an invalid length. [ 151.385980][ T9025] netlink: 'syz.3.839': attribute type 8 has an invalid length. [ 151.393864][ T9025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.839'. [ 151.437482][ T6602] bridge_slave_1: left allmulticast mode [ 151.460135][ T6602] bridge_slave_1: left promiscuous mode [ 151.484818][ T6602] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.540145][ T6602] bridge_slave_0: left allmulticast mode [ 151.573219][ T6602] bridge_slave_0: left promiscuous mode [ 151.596764][ T6602] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.635285][ T9031] openvswitch: netlink: Missing key (keys=40, expected=100) [ 152.189018][ T9052] netlink: 356 bytes leftover after parsing attributes in process `syz.2.848'. [ 152.215978][ T6602] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.227756][ T6602] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.238667][ T6602] bond0 (unregistering): Released all slaves [ 152.341231][ T55] Bluetooth: hci4: command tx timeout [ 152.469093][ T9061] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 152.519665][ T8940] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.532561][ T8940] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.539998][ T8940] bridge_slave_0: entered allmulticast mode [ 152.564027][ T8940] bridge_slave_0: entered promiscuous mode [ 152.607596][ T9068] gretap0: entered promiscuous mode [ 152.621272][ T9068] macsec0: entered promiscuous mode [ 152.643813][ T8940] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.661361][ T8940] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.678841][ T8940] bridge_slave_1: entered allmulticast mode [ 152.691761][ T8940] bridge_slave_1: entered promiscuous mode [ 152.828066][ T9079] netlink: 32 bytes leftover after parsing attributes in process `syz.3.854'. [ 152.885550][ T6602] hsr_slave_0: left promiscuous mode [ 152.897606][ T6602] hsr_slave_1: left promiscuous mode [ 152.915443][ T6602] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.941513][ T6602] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.962373][ T6602] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.984681][ T6602] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.098273][ T6602] veth1_macvtap: left promiscuous mode [ 153.113381][ T6602] veth0_macvtap: left promiscuous mode [ 153.125827][ T6602] veth1_vlan: left promiscuous mode [ 153.136433][ T6602] veth0_vlan: left promiscuous mode [ 153.774732][ T6602] team0 (unregistering): Port device team_slave_1 removed [ 153.813587][ T6602] team0 (unregistering): Port device team_slave_0 removed [ 154.157512][ T9081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.856'. [ 154.197229][ T8940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.327485][ T8940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.410993][ T55] Bluetooth: hci4: command tx timeout [ 154.434699][ T8940] team0: Port device team_slave_0 added [ 154.504529][ T8940] team0: Port device team_slave_1 added [ 154.796850][ T8940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.823351][ T8940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.905632][ T9140] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 154.923787][ T5919] IPVS: starting estimator thread 0... [ 154.941063][ T8940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.060604][ T9143] IPVS: using max 30 ests per chain, 72000 per kthread [ 155.102311][ T8940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.127956][ T8940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.175989][ T8940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.296294][ T9158] netlink: 20 bytes leftover after parsing attributes in process `syz.2.872'. [ 155.323454][ T9158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.872'. [ 155.470890][ T9166] netlink: 104 bytes leftover after parsing attributes in process `syz.4.874'. [ 155.496400][ T9160] netlink: 'syz.3.873': attribute type 7 has an invalid length. [ 155.529519][ T8940] hsr_slave_0: entered promiscuous mode [ 155.578143][ T8940] hsr_slave_1: entered promiscuous mode [ 155.600313][ T8940] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.609101][ T9174] netlink: 36 bytes leftover after parsing attributes in process `syz.2.876'. [ 155.621045][ T8940] Cannot create hsr debugfs directory [ 155.672389][ T9171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.875'. [ 155.759068][ T9183] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 156.465353][ T9174] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 156.493251][ T55] Bluetooth: hci4: command tx timeout [ 157.091855][ T9246] netlink: 'syz.2.888': attribute type 12 has an invalid length. [ 157.113787][ T9245] netlink: 8 bytes leftover after parsing attributes in process `syz.4.886'. [ 157.130881][ T9246] netlink: 132 bytes leftover after parsing attributes in process `syz.2.888'. [ 157.262740][ T9250] netlink: 36 bytes leftover after parsing attributes in process `syz.0.889'. [ 157.355676][ T9254] netlink: 'syz.2.891': attribute type 10 has an invalid length. [ 157.364115][ T9254] netlink: 40 bytes leftover after parsing attributes in process `syz.2.891'. [ 157.584521][ T9254] dummy0: entered promiscuous mode [ 157.599896][ T9254] bridge0: port 3(dummy0) entered blocking state [ 157.615272][ T9254] bridge0: port 3(dummy0) entered disabled state [ 157.624869][ T9254] dummy0: entered allmulticast mode [ 157.843901][ T9274] netlink: 12 bytes leftover after parsing attributes in process `syz.4.895'. [ 158.155272][ T8940] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 158.197902][ T8940] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 158.245327][ T8940] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 158.284268][ T9296] xt_hashlimit: size too large, truncated to 1048576 [ 158.292098][ T8940] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 158.316088][ T9299] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 158.627361][ T8940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.743911][ T8940] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.797322][ T6626] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.804537][ T6626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.866641][ T9322] ip6gre1: entered allmulticast mode [ 158.962960][ T6630] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.970172][ T6630] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.038873][ T9329] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.092862][ T9322] netlink: 'syz.3.908': attribute type 1 has an invalid length. [ 159.125936][ T9322] netlink: 'syz.3.908': attribute type 1 has an invalid length. [ 159.827624][ T8940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.047360][ T8940] veth0_vlan: entered promiscuous mode [ 160.099175][ T8940] veth1_vlan: entered promiscuous mode [ 160.339597][ T8940] veth0_macvtap: entered promiscuous mode [ 160.384913][ T8940] veth1_macvtap: entered promiscuous mode [ 160.497533][ T8940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.587068][ T9406] __nla_validate_parse: 9 callbacks suppressed [ 160.587085][ T9406] netlink: 36 bytes leftover after parsing attributes in process `syz.2.930'. [ 160.593846][ T8940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.631843][ T8940] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.654903][ T9415] sctp: [Deprecated]: syz.0.932 (pid 9415) Use of struct sctp_assoc_value in delayed_ack socket option. [ 160.654903][ T9415] Use struct sctp_sack_info instead [ 160.678460][ T8940] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.690363][ T9416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.931'. [ 160.691583][ T8940] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.742442][ T8940] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.903177][ T9422] lo speed is unknown, defaulting to 1000 [ 160.912293][ T9422] lo speed is unknown, defaulting to 1000 [ 160.948102][ T9422] lo speed is unknown, defaulting to 1000 [ 161.182469][ T6605] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.209227][ T6605] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.399406][ T6605] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.440232][ T6605] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.802820][ T5201] udevd[5201]: worker [5993] terminated by signal 33 (Unknown signal 33) [ 161.816316][ T9458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.939'. [ 161.829698][ T5201] udevd[5201]: worker [5993] failed while handling '/devices/virtual/block/loop2' [ 162.001310][ T9468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.940'. [ 162.068447][ T9422] infiniband syz0: set active [ 162.073766][ T5889] lo speed is unknown, defaulting to 1000 [ 162.086404][ T9422] infiniband syz0: added lo [ 162.093744][ T9422] syz0: rxe_create_cq: returned err = -12 [ 162.099680][ T9422] infiniband syz0: Couldn't create ib_mad CQ [ 162.122245][ T9422] infiniband syz0: Couldn't open port 1 [ 162.240198][ T9422] RDS/IB: syz0: added [ 162.269155][ T9422] smc: adding ib device syz0 with port count 1 [ 162.279661][ T9470] netlink: 12 bytes leftover after parsing attributes in process `syz.4.940'. [ 162.305233][ T9422] smc: ib device syz0 port 1 has pnetid [ 162.354193][ T6605] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.452453][ T5889] lo speed is unknown, defaulting to 1000 [ 162.459040][ T9422] lo speed is unknown, defaulting to 1000 [ 162.593545][ T6605] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.787174][ T6605] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.809296][ T9488] netlink: 20 bytes leftover after parsing attributes in process `syz.2.945'. [ 162.862336][ T9493] netlink: 48 bytes leftover after parsing attributes in process `syz.2.945'. [ 163.028703][ T6605] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.350026][ T6605] bridge_slave_1: left allmulticast mode [ 163.377391][ T6605] bridge_slave_1: left promiscuous mode [ 163.408906][ T6605] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.443466][ T6605] bridge_slave_0: left allmulticast mode [ 163.473404][ T6605] bridge_slave_0: left promiscuous mode [ 163.500324][ T6605] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.684929][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 163.695072][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 163.704514][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 163.714376][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 163.722712][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 163.980971][ T9533] netlink: 24 bytes leftover after parsing attributes in process `syz.4.951'. [ 164.302957][ T6605] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.314738][ T6605] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.331868][ T6605] bond0 (unregistering): Released all slaves [ 164.391381][ T9422] lo speed is unknown, defaulting to 1000 [ 164.410958][ T9533] netlink: 'syz.4.951': attribute type 1 has an invalid length. [ 164.418661][ T9533] netlink: 'syz.4.951': attribute type 2 has an invalid length. [ 164.451384][ T9533] netlink: 16 bytes leftover after parsing attributes in process `syz.4.951'. [ 165.122404][ T9422] lo speed is unknown, defaulting to 1000 [ 165.270270][ T9575] xt_CT: No such helper "snmp" [ 165.487964][ T9595] netlink: 'syz.2.964': attribute type 29 has an invalid length. [ 165.512618][ T9595] netlink: 4 bytes leftover after parsing attributes in process `syz.2.964'. [ 165.674768][ T9603] netlink: 40 bytes leftover after parsing attributes in process `syz.0.967'. [ 165.692037][ T9605] netlink: 'syz.2.966': attribute type 2 has an invalid length. [ 165.694975][ T9607] netlink: 92 bytes leftover after parsing attributes in process `syz.2.966'. [ 165.731637][ T9605] netlink: 'syz.2.966': attribute type 8 has an invalid length. [ 165.739425][ T9605] netlink: 132 bytes leftover after parsing attributes in process `syz.2.966'. [ 165.782843][ T55] Bluetooth: hci4: command tx timeout [ 166.003581][ T9525] lo speed is unknown, defaulting to 1000 [ 166.760287][ T9422] lo speed is unknown, defaulting to 1000 [ 167.171480][ T9525] chnl_net:caif_netlink_parms(): no params data found [ 167.282644][ T9677] ieee802154 phy0 wpan0: encryption failed: -22 [ 167.496393][ T9686] netlink: 4 bytes leftover after parsing attributes in process `syz.2.986'. [ 167.637573][ T9525] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.653821][ T9525] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.670987][ T9525] bridge_slave_0: entered allmulticast mode [ 167.700191][ T9525] bridge_slave_0: entered promiscuous mode [ 167.725736][ T9525] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.740945][ T9525] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.757174][ T9525] bridge_slave_1: entered allmulticast mode [ 167.767978][ T9698] netlink: 72 bytes leftover after parsing attributes in process `syz.2.988'. [ 167.787049][ T9525] bridge_slave_1: entered promiscuous mode [ 167.811657][ T9422] lo speed is unknown, defaulting to 1000 [ 167.850784][ T55] Bluetooth: hci4: command tx timeout [ 167.990892][ T9705] netlink: zone id is out of range [ 168.010635][ T9705] netlink: zone id is out of range [ 168.015826][ T9705] netlink: zone id is out of range [ 168.043700][ T9705] netlink: zone id is out of range [ 168.048891][ T9705] netlink: zone id is out of range [ 168.077518][ T9525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.078355][ T9705] netlink: zone id is out of range [ 168.101817][ T9707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.990'. [ 168.121592][ T9707] netlink: 4 bytes leftover after parsing attributes in process `syz.4.990'. [ 168.134604][ T9705] netlink: zone id is out of range [ 168.134714][ T9525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.150605][ T9705] netlink: zone id is out of range [ 168.160814][ T9705] netlink: zone id is out of range [ 168.179752][ T9705] netlink: zone id is out of range [ 168.346666][ T9525] team0: Port device team_slave_0 added [ 168.387588][ T9525] team0: Port device team_slave_1 added [ 168.499248][ T9726] netlink: 3 bytes leftover after parsing attributes in process `syz.4.993'. [ 168.547914][ T9722] netlink: 4 bytes leftover after parsing attributes in process `syz.0.994'. [ 168.718343][ T9731] netlink: 'syz.4.996': attribute type 5 has an invalid length. [ 168.903021][ T9525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.926823][ T9525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.960280][ T9525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.047686][ T9743] netlink: 12 bytes leftover after parsing attributes in process `syz.3.999'. [ 169.072180][ T9525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.094083][ T9525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.170372][ T9525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.225606][ T9743] veth1_to_team: entered promiscuous mode [ 169.343624][ T6605] hsr_slave_0: left promiscuous mode [ 169.361498][ T6605] hsr_slave_1: left promiscuous mode [ 169.378495][ T6605] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.399503][ T6605] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.437116][ T6605] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.457039][ T6605] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.508522][ T6605] veth1_macvtap: left promiscuous mode [ 169.514478][ T6605] veth0_macvtap: left promiscuous mode [ 169.520115][ T6605] veth1_vlan: left promiscuous mode [ 169.526144][ T6605] veth0_vlan: left promiscuous mode [ 169.932354][ T55] Bluetooth: hci4: command tx timeout [ 169.967129][ T6605] team0 (unregistering): Port device team_slave_1 removed [ 170.006546][ T6605] team0 (unregistering): Port device team_slave_0 removed [ 170.498873][ T9755] tipc: Started in network mode [ 170.504860][ T9755] tipc: Node identity , cluster identity 4711 [ 170.649365][ T9781] netlink: 'syz.2.1009': attribute type 1 has an invalid length. [ 170.699264][ T9768] lo speed is unknown, defaulting to 1000 [ 170.701871][ T9785] netlink: 'syz.2.1009': attribute type 1 has an invalid length. [ 170.732887][ T9525] hsr_slave_0: entered promiscuous mode [ 170.761979][ T9525] hsr_slave_1: entered promiscuous mode [ 170.788848][ T9525] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 170.821160][ T9525] Cannot create hsr debugfs directory [ 171.212145][ T9804] vlan4: entered promiscuous mode [ 171.223207][ T9804] bond0: entered promiscuous mode [ 171.234595][ T9804] bond_slave_0: entered promiscuous mode [ 171.251353][ T9804] bond_slave_1: entered promiscuous mode [ 171.258888][ T9804] team0: entered promiscuous mode [ 171.283642][ T9804] team_slave_0: entered promiscuous mode [ 171.303541][ T9804] team_slave_1: entered promiscuous mode [ 171.873069][ T9825] netlink: 'syz.4.1017': attribute type 2 has an invalid length. [ 171.888761][ T9828] __nla_validate_parse: 2 callbacks suppressed [ 171.888777][ T9828] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1018'. [ 171.921221][ T9831] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1019'. [ 172.010971][ T55] Bluetooth: hci4: command tx timeout [ 172.552522][ T9852] netlink: 'syz.3.1025': attribute type 1 has an invalid length. [ 172.581444][ T9852] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1025'. [ 173.049113][ T9525] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 173.084160][ T9525] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 173.129235][ T9525] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 173.167830][ T9525] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 173.429988][ T9879] net_ratelimit: 396 callbacks suppressed [ 173.430005][ T9879] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 173.484765][ T9525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.505182][ T9884] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1036'. [ 173.549175][ T9525] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.645225][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.652485][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.684493][ T9894] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1040'. [ 173.725799][ T6630] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.733033][ T6630] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.770013][ T9894] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1040'. [ 173.818798][ T9900] Cannot find del_set index 17 as target [ 173.909222][ T9525] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 173.978667][ T9912] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.015503][ T9900] sch_fq: defrate 0 ignored. [ 174.208103][ T9919] lo speed is unknown, defaulting to 1000 [ 174.640217][ T9525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.672006][ T9939] netlink: 'syz.4.1048': attribute type 1 has an invalid length. [ 174.854238][ T9525] veth0_vlan: entered promiscuous mode [ 174.889521][ T9525] veth1_vlan: entered promiscuous mode [ 174.962372][ T9948] macvlan2: entered promiscuous mode [ 175.162058][ T9959] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1054'. [ 175.208452][ T9959] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1054'. [ 175.269909][ T9525] veth0_macvtap: entered promiscuous mode [ 175.300277][ T9525] veth1_macvtap: entered promiscuous mode [ 175.346041][ T9968] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1056'. [ 175.401353][ T9525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.423818][ T9525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.458077][ T9525] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.496768][ T9525] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.528728][ T9525] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.572620][ T9525] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.899139][ T6608] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.931643][ T6608] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.038374][ T6630] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.069817][ T6630] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.388072][T10009] ªªªªªª: renamed from lo [ 176.398384][T10006] xt_socket: unknown flags 0x50 [ 176.649002][T10020] netlink: 'syz.0.1068': attribute type 13 has an invalid length. [ 177.023598][ T6630] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.068704][T10025] lo speed is unknown, defaulting to 1000 [ 177.219745][ T6630] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.533129][ T6630] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.734077][ T6630] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.956157][T10063] netlink: 'syz.4.1074': attribute type 21 has an invalid length. [ 178.019623][T10063] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1074'. [ 178.288320][T10077] openvswitch: netlink: Flow actions attr not present in new flow. [ 178.312128][T10077] netlink: 'syz.3.1076': attribute type 1 has an invalid length. [ 178.320133][T10077] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1076'. [ 178.427989][ T6630] bridge_slave_1: left allmulticast mode [ 178.447212][ T6630] bridge_slave_1: left promiscuous mode [ 178.481382][ T6630] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.578537][ T6630] bridge_slave_0: left allmulticast mode [ 178.605184][ T6630] bridge_slave_0: left promiscuous mode [ 178.634945][ T6630] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.766287][T10096] netlink: 16162 bytes leftover after parsing attributes in process `syz.4.1078'. [ 178.828701][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 178.838685][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 178.847837][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 178.860895][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 178.874434][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 178.895249][T10104] netlink: 'syz.4.1078': attribute type 2 has an invalid length. [ 179.185563][ T6630] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.197318][ T6630] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.207459][ T6630] bond0 (unregistering): Released all slaves [ 179.219511][T10082] netlink: 'syz.3.1080': attribute type 3 has an invalid length. [ 179.231702][T10099] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1081'. [ 179.241958][T10099] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1081'. [ 179.281259][T10103] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1081'. [ 179.514376][T10112] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1085'. [ 179.574066][T10118] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1084'. [ 179.631853][T10122] netlink: 'syz.0.1086': attribute type 3 has an invalid length. [ 179.760311][T10100] lo speed is unknown, defaulting to 1000 [ 179.944273][T10134] ip6t_srh: unknown srh match flags 536B [ 180.734133][T10168] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1096'. [ 180.977522][ T55] Bluetooth: hci4: command tx timeout [ 181.048460][T10182] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1098'. [ 181.315544][ T6630] hsr_slave_0: left promiscuous mode [ 181.356659][ T6630] hsr_slave_1: left promiscuous mode [ 181.378240][ T6630] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.389560][ T6630] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.399488][ T6630] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.407171][ T6630] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.438460][ T6630] veth1_macvtap: left promiscuous mode [ 181.446545][ T6630] veth0_macvtap: left promiscuous mode [ 181.453267][ T6630] veth1_vlan: left promiscuous mode [ 181.458730][ T6630] veth0_vlan: left promiscuous mode [ 181.497116][T10202] openvswitch: netlink: Message has 5 unknown bytes. [ 181.558305][T10203] netlink: 'syz.0.1101': attribute type 10 has an invalid length. [ 181.927227][ T6630] team0 (unregistering): Port device team_slave_1 removed [ 181.965601][ T6630] team0 (unregistering): Port device team_slave_0 removed [ 182.373524][T10203] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 182.448331][T10203] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 182.484998][T10216] Bluetooth: MGMT ver 1.23 [ 182.907558][T10100] chnl_net:caif_netlink_parms(): no params data found [ 183.050614][ T55] Bluetooth: hci4: command tx timeout [ 183.286661][T10100] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.322299][T10100] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.357348][T10100] bridge_slave_0: entered allmulticast mode [ 183.383077][T10100] bridge_slave_0: entered promiscuous mode [ 183.435651][T10100] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.445881][T10260] __nla_validate_parse: 4 callbacks suppressed [ 183.445897][T10260] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1116'. [ 183.461408][T10100] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.469309][T10100] bridge_slave_1: entered allmulticast mode [ 183.504850][T10100] bridge_slave_1: entered promiscuous mode [ 183.526032][T10274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1119'. [ 183.739449][T10100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.775167][T10100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.781533][T10279] netlink: 'syz.0.1120': attribute type 32 has an invalid length. [ 183.853464][T10279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1120'. [ 183.945822][T10291] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 183.995521][T10100] team0: Port device team_slave_0 added [ 184.025080][T10100] team0: Port device team_slave_1 added [ 184.093595][T10289] xt_CT: No such helper "snmp" [ 184.159124][T10305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1126'. [ 184.242997][T10100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.283781][T10100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.369192][T10100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.428311][T10100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.457603][T10100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.495621][T10321] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1129'. [ 184.557264][T10100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.635412][T10333] xt_l2tp: wrong L2TP version: 0 [ 184.644411][T10334] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1130'. [ 184.927355][T10100] hsr_slave_0: entered promiscuous mode [ 184.954686][T10100] hsr_slave_1: entered promiscuous mode [ 184.958696][T10348] xt_cgroup: xt_cgroup: no path or classid specified [ 184.978142][T10100] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.997113][T10100] Cannot create hsr debugfs directory [ 185.134917][ T55] Bluetooth: hci4: command tx timeout [ 185.216569][T10356] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 185.517158][T10378] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1142'. [ 185.736395][T10391] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1146'. [ 185.809057][T10382] lo speed is unknown, defaulting to 1000 [ 185.965309][T10398] xt_recent: Unsupported userspace flags (00000061) [ 186.552443][T10381] lo speed is unknown, defaulting to 1000 [ 186.732451][T10424] netlink: 'syz.3.1156': attribute type 5 has an invalid length. [ 186.836717][T10434] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1158'. [ 186.996516][T10100] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 187.028692][T10437] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1159'. [ 187.030327][T10100] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 187.054842][T10100] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 187.090694][T10100] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 187.212791][ T55] Bluetooth: hci4: command tx timeout [ 187.920205][T10464] ip6t_srh: unknown srh invflags 5F00 [ 187.980144][T10100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.325941][T10100] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.355887][T10474] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 188.402657][ T6602] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.409940][ T6602] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.438199][ T6602] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.445545][ T6602] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.887325][T10496] __nla_validate_parse: 2 callbacks suppressed [ 188.887343][T10496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1175'. [ 188.964187][T10496] dummy0: left allmulticast mode [ 188.991639][T10496] bridge0: port 3(dummy0) entered disabled state [ 189.034432][T10496] bridge_slave_1: left allmulticast mode [ 189.050649][T10496] bridge_slave_1: left promiscuous mode [ 189.076678][T10496] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.116436][T10496] bridge_slave_0: left allmulticast mode [ 189.123769][T10496] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.629285][T10528] x_tables: duplicate underflow at hook 2 [ 189.689553][T10100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.922612][T10100] veth0_vlan: entered promiscuous mode [ 190.016743][T10554] syz_tun: entered allmulticast mode [ 190.026207][T10100] veth1_vlan: entered promiscuous mode [ 190.114366][T10555] syz_tun: left allmulticast mode [ 190.176398][T10100] veth0_macvtap: entered promiscuous mode [ 190.232469][T10100] veth1_macvtap: entered promiscuous mode [ 190.374684][T10566] xt_ipcomp: unknown flags B [ 190.402109][T10100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.437714][T10100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.476699][T10100] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.478185][T10576] netlink: 'syz.2.1195': attribute type 1 has an invalid length. [ 190.495312][T10100] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.534138][T10100] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.561080][T10100] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.631061][T10583] netlink: 'syz.4.1196': attribute type 29 has an invalid length. [ 190.651894][T10583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1196'. [ 190.691512][T10582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1195'. [ 190.735545][T10582] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1195'. [ 190.758741][T10585] netlink: 'syz.4.1196': attribute type 29 has an invalid length. [ 190.772897][T10576] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1195'. [ 190.783598][T10585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1196'. [ 191.047556][ T6630] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.073512][T10602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1199'. [ 191.086405][ T6630] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.153581][T10607] netlink: 'syz.3.1202': attribute type 5 has an invalid length. [ 191.167359][ T6602] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.175721][T10601] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1201'. [ 191.220285][ T6602] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.341785][T10621] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1203'. [ 191.751229][T10637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1207'. [ 191.934723][ T75] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.138961][ T75] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.268478][ T75] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.345345][ T75] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.647342][ T75] bridge_slave_1: left allmulticast mode [ 192.664101][ T75] bridge_slave_1: left promiscuous mode [ 192.669905][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.681744][ T75] bridge_slave_0: left allmulticast mode [ 192.687432][ T75] bridge_slave_0: left promiscuous mode [ 192.694784][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.180255][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.196562][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.208462][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 193.218773][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 193.219936][ T75] bond0 (unregistering): Released all slaves [ 193.227356][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 193.241853][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 193.251339][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 193.475109][T10696] netlink: 'syz.3.1216': attribute type 10 has an invalid length. [ 193.598649][T10684] lo speed is unknown, defaulting to 1000 [ 193.606025][T10696] syz_tun: entered promiscuous mode [ 193.632469][T10706] netlink: 'syz.2.1217': attribute type 13 has an invalid length. [ 193.661738][T10706] netlink: 'syz.2.1217': attribute type 17 has an invalid length. [ 193.895764][T10720] openvswitch: netlink: Missing key (keys=40, expected=80) [ 193.947693][T10720] __nla_validate_parse: 5 callbacks suppressed [ 193.947711][T10720] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1222'. [ 193.988015][T10706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.041329][T10720] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1222'. [ 194.062920][T10706] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.111973][T10706] dummy0: left promiscuous mode [ 194.168824][T10706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.219730][T10706] bridge_slave_0: left promiscuous mode [ 194.298170][T10706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.338428][T10706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.356760][T10706] xfrm0: left promiscuous mode [ 194.365275][T10706] xfrm0: left allmulticast mode [ 194.388191][T10706] 0·: left allmulticast mode [ 194.396973][T10706] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 194.409135][T10706] hsr0: Slave B (c0·) is not up; please bring it up to get a fully working HSR network [ 194.437327][T10706] veth1_macvtap: left promiscuous mode [ 194.455324][T10706] veth0_macvtap: left promiscuous mode [ 194.463417][T10706] veth0_macvtap: entered promiscuous mode [ 194.482638][T10706] veth1_macvtap: entered promiscuous mode [ 194.495384][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.502472][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.519258][T10706] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.529847][T10706] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.541458][T10706] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.569472][T10706] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 194.583786][T10706] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 194.639513][T10720] gretap2: entered promiscuous mode [ 194.646057][T10720] gretap2: entered allmulticast mode [ 195.016497][T10755] bridge_slave_0: left allmulticast mode [ 195.037795][T10755] bridge_slave_0: left promiscuous mode [ 195.063745][T10755] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.096650][T10755] bridge_slave_1: left allmulticast mode [ 195.123083][T10755] bridge_slave_1: left promiscuous mode [ 195.129821][T10755] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.155346][T10764] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1229'. [ 195.225738][T10755] bond0: (slave bond_slave_0): Releasing backup interface [ 195.275751][T10755] bond0: (slave bond_slave_1): Releasing backup interface [ 195.291959][ T55] Bluetooth: hci4: command tx timeout [ 195.312351][T10755] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.320290][T10755] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.336355][T10755] bond0: (slave wlan1): Releasing backup interface [ 195.356527][T10755] batadv1: left allmulticast mode [ 195.366567][T10755] batadv1: left promiscuous mode [ 195.373299][T10755] bridge0: port 3(batadv1) entered disabled state [ 195.415657][ T75] hsr_slave_0: left promiscuous mode [ 195.455361][ T75] hsr_slave_1: left promiscuous mode [ 195.463042][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.480828][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.491651][T10777] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1233'. [ 195.505075][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.522747][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.559579][ T75] veth1_macvtap: left promiscuous mode [ 195.576786][ T75] veth0_macvtap: left promiscuous mode [ 195.584433][ T75] veth1_vlan: left promiscuous mode [ 195.593187][ T75] veth0_vlan: left promiscuous mode [ 196.063330][ T75] team0 (unregistering): Port device team_slave_1 removed [ 196.107808][ T75] team0 (unregistering): Port device team_slave_0 removed [ 196.867652][T10802] : entered promiscuous mode [ 196.972391][T10814] nbd: device at index 2 is going down [ 197.109482][T10825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1245'. [ 197.139061][T10827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1245'. [ 197.279365][T10834] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1246'. [ 197.312374][T10819] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1243'. [ 197.371771][ T55] Bluetooth: hci4: command tx timeout [ 197.634006][T10684] chnl_net:caif_netlink_parms(): no params data found [ 197.675405][T10853] netlink: 'syz.0.1252': attribute type 1 has an invalid length. [ 197.850720][T10858] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1252'. [ 197.867525][T10855] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1251'. [ 198.067127][T10684] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.075591][T10684] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.084165][T10684] bridge_slave_0: entered allmulticast mode [ 198.093346][T10684] bridge_slave_0: entered promiscuous mode [ 198.108123][T10684] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.116706][T10684] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.124487][T10684] bridge_slave_1: entered allmulticast mode [ 198.133102][T10684] bridge_slave_1: entered promiscuous mode [ 198.257679][T10880] set match dimension is over the limit! [ 198.324151][T10684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.373845][T10684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.701764][T10684] team0: Port device team_slave_0 added [ 198.737048][T10684] team0: Port device team_slave_1 added [ 198.743590][T10906] IPVS: set_ctl: invalid protocol: 46 172.20.20.170:20004 [ 198.907302][T10684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.926166][T10684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.003780][T10916] __nla_validate_parse: 8 callbacks suppressed [ 199.003797][T10916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1270'. [ 199.030479][T10684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.075486][T10918] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1271'. [ 199.076625][T10684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.107240][T10684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.137077][T10925] xt_HMARK: spi-set and port-set can't be combined [ 199.151363][T10684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.174452][T10926] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1273'. [ 199.372517][T10684] hsr_slave_0: entered promiscuous mode [ 199.382682][T10684] hsr_slave_1: entered promiscuous mode [ 199.389176][T10684] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 199.404634][T10684] Cannot create hsr debugfs directory [ 199.417626][T10937] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1276'. [ 199.450950][ T55] Bluetooth: hci4: command tx timeout [ 199.563389][T10934] veth3: entered promiscuous mode [ 199.568868][T10941] bond0: option mode: unable to set because the bond device has slaves [ 199.684449][T10936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1277'. [ 199.853759][T10949] xt_CT: No such helper "snmp" [ 200.686916][T11002] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 200.857635][T11008] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1296'. [ 200.897345][T10684] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 200.913451][T10684] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 200.942815][T10684] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 200.957325][T10684] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 201.180637][T11020] tun0: tun_chr_ioctl cmd 1074025675 [ 201.188668][T11020] tun0: persist disabled [ 201.252320][T11024] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1302'. [ 201.261879][T10684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.285925][T10684] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.296467][T11024] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 201.366490][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.373746][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.407055][T11024] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1302'. [ 201.438407][T11030] macvlan1: entered allmulticast mode [ 201.475889][T11024] netlink: 'syz.0.1302': attribute type 9 has an invalid length. [ 201.485405][ T6605] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.492569][ T6605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.531661][ T5844] Bluetooth: hci4: command tx timeout [ 201.569796][T11032] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 201.660039][T10684] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 201.697844][T11044] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1304'. [ 201.698760][ T5840] Bluetooth: hci1: command 0x0406 tx timeout [ 201.707454][ T5844] Bluetooth: hci2: command 0x0406 tx timeout [ 201.707524][ T5844] Bluetooth: hci3: command 0x0406 tx timeout [ 201.749871][T11037] IPVS: Error connecting to the multicast addr [ 201.901823][T11044] batadv_slave_0: mtu less than device minimum [ 201.912279][T11042] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1306'. [ 202.347616][T10684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.408239][T11074] tipc: Started in network mode [ 202.413707][T11074] tipc: Node identity ac14140f, cluster identity 4711 [ 202.420791][T11074] tipc: New replicast peer: 255.255.255.255 [ 202.427540][T11074] tipc: Enabled bearer , priority 10 [ 202.488725][T10684] veth0_vlan: entered promiscuous mode [ 202.547990][T10684] veth1_vlan: entered promiscuous mode [ 202.633901][T10684] veth0_macvtap: entered promiscuous mode [ 202.658479][T10684] veth1_macvtap: entered promiscuous mode [ 202.737110][ T5843] Bluetooth: hci0: command tx timeout [ 202.804880][T10684] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.864855][T10684] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.907405][T10684] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.934070][T10684] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.953484][T10684] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.990113][T10684] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.125672][T11102] netlink: 'syz.3.1321': attribute type 8 has an invalid length. [ 203.136039][T11104] netlink: 'syz.3.1321': attribute type 8 has an invalid length. [ 203.261957][ T6608] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.269819][ T6608] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.471379][ T6600] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.479251][ T6600] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.540840][ T5889] tipc: Node number set to 2886997007 [ 203.612475][ T5843] Bluetooth: hci4: command tx timeout [ 204.277008][ T6631] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.442885][ T6631] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.565041][ T6631] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.766067][ T6631] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.023705][ T6631] bridge_slave_1: left allmulticast mode [ 205.029438][ T6631] bridge_slave_1: left promiscuous mode [ 205.036251][ T6631] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.045943][ T6631] bridge_slave_0: left allmulticast mode [ 205.052863][ T6631] bridge_slave_0: left promiscuous mode [ 205.058564][ T6631] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.378678][T11149] __nla_validate_parse: 3 callbacks suppressed [ 205.378695][T11149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1332'. [ 205.652374][ T6631] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.675648][ T6631] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.694321][ T6631] bond0 (unregistering): Released all slaves [ 205.912949][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 205.930710][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 205.940684][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 205.963977][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 205.974528][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 206.028119][T11168] x_tables: ip_tables: udp match: only valid for protocol 17 [ 206.042847][T11169] vxcan1: tx drop: invalid sa for name 0x0000000000000002 [ 206.164977][T11179] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1338'. [ 206.183705][T11163] lo speed is unknown, defaulting to 1000 [ 206.646533][T11198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1344'. [ 206.689540][T11191] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1341'. [ 206.861759][T11204] sctp: [Deprecated]: syz.2.1347 (pid 11204) Use of struct sctp_assoc_value in delayed_ack socket option. [ 206.861759][T11204] Use struct sctp_sack_info instead [ 207.037248][T11213] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1350'. [ 207.092471][ T6631] hsr_slave_0: left promiscuous mode [ 207.106967][T11215] netlink: 'syz.4.1351': attribute type 2 has an invalid length. [ 207.116214][ T6631] hsr_slave_1: left promiscuous mode [ 207.134941][ T6631] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.143214][ T6631] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.152427][ T6631] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.159876][ T6631] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.179053][ T6631] veth1_macvtap: left promiscuous mode [ 207.184882][ T6631] veth0_macvtap: left promiscuous mode [ 207.190606][ T6631] veth1_vlan: left promiscuous mode [ 207.195936][ T6631] veth0_vlan: left promiscuous mode [ 207.211633][T11219] netlink: 'syz.0.1352': attribute type 1 has an invalid length. [ 207.219405][T11219] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1352'. [ 207.738542][ T6631] team0 (unregistering): Port device team_slave_1 removed [ 207.777769][ T6631] team0 (unregistering): Port device team_slave_0 removed [ 208.025095][ T5843] Bluetooth: hci4: command tx timeout [ 208.437334][T11163] chnl_net:caif_netlink_parms(): no params data found [ 208.784952][T11163] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.799602][T11163] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.813500][T11163] bridge_slave_0: entered allmulticast mode [ 208.822813][T11163] bridge_slave_0: entered promiscuous mode [ 208.859720][T11163] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.869061][T11163] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.877509][T11163] bridge_slave_1: entered allmulticast mode [ 208.887537][T11163] bridge_slave_1: entered promiscuous mode [ 208.974186][T11269] sch_tbf: burst 1 is lower than device lo mtu (65550) ! [ 209.100813][T11163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.146503][T11163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.343971][T11163] team0: Port device team_slave_0 added [ 209.367366][T11163] team0: Port device team_slave_1 added [ 209.442528][T11290] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1377'. [ 209.532032][T11163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.539143][T11163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.589979][T11163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.609865][T11304] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 209.665481][T11163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.674310][T11163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.707090][T11163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.879843][T11163] hsr_slave_0: entered promiscuous mode [ 209.898134][T11163] hsr_slave_1: entered promiscuous mode [ 209.907843][T11323] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 209.908407][T11163] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.950635][T11163] Cannot create hsr debugfs directory [ 210.091411][ T5843] Bluetooth: hci4: command tx timeout [ 210.208652][T11336] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1387'. [ 210.656996][T11359] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1395'. [ 211.053300][T11385] ipt_REJECT: TCP_RESET invalid for non-tcp [ 211.117814][T11163] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 211.133881][T11163] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 211.167043][T11163] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 211.176843][T11384] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1401'. [ 211.226998][T11163] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 211.415799][T11400] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1407'. [ 211.439400][T11402] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1407'. [ 211.525315][T11163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.574029][T11163] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.612810][ T6608] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.620049][ T6608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.677229][ T6608] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.684674][ T6608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.716019][T11410] openvswitch: netlink: IPv4 tun info is not correct [ 211.753734][T11406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1409'. [ 211.790688][T11406] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1409'. [ 212.171283][ T5843] Bluetooth: hci4: command tx timeout [ 212.606267][T11445] netlink: 'syz.4.1418': attribute type 5 has an invalid length. [ 212.735614][T11163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.795596][T11459] IPVS: set_ctl: invalid protocol: 4 224.0.0.2:0 [ 212.919541][T11461] bond0: (slave bond2): Error -95 calling ndo_bpf [ 212.929829][T11461] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 212.950114][T11469] pim6reg: entered allmulticast mode [ 212.961395][T11469] pim6reg: left allmulticast mode [ 213.015167][T11473] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1423'. [ 213.036175][T11473] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1423'. [ 213.084521][T11163] veth0_vlan: entered promiscuous mode [ 213.098682][T11163] veth1_vlan: entered promiscuous mode [ 213.213076][T11163] veth0_macvtap: entered promiscuous mode [ 213.240270][T11163] veth1_macvtap: entered promiscuous mode [ 213.279336][T11163] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.309477][T11163] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.339646][T11163] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.349013][T11163] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.358424][T11163] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.371451][T11163] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.469359][T11488] netlink: 'syz.3.1427': attribute type 1 has an invalid length. [ 213.518660][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.544341][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.577705][ T6608] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.587429][ T6608] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.904496][T11504] xt_socket: unknown flags 0x3c [ 214.168614][T11515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1437'. [ 214.194521][T11515] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 214.231089][T11515] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 214.367183][T11526] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1441'. [ 214.388169][T11522] delete_channel: no stack [ 214.617723][ T6608] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.701567][T11541] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 214.794946][ T6608] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.988575][ T6608] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.147280][ T6608] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.263468][ T6608] bridge_slave_1: left allmulticast mode [ 215.269762][ T6608] bridge_slave_1: left promiscuous mode [ 215.276570][ T6608] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.287862][ T6608] bridge_slave_0: left allmulticast mode [ 215.294434][ T6608] bridge_slave_0: left promiscuous mode [ 215.300279][ T6608] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.604368][ T6608] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.692102][ T6608] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.722770][ T6608] bond0 (unregistering): Released all slaves [ 215.871608][T11557] unknown channel width for channel at 909000KHz? [ 216.118319][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 216.118803][T11562] 8021q: VLANs not supported on ip6gre0 [ 216.132302][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 216.133096][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 216.149670][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 216.158794][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 216.210105][T11563] lo speed is unknown, defaulting to 1000 [ 216.850115][T11584] netlink: 'syz.0.1461': attribute type 1 has an invalid length. [ 216.875008][T11584] __nla_validate_parse: 2 callbacks suppressed [ 216.875030][T11584] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1461'. [ 216.953673][T11588] netlink: 'syz.4.1463': attribute type 1 has an invalid length. [ 217.156540][T11590] gretap1: entered allmulticast mode [ 217.183509][T11591] mac80211_hwsim hwsim4 syzkaller0: Caught tx_queue_len zero misconfig [ 217.267363][ T6608] hsr_slave_0: left promiscuous mode [ 217.319786][ T6608] hsr_slave_1: left promiscuous mode [ 217.343163][ T6608] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.359369][ T6608] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.388839][ T6608] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.398741][T11614] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1467'. [ 217.408349][ T6608] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.432916][T11615] nbd: must specify a size in bytes for the device [ 217.516060][ T6608] veth1_macvtap: left promiscuous mode [ 217.525018][ T6608] veth0_macvtap: left promiscuous mode [ 217.531819][ T6608] veth1_vlan: left promiscuous mode [ 217.537394][ T6608] veth0_vlan: left promiscuous mode [ 217.995617][ T6608] team0 (unregistering): Port device team_slave_1 removed [ 218.039075][ T6608] team0 (unregistering): Port device team_slave_0 removed [ 218.250942][ T55] Bluetooth: hci4: command tx timeout [ 218.568050][T11614] bond0 (unregistering): Released all slaves [ 218.644936][T11563] chnl_net:caif_netlink_parms(): no params data found [ 218.871987][T11640] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.031937][T11653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.162479][T11653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.182339][T11653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.269196][T11653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.333893][T11563] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.357625][T11563] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.391848][T11563] bridge_slave_0: entered allmulticast mode [ 219.416015][T11563] bridge_slave_0: entered promiscuous mode [ 219.433048][T11563] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.440341][T11563] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.449937][T11563] bridge_slave_1: entered allmulticast mode [ 219.457150][T11563] bridge_slave_1: entered promiscuous mode [ 219.488840][T11667] syz_tun: entered allmulticast mode [ 219.596988][T11563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.619150][T11563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.664522][T11666] syz_tun: left allmulticast mode [ 219.718883][T11563] team0: Port device team_slave_0 added [ 219.750135][T11563] team0: Port device team_slave_1 added [ 219.845953][T11563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.856276][T11563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.888587][T11563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.908601][T11563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.916810][T11563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.958832][T11563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.098360][T11563] hsr_slave_0: entered promiscuous mode [ 220.113905][T11563] hsr_slave_1: entered promiscuous mode [ 220.143874][T11563] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 220.170527][T11563] Cannot create hsr debugfs directory [ 220.331155][ T55] Bluetooth: hci4: command tx timeout [ 220.357046][T11701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1491'. [ 220.900958][T11731] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1501'. [ 220.940034][T11731] netlink: 'syz.3.1501': attribute type 3 has an invalid length. [ 220.941890][T11729] netlink: 'syz.3.1501': attribute type 3 has an invalid length. [ 220.949581][T11731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1501'. [ 220.968436][T11729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1501'. [ 221.016095][T11735] netlink: 'syz.4.1503': attribute type 3 has an invalid length. [ 221.034502][T11735] netlink: 198300 bytes leftover after parsing attributes in process `syz.4.1503'. [ 221.199777][T11563] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 221.224092][T11563] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 221.244583][T11563] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 221.261322][T11563] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 221.436161][T11753] C: renamed from lo (while UP) [ 221.463584][T11753] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 221.524189][T11720] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.534050][T11563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.567151][T11563] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.588701][ T6602] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.595943][ T6602] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.621356][ T6602] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.628624][ T6602] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.872426][T11767] netlink: 13 bytes leftover after parsing attributes in process `syz.0.1511'. [ 222.042182][T11777] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1514'. [ 222.171980][T11563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.398090][T11799] netlink: 'syz.3.1518': attribute type 1 has an invalid length. [ 222.404732][T11563] veth0_vlan: entered promiscuous mode [ 222.411545][ T55] Bluetooth: hci4: command tx timeout [ 222.527821][T11563] veth1_vlan: entered promiscuous mode [ 222.633955][T11817] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1521'. [ 222.653061][T11563] veth0_macvtap: entered promiscuous mode [ 222.675934][T11563] veth1_macvtap: entered promiscuous mode [ 222.749654][T11563] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.796771][T11563] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.851395][T11563] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.879155][T11563] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.895291][T11563] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.917204][T11563] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.944980][T11830] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1528'. [ 222.967498][T11830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1528'. [ 223.049508][T11829] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1525'. [ 223.149223][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.178939][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.255952][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.276069][T11841] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1532'. [ 223.281149][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.377421][T11844] netlink: 'syz.2.1534': attribute type 10 has an invalid length. [ 223.401381][T11844] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1534'. [ 223.552819][T11854] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1537'. [ 223.564629][T11850] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1536'. [ 223.587331][T11854] geneve3: entered promiscuous mode [ 223.614351][T11857] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 223.864586][T11861] netlink: 'syz.3.1541': attribute type 1 has an invalid length. [ 223.884860][T11861] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.199634][T11881] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1545'. [ 224.336260][ T6602] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.059531][ T6602] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.536033][ T6602] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.723188][ T6602] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.836966][T11910] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.845966][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 225.863790][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 225.874565][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 225.895932][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 225.904550][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 225.922864][T11910] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.944641][T11916] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 226.052300][T11911] lo speed is unknown, defaulting to 1000 [ 226.429503][T11925] netlink: 'syz.2.1559': attribute type 1 has an invalid length. [ 226.479061][ T6602] bridge_slave_1: left allmulticast mode [ 226.521067][ T6602] bridge_slave_1: left promiscuous mode [ 226.533965][ T6602] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.569585][ T6602] bridge_slave_0: left allmulticast mode [ 226.588802][ T6602] bridge_slave_0: left promiscuous mode [ 226.604332][ T6602] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.605513][T11933] netlink: 'syz.0.1562': attribute type 2 has an invalid length. [ 226.625282][T11933] netlink: 'syz.0.1562': attribute type 8 has an invalid length. [ 227.055127][T11955] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 227.089392][ T6602] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.105270][ T6602] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.115766][ T6602] bond0 (unregistering): Released all slaves [ 227.155042][T11953] netlink: 'syz.3.1568': attribute type 1 has an invalid length. [ 227.379828][T11959] netlink: 'syz.2.1569': attribute type 29 has an invalid length. [ 227.396220][T11959] __nla_validate_parse: 6 callbacks suppressed [ 227.396238][T11959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1569'. [ 233.410409][ C1] hrtimer: interrupt took 5723994321 ns [ 233.427924][ T55] Bluetooth: hci4: command tx timeout [ 338.500389][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 338.507422][ C0] rcu: 1-...!: (1 GPs behind) idle=d24c/1/0x4000000000000000 softirq=54244/54255 fqs=1 [ 338.518398][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P11911/1:b..l [ 338.526611][ C0] rcu: (detected by 0, t=10506 jiffies, g=38237, q=708 ncpus=2) [ 338.534898][ C0] Sending NMI from CPU 0 to CPUs 1: [ 338.534938][ C1] NMI backtrace for cpu 1 [ 338.534970][ C1] CPU: 1 UID: 0 PID: 11985 Comm: syz.4.1575 Not tainted 6.15.0-rc7-syzkaller-00105-g57a92d14659d #0 PREEMPT(full) [ 338.535011][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 338.535023][ C1] RIP: 0010:lock_release+0xd/0x3e0 [ 338.535063][ C1] Code: 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 41 57 41 56 41 55 41 54 <53> 48 83 ec 30 49 89 f5 49 89 fe 65 48 8b 05 b0 8f d7 10 48 89 44 [ 338.535077][ C1] RSP: 0018:ffffc90000a08c50 EFLAGS: 00000082 [ 338.535091][ C1] RAX: f3f3f300f1f1f1f1 RBX: 0000000000000802 RCX: 0000000000000002 [ 338.535103][ C1] RDX: 0000000000000001 RSI: ffffffff81ae8cad RDI: ffffffff99a10498 [ 338.535114][ C1] RBP: ffffc90000a08d08 R08: 0000000000000003 R09: 0000000000000004 [ 338.535124][ C1] R10: dffffc0000000000 R11: fffff52000141170 R12: dffffc0000000000 [ 338.535136][ C1] R13: dffffc0000000000 R14: ffffffff99a10480 R15: 1ffff92000141190 [ 338.535148][ C1] FS: 0000000000000000(0000) GS:ffff8881261c2000(0000) knlGS:0000000000000000 [ 338.535161][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 338.535172][ C1] CR2: 0000200000020000 CR3: 00000000298ee000 CR4: 00000000003526f0 [ 338.535186][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 338.535195][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 338.535205][ C1] Call Trace: [ 338.535217][ C1] [ 338.535228][ C1] _raw_spin_unlock_irqrestore+0x70/0x110 [ 338.535248][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 338.535265][ C1] ? debug_object_deactivate+0x9a/0x250 [ 338.535285][ C1] debug_deactivate+0x1d/0x200 [ 338.535301][ C1] __hrtimer_run_queues+0x2b0/0xc60 [ 338.535332][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 338.535352][ C1] ? read_tsc+0x9/0x20 [ 338.535367][ C1] ? rcu_is_watching+0x15/0xb0 [ 338.535384][ C1] hrtimer_interrupt+0x45b/0xaa0 [ 338.535420][ C1] __sysvec_apic_timer_interrupt+0x108/0x410 [ 338.535441][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 338.535461][ C1] [ 338.535466][ C1] [ 338.535473][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 338.535490][ C1] RIP: 0010:lock_acquire+0x175/0x360 [ 338.535508][ C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 8b 9f d7 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 338.535521][ C1] RSP: 0018:ffffc9000403f2f8 EFLAGS: 00000206 [ 338.535534][ C1] RAX: 1a83e5937f257800 RBX: 0000000000000000 RCX: 1a83e5937f257800 [ 338.535545][ C1] RDX: 0000000000000000 RSI: ffffffff8d938bbd RDI: ffffffff8bc1f3c0 [ 338.535557][ C1] RBP: ffffffff822cf19d R08: 0000000000000000 R09: 0000000000000000 [ 338.535567][ C1] R10: 0000000000000000 R11: ffffffff822cf19d R12: 0000000000000002 [ 338.535582][ C1] R13: ffffffff8df3dfa0 R14: 0000000000000000 R15: 0000000000000246 [ 338.535594][ C1] ? pfn_valid+0xcd/0x420 [ 338.535612][ C1] ? pfn_valid+0xcd/0x420 [ 338.535640][ C1] ? __folio_rmap_sanity_checks+0x2f2/0x6e0 [ 338.535657][ C1] ? pfn_valid+0xcd/0x420 [ 338.535675][ C1] pfn_valid+0xe9/0x420 [ 338.535691][ C1] ? pfn_valid+0xcd/0x420 [ 338.535709][ C1] page_table_check_clear+0x21/0x6e0 [ 338.535728][ C1] ? vm_normal_page+0xb4/0x210 [ 338.535750][ C1] unmap_page_range+0x30be/0x4210 [ 338.535764][ C1] ? __kernel_text_address+0xd/0x40 [ 338.535801][ C1] ? mas_next_slot+0xc20/0xcf0 [ 338.535822][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 338.535841][ C1] ? unmap_single_vma+0x1b2/0x2a0 [ 338.535859][ C1] unmap_vmas+0x25d/0x3c0 [ 338.535876][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 338.535904][ C1] exit_mmap+0x245/0xba0 [ 338.535925][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 338.535942][ C1] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 338.535968][ C1] ? __pfx_exit_aio+0x10/0x10 [ 338.535991][ C1] ? uprobe_clear_state+0x274/0x290 [ 338.536011][ C1] __mmput+0x118/0x420 [ 338.536027][ C1] exit_mm+0x1da/0x2c0 [ 338.536046][ C1] ? __pfx_exit_mm+0x10/0x10 [ 338.536063][ C1] ? taskstats_exit+0x43c/0xa30 [ 338.536082][ C1] ? tty_audit_exit+0x153/0x200 [ 338.536099][ C1] do_exit+0x859/0x2550 [ 338.536122][ C1] ? do_raw_spin_lock+0x121/0x290 [ 338.536139][ C1] ? __pfx_do_exit+0x10/0x10 [ 338.536156][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 338.536182][ C1] do_group_exit+0x21c/0x2d0 [ 338.536199][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 338.536218][ C1] get_signal+0x125e/0x1310 [ 338.536251][ C1] arch_do_signal_or_restart+0x95/0x780 [ 338.536269][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 338.536293][ C1] ? local_irq_enable_exit_to_user+0x5/0x10 [ 338.536315][ C1] syscall_exit_to_user_mode+0x8b/0x120 [ 338.536334][ C1] do_syscall_64+0x103/0x210 [ 338.536354][ C1] ? clear_bhb_loop+0x60/0xb0 [ 338.536371][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.536387][ C1] RIP: 0033:0x7f2c9298e969 [ 338.536408][ C1] Code: Unable to access opcode bytes at 0x7f2c9298e93f. [ 338.536416][ C1] RSP: 002b:00007f2c937b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 338.536431][ C1] RAX: 0000000000000088 RBX: 00007f2c92bb5fa0 RCX: 00007f2c9298e969 [ 338.536442][ C1] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000007 [ 338.536452][ C1] RBP: 00007f2c92a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 338.536462][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 338.536472][ C1] R13: 0000000000000000 R14: 00007f2c92bb5fa0 R15: 00007ffcf41d47e8 [ 338.536491][ C1] [ 338.536931][ C0] task:syz-executor state:R running task stack:23000 pid:11911 tgid:11911 ppid:11884 task_flags:0x400140 flags:0x00000000 [ 339.126886][ C0] Call Trace: [ 339.130173][ C0] [ 339.133122][ C0] __schedule+0x16e2/0x4cd0 [ 339.138001][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 339.143393][ C0] ? preempt_schedule_notrace+0xd1/0x110 [ 339.149063][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 339.154357][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 339.159585][ C0] ? __pfx___schedule+0x10/0x10 [ 339.164469][ C0] ? __lock_acquire+0xaac/0xd20 [ 339.169363][ C0] preempt_schedule_notrace+0xd1/0x110 [ 339.175021][ C0] ? __pfx_preempt_schedule_notrace+0x10/0x10 [ 339.181668][ C0] preempt_schedule_notrace_thunk+0x16/0x30 [ 339.187610][ C0] rcu_is_watching+0x7f/0xb0 [ 339.192669][ C0] ? unwind_next_frame+0xa5/0x2390 [ 339.197947][ C0] unwind_next_frame+0x1965/0x2390 [ 339.203102][ C0] ? unwind_next_frame+0xa5/0x2390 [ 339.208251][ C0] ? kasan_save_free_info+0x46/0x50 [ 339.213566][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 339.219814][ C0] arch_stack_walk+0x11c/0x150 [ 339.224598][ C0] ? __kasan_slab_free+0x62/0x70 [ 339.229723][ C0] stack_trace_save+0x9c/0xe0 [ 339.234417][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 339.239895][ C0] kasan_save_track+0x3e/0x80 [ 339.244721][ C0] ? kasan_save_track+0x3e/0x80 [ 339.249702][ C0] ? kasan_save_free_info+0x46/0x50 [ 339.255220][ C0] ? skb_release_data+0x670/0x890 [ 339.260355][ C0] kasan_save_free_info+0x46/0x50 [ 339.265512][ C0] __kasan_slab_free+0x62/0x70 [ 339.270285][ C0] kmem_cache_free+0x192/0x3f0 [ 339.275098][ C0] skb_release_data+0x670/0x890 [ 339.280186][ C0] consume_skb+0x9e/0xf0 [ 339.284687][ C0] netlink_recvmsg+0x5d3/0xe00 [ 339.289478][ C0] ? __pfx_netlink_recvmsg+0x10/0x10 [ 339.294819][ C0] ? __pfx_aa_sk_perm+0x10/0x10 [ 339.299760][ C0] ? aa_sock_msg_perm+0x94/0x160 [ 339.304727][ C0] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 339.310136][ C0] ? security_socket_recvmsg+0x7e/0x2e0 [ 339.316166][ C0] ? __pfx_netlink_recvmsg+0x10/0x10 [ 339.321640][ C0] sock_recvmsg+0x229/0x270 [ 339.326337][ C0] __sys_recvfrom+0x1f6/0x340 [ 339.331075][ C0] ? __pfx___sys_recvfrom+0x10/0x10 [ 339.336327][ C0] ? task_mm_cid_work+0x21f/0x760 [ 339.341408][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 339.346694][ C0] ? rcu_is_watching+0x15/0xb0 [ 339.351481][ C0] __x64_sys_recvfrom+0xde/0x100 [ 339.356450][ C0] do_syscall_64+0xf6/0x210 [ 339.360973][ C0] ? clear_bhb_loop+0x60/0xb0 [ 339.365746][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.371824][ C0] RIP: 0033:0x7f6689b90734 [ 339.376333][ C0] RSP: 002b:00007ffc996214f0 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 339.385014][ C0] RAX: ffffffffffffffda RBX: 00007f668a8e4620 RCX: 00007f6689b90734 [ 339.393167][ C0] RDX: 0000000000001000 RSI: 00007f668a8e4670 RDI: 0000000000000003 [ 339.401238][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 339.409217][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 339.417379][ C0] R13: 0000000000000000 R14: 00007f668a8e4670 R15: 0000000000000000 [ 339.425377][ C0] [ 339.428400][ C0] rcu: rcu_preempt kthread starved for 10501 jiffies! g38237 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 339.439620][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 339.449601][ C0] rcu: RCU grace-period kthread stack dump: [ 339.455495][ C0] task:rcu_preempt state:R running task stack:27304 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 339.469108][ C0] Call Trace: [ 339.472392][ C0] [ 339.475419][ C0] __schedule+0x16e2/0x4cd0 [ 339.479956][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 339.485201][ C0] ? schedule+0x165/0x360 [ 339.489591][ C0] ? __pfx___schedule+0x10/0x10 [ 339.494518][ C0] ? schedule+0x91/0x360 [ 339.498827][ C0] schedule+0x165/0x360 [ 339.503098][ C0] schedule_timeout+0x12b/0x270 [ 339.507963][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 339.513338][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 339.519241][ C0] ? __pfx_process_timeout+0x10/0x10 [ 339.524546][ C0] ? prepare_to_swait_event+0x341/0x380 [ 339.530199][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 339.535091][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 339.540492][ C0] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 339.546402][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 339.551955][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 339.557171][ C0] ? finish_swait+0xcd/0x1f0 [ 339.561775][ C0] rcu_gp_kthread+0x99/0x390 [ 339.566583][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 339.571837][ C0] ? __kthread_parkme+0x7b/0x200 [ 339.576885][ C0] ? __kthread_parkme+0x1a1/0x200 [ 339.581927][ C0] kthread+0x70e/0x8a0 [ 339.586013][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 339.591253][ C0] ? __pfx_kthread+0x10/0x10 [ 339.595955][ C0] ? __pfx_kthread+0x10/0x10 [ 339.600557][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 339.605768][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 339.611123][ C0] ? __pfx_kthread+0x10/0x10 [ 339.615747][ C0] ret_from_fork+0x4b/0x80 [ 339.620191][ C0] ? __pfx_kthread+0x10/0x10 [ 339.624800][ C0] ret_from_fork_asm+0x1a/0x30 [ 339.629761][ C0] [ 339.632908][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 339.639424][ C0] CPU: 0 UID: 0 PID: 11982 Comm: syz.2.1573 Not tainted 6.15.0-rc7-syzkaller-00105-g57a92d14659d #0 PREEMPT(full) [ 339.651630][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 339.661729][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x70 [ 339.668197][ C0] Code: 8b 3d 8c 22 d7 0b 48 89 de 5b e9 c3 67 57 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0c 25 08 e0 75 92 65 8b 15 48 ee b5 10 81 e2 00 01 ff 00 [ 339.688010][ C0] RSP: 0018:ffffc90003d8f4d8 EFLAGS: 00000202 [ 339.694295][ C0] RAX: ffffffff81b488c0 RBX: ffff8880b883ad40 RCX: ffff88802faa0000 [ 339.702476][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 339.710659][ C0] RBP: ffffc90003d8f640 R08: ffffffff8f7f3277 R09: 1ffffffff1efe64e [ 339.719609][ C0] R10: dffffc0000000000 R11: fffffbfff1efe64f R12: 1ffff11017127e99 [ 339.727758][ C0] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff8880b893f4c8 [ 339.735834][ C0] FS: 0000000000000000(0000) GS:ffff8881260c2000(0000) knlGS:0000000000000000 [ 339.744957][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 339.751549][ C0] CR2: 0000200000000080 CR3: 000000005fad0000 CR4: 00000000003526f0 [ 339.759557][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 339.767684][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 339.775712][ C0] Call Trace: [ 339.779121][ C0] [ 339.782126][ C0] smp_call_function_many_cond+0xe80/0x11c0 [ 339.788186][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 339.794168][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 339.800538][ C0] ? rcu_is_watching+0x15/0xb0 [ 339.805418][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 339.810818][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 339.816217][ C0] flush_tlb_mm_range+0x6ae/0x12b0 [ 339.821358][ C0] ? free_pgtables+0x6a9/0x710 [ 339.826162][ C0] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 339.831825][ C0] ? __pfx_free_pgtables+0x10/0x10 [ 339.837000][ C0] tlb_flush_mmu+0x1a7/0x680 [ 339.841888][ C0] ? __pfx_down_write+0x10/0x10 [ 339.846776][ C0] tlb_finish_mmu+0xc3/0x1d0 [ 339.851438][ C0] exit_mmap+0x474/0xba0 [ 339.855715][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 339.860512][ C0] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 339.866293][ C0] ? __pfx_exit_aio+0x10/0x10 [ 339.871098][ C0] ? uprobe_clear_state+0x274/0x290 [ 339.876310][ C0] __mmput+0x118/0x420 [ 339.880392][ C0] exit_mm+0x1da/0x2c0 [ 339.884494][ C0] ? __pfx_exit_mm+0x10/0x10 [ 339.889204][ C0] ? taskstats_exit+0x43c/0xa30 [ 339.894117][ C0] ? tty_audit_exit+0x153/0x200 [ 339.899092][ C0] do_exit+0x859/0x2550 [ 339.903293][ C0] ? do_raw_spin_lock+0x121/0x290 [ 339.908452][ C0] ? __pfx_do_exit+0x10/0x10 [ 339.913162][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 339.918573][ C0] do_group_exit+0x21c/0x2d0 [ 339.923182][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 339.928394][ C0] get_signal+0x125e/0x1310 [ 339.932951][ C0] arch_do_signal_or_restart+0x95/0x780 [ 339.938539][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 339.944829][ C0] ? local_irq_enable_exit_to_user+0x5/0x10 [ 339.950934][ C0] syscall_exit_to_user_mode+0x8b/0x120 [ 339.956690][ C0] do_syscall_64+0x103/0x210 [ 339.961307][ C0] ? clear_bhb_loop+0x60/0xb0 [ 339.966001][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.971903][ C0] RIP: 0033:0x7f0d84b8e969 [ 339.976333][ C0] Code: Unable to access opcode bytes at 0x7f0d84b8e93f. [ 339.983440][ C0] RSP: 002b:00007f0d8590f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 339.992038][ C0] RAX: 00000000000000a4 RBX: 00007f0d84db6080 RCX: 00007f0d84b8e969 [ 340.000106][ C0] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 000000000000000a [ 340.008194][ C0] RBP: 00007f0d84c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 340.016655][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 340.024781][ C0] R13: 0000000000000000 R14: 00007f0d84db6080 R15: 00007fffa16d53f8 [ 340.032871][ C0]