last executing test programs: 5.559504086s ago: executing program 4 (id=1806): socket(0x840000000002, 0x3, 0x100) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket(0xa, 0x3, 0x87) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0xb) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000000)=0xe, 0x4) close(0x3) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r6, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r7, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r7, 0x80) accept$netrom(r7, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r8, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r8, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) recvmmsg(r6, &(0x7f0000007cc0)=[{{0x0, 0x0, 0x0}, 0x80}], 0x1, 0x32000, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1e8f7}}, 0x20}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={@private1, 0x18, r10}) socket$inet6(0x10, 0x3, 0x0) 4.597198775s ago: executing program 4 (id=1816): mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa, 0x30, 0xffffffffffffffff, 0x9f0fc000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x7, 0x10001, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004"], 0x328}}, 0x84) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r0, &(0x7f00000004c0)="4c363184973af0179e02fc4ffe73ac6d2b049ba48105f5486b66cc9c1790ea7936c6d14ec8b0ede2fe3bf29be0652662362f5392b8eb1d0cb0d5ad7c3bf024906b6682f6fdc77ab6a0f5e9a34c9c70bf94e1ccec129d8cc08ee859975c59f091a89766c524a713f24d45903017fe4ead4637108c5945fa2ebbcd4663ab1f4fa8f63eadea33ab2873c0aad6da4ac82e06e9c07967b6fc829d4717ccfe2ac430bec26142e81a5f013872944f1377dad59100b5d6890ae5aafb5699", &(0x7f0000000800)=""/135}, 0x20) r3 = socket$packet(0x11, 0xa, 0x300) recvmmsg(r3, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x400}], 0x2, 0x0, 0x0) socket$inet(0x2, 0x3, 0x7) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r7, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f00000000c0)='`', 0x1}], 0x1}}, {{&(0x7f00000006c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0x20}}], 0x2, 0x0) readv(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000180)=""/198, 0xc6}], 0x1) r8 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000002c0)=0x14) setsockopt$packet_int(r8, 0x107, 0xb, &(0x7f0000000300)=0x9, 0x4) 4.558741009s ago: executing program 0 (id=1817): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) 4.26027322s ago: executing program 2 (id=1819): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8) close(r4) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r2, r1, 0x4, r3}, 0x10) 4.223706649s ago: executing program 3 (id=1820): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa, 0x30, r0, 0x9f0fc000) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004"], 0x328}}, 0x84) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r1, &(0x7f00000004c0)="4c363184973af0179e02fc4ffe73ac6d2b049ba48105f5486b66cc9c1790ea7936c6d14ec8b0ede2fe3bf29be0652662362f5392b8eb1d0cb0d5ad7c3bf024906b6682f6fdc77ab6a0f5e9a34c9c70bf94e1ccec129d8cc08ee859975c59f091a89766c524a713f24d45903017fe4ead4637108c5945fa2ebbcd4663ab1f4fa8f63eadea33ab2873c0aad6da4ac82e06e9c07967b6fc829d4717ccfe2ac430bec26142e81a5f013872944f1377dad59100b5d6890ae5aafb5699", &(0x7f0000000800)=""/135}, 0x20) r4 = socket$packet(0x11, 0xa, 0x300) recvmmsg(r4, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x400}], 0x2, 0x0, 0x0) socket$inet(0x2, 0x3, 0x7) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) r8 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r8, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f00000000c0)='`', 0x1}], 0x1}}, {{&(0x7f00000006c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0x20}}], 0x2, 0x0) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000180)=""/198, 0xc6}], 0x1) r9 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000002c0)=0x14) setsockopt$packet_int(r9, 0x107, 0xb, &(0x7f0000000300)=0x9, 0x4) 4.222706224s ago: executing program 0 (id=1821): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x80) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r1 = socket$netlink(0x10, 0x3, 0x12) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) 3.870867947s ago: executing program 2 (id=1822): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00080009000000008000000000000000f8ffffffffffffffff01000000000000010000000000000001000000000000800900000000000000000000008015010002000000"], 0xd8}, 0x1, 0x0, 0x0, 0x2000c0c4}, 0x8010) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffe, 0x0, 0x20000000000000}, 0x0, &(0x7f0000000400)={0x3ff, 0x0, 0xfffffffffffffffe, 0x8000009, 0x2, 0x4c, 0x7fffffff, 0x3}, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) tee(r2, r0, 0x80000001, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffff}, 0x6) r7 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r7, 0x541b, &(0x7f0000000080)) ioctl$sock_bt_hci(r5, 0x400448ca, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r8, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @empty, 0x0, "ffff01e03d64a831683fdc3fd440829c82cfc400"}, 0x3c) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x8, 0xfa, &(0x7f00000007c0)=""/250}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) vmsplice(r3, &(0x7f0000000180)=[{&(0x7f00000003c0)="9516", 0x2}], 0x1, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$bt_BT_FLUSHABLE(r9, 0x112, 0x8, &(0x7f0000000300)=0x1, 0x4) writev(r9, &(0x7f0000000000)=[{&(0x7f00000000c0)='H', 0x1}], 0x1) 3.755628047s ago: executing program 0 (id=1823): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0xe}, {&(0x7f00000003c0)="4b0932120f0bc53910bb6b291bcb60f44d8af7016d09eb39acf5d3d5e0d27285", 0x20}], 0x2) 3.751837432s ago: executing program 1 (id=1824): socket(0x840000000002, 0x3, 0x100) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket(0xa, 0x3, 0x87) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0xb) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000000)=0xe, 0x4) close(0x3) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r6, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r7, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r7, 0x80) accept$netrom(r7, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r8, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r8, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) recvmmsg(r6, &(0x7f0000007cc0)=[{{0x0, 0x0, 0x0}, 0x80}], 0x1, 0x32000, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1e8f7}}, 0x20}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={@private1, 0x18, r10}) socket$inet6(0x10, 0x3, 0x0) 3.511016203s ago: executing program 4 (id=1825): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000500000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4d94f204e34ff65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd086004c4a56c6cce6e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f7477137f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480efd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047acd083d3cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e430a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed1823cb7dde8212a8531bd9691dd4cc6a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b051f47db7aa110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c0000000000000000000a000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3938e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c3e1f5a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea875583e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba46cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a1cc4df1112105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5ccb9f10f615c87c441dc50a244bc138a1cae9868c3079bafe69769000000000000000000e99b63029d219cd3545a8426b56554a9f265d3557eefb3602894507c256cb8ee9ebadfecb6afeb84ba757bfa8d00a5af0dd6aa1e8144ef8ef04410d52204c335408941b8eccc5c734cc6a05247142ed647f89bcb5c043acfb382b9cc918bc3cdc368983157851cdf678800aa7eb2a6cbc12c7ae23bc88b8f10223ab2a093429f3f6965bc5af0114cf6f246e891e20ecaad7059866506c3000000000c3230e901e885b7a4a36bdfdb5ce7a2e5807a0f4c1d461d1243fccf51b875b49490cd7d044e7a1e1a4c013fae1f070a8a37ab90da2efc6c875b3aab34b75a252072691fc97bef0fed8ee597ab83bb53f89c36bc2ee3ad54904542f66dc94132df75fc9944882d6f2e13b7057e0000000000000000000000000000000000001b726c0ccd24000000000000cfd2f4d005578b9ed06e1c41ef3b411066739de953d39b968caaca1507928d68c8f052"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r2, &(0x7f0000000440)=ANY=[], 0xfdef) 3.048946934s ago: executing program 3 (id=1826): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00080009000000008000000000000000f8ffffffffffffffff01000000000000010000000000000001000000000000800900000000000000000000008015010002000000"], 0xd8}, 0x1, 0x0, 0x0, 0x2000c0c4}, 0x8010) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffe, 0x0, 0x20000000000000}, 0x0, &(0x7f0000000400)={0x3ff, 0x0, 0xfffffffffffffffe, 0x8000009, 0x2, 0x4c, 0x7fffffff, 0x3}, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) tee(r2, r0, 0x80000001, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffff}, 0x6) r7 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r7, 0x541b, &(0x7f0000000080)) ioctl$sock_bt_hci(r5, 0x400448ca, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r8, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @empty, 0x0, "ffff01e03d64a831683fdc3fd440829c82cfc400"}, 0x3c) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x8, 0xfa, &(0x7f00000007c0)=""/250}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$MRT_FLUSH(r8, 0x0, 0xd4, &(0x7f0000000000)=0xe, 0x4) vmsplice(r3, &(0x7f0000000180)=[{&(0x7f00000003c0)="9516", 0x2}], 0x1, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$bt_BT_FLUSHABLE(r9, 0x112, 0x8, &(0x7f0000000300)=0x1, 0x4) writev(r9, &(0x7f0000000000)=[{&(0x7f00000000c0)='H', 0x1}], 0x1) 2.955464833s ago: executing program 2 (id=1827): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0xfff3}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 1.672462003s ago: executing program 3 (id=1828): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000400)='\'', 0x1, 0x40804, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window, @mss={0x2, 0x8}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @timestamp, @mss={0x2, 0x1}, @window={0x3, 0x7, 0xceca}], 0x20000000000002b5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 1.626654349s ago: executing program 0 (id=1829): socket(0x840000000002, 0x3, 0x100) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket(0xa, 0x3, 0x87) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0xb) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000000)=0xe, 0x4) close(0x3) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r6, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r7, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r7, 0x80) accept$netrom(r7, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r8, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r8, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) recvmmsg(r6, &(0x7f0000007cc0)=[{{0x0, 0x0, 0x0}, 0x80}], 0x1, 0x32000, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1e8f7}}, 0x20}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={@private1, 0x18, r10}) socket$inet6(0x10, 0x3, 0x0) 1.589038139s ago: executing program 3 (id=1830): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000500)=[{&(0x7f00000000c0)="dc52b390", 0x4}, {&(0x7f0000000100)="7681", 0x2}, {&(0x7f0000000480)="eb", 0x1}, {&(0x7f0000000a80)='`', 0x1}, {&(0x7f0000000080)="ca2d", 0x2}, {&(0x7f00000011c0)="b488c5", 0xfffffcfb}, {&(0x7f0000000340)="748080a54714ce974a428103824a223696f0821cda0b0faabd2683bce6e29460f49e7ecca4b1efcaead665a9586108b36c3123d86e7472495513633f1a9b91ba0c6f68df1c7d587f503c24c0ab03730c8e3fd08dade50b3e8cc887e4ceefc44b41a04ab49c20b7a6caed21801820f58ceb0124c7a7f1145a47bdac6a15ecc48e712cce474b342b787013c31dec1e44edfe546ae4ad5fd37f93609de43a8e4a657cb582bbc0d5a6e03f0c8eabb5afd4579b71af1e22c4dd007b5e56c4d2638f382de8621e221ba85e0985abcf3487c8dc41095787d0660bc6695edf4897d391658837e9d0476448584cd49e02c59b6485e49ffb5f4b5861df94caa8adc078ec2774ec19d0ddf49891d9", 0x109}], 0x7, 0x3) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x14, r3, 0x300, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x4011) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) 1.574953169s ago: executing program 2 (id=1831): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x404d011) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, 0x0, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r1 = socket(0x8, 0x3, 0x0) socket$inet6(0xa, 0x3, 0xa) getsockname$l2tp(r1, 0x0, 0x0) 1.560086855s ago: executing program 1 (id=1832): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 1.558717508s ago: executing program 4 (id=1833): sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="010029bd7000fddbdf252100000008000300", @ANYRES32, @ANYBLOB="14002f80fc106a5efa69034e84503fe8f758e048f0e391a45f612bd7416093f4b64dccc0ab76171886289e70a0e6555577a5daab15b381fc05e0d9c2e3d9ebc4a59a1b4e3af6bae0"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x814) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="7961fdffffff000000007e0000000c"], 0x20}}, 0x4000054) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000506010200000000000000000a000001"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 1.322574963s ago: executing program 1 (id=1834): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000100003041b00"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 1.21922472s ago: executing program 4 (id=1835): mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa, 0x30, 0xffffffffffffffff, 0x9f0fc000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x7, 0x10001, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004"], 0x328}}, 0x84) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r0, &(0x7f00000004c0)="4c363184973af0179e02fc4ffe73ac6d2b049ba48105f5486b66cc9c1790ea7936c6d14ec8b0ede2fe3bf29be0652662362f5392b8eb1d0cb0d5ad7c3bf024906b6682f6fdc77ab6a0f5e9a34c9c70bf94e1ccec129d8cc08ee859975c59f091a89766c524a713f24d45903017fe4ead4637108c5945fa2ebbcd4663ab1f4fa8f63eadea33ab2873c0aad6da4ac82e06e9c07967b6fc829d4717ccfe2ac430bec26142e81a5f013872944f1377dad59100b5d6890ae5aafb5699", &(0x7f0000000800)=""/135}, 0x20) r3 = socket$packet(0x11, 0xa, 0x300) recvmmsg(r3, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x400}], 0x2, 0x0, 0x0) socket$inet(0x2, 0x3, 0x7) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r7, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f00000000c0)='`', 0x1}], 0x1}}, {{&(0x7f00000006c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0x20}}], 0x2, 0x0) readv(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000180)=""/198, 0xc6}], 0x1) r8 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000002c0)=0x14) setsockopt$packet_int(r8, 0x107, 0xb, &(0x7f0000000300)=0x9, 0x4) 1.199316584s ago: executing program 2 (id=1836): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003640)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="af", 0x1}], 0x1}}], 0x1, 0x4040005) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48) listen(r0, 0x1ad72f7) accept4(r0, 0x0, 0x0, 0x80000) r2 = accept4$netrom(r0, 0x0, 0x0, 0x80000) writev(r2, &(0x7f00000001c0), 0x7) 1.010422217s ago: executing program 1 (id=1837): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00080009000000008000000000000000f8ffffffffffffffff01000000000000010000000000000001000000000000800900000000000000000000008015010002000000"], 0xd8}, 0x1, 0x0, 0x0, 0x2000c0c4}, 0x8010) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffe, 0x0, 0x20000000000000}, 0x0, &(0x7f0000000400)={0x3ff, 0x0, 0xfffffffffffffffe, 0x8000009, 0x2, 0x4c, 0x7fffffff, 0x3}, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) tee(r2, r0, 0x80000001, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffff}, 0x6) r7 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r7, 0x541b, &(0x7f0000000080)) ioctl$sock_bt_hci(r5, 0x400448ca, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r8, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @empty, 0x0, "ffff01e03d64a831683fdc3fd440829c82cfc400"}, 0x3c) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x8, 0xfa, &(0x7f00000007c0)=""/250}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) vmsplice(r3, &(0x7f0000000180)=[{&(0x7f00000003c0)="9516", 0x2}], 0x1, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$bt_BT_FLUSHABLE(r9, 0x112, 0x8, &(0x7f0000000300)=0x1, 0x4) writev(r9, &(0x7f0000000000)=[{&(0x7f00000000c0)='H', 0x1}], 0x1) 663.586569ms ago: executing program 0 (id=1838): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3300000}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES16=r0], 0x1000f) 663.138663ms ago: executing program 3 (id=1839): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000180)=0x7ff, 0x4) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd0903280005003000"], 0xfdef) 622.432142ms ago: executing program 0 (id=1840): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00080009000000008000000000000000f8ffffffffffffffff01000000000000010000000000000001000000000000800900000000000000000000008015010002000000"], 0xd8}, 0x1, 0x0, 0x0, 0x2000c0c4}, 0x8010) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffe, 0x0, 0x20000000000000}, 0x0, &(0x7f0000000400)={0x3ff, 0x0, 0xfffffffffffffffe, 0x8000009, 0x2, 0x4c, 0x7fffffff, 0x3}, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) tee(r2, r0, 0x80000001, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffff}, 0x6) r7 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r7, 0x541b, &(0x7f0000000080)) ioctl$sock_bt_hci(r5, 0x400448ca, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r8, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @empty, 0x0, "ffff01e03d64a831683fdc3fd440829c82cfc400"}, 0x3c) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x8, 0xfa, &(0x7f00000007c0)=""/250}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$MRT_FLUSH(r8, 0x0, 0xd4, &(0x7f0000000000)=0xe, 0x4) vmsplice(r3, &(0x7f0000000180)=[{&(0x7f00000003c0)="9516", 0x2}], 0x1, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$bt_BT_FLUSHABLE(r9, 0x112, 0x8, &(0x7f0000000300)=0x1, 0x4) writev(r9, &(0x7f0000000000)=[{&(0x7f00000000c0)='H', 0x1}], 0x1) 528.335577ms ago: executing program 3 (id=1841): pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f00000008c0)=0x2, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004", 0x23}], 0x1) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) splice(r0, 0x0, r2, 0x0, 0x10d00, 0xf) 197.749377ms ago: executing program 2 (id=1842): socket(0x840000000002, 0x3, 0x100) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket(0xa, 0x3, 0x87) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0xb) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000000)=0xe, 0x4) close(0x3) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r6, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r7, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r7, 0x80) accept$netrom(r7, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r8, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r8, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) recvmmsg(r6, &(0x7f0000007cc0)=[{{0x0, 0x0, 0x0}, 0x80}], 0x1, 0x32000, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1e8f7}}, 0x20}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={@private1, 0x18, r10}) socket$inet6(0x10, 0x3, 0x0) 197.150381ms ago: executing program 4 (id=1843): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x0, 0x1, 0x1}}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x6f9}}, 0xee) 124.053186ms ago: executing program 1 (id=1844): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x44, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0xe, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40c04}, 0x40c4) 0s ago: executing program 1 (id=1845): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x90) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x1d37, 0x4) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000000)=0x7b, 0x4) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002002, 0x0) kernel console output (not intermixed with test programs): 9.292699][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.300779][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.308521][ T5867] bridge_slave_1: entered allmulticast mode [ 79.315482][ T5867] bridge_slave_1: entered promiscuous mode [ 79.338881][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.375555][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.383008][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.391413][ T5862] bridge_slave_0: entered allmulticast mode [ 79.399482][ T5862] bridge_slave_0: entered promiscuous mode [ 79.408568][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.415792][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.422982][ T5862] bridge_slave_1: entered allmulticast mode [ 79.430938][ T5862] bridge_slave_1: entered promiscuous mode [ 79.440095][ T5875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.494986][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.502273][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.510795][ T5874] bridge_slave_0: entered allmulticast mode [ 79.519521][ T5874] bridge_slave_0: entered promiscuous mode [ 79.542128][ T5875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.565223][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.578471][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.589837][ T5861] team0: Port device team_slave_0 added [ 79.595876][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.603434][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.611298][ T5874] bridge_slave_1: entered allmulticast mode [ 79.618835][ T5874] bridge_slave_1: entered promiscuous mode [ 79.661548][ T5861] team0: Port device team_slave_1 added [ 79.698129][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.709500][ T5875] team0: Port device team_slave_0 added [ 79.754261][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.766105][ T5875] team0: Port device team_slave_1 added [ 79.790441][ T5867] team0: Port device team_slave_0 added [ 79.798264][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.805211][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.831387][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.845444][ T5874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.883783][ T5867] team0: Port device team_slave_1 added [ 79.904443][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.911796][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.939137][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.947341][ T5873] Bluetooth: hci0: command tx timeout [ 79.961959][ T5874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.986843][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.993913][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.020481][ T5873] Bluetooth: hci3: command tx timeout [ 80.020635][ T5873] Bluetooth: hci2: command tx timeout [ 80.020751][ T5873] Bluetooth: hci1: command tx timeout [ 80.020857][ T5873] Bluetooth: hci4: command tx timeout [ 80.026446][ T5875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.055876][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.063792][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.090495][ T5875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.117964][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.124953][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.151330][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.194184][ T5862] team0: Port device team_slave_0 added [ 80.203494][ T5862] team0: Port device team_slave_1 added [ 80.218867][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.226662][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.252948][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.305660][ T5874] team0: Port device team_slave_0 added [ 80.331767][ T5861] hsr_slave_0: entered promiscuous mode [ 80.339450][ T5861] hsr_slave_1: entered promiscuous mode [ 80.363848][ T5874] team0: Port device team_slave_1 added [ 80.435996][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.444212][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.470993][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.483560][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.491080][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.517314][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.534507][ T5867] hsr_slave_0: entered promiscuous mode [ 80.540991][ T5867] hsr_slave_1: entered promiscuous mode [ 80.547855][ T5867] debugfs: 'hsr0' already exists in 'hsr' [ 80.553819][ T5867] Cannot create hsr debugfs directory [ 80.572513][ T5875] hsr_slave_0: entered promiscuous mode [ 80.579019][ T5875] hsr_slave_1: entered promiscuous mode [ 80.585171][ T5875] debugfs: 'hsr0' already exists in 'hsr' [ 80.590994][ T5875] Cannot create hsr debugfs directory [ 80.683136][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.690364][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.716573][ T5874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.729344][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.736397][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.762676][ T5874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.884420][ T5862] hsr_slave_0: entered promiscuous mode [ 80.890834][ T5862] hsr_slave_1: entered promiscuous mode [ 80.898888][ T5862] debugfs: 'hsr0' already exists in 'hsr' [ 80.904629][ T5862] Cannot create hsr debugfs directory [ 81.008285][ T5874] hsr_slave_0: entered promiscuous mode [ 81.014927][ T5874] hsr_slave_1: entered promiscuous mode [ 81.021689][ T5874] debugfs: 'hsr0' already exists in 'hsr' [ 81.027494][ T5874] Cannot create hsr debugfs directory [ 81.431176][ T5875] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.443679][ T5875] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.465396][ T5875] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.479245][ T5875] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.532767][ T5867] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.545011][ T5867] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.567708][ T5867] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.581923][ T5867] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.674463][ T5861] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.695282][ T5861] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.737975][ T5861] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.777267][ T5861] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.861932][ T5862] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.909318][ T5862] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.934305][ T5875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.963626][ T5862] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.996776][ T5873] Bluetooth: hci0: command tx timeout [ 82.036075][ T5875] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.046928][ T5862] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.076570][ T5873] Bluetooth: hci1: command tx timeout [ 82.076641][ T5872] Bluetooth: hci4: command tx timeout [ 82.082072][ T5873] Bluetooth: hci2: command tx timeout [ 82.087747][ T5876] Bluetooth: hci3: command tx timeout [ 82.109285][ T4589] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.116725][ T4589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.134357][ T4589] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.141553][ T4589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.236867][ T5874] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.262052][ T5874] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.274754][ T5874] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.301117][ T5874] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.324822][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.375685][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.397565][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.430542][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.437758][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.458872][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.466016][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.483620][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.568777][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.575938][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.593776][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.600966][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.733551][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.838842][ T5874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.860462][ T5875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.880756][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.922729][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.929994][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.993702][ T5874] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.030097][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.037309][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.099794][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.106986][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.159214][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.166427][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.183182][ T5875] veth0_vlan: entered promiscuous mode [ 83.225864][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.245577][ T5875] veth1_vlan: entered promiscuous mode [ 83.381280][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.444860][ T5867] veth0_vlan: entered promiscuous mode [ 83.481123][ T5875] veth0_macvtap: entered promiscuous mode [ 83.519845][ T5875] veth1_macvtap: entered promiscuous mode [ 83.552702][ T5867] veth1_vlan: entered promiscuous mode [ 83.635815][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.693165][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.750958][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.772002][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.793407][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.816308][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.843646][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.910670][ T5867] veth0_macvtap: entered promiscuous mode [ 83.969424][ T5867] veth1_macvtap: entered promiscuous mode [ 83.982224][ T5874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.028488][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.045620][ T5862] veth0_vlan: entered promiscuous mode [ 84.073191][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.082148][ T5872] Bluetooth: hci0: command tx timeout [ 84.102219][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.110361][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.131451][ T5862] veth1_vlan: entered promiscuous mode [ 84.147277][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.157068][ T5872] Bluetooth: hci2: command tx timeout [ 84.162525][ T5876] Bluetooth: hci1: command tx timeout [ 84.168480][ T5865] Bluetooth: hci4: command tx timeout [ 84.168492][ T5873] Bluetooth: hci3: command tx timeout [ 84.193998][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.203010][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.234534][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.257675][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.266096][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.281281][ T5874] veth0_vlan: entered promiscuous mode [ 84.290291][ T5861] veth0_vlan: entered promiscuous mode [ 84.301074][ T5874] veth1_vlan: entered promiscuous mode [ 84.335710][ T5874] veth0_macvtap: entered promiscuous mode [ 84.360761][ T5874] veth1_macvtap: entered promiscuous mode [ 84.390221][ T5875] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 84.403533][ T5862] veth0_macvtap: entered promiscuous mode [ 84.433328][ T5861] veth1_vlan: entered promiscuous mode [ 84.507796][ T5862] veth1_macvtap: entered promiscuous mode [ 84.518134][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.527871][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.539659][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.577290][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.619826][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.626277][ T4589] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.632593][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.646859][ T4589] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.655005][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.700307][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.725889][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.740105][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.795387][ T5861] veth0_macvtap: entered promiscuous mode [ 84.812540][ T5987] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.844972][ T5989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 84.853852][ T1164] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.877147][ T1164] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.893881][ T1164] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.061804][ T1164] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.092204][ T5861] veth1_macvtap: entered promiscuous mode [ 85.180895][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.254712][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.336781][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.364693][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.375512][ T1149] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.395406][ T1149] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.404912][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.409481][ T1149] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.421688][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.433626][ T5996] netlink: 'syz.2.8': attribute type 16 has an invalid length. [ 85.443481][ T5996] netlink: 'syz.2.8': attribute type 17 has an invalid length. [ 85.453057][ T1149] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.507513][ T5996] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.515637][ T5996] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.601317][ T5996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.613560][ T5996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.711056][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.721299][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.759691][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.769584][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.795290][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.809731][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.832790][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.847679][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.965543][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.993163][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.157531][ T6008] trusted_key: syz.1.2 sent an empty control message without MSG_MORE. [ 86.195546][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.247595][ T5872] Bluetooth: hci2: command tx timeout [ 86.253125][ T5872] Bluetooth: hci1: command tx timeout [ 86.258815][ T5872] Bluetooth: hci3: command tx timeout [ 86.264319][ T5872] Bluetooth: hci4: command tx timeout [ 86.277188][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.805675][ T10] cfg80211: failed to load regulatory.db [ 86.827891][ T6028] netlink: 'syz.4.5': attribute type 7 has an invalid length. [ 86.836032][ T6028] netlink: 'syz.4.5': attribute type 8 has an invalid length. [ 86.910133][ T6033] macvlan2: entered allmulticast mode [ 86.927437][ T6033] veth1_vlan: entered allmulticast mode [ 86.944343][ T6033] veth1_vlan: left allmulticast mode [ 86.957541][ T6028] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5'. [ 87.296835][ T6039] Bluetooth: MGMT ver 1.23 [ 87.563148][ T6048] netlink: 'syz.3.14': attribute type 10 has an invalid length. [ 87.642392][ T6050] netlink: 36 bytes leftover after parsing attributes in process `syz.3.14'. [ 87.661789][ T6048] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 87.821076][ T6055] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17'. [ 87.857413][ T6045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 87.960012][ T6059] pimreg: entered allmulticast mode [ 88.019680][ T6059] pimreg: left allmulticast mode [ 88.778589][ T6076] netlink: 'syz.0.18': attribute type 1 has an invalid length. [ 88.839491][ T6076] netlink: 224 bytes leftover after parsing attributes in process `syz.0.18'. [ 88.993537][ T6085] netlink: 16 bytes leftover after parsing attributes in process `syz.2.21'. [ 89.043827][ T6085] openvswitch: netlink: Flow actions attr not present in new flow. [ 89.439629][ T6079] netlink: 'syz.1.22': attribute type 1 has an invalid length. [ 89.460478][ T6079] netlink: 236 bytes leftover after parsing attributes in process `syz.1.22'. [ 89.890254][ T6103] netlink: 788 bytes leftover after parsing attributes in process `syz.2.28'. [ 89.910949][ T6106] netlink: 'syz.3.25': attribute type 13 has an invalid length. [ 89.934036][ T6106] netlink: 'syz.3.25': attribute type 17 has an invalid length. [ 90.014535][ T6110] netlink: 28 bytes leftover after parsing attributes in process `syz.1.26'. [ 90.254065][ T6128] netlink: 'syz.4.29': attribute type 10 has an invalid length. [ 90.353845][ T6106] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 90.372430][ T6132] netlink: 36 bytes leftover after parsing attributes in process `syz.4.29'. [ 90.782498][ T6109] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.790335][ T6109] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.910166][ T6109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.932113][ T6109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.124166][ T6128] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 91.203805][ T6139] syzkaller0: entered promiscuous mode [ 91.209671][ T6139] syzkaller0: entered allmulticast mode [ 91.226565][ T59] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.248499][ T59] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.300561][ T6154] netlink: 24 bytes leftover after parsing attributes in process `syz.2.31'. [ 91.323970][ T59] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.417568][ T59] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.476515][ T6158] netlink: 24 bytes leftover after parsing attributes in process `syz.0.32'. [ 92.805199][ T6174] netlink: 24 bytes leftover after parsing attributes in process `syz.4.35'. [ 93.156532][ T6156] pimreg: entered allmulticast mode [ 93.165955][ T6164] pimreg: entered allmulticast mode [ 93.315353][ T6178] netlink: 216 bytes leftover after parsing attributes in process `syz.0.37'. [ 93.328671][ T6178] netlink: 24 bytes leftover after parsing attributes in process `syz.0.37'. [ 93.375809][ T6178] netlink: 16 bytes leftover after parsing attributes in process `syz.0.37'. [ 93.384916][ T6184] netlink: 24 bytes leftover after parsing attributes in process `syz.0.37'. [ 93.414926][ T6185] syz.1.36 uses obsolete (PF_INET,SOCK_PACKET) [ 93.560704][ T6189] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 93.649934][ T6191] warning: `syz.2.41' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 93.704690][ T6191] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 93.834615][ T6196] netlink: 'syz.1.42': attribute type 10 has an invalid length. [ 93.863290][ T6198] netlink: 'syz.3.43': attribute type 10 has an invalid length. [ 93.965491][ T6196] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.995661][ T6196] bond0: (slave team0): Enslaving as an active interface with an up link [ 94.020746][ T6197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.361499][ T6216] pimreg: entered allmulticast mode [ 94.391544][ T6216] pimreg: left allmulticast mode [ 94.523040][ T6221] pimreg: left allmulticast mode [ 94.526854][ T6222] netlink: 'syz.2.48': attribute type 1 has an invalid length. [ 95.115935][ T6225] netlink: 'syz.3.50': attribute type 10 has an invalid length. [ 95.223473][ T6227] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 95.304425][ T6231] netlink: 'syz.4.51': attribute type 4 has an invalid length. [ 95.501617][ T6234] netlink: 'syz.0.53': attribute type 4 has an invalid length. [ 95.525232][ T6231] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.533023][ T6231] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.542593][ T6235] netlink: 'syz.0.53': attribute type 4 has an invalid length. [ 95.635779][ T9] IPVS: starting estimator thread 0... [ 95.746963][ T6239] IPVS: using max 30 ests per chain, 72000 per kthread [ 95.790206][ T6245] __nla_validate_parse: 6 callbacks suppressed [ 95.790224][ T6245] netlink: 24 bytes leftover after parsing attributes in process `syz.2.54'. [ 96.019098][ T6231] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.038591][ T6231] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.193344][ T6241] syzkaller1: entered promiscuous mode [ 96.206360][ T6241] syzkaller1: entered allmulticast mode [ 96.236316][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.248154][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.341162][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.385641][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.461895][ T6262] netlink: 'syz.1.58': attribute type 10 has an invalid length. [ 96.464805][ T6259] bond0: (slave team0): Releasing backup interface [ 96.505166][ T6259] bridge_slave_0: left allmulticast mode [ 96.514296][ T6259] bridge_slave_0: left promiscuous mode [ 96.522917][ T6259] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.543550][ T6259] bridge_slave_1: left allmulticast mode [ 96.552183][ T6259] bridge_slave_1: left promiscuous mode [ 96.603199][ T6259] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.697372][ T6259] bond0: (slave bond_slave_0): Releasing backup interface [ 96.916004][ T6259] bond0: (slave bond_slave_1): Releasing backup interface [ 97.080175][ T6259] team0: Port device team_slave_0 removed [ 97.183589][ T6259] team0: Port device team_slave_1 removed [ 97.204008][ T6259] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.241404][ T6259] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.275326][ T6259] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.325865][ T6259] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.350105][ T6259] syz.1.58 (6259) used greatest stack depth: 19864 bytes left [ 97.386021][ T6278] netlink: 'syz.4.61': attribute type 10 has an invalid length. [ 97.423597][ T6262] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 97.440851][ T6279] netlink: 36 bytes leftover after parsing attributes in process `syz.4.61'. [ 97.454489][ T30] audit: type=1800 audit(1755038864.625:2): pid=6266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.58" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 97.454928][ T6266] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 97.478733][ T6274] pimreg: entered allmulticast mode [ 97.485843][ T6266] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 97.505602][ T6266] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 97.575043][ T6277] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.789099][ T6288] netlink: 24 bytes leftover after parsing attributes in process `syz.1.64'. [ 98.029858][ T6296] pimreg: entered allmulticast mode [ 98.051885][ T6301] netlink: 'syz.3.65': attribute type 1 has an invalid length. [ 98.074977][ T6301] netlink: 224 bytes leftover after parsing attributes in process `syz.3.65'. [ 98.161267][ T6303] netlink: 44 bytes leftover after parsing attributes in process `syz.0.66'. [ 98.230158][ T6296] pimreg: left allmulticast mode [ 98.442933][ T6307] lo speed is unknown, defaulting to 1000 [ 98.459804][ T6307] lo speed is unknown, defaulting to 1000 [ 98.475682][ T6307] lo speed is unknown, defaulting to 1000 [ 98.511220][ T6307] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 98.711554][ T6307] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 98.882000][ T6307] lo speed is unknown, defaulting to 1000 [ 98.908552][ T6307] lo speed is unknown, defaulting to 1000 [ 98.924116][ T6315] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 98.942930][ T6307] lo speed is unknown, defaulting to 1000 [ 98.963229][ T6307] lo speed is unknown, defaulting to 1000 [ 98.989827][ T6321] tipc: Enabling of bearer rejected, failed to enable media [ 99.031066][ T6307] lo speed is unknown, defaulting to 1000 [ 99.055080][ T6323] Zero length message leads to an empty skb [ 99.062672][ T6323] netlink: 24 bytes leftover after parsing attributes in process `syz.3.72'. [ 99.108514][ T6321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.73'. [ 99.305637][ T6327] validate_nla: 4 callbacks suppressed [ 99.305655][ T6327] netlink: 'syz.3.74': attribute type 3 has an invalid length. [ 99.334331][ T6330] netlink: 788 bytes leftover after parsing attributes in process `syz.0.75'. [ 99.414528][ T6327] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.719708][ T6327] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.781505][ T6339] netlink: 'syz.2.77': attribute type 10 has an invalid length. [ 99.863409][ T6327] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.900544][ T6341] netlink: 36 bytes leftover after parsing attributes in process `syz.2.77'. [ 99.929530][ T6339] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 100.049078][ T6327] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.074857][ T6338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.087130][ T6344] netlink: 28 bytes leftover after parsing attributes in process `syz.1.78'. [ 100.177508][ T49] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.203867][ T49] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.235373][ T49] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.253800][ T6346] netlink: 'syz.1.79': attribute type 4 has an invalid length. [ 100.263740][ T49] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.320729][ T6347] netlink: 'syz.1.79': attribute type 4 has an invalid length. [ 100.452886][ T6351] netlink: 'syz.4.83': attribute type 4 has an invalid length. [ 100.502009][ T6351] netlink: 'syz.4.83': attribute type 4 has an invalid length. [ 100.644689][ T6359] pimreg: entered allmulticast mode [ 100.855282][ T6362] bond0: (slave wlan1): Releasing backup interface [ 100.863462][ T6371] __nla_validate_parse: 1 callbacks suppressed [ 100.863480][ T6371] netlink: 24 bytes leftover after parsing attributes in process `syz.4.85'. [ 100.874091][ T6372] netlink: 'syz.0.82': attribute type 1 has an invalid length. [ 100.986342][ T6372] netlink: 224 bytes leftover after parsing attributes in process `syz.0.82'. [ 101.134212][ T6370] veth0: entered promiscuous mode [ 101.165312][ T6361] veth0: left promiscuous mode [ 101.185225][ T6364] syz.2.86 (6364) used greatest stack depth: 17896 bytes left [ 101.203511][ T6377] netlink: 'syz.4.87': attribute type 1 has an invalid length. [ 101.309122][ T6377] netlink: 224 bytes leftover after parsing attributes in process `syz.4.87'. [ 101.520915][ T6384] netlink: 28 bytes leftover after parsing attributes in process `syz.4.89'. [ 101.674522][ T6388] netlink: 'syz.1.92': attribute type 4 has an invalid length. [ 101.707012][ T6388] netlink: 'syz.1.92': attribute type 4 has an invalid length. [ 101.749611][ T6391] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.853612][ T6393] netlink: 4 bytes leftover after parsing attributes in process `syz.3.91'. [ 102.167430][ T6393] bridge_slave_1: left allmulticast mode [ 102.173142][ T6393] bridge_slave_1: left promiscuous mode [ 102.209654][ T6393] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.415054][ T6393] bridge_slave_0: left allmulticast mode [ 102.420936][ T6393] bridge_slave_0: left promiscuous mode [ 102.442349][ T6393] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.734726][ T6418] netlink: 24 bytes leftover after parsing attributes in process `syz.4.97'. [ 102.832790][ T6413] netlink: 224 bytes leftover after parsing attributes in process `syz.2.96'. [ 102.949460][ T6422] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 103.639790][ T5871] lo speed is unknown, defaulting to 1000 [ 103.671788][ T5871] syz1: Port: 1 Link DOWN [ 104.098514][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.148779][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.489813][ T6437] netlink: 24 bytes leftover after parsing attributes in process `syz.3.105'. [ 104.544227][ T6439] netlink: 28 bytes leftover after parsing attributes in process `syz.1.104'. [ 104.553934][ T6443] validate_nla: 4 callbacks suppressed [ 104.553950][ T6443] netlink: 'syz.0.106': attribute type 4 has an invalid length. [ 104.616917][ T6444] netlink: 'syz.0.106': attribute type 4 has an invalid length. [ 104.630947][ T6442] netlink: 4 bytes leftover after parsing attributes in process `syz.4.107'. [ 104.710058][ T5982] lo speed is unknown, defaulting to 1000 [ 104.722849][ T5982] syz1: Port: 1 Link ACTIVE [ 104.756773][ T6450] pimreg: left allmulticast mode [ 105.147479][ T6464] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 105.235105][ T6467] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 105.502042][ T6467] bridge1: entered promiscuous mode [ 105.516940][ T6467] bridge1: entered allmulticast mode [ 105.570745][ T6467] team0: Port device bridge1 added [ 105.597836][ T6475] bridge_slave_0: left allmulticast mode [ 105.603535][ T6475] bridge_slave_0: left promiscuous mode [ 105.609943][ T6475] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.654817][ T6475] bridge_slave_1: left allmulticast mode [ 105.676864][ T6475] bridge_slave_1: left promiscuous mode [ 105.726525][ T6483] netlink: 'syz.1.114': attribute type 1 has an invalid length. [ 105.745472][ T6475] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.761476][ T6475] bond0: (slave bond_slave_0): Releasing backup interface [ 105.771698][ T6475] bond0: (slave bond_slave_1): Releasing backup interface [ 106.073521][ T6475] team0: Port device team_slave_0 removed [ 106.082985][ T6475] team0: Port device team_slave_1 removed [ 106.089553][ T6475] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.102978][ T6485] netlink: 'syz.3.115': attribute type 1 has an invalid length. [ 106.115764][ T6475] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.132965][ T6475] bond0: (slave wlan1): Releasing backup interface [ 106.151715][ T6485] __nla_validate_parse: 8 callbacks suppressed [ 106.151735][ T6485] netlink: 224 bytes leftover after parsing attributes in process `syz.3.115'. [ 106.502929][ T6496] netlink: 'syz.2.119': attribute type 4 has an invalid length. [ 106.557513][ T6496] netlink: 'syz.2.119': attribute type 4 has an invalid length. [ 106.575529][ T6495] netlink: 'syz.0.117': attribute type 1 has an invalid length. [ 106.626845][ T6495] netlink: 224 bytes leftover after parsing attributes in process `syz.0.117'. [ 106.626921][ T6498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.117'. [ 106.713100][ T6495] netlink: 24 bytes leftover after parsing attributes in process `syz.0.117'. [ 106.848269][ T6508] netlink: 24 bytes leftover after parsing attributes in process `syz.2.122'. [ 106.873496][ T6511] netlink: 28 bytes leftover after parsing attributes in process `syz.1.118'. [ 107.052872][ T6516] netlink: 'syz.1.124': attribute type 1 has an invalid length. [ 107.092531][ T6518] netlink: 24 bytes leftover after parsing attributes in process `syz.3.125'. [ 107.142746][ T6521] macvlan0: entered allmulticast mode [ 107.148420][ T6521] veth1_vlan: entered allmulticast mode [ 107.191930][ T6519] netlink: 8 bytes leftover after parsing attributes in process `syz.1.124'. [ 107.212713][ T6521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.126'. [ 107.251150][ T6521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.126'. [ 107.342866][ T6525] pimreg: entered allmulticast mode [ 107.549344][ T6540] bridge_slave_0: entered promiscuous mode [ 108.123613][ T6553] netlink: 'syz.1.129': attribute type 1 has an invalid length. [ 109.172122][ T6587] netlink: 'syz.1.136': attribute type 1 has an invalid length. [ 109.607722][ T6597] batadv1: entered promiscuous mode [ 109.614286][ T6597] batadv1: entered allmulticast mode [ 109.992171][ T6606] pimreg: entered allmulticast mode [ 110.044341][ T6606] pimreg: left allmulticast mode [ 110.132241][ T6613] validate_nla: 1 callbacks suppressed [ 110.132258][ T6613] netlink: 'syz.2.143': attribute type 4 has an invalid length. [ 110.160137][ T6615] netlink: 'syz.0.146': attribute type 13 has an invalid length. [ 110.163054][ T6613] netlink: 'syz.2.143': attribute type 4 has an invalid length. [ 110.170692][ T6615] netlink: 'syz.0.146': attribute type 17 has an invalid length. [ 110.226424][ T6615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.234567][ T6615] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.248141][ T6615] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 110.350127][ T6608] lo speed is unknown, defaulting to 1000 [ 110.518933][ T6625] !: renamed from dummy0 [ 110.532918][ T6624] !: renamed from dummy0 (while UP) [ 110.680170][ T6629] lo speed is unknown, defaulting to 1000 [ 110.959629][ T5872] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 111.253530][ T6645] __nla_validate_parse: 15 callbacks suppressed [ 111.253550][ T6645] netlink: 24 bytes leftover after parsing attributes in process `syz.4.150'. [ 111.366403][ T6631] lo speed is unknown, defaulting to 1000 [ 111.722645][ T6654] pimreg: entered allmulticast mode [ 111.791272][ T6665] netlink: 'syz.1.152': attribute type 1 has an invalid length. [ 111.842279][ T6665] netlink: 224 bytes leftover after parsing attributes in process `syz.1.152'. [ 112.185667][ T6676] netlink: 'syz.4.154': attribute type 1 has an invalid length. [ 112.239708][ T6676] netlink: 224 bytes leftover after parsing attributes in process `syz.4.154'. [ 112.923757][ T6701] netlink: 'syz.0.157': attribute type 4 has an invalid length. [ 112.977572][ T6703] netlink: 'syz.0.157': attribute type 4 has an invalid length. [ 112.995736][ T6702] netlink: 788 bytes leftover after parsing attributes in process `syz.1.155'. [ 113.101175][ T5871] lo speed is unknown, defaulting to 1000 [ 113.101195][ T24] lo speed is unknown, defaulting to 1000 [ 113.165558][ T6709] netlink: 4 bytes leftover after parsing attributes in process `syz.4.156'. [ 113.269973][ T6714] Illegal XDP return value 16128 on prog (id 77) dev lo, expect packet loss! [ 113.290696][ T6710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.319266][ T6710] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 113.972872][ T6726] netlink: 16 bytes leftover after parsing attributes in process `syz.2.163'. [ 114.015010][ T6726] bridge_slave_0: left allmulticast mode [ 114.038376][ T6726] bridge_slave_0: left promiscuous mode [ 114.044271][ T6726] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.049776][ T6728] netlink: 'syz.3.162': attribute type 10 has an invalid length. [ 114.069698][ T6726] bridge_slave_1: left allmulticast mode [ 114.075398][ T6726] bridge_slave_1: left promiscuous mode [ 114.123086][ T6731] netlink: 36 bytes leftover after parsing attributes in process `syz.3.162'. [ 114.150500][ T6726] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.213093][ T6726] bond0: (slave bond_slave_0): Releasing backup interface [ 114.224940][ T6726] bond0: (slave bond_slave_1): Releasing backup interface [ 114.238862][ T6726] team0: Port device team_slave_0 removed [ 114.253002][ T6726] team0: Port device team_slave_1 removed [ 114.260469][ T6726] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.296119][ T6740] netlink: 'syz.1.165': attribute type 11 has an invalid length. [ 114.305494][ T6726] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.315530][ T6726] bond0: (slave wlan1): Releasing backup interface [ 114.384112][ T6732] team0: Mode changed to "broadcast" [ 114.391600][ T6724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.972053][ T6758] netlink: 788 bytes leftover after parsing attributes in process `syz.0.170'. [ 115.141966][ T6764] netlink: 24 bytes leftover after parsing attributes in process `syz.4.172'. [ 115.200435][ T6761] netlink: 32 bytes leftover after parsing attributes in process `syz.3.171'. [ 115.296676][ T6767] pimreg: left allmulticast mode [ 115.645381][ T6775] pimreg: entered allmulticast mode [ 116.827109][ T6800] __nla_validate_parse: 4 callbacks suppressed [ 116.827126][ T6800] netlink: 52 bytes leftover after parsing attributes in process `syz.2.179'. [ 116.934342][ T6801] netlink: 24 bytes leftover after parsing attributes in process `syz.2.179'. [ 116.961286][ T6801] netlink: 24 bytes leftover after parsing attributes in process `syz.2.179'. [ 116.971258][ T6801] netlink: 'syz.2.179': attribute type 3 has an invalid length. [ 117.020524][ T6806] netlink: 24 bytes leftover after parsing attributes in process `syz.1.180'. [ 117.021943][ T6804] netlink: 'syz.4.181': attribute type 10 has an invalid length. [ 117.079663][ T6804] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 117.131106][ T6804] netlink: 36 bytes leftover after parsing attributes in process `syz.4.181'. [ 117.134540][ T6812] netlink: 'syz.0.183': attribute type 4 has an invalid length. [ 117.150304][ T6802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.162596][ T5871] lo speed is unknown, defaulting to 1000 [ 117.171817][ T5871] syz1: Port: 1 Link DOWN [ 117.180305][ T6812] netlink: 'syz.0.183': attribute type 4 has an invalid length. [ 117.181500][ T6813] pimreg: left allmulticast mode [ 117.206094][ T24] lo speed is unknown, defaulting to 1000 [ 117.212188][ T24] syz1: Port: 1 Link ACTIVE [ 117.370040][ T6818] netlink: 24 bytes leftover after parsing attributes in process `syz.3.185'. [ 117.404636][ T6819] netlink: 14 bytes leftover after parsing attributes in process `syz.0.184'. [ 117.493590][ T6819] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.504827][ T6819] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.514591][ T6819] bond0 (unregistering): Released all slaves [ 117.544606][ T6822] pimreg: left allmulticast mode [ 118.009742][ T6832] netlink: 'syz.1.188': attribute type 1 has an invalid length. [ 118.109106][ T6832] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.181442][ T6832] netlink: 28 bytes leftover after parsing attributes in process `syz.1.188'. [ 118.252029][ T6832] gretap1: entered promiscuous mode [ 118.333854][ T6832] bond1: (slave gretap1): making interface the new active one [ 118.402778][ T6832] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 118.520838][ T6832] netlink: 240 bytes leftover after parsing attributes in process `syz.1.188'. [ 118.823661][ T6854] netlink: 788 bytes leftover after parsing attributes in process `syz.1.195'. [ 120.301262][ T6887] netlink: 'syz.2.198': attribute type 4 has an invalid length. [ 120.322071][ T6889] netlink: 'syz.0.203': attribute type 4 has an invalid length. [ 120.351757][ T6886] netlink: 'syz.0.203': attribute type 4 has an invalid length. [ 120.355128][ T24] lo speed is unknown, defaulting to 1000 [ 120.366052][ T5871] lo speed is unknown, defaulting to 1000 [ 120.373094][ T6887] netlink: 'syz.2.198': attribute type 4 has an invalid length. [ 120.390478][ T6890] pimreg: entered allmulticast mode [ 120.441438][ T6890] pimreg: left allmulticast mode [ 120.754056][ T6901] ieee802154 phy1 wpan1: encryption failed: -22 [ 121.189067][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.241167][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.297531][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.325905][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.781263][ T6914] lo speed is unknown, defaulting to 1000 [ 121.782202][ T6917] netlink: 'syz.1.208': attribute type 1 has an invalid length. [ 121.856658][ T6917] __nla_validate_parse: 4 callbacks suppressed [ 121.856675][ T6917] netlink: 224 bytes leftover after parsing attributes in process `syz.1.208'. [ 121.972325][ T6923] netlink: 4 bytes leftover after parsing attributes in process `syz.3.210'. [ 122.104811][ T6918] IPv6: Can't replace route, no match found [ 122.138025][ T6923] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.449746][ T6923] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.740939][ T6930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.213'. [ 122.829433][ T6933] netlink: 24 bytes leftover after parsing attributes in process `syz.1.222'. [ 122.906822][ T6935] netlink: 452 bytes leftover after parsing attributes in process `syz.3.213'. [ 123.003137][ T6939] pimreg: entered allmulticast mode [ 123.006558][ T6938] netlink: 'syz.2.215': attribute type 4 has an invalid length. [ 123.029164][ T6927] lo speed is unknown, defaulting to 1000 [ 123.055153][ T6938] netlink: 'syz.2.215': attribute type 4 has an invalid length. [ 123.160519][ T6941] netlink: 'syz.0.216': attribute type 4 has an invalid length. [ 123.248511][ T5872] Bluetooth: hci4: link tx timeout [ 123.254048][ T5872] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 123.264283][ T5865] Bluetooth: hci4: link tx timeout [ 123.266901][ T6944] netlink: 'syz.0.216': attribute type 4 has an invalid length. [ 123.270082][ T5865] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 123.352554][ T9] lo speed is unknown, defaulting to 1000 [ 123.358574][ T9] lo speed is unknown, defaulting to 1000 [ 123.868855][ T5865] Bluetooth: hci4: link tx timeout [ 123.874159][ T5865] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 123.884740][ T5865] Bluetooth: hci4: link tx timeout [ 123.890715][ T5865] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 124.389752][ T6970] netlink: 24 bytes leftover after parsing attributes in process `syz.3.224'. [ 124.696060][ T6973] pimreg: entered allmulticast mode [ 124.772024][ T6983] pimreg: left allmulticast mode [ 124.922116][ T6981] netlink: 155800 bytes leftover after parsing attributes in process `syz.4.227'. [ 125.104396][ T6996] netlink: 4 bytes leftover after parsing attributes in process `syz.3.229'. [ 125.190491][ T6996] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 125.210133][ T6998] netlink: 24 bytes leftover after parsing attributes in process `syz.2.230'. [ 125.357049][ T5865] Bluetooth: hci4: command 0x0406 tx timeout [ 125.890937][ T7020] veth0: entered promiscuous mode [ 125.902216][ T7019] veth0: left promiscuous mode [ 126.072743][ T7033] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 126.423448][ T7043] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.494806][ T7049] batadv_slave_0: entered promiscuous mode [ 126.523411][ T7033] netlink: 12 bytes leftover after parsing attributes in process `syz.0.239'. [ 126.551862][ T7043] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.631426][ T7043] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.724124][ T7043] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.860911][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.909951][ T6691] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.972618][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.020582][ T36] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.232592][ T7066] __nla_validate_parse: 2 callbacks suppressed [ 127.232610][ T7066] netlink: 24 bytes leftover after parsing attributes in process `syz.4.245'. [ 127.690149][ T7077] netlink: 'syz.2.248': attribute type 10 has an invalid length. [ 127.778540][ T7077] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 127.841887][ T7098] netlink: 'syz.4.251': attribute type 4 has an invalid length. [ 127.905217][ T7095] netlink: 'syz.4.251': attribute type 4 has an invalid length. [ 127.944874][ T7093] lo speed is unknown, defaulting to 1000 [ 128.347151][ T7113] netlink: 'syz.1.252': attribute type 1 has an invalid length. [ 128.468043][ T7113] netlink: 224 bytes leftover after parsing attributes in process `syz.1.252'. [ 128.860864][ T7132] netlink: 24 bytes leftover after parsing attributes in process `syz.2.261'. [ 129.467399][ T7155] netlink: 24 bytes leftover after parsing attributes in process `syz.1.268'. [ 129.627421][ T7159] pimreg: left allmulticast mode [ 129.707006][ T7163] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 129.957044][ T7173] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 129.986095][ T7167] lo speed is unknown, defaulting to 1000 [ 130.017827][ T7173] netlink: 28 bytes leftover after parsing attributes in process `syz.2.272'. [ 130.237210][ T7182] geneve2: entered promiscuous mode [ 130.252701][ T7182] geneve2: entered allmulticast mode [ 130.273491][ T7186] netlink: 24 bytes leftover after parsing attributes in process `syz.2.275'. [ 130.507823][ T7180] lo speed is unknown, defaulting to 1000 [ 130.599996][ T7190] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 130.669071][ T7199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.278'. [ 130.688554][ T7199] netlink: 16 bytes leftover after parsing attributes in process `syz.2.278'. [ 130.709849][ T7190] netlink: 155800 bytes leftover after parsing attributes in process `syz.1.277'. [ 131.287958][ T7212] netlink: 'syz.4.280': attribute type 4 has an invalid length. [ 131.397775][ T7220] netlink: 'syz.4.280': attribute type 4 has an invalid length. [ 131.749472][ T7225] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.872920][ T7239] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.959159][ T7225] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.989505][ T7231] netlink: 28 bytes leftover after parsing attributes in process `syz.4.286'. [ 132.039454][ T6691] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.078261][ T6691] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.175289][ T7225] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.284945][ T7252] netlink: 24 bytes leftover after parsing attributes in process `syz.1.290'. [ 132.423479][ T7255] netlink: 'syz.0.291': attribute type 7 has an invalid length. [ 132.431941][ T7255] netlink: 'syz.0.291': attribute type 8 has an invalid length. [ 132.440742][ T7255] netlink: 224 bytes leftover after parsing attributes in process `syz.0.291'. [ 132.453138][ T7225] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.540897][ T7256] pimreg: entered allmulticast mode [ 132.669599][ T7256] pimreg: left allmulticast mode [ 132.799721][ T7264] netlink: 24 bytes leftover after parsing attributes in process `syz.4.293'. [ 132.849555][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.884823][ T36] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.897348][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.945348][ T36] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.994928][ T7264] pimreg: left allmulticast mode [ 133.078387][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.179024][ T7272] netlink: 788 bytes leftover after parsing attributes in process `syz.3.297'. [ 133.370643][ T7280] netlink: 'syz.1.301': attribute type 4 has an invalid length. [ 133.407202][ T7280] netlink: 'syz.1.301': attribute type 4 has an invalid length. [ 133.710159][ T7282] netlink: 155800 bytes leftover after parsing attributes in process `syz.2.296'. [ 134.112618][ T7298] netlink: 12 bytes leftover after parsing attributes in process `syz.4.304'. [ 134.388084][ T7299] lo speed is unknown, defaulting to 1000 [ 134.416725][ T7300] IPv6: Can't replace route, no match found [ 134.677070][ T7297] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.990449][ T7320] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 135.049509][ T7320] netlink: 28 bytes leftover after parsing attributes in process `syz.3.312'. [ 135.564751][ T7338] netlink: 'syz.4.320': attribute type 1 has an invalid length. [ 135.733371][ T7344] netlink: 'syz.1.317': attribute type 1 has an invalid length. [ 135.809340][ T7341] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 135.829079][ T7341] netlink: 155800 bytes leftover after parsing attributes in process `syz.0.321'. [ 135.856537][ T7344] netlink: 224 bytes leftover after parsing attributes in process `syz.1.317'. [ 135.909920][ T7347] lo speed is unknown, defaulting to 1000 [ 135.977968][ T7352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.322'. [ 136.230402][ T7356] IPv6: Can't replace route, no match found [ 136.930937][ T7380] netlink: 'syz.3.329': attribute type 1 has an invalid length. [ 137.050478][ T7379] IPv6: NLM_F_CREATE should be specified when creating new route [ 137.481170][ T7396] __nla_validate_parse: 1 callbacks suppressed [ 137.481189][ T7396] netlink: 24 bytes leftover after parsing attributes in process `syz.0.341'. [ 137.589356][ T7396] pimreg: entered allmulticast mode [ 137.639989][ T7401] netlink: 24 bytes leftover after parsing attributes in process `syz.2.343'. [ 137.673299][ T7396] pimreg: left allmulticast mode [ 137.745123][ T7404] netlink: 380 bytes leftover after parsing attributes in process `syz.1.344'. [ 137.799311][ T7402] pimreg: left allmulticast mode [ 137.915964][ T7408] netlink: 'syz.0.346': attribute type 4 has an invalid length. [ 137.931811][ T5871] lo speed is unknown, defaulting to 1000 [ 137.940222][ T5871] syz1: Port: 1 Link DOWN [ 137.945586][ T7408] netlink: 'syz.0.346': attribute type 4 has an invalid length. [ 137.960470][ T5871] lo speed is unknown, defaulting to 1000 [ 137.967273][ T5871] syz1: Port: 1 Link ACTIVE [ 138.160107][ T7422] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.625018][ T7431] IPv6: Can't replace route, no match found [ 138.721733][ T7438] netlink: 24 bytes leftover after parsing attributes in process `syz.2.354'. [ 138.917804][ T7443] pimreg: entered allmulticast mode [ 138.924609][ T7433] lo speed is unknown, defaulting to 1000 [ 139.155295][ T7451] pimreg: entered allmulticast mode [ 139.222798][ T7451] pimreg: left allmulticast mode [ 139.363581][ T7430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.440385][ T7459] netlink: 'syz.1.362': attribute type 21 has an invalid length. [ 139.451914][ T7459] netlink: 128 bytes leftover after parsing attributes in process `syz.1.362'. [ 139.461398][ T7459] netlink: 'syz.1.362': attribute type 5 has an invalid length. [ 139.469616][ T7459] netlink: 3 bytes leftover after parsing attributes in process `syz.1.362'. [ 139.695299][ T7467] netlink: 28 bytes leftover after parsing attributes in process `syz.2.366'. [ 140.277536][ T7491] pimreg: entered allmulticast mode [ 140.325116][ T7494] tipc: Enabling of bearer rejected, failed to enable media [ 140.411219][ T7496] netlink: 'syz.1.376': attribute type 4 has an invalid length. [ 140.416450][ T7488] netlink: 4 bytes leftover after parsing attributes in process `syz.4.375'. [ 140.432378][ T7491] pimreg: left allmulticast mode [ 140.460290][ T7500] netlink: 'syz.1.376': attribute type 4 has an invalid length. [ 140.524341][ T7504] netlink: 24 bytes leftover after parsing attributes in process `syz.0.378'. [ 140.730068][ T7508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.379'. [ 140.786807][ T7512] netlink: 'syz.4.382': attribute type 7 has an invalid length. [ 140.805538][ T7512] netlink: 'syz.4.382': attribute type 8 has an invalid length. [ 141.097672][ T7516] lo speed is unknown, defaulting to 1000 [ 141.111635][ T7522] IPv6: Can't replace route, no match found [ 141.200755][ T7529] netlink: 'syz.0.393': attribute type 1 has an invalid length. [ 141.272562][ T7532] netlink: 'syz.3.386': attribute type 1 has an invalid length. [ 141.550859][ T7514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.650357][ T7544] netlink: 'syz.1.392': attribute type 4 has an invalid length. [ 141.722028][ T7546] netlink: 'syz.1.392': attribute type 4 has an invalid length. [ 142.432278][ T7560] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.587694][ T7570] lo speed is unknown, defaulting to 1000 [ 142.685579][ T7577] __nla_validate_parse: 4 callbacks suppressed [ 142.685595][ T7577] netlink: 28 bytes leftover after parsing attributes in process `syz.1.407'. [ 142.824367][ T7587] pimreg: entered allmulticast mode [ 142.890845][ T7587] pimreg: left allmulticast mode [ 144.085082][ T7621] tipc: Enabling of bearer rejected, failed to enable media [ 144.557075][ T7627] lo speed is unknown, defaulting to 1000 [ 144.667227][ T7639] tipc: Enabling of bearer rejected, failed to enable media [ 145.325384][ T7663] validate_nla: 6 callbacks suppressed [ 145.325404][ T7663] netlink: 'syz.0.438': attribute type 1 has an invalid length. [ 145.422251][ T7663] netlink: 224 bytes leftover after parsing attributes in process `syz.0.438'. [ 146.297282][ T7680] netlink: 'syz.4.444': attribute type 1 has an invalid length. [ 146.329460][ T7680] netlink: 224 bytes leftover after parsing attributes in process `syz.4.444'. [ 146.417074][ T7683] lo speed is unknown, defaulting to 1000 [ 146.674220][ T7698] bpq0: entered promiscuous mode [ 146.737052][ T7689] IPv6: Can't replace route, no match found [ 146.813799][ T7686] lo speed is unknown, defaulting to 1000 [ 147.227309][ T7682] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.825476][ T7729] netlink: 'syz.2.459': attribute type 1 has an invalid length. [ 147.862842][ T7729] netlink: 224 bytes leftover after parsing attributes in process `syz.2.459'. [ 148.199431][ T7743] netlink: 'syz.4.464': attribute type 4 has an invalid length. [ 148.227313][ T7739] pimreg: entered allmulticast mode [ 148.250705][ T7741] netlink: 'syz.4.464': attribute type 4 has an invalid length. [ 148.327412][ T7739] pimreg: left allmulticast mode [ 148.453430][ T7752] lo speed is unknown, defaulting to 1000 [ 148.555819][ T7757] netlink: 'syz.2.466': attribute type 1 has an invalid length. [ 148.665362][ T7757] netlink: 224 bytes leftover after parsing attributes in process `syz.2.466'. [ 149.159677][ T7771] netlink: 8 bytes leftover after parsing attributes in process `syz.4.474'. [ 149.505967][ T7785] netlink: 24 bytes leftover after parsing attributes in process `syz.0.481'. [ 149.675069][ T7792] netlink: 'syz.1.483': attribute type 12 has an invalid length. [ 149.683036][ T7792] netlink: 132 bytes leftover after parsing attributes in process `syz.1.483'. [ 149.715993][ T7793] pimreg: entered allmulticast mode [ 149.842214][ T7802] tipc: Enabling of bearer rejected, failed to enable media [ 149.866069][ T7793] pimreg: left allmulticast mode [ 149.933210][ T7802] netlink: 4 bytes leftover after parsing attributes in process `syz.4.484'. [ 150.001157][ T7805] bond0: (slave wlan1): Releasing backup interface [ 150.014332][ T7810] netlink: 'syz.2.487': attribute type 10 has an invalid length. [ 150.043642][ T7811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.488'. [ 150.132609][ T7815] netlink: 4 bytes leftover after parsing attributes in process `syz.3.490'. [ 150.153476][ T7810] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 150.177245][ T7811] netlink: 452 bytes leftover after parsing attributes in process `syz.1.488'. [ 150.432790][ T7823] netlink: 'syz.4.491': attribute type 1 has an invalid length. [ 150.504371][ T7823] netlink: 224 bytes leftover after parsing attributes in process `syz.4.491'. [ 150.963886][ T7837] pimreg: entered allmulticast mode [ 150.992441][ T7837] pimreg: left allmulticast mode [ 151.535234][ T7859] pimreg: entered allmulticast mode [ 151.609675][ T7859] pimreg: left allmulticast mode [ 151.763667][ T7862] netlink: 'syz.4.506': attribute type 1 has an invalid length. [ 152.227510][ T7892] netlink: 'syz.2.514': attribute type 10 has an invalid length. [ 152.277672][ T7891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.309809][ T7896] pimreg: entered allmulticast mode [ 152.343740][ T7896] pimreg: left allmulticast mode [ 152.389781][ T7899] netlink: 'syz.1.516': attribute type 1 has an invalid length. [ 152.681277][ T7913] netlink: 'syz.0.521': attribute type 4 has an invalid length. [ 152.691849][ T7910] tipc: Enabling of bearer rejected, failed to enable media [ 153.110140][ T7932] netlink: 'syz.2.527': attribute type 1 has an invalid length. [ 153.126269][ T7932] __nla_validate_parse: 10 callbacks suppressed [ 153.126286][ T7932] netlink: 224 bytes leftover after parsing attributes in process `syz.2.527'. [ 153.143793][ T24] IPVS: starting estimator thread 0... [ 153.256457][ T7934] IPVS: using max 25 ests per chain, 60000 per kthread [ 153.316492][ T7933] lo speed is unknown, defaulting to 1000 [ 153.489920][ T7944] netlink: 'syz.1.533': attribute type 4 has an invalid length. [ 153.719965][ T7958] netlink: 'syz.1.536': attribute type 4 has an invalid length. [ 153.772342][ T7953] netlink: 'syz.1.536': attribute type 4 has an invalid length. [ 153.838662][ T7964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.539'. [ 153.847622][ T7962] bpq0: left promiscuous mode [ 154.012774][ T7969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.540'. [ 154.179408][ T7976] netlink: 'syz.1.550': attribute type 1 has an invalid length. [ 154.198908][ T7976] netlink: 224 bytes leftover after parsing attributes in process `syz.1.550'. [ 154.252473][ T5982] lo speed is unknown, defaulting to 1000 [ 154.252525][ T43] lo speed is unknown, defaulting to 1000 [ 154.258874][ T7974] tipc: Enabling of bearer rejected, failed to enable media [ 154.313370][ T7981] netlink: 4 bytes leftover after parsing attributes in process `syz.4.541'. [ 154.494050][ T7989] netlink: 24 bytes leftover after parsing attributes in process `syz.4.545'. [ 154.628155][ T7993] pimreg: entered allmulticast mode [ 154.675298][ T7993] pimreg: left allmulticast mode [ 154.899720][ T43] IPVS: starting estimator thread 0... [ 154.996471][ T8000] IPVS: using max 32 ests per chain, 76800 per kthread [ 155.072241][ T8005] lo speed is unknown, defaulting to 1000 [ 155.410973][ T8022] netlink: 24 bytes leftover after parsing attributes in process `syz.0.559'. [ 155.550606][ T8033] netlink: 788 bytes leftover after parsing attributes in process `syz.1.560'. [ 155.561713][ T8031] pimreg: entered allmulticast mode [ 155.802415][ T8042] validate_nla: 3 callbacks suppressed [ 155.802432][ T8042] netlink: 'syz.3.562': attribute type 1 has an invalid length. [ 155.821235][ T8042] netlink: 224 bytes leftover after parsing attributes in process `syz.3.562'. [ 155.863045][ T8040] netlink: 'syz.4.561': attribute type 1 has an invalid length. [ 155.874032][ T8040] netlink: 224 bytes leftover after parsing attributes in process `syz.4.561'. [ 155.981652][ T8047] netlink: 'syz.2.564': attribute type 4 has an invalid length. [ 156.189453][ T8051] netlink: 'syz.2.565': attribute type 1 has an invalid length. [ 156.566220][ T5865] Bluetooth: hci4: command 0x0406 tx timeout [ 156.784156][ T8063] pimreg: entered allmulticast mode [ 156.991875][ T8063] pimreg: left allmulticast mode [ 157.332099][ T8084] netlink: 'syz.2.571': attribute type 1 has an invalid length. [ 157.383923][ T8085] bond0: (slave bond_slave_0): Releasing backup interface [ 157.423162][ T8086] netlink: 'syz.3.573': attribute type 10 has an invalid length. [ 157.463705][ T8085] bond0: (slave bond_slave_1): Releasing backup interface [ 157.498111][ T8085] team0: Port device team_slave_0 removed [ 157.530438][ T8085] team0: Port device team_slave_1 removed [ 157.540682][ T8085] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.551354][ T8085] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.621212][ T8093] pimreg: entered allmulticast mode [ 157.680187][ T8093] pimreg: left allmulticast mode [ 157.894287][ T8106] netlink: 'syz.4.578': attribute type 1 has an invalid length. [ 157.930401][ T8108] netlink: 'syz.3.580': attribute type 4 has an invalid length. [ 158.202369][ T8114] pimreg: entered allmulticast mode [ 158.219721][ T8114] pimreg: left allmulticast mode [ 158.496756][ T8121] __nla_validate_parse: 7 callbacks suppressed [ 158.496773][ T8121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.583'. [ 159.098096][ T8144] netlink: 4 bytes leftover after parsing attributes in process `syz.4.587'. [ 159.657904][ T8134] tipc: Enabling of bearer rejected, failed to enable media [ 159.933356][ T8153] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.980826][ T8153] netlink: 28 bytes leftover after parsing attributes in process `syz.1.590'. [ 160.087047][ T8157] netlink: 'syz.0.593': attribute type 4 has an invalid length. [ 160.812197][ T8183] netlink: 'syz.0.597': attribute type 1 has an invalid length. [ 160.915915][ T8183] netlink: 224 bytes leftover after parsing attributes in process `syz.0.597'. [ 160.958881][ T8187] netlink: 'syz.3.600': attribute type 1 has an invalid length. [ 161.001791][ T8187] netlink: 224 bytes leftover after parsing attributes in process `syz.3.600'. [ 161.311443][ T8197] netlink: 'syz.1.605': attribute type 4 has an invalid length. [ 161.341622][ T8197] netlink: 'syz.1.605': attribute type 4 has an invalid length. [ 161.420310][ T1000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.436810][ T1000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.573178][ T8207] netlink: 788 bytes leftover after parsing attributes in process `syz.1.608'. [ 162.033039][ T8214] netlink: 'syz.0.611': attribute type 4 has an invalid length. [ 162.441824][ T8232] tipc: Enabling of bearer rejected, failed to enable media [ 162.733506][ T8241] netlink: 'syz.2.617': attribute type 1 has an invalid length. [ 162.789589][ T8241] netlink: 224 bytes leftover after parsing attributes in process `syz.2.617'. [ 163.133486][ T8255] netlink: 'syz.0.623': attribute type 4 has an invalid length. [ 163.155476][ T8256] netlink: 'syz.1.622': attribute type 1 has an invalid length. [ 163.167471][ T8256] netlink: 224 bytes leftover after parsing attributes in process `syz.1.622'. [ 163.467012][ T8265] !: renamed from dummy0 (while UP) [ 163.573186][ T8267] netlink: 788 bytes leftover after parsing attributes in process `syz.3.629'. [ 163.702718][ T8275] tipc: Enabling of bearer rejected, failed to enable media [ 163.818207][ T8275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.627'. [ 163.989212][ T8278] lo speed is unknown, defaulting to 1000 [ 164.220302][ T8295] netlink: 24 bytes leftover after parsing attributes in process `syz.1.633'. [ 164.313673][ T8299] netlink: 'syz.2.635': attribute type 4 has an invalid length. [ 165.032457][ T8324] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.125528][ T8324] netlink: 28 bytes leftover after parsing attributes in process `syz.3.639'. [ 165.344727][ T8333] netlink: 'syz.3.640': attribute type 4 has an invalid length. [ 165.985974][ T8349] tipc: Enabling of bearer rejected, failed to enable media [ 166.079419][ T8346] netlink: 4 bytes leftover after parsing attributes in process `syz.3.641'. [ 166.151784][ T8357] netlink: 'syz.1.643': attribute type 1 has an invalid length. [ 166.216938][ T8357] netlink: 224 bytes leftover after parsing attributes in process `syz.1.643'. [ 166.340702][ T8365] netlink: 'syz.4.647': attribute type 1 has an invalid length. [ 166.350254][ T8364] netlink: 'syz.2.648': attribute type 4 has an invalid length. [ 166.386893][ T8365] netlink: 224 bytes leftover after parsing attributes in process `syz.4.647'. [ 166.584169][ T8371] IPVS: Error joining to the multicast group [ 166.670493][ T8375] netlink: 'syz.3.652': attribute type 4 has an invalid length. [ 167.031559][ T8389] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.087692][ T8389] netlink: 28 bytes leftover after parsing attributes in process `syz.0.658'. [ 167.343736][ T8401] netlink: 'syz.4.660': attribute type 4 has an invalid length. [ 167.412431][ T8403] netlink: 'syz.4.665': attribute type 4 has an invalid length. [ 167.449956][ T8407] netlink: 16 bytes leftover after parsing attributes in process `syz.3.663'. [ 167.459865][ T8403] netlink: 'syz.4.665': attribute type 4 has an invalid length. [ 167.530069][ T8408] netlink: 'syz.0.664': attribute type 1 has an invalid length. [ 167.574976][ T8408] netlink: 224 bytes leftover after parsing attributes in process `syz.0.664'. [ 167.761381][ T8417] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 167.960914][ T8428] netlink: 'syz.2.670': attribute type 1 has an invalid length. [ 168.009662][ T8429] pimreg: entered allmulticast mode [ 168.019658][ T8426] tipc: Enabling of bearer rejected, failed to enable media [ 168.053477][ T8429] pimreg: left allmulticast mode [ 168.497313][ T8443] tipc: Enabling of bearer rejected, failed to enable media [ 168.510437][ T8445] netlink: 'syz.0.673': attribute type 1 has an invalid length. [ 168.883328][ T8455] __nla_validate_parse: 8 callbacks suppressed [ 168.883346][ T8455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.679'. [ 169.232878][ T8471] netlink: 224 bytes leftover after parsing attributes in process `syz.3.683'. [ 169.281721][ T8475] tipc: Enabling of bearer rejected, failed to enable media [ 169.383248][ T8475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.686'. [ 169.676264][ T5865] Bluetooth: hci2: command tx timeout [ 169.723679][ T8484] netlink: 24 bytes leftover after parsing attributes in process `syz.0.690'. [ 169.861389][ T8490] pimreg: left allmulticast mode [ 170.397430][ T8497] lo speed is unknown, defaulting to 1000 [ 171.016338][ T8540] netlink: 224 bytes leftover after parsing attributes in process `syz.1.698'. [ 171.114680][ T8535] netlink: 224 bytes leftover after parsing attributes in process `syz.0.699'. [ 171.572114][ T8555] validate_nla: 3 callbacks suppressed [ 171.572133][ T8555] netlink: 'syz.4.704': attribute type 4 has an invalid length. [ 171.651645][ T8553] pimreg: left allmulticast mode [ 171.850221][ T8559] netlink: 24 bytes leftover after parsing attributes in process `syz.4.707'. [ 172.023492][ T8567] pimreg: entered allmulticast mode [ 172.155685][ T8576] netlink: 788 bytes leftover after parsing attributes in process `syz.0.712'. [ 172.409771][ T8583] netlink: 'syz.2.714': attribute type 4 has an invalid length. [ 174.025497][ T8623] pimreg: left allmulticast mode [ 174.189223][ T8625] netlink: 24 bytes leftover after parsing attributes in process `syz.0.726'. [ 174.331864][ T8633] pimreg: entered allmulticast mode [ 174.422033][ T8637] netlink: 788 bytes leftover after parsing attributes in process `syz.2.732'. [ 174.435778][ T8635] gretap0: entered promiscuous mode [ 174.444913][ T8635] vlan2: entered promiscuous mode [ 174.465314][ T5865] Bluetooth: hci4: link tx timeout [ 174.470807][ T5865] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 174.484317][ T5872] Bluetooth: hci4: link tx timeout [ 174.489922][ T5872] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 174.722745][ T8644] netlink: 'syz.1.731': attribute type 1 has an invalid length. [ 174.736235][ T8644] netlink: 224 bytes leftover after parsing attributes in process `syz.1.731'. [ 174.897786][ T8650] pimreg: entered allmulticast mode [ 174.919656][ T8650] pimreg: left allmulticast mode [ 175.799575][ T8669] netlink: 'syz.3.738': attribute type 4 has an invalid length. [ 176.556823][ T5872] Bluetooth: hci4: command 0x0406 tx timeout [ 177.104291][ T8709] netlink: 'syz.4.751': attribute type 4 has an invalid length. [ 177.111469][ T8711] tipc: Enabling of bearer rejected, failed to enable media [ 177.269852][ T8716] netlink: 4 bytes leftover after parsing attributes in process `syz.2.750'. [ 177.321693][ T8712] netlink: 'syz.3.748': attribute type 1 has an invalid length. [ 177.364074][ T8719] netlink: 24 bytes leftover after parsing attributes in process `syz.0.753'. [ 177.383451][ T8712] netlink: 224 bytes leftover after parsing attributes in process `syz.3.748'. [ 177.700285][ T8724] netlink: 24 bytes leftover after parsing attributes in process `syz.0.755'. [ 177.953907][ T8730] tipc: Started in network mode [ 177.959235][ T8730] tipc: Node identity 3a000000000040120000006e70000001, cluster identity 4711 [ 177.972553][ T8730] tipc: Enabling of bearer rejected, failed to enable media [ 177.981159][ T8728] pimreg: left allmulticast mode [ 178.105784][ T8737] tipc: Started in network mode [ 178.110826][ T8737] tipc: Node identity 4, cluster identity 4711 [ 178.145388][ T8737] tipc: Node number set to 4 [ 178.150827][ T8741] netlink: 24 bytes leftover after parsing attributes in process `syz.3.757'. [ 178.197748][ T8741] pimreg: entered allmulticast mode [ 178.241222][ T8741] pimreg: left allmulticast mode [ 178.322302][ T8749] netlink: 'syz.4.760': attribute type 1 has an invalid length. [ 178.368377][ T8749] netlink: 224 bytes leftover after parsing attributes in process `syz.4.760'. [ 178.737721][ T8756] netlink: 'syz.2.762': attribute type 1 has an invalid length. [ 178.938637][ T8756] netlink: 224 bytes leftover after parsing attributes in process `syz.2.762'. [ 179.379605][ T8771] __nla_validate_parse: 1 callbacks suppressed [ 179.379623][ T8771] netlink: 788 bytes leftover after parsing attributes in process `syz.1.770'. [ 179.519145][ T8769] netlink: 'syz.0.767': attribute type 1 has an invalid length. [ 179.553615][ T8769] netlink: 224 bytes leftover after parsing attributes in process `syz.0.767'. [ 179.582475][ T8780] netlink: 788 bytes leftover after parsing attributes in process `syz.2.769'. [ 180.069303][ T8787] netlink: 24 bytes leftover after parsing attributes in process `syz.3.773'. [ 180.199678][ T8787] pimreg: entered allmulticast mode [ 180.203496][ T8789] netlink: 788 bytes leftover after parsing attributes in process `syz.4.775'. [ 180.218858][ T8787] pimreg: left allmulticast mode [ 180.454243][ T8799] tipc: Enabling of bearer rejected, failed to enable media [ 180.608427][ T8797] netlink: 4 bytes leftover after parsing attributes in process `syz.3.776'. [ 181.086559][ T8810] netlink: 'syz.0.777': attribute type 1 has an invalid length. [ 181.106897][ T8810] netlink: 224 bytes leftover after parsing attributes in process `syz.0.777'. [ 181.331294][ T8816] netlink: 24 bytes leftover after parsing attributes in process `syz.1.778'. [ 181.356553][ T8818] netlink: 'syz.3.779': attribute type 1 has an invalid length. [ 181.364286][ T8818] netlink: 224 bytes leftover after parsing attributes in process `syz.3.779'. [ 181.939459][ T8840] netlink: 'syz.1.785': attribute type 1 has an invalid length. [ 181.980930][ T8840] netlink: 224 bytes leftover after parsing attributes in process `syz.1.785'. [ 182.054724][ T8844] netlink: 'syz.2.781': attribute type 1 has an invalid length. [ 183.435123][ T8883] netlink: 'syz.2.800': attribute type 1 has an invalid length. [ 184.108939][ T8888] netlink: 'syz.4.803': attribute type 1 has an invalid length. [ 184.425374][ T8896] __nla_validate_parse: 6 callbacks suppressed [ 184.425391][ T8896] netlink: 24 bytes leftover after parsing attributes in process `syz.2.804'. [ 184.596483][ T8907] netlink: 'syz.3.807': attribute type 1 has an invalid length. [ 184.613504][ T8908] pimreg: entered allmulticast mode [ 184.627033][ T8907] netlink: 224 bytes leftover after parsing attributes in process `syz.3.807'. [ 184.652948][ T8908] pimreg: left allmulticast mode [ 184.736519][ T8912] tap0: tun_chr_ioctl cmd 1074025677 [ 184.742317][ T8912] tap0: linktype set to 769 [ 185.137957][ T8928] netlink: 'syz.0.812': attribute type 1 has an invalid length. [ 185.145643][ T8928] netlink: 224 bytes leftover after parsing attributes in process `syz.0.812'. [ 185.199245][ T8927] netlink: 'syz.4.815': attribute type 4 has an invalid length. [ 185.487986][ T8933] netlink: 'syz.2.817': attribute type 4 has an invalid length. [ 186.014068][ T8946] netlink: 'syz.2.823': attribute type 4 has an invalid length. [ 186.092361][ T8950] netlink: 16 bytes leftover after parsing attributes in process `syz.0.821'. [ 186.439674][ T8959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.828'. [ 186.652785][ T8968] netlink: 'syz.0.830': attribute type 15 has an invalid length. [ 186.745770][ T8977] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 186.796822][ T8974] netlink: 28 bytes leftover after parsing attributes in process `syz.4.832'. [ 186.969621][ T8982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.833'. [ 187.657717][ T8994] netlink: 'syz.0.834': attribute type 1 has an invalid length. [ 187.665395][ T8994] netlink: 224 bytes leftover after parsing attributes in process `syz.0.834'. [ 187.699978][ T8996] netlink: 24 bytes leftover after parsing attributes in process `syz.4.837'. [ 187.861442][ T9001] pimreg: entered allmulticast mode [ 188.032727][ T9007] netlink: 24 bytes leftover after parsing attributes in process `syz.1.841'. [ 188.085334][ T9001] pimreg: left allmulticast mode [ 188.162174][ T9010] netlink: 'syz.2.842': attribute type 10 has an invalid length. [ 188.231164][ T9013] pimreg: entered allmulticast mode [ 188.266685][ T9009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.295327][ T9013] pimreg: left allmulticast mode [ 188.704968][ T9032] lo speed is unknown, defaulting to 1000 [ 188.796581][ T9041] netlink: 'syz.0.848': attribute type 1 has an invalid length. [ 189.761875][ T9054] __nla_validate_parse: 2 callbacks suppressed [ 189.761892][ T9054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.853'. [ 189.888596][ T9060] tipc: Enabling of bearer rejected, failed to enable media [ 190.923564][ T9098] netlink: 'syz.0.861': attribute type 4 has an invalid length. [ 191.003451][ T5871] lo speed is unknown, defaulting to 1000 [ 191.010836][ T5871] syz1: Port: 1 Link DOWN [ 191.493220][ T9120] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.552731][ T9120] netlink: 28 bytes leftover after parsing attributes in process `syz.2.872'. [ 191.624997][ T9123] netlink: 'syz.0.865': attribute type 1 has an invalid length. [ 191.664153][ T9123] netlink: 224 bytes leftover after parsing attributes in process `syz.0.865'. [ 192.397758][ T9148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.881'. [ 193.378465][ T9180] netlink: 'syz.4.883': attribute type 1 has an invalid length. [ 193.438663][ T9180] netlink: 224 bytes leftover after parsing attributes in process `syz.4.883'. [ 193.782346][ T9187] netlink: 32 bytes leftover after parsing attributes in process `syz.3.891'. [ 193.962641][ T9192] netlink: 'syz.0.894': attribute type 4 has an invalid length. [ 194.321621][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.466076][ T9216] netlink: 'syz.2.897': attribute type 1 has an invalid length. [ 194.479124][ T9216] netlink: 224 bytes leftover after parsing attributes in process `syz.2.897'. [ 195.059035][ T9227] netlink: 788 bytes leftover after parsing attributes in process `syz.3.906'. [ 195.576236][ T9244] netlink: 16 bytes leftover after parsing attributes in process `syz.1.912'. [ 195.921140][ T9253] lo speed is unknown, defaulting to 1000 [ 196.101464][ T9264] erspan0: entered promiscuous mode [ 196.219165][ T9270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.918'. [ 196.741483][ T9291] netlink: 'syz.1.922': attribute type 4 has an invalid length. [ 196.923427][ T9300] netlink: 56 bytes leftover after parsing attributes in process `syz.3.925'. [ 197.246993][ T9311] netlink: 788 bytes leftover after parsing attributes in process `syz.1.930'. [ 197.618064][ T9329] netlink: 'syz.3.932': attribute type 1 has an invalid length. [ 197.625841][ T9329] netlink: 224 bytes leftover after parsing attributes in process `syz.3.932'. [ 197.706750][ T9332] netlink: 'syz.2.933': attribute type 1 has an invalid length. [ 197.726163][ T9332] netlink: 224 bytes leftover after parsing attributes in process `syz.2.933'. [ 198.159240][ T9337] netlink: 'syz.0.935': attribute type 4 has an invalid length. [ 198.181402][ T5982] lo speed is unknown, defaulting to 1000 [ 198.190758][ T5982] syz1: Port: 1 Link ACTIVE [ 198.674318][ T9349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.940'. [ 198.684503][ T9342] netlink: 4 bytes leftover after parsing attributes in process `syz.4.939'. [ 198.957326][ T9363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.945'. [ 198.999743][ T9368] netlink: 'syz.0.946': attribute type 4 has an invalid length. [ 199.447514][ T9385] netlink: 'syz.4.949': attribute type 1 has an invalid length. [ 199.509267][ T9394] netlink: 'syz.0.951': attribute type 1 has an invalid length. [ 199.724222][ T9391] netlink: 'syz.2.948': attribute type 1 has an invalid length. [ 200.434684][ T9404] __nla_validate_parse: 5 callbacks suppressed [ 200.434701][ T9404] netlink: 24 bytes leftover after parsing attributes in process `syz.1.956'. [ 200.703345][ T9414] netlink: 24 bytes leftover after parsing attributes in process `syz.4.960'. [ 200.739907][ T9414] pimreg: entered allmulticast mode [ 200.759908][ T9414] pimreg: left allmulticast mode [ 200.791038][ T9416] netlink: 'syz.0.958': attribute type 4 has an invalid length. [ 200.818426][ T5982] lo speed is unknown, defaulting to 1000 [ 200.824189][ T5982] syz1: Port: 1 Link DOWN [ 201.187791][ T9440] netlink: 'syz.4.963': attribute type 1 has an invalid length. [ 201.195466][ T9440] netlink: 224 bytes leftover after parsing attributes in process `syz.4.963'. [ 201.373085][ T9448] netlink: 24 bytes leftover after parsing attributes in process `syz.1.969'. [ 201.517210][ T5881] Bluetooth: hci1: command 0x0406 tx timeout [ 201.523428][ T5881] Bluetooth: hci2: command 0x0406 tx timeout [ 201.529270][ T5882] Bluetooth: hci3: command 0x0406 tx timeout [ 201.568854][ T9452] netlink: 'syz.3.968': attribute type 1 has an invalid length. [ 201.632246][ T9452] netlink: 224 bytes leftover after parsing attributes in process `syz.3.968'. [ 201.722361][ T9457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.971'. [ 202.097941][ T9464] netlink: 'syz.0.974': attribute type 4 has an invalid length. [ 202.497153][ T9478] netlink: 'syz.1.980': attribute type 4 has an invalid length. [ 202.614321][ T9485] netlink: 24 bytes leftover after parsing attributes in process `syz.3.981'. [ 202.751375][ T9488] netlink: 'syz.4.973': attribute type 1 has an invalid length. [ 202.807876][ T9488] netlink: 224 bytes leftover after parsing attributes in process `syz.4.973'. [ 202.994584][ T9502] netlink: 224 bytes leftover after parsing attributes in process `syz.2.983'. [ 203.287294][ T9512] netlink: 224 bytes leftover after parsing attributes in process `syz.0.986'. [ 204.220658][ T9539] pimreg: entered allmulticast mode [ 204.261435][ T9539] pimreg: left allmulticast mode [ 205.770879][ T9595] validate_nla: 4 callbacks suppressed [ 205.770897][ T9595] netlink: 'syz.1.1006': attribute type 1 has an invalid length. [ 205.788332][ T9595] __nla_validate_parse: 7 callbacks suppressed [ 205.788348][ T9595] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1006'. [ 205.828021][ T9597] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1008'. [ 205.906379][ T9600] netlink: 'syz.4.1012': attribute type 4 has an invalid length. [ 205.938644][ T9602] netlink: 'syz.2.1013': attribute type 4 has an invalid length. [ 206.293392][ T9616] pimreg: entered allmulticast mode [ 206.322530][ T9616] pimreg: left allmulticast mode [ 206.980209][ T9635] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1020'. [ 207.362029][ T9644] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1025'. [ 207.468396][ T9647] netlink: 'syz.3.1026': attribute type 4 has an invalid length. [ 207.815912][ T9666] netlink: 'syz.4.1027': attribute type 1 has an invalid length. [ 207.856452][ T9666] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1027'. [ 208.577009][ T9681] macsec1: entered allmulticast mode [ 208.582354][ T9681] veth1_macvtap: entered allmulticast mode [ 208.609782][ T9681] veth1_macvtap: left allmulticast mode [ 208.675527][ T9686] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1039'. [ 208.900566][ T9696] netlink: 'syz.4.1041': attribute type 4 has an invalid length. [ 209.020366][ T9704] netlink: 'syz.2.1040': attribute type 1 has an invalid length. [ 209.084412][ T9704] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1040'. [ 209.541961][ T9719] netlink: 'syz.1.1048': attribute type 4 has an invalid length. [ 209.847401][ T9727] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1052'. [ 210.646572][ T9765] netlink: 'syz.2.1065': attribute type 4 has an invalid length. [ 210.662527][ T9764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1063'. [ 210.756980][ T9774] tipc: Enabling of bearer rejected, failed to enable media [ 210.818308][ T9769] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1067'. [ 211.099244][ T9789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1073'. [ 211.565772][ T9807] netlink: 'syz.1.1080': attribute type 4 has an invalid length. [ 211.679506][ T9806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1081'. [ 211.841911][ T9824] netlink: 'syz.1.1086': attribute type 4 has an invalid length. [ 211.883610][ T9820] tipc: Enabling of bearer rejected, failed to enable media [ 211.946717][ T9825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1085'. [ 212.471942][ T9848] netlink: 'syz.2.1094': attribute type 1 has an invalid length. [ 212.497466][ T9848] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1094'. [ 212.865135][ T9855] netlink: 'syz.4.1096': attribute type 4 has an invalid length. [ 213.160364][ T9863] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1098'. [ 213.178556][ T9861] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 213.307001][ T9861] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1101'. [ 213.710203][ T9878] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 214.264835][ T9904] netlink: 'syz.2.1112': attribute type 1 has an invalid length. [ 214.314530][ T9904] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1112'. [ 214.406580][ T9903] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1116'. [ 214.442051][ T9903] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1116'. [ 214.479779][ T9903] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 215.242651][ T9926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.595496][ T9946] pimreg: entered allmulticast mode [ 215.643205][ T9946] pimreg: left allmulticast mode [ 215.942203][ T9964] __nla_validate_parse: 3 callbacks suppressed [ 215.942515][ T9964] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1138'. [ 215.961007][ T9966] netlink: 'syz.0.1133': attribute type 1 has an invalid length. [ 215.970441][ T9966] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1133'. [ 216.151204][ T9971] pimreg: entered allmulticast mode [ 216.226261][ T9969] pimreg: left allmulticast mode [ 216.881233][ T9983] syzkaller1: entered promiscuous mode [ 216.897687][ T9985] netlink: 'syz.1.1141': attribute type 1 has an invalid length. [ 216.905477][ T9985] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1141'. [ 216.914994][ T9983] syzkaller1: entered allmulticast mode [ 217.056498][ T9992] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 217.349185][T10007] tipc: Enabling of bearer rejected, failed to enable media [ 217.453968][T10014] netlink: 'syz.2.1148': attribute type 1 has an invalid length. [ 217.472903][T10007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1149'. [ 217.585467][T10014] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1148'. [ 217.679141][T10020] netlink: 'syz.3.1151': attribute type 1 has an invalid length. [ 217.718890][T10020] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1151'. [ 218.006601][T10027] tipc: Enabling of bearer rejected, failed to enable media [ 218.106454][T10031] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1154'. [ 218.500048][T10046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1157'. [ 219.079509][T10052] tipc: Enabling of bearer rejected, failed to enable media [ 219.143236][T10059] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1159'. [ 219.433862][T10071] netlink: 'syz.2.1156': attribute type 1 has an invalid length. [ 219.492851][T10071] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1156'. [ 219.862932][T10091] netlink: 'syz.1.1165': attribute type 1 has an invalid length. [ 220.529854][T10107] pimreg: entered allmulticast mode [ 220.607508][T10107] pimreg: left allmulticast mode [ 220.838916][T10122] tipc: Enabling of bearer rejected, failed to enable media [ 221.016022][T10128] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.061396][T10130] netlink: 'syz.3.1175': attribute type 1 has an invalid length. [ 221.075024][T10128] __nla_validate_parse: 3 callbacks suppressed [ 221.075042][T10128] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1178'. [ 221.114729][T10130] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1175'. [ 222.548016][T10176] syzkaller1: entered promiscuous mode [ 222.553685][T10176] syzkaller1: entered allmulticast mode [ 223.000497][T10188] batadv_slave_1: entered promiscuous mode [ 223.013765][T10187] batadv_slave_1: left promiscuous mode [ 223.600596][T10218] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1210'. [ 223.627200][T10217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.095282][T10235] netlink: 'syz.4.1212': attribute type 1 has an invalid length. [ 224.127200][T10235] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1212'. [ 224.655957][T10254] tipc: Enabling of bearer rejected, failed to enable media [ 224.755038][T10257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1222'. [ 224.971440][T10262] vcan0: tx drop: invalid da for name 0xfffffffffffffffd [ 225.150527][T10272] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1227'. [ 225.249808][T10275] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1225'. [ 225.305546][T10277] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1228'. [ 226.153729][T10276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.304552][T10299] tipc: Enabling of bearer rejected, failed to enable media [ 226.366835][T10296] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1235'. [ 226.396403][T10301] netlink: 'syz.1.1237': attribute type 3 has an invalid length. [ 226.404208][T10301] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1237'. [ 226.628726][T10306] netlink: 'syz.3.1236': attribute type 1 has an invalid length. [ 226.670947][T10306] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1236'. [ 227.025086][T10317] netlink: 'syz.4.1240': attribute type 4 has an invalid length. [ 227.070188][T10317] netlink: 14345 bytes leftover after parsing attributes in process `syz.4.1240'. [ 227.117551][T10319] netlink: 'syz.0.1239': attribute type 1 has an invalid length. [ 227.125309][T10319] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1239'. [ 227.358992][T10321] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1241'. [ 227.785768][T10336] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1247'. [ 227.809366][T10335] netlink: 'syz.3.1243': attribute type 4 has an invalid length. [ 227.888809][T10338] pimreg: entered allmulticast mode [ 227.944980][T10344] pimreg: entered allmulticast mode [ 227.981737][T10338] pimreg: left allmulticast mode [ 228.045915][T10349] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1248'. [ 228.795333][T10375] syzkaller1: entered promiscuous mode [ 228.823742][T10375] syzkaller1: entered allmulticast mode [ 229.009823][T10387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1262'. [ 229.241809][T10399] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1268'. [ 229.408034][T10410] pimreg: entered allmulticast mode [ 229.428321][T10410] pimreg: left allmulticast mode [ 229.450359][T10412] netlink: 'syz.1.1265': attribute type 1 has an invalid length. [ 230.601510][T10445] tipc: Enabling of bearer rejected, failed to enable media [ 231.056767][T10461] netlink: 'syz.1.1287': attribute type 4 has an invalid length. [ 231.160868][T10466] pimreg: entered allmulticast mode [ 231.180736][T10466] pimreg: left allmulticast mode [ 231.475522][T10480] tipc: Enabling of bearer rejected, failed to enable media [ 231.480327][T10482] __nla_validate_parse: 3 callbacks suppressed [ 231.480344][T10482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1294'. [ 231.546704][T10487] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1295'. [ 231.977267][T10508] netlink: 788 bytes leftover after parsing attributes in process `syz.0.1303'. [ 232.190262][T10520] netlink: 'syz.4.1301': attribute type 1 has an invalid length. [ 232.199128][T10519] netlink: 'syz.3.1306': attribute type 4 has an invalid length. [ 232.210519][T10520] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1301'. [ 232.255141][T10519] netlink: 'syz.3.1306': attribute type 4 has an invalid length. [ 232.870284][T10537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1310'. [ 233.037804][T10546] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1313'. [ 233.211375][T10549] pimreg: entered allmulticast mode [ 233.244694][T10549] pimreg: left allmulticast mode [ 233.260206][T10552] vcan0: tx drop: invalid sa for name 0xfffffffffffffffc [ 233.763853][T10562] netlink: 'syz.1.1318': attribute type 4 has an invalid length. [ 233.782950][T10562] netlink: 'syz.1.1318': attribute type 4 has an invalid length. [ 234.277132][T10586] netlink: 'syz.1.1321': attribute type 1 has an invalid length. [ 234.306462][T10586] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1321'. [ 234.308710][T10590] netlink: 'syz.0.1331': attribute type 4 has an invalid length. [ 234.330116][T10590] netlink: 'syz.0.1331': attribute type 4 has an invalid length. [ 234.351857][ T5871] lo speed is unknown, defaulting to 1000 [ 234.359508][ T5871] syz1: Port: 1 Link ACTIVE [ 234.901829][T10607] netlink: 'syz.4.1333': attribute type 1 has an invalid length. [ 234.934039][T10607] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1333'. [ 234.984380][ C1] vcan0: j1939_tp_rxtimer: 0xffff888033e76000: rx timeout, send abort [ 234.994500][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888033e76000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 235.130130][T10614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1336'. [ 235.143747][T10615] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1335'. [ 235.448580][T10626] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 235.550990][T10631] tipc: Enabling of bearer rejected, failed to enable media [ 236.583829][T10670] tipc: Enabling of bearer rejected, failed to enable media [ 236.613930][T10673] netlink: 'syz.0.1353': attribute type 1 has an invalid length. [ 236.638494][T10673] __nla_validate_parse: 4 callbacks suppressed [ 236.638512][T10673] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1353'. [ 236.665494][T10675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1354'. [ 237.333442][T10692] tipc: Enabling of bearer rejected, failed to enable media [ 237.395244][T10689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1358'. [ 237.519783][T10699] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1359'. [ 237.689237][T10706] tipc: Enabling of bearer rejected, failed to enable media [ 237.739973][T10707] pimreg: entered allmulticast mode [ 237.778389][T10706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1361'. [ 237.817960][T10707] pimreg: left allmulticast mode [ 237.868806][T10714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1364'. [ 237.879238][T10714] netlink: 'syz.4.1364': attribute type 21 has an invalid length. [ 238.313535][T10736] netlink: 'syz.2.1371': attribute type 4 has an invalid length. [ 238.346885][T10736] netlink: 'syz.2.1371': attribute type 4 has an invalid length. [ 238.400454][T10741] tipc: Enabling of bearer rejected, failed to enable media [ 238.493339][T10738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1372'. [ 238.527268][T10747] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1375'. [ 238.539186][T10747] netlink: 'syz.0.1375': attribute type 7 has an invalid length. [ 238.577248][T10747] netlink: 'syz.0.1375': attribute type 8 has an invalid length. [ 238.587795][T10744] netlink: 'syz.1.1369': attribute type 1 has an invalid length. [ 238.608564][T10747] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1375'. [ 238.634469][T10744] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1369'. [ 238.653218][T10747] gretap0: entered promiscuous mode [ 238.662293][T10747] batadv_slave_1: entered promiscuous mode [ 238.726521][T10747] gretap0: left promiscuous mode [ 238.736498][T10747] batadv_slave_1: left promiscuous mode [ 238.850303][T10758] netlink: 'syz.4.1374': attribute type 1 has an invalid length. [ 239.654901][T10786] netlink: 'syz.1.1386': attribute type 4 has an invalid length. [ 240.056466][T10803] netlink: 'syz.0.1391': attribute type 14 has an invalid length. [ 240.085141][T10803] netlink: 'syz.0.1391': attribute type 14 has an invalid length. [ 240.292901][T10816] netlink: 'syz.2.1397': attribute type 4 has an invalid length. [ 240.299979][T10814] syzkaller1: entered promiscuous mode [ 240.316788][T10814] syzkaller1: entered allmulticast mode [ 240.361480][T10819] pimreg: entered allmulticast mode [ 240.365075][T10816] netlink: 'syz.2.1397': attribute type 4 has an invalid length. [ 240.388022][T10820] netlink: 'syz.1.1393': attribute type 1 has an invalid length. [ 240.625542][T10819] pimreg: left allmulticast mode [ 241.449914][T10855] pimreg: entered allmulticast mode [ 241.506516][T10855] pimreg: left allmulticast mode [ 243.248799][T10886] tipc: Enabling of bearer rejected, failed to enable media [ 243.342799][T10880] __nla_validate_parse: 6 callbacks suppressed [ 243.342818][T10880] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1418'. [ 243.585247][T10908] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1424'. [ 243.663603][ T6691] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x9 [ 243.749387][T10913] pimreg: entered allmulticast mode [ 243.801253][T10913] pimreg: left allmulticast mode [ 244.493600][T10930] netlink: 428 bytes leftover after parsing attributes in process `syz.4.1430'. [ 244.495955][T10931] netlink: 'syz.0.1431': attribute type 4 has an invalid length. [ 244.505150][T10930] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1430'. [ 244.521034][ T5982] lo speed is unknown, defaulting to 1000 [ 244.534304][T10931] netlink: 'syz.0.1431': attribute type 4 has an invalid length. [ 244.544088][ T5982] syz1: Port: 1 Link DOWN [ 244.563179][ T5982] lo speed is unknown, defaulting to 1000 [ 244.622985][ T5982] syz1: Port: 1 Link ACTIVE [ 244.708572][T10935] netlink: 'syz.2.1434': attribute type 10 has an invalid length. [ 244.737190][T10937] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1435'. [ 244.766536][T10937] block nbd0: not configured, cannot reconfigure [ 244.867123][T10935] bond0: (slave 0!): Enslaving as an active interface with an up link [ 245.019710][T10939] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1433'. [ 245.248124][T10963] syzkaller1: entered promiscuous mode [ 245.261601][T10963] syzkaller1: entered allmulticast mode [ 245.400860][T10970] netlink: 'syz.2.1444': attribute type 4 has an invalid length. [ 245.415303][T10971] netlink: 'syz.3.1440': attribute type 1 has an invalid length. [ 245.436469][T10971] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1440'. [ 245.466447][T10973] netlink: 'syz.2.1444': attribute type 4 has an invalid length. [ 245.846897][T10979] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1445'. [ 246.244020][T10981] pimreg: left allmulticast mode [ 246.451920][T10996] pimreg: entered allmulticast mode [ 246.496063][T10996] pimreg: left allmulticast mode [ 246.573890][T11003] batadv_slave_1: entered promiscuous mode [ 246.693991][T11007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1453'. [ 246.723626][T11010] netlink: 'syz.3.1454': attribute type 4 has an invalid length. [ 246.774222][T11013] netlink: 'syz.3.1454': attribute type 4 has an invalid length. [ 247.394781][T11042] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1464'. [ 248.064406][T11073] pimreg: entered allmulticast mode [ 248.096889][T11073] pimreg: left allmulticast mode [ 248.128353][T11076] netlink: 'syz.0.1468': attribute type 1 has an invalid length. [ 248.635747][T11078] lo speed is unknown, defaulting to 1000 [ 249.021149][T11094] netlink: 'syz.1.1478': attribute type 1 has an invalid length. [ 249.058290][T11096] __nla_validate_parse: 1 callbacks suppressed [ 249.058307][T11096] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1481'. [ 249.064453][T11094] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1478'. [ 249.223416][T11104] netlink: 'syz.2.1483': attribute type 4 has an invalid length. [ 249.317701][T11105] netlink: 'syz.2.1483': attribute type 4 has an invalid length. [ 249.538680][T11107] netlink: 788 bytes leftover after parsing attributes in process `syz.3.1484'. [ 249.556274][ T30] audit: type=1800 audit(1755039016.685:3): pid=11109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1485" name="@" dev="tmpfs" ino=1558 res=0 errno=0 [ 250.035504][T11121] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1489'. [ 250.091340][T11121] macvtap1: entered promiscuous mode [ 250.097907][T11121] erspan0: entered promiscuous mode [ 250.103459][T11121] macvtap1: entered allmulticast mode [ 250.108993][T11121] erspan0: entered allmulticast mode [ 250.123341][T11125] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1489'. [ 250.503061][T11133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1491'. [ 250.829705][T11145] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1497'. [ 250.903025][T11144] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 251.022736][T11156] netlink: 'syz.2.1496': attribute type 1 has an invalid length. [ 251.023847][T11157] netlink: 'syz.0.1500': attribute type 4 has an invalid length. [ 251.049992][T11156] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1496'. [ 251.068046][T11160] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1501'. [ 251.084947][T11160] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1501'. [ 251.117293][T11160] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 251.142479][T11160] gretap1: entered promiscuous mode [ 251.146783][T11162] netlink: 'syz.4.1495': attribute type 1 has an invalid length. [ 251.283890][ T1220] lo speed is unknown, defaulting to 1000 [ 251.289891][ T1220] syz1: Port: 1 Link DOWN [ 251.357225][T11165] netlink: 'syz.0.1500': attribute type 4 has an invalid length. [ 251.368844][ T5982] lo speed is unknown, defaulting to 1000 [ 251.374759][ T5982] syz1: Port: 1 Link ACTIVE [ 251.809462][T11177] netlink: 'syz.1.1504': attribute type 4 has an invalid length. [ 251.826935][T11174] netlink: 'syz.1.1504': attribute type 4 has an invalid length. [ 251.848072][T11176] netlink: 'syz.0.1503': attribute type 1 has an invalid length. [ 252.001012][T11179] netlink: 'syz.1.1507': attribute type 2 has an invalid length. [ 252.815024][T11210] netlink: 'syz.3.1518': attribute type 4 has an invalid length. [ 252.846924][T11210] netlink: 'syz.3.1518': attribute type 4 has an invalid length. [ 252.985725][ T6152] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.004110][ T6152] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.035305][ T6152] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.076590][ T6152] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.493042][T11224] wireguard0: entered promiscuous mode [ 253.507022][T11224] wireguard0: entered allmulticast mode [ 254.045639][T11244] !: renamed from dummy0 (while UP) [ 254.242513][T11247] lo speed is unknown, defaulting to 1000 [ 254.666350][T11259] __nla_validate_parse: 8 callbacks suppressed [ 254.666370][T11259] netlink: 788 bytes leftover after parsing attributes in process `syz.2.1532'. [ 255.167220][T11273] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1535'. [ 255.197923][T11273] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1535'. [ 255.755364][T11287] bond2: (slave bridge0): making interface the new active one [ 255.769726][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.782684][T11287] bond2: (slave bridge0): Enslaving as an active interface with an up link [ 256.094293][T11302] syzkaller1: entered promiscuous mode [ 256.126302][T11302] syzkaller1: entered allmulticast mode [ 256.359912][T11317] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1546'. [ 256.371375][T11311] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1545'. [ 256.537112][T11327] lo speed is unknown, defaulting to 1000 [ 256.555682][T11330] pimreg: entered allmulticast mode [ 256.650648][T11334] validate_nla: 8 callbacks suppressed [ 256.650666][T11334] netlink: 'syz.4.1549': attribute type 1 has an invalid length. [ 256.698080][T11334] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1549'. [ 256.810797][T11340] netlink: 'syz.3.1547': attribute type 1 has an invalid length. [ 256.932623][T11340] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1547'. [ 257.729017][T11360] netlink: 'syz.3.1556': attribute type 4 has an invalid length. [ 257.764430][T11360] netlink: 'syz.3.1556': attribute type 4 has an invalid length. [ 258.268745][T11377] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1560'. [ 258.629533][T11399] netlink: 'syz.2.1566': attribute type 4 has an invalid length. [ 258.724047][T11399] netlink: 'syz.2.1566': attribute type 4 has an invalid length. [ 258.731821][T11404] netlink: 'syz.0.1563': attribute type 1 has an invalid length. [ 258.731843][T11404] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1563'. [ 259.045362][T11413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1570'. [ 259.734392][T11433] __nla_validate_parse: 4 callbacks suppressed [ 259.734410][T11433] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1578'. [ 259.882646][T11438] pimreg: entered allmulticast mode [ 259.914924][T11438] pimreg: left allmulticast mode [ 259.993672][T11440] pimreg: entered allmulticast mode [ 260.053003][T11440] pimreg: left allmulticast mode [ 260.162616][T11447] netlink: 788 bytes leftover after parsing attributes in process `syz.2.1581'. [ 260.509707][T11457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1585'. [ 260.520144][T11457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1585'. [ 260.900424][T11469] netlink: 'syz.4.1588': attribute type 4 has an invalid length. [ 260.913627][T11469] netlink: 'syz.4.1588': attribute type 4 has an invalid length. [ 260.955055][T11470] netlink: 'syz.0.1586': attribute type 1 has an invalid length. [ 260.985000][T11470] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1586'. [ 260.994698][T11472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1589'. [ 261.035446][T11472] macsec1: entered promiscuous mode [ 261.046600][T11472] team0: entered promiscuous mode [ 261.052060][T11472] macsec1: entered allmulticast mode [ 261.058214][T11472] team0: entered allmulticast mode [ 261.064074][T11472] team0: Device macsec1 is already an upper device of the team interface [ 261.501199][T11472] team0: left allmulticast mode [ 261.510821][T11472] team0: left promiscuous mode [ 261.731510][T11488] netlink: 'syz.1.1593': attribute type 4 has an invalid length. [ 261.764195][T11488] netlink: 'syz.1.1593': attribute type 4 has an invalid length. [ 261.799193][T11490] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1595'. [ 261.954809][T11499] pimreg: entered allmulticast mode [ 262.022407][T11499] pimreg: left allmulticast mode [ 262.113945][T11508] netlink: 'syz.2.1600': attribute type 4 has an invalid length. [ 262.134144][T11503] lo speed is unknown, defaulting to 1000 [ 262.167686][T11506] netlink: 'syz.2.1600': attribute type 4 has an invalid length. [ 262.192121][T11511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1601'. [ 262.306879][ T43] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 262.465154][T11524] tipc: Enabling of bearer rejected, failed to enable media [ 262.612330][T11524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1603'. [ 262.949413][T11545] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1611'. [ 262.970757][T11549] netlink: 'syz.0.1613': attribute type 4 has an invalid length. [ 263.011539][ T43] lo speed is unknown, defaulting to 1000 [ 263.020011][ T43] syz1: Port: 1 Link DOWN [ 263.023971][T11549] netlink: 'syz.0.1613': attribute type 4 has an invalid length. [ 263.038912][ T1164] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 263.069464][ T43] lo speed is unknown, defaulting to 1000 [ 263.075450][ T43] syz1: Port: 1 Link ACTIVE [ 263.139262][T11542] syzkaller1: entered promiscuous mode [ 263.163636][T11542] syzkaller1: entered allmulticast mode [ 263.198096][T11558] netlink: 'syz.4.1616': attribute type 4 has an invalid length. [ 263.239349][T11558] netlink: 'syz.4.1616': attribute type 4 has an invalid length. [ 263.317984][T11563] netlink: 'syz.1.1612': attribute type 1 has an invalid length. [ 263.545888][ T43] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 263.994702][T11573] syzkaller1: entered promiscuous mode [ 264.003334][T11573] syzkaller1: entered allmulticast mode [ 264.155315][T11586] netlink: 'syz.0.1625': attribute type 10 has an invalid length. [ 264.178186][T11585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 264.188633][ T4589] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 264.216411][ T4589] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 265.199182][ T5871] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 265.419438][T11631] __nla_validate_parse: 3 callbacks suppressed [ 265.419458][T11631] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1641'. [ 265.583517][T11641] pimreg: entered allmulticast mode [ 265.604657][T11643] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1643'. [ 265.663142][T11643] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1643'. [ 265.665099][T11641] pimreg: left allmulticast mode [ 265.742919][ T6693] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.773844][T11648] gtp1: entered promiscuous mode [ 265.800082][ T6693] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.861454][ T6693] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.872326][ T6693] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.931856][T11652] syzkaller0: entered promiscuous mode [ 265.944797][T11652] syzkaller0: entered allmulticast mode [ 265.950493][T11655] netlink: 788 bytes leftover after parsing attributes in process `syz.1.1648'. [ 265.973622][T11652] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 266.356468][T11668] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1652'. [ 266.419641][T11668] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1652'. [ 266.756358][T11675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1654'. [ 267.820800][T11709] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1666'. [ 268.174191][T11719] lo speed is unknown, defaulting to 1000 [ 268.636349][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 268.875920][T11748] pimreg: entered allmulticast mode [ 269.345429][T11766] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1681'. [ 269.439456][T11771] validate_nla: 1 callbacks suppressed [ 269.439474][T11771] netlink: 'syz.2.1682': attribute type 4 has an invalid length. [ 269.480269][T11771] netlink: 'syz.2.1682': attribute type 4 has an invalid length. [ 269.499776][T11773] pimreg: entered allmulticast mode [ 269.567372][T11773] pimreg: left allmulticast mode [ 269.945912][T11787] lo speed is unknown, defaulting to 1000 [ 270.719741][T11817] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1693'. [ 271.100124][T11830] netlink: 'syz.4.1695': attribute type 4 has an invalid length. [ 271.182294][T11834] netlink: 'syz.4.1695': attribute type 4 has an invalid length. [ 271.279213][T11823] pimreg: entered allmulticast mode [ 271.480668][T11841] syzkaller1: entered promiscuous mode [ 271.487015][T11841] syzkaller1: entered allmulticast mode [ 271.520890][T11843] netlink: 788 bytes leftover after parsing attributes in process `syz.0.1698'. [ 271.588291][T11848] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 271.603214][T11848] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 271.825580][T11853] syzkaller0: entered promiscuous mode [ 271.831234][T11853] syzkaller0: entered allmulticast mode [ 271.872226][T11863] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1699'. [ 273.599053][T11880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1706'. [ 273.613757][T11880] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1706'. [ 273.624800][T11882] netlink: 'syz.2.1707': attribute type 39 has an invalid length. [ 274.389953][T11902] netlink: 'syz.2.1712': attribute type 1 has an invalid length. [ 274.416314][T11902] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1712'. [ 274.671778][T11918] netlink: 788 bytes leftover after parsing attributes in process `syz.3.1719'. [ 274.985151][T11931] netlink: 'syz.4.1721': attribute type 1 has an invalid length. [ 275.042846][T11931] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1721'. [ 275.114018][T11934] netlink: 'syz.0.1723': attribute type 1 has an invalid length. [ 275.200307][T11934] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1723'. [ 276.643596][T11955] netlink: 788 bytes leftover after parsing attributes in process `syz.3.1729'. [ 276.927425][T11966] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1732'. [ 277.198980][T11962] lo speed is unknown, defaulting to 1000 [ 277.725795][T11973] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1743'. [ 277.726490][T11977] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1735'. [ 277.897929][T11985] pimreg: entered allmulticast mode [ 277.918640][T11985] pimreg: left allmulticast mode [ 277.922186][ T5865] block nbd0: Receive control failed (result -104) [ 278.156259][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 278.293700][T11992] netlink: 788 bytes leftover after parsing attributes in process `syz.1.1738'. [ 278.646367][T11998] veth0: entered promiscuous mode [ 278.691478][T11998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1739'. [ 278.863902][T11998] veth0 (unregistering): left promiscuous mode [ 279.279935][T12007] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1742'. [ 279.461904][T12013] pimreg: left allmulticast mode [ 280.099651][T12020] tipc: Started in network mode [ 280.104598][T12020] tipc: Node identity 2e4cfda29862, cluster identity 4711 [ 280.112171][T12020] tipc: Enabled bearer , priority 0 [ 280.161652][T12020] syzkaller0: entered promiscuous mode [ 280.197391][T12020] syzkaller0: entered allmulticast mode [ 280.204204][T12020] tipc: Resetting bearer [ 280.274474][T12018] tipc: Resetting bearer [ 280.416057][T12032] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1751'. [ 281.132586][ T5935] tipc: Node number set to 3056532898 [ 282.215548][T12018] tipc: Disabling bearer [ 282.238259][T12036] pimreg: entered allmulticast mode [ 282.386999][T12062] netlink: 'syz.0.1757': attribute type 4 has an invalid length. [ 282.439831][T12065] netlink: 'syz.0.1757': attribute type 4 has an invalid length. [ 282.480522][ T9] lo speed is unknown, defaulting to 1000 [ 282.488285][ T9] lo speed is unknown, defaulting to 1000 [ 282.661153][T12081] tipc: Enabling of bearer rejected, failed to enable media [ 282.778684][T12081] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1762'. [ 282.910721][T12092] netlink: 'syz.0.1763': attribute type 1 has an invalid length. [ 282.961653][T12092] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1763'. [ 283.609026][T12104] tipc: Enabling of bearer rejected, failed to enable media [ 283.640716][T12103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1767'. [ 283.865286][T12120] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1771'. [ 285.183954][T12126] tipc: Enabling of bearer rejected, failed to enable media [ 285.359537][T12141] netlink: 788 bytes leftover after parsing attributes in process `syz.4.1774'. [ 285.515244][T12149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1778'. [ 285.559761][T12149] bond2: (slave bridge0): Releasing active interface [ 285.820916][T12155] tipc: Enabling of bearer rejected, failed to enable media [ 285.856781][T12156] lo speed is unknown, defaulting to 1000 [ 285.899672][T12155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1780'. [ 286.177029][T12178] netlink: 'syz.2.1781': attribute type 1 has an invalid length. [ 286.282902][T12178] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1781'. [ 286.410180][T12187] netlink: 'syz.1.1784': attribute type 4 has an invalid length. [ 286.535919][T12188] netlink: 'syz.1.1784': attribute type 4 has an invalid length. [ 286.592586][T12196] netlink: 'syz.3.1786': attribute type 4 has an invalid length. [ 286.645044][T12198] netlink: 'syz.3.1786': attribute type 4 has an invalid length. [ 287.106696][T12197] tipc: Started in network mode [ 287.111609][T12197] tipc: Node identity 3e7928706008, cluster identity 4711 [ 287.124931][T12197] tipc: Enabled bearer , priority 0 [ 287.303605][T12199] syzkaller0: entered promiscuous mode [ 287.316393][T12199] syzkaller0: entered allmulticast mode [ 287.324257][T12199] tipc: Resetting bearer [ 287.399225][T12189] tipc: Resetting bearer [ 288.249097][ T9] tipc: Node number set to 1584474224 [ 288.827687][T12189] tipc: Disabling bearer [ 289.419677][T12243] netlink: 'syz.4.1797': attribute type 4 has an invalid length. [ 289.452404][T12243] netlink: 'syz.4.1797': attribute type 4 has an invalid length. [ 289.543152][T12247] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1799'. [ 289.559365][T12250] tipc: Failed to remove unknown binding: 66,1,1/1584474224:3536171684/3536171686 [ 289.570128][T12250] tipc: Failed to remove unknown binding: 66,1,1/1584474224:3536171684/3536171686 [ 290.683462][T12289] netlink: 'syz.0.1810': attribute type 4 has an invalid length. [ 290.701761][ T9] lo speed is unknown, defaulting to 1000 [ 290.716312][T12289] netlink: 'syz.0.1810': attribute type 4 has an invalid length. [ 290.732508][T12287] lo speed is unknown, defaulting to 1000 [ 290.738613][ T9] syz1: Port: 1 Link DOWN [ 290.755063][ T9] lo speed is unknown, defaulting to 1000 [ 290.766162][ T9] syz1: Port: 1 Link ACTIVE [ 290.871794][T12297] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1817'. [ 290.902662][T12295] netlink: 788 bytes leftover after parsing attributes in process `syz.4.1816'. [ 290.993177][T12299] macvlan2: entered promiscuous mode [ 291.009592][T12299] macvlan2: entered allmulticast mode [ 291.018041][T12299] bond0: (slave macvlan2): Opening slave failed [ 291.275201][T12313] netlink: 788 bytes leftover after parsing attributes in process `syz.3.1820'. [ 291.352760][T12315] lo speed is unknown, defaulting to 1000 [ 291.814604][T12328] pimreg: entered allmulticast mode [ 291.841667][T12325] tipc: Enabled bearer , priority 0 [ 291.978509][T12332] syzkaller0: entered promiscuous mode [ 291.994284][T12332] syzkaller0: entered allmulticast mode [ 292.015243][T12332] tipc: Resetting bearer [ 292.104331][ T13] tipc: Resetting bearer [ 292.180279][T12323] tipc: Resetting bearer [ 293.641817][T12323] tipc: Disabling bearer [ 294.012338][T12372] lo speed is unknown, defaulting to 1000 [ 294.135929][T12377] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1834'. [ 294.242344][T12379] netlink: 788 bytes leftover after parsing attributes in process `syz.4.1835'. [ 294.298874][T12377] vlan3: entered allmulticast mode [ 294.304365][T12377] bridge0: entered allmulticast mode [ 294.310735][T12377] bridge2: port 1(vlan3) entered blocking state [ 294.317715][T12377] bridge2: port 1(vlan3) entered disabled state [ 294.325611][T12377] vlan3: entered promiscuous mode [ 294.331314][T12377] bridge0: entered promiscuous mode [ 294.760923][T12395] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3942. macoff=106 [ 294.904799][T12401] pimreg: left allmulticast mode [ 294.922784][T12402] netlink: 'syz.3.1841': attribute type 4 has an invalid length. [ 294.933222][T12402] netlink: 'syz.3.1841': attribute type 4 has an invalid length. [ 295.308741][T12415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1844'. [ 295.358658][T12416] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe000: 0000 [#1] SMP KASAN PTI [ 295.370630][T12416] KASAN: probably user-memory-access in range [0x00000000ffff0000-0x00000000ffff0007] [ 295.380207][T12416] CPU: 1 UID: 0 PID: 12416 Comm: modprobe Not tainted 6.16.0-syzkaller-12071-gf8262b8dadfa #0 PREEMPT(full) [ 295.391842][T12416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 295.401979][T12416] RIP: 0010:percpu_ref_get_many+0x8d/0x140 [ 295.407802][T12416] Code: 01 48 c7 c7 a0 4c 98 8b be 4b 03 00 00 48 c7 c2 e0 4c 98 8b e8 a4 bd 71 ff 49 bc 00 00 00 00 00 fc ff df 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 d4 4d f7 ff 49 8b 07 a8 03 75 62 [ 295.427401][T12416] RSP: 0018:ffffc9001b7976f8 EFLAGS: 00010206 [ 295.433464][T12416] RAX: 000000001fffe000 RBX: ffffffff822bc7f9 RCX: e132542c17febc00 [ 295.441418][T12416] RDX: 0000000000000000 RSI: ffffffff8be32660 RDI: ffffffff8be32620 [ 295.449375][T12416] RBP: 0000000000000078 R08: 0000000000000000 R09: ffffffff822bc7f9 [ 295.457419][T12416] R10: dffffc0000000000 R11: fffffbfff1f468e7 R12: dffffc0000000000 [ 295.465379][T12416] R13: ffff8880b873b540 R14: 0000000000000001 R15: 00000000ffff0000 [ 295.473426][T12416] FS: 0000000000000000(0000) GS:ffff888125d21000(0000) knlGS:0000000000000000 [ 295.482434][T12416] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 295.489099][T12416] CR2: 00007f5591833e9c CR3: 000000000df36000 CR4: 00000000003526f0 [ 295.497065][T12416] Call Trace: [ 295.500330][T12416] [ 295.503250][T12416] refill_obj_stock+0x254/0x850 [ 295.508091][T12416] ? refill_obj_stock+0x116/0x850 [ 295.513115][T12416] __memcg_slab_free_hook+0x127/0x3d0 [ 295.518474][T12416] ? unlink_anon_vmas+0x614/0x670 [ 295.523508][T12416] kmem_cache_free+0x223/0x400 [ 295.528262][T12416] unlink_anon_vmas+0x614/0x670 [ 295.533197][T12416] free_pgtables+0x72b/0x9c0 [ 295.537775][T12416] ? __pfx_free_pgtables+0x10/0x10 [ 295.542902][T12416] ? __pfx_down_write+0x10/0x10 [ 295.547761][T12416] ? __mas_set_range+0x12f/0x3c0 [ 295.552799][T12416] exit_mmap+0x444/0xb50 [ 295.557124][T12416] ? uprobe_clear_state+0x20f/0x290 [ 295.562678][T12416] ? __pfx_exit_mmap+0x10/0x10 [ 295.567467][T12416] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 295.573389][T12416] ? __pfx_exit_aio+0x10/0x10 [ 295.578195][T12416] ? uprobe_clear_state+0x274/0x290 [ 295.583538][T12416] __mmput+0x118/0x430 [ 295.587703][T12416] exit_mm+0x1da/0x2c0 [ 295.591803][T12416] ? __pfx_exit_mm+0x10/0x10 [ 295.596586][T12416] ? hrtimer_try_to_cancel+0x3d9/0x420 [ 295.602089][T12416] ? rcu_is_watching+0x15/0xb0 [ 295.606840][T12416] do_exit+0x648/0x2300 [ 295.610991][T12416] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 295.616528][T12416] ? __pfx_do_exit+0x10/0x10 [ 295.621112][T12416] ? _raw_spin_unlock_irq+0x23/0x50 [ 295.626310][T12416] ? lockdep_hardirqs_on+0x9c/0x150 [ 295.631583][T12416] do_group_exit+0x21c/0x2d0 [ 295.636667][T12416] __x64_sys_exit_group+0x3f/0x40 [ 295.641865][T12416] x64_sys_call+0x21f7/0x2200 [ 295.646530][T12416] do_syscall_64+0xfa/0x3b0 [ 295.651020][T12416] ? lockdep_hardirqs_on+0x9c/0x150 [ 295.656212][T12416] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.662269][T12416] ? clear_bhb_loop+0x60/0xb0 [ 295.666928][T12416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.672842][T12416] RIP: 0033:0x7f55919926c5 [ 295.677755][T12416] Code: Unable to access opcode bytes at 0x7f559199269b. [ 295.684964][T12416] RSP: 002b:00007ffdfc4cbed8 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7 [ 295.693470][T12416] RAX: ffffffffffffffda RBX: 00007f5591a93fe8 RCX: 00007f55919926c5 [ 295.701454][T12416] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000001 [ 295.709411][T12416] RBP: 0000000000000001 R08: 00007ffdfc4cbe68 R09: 0000000000000000 [ 295.717371][T12416] R10: 00007ffdfc4cbd00 R11: 0000000000000202 R12: 0000000000000000 [ 295.725338][T12416] R13: 0000000000000001 R14: 00007f5591a92680 R15: 00007f5591a94000 [ 295.733300][T12416] [ 295.736312][T12416] Modules linked in: [ 295.741221][T12416] ---[ end trace 0000000000000000 ]--- [ 295.746725][T12416] RIP: 0010:percpu_ref_get_many+0x8d/0x140 [ 295.752555][T12416] Code: 01 48 c7 c7 a0 4c 98 8b be 4b 03 00 00 48 c7 c2 e0 4c 98 8b e8 a4 bd 71 ff 49 bc 00 00 00 00 00 fc ff df 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 d4 4d f7 ff 49 8b 07 a8 03 75 62 [ 295.773689][T12416] RSP: 0018:ffffc9001b7976f8 EFLAGS: 00010206 [ 295.780126][T12416] RAX: 000000001fffe000 RBX: ffffffff822bc7f9 RCX: e132542c17febc00 [ 295.788156][T12416] RDX: 0000000000000000 RSI: ffffffff8be32660 RDI: ffffffff8be32620 [ 295.796525][T12416] RBP: 0000000000000078 R08: 0000000000000000 R09: ffffffff822bc7f9 [ 295.804600][T12416] R10: dffffc0000000000 R11: fffffbfff1f468e7 R12: dffffc0000000000 [ 295.812813][T12416] R13: ffff8880b873b540 R14: 0000000000000001 R15: 00000000ffff0000 [ 295.820925][T12416] FS: 0000000000000000(0000) GS:ffff888125d21000(0000) knlGS:0000000000000000 [ 295.830217][T12416] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 295.836958][T12416] CR2: 00007f5591833e9c CR3: 000000000df36000 CR4: 00000000003526f0 [ 295.845147][T12416] Kernel panic - not syncing: Fatal exception [ 295.851539][T12416] Kernel Offset: disabled [ 295.855864][T12416] Rebooting in 86400 seconds..