last executing test programs: 7.947414398s ago: executing program 2 (id=1352): socket$inet(0x2b, 0x801, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0xe, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x8}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="05"], 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x61, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500190000000000050018"], 0x44}}, 0x1) r2 = socket$inet6(0x10, 0x3, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c200000000000000000008004503002400000000002f907800000000ffffffff0000883e001090784206000000000000e9bb2a4fde2cfa6d96935b0e0c16f54872c15bf94f9a823dcec46e4c0ad906f37f0d75976b917cc8bf6be97aa8d4c5837fc61a371eabf4dc772c0ce4dc8f0b2d8494aecb2d14a06ee1652815e796a507478000f2ab8a0357f2501a086a0fb483715f49bd0573e091b3e96935153335b70da73e21de28debbc51927d51b84482a98db385a478c96c68fd588febc1051aa713564a1f72a96e54f12"], 0x0) sendto$inet6(r2, &(0x7f00000007c0)="73149c2fbeae77e53f71a1a79480d130b26b8ff0fa0a8e6b1f25221bfac470e0f86831b9df8c9a9baa39866dd8ad8e52652452fce3c8686033eeb32a8531d6b96c742e4099d84cae65a2480d17cd29259d3f8a92ad1d6c6e9999d1aa9b2279281ccdba0e119346df98b46679ae83b4ab684a9e8f2fd3d19ea0406a25199449438cf3d1a5c67a9efb6b5cd669a00378537e204313811c5ffb04b2adc15f90318fc80c3a39804993040a060c008afddae6e566c15ff399606fc24c75ee2748fd276b36e442fa709a7b2e834b4af6e23b5056f8d0cff9f8acecbd23450551c30fa6359a6fd1715600"/246, 0xf6, 0x8811, 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r3, 0x1) recvmmsg(r3, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1005}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x3ffffbd, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="b000000016007f029e78f6030f7a0a762353bfb89fd8c902317bab30f89f080aaaaeb9d8091c815dcf03e14e877733fff4fe20a5be870f576b162e7de2d02673e789a4950c9cdc206e086fd0dc8ca9afcd9d522ac78876a4595146add31b35355848794ca3f8b38aef1e114ab9fb0200000000000000a3b0c81c6f8144e74fe13b80ca46c1a6c04ad73c9d", 0x8b}, {&(0x7f00000000c0)="68c32a7de6a2395800"/18, 0x12}], 0x2}, 0x8800) r6 = socket(0x28, 0x5, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x80000d9}, 0x8) shutdown(r7, 0x0) bind$vsock_stream(r6, &(0x7f0000000040), 0x10) listen(r6, 0x0) r8 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r8, 0x0, 0x0) accept$phonet_pipe(r8, &(0x7f0000000140), &(0x7f0000000640)=0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x25, &(0x7f00000004c0)=0x8000, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000640)=ANY=[], 0x10) ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, &(0x7f0000000000)={0x1, 0x4}) 2.161444286s ago: executing program 3 (id=1409): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="da17"], 0x198}}, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000002a00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="30000000000000008400000001000000000000af7a00020000000000000000000400"/44, @ANYRES32=0x0, @ANYBLOB="18000000000000008400000005"], 0x48}], 0x1, 0x40) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) 2.001011203s ago: executing program 3 (id=1411): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x74, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2b}, @NL80211_ATTR_PMKID={0x14, 0x55, "c1fc2ba62389ed98c9ec4ddce4509c5d"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "83ba74cdeca0acd6624e43658440390a"}]}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x8004) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f0001000000000000000000020100800c0001000300000000000000140003"], 0x114}], 0x1}, 0x0) (async) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f0001000000000000000000020100800c0001000300000000000000140003"], 0x114}], 0x1}, 0x0) 1.999712509s ago: executing program 0 (id=1412): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x24, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x7}, {0xb, 0xa}, {0x4, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x8050}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)={0x220, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0x220}}, 0x20000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c0003800600060065580000040502"], 0x528}}, 0xc000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0xa4, r3, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xb}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x36, 0x2b}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4c}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xe545e586cbc552d0}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x65}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8000}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xb40}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x20000810) 1.855509167s ago: executing program 2 (id=1413): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x42, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r1}, 0x3f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000007c0)={r0, &(0x7f00000004c0)="e4211d7d8ff8a3f31cd660d1a58a7d", &(0x7f0000000780)=@udp6=r1, 0x2}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x2f, 0x2, {{}, 0x5}}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_LABEL={0xfffffffffffffddf, 0x5, 0x199d2}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008200000018030000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800080081000000060027"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x42, 0x8, 0x2, 0x0, 0x1}, 0x48) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r1}, 0x3f) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000007c0)={r0, &(0x7f00000004c0)="e4211d7d8ff8a3f31cd660d1a58a7d", &(0x7f0000000780)=@udp6=r1, 0x2}, 0x20) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x2f, 0x2, {{}, 0x5}}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_LABEL={0xfffffffffffffddf, 0x5, 0x199d2}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008200000018030000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800080081000000060027"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) 1.77386246s ago: executing program 0 (id=1414): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="030700006200190000000b0000000800030048"], 0x1c}}, 0x0) sendmmsg$inet6(r1, &(0x7f0000002340)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0xe2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10000}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000180)="b0", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r1, 0x1) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000040)={r5}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={r5, 0x6, 0x6, 0x4, 0x8, 0x1}, &(0x7f0000000080)=0x14) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="030700006200190000000b0000000800030048"], 0x1c}}, 0x0) (async) sendmmsg$inet6(r1, &(0x7f0000002340)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0xe2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10000}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000180)="b0", 0x1}], 0x1}}], 0x2, 0x0) (async) shutdown(r1, 0x1) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, &(0x7f0000000080)=0x8) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000040)={r5}, &(0x7f0000000100)=0x8) (async) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={r5, 0x6, 0x6, 0x4, 0x8, 0x1}, &(0x7f0000000080)=0x14) (async) 1.70906982s ago: executing program 3 (id=1415): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x30, 0x3, 0x8, 0xfa, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x400}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) 1.624054321s ago: executing program 2 (id=1417): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0xf, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000b80)=@security={'security\x00', 0x64, 0x4, 0x398, 0x100000c, 0x1e0, 0x1e0, 0xc0, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @rand_addr=0x64010100, 0xff000000, 0x0, 'veth0_vlan\x00', 'pimreg\x00', {}, {0xff}, 0xff, 0x3}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x1000000000000}, [@common=@inet=@socket1={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0xfe}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0xc, 0x2, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0xfff8, 0x2, [0x30, 0x3, 0x1, 0x37, 0x811, 0x33, 0x37, 0x1a, 0x17, 0x3d, 0x4, 0x4, 0x2b, 0x21, 0x1c, 0x5], 0x0, 0x8000, 0x2004927}}}, {{@uncond, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0xfffd, 0x1}}, @common=@unspec=@ipvs={{0x48}, {@ipv4=@private=0xa010102, [0xffffffff, 0x7fffffff, 0xffffff00, 0xffffff00], 0x4e20, 0x67, 0x3, 0x4, 0x1, 0x2}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7d, 0x9, 0x4, 0x6, 0x1, 0x7f, 0x1, 0x40]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x400000008000f28, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01, 0x0, 0x4010}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0xc8}}, 0x0) close(r2) 1.606796804s ago: executing program 0 (id=1419): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000040)=@ethtool_ts_info={0x19}}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a090400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000031200011800a00010071756f7461000000100021800c0001400000a09e97bb50000000000008140000001100010000000000000000"], 0xa4}}, 0x0) socket(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x2, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r7, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000040}, 0x40) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) r9 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000020008001c40d51a5b95cfa4b966af580d127879f11f663d4ed30ccb1627885514f7549cfeca712bbdc8df8018d683b8afc239d4a372c8e39c8e73bc6c3020cd981835c936baf69d77db3ca7160d9c851a3925c4d298050bee3ad16beb5718c42a05000000dd0b6820b79ffeba0aae899807dd93057409981400a0035170ce4a9cf9b8d5bed2e3dae3950048f71297c20d3feb83ac5dbe4983507b00b6d2b278b3e36c974220bbf857be5a064e651706e29d2d132cd6e3e1081baefb", @ANYRES32, @ANYBLOB], 0x28}}, 0x0) socket(0x10, 0x803, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)={0x9c, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_DATA={0x58, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x4e}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xc5c}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x7}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x1000}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x9c}}, 0x0) socket(0x1, 0x803, 0x0) 1.557019418s ago: executing program 3 (id=1420): setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000540), 0x3c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=@dellinkprop={0x28, 0x6d, 0x1, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x140, 0x282a2}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$netlink(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x10) setsockopt(r0, 0x4f3, 0x2, &(0x7f0000000340)="d55b856ad0302e81853b285768c2180e35061d6492147e520bc8283f4108ce8ba4822d32e942ecc8a5cc9ad8b145a4262dbd42fb03b27a4a2c76cf829b64398b138f620068205b24ec4a8d1495a032d52ccd6159abbd19e2fde06d554a73a9e878fa8e1dbf1023cb99ca593c70e15a5071e8c0f42deee3b24b4bf8b1dc1b5043f191a67ab217d8854b9e", 0x8a) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}}, 0x4c8d0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4000814}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bind$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x3, @dev={0xac, 0x14, 0x14, 0x2d}}}, 0x1e) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r2, &(0x7f00000003c0)={0x1a, 0x307, 0x8, 0x80, 0x0, 0x3d}, 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) read$alg(r1, 0x0, 0x0) write$cgroup_devices(r1, 0x0, 0x0) 1.47512315s ago: executing program 2 (id=1421): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000180)=0x14) r1 = socket$inet(0x2, 0x2, 0x73) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x19) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000240)=0x10000007, 0xfffffffffffffc85) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000003280)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000280)=0x202, 0x4) 1.221080261s ago: executing program 2 (id=1423): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x2, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000634308000000000095"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc60580002400c000400030082c137153e3719ac018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1.220759589s ago: executing program 0 (id=1424): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000280)=[{0x20}]}, 0x10) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) getsockname(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$inet(0x2, 0x3, 0x80000001) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='signal_generate\x00', r8}, 0x18) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r9}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001740)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xfffc, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000000) sendmmsg(r4, &(0x7f0000000180)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local, 0x2}, 0x80, &(0x7f0000000200)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x18}}], 0x2, 0x844) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r1, &(0x7f0000000000)={0xa0000001}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000340)={{0x2, 0x4e20, @multicast1}, {0x306, @local}, 0xe, {0x2, 0x4e21, @local}, 'ip6tnl0\x00'}) unshare(0x60600) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x38) ppoll(&(0x7f0000000200)=[{r10, 0x1}], 0x1, 0x0, 0x0, 0x3) 1.097312552s ago: executing program 1 (id=1425): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800fbffffffffffffff00fa0b000000851000f3000000ff9500000000000000"], &(0x7f0000000040)='GPL\x00', 0xe, 0xff8, &(0x7f0000000cc0)=""/4088, 0x41085, 0x49}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00ffffff800000000000000000000000000000000000000004000000000000080012000000020000000000020000000600000000000000090000000000000000000000000000000000000000000000ff01000000000000000000000000000105000600000000000a000002ffffffffff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x92}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r3, &(0x7f0000000240), &(0x7f0000000300)=""/249}, 0x20) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000a00)={'tunl0\x00', &(0x7f00000000c0)=@ethtool_cmd={0x3a, 0x40009, 0x0, 0x400, 0x2, 0x0, 0x8, 0xfe, 0x0, 0x9, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x45, [0xfff, 0x2]}}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000131467ef"], 0x18}}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000380)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_IIF={0x8, 0x3, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8000) 1.052563173s ago: executing program 4 (id=1426): r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000000)={0x2b, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) getsockopt$inet6_buf(r4, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000500), 0x4) close(0x3) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-neonbs\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) r5 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10, 0x800) setsockopt$inet_MCAST_LEAVE_GROUP(r5, 0x0, 0x2d, &(0x7f0000000100)={0x1, {{0x2, 0x4e22, @broadcast}}}, 0x88) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) 1.049719277s ago: executing program 3 (id=1427): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{}, [@TCA_NETEM_CORRUPT={0xc}, @TCA_NETEM_RATE={0x14, 0x6, {0x7ff, 0x6, 0x0, 0x2}}]}}}]}, 0x6c}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000000c0)={'wlan1\x00', &(0x7f0000000080)=@ethtool_stats}) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r6, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x40, 0x8, 0xfe, 0xff7ffeff}, {0x6, 0xa, 0xfe, 0x8001}]}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x4, 0x84) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r8}, 0x18) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) r9 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r9, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000008c0)=[{&(0x7f0000000140)=""/60, 0x3c}, {&(0x7f0000000580)=""/54, 0x36}, {&(0x7f0000000600)=""/123, 0x7b}, {&(0x7f0000000700)=""/113, 0x71}, {&(0x7f0000000800)=""/133, 0x85}], 0x5, 0x0, 0x4}}], 0x48}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x4000010, 0xffffffffffffffff, 0x54099000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a27f200022c00fe8000000000000000000000000000bbfe8000000000000000000000000000aaff0001080000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500000009078080050e439cc1c50f9e8f0e11a069a10956846f9b94ac998f72d61715c8c4129345ff7afa956de43ce83b4c1b2fd7eafbe4262b2a5cceb924593f577cf04736141ea2ae5370d3f14c75cba771a9ee982efac6d632b944c8a90dcdae68109c259f0bfba1973a8b12f4d11dabc5d60ae87f6b6c78d6b2a01b5e1bda3afbb5fd61a2267026b611444954d06525cf062794471ed32d643f610ddbbfe8148fd2aa4a46e3e"], 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 956.906924ms ago: executing program 2 (id=1428): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) unshare(0x68040200) (async) r1 = socket(0x2a, 0x2, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x7, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r4, 0x0, 0xe, 0x0, &(0x7f0000000000)="bf1ea0e3c19ed614ebadd2db8662", 0x0, 0x504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv4_newroute={0x2c, 0x18, 0xaba64f4add525e83, 0x1, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xfe, 0x3}, [@RTA_OIF={0x8, 0x4, r6}, @RTA_PREFSRC={0x8, 0x7, @broadcast}]}, 0x2c}, 0x1, 0xffffff7f}, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff3}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=@newtfilter={0x4c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {}, {0x8, 0xe}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xf1, 0x4, 0x4}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4c8d0}, 0x14) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x0, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x33, '\x00', r7, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r9, 0x0, 0xd}, 0x18) mmap(&(0x7f0000feb000/0x14000)=nil, 0x14000, 0x3000004, 0x40010, r10, 0x3f38e000) (async) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x190b87f7}, {0x6, 0x0, 0x6, 0x1}]}, 0x10) bind$bt_hci(r11, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r11, &(0x7f0000000140)="24000000010006", 0x7) (async) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r13 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r8) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x1c, r13, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000}, 0x0) connect$bt_l2cap(r12, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$sock(r12, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) (async) shutdown(r12, 0x1) 931.702484ms ago: executing program 4 (id=1429): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000009c42b00040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x9, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca90000000000004d090100000000009500000000000000b702000000000000632af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000500)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)={0x1c, r7, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x18, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x404c014}, 0x4004000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010027bd7000fcdbdf254400000008000300", @ANYRES32=r10, @ANYBLOB="0a001800030303030303000004005a8020005a8018000080140005000027"], 0x4c}}, 0x4040810) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) socket$pptp(0x18, 0x1, 0x2) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0xffffffffffffffbc, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x2e, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xfff2, 0xffff}, {0x0, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) 904.942993ms ago: executing program 1 (id=1430): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x54, r2, 0x1, 0x170bd2c, 0x8000, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @DEVLINK_ATTR_RATE_NODE_NAME={0xfffffffffffffde1}, @handle=@pci]}, 0x44}}, 0x20000000) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001540)=ANY=[@ANYBLOB="280000001e00010000000000000000000700", @ANYRES32], 0x28}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0100180000000000000014000000140000000c0000000000000001000006040000000900000000000000006100000000005f00f20b00"], &(0x7f0000000080)=""/159, 0x38, 0x9f, 0x1}, 0x28) 748.964275ms ago: executing program 4 (id=1431): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = accept4(r0, &(0x7f0000000000)=@alg, &(0x7f00000000c0)=0x80, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x38, r2, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x480c0}, 0x800) r3 = socket(0xa, 0x3, 0x1) setsockopt$MRT_TABLE(r3, 0x0, 0xcf, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r5, 0x4030582a, &(0x7f0000000380)={0x0, 0x0, 0x10, 0x80000000}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0_vlan\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newlink={0x58, 0x10, 0x1, 0x170bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x7929c, 0x10}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}, @IFLA_VFINFO_LIST={0xffffffffffffff77, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xff, 0x6}}, @IFLA_VF_MAC={0x0, 0x1, {0x1}}]}]}, @IFLA_TXQLEN={0x8, 0xd, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x85}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000004000ffffffff0200000008000300", @ANYRES32=r10, @ANYBLOB="080002002e"], 0x24}, 0x1, 0x6c00, 0x0, 0x4d080}, 0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, 0x0, 0x40000) setsockopt$packet_drop_memb(r5, 0x107, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) r11 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r11, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r8, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x80, 0x4}, {0x7, 0x3}, {0xa}, {0xae, 0x1}, {0xcb, 0x4}, {0x3}, {0x2, 0x6}], "f25df52d17c744fa"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x0, 0x6}, {0x4, 0x2}, {0x4, 0x4}, {0x0, 0x1}, {0x6, 0x4}, {0x65, 0x2}, {0x3, 0x4}], "f1f2e600a0e460fc"}}]}, 0x54}}, 0x20fa493d53fa05b4) sendmsg$inet6(r3, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={0x0}, 0x1, 0x0, 0x0, 0x4004040}, 0x10) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000100)=@setlink={0x74, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40480}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_bond\x00'}, @IFLA_PORT_SELF={0x40, 0x19, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "a219fa0777963e827fca9038987e4313"}, @IFLA_PORT_PROFILE={0x12, 0x2, 'veth0_to_bond\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "c0d80f00abc8efeda63dff9dc63522c3"}]}]}, 0x74}}, 0x0) sendmsg$nl_xfrm(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRES8=r0, @ANYRESDEC=r0, @ANYRES16=r2, @ANYRESOCT, @ANYRESHEX=r10, @ANYRESOCT=r6, @ANYRES32=r3, @ANYRES16=r8], 0xb8}, 0x1, 0x0, 0x0, 0x20}, 0x0) 747.224946ms ago: executing program 1 (id=1432): unshare(0x20000400) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x23, 0x0, &(0x7f00000001c0)) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) recvmsg$kcm(r1, &(0x7f0000000480)={&(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000340)=""/166, 0xa6}, {&(0x7f0000000400)=""/55, 0x37}, {&(0x7f0000000500)=""/236, 0xec}, {&(0x7f0000000000)=""/24, 0x18}, {&(0x7f0000000600)=""/199, 0xc7}], 0x5, &(0x7f0000000780)=""/167, 0xa7}, 0x10000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r3) sendmsg$IEEE802154_START_REQ(r4, &(0x7f0000000940)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4c0020}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x4c, r5, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x1}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0xf9}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x8}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x16}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040011) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r7], 0xfd45}}, 0x0) 665.59802ms ago: executing program 4 (id=1433): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x1900, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_sa={0x2, 0x1, 0x4d5, 0x0, 0x0, 0x8, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x60}, 0x1, 0x7}, 0x0) 578.759747ms ago: executing program 4 (id=1434): unshare(0x2a020400) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf670000000000001507"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x18, 0x0, &(0x7f0000000040)) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 444.779685ms ago: executing program 1 (id=1435): setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) (async) socket$tipc(0x1e, 0x2, 0x0) (async) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200c8894}, 0x10008820) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e4ef1f00810000007f00000001"], 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) unshare(0x20000400) socket$alg(0x26, 0x5, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) socket(0x10, 0x803, 0x0) (async) write$cgroup_pid(r1, &(0x7f0000000000), 0x2a979d) write$tun(r1, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000040), 0x6, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r0, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8804}, 0x8000) (async) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, &(0x7f00000000c0)) (async) r4 = socket$kcm(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x4a, &(0x7f0000000040), 0x4) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x240400c0}, 0x4004800) (async) socket$qrtr(0x2a, 0x2, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000006c0)) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), 0xffffffffffffffff) 367.531742ms ago: executing program 1 (id=1436): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000300)={r1, 0xff, 0x9, 0xe1}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e23, @remote}}, 0xc5, 0xd662}, &(0x7f00000000c0)=0x90) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) sendmsg$kcm(r2, &(0x7f0000000700)={&(0x7f0000000340)=@l2={0x1f, 0x7, @any, 0x8}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000100)="489e3230f3db2c9b3bd65f81d2fd7bede0db7e940aaadb5bc3d151ec0ecc878705a51d3366ec7f", 0x27}, {&(0x7f0000000180)="8e118294c0739291366008e3f3e074b1bf5d3925e043e6ba4c5a8c2cf4", 0x1d}, {&(0x7f00000003c0)="4346c6beb72f16860948e7b1a18e890c34633ab0fd090ea91a80b464865cb114a73bd1625a25323b93dda10b646ef3d31d5055c3d53b0ed9995436138ef5f1877abd", 0x42}, {&(0x7f0000000440)}, {&(0x7f0000000480)="57be16e5dfc57a36fbd6147c692342945d0a112d5b50677b931b000ae93e64425a992e01e28967d2644d90b466d667060eae974d9a2f59439f04a24287f5f816b2a7d6064e887f33abcb7a4347d13777cc6ab3458e4fb0946525c1eabbd0160e962683d40741fbc03c49417992e2f22b0e953266ee8d2ab2a0a780d5e7f8db79d133d8b6ccaccb9fe49d75621afcfe59a65c084bff44ca7230aa9f3800fc921192e4fd0b6e780dd63904bd97a0aaa8797d6f06a8ab6b89d4a666e173e6f7f0d51046d82fee038e729be1e8d6a6718069e671ee66be7ba211a8e2901f4d6e065a0a1eb320749c4797354a2f69", 0xec}], 0x5, &(0x7f0000000600)=[{0xd8, 0xff, 0x9, "4a7e82e8a60401d9a8c21af239ece7eb88fa713dc5511077e4602c98cb32e838a00704ec38da5b2fcc2719bc3cbef8b183b517ead40a8ba577f9fae7a04fc27b963cd016336104aa3e3e14b454518e41169c87c34a19a3c3c7b6ec2f58bb561ff8350023d757bb82bf097132b51bf7ea017f8f518d1745c0f2112cf8472d3fa91291424cb44893cc56b40921f02c24aae6a0e9c5f31b470019a0e91198b00d78edd3a9963b218ae388e1f37b723e26736570104b9e2164e23cdcb403f92e1a9ad993d9"}], 0xd8}, 0x24004011) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x6011, r5, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r3, @ANYRES16=r6, @ANYRESHEX=r2], 0xa4}, 0x1, 0x0, 0x0, 0x40}, 0x0) 268.944814ms ago: executing program 4 (id=1437): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x10, 0x800, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), r1) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB='`\x00\x00', @ANYRES16=r2, @ANYBLOB="00082dbd7000fcdbdf25030000004c00098008000100d60e000008000200020000000800010005000000080002000d00000008000200030000000800010002000000080002000c00000008000100030000000800e70006000000"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r3, &(0x7f0000000640)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x1c, 0x0}}], 0x1, 0xc040) sendto$inet6(r3, 0x0, 0x0, 0x20044055, 0x0, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r4 = epoll_create1(0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_queued_recursive\x00', 0x7a44, 0x1700) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000005, 0x13, r5, 0x607d8000) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) writev(r6, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x41, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r8, &(0x7f0000000100)={0x20000014}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000006c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) socket$kcm(0x10, 0x0, 0x4) shutdown(0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 172.977232ms ago: executing program 0 (id=1438): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001940)={0x3c, 0x48, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}, [@typed={0x8, 0x100, 0x0, 0x0, @u32}, @nested={0x14, 0x1, 0x0, 0x1, [@generic="0d2a79075827af5aa534d6815c2e93f1"]}, @nested={0xa, 0x2, 0x0, 0x1, [@generic="b4e27551be74"]}]}, 0x3c}}, 0x20048800) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x16, 0xf, &(0x7f0000000140)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c0000000000", @ANYRES8=0x0, @ANYRES32=r0], 0x30}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 167.867772ms ago: executing program 1 (id=1439): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 150.510551ms ago: executing program 3 (id=1440): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000800)=[{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000840)="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", 0x18d}, {&(0x7f0000000700)="ce2ede98d4bde4b9a7931c4e260090a647151bacb721146be7ff4494578b050dc8c56c1571aa57d0f79d3ce5cc42977a719f4a8c88be34", 0x37}, {&(0x7f0000000600)="5fec9dec1e9d48e2b3a02e29dcaadb6d242c08b8b6e2a34dd08e48e3d32aa2bf0bd42348d6bf39fd7dac80fedaaab8ff4258ecbc4e025305fab94303f773d083bb47da24c3341e27416f38e3251fe082c8f8602308cd2f7dc846c93e62a8d53d22fcabce47b5531463290c970dccfaa7da3e4ee56136f44b991100e3db7c750c3ccb3e01d6598d53d05ca7503d7430f3ff2b79ab629faa1dfb2d0899dd807d28174305bd600e50112aa4d0ec230a89b3078bb60a198e5a7169d91005cda3fc9870956d72773bd700", 0xc8}, {&(0x7f0000002dc0)="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", 0x287}], 0x4, 0x0, 0x0, 0x4001}], 0x1, 0x48800) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, 0x0, 0x0) r5 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) bind$ax25(r6, &(0x7f0000000100)={{0x3, @default, 0x1}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x19}, @empty, 0x2, "4f6fb4d1af0f724e6118ecfbac0200843af297baebb0efa284da1403011a00", 0xfffffffc, 0x4, 0x81, 0xffff2da8}, 0x3c) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x70bd2a, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r7, 0x8914, &(0x7f0000000000)) r9 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r9, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x1, @empty, 'veth1\x00'}}) syz_init_net_socket$ax25(0x3, 0x2, 0xcc) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz0\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) 0s ago: executing program 0 (id=1441): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@gettfilter={0x2c, 0x2e, 0x400, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xfff3, 0x2}, {0x3, 0x1}}, [{0x8, 0xb, 0x6}]}, 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0x1200, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000001c0)={@remote, r4}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000440)=[0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf1, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xbe, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f00000007c0)={&(0x7f0000000300), 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x14, r1, 0x300, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x4000004) pipe(&(0x7f0000000040)={0xffffffffffffffff}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@gettfilter={0x44, 0x2e, 0x200, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0x6, 0xfff2}, {0x10}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x48c1}, 0x24040000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x101, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xfff3}, {0x6}, {0xfff3, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040080}, 0x40004) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.45' (ED25519) to the list of known hosts. [ 80.575431][ T5823] cgroup: Unknown subsys name 'net' [ 80.728998][ T5823] cgroup: Unknown subsys name 'cpuset' [ 80.738453][ T5823] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.420225][ T5823] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.032337][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.040701][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.049455][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.057064][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.065082][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.065399][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.072417][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.087301][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.087337][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.103024][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.103371][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.118345][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.126180][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.133522][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.141436][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.151295][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.159723][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.165025][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.188226][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.205067][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.226383][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.236958][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.244889][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.253457][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.261886][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.887603][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 85.990582][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 86.081291][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 86.189786][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 86.250047][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 86.261564][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.269806][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.277627][ T5833] bridge_slave_0: entered allmulticast mode [ 86.285892][ T5833] bridge_slave_0: entered promiscuous mode [ 86.329552][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.337141][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.344325][ T5833] bridge_slave_1: entered allmulticast mode [ 86.352603][ T5833] bridge_slave_1: entered promiscuous mode [ 86.444847][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.452014][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.459921][ T5837] bridge_slave_0: entered allmulticast mode [ 86.467781][ T5837] bridge_slave_0: entered promiscuous mode [ 86.521256][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.528842][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.536110][ T5837] bridge_slave_1: entered allmulticast mode [ 86.543395][ T5837] bridge_slave_1: entered promiscuous mode [ 86.599568][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.623297][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.630670][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.637972][ T5835] bridge_slave_0: entered allmulticast mode [ 86.646916][ T5835] bridge_slave_0: entered promiscuous mode [ 86.676818][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.703398][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.713229][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.721277][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.728620][ T5835] bridge_slave_1: entered allmulticast mode [ 86.737237][ T5835] bridge_slave_1: entered promiscuous mode [ 86.744151][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.751308][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.758828][ T5850] bridge_slave_0: entered allmulticast mode [ 86.766122][ T5850] bridge_slave_0: entered promiscuous mode [ 86.803034][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.828696][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.836955][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.844145][ T5850] bridge_slave_1: entered allmulticast mode [ 86.852037][ T5850] bridge_slave_1: entered promiscuous mode [ 86.909041][ T5833] team0: Port device team_slave_0 added [ 86.918364][ T5833] team0: Port device team_slave_1 added [ 86.987045][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.002000][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.010494][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.023198][ T5842] bridge_slave_0: entered allmulticast mode [ 87.031431][ T5842] bridge_slave_0: entered promiscuous mode [ 87.044838][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.052038][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.064040][ T5842] bridge_slave_1: entered allmulticast mode [ 87.072930][ T5842] bridge_slave_1: entered promiscuous mode [ 87.130416][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.149147][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.206060][ T5837] team0: Port device team_slave_0 added [ 87.213955][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.222779][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.249573][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.255694][ T5846] Bluetooth: hci0: command tx timeout [ 87.265959][ T5838] Bluetooth: hci1: command tx timeout [ 87.271570][ T5838] Bluetooth: hci2: command tx timeout [ 87.277365][ T51] Bluetooth: hci3: command tx timeout [ 87.302555][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.327900][ T5837] team0: Port device team_slave_1 added [ 87.334673][ T5838] Bluetooth: hci4: command tx timeout [ 87.341077][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.350930][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.358689][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.384929][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.398601][ T5850] team0: Port device team_slave_0 added [ 87.408512][ T5850] team0: Port device team_slave_1 added [ 87.445334][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.509070][ T5835] team0: Port device team_slave_0 added [ 87.563118][ T5835] team0: Port device team_slave_1 added [ 87.586318][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.593306][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.620430][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.633972][ T5842] team0: Port device team_slave_0 added [ 87.654044][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.661143][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.687940][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.713275][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.720393][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.746516][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.766733][ T5842] team0: Port device team_slave_1 added [ 87.787174][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.794161][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.820707][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.832355][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.839868][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.866275][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.878946][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.885988][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.912017][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.965646][ T5833] hsr_slave_0: entered promiscuous mode [ 87.972079][ T5833] hsr_slave_1: entered promiscuous mode [ 88.081528][ T5835] hsr_slave_0: entered promiscuous mode [ 88.088420][ T5835] hsr_slave_1: entered promiscuous mode [ 88.095222][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 88.101050][ T5835] Cannot create hsr debugfs directory [ 88.111893][ T5837] hsr_slave_0: entered promiscuous mode [ 88.118377][ T5837] hsr_slave_1: entered promiscuous mode [ 88.124645][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 88.130391][ T5837] Cannot create hsr debugfs directory [ 88.136654][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.143612][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.170268][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.220367][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.227463][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.253751][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.433275][ T5850] hsr_slave_0: entered promiscuous mode [ 88.443939][ T5850] hsr_slave_1: entered promiscuous mode [ 88.455778][ T5850] debugfs: 'hsr0' already exists in 'hsr' [ 88.461530][ T5850] Cannot create hsr debugfs directory [ 88.552666][ T5842] hsr_slave_0: entered promiscuous mode [ 88.559585][ T5842] hsr_slave_1: entered promiscuous mode [ 88.566754][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 88.572516][ T5842] Cannot create hsr debugfs directory [ 88.939968][ T5833] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.982567][ T5833] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.995324][ T5833] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.029683][ T5833] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.106785][ T5835] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.120101][ T5835] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.132034][ T5835] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.148972][ T5835] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.234319][ T5837] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.248639][ T5837] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.266243][ T5837] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.282665][ T5837] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.334580][ T5838] Bluetooth: hci2: command tx timeout [ 89.335294][ T5846] Bluetooth: hci0: command tx timeout [ 89.346356][ T51] Bluetooth: hci3: command tx timeout [ 89.346715][ T5838] Bluetooth: hci1: command tx timeout [ 89.415983][ T5838] Bluetooth: hci4: command tx timeout [ 89.454018][ T5850] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.470893][ T5850] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.510991][ T5850] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.523080][ T5850] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.561036][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.639443][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.650858][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.673817][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.692558][ T3572] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.699888][ T3572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.725654][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.738241][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.749992][ T3572] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.757194][ T3572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.778587][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.798257][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.819405][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.826600][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.849114][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.870276][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.877578][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.961726][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.996485][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.003632][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.047605][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.054857][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.318479][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.351087][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.427820][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.450696][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.509300][ T993] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.516534][ T993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.552928][ T993] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.560445][ T993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.588155][ T993] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.595386][ T993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.701133][ T993] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.708366][ T993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.750086][ T5850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.804895][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.857895][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.897314][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.043566][ T5835] veth0_vlan: entered promiscuous mode [ 91.125666][ T5833] veth0_vlan: entered promiscuous mode [ 91.171594][ T5835] veth1_vlan: entered promiscuous mode [ 91.190239][ T5833] veth1_vlan: entered promiscuous mode [ 91.320179][ T5835] veth0_macvtap: entered promiscuous mode [ 91.352263][ T5835] veth1_macvtap: entered promiscuous mode [ 91.418059][ T5846] Bluetooth: hci0: command tx timeout [ 91.423979][ T51] Bluetooth: hci3: command tx timeout [ 91.423989][ T5843] Bluetooth: hci2: command tx timeout [ 91.438024][ T5838] Bluetooth: hci1: command tx timeout [ 91.460158][ T5833] veth0_macvtap: entered promiscuous mode [ 91.473707][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.487511][ T5833] veth1_macvtap: entered promiscuous mode [ 91.497857][ T5843] Bluetooth: hci4: command tx timeout [ 91.552703][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.563973][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.579023][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.604036][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.636927][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.669596][ T61] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.695656][ T61] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.705386][ T61] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.714117][ T61] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.755646][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.764986][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.774229][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.792686][ T5850] veth0_vlan: entered promiscuous mode [ 91.807899][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.872711][ T5850] veth1_vlan: entered promiscuous mode [ 91.913872][ T5842] veth0_vlan: entered promiscuous mode [ 91.982123][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.986617][ T5837] veth0_vlan: entered promiscuous mode [ 91.997796][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.008162][ T10] cfg80211: failed to load regulatory.db [ 92.014322][ T5842] veth1_vlan: entered promiscuous mode [ 92.078658][ T5837] veth1_vlan: entered promiscuous mode [ 92.105083][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.110529][ T5850] veth0_macvtap: entered promiscuous mode [ 92.128298][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.143453][ T3572] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.153681][ T3572] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.166768][ T5850] veth1_macvtap: entered promiscuous mode [ 92.212529][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.223156][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.230788][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.282145][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.298868][ T5837] veth0_macvtap: entered promiscuous mode [ 92.326375][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.345848][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.357429][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.372592][ T5842] veth0_macvtap: entered promiscuous mode [ 92.398115][ T5837] veth1_macvtap: entered promiscuous mode [ 92.407133][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.456138][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.479252][ T5842] veth1_macvtap: entered promiscuous mode [ 92.570159][ T5960] veth3: entered promiscuous mode [ 92.583762][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.666399][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.723872][ T1102] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.748955][ T1102] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.790159][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.817213][ T1102] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.829623][ T1102] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.910930][ T3572] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.938632][ T3572] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.962027][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.041222][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.061009][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.070950][ T1102] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.083834][ T1102] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.152981][ T1102] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.177677][ T1102] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.211638][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.255986][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.440563][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.486701][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.495672][ T5843] Bluetooth: hci3: command tx timeout [ 93.501290][ T5838] Bluetooth: hci0: command tx timeout [ 93.506859][ T5843] Bluetooth: hci2: command tx timeout [ 93.508287][ T51] Bluetooth: hci1: command tx timeout [ 93.575034][ T51] Bluetooth: hci4: command tx timeout [ 93.629507][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.662183][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.756624][ T5981] netlink: 'syz.1.11': attribute type 1 has an invalid length. [ 93.927324][ T5981] 8021q: adding VLAN 0 to HW filter on device bond1 [ 93.953137][ T5992] IPv6: NLM_F_REPLACE set, but no existing node found! [ 93.953372][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.977168][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.252013][ T6005] netlink: 40 bytes leftover after parsing attributes in process `syz.1.15'. [ 94.283574][ T6003] netlink: 'syz.4.14': attribute type 21 has an invalid length. [ 94.319580][ T6003] netlink: 128 bytes leftover after parsing attributes in process `syz.4.14'. [ 94.346009][ T6003] netlink: 'syz.4.14': attribute type 5 has an invalid length. [ 94.388501][ T6003] netlink: 3 bytes leftover after parsing attributes in process `syz.4.14'. [ 94.619247][ T6010] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.670202][ T6020] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 94.803658][ T6026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20'. [ 94.817378][ T6028] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 94.853641][ T6026] netlink: 32 bytes leftover after parsing attributes in process `syz.3.20'. [ 95.079176][ T6026] gretap1: entered promiscuous mode [ 95.259011][ T6039] netlink: 56 bytes leftover after parsing attributes in process `syz.0.22'. [ 95.346889][ T6045] syz.1.25 uses obsolete (PF_INET,SOCK_PACKET) [ 95.430892][ T6047] syz.2.26: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 95.465803][ T6047] CPU: 1 UID: 0 PID: 6047 Comm: syz.2.26 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 95.465834][ T6047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 95.465855][ T6047] Call Trace: [ 95.465863][ T6047] [ 95.465876][ T6047] dump_stack_lvl+0x189/0x250 [ 95.465922][ T6047] ? __pfx_dump_stack_lvl+0x10/0x10 [ 95.465943][ T6047] ? __pfx__printk+0x10/0x10 [ 95.465968][ T6047] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 95.465993][ T6047] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 95.466019][ T6047] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 95.466045][ T6047] warn_alloc+0x214/0x310 [ 95.466074][ T6047] ? __pfx_warn_alloc+0x10/0x10 [ 95.466105][ T6047] ? __get_vm_area_node+0x28f/0x300 [ 95.466138][ T6047] ? xskq_create+0xbf/0x170 [ 95.466171][ T6047] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 95.466226][ T6047] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 95.466256][ T6047] ? __kasan_kmalloc+0x93/0xb0 [ 95.466292][ T6047] vmalloc_user_noprof+0xad/0xf0 [ 95.466313][ T6047] ? xskq_create+0xbf/0x170 [ 95.466342][ T6047] xskq_create+0xbf/0x170 [ 95.466373][ T6047] xsk_init_queue+0xb0/0x110 [ 95.466402][ T6047] xsk_setsockopt+0x57b/0x8d0 [ 95.466432][ T6047] ? __pfx_xsk_setsockopt+0x10/0x10 [ 95.466459][ T6047] ? __pfx_aa_sk_perm+0x10/0x10 [ 95.466486][ T6047] ? __fget_files+0x2a/0x420 [ 95.466506][ T6047] ? aa_sock_opt_perm+0x74/0x110 [ 95.466536][ T6047] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 95.466559][ T6047] ? __pfx_xsk_setsockopt+0x10/0x10 [ 95.466586][ T6047] do_sock_setsockopt+0x17c/0x1b0 [ 95.466612][ T6047] __x64_sys_setsockopt+0x13f/0x1b0 [ 95.466636][ T6047] do_syscall_64+0xfa/0x3b0 [ 95.466666][ T6047] ? lockdep_hardirqs_on+0x9c/0x150 [ 95.466695][ T6047] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.466716][ T6047] ? clear_bhb_loop+0x60/0xb0 [ 95.466741][ T6047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.466761][ T6047] RIP: 0033:0x7f1b1ef8eb69 [ 95.466786][ T6047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.466803][ T6047] RSP: 002b:00007f1b1fd30038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 95.466826][ T6047] RAX: ffffffffffffffda RBX: 00007f1b1f1b5fa0 RCX: 00007f1b1ef8eb69 [ 95.466841][ T6047] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000005 [ 95.466853][ T6047] RBP: 00007f1b1f011df1 R08: 0000000000000004 R09: 0000000000000000 [ 95.466865][ T6047] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 95.466878][ T6047] R13: 0000000000000000 R14: 00007f1b1f1b5fa0 R15: 00007fffede87b78 [ 95.466909][ T6047] [ 95.468623][ T6047] Mem-Info: [ 95.495025][ T6056] netlink: 'syz.4.28': attribute type 1 has an invalid length. [ 95.775382][ T6047] active_anon:5407 inactive_anon:0 isolated_anon:0 [ 95.775382][ T6047] active_file:1203 inactive_file:39825 isolated_file:0 [ 95.775382][ T6047] unevictable:768 dirty:1452 writeback:0 [ 95.775382][ T6047] slab_reclaimable:10430 slab_unreclaimable:95992 [ 95.775382][ T6047] mapped:29198 shmem:1362 pagetables:1135 [ 95.775382][ T6047] sec_pagetables:0 bounce:0 [ 95.775382][ T6047] kernel_misc_reclaimable:0 [ 95.775382][ T6047] free:1327949 free_pcp:22824 free_cma:0 [ 95.836618][ T6056] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 95.844054][ T6056] IPv6: NLM_F_CREATE should be set when creating new route [ 95.851392][ T6056] IPv6: NLM_F_CREATE should be set when creating new route [ 95.869256][ T6047] Node 0 active_anon:21728kB inactive_anon:0kB active_file:4812kB inactive_file:159100kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116792kB dirty:5892kB writeback:0kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11888kB pagetables:4288kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 95.908480][ T6047] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:16kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 95.994669][ T6047] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 96.027061][ T6047] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 96.032912][ T6047] Node 0 DMA32 free:1401092kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21512kB inactive_anon:0kB active_file:4840kB inactive_file:157256kB unevictable:1536kB writepending:5888kB present:3129332kB managed:2560292kB mlocked:0kB bounce:0kB free_pcp:67996kB local_pcp:13372kB free_cma:0kB [ 96.069080][ T6047] lowmem_reserve[]: 0 0 1 1 1 [ 96.094505][ T6047] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1844kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 96.142974][ T6047] lowmem_reserve[]: 0 0 0 0 0 [ 96.155224][ T6047] Node 1 Normal free:3900116kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:16kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:18752kB local_pcp:9216kB free_cma:0kB [ 96.235450][ T6047] lowmem_reserve[]: 0 0 0 0 0 [ 96.240425][ T6047] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 96.324723][ T6047] Node 0 DMA32: 21*4kB (UM) 30*8kB (UME) 6*16kB (UM) 2*32kB (ME) 2*64kB (UM) 2*128kB (UM) 1*256kB (U) 3*512kB (ME) 4*1024kB (UME) 2*2048kB (UM) 337*4096kB (M) = 1391204kB [ 96.382148][ T6077] trusted_key: syz.1.31 sent an empty control message without MSG_MORE. [ 96.413748][ T6047] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 96.542940][ T6047] Node 1 Normal: 185*4kB (UE) 48*8kB (UME) 53*16kB (UME) 49*32kB (UME) 20*64kB (UME) 6*128kB (UME) 3*256kB (ME) 3*512kB (ME) 3*1024kB (UME) 1*2048kB (E) 949*4096kB (M) = 3900116kB [ 96.592372][ T6047] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 96.659204][ T6047] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 96.695535][ T6047] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 96.716665][ T6047] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 96.734547][ T6047] 42392 total pagecache pages [ 96.742618][ T6047] 0 pages in swap cache [ 96.748412][ T6047] Free swap = 124996kB [ 96.752605][ T6047] Total swap = 124996kB [ 96.757445][ T6047] 2097051 pages RAM [ 96.761406][ T6047] 0 pages HighMem/MovableOnly [ 96.794783][ T6047] 424872 pages reserved [ 96.799093][ T6047] 0 pages cma reserved [ 96.954261][ T6098] Zero length message leads to an empty skb [ 97.094258][ T6100] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.326540][ T6117] tipc: Started in network mode [ 97.331644][ T6117] tipc: Node identity ca34dbc35c51, cluster identity 4711 [ 97.438177][ T6117] tipc: Enabled bearer , priority 0 [ 97.485919][ T6126] syzkaller0: entered promiscuous mode [ 97.551056][ T6126] syzkaller0: entered allmulticast mode [ 97.668151][ T6132] netlink: 148 bytes leftover after parsing attributes in process `syz.2.44'. [ 97.693570][ T6130] netlink: 20 bytes leftover after parsing attributes in process `syz.2.44'. [ 97.790579][ T6117] tipc: Resetting bearer [ 97.804137][ T6108] tipc: Resetting bearer [ 97.825474][ T6108] tipc: Disabling bearer [ 98.373462][ T6148] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 98.416036][ T6151] sch_fq: defrate 2048 ignored. [ 98.632168][ T6162] netlink: 24 bytes leftover after parsing attributes in process `syz.2.53'. [ 98.794764][ T6162] netlink: 4 bytes leftover after parsing attributes in process `syz.2.53'. [ 98.920980][ T6162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.061543][ T6162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.623759][ T6183] Bluetooth: MGMT ver 1.23 [ 99.718549][ T6189] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 100.397905][ T6226] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.522752][ T6232] raw_sendmsg: syz.0.68 forgot to set AF_INET. Fix it! [ 101.137295][ T6258] ipvlan2: entered promiscuous mode [ 101.352865][ T6270] __nla_validate_parse: 3 callbacks suppressed [ 101.352885][ T6270] netlink: 44 bytes leftover after parsing attributes in process `syz.1.79'. [ 101.817853][ T51] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 102.292870][ T6257] netlink: 'syz.4.75': attribute type 1 has an invalid length. [ 102.338219][ T6257] netlink: 'syz.4.75': attribute type 4 has an invalid length. [ 102.395043][ T6257] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.75'. [ 102.434716][ T6257] netlink: 'syz.4.75': attribute type 1 has an invalid length. [ 102.471163][ T6257] netlink: 'syz.4.75': attribute type 4 has an invalid length. [ 102.504641][ T6292] netlink: 'syz.4.75': attribute type 4 has an invalid length. [ 102.544525][ T6257] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.75'. [ 102.573402][ T6292] netlink: 152 bytes leftover after parsing attributes in process `syz.4.75'. [ 102.806995][ T6292] : renamed from bond0 (while UP) [ 103.529866][ T6347] netlink: 'syz.4.96': attribute type 7 has an invalid length. [ 103.566158][ T6347] netlink: 224 bytes leftover after parsing attributes in process `syz.4.96'. [ 103.597613][ T6347] netlink: 'syz.4.96': attribute type 7 has an invalid length. [ 103.684627][ T6347] netlink: 224 bytes leftover after parsing attributes in process `syz.4.96'. [ 103.693757][ T6347] netlink: 'syz.4.96': attribute type 7 has an invalid length. [ 103.739175][ T6347] netlink: 224 bytes leftover after parsing attributes in process `syz.4.96'. [ 103.774275][ T6347] netlink: 'syz.4.96': attribute type 7 has an invalid length. [ 103.812313][ T6347] netlink: 224 bytes leftover after parsing attributes in process `syz.4.96'. [ 103.847139][ T6361] netlink: 24 bytes leftover after parsing attributes in process `syz.1.98'. [ 103.885259][ T6347] netlink: 'syz.4.96': attribute type 7 has an invalid length. [ 103.919292][ T6347] netlink: 224 bytes leftover after parsing attributes in process `syz.4.96'. [ 104.807695][ T6384] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.816247][ T6384] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.206464][ T6384] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.229523][ T6384] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.276438][ T6414] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 105.509660][ T6384] veth3: left promiscuous mode [ 105.569487][ T6384] gretap1: left promiscuous mode [ 105.679660][ T3572] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.727829][ T3572] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.761487][ T3572] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.801770][ T3572] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.867571][ T6426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.358566][ T6453] __nla_validate_parse: 34 callbacks suppressed [ 106.358586][ T6453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.122'. [ 106.877980][ T6475] 8021q: adding VLAN 0 to HW filter on device bond2 [ 107.240030][ T6486] tipc: Started in network mode [ 107.249639][ T6486] tipc: Node identity 8e7d680d3dea, cluster identity 4711 [ 107.288144][ T6486] tipc: Enabled bearer , priority 0 [ 107.358717][ T6486] tipc: Resetting bearer [ 107.626729][ T6485] tipc: Disabling bearer [ 107.678556][ T6505] validate_nla: 31 callbacks suppressed [ 107.678576][ T6505] netlink: 'syz.4.130': attribute type 8 has an invalid length. [ 107.722698][ T6504] netlink: 'syz.1.131': attribute type 4 has an invalid length. [ 107.772951][ T6505] netlink: 4 bytes leftover after parsing attributes in process `syz.4.130'. [ 107.940955][ T6505] netlink: 'syz.4.130': attribute type 8 has an invalid length. [ 107.946516][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.984770][ T6505] netlink: 4 bytes leftover after parsing attributes in process `syz.4.130'. [ 107.992620][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.047281][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.075401][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.423814][ T6537] syzkaller1: entered promiscuous mode [ 108.468464][ T6537] syzkaller1: entered allmulticast mode [ 108.522642][ T6548] sctp: [Deprecated]: syz.2.141 (pid 6548) Use of int in maxseg socket option. [ 108.522642][ T6548] Use struct sctp_assoc_value instead [ 108.553469][ T6542] syz.4.138 (6542) used greatest stack depth: 19992 bytes left [ 108.840472][ T6555] netlink: 36 bytes leftover after parsing attributes in process `syz.2.143'. [ 109.037741][ T6565] netlink: 'syz.4.145': attribute type 10 has an invalid length. [ 109.052403][ T6567] netlink: 786 bytes leftover after parsing attributes in process `syz.1.147'. [ 109.150578][ T6565] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.171810][ T6565] : (slave team0): Enslaving as an active interface with an up link [ 109.173336][ T6573] netlink: 20 bytes leftover after parsing attributes in process `syz.1.147'. [ 109.220293][ T6574] Illegal XDP return value 4294967282 on prog (id 54) dev N/A, expect packet loss! [ 109.447072][ T6579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.149'. [ 109.461654][ T6579] openvswitch: netlink: nsh attr 0 has unexpected len 7 expected 0 [ 109.487273][ T6579] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.830361][ T6599] netlink: 76 bytes leftover after parsing attributes in process `syz.4.153'. [ 110.577142][ T6632] netlink: 12 bytes leftover after parsing attributes in process `syz.0.161'. [ 110.766588][ T6632] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.799394][ T6644] warning: `syz.4.166' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 110.841223][ T6649] netlink: 12 bytes leftover after parsing attributes in process `syz.2.165'. [ 111.544675][ T6679] __nla_validate_parse: 1 callbacks suppressed [ 111.544695][ T6679] netlink: 192 bytes leftover after parsing attributes in process `syz.3.170'. [ 111.591840][ T6647] syz.4.166 (6647) used greatest stack depth: 17864 bytes left [ 111.634627][ T6682] netlink: 132 bytes leftover after parsing attributes in process `syz.2.171'. [ 111.657124][ T6679] netlink: zone id is out of range [ 111.662293][ T6679] netlink: zone id is out of range [ 111.734530][ T6679] netlink: zone id is out of range [ 111.760636][ T6679] netlink: zone id is out of range [ 111.788607][ T6679] netlink: zone id is out of range [ 111.823089][ T6679] netlink: zone id is out of range [ 111.852131][ T6679] netlink: zone id is out of range [ 111.942296][ T6679] netlink: zone id is out of range [ 111.966778][ T6679] netlink: zone id is out of range [ 111.987304][ T6679] netlink: zone id is out of range [ 113.221125][ T6733] netlink: 16 bytes leftover after parsing attributes in process `syz.3.184'. [ 113.571287][ T6733] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.616693][ T6733] bond0: (slave bond1): Enslaving as an active interface with an up link [ 114.255571][ T6760] batman_adv: batadv0: Adding interface: dummy0 [ 114.261958][ T6760] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.336248][ T6760] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 115.319991][ T6792] netlink: 80 bytes leftover after parsing attributes in process `syz.2.196'. [ 115.439028][ T6795] netlink: 12 bytes leftover after parsing attributes in process `syz.4.197'. [ 115.837924][ T6801] syzkaller0: entered promiscuous mode [ 115.844762][ T6801] syzkaller0: entered allmulticast mode [ 116.697749][ T6834] netlink: 'syz.1.204': attribute type 9 has an invalid length. [ 116.716775][ T6834] netlink: 204732 bytes leftover after parsing attributes in process `syz.1.204'. [ 117.582098][ T6811] tipc: Started in network mode [ 117.587359][ T6811] tipc: Node identity 16d1550f9b31, cluster identity 4711 [ 117.595356][ T6811] tipc: Enabled bearer , priority 0 [ 117.609827][ T6824] tipc: Resetting bearer [ 117.666636][ T6806] tipc: Disabling bearer [ 117.963805][ T6857] netlink: 208 bytes leftover after parsing attributes in process `syz.0.209'. [ 118.255516][ T6863] veth0_macvtap: entered allmulticast mode [ 118.285890][ T6863] netlink: 60 bytes leftover after parsing attributes in process `syz.0.211'. [ 118.314828][ T6863] unsupported nlmsg_type 40 [ 118.327037][ T6863] netlink: 24 bytes leftover after parsing attributes in process `syz.0.211'. [ 118.371927][ T6867] syzkaller0: entered promiscuous mode [ 118.411009][ T6867] syzkaller0: entered allmulticast mode [ 118.446083][ T6872] tipc: Enabled bearer , priority 0 [ 118.466019][ T6872] syzkaller0: entered promiscuous mode [ 118.478619][ T6872] syzkaller0: entered allmulticast mode [ 118.521399][ T6872] tipc: Resetting bearer [ 118.541508][ T6870] tipc: Resetting bearer [ 118.603893][ T6870] tipc: Disabling bearer [ 118.957114][ T6894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.216'. [ 119.181483][ T6903] netlink: 'syz.2.218': attribute type 8 has an invalid length. [ 119.275962][ T6898] netlink: 8 bytes leftover after parsing attributes in process `syz.2.218'. [ 120.091827][ T6932] netlink: 5 bytes leftover after parsing attributes in process `syz.0.225'. [ 120.242051][ T6936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.226'. [ 121.354313][ T6976] mac80211_hwsim hwsim11 wlan0: entered promiscuous mode [ 121.374695][ T6976] macsec1: entered allmulticast mode [ 121.380620][ T6976] mac80211_hwsim hwsim11 wlan0: entered allmulticast mode [ 121.423958][ T6976] batman_adv: batadv0: Adding interface: macsec1 [ 121.491834][ T6976] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.544546][ T6976] batman_adv: batadv0: Interface activated: macsec1 [ 121.880253][ T6981] veth1_to_hsr: entered allmulticast mode [ 121.899021][ T6978] veth1_to_hsr: left allmulticast mode [ 121.931414][ T6989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.235'. [ 121.991479][ T6989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.069300][ T7000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.237'. [ 122.137850][ T6989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.170922][ T6999] veth1_to_bond: entered allmulticast mode [ 122.250116][ T7000] bond0: (slave bond_slave_1): Releasing backup interface [ 122.293594][ T7000] veth1_to_bond (unregistering): left allmulticast mode [ 122.497134][ T7011] netlink: 4 bytes leftover after parsing attributes in process `syz.4.239'. [ 122.622384][ T7016] netlink: 'syz.2.240': attribute type 64 has an invalid length. [ 123.312998][ T7042] tipc: Started in network mode [ 123.351915][ T7042] tipc: Node identity 66b2363e9ced, cluster identity 4711 [ 123.394349][ T7042] tipc: Enabled bearer , priority 0 [ 123.454176][ T7042] tipc: Resetting bearer [ 123.477271][ T7045] syzkaller0: entered promiscuous mode [ 123.485060][ T7045] syzkaller0: entered allmulticast mode [ 123.537416][ T7040] tipc: Resetting bearer [ 123.638047][ T7040] tipc: Disabling bearer [ 123.783405][ T30] audit: type=1107 audit(1754465922.663:2): pid=7060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 124.109499][ T5895] IPVS: starting estimator thread 0... [ 124.222034][ T7085] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 124.347220][ T7089] tipc: Enabled bearer , priority 0 [ 124.354603][ T7083] IPVS: using max 25 ests per chain, 60000 per kthread [ 124.438416][ T7089] syzkaller0: entered promiscuous mode [ 124.453247][ T7089] syzkaller0: entered allmulticast mode [ 124.470169][ T7089] tipc: Resetting bearer [ 124.484260][ T7088] tipc: Resetting bearer [ 125.345485][ T5895] tipc: Node number set to 2523257795 [ 125.532056][ T7088] tipc: Disabling bearer [ 125.630807][ T7102] netem: change failed [ 125.660062][ T7102] netlink: 24 bytes leftover after parsing attributes in process `syz.0.266'. [ 125.748491][ T7109] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 126.089079][ T7124] netlink: 'syz.0.274': attribute type 11 has an invalid length. [ 126.282728][ T7138] netlink: 36 bytes leftover after parsing attributes in process `syz.2.279'. [ 126.699534][ T7155] netlink: 44 bytes leftover after parsing attributes in process `syz.1.284'. [ 127.038373][ T7156] can: request_module (can-proto-0) failed. [ 127.112660][ T7159] netlink: 4 bytes leftover after parsing attributes in process `syz.1.285'. [ 127.328840][ T7164] netlink: 'syz.2.286': attribute type 3 has an invalid length. [ 127.474750][ T7168] net_ratelimit: 29 callbacks suppressed [ 127.474771][ T7168] IPv4: Oversized IP packet from 127.202.26.0 [ 127.750801][ T7175] netlink: 'syz.3.289': attribute type 58 has an invalid length. [ 127.779600][ T7178] netlink: 'syz.1.290': attribute type 1 has an invalid length. [ 127.796799][ T7175] netlink: 20 bytes leftover after parsing attributes in process `syz.3.289'. [ 128.007157][ T7195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.296'. [ 128.132758][ T7207] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.298'. [ 128.285068][ T7214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.299'. [ 128.373522][ T7217] netlink: 'syz.1.301': attribute type 35 has an invalid length. [ 128.890876][ T7233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.305'. [ 129.374656][ T7253] tipc: Started in network mode [ 129.398761][ T7253] tipc: Node identity 080211, cluster identity 4711 [ 129.418082][ T7253] tipc: Enabled bearer , priority 0 [ 129.472967][ T7256] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 129.496950][ T7256] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 129.522404][ T7257] netlink: 128 bytes leftover after parsing attributes in process `syz.2.310'. [ 129.613737][ T7253] tipc: Resetting bearer [ 129.783226][ T7270] syzkaller1: entered promiscuous mode [ 129.792196][ T7270] syzkaller1: entered allmulticast mode [ 130.053545][ T7283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.217881][ T7291] openvswitch: netlink: Flow key attr not present in new flow. [ 130.242526][ T7295] netlink: 248 bytes leftover after parsing attributes in process `syz.3.321'. [ 130.262978][ T7295] netlink: 48 bytes leftover after parsing attributes in process `syz.3.321'. [ 130.287961][ T7295] lo speed is unknown, defaulting to 1000 [ 130.307593][ T7295] lo speed is unknown, defaulting to 1000 [ 130.336892][ T7295] lo speed is unknown, defaulting to 1000 [ 130.458965][ T24] tipc: Node number set to 134353152 [ 130.581225][ T7300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.620571][ T7300] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.665595][ T7300] batman_adv: batadv0: Interface activated: dummy0 [ 130.723124][ T7300] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 130.765747][ T7291] netlink: 48 bytes leftover after parsing attributes in process `syz.1.320'. [ 130.797592][ T7305] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 131.231726][ T7295] infiniband syz0: set active [ 131.238377][ T5845] lo speed is unknown, defaulting to 1000 [ 131.244278][ T5845] syz0: Port: 1 Link ACTIVE [ 131.277537][ T7295] infiniband syz0: added lo [ 131.316992][ T7295] syz0: rxe_create_cq: returned err = -12 [ 131.323264][ T7295] infiniband syz0: Couldn't create ib_mad CQ [ 131.364753][ T7295] infiniband syz0: Couldn't open port 1 [ 131.386597][ T7326] batadv0: entered promiscuous mode [ 131.436310][ T7326] batadv0: left promiscuous mode [ 131.464267][ T7295] RDS/IB: syz0: added [ 131.478696][ T7295] smc: adding ib device syz0 with port count 1 [ 131.505107][ T7295] smc: ib device syz0 port 1 has pnetid [ 131.531042][ T5845] lo speed is unknown, defaulting to 1000 [ 131.539299][ T7295] lo speed is unknown, defaulting to 1000 [ 131.821873][ T7337] syz_tun: entered allmulticast mode [ 131.953233][ T7335] syz_tun: left allmulticast mode [ 132.230267][ T7295] lo speed is unknown, defaulting to 1000 [ 132.490660][ T7356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.582219][ T7360] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 132.895316][ T7368] __nla_validate_parse: 9 callbacks suppressed [ 132.895337][ T7368] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.335'. [ 132.943226][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.950101][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.114614][ T7295] lo speed is unknown, defaulting to 1000 [ 133.475143][ T7378] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.648206][ T7385] netlink: 76 bytes leftover after parsing attributes in process `syz.0.341'. [ 133.754555][ T7385] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.841507][ T7295] lo speed is unknown, defaulting to 1000 [ 133.996456][ T7385] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.186800][ T7385] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.264774][ T7410] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 134.422830][ T7385] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.463116][ T7406] netlink: 48 bytes leftover after parsing attributes in process `syz.2.346'. [ 134.539989][ T7295] lo speed is unknown, defaulting to 1000 [ 134.650186][ T6119] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.681128][ T7422] tc_dump_action: action bad kind [ 134.725661][ T7422] netlink: 'syz.2.351': attribute type 1 has an invalid length. [ 134.735527][ T7424] netlink: 28 bytes leftover after parsing attributes in process `syz.1.352'. [ 134.754554][ T7422] netlink: 224 bytes leftover after parsing attributes in process `syz.2.351'. [ 134.764500][ T7424] netlink: 28 bytes leftover after parsing attributes in process `syz.1.352'. [ 134.801446][ T6119] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.950806][ T6119] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.978993][ T6119] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.159853][ T7435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.354'. [ 135.620467][ T7467] netlink: 52 bytes leftover after parsing attributes in process `syz.2.361'. [ 135.658348][ T7465] netpci0: tun_chr_ioctl cmd 1074025681 [ 135.667568][ T7470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.361'. [ 136.093440][ T7483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.367'. [ 136.143918][ T7490] tipc: Enabled bearer , priority 0 [ 136.158003][ T7490] syzkaller0: entered promiscuous mode [ 136.172827][ T7490] syzkaller0: entered allmulticast mode [ 136.270292][ T7489] tipc: Resetting bearer [ 136.309014][ T7489] tipc: Disabling bearer [ 136.319861][ T7493] netlink: 'syz.4.370': attribute type 1 has an invalid length. [ 136.506902][ T7507] netlink: 'syz.3.373': attribute type 21 has an invalid length. [ 136.525187][ T7507] netlink: 'syz.3.373': attribute type 6 has an invalid length. [ 136.564328][ T7502] lo speed is unknown, defaulting to 1000 [ 136.651491][ T7516] openvswitch: netlink: nsh attribute has 65520 unknown bytes. [ 136.695725][ T7516] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 136.741782][ T7516] 8021q: VLANs not supported on nlmon0 [ 136.808437][ T7523] netlink: 'syz.4.379': attribute type 12 has an invalid length. [ 136.922377][ T7528] ip6tnl1: entered promiscuous mode [ 136.930316][ T7528] ip6tnl1: entered allmulticast mode [ 137.222778][ T7540] sock: sock_set_timeout: `syz.4.381' (pid 7540) tries to set negative timeout [ 137.413339][ T7540] lo speed is unknown, defaulting to 1000 [ 138.039197][ T7558] __nla_validate_parse: 5 callbacks suppressed [ 138.039217][ T7558] netlink: 28 bytes leftover after parsing attributes in process `syz.4.386'. [ 138.055918][ T7558] netlink: 28 bytes leftover after parsing attributes in process `syz.4.386'. [ 138.162728][ T7558] : entered promiscuous mode [ 138.171682][ T7558] bond_slave_0: entered promiscuous mode [ 138.178576][ T7558] bond_slave_1: entered promiscuous mode [ 138.189473][ T7558] team0: entered promiscuous mode [ 138.198819][ T7558] team_slave_0: entered promiscuous mode [ 138.212337][ T7558] team_slave_1: entered promiscuous mode [ 138.238428][ T7558] : left promiscuous mode [ 138.244064][ T7558] bond_slave_0: left promiscuous mode [ 138.252513][ T7558] bond_slave_1: left promiscuous mode [ 138.259955][ T7558] team0: left promiscuous mode [ 138.265379][ T7558] team_slave_0: left promiscuous mode [ 138.271162][ T7558] team_slave_1: left promiscuous mode [ 138.451726][ T7564] netlink: 24 bytes leftover after parsing attributes in process `syz.2.388'. [ 138.463319][ T7564] netlink: 48 bytes leftover after parsing attributes in process `syz.2.388'. [ 138.502171][ T7564] netlink: 163952 bytes leftover after parsing attributes in process `syz.2.388'. [ 138.808555][ T7580] tipc: Enabled bearer , priority 0 [ 138.845694][ T7580] syzkaller0: entered promiscuous mode [ 138.872760][ T7580] syzkaller0: entered allmulticast mode [ 139.128139][ T7569] tipc: Resetting bearer [ 139.212325][ T7625] netlink: 'syz.0.401': attribute type 7 has an invalid length. [ 139.221931][ T7569] tipc: Disabling bearer [ 139.231435][ T7628] netlink: 212 bytes leftover after parsing attributes in process `syz.4.399'. [ 139.246342][ T7630] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 139.250367][ T7626] IPVS: stopping backup sync thread 7630 ... [ 139.260716][ T7625] netlink: 'syz.0.401': attribute type 10 has an invalid length. [ 139.273505][ T7628] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 139.318171][ T7625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.338635][ T7625] team0: Port device bond0 added [ 139.580975][ T7640] netlink: 'syz.0.403': attribute type 1 has an invalid length. [ 139.638758][ T7640] bond2: entered promiscuous mode [ 139.646084][ T7640] 8021q: adding VLAN 0 to HW filter on device bond2 [ 139.658703][ T7648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.405'. [ 139.716337][ T7650] tipc: Enabled bearer , priority 0 [ 139.727311][ T7650] syzkaller0: entered promiscuous mode [ 139.732821][ T7650] syzkaller0: entered allmulticast mode [ 139.751693][ T7650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.406'. [ 139.764474][ T7650] syzkaller0: mtu less than device minimum [ 139.778763][ T7652] netlink: 20 bytes leftover after parsing attributes in process `syz.0.407'. [ 139.800679][ T7649] tipc: Resetting bearer [ 139.856822][ T7649] tipc: Disabling bearer [ 140.460226][ T7682] netlink: 12 bytes leftover after parsing attributes in process `syz.1.413'. [ 140.566217][ T7682] openvswitch: netlink: Flow key attr not present in new flow. [ 140.882694][ T7703] tap0: tun_chr_ioctl cmd 1074812118 [ 141.575800][ T7737] block nbd0: server does not support multiple connections per device. [ 141.590636][ T7737] block nbd0: shutting down sockets [ 141.785813][ T7750] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 141.842260][ T7744] netlink: 'syz.0.432': attribute type 10 has an invalid length. [ 141.857338][ T7750] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 142.016370][ T7753] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 142.028129][ T7753] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 142.035204][ T7744] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.410675][ T7775] netlink: 'syz.4.440': attribute type 4 has an invalid length. [ 143.067120][ T7794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.353847][ T7812] syzkaller0: entered promiscuous mode [ 143.360418][ T7812] syzkaller0: entered allmulticast mode [ 143.411405][ T7812] netlink: 'syz.2.451': attribute type 12 has an invalid length. [ 143.419474][ T7812] netlink: 'syz.2.451': attribute type 29 has an invalid length. [ 143.429880][ T7812] __nla_validate_parse: 4 callbacks suppressed [ 143.429896][ T7812] netlink: 148 bytes leftover after parsing attributes in process `syz.2.451'. [ 145.138336][ T7852] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 145.183485][ T7853] lo speed is unknown, defaulting to 1000 [ 145.366672][ T7855] netlink: 'syz.3.461': attribute type 5 has an invalid length. [ 145.862150][ T7872] netlink: 28 bytes leftover after parsing attributes in process `syz.3.464'. [ 145.887094][ T7872] netlink: 8 bytes leftover after parsing attributes in process `syz.3.464'. [ 147.542309][ T7914] tipc: Cannot configure node identity twice [ 148.117930][ T7945] batman_adv: batadv0: Adding interface: dummy0 [ 148.124233][ T7945] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.198646][ T7945] batman_adv: batadv0: Interface activated: dummy0 [ 148.259304][ T7945] batadv0: mtu less than device minimum [ 148.273124][ T7945] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 148.285446][ T7945] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 148.297421][ T7945] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 148.309437][ T7945] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 148.321406][ T7945] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 148.333393][ T7945] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 148.345396][ T7945] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 148.357317][ T7945] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 148.369308][ T7945] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 148.522136][ T7956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.502'. [ 149.016892][ T51] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 149.173276][ T7983] netlink: 'syz.4.514': attribute type 1 has an invalid length. [ 149.267136][ T7986] netlink: 4 bytes leftover after parsing attributes in process `syz.1.515'. [ 149.278662][ T7987] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 149.291243][ T7987] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 149.362754][ T7983] gretap1: entered promiscuous mode [ 149.373038][ T7983] bond0: (slave gretap1): making interface the new active one [ 149.384297][ T7983] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 149.457496][ T7995] netlink: 20 bytes leftover after parsing attributes in process `syz.0.517'. [ 149.469836][ T7995] team0: entered promiscuous mode [ 149.479281][ T7995] team_slave_0: entered promiscuous mode [ 149.489507][ T7995] team_slave_1: entered promiscuous mode [ 149.513933][ T7995] bond0: entered promiscuous mode [ 149.523080][ T7995] bond_slave_0: entered promiscuous mode [ 149.544841][ T7995] team0: entered allmulticast mode [ 149.550013][ T7995] team_slave_0: entered allmulticast mode [ 149.579139][ T7999] netlink: 272 bytes leftover after parsing attributes in process `syz.2.519'. [ 149.584842][ T7995] team_slave_1: entered allmulticast mode [ 149.596130][ T7995] bond0: entered allmulticast mode [ 149.601292][ T7995] bond_slave_0: entered allmulticast mode [ 149.614318][ T7995] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.913918][ T8017] netlink: 'syz.3.527': attribute type 12 has an invalid length. [ 149.934314][ T8017] netlink: 'syz.3.527': attribute type 29 has an invalid length. [ 149.948885][ T8017] netlink: 148 bytes leftover after parsing attributes in process `syz.3.527'. [ 149.958488][ T8020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.528'. [ 149.993921][ T8022] netlink: 'syz.0.529': attribute type 10 has an invalid length. [ 150.017032][ T8022] dummy0: entered promiscuous mode [ 150.023056][ T8022] dummy0: entered allmulticast mode [ 150.036447][ T8022] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 150.091356][ T8025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.531'. [ 150.101291][ T8025] bridge: RTM_NEWNEIGH with invalid ether address [ 150.230900][ T8030] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 150.262656][ T8030] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 150.567779][ T8049] netlink: 'syz.3.541': attribute type 29 has an invalid length. [ 150.647410][ T8049] netlink: 20 bytes leftover after parsing attributes in process `syz.3.541'. [ 150.678623][ T8049] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 150.809520][ T993] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 150.872252][ T993] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 150.923826][ T993] bond0: (slave bond1): link status definitely down, disabling slave [ 150.989206][ T993] bond0: now running without any active interface! [ 151.479879][ T8099] netlink: 'syz.3.551': attribute type 1 has an invalid length. [ 151.719155][ T8110] !: renamed from dummy0 (while UP) [ 151.757500][ T8112] netlink: 40 bytes leftover after parsing attributes in process `syz.0.549'. [ 152.013601][ T8113] netlink: 16 bytes leftover after parsing attributes in process `syz.2.555'. [ 153.323191][ T8184] lo speed is unknown, defaulting to 1000 [ 153.806857][ T8195] syzkaller0: entered promiscuous mode [ 153.901514][ T8205] netlink: 'syz.4.570': attribute type 1 has an invalid length. [ 153.920713][ T5845] lo speed is unknown, defaulting to 1000 [ 153.952658][ T8200] __nla_validate_parse: 1 callbacks suppressed [ 153.952680][ T8200] netlink: 24 bytes leftover after parsing attributes in process `syz.4.570'. [ 155.409155][ T8205] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 155.423002][ T8218] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 155.443573][ T8218] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 155.488745][ T8233] tipc: Enabled bearer , priority 0 [ 155.517357][ T8234] syzkaller0: entered promiscuous mode [ 155.522898][ T8234] syzkaller0: entered allmulticast mode [ 155.562745][ T8242] tipc: Resetting bearer [ 155.701396][ T5895] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0 [ 155.717072][ T5895] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 155.730634][ T8242] tipc: Resetting bearer [ 155.811135][ T8242] tipc: Disabling bearer [ 156.094205][ T8273] net_ratelimit: 10 callbacks suppressed [ 156.094227][ T8273] openvswitch: netlink: Tunnel attr 226 out of range max 16 [ 156.237052][ T8273] netlink: 60 bytes leftover after parsing attributes in process `syz.4.585'. [ 156.279613][ T8277] vxcan1: entered allmulticast mode [ 156.311708][ T8277] vxcan1: left allmulticast mode [ 156.441552][ T8289] tipc: Enabling of bearer rejected, failed to enable media [ 156.972744][ T8310] netlink: 12 bytes leftover after parsing attributes in process `syz.2.595'. [ 157.023416][ T8319] netlink: 'syz.4.594': attribute type 2 has an invalid length. [ 157.159925][ T8324] netlink: 200 bytes leftover after parsing attributes in process `syz.3.599'. [ 157.225284][ T8325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.599'. [ 157.681374][ T8350] vxcan0: tx drop: invalid sa for name 0x0000000000000003 [ 157.702625][ T8352] netlink: 28 bytes leftover after parsing attributes in process `syz.3.611'. [ 157.729278][ T8357] netlink: 40 bytes leftover after parsing attributes in process `syz.3.611'. [ 158.043237][ T8370] tipc: Enabled bearer , priority 10 [ 158.146047][ T8371] tipc: Resetting bearer [ 158.347847][ T8387] netlink: 28 bytes leftover after parsing attributes in process `syz.3.617'. [ 158.361856][ T8371] tipc: Resetting bearer [ 158.518032][ T8400] netlink: 'syz.2.619': attribute type 1 has an invalid length. [ 159.065341][ T24] tipc: Node number set to 4200543806 [ 159.811186][ T8371] tipc: Disabling bearer [ 159.847958][ T8416] bond0: left promiscuous mode [ 159.852894][ T8416] bond_slave_0: left promiscuous mode [ 159.859472][ T8416] dummy0: left promiscuous mode [ 159.866458][ T8416] bond0: left allmulticast mode [ 159.871346][ T8416] bond_slave_0: left allmulticast mode [ 159.879675][ T8416] dummy0: left allmulticast mode [ 159.910811][ T8416] team0: Port device bond0 removed [ 159.933842][ T8416] bond0: (slave dummy0): Releasing backup interface [ 159.968501][ T8416] bridge_slave_0: left allmulticast mode [ 159.974200][ T8416] bridge_slave_0: left promiscuous mode [ 159.990665][ T8416] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.017883][ T8416] bridge_slave_1: left allmulticast mode [ 160.024066][ T8416] bridge_slave_1: left promiscuous mode [ 160.030321][ T8416] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.042393][ T8416] bond0: (slave bond_slave_0): Releasing backup interface [ 160.054532][ T8416] team_slave_0: left promiscuous mode [ 160.060103][ T8416] team_slave_0: left allmulticast mode [ 160.080838][ T8416] team0: Port device team_slave_0 removed [ 160.090328][ T8416] team_slave_1: left promiscuous mode [ 160.096546][ T8416] team_slave_1: left allmulticast mode [ 160.106619][ T8416] team0: Port device team_slave_1 removed [ 160.113227][ T8416] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.122053][ T8416] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.132778][ T8434] netlink: 4 bytes leftover after parsing attributes in process `syz.4.624'. [ 160.144241][ T8416] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.152091][ T8416] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.170898][ T8416] batman_adv: batadv0: Interface deactivated: macsec1 [ 160.178056][ T8416] batman_adv: batadv0: Removing interface: macsec1 [ 160.260355][ T8422] team0: Mode changed to "activebackup" [ 160.428472][ T30] audit: type=1107 audit(1754465959.313:3): pid=8444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='4# 줊lb${w忁xb@1 r`mʿ' [ 160.583841][ T8451] netlink: 'syz.0.629': attribute type 16 has an invalid length. [ 160.617487][ T8451] netlink: 'syz.0.629': attribute type 17 has an invalid length. [ 160.927794][ T8474] netlink: 88 bytes leftover after parsing attributes in process `syz.4.634'. [ 161.048153][ T8481] netlink: 24 bytes leftover after parsing attributes in process `syz.3.636'. [ 161.134097][ T8451] mac80211_hwsim hwsim11 wlan0: left allmulticast mode [ 161.183959][ T8488] netlink: 12 bytes leftover after parsing attributes in process `syz.3.637'. [ 161.211237][ T8488] netlink: 'syz.3.637': attribute type 12 has an invalid length. [ 161.230382][ T7601] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.239919][ T7601] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.259947][ T7601] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.305124][ T7601] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.352469][ T7601] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.396828][ T7601] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.422567][ T7601] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.471714][ T7601] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.596222][ T8508] netlink: 132 bytes leftover after parsing attributes in process `syz.3.642'. [ 161.717567][ T8512] netlink: 'syz.0.641': attribute type 10 has an invalid length. [ 161.747772][ T8512] netlink: 40 bytes leftover after parsing attributes in process `syz.0.641'. [ 161.758168][ T8512] veth0_vlan: left promiscuous mode [ 161.764197][ T8512] veth0_vlan: entered promiscuous mode [ 161.770829][ T8512] veth0_vlan: entered allmulticast mode [ 161.784198][ T8512] bridge0: port 1(veth0_vlan) entered blocking state [ 161.791267][ T8512] bridge0: port 1(veth0_vlan) entered disabled state [ 161.802592][ T8512] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 161.820689][ T8517] netlink: 'syz.0.641': attribute type 29 has an invalid length. [ 161.870642][ T8512] netlink: 'syz.0.641': attribute type 29 has an invalid length. [ 161.879351][ T8512] netlink: 'syz.0.641': attribute type 29 has an invalid length. [ 161.928028][ T8512] netlink: 'syz.0.641': attribute type 29 has an invalid length. [ 162.230443][ T8535] netlink: 4 bytes leftover after parsing attributes in process `syz.3.649'. [ 162.281172][ T8535] bridge_slave_0 (unregistering): left allmulticast mode [ 162.299985][ T8535] bridge_slave_0 (unregistering): left promiscuous mode [ 162.310453][ T8535] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.490485][ T8541] syzkaller0: entered promiscuous mode [ 162.500524][ T8541] syzkaller0: entered allmulticast mode [ 162.661714][ T8553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.652'. [ 162.684113][ T8542] lo speed is unknown, defaulting to 1000 [ 163.245077][ T8568] validate_nla: 24 callbacks suppressed [ 163.245101][ T8568] netlink: 'syz.3.655': attribute type 1 has an invalid length. [ 164.393995][ T8563] pim6reg1: entered promiscuous mode [ 164.399634][ T8563] pim6reg1: entered allmulticast mode [ 164.407705][ T8574] wg1: entered promiscuous mode [ 164.412606][ T8574] wg1: entered allmulticast mode [ 164.483567][ T8576] netlink: 20 bytes leftover after parsing attributes in process `syz.0.658'. [ 164.492962][ T8576] netlink: 'syz.0.658': attribute type 6 has an invalid length. [ 164.503157][ T8576] netlink: 16 bytes leftover after parsing attributes in process `syz.0.658'. [ 164.535644][ T8579] netlink: 'syz.0.658': attribute type 6 has an invalid length. [ 164.819485][ T8594] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21 [ 165.130410][ T8595] lo speed is unknown, defaulting to 1000 [ 166.064265][ T8635] netlink: 'syz.3.668': attribute type 1 has an invalid length. [ 166.432859][ T8632] lo speed is unknown, defaulting to 1000 [ 166.610829][ T8652] __nla_validate_parse: 2 callbacks suppressed [ 166.610849][ T8652] netlink: 12 bytes leftover after parsing attributes in process `syz.2.673'. [ 167.544285][ T8682] openvswitch: netlink: Tunnel attr 0 has unexpected len 4 expected 8 [ 168.212803][ T8698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.685'. [ 168.222426][ T8698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.685'. [ 168.257348][ T8696] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 168.348122][ T8705] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 168.543910][ T8714] netlink: 'syz.1.691': attribute type 1 has an invalid length. [ 168.881926][ T8733] netlink: 68 bytes leftover after parsing attributes in process `syz.2.695'. [ 168.892203][ T8731] netlink: 68 bytes leftover after parsing attributes in process `syz.2.695'. [ 168.910684][ T8731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.695'. [ 169.067781][ T8745] netlink: 'syz.4.699': attribute type 12 has an invalid length. [ 169.114106][ T8745] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.699'. [ 169.273705][ T8758] netlink: 32 bytes leftover after parsing attributes in process `syz.1.703'. [ 169.722136][ T8788] vlan0: entered promiscuous mode [ 169.840501][ T8799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.713'. [ 169.877680][ T8792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.713'. [ 170.106367][ T8807] !: renamed from dummy0 (while UP) [ 170.344283][ T8819] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 170.627549][ T8815] lo speed is unknown, defaulting to 1000 [ 171.950520][ T8877] __nla_validate_parse: 6 callbacks suppressed [ 171.950538][ T8877] netlink: 32 bytes leftover after parsing attributes in process `syz.1.736'. [ 171.971326][ T8877] netlink: 204 bytes leftover after parsing attributes in process `syz.1.736'. [ 171.982286][ T8877] netlink: 204 bytes leftover after parsing attributes in process `syz.1.736'. [ 171.992898][ T8875] syzkaller0: entered promiscuous mode [ 172.002182][ T8875] syzkaller0: entered allmulticast mode [ 172.179412][ T8875] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 194.378112][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 211.816746][ T5157] Bluetooth: hci1: command 0x0406 tx timeout [ 211.817554][ T5838] Bluetooth: hci3: command 0x0406 tx timeout [ 211.822854][ T5157] Bluetooth: hci2: command 0x0406 tx timeout [ 214.821194][ T8883] netlink: 12 bytes leftover after parsing attributes in process `syz.1.738'. [ 215.394228][ T8899] netlink: 20 bytes leftover after parsing attributes in process `syz.0.742'. [ 215.412427][ T8895] Set syz0 is full, maxelem 0 reached [ 215.452889][ T8911] tipc: Enabled bearer , priority 0 [ 215.461946][ T8911] syzkaller0: entered promiscuous mode [ 215.468076][ T8911] syzkaller0: entered allmulticast mode [ 215.511543][ T8911] tipc: Resetting bearer [ 215.525089][ T8910] tipc: Resetting bearer [ 215.553041][ T8910] tipc: Disabling bearer [ 215.681008][ T8917] 8021q: adding VLAN 0 to HW filter on device bond2 [ 215.692181][ T8917] bond0: (slave bond2): Enslaving as an active interface with a down link [ 216.090043][ T8933] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71) [ 216.141187][ T8933] Bluetooth: MGMT ver 1.23 [ 216.160403][ T8933] netlink: 16 bytes leftover after parsing attributes in process `syz.2.753'. [ 216.170025][ T8933] netlink: 16 bytes leftover after parsing attributes in process `syz.2.753'. [ 216.234876][ T8939] netlink: 12 bytes leftover after parsing attributes in process `syz.3.755'. [ 216.246783][ T8939] netlink: 'syz.3.755': attribute type 1 has an invalid length. [ 216.261589][ T8939] netlink: 92 bytes leftover after parsing attributes in process `syz.3.755'. [ 216.317035][ T8942] netlink: 24 bytes leftover after parsing attributes in process `syz.2.756'. [ 216.336988][ T8944] netlink: 516 bytes leftover after parsing attributes in process `syz.1.757'. [ 216.369830][ T7599] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 216.381674][ T7599] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 216.398864][ T8945] netlink: 4 bytes leftover after parsing attributes in process `syz.2.756'. [ 216.410757][ T8945] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 216.429597][ T7599] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 216.440874][ T7599] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 216.669506][ T8953] sctp: [Deprecated]: syz.0.759 (pid 8953) Use of int in max_burst socket option deprecated. [ 216.669506][ T8953] Use struct sctp_assoc_value instead [ 216.738834][ T8962] netlink: 12 bytes leftover after parsing attributes in process `syz.2.761'. [ 216.764620][ T8962] netlink: 'syz.2.761': attribute type 1 has an invalid length. [ 216.783728][ T8965] netlink: 'syz.0.763': attribute type 2 has an invalid length. [ 216.855022][ T8965] k*]: entered promiscuous mode [ 216.879370][ T8966] netlink: 'syz.0.763': attribute type 29 has an invalid length. [ 216.891093][ T8965] netlink: 'syz.0.763': attribute type 29 has an invalid length. [ 217.073473][ T8976] netlink: 'syz.3.760': attribute type 1 has an invalid length. [ 217.145189][ T8978] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 217.806466][ T51] Bluetooth: hci4: link tx timeout [ 217.812320][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 218.011463][ T9017] bond1: entered promiscuous mode [ 218.016821][ T9017] bond1: entered allmulticast mode [ 218.022598][ T9017] 8021q: adding VLAN 0 to HW filter on device bond1 [ 218.222761][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 218.229276][ T5843] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 218.638610][ T9055] tipc: Enabling of bearer rejected, failed to enable media [ 218.733993][ T9064] netlink: 'syz.2.793': attribute type 1 has an invalid length. [ 218.772574][ T9064] netlink: 'syz.2.793': attribute type 21 has an invalid length. [ 218.947053][ T9075] veth3: entered promiscuous mode [ 219.192120][ T9093] sit0: entered promiscuous mode [ 219.223738][ T9093] netlink: 'syz.3.799': attribute type 1 has an invalid length. [ 219.277927][ T9098] bridge: RTM_NEWNEIGH with invalid ether address [ 219.786525][ T9126] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.811499][ T9126] IPVS: set_ctl: invalid protocol: 12 172.20.20.170:0 [ 219.827603][ T9126] openvswitch: netlink: Tunnel attr 3 has unexpected len 5 expected 1 [ 219.894898][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 220.867633][ T9184] netlink: 'syz.0.816': attribute type 2 has an invalid length. [ 220.940171][ T9182] tipc: Enabled bearer , priority 0 [ 220.956604][ T9182] syzkaller0: entered promiscuous mode [ 220.963710][ T9182] syzkaller0: entered allmulticast mode [ 221.049523][ T9188] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:20004 [ 221.158550][ T9194] __nla_validate_parse: 11 callbacks suppressed [ 221.158571][ T9194] netlink: 40 bytes leftover after parsing attributes in process `syz.3.819'. [ 221.372991][ T9181] tipc: Resetting bearer [ 221.411858][ T9181] tipc: Disabling bearer [ 221.502054][ T9198] netlink: 508 bytes leftover after parsing attributes in process `syz.4.822'. [ 221.753677][ T9203] netlink: 72 bytes leftover after parsing attributes in process `syz.1.824'. [ 221.942909][ T9215] netlink: 12 bytes leftover after parsing attributes in process `syz.1.830'. [ 221.983852][ T9217] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20004 [ 222.014138][ T9219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.831'. [ 222.031299][ T9217] tipc: Enabled bearer , priority 0 [ 222.041268][ T9217] syzkaller0: entered promiscuous mode [ 222.054545][ T9217] syzkaller0: entered allmulticast mode [ 222.157913][ T9229] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.237718][ T9236] netlink: 16 bytes leftover after parsing attributes in process `syz.3.835'. [ 222.279509][ T9216] tipc: Resetting bearer [ 222.301775][ T9216] tipc: Disabling bearer [ 222.344603][ T9236] netlink: 24 bytes leftover after parsing attributes in process `syz.3.835'. [ 222.514717][ T9241] syzkaller0: entered allmulticast mode [ 222.749502][ T9253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.840'. [ 223.058440][ T9266] netlink: 4 bytes leftover after parsing attributes in process `syz.1.845'. [ 223.126385][ T9266] netlink: 24 bytes leftover after parsing attributes in process `syz.1.845'. [ 223.450784][ T9284] validate_nla: 1 callbacks suppressed [ 223.450806][ T9284] netlink: 'syz.1.849': attribute type 4 has an invalid length. [ 223.574279][ T9291] lo speed is unknown, defaulting to 1000 [ 224.208176][ T9313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.283729][ T9306] lo speed is unknown, defaulting to 1000 [ 225.336197][ T9348] lo speed is unknown, defaulting to 1000 [ 225.467095][ T9358] tipc: Enabling of bearer rejected, failed to enable media [ 225.613310][ T9361] tipc: New replicast peer: 255.127.0.0 [ 225.621147][ T9361] tipc: Enabled bearer , priority 10 [ 226.008815][ T9379] sctp: [Deprecated]: syz.2.874 (pid 9379) Use of int in max_burst socket option. [ 226.008815][ T9379] Use struct sctp_assoc_value instead [ 226.502462][ T9394] netlink: 'syz.2.879': attribute type 9 has an invalid length. [ 226.567125][ T9394] netlink: 'syz.2.879': attribute type 6 has an invalid length. [ 227.243954][ T9411] __nla_validate_parse: 7 callbacks suppressed [ 227.243973][ T9411] netlink: 16 bytes leftover after parsing attributes in process `syz.3.883'. [ 227.970394][ T9441] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 227.988398][ T9439] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 228.298715][ T9459] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.895'. [ 228.310425][ T9459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.895'. [ 228.439718][ T9462] netlink: 'syz.3.898': attribute type 1 has an invalid length. [ 228.490531][ T9462] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 228.541223][ T9468] syzkaller0: entered promiscuous mode [ 228.577113][ T9468] syzkaller0: entered allmulticast mode [ 228.654131][ T9468] netlink: 428 bytes leftover after parsing attributes in process `syz.1.897'. [ 228.672244][ T9477] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.900'. [ 228.682015][ T9468] netlink: 32 bytes leftover after parsing attributes in process `syz.1.897'. [ 228.694209][ T9477] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.900'. [ 228.709940][ T9468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.897'. [ 228.760912][ T9477] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.900'. [ 228.917078][ T9481] netlink: 'syz.1.901': attribute type 1 has an invalid length. [ 228.948566][ T9481] netlink: 'syz.1.901': attribute type 12 has an invalid length. [ 229.460583][ T9498] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 229.484608][ T9498] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 229.617558][ T9502] sctp: [Deprecated]: syz.0.908 (pid 9502) Use of int in max_burst socket option. [ 229.617558][ T9502] Use struct sctp_assoc_value instead [ 230.199322][ T9524] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 230.256512][ T9529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.913'. [ 230.460875][ T9538] lo speed is unknown, defaulting to 1000 [ 231.430632][ T9567] syzkaller1: entered promiscuous mode [ 231.446871][ T9567] syzkaller1: entered allmulticast mode [ 231.930668][ T9585] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 231.976972][ T9585] : (slave team0): Releasing backup interface [ 232.033651][ T9585] bridge_slave_0: left allmulticast mode [ 232.050693][ T9598] netlink: 'syz.4.922': attribute type 10 has an invalid length. [ 232.058915][ T9585] bridge_slave_0: left promiscuous mode [ 232.065772][ T9585] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.082166][ T9585] bridge_slave_1: left allmulticast mode [ 232.099887][ T9585] bridge_slave_1: left promiscuous mode [ 232.108662][ T9585] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.128437][ T9585] : (slave bond_slave_0): Releasing backup interface [ 232.170466][ T9585] : (slave bond_slave_1): Releasing backup interface [ 232.186952][ T9585] team0: Port device team_slave_0 removed [ 232.199390][ T9585] team0: Port device team_slave_1 removed [ 232.206319][ T9585] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.215215][ T9585] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.246721][ T9585] bond0: (slave gretap1): Releasing active interface [ 232.279483][ T9589] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 232.330563][ T9598] mac80211_hwsim hwsim10 wlan1: left allmulticast mode [ 232.351895][ T9598] wlan1: mtu less than device minimum [ 232.362331][ T9598] : (slave wlan1): Error -22 calling dev_set_mtu [ 232.473753][ T9609] __nla_validate_parse: 2 callbacks suppressed [ 232.473773][ T9609] netlink: 48 bytes leftover after parsing attributes in process `syz.2.926'. [ 233.132991][ T9640] pimreg: entered allmulticast mode [ 233.186600][ T9644] pimreg: left allmulticast mode [ 233.258887][ T9640] nbd: must specify at least one socket [ 233.278975][ T9650] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 233.289585][ T9650] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 233.821522][ T9681] netlink: 788 bytes leftover after parsing attributes in process `syz.4.944'. [ 234.361536][ T9707] netlink: 'syz.0.949': attribute type 1 has an invalid length. [ 234.402786][ T9707] netlink: 120 bytes leftover after parsing attributes in process `syz.0.949'. [ 234.616129][ T9719] netlink: 16 bytes leftover after parsing attributes in process `syz.3.952'. [ 234.701001][ T9718] netlink: 'syz.1.951': attribute type 10 has an invalid length. [ 234.719140][ T9718] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 235.002857][ T9729] tipc: Enabled bearer , priority 0 [ 235.021804][ T9729] syzkaller0: entered promiscuous mode [ 235.032558][ T9729] syzkaller0: entered allmulticast mode [ 235.095419][ T9729] tipc: Resetting bearer [ 235.216914][ T9741] netlink: 'syz.1.958': attribute type 27 has an invalid length. [ 235.397897][ T9758] netlink: 12 bytes leftover after parsing attributes in process `syz.2.963'. [ 235.407514][ T9758] netlink: 12 bytes leftover after parsing attributes in process `syz.2.963'. [ 235.441113][ T9758] bridge0: port 3(ipvlan3) entered blocking state [ 235.450561][ T9758] bridge0: port 3(ipvlan3) entered disabled state [ 235.461061][ T9758] ipvlan3: entered allmulticast mode [ 235.468218][ T9758] bridge0: entered allmulticast mode [ 235.490405][ T9760] netlink: 16 bytes leftover after parsing attributes in process `syz.0.964'. [ 235.503665][ T9758] ipvlan3: left allmulticast mode [ 235.509016][ T9758] bridge0: left allmulticast mode [ 235.582078][ T9767] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 235.609665][ T9767] netlink: 12 bytes leftover after parsing attributes in process `syz.1.965'. [ 235.681630][ T9767] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 235.794293][ T9778] openvswitch: netlink: IPv6 tunnel dst address is zero [ 235.823003][ T9728] tipc: Resetting bearer [ 235.879284][ T9781] netlink: 'syz.1.969': attribute type 1 has an invalid length. [ 235.888321][ T9781] netlink: 'syz.1.969': attribute type 1 has an invalid length. [ 235.898392][ T9728] tipc: Disabling bearer [ 236.052256][ T9787] netlink: zone id is out of range [ 236.060090][ T9787] netlink: zone id is out of range [ 236.067528][ T9787] netlink: zone id is out of range [ 236.089462][ T9787] netlink: zone id is out of range [ 236.098377][ T9787] netlink: zone id is out of range [ 236.103753][ T9787] netlink: zone id is out of range [ 236.113278][ T9787] netlink: zone id is out of range [ 236.116768][ T9789] netlink: 240 bytes leftover after parsing attributes in process `syz.0.972'. [ 236.122703][ T9787] netlink: zone id is out of range [ 236.359869][ T9808] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.977'. [ 236.960630][ T9834] netlink: 'syz.1.989': attribute type 10 has an invalid length. [ 237.505342][ T9864] syz.1.994 (9864) used obsolete PPPIOCDETACH ioctl [ 237.659806][ T9872] tipc: Enabling of bearer rejected, already enabled [ 237.671023][ T9872] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 237.680658][ T9875] nbd: must specify at least one socket [ 237.683441][ T9872] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 237.885612][ T9879] __nla_validate_parse: 1 callbacks suppressed [ 237.885635][ T9879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1001'. [ 238.275288][ T9894] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1004'. [ 238.285501][ T9894] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1004'. [ 238.428460][ T9902] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1009'. [ 238.641471][ T9914] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1013'. [ 238.861268][ T9922] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1014'. [ 238.901183][ T9922] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 238.910910][ T9922] macvtap1: entered allmulticast mode [ 238.922128][ T9922] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 238.972326][ T9924] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1015'. [ 239.152113][ T9937] 8021q: VLANs not supported on wg0 [ 239.207557][ T9940] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1021'. [ 239.293359][ T9943] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1023'. [ 239.339068][ T9943] tipc: Enabled bearer , priority 10 [ 239.378497][ T9950] tipc: Enabling of bearer rejected, failed to enable media [ 239.392080][ T9953] netlink: 'syz.4.1025': attribute type 64 has an invalid length. [ 239.403176][ T9951] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1023'. [ 239.450712][ T9949] lo speed is unknown, defaulting to 1000 [ 239.841365][ T9974] netlink: 'syz.3.1029': attribute type 6 has an invalid length. [ 239.998999][ T9982] net_ratelimit: 10 callbacks suppressed [ 239.999020][ T9982] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.175690][ T9986] tipc: Enabled bearer , priority 0 [ 240.190959][ T9986] syzkaller0: entered promiscuous mode [ 240.202622][ T9986] syzkaller0: entered allmulticast mode [ 240.264783][ T9986] tipc: Resetting bearer [ 240.290445][ T9985] tipc: Resetting bearer [ 240.318954][ T9985] tipc: Disabling bearer [ 241.654574][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 241.868931][T10055] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 242.110590][T10068] tipc: Enabled bearer , priority 0 [ 242.118773][T10068] syzkaller0: entered promiscuous mode [ 242.124770][T10068] syzkaller0: entered allmulticast mode [ 242.162014][T10068] tipc: Resetting bearer [ 242.213099][T10067] tipc: Resetting bearer [ 242.241928][T10067] tipc: Disabling bearer [ 242.285474][T10080] pim6reg0: tun_chr_ioctl cmd 2148553947 [ 242.291412][T10081] netlink: 'syz.4.1060': attribute type 39 has an invalid length. [ 242.721159][ T9] IPVS: starting estimator thread 0... [ 242.767684][T10105] netlink: 'syz.3.1070': attribute type 9 has an invalid length. [ 242.811589][T10105] netlink: 'syz.3.1070': attribute type 9 has an invalid length. [ 242.815458][T10103] IPVS: using max 25 ests per chain, 60000 per kthread [ 242.986887][T10120] __nla_validate_parse: 15 callbacks suppressed [ 242.986909][T10120] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1073'. [ 243.040517][T10124] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1073'. [ 243.415301][T10150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1080'. [ 243.501139][T10155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1082'. [ 243.777256][T10170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1085'. [ 243.783520][T10171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1086'. [ 243.869988][T10175] netlink: 'syz.1.1090': attribute type 1 has an invalid length. [ 243.878803][T10176] netlink: 'syz.1.1090': attribute type 1 has an invalid length. [ 243.981760][T10179] IPv6: sit1: Disabled Multicast RS [ 243.989640][T10179] sit1: entered allmulticast mode [ 244.088990][T10188] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.213802][T10192] tipc: Enabled bearer , priority 0 [ 244.228411][T10192] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1095'. [ 244.241530][T10192] syzkaller0: entered promiscuous mode [ 244.258520][T10192] syzkaller0: entered allmulticast mode [ 244.325539][T10189] tipc: Resetting bearer [ 244.393641][T10189] tipc: Disabling bearer [ 244.585796][T10196] netlink: 'syz.3.1096': attribute type 2 has an invalid length. [ 244.602520][T10196] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1096'. [ 244.632215][T10196] netlink: 'syz.3.1096': attribute type 1 has an invalid length. [ 244.658554][T10196] netlink: 'syz.3.1096': attribute type 11 has an invalid length. [ 244.692660][T10196] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1096'. [ 244.748573][T10196] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1096'. [ 245.018590][T10203] nbd: must specify a device to reconfigure [ 245.375260][T10223] macsec2: entered promiscuous mode [ 245.662079][T10241] veth0_to_bond: entered allmulticast mode [ 245.753873][T10248] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 245.764117][T10247] IPVS: stopping backup sync thread 10248 ... [ 246.885259][T10299] bond1: entered promiscuous mode [ 246.918570][T10299] bond1: entered allmulticast mode [ 246.931534][T10299] 8021q: adding VLAN 0 to HW filter on device bond1 [ 247.034045][T10300] bond2: entered promiscuous mode [ 247.046096][T10300] bond2: entered allmulticast mode [ 247.052587][T10300] 8021q: adding VLAN 0 to HW filter on device bond2 [ 247.171061][T10307] lo speed is unknown, defaulting to 1000 [ 247.598764][T10331] netlink: 'syz.2.1138': attribute type 4 has an invalid length. [ 248.986937][T10383] tipc: Enabled bearer , priority 0 [ 249.005721][T10383] tipc: Resetting bearer [ 249.039535][T10382] tipc: Disabling bearer [ 249.522468][T10404] delete_channel: no stack [ 249.557370][T10407] tipc: Enabled bearer , priority 0 [ 249.585941][T10410] netlink: 'syz.2.1161': attribute type 1 has an invalid length. [ 249.586221][T10402] syzkaller0: entered promiscuous mode [ 249.609551][T10402] syzkaller0: entered allmulticast mode [ 249.738176][T10407] tipc: Resetting bearer [ 249.861622][T10407] tipc: Disabling bearer [ 249.863081][T10416] __nla_validate_parse: 16 callbacks suppressed [ 249.863100][T10416] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1164'. [ 250.060759][T10421] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1166'. [ 250.070434][T10421] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1166'. [ 250.194866][T10425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1168'. [ 250.219030][T10425] hsr0: entered promiscuous mode [ 250.824589][T10462] lo: entered allmulticast mode [ 250.940435][T10457] lo: left allmulticast mode [ 251.072719][T10471] netlink: 'syz.3.1183': attribute type 1 has an invalid length. [ 251.092367][T10471] netlink: 'syz.3.1183': attribute type 2 has an invalid length. [ 251.101203][T10471] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1183'. [ 251.117003][T10472] netlink: 'syz.3.1183': attribute type 1 has an invalid length. [ 251.128244][T10472] netlink: 'syz.3.1183': attribute type 2 has an invalid length. [ 251.147533][T10472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1183'. [ 251.336348][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 251.350604][T10483] lo speed is unknown, defaulting to 1000 [ 251.410930][T10489] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1186'. [ 251.449814][T10489] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 251.549892][T10491] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1188'. [ 251.652695][T10495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1189'. [ 252.087960][T10476] lo speed is unknown, defaulting to 1000 [ 252.109446][T10521] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1196'. [ 252.691778][T10537] lo speed is unknown, defaulting to 1000 [ 253.116306][T10542] lo speed is unknown, defaulting to 1000 [ 255.449751][T10620] __nla_validate_parse: 7 callbacks suppressed [ 255.449777][T10620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1224'. [ 255.759026][T10629] netlink: 'syz.4.1229': attribute type 1 has an invalid length. [ 255.800483][T10639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1232'. [ 255.809994][T10639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1232'. [ 255.828545][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.237380][T10655] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1237'. [ 256.248075][T10655] nbd: couldn't find a device at index 65546 [ 256.431419][T10660] netlink: 'syz.0.1239': attribute type 5 has an invalid length. [ 256.528353][T10667] (unnamed net_device) (uninitialized): option mode: invalid value (254) [ 256.551321][T10673] tipc: Enabling of bearer rejected, failed to enable media [ 256.602607][T10663] lo speed is unknown, defaulting to 1000 [ 256.663468][T10678] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 256.748623][T10683] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1246'. [ 256.867804][T10684] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.079306][T10684] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.231320][T10684] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.312387][T10684] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.451384][ T7599] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.498568][ T7613] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.539480][ T7599] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.583097][ T7599] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.913898][T10711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1249'. [ 258.198442][T10725] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1254'. [ 258.297517][T10724] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1254'. [ 258.389226][T10735] netlink: 'syz.0.1258': attribute type 2 has an invalid length. [ 258.658262][T10752] dvmrp0: entered allmulticast mode [ 258.923771][T10761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 259.244165][T10756] lo speed is unknown, defaulting to 1000 [ 259.432166][T10770] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1265'. [ 259.478070][T10770] hsr0: entered promiscuous mode [ 259.483642][T10770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1265'. [ 259.497076][T10770] hsr_slave_0: left promiscuous mode [ 259.508216][T10770] hsr_slave_1: left promiscuous mode [ 259.566800][T10770] hsr0 (unregistering): left promiscuous mode [ 260.590399][T10814] lo speed is unknown, defaulting to 1000 [ 260.706593][T10826] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1281'. [ 260.867734][T10830] netlink: 'syz.0.1282': attribute type 1 has an invalid length. [ 260.902205][T10830] netlink: 'syz.0.1282': attribute type 2 has an invalid length. [ 260.939603][T10826] bond2: entered promiscuous mode [ 260.955098][T10826] 8021q: adding VLAN 0 to HW filter on device bond2 [ 260.992412][T10837] syz_tun: entered promiscuous mode [ 261.047317][T10816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1277'. [ 261.079260][T10839] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1284'. [ 261.088938][T10840] netlink: 'syz.0.1282': attribute type 10 has an invalid length. [ 261.114906][T10840] veth0_vlan: left allmulticast mode [ 261.120603][T10840] veth0_vlan: left promiscuous mode [ 261.136457][T10840] veth0_vlan: entered promiscuous mode [ 261.153258][T10840] team0: Device veth0_vlan failed to register rx_handler [ 261.213859][T10816] gtp0: entered promiscuous mode [ 261.227921][T10816] gtp0: entered allmulticast mode [ 261.334181][T10850] netlink: 'syz.4.1287': attribute type 1 has an invalid length. [ 261.877851][T10870] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1292'. [ 261.896927][T10870] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1292'. [ 261.913788][T10870] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1292'. [ 261.923898][T10870] netlink: 58 bytes leftover after parsing attributes in process `syz.1.1292'. [ 261.939179][T10866] lo speed is unknown, defaulting to 1000 [ 262.148602][T10882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1293'. [ 262.319533][T10891] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1297'. [ 262.372022][T10877] lo speed is unknown, defaulting to 1000 [ 262.906812][T10908] syz_tun: entered promiscuous mode [ 262.912599][T10908] syz_tun: entered allmulticast mode [ 262.925828][T10908] team0: Port device syz_tun added [ 263.136561][T10915] tipc: Enabling of bearer rejected, already enabled [ 263.250674][T10917] Bluetooth: MGMT ver 1.23 [ 263.886031][T10934] lo speed is unknown, defaulting to 1000 [ 263.947195][T10940] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1311'. [ 264.154784][T10942] bond3: entered promiscuous mode [ 264.160059][T10942] bond3: entered allmulticast mode [ 264.176930][T10942] 8021q: adding VLAN 0 to HW filter on device bond3 [ 264.943507][T10978] lo speed is unknown, defaulting to 1000 [ 265.131064][T10994] mac80211_hwsim hwsim11 syzkaller0: Caught tx_queue_len zero misconfig [ 265.379922][T11005] netlink: 'syz.3.1328': attribute type 1 has an invalid length. [ 265.498983][T11013] netlink: zone id is out of range [ 265.504532][T11013] netlink: zone id is out of range [ 265.509734][T11013] netlink: zone id is out of range [ 265.515257][T11013] netlink: zone id is out of range [ 265.520392][T11013] netlink: zone id is out of range [ 265.525935][T11013] netlink: zone id is out of range [ 265.531150][T11013] netlink: zone id is out of range [ 265.536635][T11013] netlink: zone id is out of range [ 265.539209][T11005] 8021q: adding VLAN 0 to HW filter on device bond4 [ 265.541768][T11013] netlink: zone id is out of range [ 265.541780][T11013] netlink: zone id is out of range [ 265.739159][T11019] team0: left allmulticast mode [ 265.754298][T11019] syz_tun: left allmulticast mode [ 265.775792][T11019] wg1: left promiscuous mode [ 265.780625][T11019] wg1: left allmulticast mode [ 265.806661][T11019] veth0_macvtap: left allmulticast mode [ 265.814044][T11019] macsec1: left allmulticast mode [ 265.819667][T11019] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 265.832760][T11019] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 265.841874][T11019] bond2: left promiscuous mode [ 265.851603][T11019] bond3: left promiscuous mode [ 265.857058][T11019] bond3: left allmulticast mode [ 266.019125][T11031] netlink: 'syz.0.1332': attribute type 10 has an invalid length. [ 266.032125][T11031] __nla_validate_parse: 4 callbacks suppressed [ 266.032155][T11031] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1332'. [ 266.051722][T11031] dummy0: entered promiscuous mode [ 266.090769][T11031] bridge0: port 1(dummy0) entered blocking state [ 266.120501][T11031] bridge0: port 1(dummy0) entered disabled state [ 266.147977][T11031] dummy0: entered allmulticast mode [ 266.361113][T11045] netlink: 'syz.3.1335': attribute type 10 has an invalid length. [ 266.380152][T11044] netlink: 'syz.3.1335': attribute type 10 has an invalid length. [ 266.451360][T11048] netlink: 'syz.3.1335': attribute type 10 has an invalid length. [ 266.467432][T11044] batman_adv: batadv0: Interface deactivated: dummy0 [ 266.493282][T11044] batman_adv: batadv0: Removing interface: dummy0 [ 266.538211][T11044] team0: Port device dummy0 added [ 266.545667][T11045] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 266.575746][T11054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1336'. [ 266.596524][T11048] team0: Failed to send options change via netlink (err -105) [ 266.609425][T11048] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 266.619162][T11048] team0: Port device dummy0 removed [ 266.639235][T11048] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 266.649043][ T7613] bond0: (slave dummy0): interface is now down [ 266.715144][ T13] bond0: (slave dummy0): interface is now down [ 266.734661][ T7613] bond0: (slave dummy0): interface is now down [ 266.750787][ T7613] bond0: now running without any active interface! [ 267.026111][T11075] netlink: 'syz.1.1343': attribute type 29 has an invalid length. [ 267.044490][T11075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1343'. [ 267.048196][T11066] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1340'. [ 267.071785][T11077] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 267.088862][T11075] netlink: 'syz.1.1343': attribute type 16 has an invalid length. [ 267.097733][T11075] netlink: 'syz.1.1343': attribute type 17 has an invalid length. [ 267.195478][T11075] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.203359][T11075] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.257985][T11075] batman_adv: batadv0: Interface deactivated: dummy0 [ 267.440855][T11075] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.458679][T11075] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.492153][T11075] hsr0: left promiscuous mode [ 267.639985][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.693844][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.729105][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.774842][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.005607][T11091] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1347'. [ 268.120203][T11096] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1347'. [ 268.257689][T11105] netlink: 'syz.1.1353': attribute type 2 has an invalid length. [ 268.339029][T11105] `: entered promiscuous mode [ 268.383771][T11116] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1355'. [ 268.406037][T11113] TCP: TCP_TX_DELAY enabled [ 268.461961][T11116] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1355'. [ 268.493197][T11119] netlink: 'syz.3.1357': attribute type 15 has an invalid length. [ 268.531049][ T30] audit: type=1804 audit(1754466067.413:4): pid=11119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1357" name="/newroot/261/cgroup.controllers" dev="tmpfs" ino=1354 res=1 errno=0 [ 268.593326][T11119] syzkaller1: entered promiscuous mode [ 268.605480][T11119] syzkaller1: entered allmulticast mode [ 268.613886][ T30] audit: type=1800 audit(1754466067.443:5): pid=11119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1357" name="cgroup.controllers" dev="tmpfs" ino=1354 res=0 errno=0 [ 268.910151][T11126] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 268.940938][T11126] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 269.401329][T11144] lo speed is unknown, defaulting to 1000 [ 269.537441][T11149] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1364'. [ 269.648078][T11155] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1366'. [ 270.716726][T11188] mac80211_hwsim hwsim11 wlan0: left promiscuous mode [ 270.737125][ T5973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.747856][ T5973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.294113][T11201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.026913][T11215] tipc: Enabling of bearer rejected, failed to enable media [ 272.083045][T11213] __nla_validate_parse: 2 callbacks suppressed [ 272.083066][T11213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1383'. [ 272.124766][T11215] netlink: 212172 bytes leftover after parsing attributes in process `syz.4.1384'. [ 272.619949][T11242] validate_nla: 2 callbacks suppressed [ 272.619968][T11242] netlink: 'syz.1.1394': attribute type 1 has an invalid length. [ 272.781244][T11242] 8021q: adding VLAN 0 to HW filter on device bond7 [ 272.848980][T11250] syzkaller1: entered promiscuous mode [ 272.874731][T11250] syzkaller1: entered allmulticast mode [ 272.954714][T11255] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1395'. [ 273.046209][T11259] netlink: 312 bytes leftover after parsing attributes in process `syz.4.1398'. [ 273.467343][T11272] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 273.773177][T11285] netlink: 'syz.0.1406': attribute type 9 has an invalid length. [ 273.778946][T11286] netlink: 'syz.1.1407': attribute type 4 has an invalid length. [ 273.847212][T11286] netlink: 'syz.1.1407': attribute type 17 has an invalid length. [ 274.039989][T11297] netlink: 'syz.3.1411': attribute type 1 has an invalid length. [ 274.061861][T11297] netlink: 'syz.3.1411': attribute type 3 has an invalid length. [ 274.064832][T11302] netlink: 'syz.0.1412': attribute type 8 has an invalid length. [ 274.077526][T11297] netlink: 'syz.3.1411': attribute type 1 has an invalid length. [ 274.105394][T11302] netlink: 'syz.0.1412': attribute type 2 has an invalid length. [ 274.122640][T11297] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1411'. [ 274.150677][T11297] NCSI netlink: No device for ifindex 0 [ 274.166040][T11301] netlink: 'syz.3.1411': attribute type 1 has an invalid length. [ 274.174151][T11301] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1411'. [ 274.189404][T11301] NCSI netlink: No device for ifindex 0 [ 274.462937][T11323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1418'. [ 274.832218][T11335] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1423'. [ 275.019887][T11345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1425'. [ 275.151561][T11350] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.217055][T11352] lo speed is unknown, defaulting to 1000 [ 275.253650][T11350] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.281235][T11362] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1431'. [ 275.356374][T11350] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.422281][T11364] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 275.486467][T11350] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.592465][ T7601] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.667320][ T7601] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.718356][ T7601] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.778276][ T7601] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.876807][ T30] audit: type=1800 audit(1754466074.753:6): pid=11382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1437" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=1365 res=0 errno=0 [ 275.967037][T11386] bond0: (slave wlan1): Releasing backup interface [ 276.002990][T11386] ------------[ cut here ]------------ [ 276.009073][T11386] wlan1: Failed check-sdata-in-driver check, flags: 0x0 [ 276.026385][T11386] WARNING: CPU: 1 PID: 11386 at net/mac80211/driver-ops.c:366 drv_unassign_vif_chanctx+0x50b/0x7e0 [ 276.035448][T11391] net_ratelimit: 28 callbacks suppressed [ 276.035471][T11391] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 276.037574][T11386] Modules linked in: [ 276.055378][T11386] CPU: 1 UID: 0 PID: 11386 Comm: syz.1.1439 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 276.067215][T11386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 276.077484][T11386] RIP: 0010:drv_unassign_vif_chanctx+0x50b/0x7e0 [ 276.084065][T11386] Code: 8d 8d b8 09 00 00 48 85 c0 48 0f 44 f1 43 0f b6 04 3e 84 c0 0f 85 6b 02 00 00 8b 55 00 48 c7 c7 00 7d ad 8c e8 06 3b a5 f6 90 <0f> 0b 90 90 e9 ee fc ff ff e8 47 97 e1 f6 90 0f 0b 90 42 80 7c 3d [ 276.104268][T11386] RSP: 0018:ffffc9001aa56f80 EFLAGS: 00010246 [ 276.111097][T11386] RAX: 3356018c203fb000 RBX: 0000000000000000 RCX: 0000000000080000 [ 276.119514][T11386] RDX: ffffc9000b70a000 RSI: 00000000000123aa RDI: 00000000000123ab [ 276.127908][T11386] RBP: ffff88806d575728 R08: 0000000000000003 R09: 0000000000000004 [ 276.136563][T11386] R10: dffffc0000000000 R11: fffffbfff1bfa5cc R12: ffff88806d5769d0 [ 276.145150][T11386] R13: ffff88806d574d80 R14: 1ffff1100daaeae5 R15: dffffc0000000000 [ 276.153156][T11386] FS: 00007f148ee826c0(0000) GS:ffff888125d80000(0000) knlGS:0000000000000000 [ 276.162273][T11386] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 276.168928][T11386] CR2: 00007f3a082e56c0 CR3: 000000003729c000 CR4: 00000000003526f0 [ 276.176974][T11386] Call Trace: [ 276.180284][T11386] [ 276.183241][T11386] ieee80211_assign_link_chanctx+0x1ec/0xd70 [ 276.189319][T11386] __ieee80211_link_release_channel+0x33b/0x4a0 [ 276.195636][T11386] ? __pfx_ieee80211_uninit+0x10/0x10 [ 276.201064][T11386] unregister_netdevice_many_notify+0x1953/0x1ff0 [ 276.207576][T11386] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 276.214453][T11386] ? __pfx_call_rcu+0x10/0x10 [ 276.219176][T11386] unregister_netdevice_queue+0x33c/0x380 [ 276.224975][T11386] ? kernfs_remove_by_name_ns+0xee/0x130 [ 276.230662][T11386] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 276.237015][T11386] _cfg80211_unregister_wdev+0x165/0x590 [ 276.242710][T11386] ieee80211_if_remove+0x256/0x310 [ 276.248267][T11386] ieee80211_del_iface+0x19/0x30 [ 276.253249][T11386] cfg80211_remove_virtual_intf+0x231/0x3f0 [ 276.259218][T11386] genl_family_rcv_msg_doit+0x215/0x300 [ 276.264871][T11386] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 276.270995][T11386] ? bpf_lsm_capable+0x9/0x20 [ 276.275807][T11386] ? security_capable+0x7e/0x2e0 [ 276.280803][T11386] genl_rcv_msg+0x60e/0x790 [ 276.285374][T11386] ? __pfx_genl_rcv_msg+0x10/0x10 [ 276.290425][T11386] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 276.296104][T11386] ? __pfx_nl80211_del_interface+0x10/0x10 [ 276.301947][T11386] ? __pfx_nl80211_post_doit+0x10/0x10 [ 276.307507][T11386] netlink_rcv_skb+0x205/0x470 [ 276.312319][T11386] ? __lock_acquire+0xab9/0xd20 [ 276.317282][T11386] ? __pfx_genl_rcv_msg+0x10/0x10 [ 276.322340][T11386] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 276.327721][T11386] ? down_read+0x1ad/0x2e0 [ 276.332154][T11386] genl_rcv+0x28/0x40 [ 276.336202][T11386] netlink_unicast+0x82c/0x9e0 [ 276.341021][T11386] ? __pfx_netlink_unicast+0x10/0x10 [ 276.346385][T11386] ? netlink_sendmsg+0x642/0xb30 [ 276.351637][T11386] ? skb_put+0x11b/0x210 [ 276.355947][T11386] netlink_sendmsg+0x805/0xb30 [ 276.360767][T11386] ? __pfx_netlink_sendmsg+0x10/0x10 [ 276.366153][T11386] ? aa_sock_msg_perm+0x94/0x160 [ 276.371136][T11386] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 276.376589][T11386] ? __pfx_netlink_sendmsg+0x10/0x10 [ 276.381930][T11386] __sock_sendmsg+0x219/0x270 [ 276.386702][T11386] ____sys_sendmsg+0x505/0x830 [ 276.391505][T11386] ? __pfx_____sys_sendmsg+0x10/0x10 [ 276.396898][T11386] ? import_iovec+0x74/0xa0 [ 276.401444][T11386] ___sys_sendmsg+0x21f/0x2a0 [ 276.406198][T11386] ? __pfx____sys_sendmsg+0x10/0x10 [ 276.411451][T11386] ? __fget_files+0x2a/0x420 [ 276.416117][T11386] ? __fget_files+0x3a0/0x420 [ 276.420844][T11386] __x64_sys_sendmsg+0x19b/0x260 [ 276.425860][T11386] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 276.431367][T11386] ? rcu_is_watching+0x15/0xb0 [ 276.436227][T11386] ? do_syscall_64+0xbe/0x3b0 [ 276.440951][T11386] do_syscall_64+0xfa/0x3b0 [ 276.445518][T11386] ? lockdep_hardirqs_on+0x9c/0x150 [ 276.451057][T11386] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.457600][T11386] ? clear_bhb_loop+0x60/0xb0 [ 276.462320][T11386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.468287][T11386] RIP: 0033:0x7f148df8eb69 [ 276.472728][T11386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.492416][T11386] RSP: 002b:00007f148ee82038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 276.500900][T11386] RAX: ffffffffffffffda RBX: 00007f148e1b5fa0 RCX: 00007f148df8eb69 [ 276.508970][T11386] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 276.517033][T11386] RBP: 00007f148e011df1 R08: 0000000000000000 R09: 0000000000000000 [ 276.525086][T11386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 276.533091][T11386] R13: 0000000000000000 R14: 00007f148e1b5fa0 R15: 00007fff8c1b1438 [ 276.541363][T11386] [ 276.544454][T11386] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 276.551763][T11386] CPU: 1 UID: 0 PID: 11386 Comm: syz.1.1439 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 276.563511][T11386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 276.573573][T11386] Call Trace: [ 276.576869][T11386] [ 276.579823][T11386] dump_stack_lvl+0x99/0x250 [ 276.584427][T11386] ? __asan_memcpy+0x40/0x70 [ 276.589051][T11386] ? __pfx_dump_stack_lvl+0x10/0x10 [ 276.594286][T11386] ? __pfx__printk+0x10/0x10 [ 276.598914][T11386] panic+0x2db/0x790 [ 276.602823][T11386] ? __pfx_panic+0x10/0x10 [ 276.607250][T11386] ? show_trace_log_lvl+0x4fb/0x550 [ 276.612533][T11386] __warn+0x31b/0x4b0 [ 276.616529][T11386] ? drv_unassign_vif_chanctx+0x50b/0x7e0 [ 276.622291][T11386] ? drv_unassign_vif_chanctx+0x50b/0x7e0 [ 276.628055][T11386] report_bug+0x2be/0x4f0 [ 276.632424][T11386] ? drv_unassign_vif_chanctx+0x50b/0x7e0 [ 276.638186][T11386] ? drv_unassign_vif_chanctx+0x50b/0x7e0 [ 276.643952][T11386] ? drv_unassign_vif_chanctx+0x50d/0x7e0 [ 276.649709][T11386] handle_bug+0x84/0x160 [ 276.653984][T11386] exc_invalid_op+0x1a/0x50 [ 276.658517][T11386] asm_exc_invalid_op+0x1a/0x20 [ 276.663383][T11386] RIP: 0010:drv_unassign_vif_chanctx+0x50b/0x7e0 [ 276.669732][T11386] Code: 8d 8d b8 09 00 00 48 85 c0 48 0f 44 f1 43 0f b6 04 3e 84 c0 0f 85 6b 02 00 00 8b 55 00 48 c7 c7 00 7d ad 8c e8 06 3b a5 f6 90 <0f> 0b 90 90 e9 ee fc ff ff e8 47 97 e1 f6 90 0f 0b 90 42 80 7c 3d [ 276.689354][T11386] RSP: 0018:ffffc9001aa56f80 EFLAGS: 00010246 [ 276.695444][T11386] RAX: 3356018c203fb000 RBX: 0000000000000000 RCX: 0000000000080000 [ 276.703424][T11386] RDX: ffffc9000b70a000 RSI: 00000000000123aa RDI: 00000000000123ab [ 276.711407][T11386] RBP: ffff88806d575728 R08: 0000000000000003 R09: 0000000000000004 [ 276.719386][T11386] R10: dffffc0000000000 R11: fffffbfff1bfa5cc R12: ffff88806d5769d0 [ 276.727367][T11386] R13: ffff88806d574d80 R14: 1ffff1100daaeae5 R15: dffffc0000000000 [ 276.735373][T11386] ieee80211_assign_link_chanctx+0x1ec/0xd70 [ 276.741393][T11386] __ieee80211_link_release_channel+0x33b/0x4a0 [ 276.747658][T11386] ? __pfx_ieee80211_uninit+0x10/0x10 [ 276.753054][T11386] unregister_netdevice_many_notify+0x1953/0x1ff0 [ 276.759498][T11386] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 276.766287][T11386] ? __pfx_call_rcu+0x10/0x10 [ 276.770977][T11386] unregister_netdevice_queue+0x33c/0x380 [ 276.776706][T11386] ? kernfs_remove_by_name_ns+0xee/0x130 [ 276.782363][T11386] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 276.788629][T11386] _cfg80211_unregister_wdev+0x165/0x590 [ 276.794289][T11386] ieee80211_if_remove+0x256/0x310 [ 276.799430][T11386] ieee80211_del_iface+0x19/0x30 [ 276.804385][T11386] cfg80211_remove_virtual_intf+0x231/0x3f0 [ 276.810311][T11386] genl_family_rcv_msg_doit+0x215/0x300 [ 276.815879][T11386] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 276.821969][T11386] ? bpf_lsm_capable+0x9/0x20 [ 276.826664][T11386] ? security_capable+0x7e/0x2e0 [ 276.831651][T11386] genl_rcv_msg+0x60e/0x790 [ 276.836188][T11386] ? __pfx_genl_rcv_msg+0x10/0x10 [ 276.841222][T11386] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 276.846603][T11386] ? __pfx_nl80211_del_interface+0x10/0x10 [ 276.852418][T11386] ? __pfx_nl80211_post_doit+0x10/0x10 [ 276.857900][T11386] netlink_rcv_skb+0x205/0x470 [ 276.862680][T11386] ? __lock_acquire+0xab9/0xd20 [ 276.867566][T11386] ? __pfx_genl_rcv_msg+0x10/0x10 [ 276.872633][T11386] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 276.877977][T11386] ? down_read+0x1ad/0x2e0 [ 276.882412][T11386] genl_rcv+0x28/0x40 [ 276.886405][T11386] netlink_unicast+0x82c/0x9e0 [ 276.891195][T11386] ? __pfx_netlink_unicast+0x10/0x10 [ 276.896499][T11386] ? netlink_sendmsg+0x642/0xb30 [ 276.901468][T11386] ? skb_put+0x11b/0x210 [ 276.905745][T11386] netlink_sendmsg+0x805/0xb30 [ 276.910552][T11386] ? __pfx_netlink_sendmsg+0x10/0x10 [ 276.915870][T11386] ? aa_sock_msg_perm+0x94/0x160 [ 276.920833][T11386] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 276.926140][T11386] ? __pfx_netlink_sendmsg+0x10/0x10 [ 276.931452][T11386] __sock_sendmsg+0x219/0x270 [ 276.936150][T11386] ____sys_sendmsg+0x505/0x830 [ 276.940933][T11386] ? __pfx_____sys_sendmsg+0x10/0x10 [ 276.946240][T11386] ? import_iovec+0x74/0xa0 [ 276.950769][T11386] ___sys_sendmsg+0x21f/0x2a0 [ 276.955460][T11386] ? __pfx____sys_sendmsg+0x10/0x10 [ 276.960699][T11386] ? __fget_files+0x2a/0x420 [ 276.965323][T11386] ? __fget_files+0x3a0/0x420 [ 276.970017][T11386] __x64_sys_sendmsg+0x19b/0x260 [ 276.974972][T11386] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 276.980451][T11386] ? rcu_is_watching+0x15/0xb0 [ 276.985244][T11386] ? do_syscall_64+0xbe/0x3b0 [ 276.989960][T11386] do_syscall_64+0xfa/0x3b0 [ 276.994512][T11386] ? lockdep_hardirqs_on+0x9c/0x150 [ 276.999761][T11386] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.005849][T11386] ? clear_bhb_loop+0x60/0xb0 [ 277.010547][T11386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.016458][T11386] RIP: 0033:0x7f148df8eb69 [ 277.020896][T11386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.040529][T11386] RSP: 002b:00007f148ee82038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 277.048966][T11386] RAX: ffffffffffffffda RBX: 00007f148e1b5fa0 RCX: 00007f148df8eb69 [ 277.056953][T11386] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 277.064938][T11386] RBP: 00007f148e011df1 R08: 0000000000000000 R09: 0000000000000000 [ 277.072922][T11386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 277.080899][T11386] R13: 0000000000000000 R14: 00007f148e1b5fa0 R15: 00007fff8c1b1438 [ 277.088899][T11386] [ 277.092257][T11386] Kernel Offset: disabled [ 277.096585][T11386] Rebooting in 86400 seconds..