last executing test programs: 3.360035341s ago: executing program 3 (id=1716): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0xb0, 0x10, 0x401, 0x4002, 0x0, {0x0, 0x0, 0xffff, 0x0, 0xd108}, [@IFLA_LINKINFO={0x7c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x6c, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xc}}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_INGRESS_QOS={0x58, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4165, 0x74}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0xffffffff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xa, 0x101}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x202}}, @IFLA_VLAN_QOS_MAPPING={0x24, 0x1, {0x9, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x4400}}]}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0xb0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0xb0, 0x10, 0x401, 0x4002, 0x0, {0x0, 0x0, 0xffff, 0x0, 0xd108}, [@IFLA_LINKINFO={0x7c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x6c, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xc}}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_INGRESS_QOS={0x58, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4165, 0x74}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0xffffffff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xa, 0x101}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x202}}, @IFLA_VLAN_QOS_MAPPING={0x24, 0x1, {0x9, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x4400}}]}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0xb0}}, 0x0) (async) 3.276485783s ago: executing program 3 (id=1717): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4a21, @local}, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$tipc(0x1e, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_sctp(0x2, 0x5, 0x84) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x2, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)=ANY=[@ANYBLOB="83e6abf8d3dabee94b44ff7bca59175a88b11636a4e5de36a61b722fd86335dfa2349dc38513461b3132dff5a82556d409235b71d21c1a333f84e3fc2bd107f66362616b32ac3395f7bd77fa1447a514e0151ffe2d5b23298e9a211ef40696667185f89afcb35016b08a6300f0c95ae08ea0099d90d10250d2534766db390702f850dcd40d55463c3664635545d8f00f7c8cf59ba3", @ANYRES32, @ANYRESDEC, @ANYRES64=0x0, @ANYBLOB="f564f121bfb4dcbba159bd3869b04ebd6606737ecbdda407ef3ff8095f5a996d750ee95685"], 0x20) sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x11, 0x0, 0x0) 2.324777239s ago: executing program 3 (id=1732): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x10b}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000140)=0x1000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000009d00)=ANY=[@ANYBLOB="3b0100fcfc00", @ANYRES16=r2, @ANYBLOB="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"], 0x184}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000140)=0x2998, 0x4) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000140), 0x4) getsockopt$packet_int(r5, 0x107, 0x12, 0x0, &(0x7f0000000240)) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000001e000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="0204000000000000000000000000000003000600ff00000002004e20ac141403000000000001000002000100000004d60a0006020000000003ff05000000000002004e200000000000000000000000001641614d5f4c5eb5e6eabec3d8c82833a66fa8774a05ea839794a10a64d71c95e1b22409860b130b381a636e7a35b0555b5c20835678a8cd63a79a4fa1da0533739f754fdf99cb458c5e8192d5da4bd531c68d52124382cb8842e2eda7bd1349bdbcfa91"], 0x50}, 0x1, 0x7}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r10 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmsg$unix(r10, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000400)=""/16, 0x10}], 0x1}, 0x100) ioctl$sock_inet_SIOCSARP(r10, 0x8955, &(0x7f0000000040)={{0x2, 0x4e23, @private=0xa010101}, {0x6, @remote}, 0x0, {0x2, 0x4e24, @private=0xa010100}, 'macvtap0\x00'}) recvfrom(r4, 0x0, 0x0, 0x20, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) sendto$inet(r3, &(0x7f0000000580)="e1", 0xfffffffffffffef1, 0x40000, 0x0, 0x0) recvmsg(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0xf2) 1.422494708s ago: executing program 4 (id=1740): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x28, 0x3d, 0x107, 0x70bd25, 0x0, {0x4, 0x7c}, [@typed={0x4}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0x4, 0x1c}, @typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x28}}, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0xe9, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x80a1, 0x81d1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x24c20}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x400) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) (async) accept4$netrom(r4, &(0x7f0000000240)={{0x3, @null}, [@rose, @bcast, @null, @default, @null, @default, @netrom, @rose]}, &(0x7f00000002c0)=0x48, 0x80800) (async) socket(0x10, 0x3, 0x0) (async) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00'}) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r5}, &(0x7f0000000440), &(0x7f0000000480)='%-5lx \x00'}, 0x20) close(r4) splice(r4, 0x0, r6, 0x0, 0x4ffe0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022b05e9d000dbdf25f5ff008008000500030000000000000000000000d4795ce663eff8057435b01c3fdfd9b7c724d1cc342aa0364b523db967f587ed94da0c3b9570d5fb013823d68b75ce9b6cb65ee20481936b8df0bfd76fd7dad4b52610d6dc22829ab102c998271338452416e6f84e8109328ff0b030aa6bb175d003278b0872bc29a1276690bc5796770321d8dc9eb52b83668707c55e369bdd53c8b143b0243e5dce52819b8484fd2354c48b6955d45c0a5c52d7a3d1a1958bf9cf791768169486df7a8d9498c6a339f3013373549232055720ef13fc814f0ffd0714d2e9cadf6ef9aeb45ef4b364cd61ad"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20004001) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) 1.264932657s ago: executing program 4 (id=1742): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600), 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00000010000304000000000000000100000300", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000006200028008004040e3f8ba"], 0x3c}}, 0x0) 1.162361838s ago: executing program 3 (id=1744): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="240000001800010000000000fedbdf251d01060008000900", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES16=r0], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x28, 0x5, 0x0) connect$unix(r4, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={&(0x7f0000000200)="62013e9416dcf5648e92401549ac41763b403d38b2daf6b1544a9023e75eae5d64c20f84c441989f874509e32491ba77168d", &(0x7f0000000240)=""/57, &(0x7f0000000500)="5713c0e7b2c660a4a209cfdd4a06849da4c230a0583d9e16dc602aaaf67930b9d87ed5089a8fc03203755b6372dc2cf1b2dcef89907b9886726b016464016b7e28b846de8d3f8b777c20141eaa42214165957612d0ba28972e274a69846dc2e51c1c7477e0bdd480d5e183d1ba597b9e2b0630087805e278bb0dabaa50f770b5a1e32b36e41745a0d08ae4358987a3e7754a5489cad0e870e2e87906f7d5ccc9a144733b84d06c1fd107e88905b42a9fb8e33c2a20593cb9a3d71c5b68925a3336cf6faed8c66aad6c289f1e587e8c9ec3fd7bac16", &(0x7f0000000600)="fca162325229665e26fd5b6b0251ab66dd72af5645da7a5b534a48f0bbc21fd00654f8ecb440639a206614603125994d61bc17566ef0a13a0894caf16fb83ff3ace2f2d251202e95c1d615c27c5456c5732f8f0217d2e25cf2de59c4c41e3ebfc13c8de629c5d286f035e8cef36cb764e3283ff05e34bd983c6cc3919f32ad37857a717e8244c198de7c65630626b454b4eee0cf294387cfb2d4921f03253dacad0caf52f79da66e5c754d43dcd97d74b521d08fe374121a4c2116795afbbd9086906127d59cc40646326086f39a701d0c8f8b9e92af", 0x83d1, r6, 0x4}, 0x38) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000001040168b800000000000000000004000500010001"], 0x1c}}, 0x0) close(0x3) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0909000000000000000001"], 0x68}}, 0x0) sendto$inet6(r7, &(0x7f0000000340)="a4", 0x1, 0x4000, &(0x7f0000000400)={0xa, 0x4e20, 0x0, @private1}, 0x1c) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002900)={0x14, 0x2a, 0x1, 0x0, 0x25dfdbfc, {0x7, 0x0, 0x2c00}}, 0x14}, 0x1, 0x3000000, 0x0, 0x4040841}, 0x8080) shutdown(r7, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000001ec0)={0x6, 0x8209, 0x0, 0x3b3}, &(0x7f0000001f00)=0x10) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="24000027001a00014dd21b26000000000000000005001b000100000000"], 0x24}}, 0x40810) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="b40000000600000063112e00000000008510000002000000850000000000000095000000000000009500000000000000152e3ccd1a14dce8122e4e3277131022e08b9b9c714f83ceb6f7f73ae7fa411f2f5514faef8d6db3ec4773adec9279"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 1.159993597s ago: executing program 4 (id=1745): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0003000000028000001294", 0x2e}], 0x1}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000180)={0xa, 0xfffc, 0xa, @local, 0xa}, 0x1c) (async) r2 = socket$kcm(0x29, 0x0, 0x0) (async) r3 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000280)={r3}) sendto$inet6(r1, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="120000000d000000040000000200000000000000", @ANYRES32, @ANYBLOB="f9ffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000001006ea8b679fdfffffffffffffff6ff000000e166ff2abe9bcad9bd920dc53a038ebc1e24a432853e833fced528b3549a19a17aeb6a572f63b1a6bbe8df6903fb8fdcf602a25a00ab5135af40bc6eb4f7c9fa01fd1ebfe533bb5af128bba7fd8184b0515a68a2e6436eb1ad7338adec135cd4b844d4f8d2c9a1856c9afb5a4ca8680517dac82b4d65b463cfbc3ad90828cbf306282f2bd6bc08071da062821d92061c4c43c29d47dc0df574d35a6f3153b9769483049adc3a13e5199967131e0550c0f1498993660061fb11c4b1a271b1e2d848086936a2a852828dd9ee816c5e236da59e5e4631fa59490b25909f9b1ed3341de7423efedd8e6e352f14e5078ef6b10d36b15d259e2813d16cb981e426f3037565a2f282abb368f0710acaa41e7670d2b90c2af5168f97005cae1a83770939e673604454b72039fe19f4edb1dbd7d1bce3d598938a7e35d1c01c681f83988a44d07b2a831fb4379dec862b54c8a82b8b7313ba10603fbdcafbf013ae11fa7476e4680c31c67c230130edeac8d40e86461e98d71c6b8bbab82db0f5baaa39"], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x803, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_udp(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x179, 0x11, 0x100000}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000006000000000000000100000d030000000000000003000000000000000000000604000000040000000000001202000000000000005f"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x44, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x44}}, 0x0) 1.071269936s ago: executing program 4 (id=1746): syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x10, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x3, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @private}, "c016ea0701001f43"}}}}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x8a}, @exit], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.047283637s ago: executing program 2 (id=1747): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="9f050000000000007110af000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x3, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000009c0)={0x1, &(0x7f0000000980)=[{0x6, 0x7f, 0xe6, 0x7}]}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 945.284488ms ago: executing program 3 (id=1748): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000400095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000031401"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_getroute={0x1c, 0x1a, 0x8, 0x70bd2a, 0x25dfdbfe, {0x2, 0x20, 0x20, 0xb, 0x0, 0x3, 0xff, 0x7}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYRES8=r5], 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x13}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="35a0f183", @ANYRES16=r3, @ANYBLOB="8b3300000000000000000500000008000300", @ANYRES32=0x0, @ANYBLOB="10001d800c0000800500040000000000"], 0x2c}}, 0x0) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8916, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fdfff"}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r9}, 0x10) r11 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r10}, 0x8) socket$inet6(0xa, 0x0, 0xc) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f00000000c0)={0x3, 'vlan1\x00', {0x4}, 0x401}) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r12, &(0x7f0000000240), 0x100000000000007d) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x4000000) close(r11) bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r1}, 0x8) r13 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) ioctl$FS_IOC_GETFSLABEL(r13, 0x400452c9, &(0x7f0000000100)) r14 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) close(r14) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0xfffffffa}, 0x8) 943.347433ms ago: executing program 4 (id=1750): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xfffff038}, {0x28}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) recvfrom$unix(r0, &(0x7f00000000c0)=""/163, 0xa3, 0x0, 0x0, 0x0) 709.784308ms ago: executing program 0 (id=1751): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x40, 0x20}, {0x6, 0x0, 0x8, 0x4}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000000080), 0x0, 0x0) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0xa9}, 0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'erspan0\x00', &(0x7f00000000c0)={'ip_vti0\x00', 0x0, 0x8, 0x7800, 0xff, 0x5, {{0x7, 0x4, 0x0, 0x25, 0x1c, 0x66, 0x0, 0xff, 0x4, 0x0, @multicast2, @rand_addr=0x64010102, {[@timestamp={0x44, 0x8, 0xb7, 0x0, 0x9, [0x9]}]}}}}}) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='rdma.current\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x10100, 0x7, 0x8001, 0x840, r2, 0x4, '\x00', r3, r4, 0x3, 0x0, 0x2, 0x2, @void, @value, @void, @value}, 0x50) 686.394874ms ago: executing program 3 (id=1752): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f00000009c0)={0x0, 0x0}) socket$inet6(0xa, 0x1, 0x6) recvmmsg(r1, &(0x7f0000000940)=[{{&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000000)=""/23, 0x17}, {&(0x7f00000001c0)=""/237, 0xed}, {&(0x7f0000000a40)=""/30, 0x1e}, {&(0x7f00000002c0)=""/93, 0x5d}, {&(0x7f0000000340)=""/86, 0x56}, {&(0x7f00000003c0)=""/154, 0x9a}], 0x6, &(0x7f0000000500)=""/84, 0x54}, 0xc392bc8}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000580)=""/96, 0x60}, {&(0x7f0000000740)=""/255, 0xff}, {&(0x7f0000000600)=""/32, 0x20}, {&(0x7f0000000640)=""/25, 0x19}], 0x4, &(0x7f0000000840)=""/224, 0xe0}, 0x1}], 0x2, 0x20, &(0x7f0000000a00)={r2, r3+10000000}) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$sock_int(r4, 0x1, 0x13, 0x0, &(0x7f00000000c0)) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008000000000008000b"], 0x54}}, 0x0) 557.423315ms ago: executing program 2 (id=1753): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x8, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000000000000c6000100250000008510000001000000950000000000000018400008ffffffff000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x6, 0xff, &(0x7f0000000cc0)=""/255, 0x729c10b274fd1a11, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe, @void, @value}, 0x94) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRES64=r0], 0xa8}, 0x1, 0x0, 0x0, 0xc8c0}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a6c000000120a010100000000000000000200000958000480060002400002000005000300210000000600024088be000005000300840000000600024088e70000020000000000000005000300110000000e000100736e6d705f747261700000000900010073797a310000000020000000090a03000000000000000000020000020900020073797a3100000000140000001100010000000000000000000200000a"], 0xb4}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$tipc(0xffffffffffffffff, 0x0, 0x0) listen(r0, 0x101) r2 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r3 = epoll_create1(0x0) r4 = socket(0x1, 0x80802, 0x0) r5 = epoll_create1(0x0) listen(r4, 0x4) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r5, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r5) shutdown(r4, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x2, r4, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_opts(r6, 0x0, 0x0, &(0x7f0000000240)=""/159, &(0x7f0000000140)=0x9f) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='nv\x00', 0x3) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r5) shutdown(0xffffffffffffffff, 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x3) 556.355987ms ago: executing program 0 (id=1754): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r2, 0x1, {0x0, 0x0, 0x3}, 0xff}, 0x18) sendmmsg$sock(r1, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000500)="a7", 0x1}, {0x0, 0x80000}], 0x2}}], 0x1, 0x0) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000040)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0xffffffffffffffff, "7d8f8f29a698c9ee1f9d85e9337afe84f331245d08c2e5f9cde85de2a7ffe698", 0x1, 0x6, 0x55, 0x767}, 0x3c) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x20}, 0x1, 0x0, 0x0, 0x40c4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) 525.148772ms ago: executing program 0 (id=1755): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x9, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000d10000000000000000000073012b000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40e00, 0x43, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x27) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f00)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r3, r1, 0x4, r0}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000340)={r5, &(0x7f0000000100), &(0x7f0000000200)=""/4, 0x2}, 0x20) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000180)={0x6, [0x1, 0xa, 0x200, 0xc5, 0x400, 0x5]}, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 417.312085ms ago: executing program 1 (id=1757): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="97d017ee39dbcd0d235470a37f0000000513c1e809e04162af18c96ab87620044194c66ae1000000000000000000", @ANYRESDEC=r1, @ANYRES64=r0, @ANYRES32=r0, @ANYRES8=r0], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='sched_move_numa\x00', r3}, 0x18) unshare(0x24020400) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r4, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000022c0)=[{&(0x7f0000001dc0)="a0", 0x1}, {&(0x7f0000000580)='|', 0x1}, {&(0x7f0000000540)="27b7", 0x2}, {&(0x7f0000001f80)="4135dae4b494a8a5c0d8a49cfa8adaa7fe6ee3ced175b56ec890979e8f0609e9bb2a6da629565f307cd798b282e0eb6c6243612354e9a6708eb326898bf082c980000039059093c8fadc1c4b75e96f7c712a3b7c82dbe905e1cd0ea8e212ab4f5397363d7682095fe3f91761b48f47f3e6e7967a4cc20d755ed314434b2b313366", 0x81}, {&(0x7f0000002040)='b', 0x1}, {&(0x7f0000002100)='P', 0x1}, {&(0x7f0000000780)='j', 0x1}], 0x7, 0x0) vmsplice(r6, &(0x7f0000000680)=[{&(0x7f00000004c0)="cf", 0x1}, {&(0x7f0000000500)="8b", 0x1}, {&(0x7f0000000600)=']', 0x1}, {&(0x7f0000000640)="fa", 0x1}, {&(0x7f0000000440)='\"', 0x1}, {&(0x7f0000000a40)="cb48eb0b02f247", 0x7}, {&(0x7f00000009c0)="fdacc564", 0x4}, {&(0x7f0000000c00)="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", 0x401}], 0x8, 0x0) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r7 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000020000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r8}, 0x10) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x1, @local}]}, &(0x7f0000000180)=0x10) close(r5) 416.501288ms ago: executing program 0 (id=1758): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f00000008c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x9c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="000051524cb5005a54c40b7916a1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000300004802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c0001400000000000000001140000001100010000000000000000000000000aa2752a466139eac934fcb22df4207016e403"], 0x84}}, 0x40080) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="210000000000000003000000000097a7bd"], 0x48) r2 = socket$inet_smc(0x2b, 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@enum={0x3, 0x1, 0x0, 0xf, 0x4, [{0xa, 0x3}]}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000f80)=""/4115, 0x30, 0x1013, 0x1, 0x0, 0x0, @void, @value}, 0x28) (async) syz_emit_ethernet(0x66, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd31800300600fc010000000000000000000000000000fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0) (async) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000001600)={'filter\x00', 0xb001, 0x4, 0x3f8, 0x110, 0x110, 0x0, 0x310, 0x310, 0x310, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x7, 0xffffffff}}}, {{@uncond, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @rand_addr=0x64010102, @local, 0x2, 0xfffffffe}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x10b, 0x0, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x448) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x5c, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001340)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000ffffffff7a0af0fff8ffff5979a4f0ff00000000b7060000ffffffff2d6405000000000065040400014741001404000001007d60b7030000000000006a0a00fe40000900850000001f000000b70000000004000095000000000000006623848adf1dc9a7645100b2ffbdb0ab51a064e0ff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b01ddaa52e8756ad60a07d6f27c125e16d024098f755d8583da60f27c162dbba0700002ac9170f50f2568836077b7f711a18ebf608d87b885297b6a79819782748b376358c33c9f53bfd989b1ca58949a54d5827df14faecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b77aafa63b9dd5fa5c53e9cf53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd7e43fe1ca8345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1777b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b622f20c4383a0280f040de7667f8b1d0842835e81c358ebe73af41e5b5b924275cb1749289b44e9728e7a73f148ac8206afe120c1437490d99000000110000fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f5001a1d2a34dc0973ec302bc23211d3e3b6e6dad65a51e5497a3419cecec38126247b2f113ad4c7915c8f82c333a7b350802f03b0057010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d637d406160ffaffffffb4e0bde6749aa52c408b74251914c5d3255fd88a42e7ebb69ebcd8eee623e51dbb1f1b548c91a6825c0686fdc16be1cbb72c217fda18bd746253ca66093daf35923300b600000000ac376e0a4649a8a84e1d293a6b109c5e59b366bca5cc3d936c53d4a48c05099e6fc36d5aa23bff8cce0600fcff00000300a568a8532623d12b40b50ac26f2e8255470a04bfbe7acb581b90991d965a01d1f84cb6b973558e1e3f8118c77ccf0b3c6eb6443870004da10c75723b65f83769ad1f0e4ef6b9ef1cec23264fd8fdac6264af1cb467020bdc12b797b6c156c439105829d2ae1c45f7cfa40df68fd36a03353a55a8a89b60317cd78ea1dc8e0f77f2c1e68ec7c01bd5a2028a8fc107007f3deb1f200abe1f753754678dae8b4e3ba3d086d4b95dfc5817e3dafae2d38b522f842cc750399d90296171fdb1e05882f8a4b8fbd219ccac3a895828b4f22b6527ce31ceb02b7b2beaf4510134552f0b076b168394f8417f25cc82ae04007193cbe69de8bf35e4bebd15412426b2e20ab1f05fc44be9ae094c1b81d3ef947692b44d2afb09c7498dedf0f87c38bbcab7357836f03e8a7c392e535694a3ead2de11e6b1781e2a018c0ada7bc7f0eb2d678f23c07ac341fda2e563ee95085742f5fee9f95f4741b226e428d20b00bc140000e4b2f5efd0a0b1ceba000830ba8634b5aa26bdbe91614e92fae3c7349531df9bf4c01ebf5d8eb7d53e5f30647661623fbdb3f60033fc32f68ea86a2df1e76fe27dfdff1cf9194849c4cc0da9533e5983693e526a7dc0d8728f3b573ca4427bdb44df9341e9b8050e896598a156c935c800436a312e7ae3c011e46851ac599f0427729ab9c55ae0ab4c0000000000000000000000000000c87bcc2ac5aed9247b51d92e0993af4beaf1f3f47dcdfab9165f98155d93e383d6b85158b54675c1585037508c1e9461a1c3d1a6e2002045cae150a7016f1a90716eebbdf6afc4414d900be0bdf19f4a273f44f4357380b4387f1c8b104f0e406b2f04e5ed8c631be6411f9927fe9f6b43ec83412b7c5a676ceec8b454ebf6481c98e86b6933a02daea0b4ec0be5b3d916bd70208b4588626c277648475002e2c62681bd07331422a6e47bbd40857d52c4894944fae5c500000000000000ff00000000de784314b8fd419216b48d0f353c11ae185749fa9ac7dfa16bc5c23a23f74b17a7f1b2d799480f33faa3537a910d6ca02f48b0e69beb1119f106ea5919ffff72e17a5dc8c3d131d82f067e29dc39665dff39fb6347b374aaaf6e65efde3fc6202bf29ccfcb08caf18d668a462493aa82e76affba9c9af31d1c23237aa6eccfadfaf794bb1004c07b21ac6ed77718098b2f722bd05fea3561b86b2838a8de5b4f91d6aba95dc9f4464a024be4d0d8d04f5023e7e19e503624d39a43c7b310de519b40738ff9a623065c06d69d16d4a46ff300022fee47803989b7e916254e0fb9e1c8b07d8a4b8b692a75a32e6ed2caeaa7c258c47fe6143cd9e90b801eff78cd4e402374e0e4ca07b7f17254e3d2f0a2a1bac6fde8a15e3ef3588065524d41966fb3915e804c53201efee751ec294584d23d9008bdf046f55c030ab941a0b8723412127efb3eac0ccf68133c76770d5e7dabcc48d47685404cc540535ed70df75c24660d85f9c9a245185c7da217d1c3743db85db67b9b8a8f00af02367429f6f0b53c169c4356751bf68745dbde055e1722ae256ae53ae637a1431855d16dfa91d82a021a4b2dbb50bf6d59fdd0c9bc84cd7d544de2523b6ce8aaeb94bfba75079f7455204ccca02bd389d8409b2effe9b88e301ac4fe28752386a0678a3f54b2bdf56f927ddd6b0ac98b2b505f668597455ada51ba95ab852b49373a11ff153d20f3681f7a3a31dcd82474b51498f65e0601bcdd23acb4c01bcd2f3e1ad378d14c07d923087d3518369710b70ffb0b523dc4f00f275c381fe1c091e478b04d5e4a9f75b4072acb005a83c25625ab7a351a68977177e27a1bf112114eb10250c2b9dca234f8967f0439696a2345e747b5f1d8c4bec86d8e8f2eb121ea0159615e7d475d45837921c2c0c3f9e683ac8000214a657c9f5cb6dbb714487a9145e9d2918846e78072e0b8f6df849e7f5e3c7e92292c858570d210720102d509083e7af826d9d9f5e4fb389d782e26f243be0c05b9c60383ad28ea3d21466c8d87a4c9cf649315fbd62a6aa4188abb6d8d42785a4ae50157d76efb9c8df83b1c35daad5afaebc7756af1b80d92e8f96a6332e429f6939c230169307e92acd283063304bf6243a0e1f5487bbd54da9fed9bee94d374cc55333fb5c4760cc9ba610937c0f107ef6fbad781863a56897c93c7de1defeaefcef70692d3a8bbf7a4364eac7d608c69caec0f4df2"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r11, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r13 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r12}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r13, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000a8db0000040000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r14], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r15, 0x0, 0x0}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) close(r0) 406.888392ms ago: executing program 2 (id=1759): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r4}, 0x18) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010008000300"/18, @ANYRES32=r1, @ANYBLOB="1c005e80080007006f000000080005005b0000000800060001000000"], 0x38}, 0x1, 0x0, 0x0, 0x400}, 0x20000000) 360.406278ms ago: executing program 1 (id=1760): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0x80}, 0x18) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newsa={0x1a0, 0x16, 0x633, 0x0, 0x80000000, {{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@remote, 0x4d2, 0x32}, @in6=@loopback, {}, {0x5, 0x3, 0x0, 0x5}, {0x4}, 0x2, 0x2, 0xa, 0x4, 0x18}, [@algo_crypt={0xa3, 0x2, {{'ecb(cipher_null)\x00'}, 0x2d8, "3d2ca27e18f17f9530427bf1a44f7fbe83d23491d44c479f52178f5fd23501987e7d5208bb67d134b277019b0117658079148b708b762055c278f2739bcf68de87a25c065aa62c3b52b8ec3f6885836c2037f615bd9243497f9642"}}, @mark={0xc, 0x15, {0x35075c, 0x1}}]}, 0x1a0}}, 0x0) 281.487409ms ago: executing program 2 (id=1761): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0xfffffffd) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000140)={0x21}) 280.907649ms ago: executing program 0 (id=1762): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x2, 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) getpid() r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=ANY=[@ANYRESDEC=r3, @ANYRES32=r4, @ANYBLOB="87fccebc344fa85220995b463bdfbc449d433173121e51e9327b79c6241a3fbff6de4c72fef0eb4daa43a6996bfc6d686064cb4a7457bad59953394f4256be208195a921701c92faf28539c9b4b7a1eef04b0a8a63cb6aa3f6ac926611580cd729a275bef57623327e8190834577331cd3a854d834bd8756db1ae3d4f941cbff481c8f66dfb5b03e8490d74eb48d7f5c23cfba7d70fc7a6fbd6305002000000000000000", @ANYRESDEC=r4], 0xbc}], 0x1}, 0x4000) getgid() r5 = socket$nl_generic(0x10, 0x3, 0x10) accept$netrom(r2, &(0x7f00000002c0)={{}, [@null, @remote, @netrom, @netrom, @default, @netrom, @rose, @bcast]}, &(0x7f0000000200)=0x48) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000340)) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000580)=""/251, &(0x7f0000000540)=0x141) r7 = socket$packet(0x11, 0x2, 0x300) r8 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$fou(&(0x7f0000000380), r5) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f00000000c0)={r9, 0x11, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, 0x10) read(0xffffffffffffffff, &(0x7f0000000000)=""/176, 0xb0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@getchain={0x24, 0x11, 0x839, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xf, 0xfff8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20001000}, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r2) 274.604754ms ago: executing program 1 (id=1763): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4200, 0x20002}, [@IFLA_LINK={0x8}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}]}, 0x3c}}, 0x4000) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) (async) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140), 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x11a, 0x4, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000070000000060a0104000000000000000001000000480004802000018007000164c9c8784e00727400001400028008000240000000030800014000000003240001800b00010072656a6563740000140002800800014000000001080001400000000108000b40000000000900010073797a300000000014000000020001000000000000000036b77d5de6ab5855048b"], 0xf8}}, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="090200000000000000000f000000050030000000000008000300", @ANYRES32=r4], 0x24}}, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000080000000a"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000026c0)={{r7}, &(0x7f0000002640), &(0x7f0000002680)=r8}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x44090) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x54}}, 0x0) (async) unshare(0x6a040000) (async) getsockname$packet(r9, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="090d0000000000f0ff001400000008000300", @ANYRES32=r12, @ANYBLOB="0800051d00000000140006"], 0x58}}, 0x0) 195.881354ms ago: executing program 2 (id=1764): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000001980)={0x110c, 0x10, 0x20, 0x0, 0x0, "", [@generic="b3b80ddab406d802b14fb762781fd2160d0808e2a8cfd5121e90df6c9360c6f7a9b1328c2480c411a23b6371d10d2ce583568936add9aaa69a998547f3d9b3cf326d471a9f08a9a5caf48ecfd992abe2ef7ed6c3c7265a906203d8ac22801d976f917a862f226d2327b79bbc78772d38536fc437959461f74080a771cf3865bb5181e8c8f13a98d251b832cbe8a84f50f0147de3aa91a0b7c83783f9e87841110cd7d4f758afbff88159511657c1613c8befbc8ccd5677473cc812ccc78ebbcf0afe1148a81b65f0f0bc3205dba7af0fd716b703e47c363525b5b1c20f4f8a81a50c5d99816c49092d04d9f57e68a084197e09610ad032400954ea3beb9e2e0e998d48cd25ce12ea0b7dae96ae05d89fa37d8cf5ef810adf2aab9a8e53f9da0977cc36c24487321acf5adaa26234111ae511576d086ecf7906be5b774c8124b33e36938775aa72e4a22f160f5d68ae0f61d7e163bb2eb414dd95f7835a9298157487fa46809cc2c671e780996ae5e835089ff158b3e0567c48d97e600ff5607474625966ab899a36007ac43b5e62d74091eb578484daca00cfc2ea5fd2dca05fc036f0447cb68f58c85c86944fdcdd7e5f7d705bc0e83a514257b28d4003031dd1e8a43043fd3e6e50868541ebd1e17d039a2133d726328dcdbab58a7dbc65686e1b4fcfb24f09f3d5ef1044ab96a32850e19b48151aa0bc9307e5ce995e53b5dc91bed1b8ba58e0a1e2a5b85c1f26f83b8a53243aa8c7bdcce4eb86f6dfad6bb399f58aef6e7925f12d618274c4908b8f4c44a6b40e03a4abc78c4825c91e972949369d826af93c98b9b92e61e0b7fc66c5d9dfaa4b61d874d064c6fad31761c86fb1956a9431666494f770a22da8a61d7c69a21655aee157515413f931dc91e63b2c16d977f2f9b7ab4b4f6d3cdae3cbfd980640552f34d085c1b71511320aaed806f78d2d8095f55d92c4f17ebe90de97fab76ad747f25ca008a8146c744d10d904a07e2d0b6208de142a046d3b578c96203ac5a4f57eeff8f7547a508d33feeb62126d70f88445ff859e33cc0c557decfff9615206d12a58e8f8bceca8b00025d8f3f7d4132116e51d3c90fb9adea4981d8c28300294a8b3ae6c4618ef30f64dd3fc3fa098b779ffeac62da6ef84816a9dda0725a39fdaa3f071d1fe453698ede5c613fe1830a985bd0ab1c54d371633aa406eb4aa039182f4a5cd90ef5189ae93feaebd366c55236613ccd273bade5464a11675735b11fe224b697d362072543fae29496f7e3b31f3b6470b4cc2a23ea83485a8f1f8b8132398d192ef191a5f850db1b23ad264e7951f1fc32194e18f3cc12542425e2bede1ec5689933217d8de7a542d9db8d9dc39738efda27ced0232b780d5a9533b863f232064e2afb9e6fccbc35fdbf5f8b33456b752901e1e5670e7ed3870c846305e587ad42ccd8c6e317bb0f1abcf2db0ed38d59a6b072e708098dc32255679c9725e3f93186cc749c96089679e531b2df59a3d2895f2cb1781ab23712d65722f896783920f5ea0d13a4f291018798eebe89b08752796183435fae0b3bbac388e535768047b29c9d50463fbc6944ce5363b51c4f3882bdcddd3cda7757a025141a95df2793e2654d4df540f909b65887380970ffa08c56cb7fbf4bd2ced1b46c77a188066a3750bd8db2a9e7fe589b172418579898e55def33e3059128bafa2c8ad8ff23724ea039325a75556a9a6f2235d8419ff30b1af817af4d0020ef5092df033a56b8e89b819190b2e72ce61ff87d6ad5ffa48aead52ec3c20f394ab7bba6a4968e95c3ef7244dfd156ece6626d9f44fd739640a6487269c52f7e3076f365902a54ae87ce13210ffc6e7942d348df376cc7aeba502e8838e057fe58e4b13816feaca5b94dd2e2aee1b1bf57365f8cdbc348fe88d4aa0cb9ba130e142d277e4a588b02627bbf0272ccff4d5d19156cae35203e320c2e6612d93fe5b3c0094a28169b3247f79afd9126e3f2df4023b08d704e2fec090f1aee679b32f750878e452965431a1b2527d0ef2d65d96a004d12bdecd9db9a9b6194adf4982760ca6170e1568da180372f2eded8f7ee1d209db7a6266f2033f68343c1dc9b2bba4156ec7014f20a206ee30a43d3f814926fde4383ff12e30c7604e9eb4206a8674221fa8404e14630d335f9def5bc5f89211da8a0c8a7e3dce34e5734057ccf95307c54bd96b6c7ce243017ac9f0b0bde4a9aae8ff47c6d57f13e990d4703ad0b474b114dbae2aa48bffb347eee074de417f6a39c17be87aea4d1517278ce43ca3c3514891615d75fb7b1b7b8d4d000ff3bfafba3ff3b754983c89045ef54a4f9b03b40a776b70ab698c47eb9432517769f52ee0aaffa5f097fa5bfc849ba59f238ba38b6a14409f91ca40d8f7922cbd61f014ecc7beea49d5e74d5ec2ae829525f45b3a305af7678ead191511739567ac47f7db029e94b7f5d74099626792d0227c67cef3a18c46d71fbc44ccb82e3a2e25ad7dc20a158d5a01e2eed12b5bc811a015649ee2673a09a38bed1d9aaa1cf8b6a79831cea4f2574c63b8b07a0a68c040a1cdc2317481d0f3db3ac9e9febf1db08bde4b091c1bfe5d37d27dd7e5b9ead4dd50538dd07eef981f1803a3d139578b21110e235dd8f7783cd43a828cf099acc9d2231db9e09e384b2b85f5f20a1597132881f56bc2fc22176e7270546f464dc1540428709887a83b50ebf3227fdc8f7a808562117393ed1b4d6a7ac09c8aeb6419aa0693831ec1e97618790f0b97f148d71b52a18b3f5c66e209d9d5fe3445969c9deee5a53afd141d52978013ebf0d8ae3e147aba4df0dbac136cb095fc4fc9618f271d0e67cee9aed9905c940b2a536cb0f2611d37860535f7fb2d37b3137744d1f3abc7e0d710d5c42ec2fbcde3ccf4323c9b10f022ed6b36a010b7c20fc5bc010ce7a765493950482f5cdd719bba0333b435b4e90530f8037ca5a2d58b788c2e6bac220a2e017511ff210cb7cf0d1c4282be98df3e37d4386d29465c7633616022876a0b57162c30007b1f017436d65da15b881484ac8c8252ef4611dbe2ed93ed714e05fe9ce05f222d3819f135c19bcbfeefac703910c026c4d7f38ea3552faf079d7247340a2ddf59011cf425259493807ed034d91103fcb6b2cee839da3978c89d065bd7f32f09e9c8bee3ffd59054427ee1c30173129de61b17a0fa4f1aaec0e44695db6fdf64e31a8a2a3074603517b508c2cb6d4a7e2f8020aeb6be80f191f2e8785ffdc724b98f28c8003f03bc3c80af2d36d28446c4e7ef281dfd4e29a32abe0937fedfcb08bdffbaebc75b95c3dd7ea5e29cb8daff7e59d96aaea5c0fa0dd3a549fdb032b6d3c883083a9644f80724ed1cd3a06dc732adcd33abfea9bcc73c6b2b556ee38a22fc030e64300415deb76e10c6a73a683b5fa242f807d2222b7cefbf767680110cf79dba2df6b0086fac3cd01ab844dc180df641894e6c49ee87cc893cb3925f1b6315a0b2798c87fe15af1c6f8cbad0f3ade6c748424e731eb71c5f5f07f607cc49e210bacfa43ac4bf1eca496484792f15803804fe00edca261d14ec67351cc3aa91207fb22b2153d162e246e99f016e06ef44db7af4b83577f239e3e75989c6716986d111217cd14e4e5b68d69c23eed4be649d2de862767ec44a8869045ab0d7c7d75c12c9e4f11a99b64a6b8f61040dc91c7bee79a32aac6854bc2c156e0aa9ad451ba106dd3293d9db41f8de696ae740c7da2d420bd8de34c2e001636894157ac165e89abaacea29d662f57f9a4d32c1c0107018ac7b27f1bf58f50317dad71aa676ad3d860b30ace8c3f21b23e7976f29e899a3d2129eadb2e219d95193e71b12830b0d05292cbfa0c2aadcd8bc92977700d501f793562bdb4c6f08d9d167e4bc24e99ed688a363a8e2b1f63c18a72ccfa4a841f33fc25cff296b92bd93214b41d4cffcef9a3b602dd5122b0c0f524de7502fb9c8949b056c102642a01e622b14d86efb72886a50043cdf9e0b58aeaa43bf4ad9bf832d26428a72bf65e2d2d494f4f27066433a7f375c2650207151d117f10ad2ad2a87f50995af4faaec2f3d3d7db0062eacec77d69e3a5b958eb8606bc50c32f8c5abf2d6a266b26e9232e77fca966ac3bb0615064727c64a58bd3377108f8bc479b62128b52efd3c99071e891ca534f52b200a8d7832f48171b341c94b36a84a59b17aa999f5a9efec6aa0a9c02d92aaf6ffbb80534fe10cfe601bc7112dc7d4419558140fa534ffd5c0a0fba704eadfae0266f18287d7433974aaddc4f60cc9527762d91e63c30333b5615ac654b0b19f7c9376b76e47aacb8a62d4904119ea7766c49ce06772467025f2ff61dcb6b8dd43b775f9cbf6354e0429745726e21a2aa4c9b00b32e66a553bbf651264849d7ea2f76fa60fecef7b620ad892f4e03a8d614f6b9e914213cb037251c91d2c267e8d693cf234b0bdb0db7318b871683ba59f265abdf8c42206f73f317ce789044713065bac3f89a042509785adb3f9e1417f519e704c81772220958f8ad9737dde136c6c94458f014a6224997795495ea29374c6ba8da1fe2b1ef85d6a5113dade338cbca2775f13d62c327bd702386a892bc29c82b6b87621782180afabe874bf6b6bba098e4082319680b06cc0b166079fc1bee7859eb11b541b208a017d18fafe6025cb3986aa9ba2df4af46a27c34f4d2e758f91bfdb92e69de6df9d46421736078747bd402ed8079cf2d562d34a0e091e04e401a4c89d33c04e5ef5fc6abd8d4dac62026eff11820a630d5457c460dba121db38cc7f10c6a3dea78fe47a76ed8e247ec99e526618eac28083e5c0c184f97a6235d5ce20dcf04c87b3e4f0a5f6a3623a5c041dd0b13afe7c55a60d316e5691ce6ca56b7317e58b771e1a3c1bc0b6aec4c16cf3c8f43787995c869e04d41c021be3ef7c3188a0a1497dc3f54b1a6a1301162330b78b89be6a9d4ad886d1092f2254e6f146beabfd1241c6f4719e320ac34901103455f0320f3b6f612ae09321e906cbda894f1f9d56a0b6dc86122d3af1db070f655d1d6657324bd7c975a8f91a742973153b4c9f7786141ec30ace81c5719dbe3badadae13a77287d76f4b162c7cbc15ef790344f7c041814c75fba18bbc45de3c481085456abf4fe21f676b0f2605a2b573ddd1b8be05f641f451599023e39709739a341fc1795be13a8a6f8bf1100f7758184b9e373cc30379f9f246586b24d3495048726ace0e956fa7af9521c659588f174d6201f325af29ddfca0ba5b20ce7df077805859a89d6a2c554006d437f63a4501a4c583052b6e100f36cca1a057a4a05913b1b969957175280bc6382927f6bd06a5f4a192ec8c2cb66eabf52842dd4459b00b220773c23ca25645c02331c9e47a0b83b84e75974d27667908153daee897329fff5870fbd9e7c892da322e5eba87b86a0d2a0a56314a717a88ff9f47b623a2b0f19e4986a650387de7bf365d2e5c5afb1c31f3432a54a56dfeeeac702a7004a82649210e33e2262a6e603258689b86c282ba4e424432a596d0a04494bdd13bdf8254446f6ae1ea50ff767da6597ad266049092e8c1d12ccc20e816134aedae72814bcd227ddef4ea2009579398ae3e6fd58b9ce21c09b10421d8dc63f324a1b9c55400514bb9356d396ce7725c980664d2cf962c8fab1fde583a50e1fcc5858a86458a25e972450c9ac17c48f0280df8a25f6039d4af840fe309db62f4395c4c01d300421dfa23141768402769bc77cb473ec82a700063c239891769507ed79221bd22", @generic="6f6d8864d22a3f2ffaa46c88bc22218f7e1727ddc9f85778e0bdb95e443917ae6a8cbc9fc95b92e886549ecf3b8fea7b99347389d9e0f5a4dfea15587740c757b088ad61d850cd213487c92df1c5db6c83f8aae1d96ed76030a79213f678fef97ef81a1102b6e8e67096b185d47770f1c97b7191f8316e8367ea850e63254614618a6d1eb3fad2ea9336d7b387a24b22d6b6658f", @nested={0x68, 0x0, 0x0, 0x1, [@generic="68a4623c7b906a9a398e1b14268f3e98ca5d47128664135b7047883dcc0d8011ba85ac5b4e4824be2e39d3bd4fbebfcdd29a4c2ff63b5fa7ce09e5dc9034355750fd455f12f12f52870e3a242b556d2244eedb00ddffee4ee9e20f62195742adf0f4cdc0"]}]}, 0x110c}], 0x1, 0x0, 0x0, 0x4008000}, 0x0) 186.711981ms ago: executing program 1 (id=1765): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000040), 0x4) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000400), 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) accept4(0xffffffffffffffff, &(0x7f0000000080)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0, 0x80800) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000340), &(0x7f0000000180)=0x8) 69.413923ms ago: executing program 1 (id=1766): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a00"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) r2 = epoll_create1(0x0) r3 = socket$unix(0x1, 0x1, 0x0) close(r3) socket(0x1d, 0x2, 0x6) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) shutdown(r3, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)={0xa002a008}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000000f00000095"], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 68.896167ms ago: executing program 2 (id=1767): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x28, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000095000000000000002fdc2d3fb4604604cc2069f9e90ff9964e5ea0049b5be301d71811914108ddc0790a5884eb6df3a2bfdf4bf1ed1d94f1484bcb07de58dacee5da1e344a85b2dacdbabb17720caca9cc6d87f2fe4f964c6e76bb2a0d721d08d37fe7084fa58a3d18fdea97c9d94065797d7397c613c07a4e5c984cf05b57c8f91b0b0b"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000140)=r2, 0x4) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'ip6gretap0\x00'}) socket(0x2a, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40201, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x1, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000040)=0x8, 0x4) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000000), 0x4) r6 = socket$kcm(0x2, 0xa, 0x2) r7 = socket(0x2a, 0x2, 0x0) unshare(0x22020600) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000380)={'ip6tnl0\x00', 0x0}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) write$tun(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xffe) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)=@gettaction={0x14, 0x32, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfffa, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x24000000) 68.509669ms ago: executing program 0 (id=1768): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x168, 0x12, 0x60d, 0x0, 0x202, 0x250, 0x2e8, 0x2e8, 0x250, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@srh={{0x30}, {0x88, 0x1, 0xd, 0x81, 0xff, 0x411, 0x2210}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1f, 0x6, 0x1, 0x8, '\x00', 'syz0\x00', {0x80000000}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x3f}, @loopback, [0xff000000, 0xff000000], [0xffffff00, 0x0, 0x0, 0xffffff00], 'wlan0\x00', 'team0\x00', {}, {0xff}, 0x67, 0x8, 0x3, 0x21}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "03b36b432c88a8ebb5bf47b62cc67a3ec6cf641d5a00"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x2, 0x2e, &(0x7f0000000680)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r2], 0x20}}, 0x0) 44.887038ms ago: executing program 4 (id=1769): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x44001, 0x0) ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000380)=0x1) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x6, &(0x7f0000000140)={0x10, {{0x29, 0x0, 0x3000000, @rand_addr=' \x01\x00', 0x8}}}, 0x88) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001600156f00000000000000000a000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\v\x00'], 0x20}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xfffffffffffffd35) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={r4, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x10, &(0x7f00000003c0), 0x0, 0x0, 0x261, 0x8, 0x0, 0x0}}, 0x10) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000240)={'ip6gretap0\x00', {0x2, 0x4e20, @rand_addr=0x64010100}}) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x38, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x24044832}, 0xc094) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r4}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000280)={@dev={0xfe, 0x80, '\x00', 0x22}, 0x24, r5}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0xc, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0xc800) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x10}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x54, 0x1a, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0xfa665a81a6d02b4d}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}}, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) syz_emit_ethernet(0x122, &(0x7f0000000f80)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @broadcast, @val={@void, {0x8100, 0x6, 0x0, 0x2}}, {@mpls_mc={0x8848, {[{0x7, 0x0, 0x1}], @ipv6=@udp={0xf, 0x6, "7bec52", 0xe4, 0x11, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', {[@dstopts={0x84, 0x1, '\x00', [@ra={0x5, 0x2, 0xb}, @ra={0x5, 0x2, 0x72}]}, @dstopts={0x20, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x9}, @enc_lim={0x4, 0x1, 0x1}, @enc_lim={0x4, 0x1, 0x8}, @jumbo={0xc2, 0x4, 0x3}, @ra={0x5, 0x2, 0x100}, @ra, @ra={0x5, 0x2, 0x5}]}], {0xa28, 0x4e21, 0xac, 0x0, @gue={{0x2, 0x1, 0x3, 0x0, 0x100}, "07a229652afe68bafd87d75459d08cfde67078460498b8381a2703f4e99c72556c14c1944e4e1beee18f5c8a715cd4fa97716c8834244a8303f6817e04edd09c59a31bc63d8a16712b7461690832793d056405ac57a33ae8829820bf029d58567caa2debb9382de5aec67fe84c091fc96bf833d3453c72c6d6ee67d5b9676587b4279cee4970e7002e0b861eb1ee6647eedd7532dbfa039daa37a808"}}}}}}}}, &(0x7f0000000500)={0x0, 0x1, [0x46e, 0x9ef, 0x78c, 0x1c4]}) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r1) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000d40)={0x214, r9, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xe4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40003}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x25}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x42a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x283f2eee}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff6}]}, @TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "e48d143ad138f9c0648b231ed16cc06c06bd7a5afc609a3288"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd7}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3fcab48c}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8000}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0xfffffffffffffffd, 0x1, 0x14}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x20, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x70e}]}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x810}, 0x80) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, &(0x7f0000001f00)=""/4090, 0x4}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) 0s ago: executing program 1 (id=1770): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14, 0x10, 0x1, 0x0, 0x2000000}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}], {0x14}}, 0x64}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xf, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r2, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f0000000140)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc4, &(0x7f0000000300)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x48, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x10, &(0x7f0000000780)=@raw=[@cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffa}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000500)=""/73}, 0x20) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) shutdown(0xffffffffffffffff, 0x1) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) close(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x6}, @NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0xb}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0xc004) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r6, &(0x7f0000000040)={0x24, @short={0x2, 0x2, 0xaaa3}}, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000b40)={'wlan0\x00'}) kernel console output (not intermixed with test programs): e the problem. [ 54.963449][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.981624][ T5846] hsr_slave_0: entered promiscuous mode [ 54.988279][ T5846] hsr_slave_1: entered promiscuous mode [ 55.040038][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.047360][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.073584][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.089799][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.096861][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.122874][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.137091][ T5835] hsr_slave_0: entered promiscuous mode [ 55.143207][ T5835] hsr_slave_1: entered promiscuous mode [ 55.149528][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.157380][ T5835] Cannot create hsr debugfs directory [ 55.172494][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.179647][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.205898][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.225967][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.232936][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.259128][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.286531][ T5839] hsr_slave_0: entered promiscuous mode [ 55.292659][ T5839] hsr_slave_1: entered promiscuous mode [ 55.295572][ T5842] Bluetooth: hci0: command tx timeout [ 55.298321][ T5148] Bluetooth: hci1: command tx timeout [ 55.307788][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.317453][ T5839] Cannot create hsr debugfs directory [ 55.374658][ T5148] Bluetooth: hci3: command tx timeout [ 55.385291][ T5148] Bluetooth: hci2: command tx timeout [ 55.426501][ T5830] hsr_slave_0: entered promiscuous mode [ 55.432679][ T5830] hsr_slave_1: entered promiscuous mode [ 55.440017][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.447667][ T5830] Cannot create hsr debugfs directory [ 55.454673][ T5148] Bluetooth: hci4: command tx timeout [ 55.460321][ T5843] hsr_slave_0: entered promiscuous mode [ 55.466402][ T5843] hsr_slave_1: entered promiscuous mode [ 55.472309][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.480077][ T5843] Cannot create hsr debugfs directory [ 55.665426][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.699313][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.708528][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.732364][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.783489][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.807856][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.823523][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.845140][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.881911][ T5839] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.899377][ T5839] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.919151][ T5839] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.937133][ T5839] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.999139][ T5843] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.010647][ T5843] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.022356][ T5843] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.035774][ T5843] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.050722][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.060227][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.070734][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.082338][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.119252][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.163713][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.188611][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.195878][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.208969][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.216414][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.273203][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.327180][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.339095][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.355918][ T137] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.363039][ T137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.376701][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.390457][ T5835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.410090][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.429040][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.441126][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.448286][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.467526][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.500648][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.507845][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.535625][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.542752][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.567852][ T5846] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.584099][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.592712][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.599822][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.627737][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.634888][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.648686][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.655901][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.669902][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.677116][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.739093][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.911460][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.942603][ T5835] veth0_vlan: entered promiscuous mode [ 56.988282][ T5835] veth1_vlan: entered promiscuous mode [ 57.030266][ T5846] veth0_vlan: entered promiscuous mode [ 57.066632][ T5846] veth1_vlan: entered promiscuous mode [ 57.092881][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.108259][ T5835] veth0_macvtap: entered promiscuous mode [ 57.130547][ T5835] veth1_macvtap: entered promiscuous mode [ 57.163065][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.176903][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.190115][ T5830] veth0_vlan: entered promiscuous mode [ 57.202588][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.222551][ T5846] veth0_macvtap: entered promiscuous mode [ 57.235350][ T5830] veth1_vlan: entered promiscuous mode [ 57.249149][ T5835] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.258214][ T5835] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.267312][ T5835] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.276696][ T5835] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.303817][ T5846] veth1_macvtap: entered promiscuous mode [ 57.330494][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.372359][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.388234][ T5148] Bluetooth: hci0: command tx timeout [ 57.393687][ T5148] Bluetooth: hci1: command tx timeout [ 57.400565][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.412647][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.438592][ T5830] veth0_macvtap: entered promiscuous mode [ 57.448120][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.454520][ T5148] Bluetooth: hci2: command tx timeout [ 57.463596][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.463946][ T5148] Bluetooth: hci3: command tx timeout [ 57.475386][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.516118][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.529456][ T5830] veth1_macvtap: entered promiscuous mode [ 57.534741][ T5148] Bluetooth: hci4: command tx timeout [ 57.541406][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.575360][ T5846] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.590462][ T5846] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.600129][ T5846] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.613712][ T5846] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.629909][ T5843] veth0_vlan: entered promiscuous mode [ 57.641330][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.659487][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.663712][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.678855][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.689012][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.701146][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.711970][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.733903][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.748402][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.759593][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.770268][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.782040][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.793896][ T5830] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.807091][ T5830] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.816139][ T5830] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.825089][ T5830] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.842498][ T5843] veth1_vlan: entered promiscuous mode [ 57.912368][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 57.964104][ T5839] veth0_vlan: entered promiscuous mode [ 57.980407][ T5843] veth0_macvtap: entered promiscuous mode [ 57.998778][ T137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.008679][ T137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.022884][ T5843] veth1_macvtap: entered promiscuous mode [ 58.042513][ T5839] veth1_vlan: entered promiscuous mode [ 58.071363][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.082248][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.118708][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.129764][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.140587][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.151393][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.161376][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.172065][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.183056][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.192971][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.205285][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.215207][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.226188][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.236139][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.246682][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.258865][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.269567][ T5839] veth0_macvtap: entered promiscuous mode [ 58.288513][ T5913] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.316152][ T5843] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.328149][ T5843] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.338474][ T5843] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.348156][ T5843] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.360166][ T4813] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.382110][ T4813] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.391007][ T5913] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.407556][ T5839] veth1_macvtap: entered promiscuous mode [ 58.429327][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.437413][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.496180][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.527596][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.539749][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.550736][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.562927][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.573500][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.587049][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.597814][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.610028][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.640934][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.651975][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.663448][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.674065][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.683922][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.694510][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.704378][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.717738][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.728443][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.804084][ T5913] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.850886][ T4813] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.859237][ T4813] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.885672][ T5839] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.918264][ T5839] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.934330][ T5839] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.943071][ T5839] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.060634][ T5913] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.130558][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.150260][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.290417][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.302901][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.408185][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.420663][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.457506][ T5148] Bluetooth: hci1: command tx timeout [ 59.462970][ T5148] Bluetooth: hci0: command tx timeout [ 59.534514][ T5148] Bluetooth: hci3: command tx timeout [ 59.535520][ T24] IPVS: starting estimator thread 0... [ 59.539947][ T5148] Bluetooth: hci2: command tx timeout [ 59.614506][ T5148] Bluetooth: hci4: command tx timeout [ 59.715397][ T5937] IPVS: using max 33 ests per chain, 79200 per kthread [ 59.901472][ T5942] netlink: 'syz.4.5': attribute type 5 has an invalid length. [ 59.969961][ T5947] netlink: 5 bytes leftover after parsing attributes in process `syz.1.9'. [ 59.982031][ T5947] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9'. [ 60.036988][ T5950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8'. [ 60.080754][ T137] IPVS: stop unused estimator thread 0... [ 60.192853][ T5958] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 60.451589][ T5967] bond1: entered promiscuous mode [ 60.456869][ T5967] bond1: entered allmulticast mode [ 60.462682][ T5967] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.535297][ T5972] netlink: 68 bytes leftover after parsing attributes in process `syz.4.15'. [ 60.771607][ T5967] bond1 (unregistering): Released all slaves [ 60.781572][ T5978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16'. [ 60.812085][ T5968] bond1: entered promiscuous mode [ 60.819999][ T5968] bond1: entered allmulticast mode [ 60.830995][ T5968] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.937789][ T5968] bond1 (unregistering): Released all slaves [ 60.986088][ T5982] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 60.993558][ T5982] IPv6: NLM_F_CREATE should be set when creating new route [ 61.030474][ T5958] syz.1.11 (5958) used greatest stack depth: 19328 bytes left [ 61.121530][ T5985] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 61.176135][ T5991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20'. [ 61.184016][ T5985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19'. [ 61.200499][ T5980] Driver unsupported XDP return value 0 on prog (id 8) dev N/A, expect packet loss! [ 61.220687][ T5980] syz.4.18 uses obsolete (PF_INET,SOCK_PACKET) [ 61.228345][ T5990] warning: `syz.2.20' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 61.331358][ T1207] cfg80211: failed to load regulatory.db [ 61.536517][ T5148] Bluetooth: hci0: command tx timeout [ 61.541952][ T5148] Bluetooth: hci1: command tx timeout [ 61.614950][ T5148] Bluetooth: hci2: command tx timeout [ 61.620781][ T5842] Bluetooth: hci3: command tx timeout [ 61.694559][ T5148] Bluetooth: hci4: command tx timeout [ 61.718509][ T6013] netlink: 24 bytes leftover after parsing attributes in process `syz.1.26'. [ 61.749334][ T6013] netlink: 36 bytes leftover after parsing attributes in process `syz.1.26'. [ 61.848581][ T6023] netlink: 20 bytes leftover after parsing attributes in process `syz.4.31'. [ 61.911103][ T6027] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 61.929583][ T6027] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 62.208559][ T6034] Zero length message leads to an empty skb [ 62.324140][ T6040] netlink: 'syz.4.35': attribute type 11 has an invalid length. [ 62.394023][ T6042] netlink: 'syz.4.36': attribute type 2 has an invalid length. [ 62.622995][ T6052] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.631403][ T6052] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.726399][ T6060] netlink: 'syz.0.40': attribute type 21 has an invalid length. [ 62.851687][ T6052] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.873736][ T6052] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.983040][ T6052] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.995606][ T6052] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.004747][ T6052] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.014576][ T6052] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.081229][ T6055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.093402][ T6055] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.102992][ T6055] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 63.525315][ T6090] netlink: 'syz.2.47': attribute type 2 has an invalid length. [ 63.553814][ T6090] netlink: 'syz.2.47': attribute type 1 has an invalid length. [ 63.597058][ T6093] netlink: 'syz.4.48': attribute type 22 has an invalid length. [ 64.099709][ T6128] sctp: [Deprecated]: syz.3.59 (pid 6128) Use of struct sctp_assoc_value in delayed_ack socket option. [ 64.099709][ T6128] Use struct sctp_sack_info instead [ 64.381952][ T6146] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 64.663198][ T6114] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.670901][ T6114] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.904543][ T6114] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.921018][ T6114] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.012723][ T6114] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.024588][ T6114] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.034090][ T6114] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.043420][ T6114] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.091374][ T6156] ip6tnl1: entered promiscuous mode [ 65.098007][ T6156] ip6tnl1: entered allmulticast mode [ 65.622483][ T6188] dummy0: entered promiscuous mode [ 65.632947][ T6188] macsec1: entered promiscuous mode [ 65.646652][ T6188] batman_adv: batadv0: Adding interface: macsec1 [ 65.674879][ T6188] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.709488][ T6188] batman_adv: batadv0: Interface activated: macsec1 [ 66.037648][ T6225] netlink: 'syz.1.82': attribute type 1 has an invalid length. [ 66.269806][ T6243] sctp: [Deprecated]: syz.4.85 (pid 6243) Use of struct sctp_assoc_value in delayed_ack socket option. [ 66.269806][ T6243] Use struct sctp_sack_info instead [ 66.310467][ T6243] netlink: 'syz.4.85': attribute type 1 has an invalid length. [ 66.354931][ T6243] __nla_validate_parse: 8 callbacks suppressed [ 66.354948][ T6243] netlink: 224 bytes leftover after parsing attributes in process `syz.4.85'. [ 66.504375][ T6250] pim6reg: entered allmulticast mode [ 66.918599][ T6273] bridge0: port 3(gretap0) entered blocking state [ 66.951093][ T6273] bridge0: port 3(gretap0) entered disabled state [ 66.983538][ T6273] gretap0: entered allmulticast mode [ 67.011809][ T6273] gretap0: entered promiscuous mode [ 67.030958][ T6273] bridge0: port 3(gretap0) entered blocking state [ 67.037732][ T6273] bridge0: port 3(gretap0) entered forwarding state [ 67.044537][ T6277] netlink: 16 bytes leftover after parsing attributes in process `syz.4.91'. [ 67.121534][ T6279] vlan2: entered promiscuous mode [ 67.128094][ T6279] vlan2: entered allmulticast mode [ 67.144373][ T6279] hsr_slave_1: entered allmulticast mode [ 67.170954][ T6283] netlink: 'syz.0.93': attribute type 29 has an invalid length. [ 67.300455][ T6290] netlink: 'syz.0.93': attribute type 29 has an invalid length. [ 67.382351][ T6296] netlink: 'syz.2.96': attribute type 16 has an invalid length. [ 67.424496][ T6296] netlink: 'syz.2.96': attribute type 17 has an invalid length. [ 67.465499][ T6296] netlink: 'syz.2.96': attribute type 27 has an invalid length. [ 67.631413][ T6300] netlink: 12 bytes leftover after parsing attributes in process `syz.4.98'. [ 67.683061][ T6300] Bluetooth: MGMT ver 1.23 [ 67.931999][ T6307] Bluetooth: MGMT ver 1.23 [ 68.179826][ T6317] netlink: 40 bytes leftover after parsing attributes in process `syz.4.103'. [ 68.307581][ T6323] netlink: 3 bytes leftover after parsing attributes in process `syz.2.104'. [ 68.325036][ T6325] netlink: 12 bytes leftover after parsing attributes in process `syz.4.105'. [ 68.344447][ T6325] netlink: 16 bytes leftover after parsing attributes in process `syz.4.105'. [ 68.353352][ T6325] netlink: 12 bytes leftover after parsing attributes in process `syz.4.105'. [ 68.393517][ T6325] netlink: 16 bytes leftover after parsing attributes in process `syz.4.105'. [ 68.425553][ T6325] netlink: 5 bytes leftover after parsing attributes in process `syz.4.105'. [ 68.435170][ T6323] 0ªX¹¦À: renamed from caif0 [ 68.445974][ T6323] 0ªX¹¦À: entered allmulticast mode [ 68.451302][ T6323] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 68.765547][ T6306] netlink: 'syz.0.101': attribute type 39 has an invalid length. [ 69.277536][ T6361] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 69.901846][ T6384] netlink: 'syz.3.121': attribute type 1 has an invalid length. [ 70.035046][ T6390] netlink: 'syz.0.122': attribute type 1 has an invalid length. [ 71.293208][ T6446] IPVS: Error connecting to the multicast addr [ 71.379142][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.384506][ T6448] __nla_validate_parse: 10 callbacks suppressed [ 71.384524][ T6448] netlink: 16 bytes leftover after parsing attributes in process `syz.3.138'. [ 71.457345][ T6452] netlink: 20 bytes leftover after parsing attributes in process `syz.1.141'. [ 71.470998][ T6456] netlink: 1644 bytes leftover after parsing attributes in process `syz.2.140'. [ 71.481949][ T6453] netlink: 36 bytes leftover after parsing attributes in process `syz.1.141'. [ 71.551900][ T6459] netlink: 16 bytes leftover after parsing attributes in process `syz.4.139'. [ 71.724147][ T6467] netlink: 24 bytes leftover after parsing attributes in process `syz.2.143'. [ 71.819764][ T6478] ip6erspan0: entered promiscuous mode [ 71.927672][ T6486] sctp: [Deprecated]: syz.1.147 (pid 6486) Use of int in max_burst socket option deprecated. [ 71.927672][ T6486] Use struct sctp_assoc_value instead [ 72.089275][ T6494] netlink: 24 bytes leftover after parsing attributes in process `syz.3.149'. [ 72.132962][ T6500] netlink: 36 bytes leftover after parsing attributes in process `syz.1.153'. [ 72.269099][ T6507] batadv_slave_1: entered allmulticast mode [ 72.275811][ T6507] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 72.319073][ T6510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.156'. [ 72.494701][ T6516] validate_nla: 2 callbacks suppressed [ 72.494721][ T6516] netlink: 'syz.2.158': attribute type 21 has an invalid length. [ 72.859224][ T6528] netlink: 16 bytes leftover after parsing attributes in process `syz.0.162'. [ 72.903420][ T6528] vlan2: entered allmulticast mode [ 72.926965][ T6528] bond0: entered allmulticast mode [ 72.950573][ T6528] bond_slave_0: entered allmulticast mode [ 72.956813][ T6528] bond_slave_1: entered allmulticast mode [ 72.998707][ T6528] bridge0: port 3(vlan2) entered blocking state [ 73.011789][ T6528] bridge0: port 3(vlan2) entered disabled state [ 73.038005][ T6528] vlan2: entered promiscuous mode [ 73.047683][ T6528] bond0: entered promiscuous mode [ 73.052929][ T6528] bond_slave_0: entered promiscuous mode [ 73.053454][ T6537] openvswitch: netlink: nsh attr 2 has unexpected len 0 expected 16 [ 73.076521][ T6528] bond_slave_1: entered promiscuous mode [ 73.086186][ T6528] bridge0: port 3(vlan2) entered blocking state [ 73.089584][ T6537] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 73.093322][ T6528] bridge0: port 3(vlan2) entered forwarding state [ 73.179745][ T6539] netlink: 'syz.1.166': attribute type 8 has an invalid length. [ 73.435444][ T6555] netlink: 'syz.4.171': attribute type 4 has an invalid length. [ 73.663976][ T6560] ªªªªªª: renamed from vlan0 [ 73.717775][ T6561] netlink: 'syz.0.173': attribute type 5 has an invalid length. [ 73.830897][ T6572] pimreg: entered allmulticast mode [ 73.869358][ T6563] lo: entered promiscuous mode [ 73.886428][ T6562] pimreg: left allmulticast mode [ 73.954744][ T6576] ip6gretap0: entered promiscuous mode [ 73.961628][ T6576] syz_tun: entered promiscuous mode [ 74.205116][ T6584] dccp_invalid_packet: P.Data Offset(0) too small [ 74.281635][ T6588] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 74.307318][ T6588] netlink: 'syz.4.181': attribute type 5 has an invalid length. [ 74.680178][ T6600] openvswitch: netlink: IPv4 tun info is not correct [ 74.860166][ T6610] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 74.892463][ T6613] netlink: 'syz.0.191': attribute type 10 has an invalid length. [ 74.953517][ T6613] syz_tun: entered promiscuous mode [ 74.981741][ T6613] syz_tun: entered allmulticast mode [ 74.996041][ T6613] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 76.446412][ T6672] __nla_validate_parse: 12 callbacks suppressed [ 76.446432][ T6672] netlink: 60 bytes leftover after parsing attributes in process `syz.2.208'. [ 76.521645][ T6682] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 76.546533][ T6682] syzkaller1: linktype set to 825 [ 76.615082][ T6685] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 76.668646][ T6690] netlink: 'syz.1.214': attribute type 1 has an invalid length. [ 76.700325][ T6690] netlink: 48 bytes leftover after parsing attributes in process `syz.1.214'. [ 77.008865][ T6695] Bluetooth: MGMT ver 1.23 [ 78.119560][ T6727] netlink: 4 bytes leftover after parsing attributes in process `syz.0.222'. [ 78.635735][ T6727] vlan2: left promiscuous mode [ 78.644443][ T6727] bond0: left promiscuous mode [ 78.653586][ T6727] bond_slave_0: left promiscuous mode [ 78.659554][ T6727] bond_slave_1: left promiscuous mode [ 78.675567][ T6727] bridge0: port 3(vlan2) entered disabled state [ 78.697065][ T6727] bridge_slave_1: left allmulticast mode [ 78.702775][ T6727] bridge_slave_1: left promiscuous mode [ 78.710713][ T6727] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.761866][ T6732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.223'. [ 78.785437][ T6727] bridge_slave_0: left allmulticast mode [ 78.797946][ T6727] bridge_slave_0: left promiscuous mode [ 78.803755][ T6727] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.917362][ T6731] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 78.930489][ T6731] batman_adv: batadv0: Adding interface: gretap1 [ 78.936911][ T6731] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.973063][ T6731] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 79.001152][ T6735] netlink: 'syz.1.225': attribute type 1 has an invalid length. [ 79.159574][ T6744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.227'. [ 79.308154][ T6758] netlink: 'syz.2.229': attribute type 34 has an invalid length. [ 79.609109][ T6784] openvswitch: netlink: Key 6 has unexpected len 134 expected 2 [ 79.634997][ T6790] netlink: 48 bytes leftover after parsing attributes in process `syz.4.236'. [ 79.890906][ T6799] netlink: 20 bytes leftover after parsing attributes in process `syz.4.237'. [ 79.901414][ T6803] IPVS: set_ctl: invalid protocol: 92 224.0.0.2:20003 [ 80.253340][ T6825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.240'. [ 80.527793][ T6836] netlink: 'syz.1.244': attribute type 1 has an invalid length. [ 80.547790][ T6836] netlink: 224 bytes leftover after parsing attributes in process `syz.1.244'. [ 80.615006][ T6800] syz.0.238 (6800) used greatest stack depth: 18728 bytes left [ 80.805272][ T6850] netlink: 'syz.0.247': attribute type 10 has an invalid length. [ 80.865209][ T6850] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 80.872604][ T6848] netlink: 44 bytes leftover after parsing attributes in process `syz.2.243'. [ 80.879144][ T6850] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 81.119688][ T6867] openvswitch: netlink: Key 6 has unexpected len 13 expected 2 [ 81.552669][ T6900] openvswitch: netlink: VXLAN extension 26 out of range max 1 [ 81.785677][ T6908] __nla_validate_parse: 3 callbacks suppressed [ 81.785698][ T6908] netlink: 24 bytes leftover after parsing attributes in process `syz.4.260'. [ 81.810682][ T6908] netlink: 12 bytes leftover after parsing attributes in process `syz.4.260'. [ 81.821643][ T6908] netlink: 12 bytes leftover after parsing attributes in process `syz.4.260'. [ 81.967946][ T6920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.263'. [ 82.006910][ T6924] netlink: 28 bytes leftover after parsing attributes in process `syz.2.264'. [ 82.147524][ T6929] netlink: 12 bytes leftover after parsing attributes in process `syz.2.267'. [ 82.151019][ T6932] netlink: 'syz.0.266': attribute type 11 has an invalid length. [ 82.165897][ T6929] netlink: 12 bytes leftover after parsing attributes in process `syz.2.267'. [ 82.306561][ T6943] sctp: [Deprecated]: syz.4.268 (pid 6943) Use of int in maxseg socket option. [ 82.306561][ T6943] Use struct sctp_assoc_value instead [ 82.627682][ T6955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.272'. [ 82.649858][ T6955] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.707870][ T6967] netlink: 'syz.4.276': attribute type 12 has an invalid length. [ 82.751993][ T6955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.039148][ T6960] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0 [ 83.075066][ T6995] netlink: 16 bytes leftover after parsing attributes in process `syz.3.283'. [ 83.188222][ T6999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.284'. [ 83.234982][ T6999] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 83.261393][ T7001] netlink: 'syz.1.285': attribute type 10 has an invalid length. [ 83.283468][ T6999] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 83.458275][ T7008] openvswitch: netlink: nsh attr 2 has unexpected len 0 expected 16 [ 83.466586][ T7008] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 83.507197][ T7001] team0 (unregistering): Port device team_slave_0 removed [ 83.517933][ T7001] team0 (unregistering): Port device team_slave_1 removed [ 84.422562][ T7048] openvswitch: netlink: Flow key attr not present in new flow. [ 84.553340][ T7059] netlink: 'syz.1.297': attribute type 2 has an invalid length. [ 84.567306][ T7059] netlink: 'syz.1.297': attribute type 1 has an invalid length. [ 84.891300][ T7078] netlink: 'syz.0.300': attribute type 10 has an invalid length. [ 85.105430][ T7101] delete_channel: no stack [ 85.407897][ T7122] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.420288][ T7122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.430349][ T7122] bond0 (unregistering): Released all slaves [ 85.463849][ T7126] netlink: 'syz.3.316': attribute type 3 has an invalid length. [ 85.685866][ T7134] atomic_op ffff888032660998 conn xmit_atomic 0000000000000000 [ 85.790485][ T7137] pim6reg1: entered promiscuous mode [ 85.796047][ T7137] pim6reg1: entered allmulticast mode [ 86.006679][ T7149] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 86.013474][ T7154] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.247607][ T7162] pim6reg9: entered allmulticast mode [ 86.841187][ T7190] __nla_validate_parse: 12 callbacks suppressed [ 86.841208][ T7190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.336'. [ 86.860480][ T7190] netlink: 4 bytes leftover after parsing attributes in process `syz.2.336'. [ 86.877686][ T7190] nbd: socks must be embedded in a SOCK_ITEM attr [ 86.913918][ T7194] netlink: 44 bytes leftover after parsing attributes in process `syz.2.336'. [ 86.933501][ T5832] IPVS: starting estimator thread 0... [ 87.003211][ T7201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.340'. [ 87.014947][ T7201] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 87.026446][ T7197] IPVS: using max 30 ests per chain, 72000 per kthread [ 87.358809][ T7222] ip6t_rpfilter: unknown options [ 87.621151][ T7236] netlink: 'syz.1.347': attribute type 16 has an invalid length. [ 87.631381][ T7236] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.347'. [ 87.820928][ T7246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.351'. [ 87.909501][ T7252] bond0: Unable to set down delay as MII monitoring is disabled [ 88.172457][ T7265] netlink: 'syz.4.356': attribute type 1 has an invalid length. [ 88.221881][ T7265] netlink: 16 bytes leftover after parsing attributes in process `syz.4.356'. [ 88.263653][ T7265] netlink: 8 bytes leftover after parsing attributes in process `syz.4.356'. [ 88.422033][ T7281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.360'. [ 88.454562][ T7281] 8021q: VLANs not supported on ip6_vti0 [ 88.705413][ T7283] netlink: 12 bytes leftover after parsing attributes in process `syz.2.361'. [ 88.724681][ T7283] SET target dimension over the limit! [ 88.830427][ T7294] bridge_slave_0: left allmulticast mode [ 88.852291][ T7294] bridge_slave_0: left promiscuous mode [ 88.897223][ T7294] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.965861][ T7294] bridge_slave_1: left allmulticast mode [ 88.972635][ T7294] bridge_slave_1: left promiscuous mode [ 89.009739][ T7294] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.041509][ T7294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.073877][ T7294] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.107164][ T7294] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.127444][ T7294] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.232342][ T7303] x_tables: duplicate underflow at hook 3 [ 89.571111][ T7321] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 89.751170][ T7330] trusted_key: syz.1.377 sent an empty control message without MSG_MORE. [ 90.399033][ T7367] nbd: device at index 64 is going down [ 91.090609][ T7382] syzkaller1: entered promiscuous mode [ 91.106316][ T7382] syzkaller1: entered allmulticast mode [ 91.534716][ T7402] netlink: 'syz.1.394': attribute type 10 has an invalid length. [ 91.554310][ T7399] netlink: 'syz.1.394': attribute type 10 has an invalid length. [ 91.671087][ T7406] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 91.693152][ T7406] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 91.738287][ T7409] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 92.475775][ T7434] xt_ipcomp: unknown flags F7 [ 92.656636][ T7443] __nla_validate_parse: 9 callbacks suppressed [ 92.656656][ T7443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.406'. [ 92.726305][ T7451] netlink: 'syz.4.409': attribute type 1 has an invalid length. [ 92.734000][ T7451] netlink: 228 bytes leftover after parsing attributes in process `syz.4.409'. [ 92.743165][ T7451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.409'. [ 92.768433][ T7453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.406'. [ 93.533126][ T7462] netlink: 28 bytes leftover after parsing attributes in process `syz.1.410'. [ 93.770913][ T7452] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.148350][ T7453] batadv1: entered allmulticast mode [ 94.161717][ T7460] veth5: entered allmulticast mode [ 94.215692][ T7464] syz_tun: left promiscuous mode [ 94.233104][ T7464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.260271][ T7464] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.272672][ T7464] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 94.311303][ T7462] lo: left promiscuous mode [ 94.340251][ T7462] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 94.379762][ T7489] batadv_slave_1: entered promiscuous mode [ 94.429496][ T7488] batadv_slave_1: left promiscuous mode [ 94.738812][ T7524] netlink: 28 bytes leftover after parsing attributes in process `syz.0.424'. [ 94.747976][ T7524] netlink: 36 bytes leftover after parsing attributes in process `syz.0.424'. [ 94.767347][ T7526] netlink: 28 bytes leftover after parsing attributes in process `syz.0.424'. [ 94.794449][ T7526] netlink: 36 bytes leftover after parsing attributes in process `syz.0.424'. [ 94.982098][ T7538] netlink: 52 bytes leftover after parsing attributes in process `syz.0.426'. [ 95.680877][ T7555] netlink: zone id is out of range [ 95.691180][ T7560] netlink: 'syz.0.427': attribute type 72 has an invalid length. [ 95.707849][ T7555] netlink: zone id is out of range [ 95.713026][ T7555] netlink: zone id is out of range [ 95.728398][ T7555] netlink: del zone limit has 8 unknown bytes [ 95.811869][ T7567] netlink: 'syz.1.432': attribute type 16 has an invalid length. [ 95.831050][ T7567] netlink: 'syz.1.432': attribute type 17 has an invalid length. [ 95.891901][ T7567] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 95.947010][ T7576] Cannot find add_set index 0 as target [ 96.060150][ T7578] netlink: 'syz.0.436': attribute type 10 has an invalid length. [ 96.101316][ T7578] team0: entered promiscuous mode [ 96.112328][ T7578] team_slave_0: entered promiscuous mode [ 96.118336][ T7578] team_slave_1: entered promiscuous mode [ 96.151659][ T7589] netlink: 'syz.3.438': attribute type 1 has an invalid length. [ 96.171820][ T7589] bond1: entered promiscuous mode [ 96.177321][ T7589] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.258841][ T7580] batadv1: entered allmulticast mode [ 96.266163][ T7580] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 96.285674][ T7580] bond1: (slave batadv1): making interface the new active one [ 96.293655][ T7580] batadv1: entered promiscuous mode [ 96.325177][ T7580] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 96.663351][ T7622] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 96.829222][ T7635] netlink: 'syz.2.454': attribute type 16 has an invalid length. [ 96.837337][ T7635] netlink: 'syz.2.454': attribute type 17 has an invalid length. [ 96.850443][ T7635] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 96.991701][ T7641] netlink: 'syz.3.456': attribute type 1 has an invalid length. [ 97.070282][ T7641] bond2: entered promiscuous mode [ 97.077088][ T7641] 8021q: adding VLAN 0 to HW filter on device bond2 [ 97.111617][ T7647] bond2: (slave veth5): making interface the new active one [ 97.111705][ T7646] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 97.119244][ T7647] veth5: entered promiscuous mode [ 97.136662][ T7647] bond2: (slave veth5): Enslaving as an active interface with an up link [ 97.211499][ T7650] netlink: 'syz.2.458': attribute type 10 has an invalid length. [ 97.250183][ T7650] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 97.602938][ T7686] netlink: 'syz.0.470': attribute type 12 has an invalid length. [ 97.611788][ T7686] netlink: 'syz.0.470': attribute type 11 has an invalid length. [ 97.682342][ T7690] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.769508][ T7690] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.833081][ T7690] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.898489][ T7690] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.958694][ T7690] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.973054][ T7690] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.992169][ T7690] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.009867][ T7690] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.390863][ T7712] sctp: [Deprecated]: syz.2.476 (pid 7712) Use of struct sctp_assoc_value in delayed_ack socket option. [ 98.390863][ T7712] Use struct sctp_sack_info instead [ 98.474155][ T7717] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 98.588426][ T7724] __nla_validate_parse: 24 callbacks suppressed [ 98.588446][ T7724] netlink: 188 bytes leftover after parsing attributes in process `syz.4.481'. [ 98.609195][ T7724] netlink: 'syz.4.481': attribute type 1 has an invalid length. [ 98.712598][ T7728] netlink: 4 bytes leftover after parsing attributes in process `syz.0.482'. [ 98.755471][ T7730] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 99.515717][ T7754] netlink: 308 bytes leftover after parsing attributes in process `syz.2.488'. [ 99.608172][ T7760] netlink: 'syz.3.489': attribute type 10 has an invalid length. [ 99.648254][ T7760] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 99.943701][ T7773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.492'. [ 100.115437][ T7784] bridge0: port 1(gretap0) entered blocking state [ 100.159680][ T7784] bridge0: port 1(gretap0) entered disabled state [ 100.182812][ T7784] gretap0: entered allmulticast mode [ 100.209724][ T7784] gretap0: entered promiscuous mode [ 100.273097][ T7784] bridge0: port 1(gretap0) entered blocking state [ 100.279661][ T7784] bridge0: port 1(gretap0) entered forwarding state [ 100.345892][ T7797] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 100.392910][ T7797] ip6erspan0: left promiscuous mode [ 100.422120][ T7795] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744071562067969) [ 100.439301][ T7795] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 100.566594][ T7804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.501'. [ 100.678822][ T7809] netlink: 'syz.4.503': attribute type 9 has an invalid length. [ 101.023283][ T7832] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 101.384127][ T7862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.518'. [ 101.603342][ T7875] netlink: 52 bytes leftover after parsing attributes in process `syz.1.522'. [ 101.618074][ T7881] netlink: 152 bytes leftover after parsing attributes in process `syz.4.521'. [ 102.038823][ T7908] pim6reg: entered allmulticast mode [ 104.819870][ T7911] netlink: 'syz.2.534': attribute type 1 has an invalid length. [ 105.017059][ T7933] netlink: 'syz.0.541': attribute type 13 has an invalid length. [ 105.027496][ T7931] netlink: 'syz.1.540': attribute type 21 has an invalid length. [ 105.054367][ T7931] netlink: 'syz.1.540': attribute type 1 has an invalid length. [ 105.111768][ T7937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.543'. [ 105.127558][ T7942] netlink: 'syz.1.540': attribute type 21 has an invalid length. [ 105.136278][ T7942] netlink: 'syz.1.540': attribute type 20 has an invalid length. [ 105.487842][ T7968] vlan1: entered promiscuous mode [ 105.612427][ T7971] netlink: 'syz.0.552': attribute type 1 has an invalid length. [ 105.952058][ T7997] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 106.029025][ T8003] netlink: 248 bytes leftover after parsing attributes in process `syz.1.564'. [ 106.038227][ T8003] NCSI netlink: No device for ifindex 0 [ 106.053069][ T8004] netlink: 'syz.2.562': attribute type 1 has an invalid length. [ 106.096102][ T8004] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.120525][ T8003] netlink: 'syz.1.564': attribute type 1 has an invalid length. [ 106.139273][ T8006] bond1: (slave gretap1): making interface the new active one [ 106.153710][ T8006] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 106.220188][ T8008] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.238056][ T8008] bond0: (slave bond1): making interface the new active one [ 106.262507][ T8008] bond0: (slave bond1): Enslaving as an active interface with an up link [ 106.316387][ T8016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.565'. [ 106.327197][ T8016] netlink: 24 bytes leftover after parsing attributes in process `syz.4.565'. [ 106.673909][ T8031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.569'. [ 107.139274][ T8068] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 107.576581][ T8086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.583'. [ 107.629235][ T8055] netlink: 44 bytes leftover after parsing attributes in process `syz.2.575'. [ 107.650924][ T8055] netlink: 43 bytes leftover after parsing attributes in process `syz.2.575'. [ 107.662312][ T8055] netlink: 'syz.2.575': attribute type 6 has an invalid length. [ 107.673239][ T8055] netlink: 43 bytes leftover after parsing attributes in process `syz.2.575'. [ 108.010244][ T8097] netlink: 7084 bytes leftover after parsing attributes in process `syz.0.586'. [ 108.170377][ T8100] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.473764][ T8095] caif0: Master is either lo or non-ether device [ 108.612529][ T8121] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 108.751813][ T8135] xt_CT: You must specify a L4 protocol and not use inversions on it [ 108.779179][ T8139] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 109.019785][ T8151] xt_time: unknown flags 0x4 [ 109.976300][ T8236] validate_nla: 4 callbacks suppressed [ 109.976322][ T8236] netlink: 'syz.3.628': attribute type 4 has an invalid length. [ 110.020904][ T8241] netlink: 'syz.2.629': attribute type 3 has an invalid length. [ 110.114310][ T8246] __nla_validate_parse: 12 callbacks suppressed [ 110.114329][ T8246] netlink: 3 bytes leftover after parsing attributes in process `syz.3.630'. [ 110.133412][ T8246] batadv2: entered allmulticast mode [ 110.234568][ T8258] netlink: 56 bytes leftover after parsing attributes in process `syz.2.632'. [ 110.328433][ T8262] FAULT_INJECTION: forcing a failure. [ 110.328433][ T8262] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 110.360767][ T8262] CPU: 1 UID: 0 PID: 8262 Comm: syz.3.634 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 110.360797][ T8262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 110.360810][ T8262] Call Trace: [ 110.360817][ T8262] [ 110.360824][ T8262] dump_stack_lvl+0x241/0x360 [ 110.360858][ T8262] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.360878][ T8262] ? __pfx__printk+0x10/0x10 [ 110.360905][ T8262] should_fail_ex+0x424/0x570 [ 110.360929][ T8262] _copy_from_iter+0x211/0x1c70 [ 110.360952][ T8262] ? alloc_pages_mpol+0x4e6/0x690 [ 110.360980][ T8262] ? __pfx__copy_from_iter+0x10/0x10 [ 110.361001][ T8262] ? set_page_refcounted+0xa1/0x1e0 [ 110.361021][ T8262] ? alloc_pages_noprof+0x136/0x190 [ 110.361039][ T8262] ? page_copy_sane+0x46/0x260 [ 110.361057][ T8262] copy_page_from_iter+0x7a/0x100 [ 110.361076][ T8262] tun_get_user+0x1f6c/0x47c0 [ 110.361098][ T8262] ? tun_get_user+0x852/0x47c0 [ 110.361127][ T8262] ? aa_file_perm+0x139/0xf60 [ 110.361148][ T8262] ? aa_file_perm+0x3f1/0xf60 [ 110.361167][ T8262] ? __pfx_tun_get_user+0x10/0x10 [ 110.361199][ T8262] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 110.361232][ T8262] ? tun_get+0x1e/0x2f0 [ 110.361251][ T8262] ? tun_get+0x1e/0x2f0 [ 110.361268][ T8262] ? tun_get+0x27d/0x2f0 [ 110.361287][ T8262] tun_chr_write_iter+0x10d/0x1f0 [ 110.361308][ T8262] vfs_write+0x70f/0xd10 [ 110.361329][ T8262] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 110.361349][ T8262] ? __pfx_vfs_write+0x10/0x10 [ 110.361367][ T8262] ? __fget_files+0x2a/0x420 [ 110.361390][ T8262] ? __fget_files+0x2a/0x420 [ 110.361415][ T8262] ksys_write+0x19d/0x2d0 [ 110.361433][ T8262] ? __pfx_ksys_write+0x10/0x10 [ 110.361454][ T8262] ? do_syscall_64+0xb6/0x230 [ 110.361476][ T8262] do_syscall_64+0xf3/0x230 [ 110.361496][ T8262] ? clear_bhb_loop+0x45/0xa0 [ 110.361514][ T8262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.361533][ T8262] RIP: 0033:0x7f8ff918bc1f [ 110.361551][ T8262] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 110.361564][ T8262] RSP: 002b:00007f8ffa097000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 110.361582][ T8262] RAX: ffffffffffffffda RBX: 00007f8ff93a5fa0 RCX: 00007f8ff918bc1f [ 110.361594][ T8262] RDX: 000000000000003e RSI: 0000200000000080 RDI: 00000000000000c8 [ 110.361605][ T8262] RBP: 00007f8ffa097090 R08: 0000000000000000 R09: 0000000000000000 [ 110.361614][ T8262] R10: 000000000000003e R11: 0000000000000293 R12: 0000000000000001 [ 110.361624][ T8262] R13: 0000000000000001 R14: 00007f8ff93a5fa0 R15: 00007ffccffc9248 [ 110.361646][ T8262] [ 110.993046][ T8298] ipt_rpfilter: unknown options [ 111.026892][ T8298] netlink: 28 bytes leftover after parsing attributes in process `syz.4.641'. [ 111.299338][ T8315] netlink: 24 bytes leftover after parsing attributes in process `syz.0.646'. [ 111.309532][ T8315] netlink: 'syz.0.646': attribute type 11 has an invalid length. [ 111.317357][ T8315] netlink: 44 bytes leftover after parsing attributes in process `syz.0.646'. [ 111.463660][ T8326] IPv6: sit1: Disabled Multicast RS [ 111.512047][ T8326] sit1: entered allmulticast mode [ 111.614442][ T5148] Bluetooth: hci4: command 0x0405 tx timeout [ 111.642386][ T8331] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 111.712145][ T8339] netlink: 8 bytes leftover after parsing attributes in process `syz.4.651'. [ 111.732492][ T8309] netlink: 44 bytes leftover after parsing attributes in process `syz.1.643'. [ 111.903490][ T8346] netlink: 4 bytes leftover after parsing attributes in process `syz.4.651'. [ 111.973511][ T8351] netlink: 'syz.2.653': attribute type 2 has an invalid length. [ 112.085568][ T8356] netlink: 12 bytes leftover after parsing attributes in process `syz.1.654'. [ 112.095763][ T8356] netlink: 12 bytes leftover after parsing attributes in process `syz.1.654'. [ 112.198848][ T8358] xt_hashlimit: size too large, truncated to 1048576 [ 113.050706][ T8413] syzkaller1: entered promiscuous mode [ 113.058608][ T8413] syzkaller1: entered allmulticast mode [ 113.119147][ T8422] netlink: 'syz.2.675': attribute type 5 has an invalid length. [ 113.581547][ T1207] IPVS: starting estimator thread 0... [ 113.588068][ T8447] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 113.674527][ T8455] IPVS: using max 35 ests per chain, 84000 per kthread [ 113.792817][ T8445] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.814970][ T8445] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.844665][ T8445] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 113.844798][ T8473] openvswitch: netlink: Flow actions attr not present in new flow. [ 113.895381][ T8445] bond0 (unregistering): Released all slaves [ 113.931082][ T8456] tipc: Started in network mode [ 113.937807][ T8456] tipc: Node identity 0e46065a7705, cluster identity 4711 [ 113.950289][ T8456] tipc: Enabled bearer , priority 0 [ 113.959093][ T8476] xt_CT: No such helper "pptp" [ 113.985252][ T8470] netlink: 'syz.3.682': attribute type 21 has an invalid length. [ 113.993211][ T8470] netlink: 'syz.3.682': attribute type 20 has an invalid length. [ 114.001337][ T8464] +: renamed from syzkaller0 [ 114.013864][ T8464] tipc: Disabling bearer [ 114.276900][ T8496] batadv1: entered promiscuous mode [ 114.282282][ T8496] batadv1: entered allmulticast mode [ 114.708337][ T137] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 114.801810][ T8511] netlink: 'syz.3.697': attribute type 1 has an invalid length. [ 114.835747][ T8511] netlink: 'syz.3.697': attribute type 2 has an invalid length. [ 115.201207][ T8530] __nla_validate_parse: 12 callbacks suppressed [ 115.201227][ T8530] netlink: 88 bytes leftover after parsing attributes in process `syz.0.702'. [ 115.282246][ T8530] netlink: 20 bytes leftover after parsing attributes in process `syz.0.702'. [ 115.314630][ T8530] netlink: 'syz.0.702': attribute type 11 has an invalid length. [ 115.462885][ T8541] tipc: Started in network mode [ 115.474516][ T8541] tipc: Node identity ac14140f, cluster identity 4711 [ 115.482461][ T8541] tipc: New replicast peer: 255.255.255.255 [ 115.497306][ T8541] tipc: Enabled bearer , priority 10 [ 115.507490][ T8543] netlink: 'syz.1.706': attribute type 2 has an invalid length. [ 115.520013][ T8549] netlink: 'syz.1.706': attribute type 2 has an invalid length. [ 115.554710][ T8541] netlink: 1319 bytes leftover after parsing attributes in process `syz.4.705'. [ 115.567839][ T8548] tun0: tun_chr_ioctl cmd 1074025677 [ 115.577395][ T8548] tun0: linktype set to 1 [ 115.606164][ T8551] xt_CT: You must specify a L4 protocol and not use inversions on it [ 115.608364][ T8548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.708'. [ 115.732180][ T8564] macsec0: entered promiscuous mode [ 115.741286][ T8564] macsec0: entered allmulticast mode [ 115.747216][ T8564] veth1_macvtap: entered allmulticast mode [ 116.002764][ T8582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.717'. [ 116.110627][ T8591] netlink: 16 bytes leftover after parsing attributes in process `syz.4.720'. [ 116.119885][ T8591] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 116.136401][ T8584] netlink: 40 bytes leftover after parsing attributes in process `syz.2.717'. [ 116.186277][ T8596] bridge_slave_0: left allmulticast mode [ 116.192162][ T8596] bridge_slave_0: left promiscuous mode [ 116.198161][ T8596] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.211859][ T8596] bridge_slave_1: left allmulticast mode [ 116.218482][ T8596] bridge_slave_1: left promiscuous mode [ 116.224694][ T8596] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.235413][ T8596] bond0: (slave bond_slave_0): Releasing backup interface [ 116.243105][ T8597] netlink: 'syz.4.721': attribute type 10 has an invalid length. [ 116.253983][ T8596] bond0: (slave bond_slave_1): Releasing backup interface [ 116.267698][ T8596] team0: Port device team_slave_0 removed [ 116.276113][ T8596] team0: Port device team_slave_1 removed [ 116.282295][ T8596] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.290461][ T8596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.305326][ T8597] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 116.463377][ T8615] netlink: 12 bytes leftover after parsing attributes in process `syz.2.727'. [ 116.482146][ T8615] tipc: Started in network mode [ 116.488819][ T8615] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 116.498356][ T8615] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 116.506937][ T8615] tipc: Enabled bearer , priority 10 [ 116.530474][ T8620] netlink: 'syz.4.728': attribute type 41 has an invalid length. [ 116.538503][ T8620] netlink: 40 bytes leftover after parsing attributes in process `syz.4.728'. [ 116.615862][ T47] tipc: Node number set to 2886997007 [ 116.705263][ T8641] netlink: 40 bytes leftover after parsing attributes in process `syz.3.733'. [ 116.721106][ T8636] vxcan1: tx drop: invalid sa for name 0xfffffffffffffffe [ 116.843052][ T8648] bridge0: port 1(gretap0) entered blocking state [ 116.874697][ T8648] bridge0: port 1(gretap0) entered disabled state [ 116.881261][ T8648] gretap0: entered allmulticast mode [ 116.891470][ T8648] gretap0: entered promiscuous mode [ 117.116497][ T8671] xt_hashlimit: size too large, truncated to 1048576 [ 117.129081][ T8674] netlink: 'syz.4.745': attribute type 6 has an invalid length. [ 117.276792][ T8687] bridge: RTM_NEWNEIGH with invalid ether address [ 117.306823][ T8687] geneve2: entered promiscuous mode [ 117.329715][ T8687] geneve2: entered allmulticast mode [ 117.536925][ T8697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: macsec1 [ 117.552496][ T8697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.567040][ T8697] dummy0: entered promiscuous mode [ 117.575267][ T8697] dummy0: left promiscuous mode [ 117.624556][ T5882] tipc: Node number set to 1 [ 117.831331][ T8705] IPv6: NLM_F_CREATE should be specified when creating new route [ 118.105043][ T8720] netlink: 'syz.3.759': attribute type 1 has an invalid length. [ 118.523446][ T8741] x_tables: duplicate underflow at hook 2 [ 118.524516][ T8743] netlink: 'syz.4.763': attribute type 1 has an invalid length. [ 118.596533][ T8750] netlink: 'syz.4.763': attribute type 10 has an invalid length. [ 118.625128][ T8750] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 118.894301][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 118.954303][ T8772] sctp: [Deprecated]: syz.2.773 (pid 8772) Use of struct sctp_assoc_value in delayed_ack socket option. [ 118.954303][ T8772] Use struct sctp_sack_info instead [ 119.201277][ T8785] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 119.287956][ T8787] gretap0: left allmulticast mode [ 119.293528][ T8787] gretap0: left promiscuous mode [ 119.302219][ T8787] bridge0: port 1(gretap0) entered disabled state [ 119.628363][ T8807] x_tables: duplicate underflow at hook 1 [ 119.889510][ T8814] team0: Port device virt_wifi0 added [ 120.013959][ T8822] netlink: 'syz.3.788': attribute type 3 has an invalid length. [ 120.254667][ T8834] netlink: 'syz.3.791': attribute type 1 has an invalid length. [ 120.297325][ T8834] bond3: entered promiscuous mode [ 120.309574][ T8834] 8021q: adding VLAN 0 to HW filter on device bond3 [ 120.314651][ T8840] __nla_validate_parse: 17 callbacks suppressed [ 120.314676][ T8840] netlink: 12 bytes leftover after parsing attributes in process `syz.2.792'. [ 120.333289][ T8840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.792'. [ 120.403970][ T8839] 8021q: adding VLAN 0 to HW filter on device bond3 [ 120.487390][ T8839] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 120.548987][ T8856] netlink: 16 bytes leftover after parsing attributes in process `syz.3.791'. [ 120.561471][ T8839] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 120.667964][ T8839] bond3: (slave ip6gre1): making interface the new active one [ 120.686212][ T8839] ip6gre1: entered promiscuous mode [ 120.697631][ T8856] netlink: 'syz.3.791': attribute type 9 has an invalid length. [ 120.715365][ T8856] netlink: 28 bytes leftover after parsing attributes in process `syz.3.791'. [ 120.747775][ T8839] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 120.833043][ T8868] netlink: 132 bytes leftover after parsing attributes in process `syz.1.799'. [ 120.960564][ T8871] syzkaller0: entered promiscuous mode [ 120.967503][ T8871] syzkaller0: entered allmulticast mode [ 121.240691][ T8879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.803'. [ 121.263342][ T8879] netlink: 12 bytes leftover after parsing attributes in process `syz.0.803'. [ 121.497882][ T8890] netlink: 16 bytes leftover after parsing attributes in process `syz.4.806'. [ 121.626187][ T8899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.810'. [ 121.645050][ T8899] ip6_vti0: entered promiscuous mode [ 121.727815][ T8904] netlink: 32 bytes leftover after parsing attributes in process `syz.4.813'. [ 121.739208][ T8904] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 121.917077][ T8917] bridge0: entered promiscuous mode [ 121.922730][ T8917] vlan2: entered promiscuous mode [ 121.952687][ T8910] xt_recent: Unsupported userspace flags (00000042) [ 122.036311][ T8921] netlink: 'syz.1.817': attribute type 23 has an invalid length. [ 122.046837][ T8926] tipc: New replicast peer: 255.255.255.255 [ 122.054110][ T8926] tipc: Enabled bearer , priority 10 [ 122.271556][ T8944] netlink: zone id is out of range [ 122.299533][ T8944] netlink: zone id is out of range [ 122.305096][ T8944] netlink: zone id is out of range [ 122.310238][ T8944] netlink: zone id is out of range [ 122.337009][ T8944] netlink: zone id is out of range [ 122.357015][ T8944] netlink: zone id is out of range [ 122.366390][ T8944] netlink: del zone limit has 4 unknown bytes [ 122.575466][ T8959] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 122.598323][ T8959] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 122.634796][ T8962] netlink: 'syz.3.831': attribute type 1 has an invalid length. [ 122.897955][ T8965] netlink: 'syz.0.833': attribute type 303 has an invalid length. [ 123.458925][ T9011] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 124.548930][ T9079] netlink: 'syz.3.864': attribute type 3 has an invalid length. [ 124.571055][ T9079] netlink: 'syz.3.864': attribute type 2 has an invalid length. [ 124.612071][ T9079] batadv_slave_1: entered promiscuous mode [ 124.618635][ T9079] batadv_slave_1: left promiscuous mode [ 124.886961][ T9106] netlink: 'syz.0.871': attribute type 29 has an invalid length. [ 124.895771][ T9108] netlink: 'syz.2.872': attribute type 1 has an invalid length. [ 124.907151][ T9106] netlink: 'syz.0.871': attribute type 29 has an invalid length. [ 125.131326][ T9121] can: request_module (can-proto-0) failed. [ 125.156573][ T9126] : entered promiscuous mode [ 125.288135][ T9131] IPVS: ip_vs_add_dest(): server weight less than zero [ 125.301698][ T5882] IPVS: starting estimator thread 0... [ 125.424760][ T9132] IPVS: using max 51 ests per chain, 122400 per kthread [ 125.943718][ T5881] IPVS: starting estimator thread 0... [ 125.998173][ T9158] __nla_validate_parse: 28 callbacks suppressed [ 125.998188][ T9158] netlink: 36 bytes leftover after parsing attributes in process `syz.4.884'. [ 126.036440][ T9154] IPVS: using max 39 ests per chain, 93600 per kthread [ 126.087993][ T9156] netlink: 'syz.2.882': attribute type 12 has an invalid length. [ 126.113869][ T9163] bridge2: entered promiscuous mode [ 126.142739][ T5881] IPVS: starting estimator thread 0... [ 126.260937][ T9156] bond0 (unregistering): Released all slaves [ 126.284307][ T9168] IPVS: using max 35 ests per chain, 84000 per kthread [ 126.418280][ T9181] netlink: 8 bytes leftover after parsing attributes in process `syz.4.888'. [ 126.438694][ T9181] netlink: 24 bytes leftover after parsing attributes in process `syz.4.888'. [ 126.519776][ T9185] netlink: 28 bytes leftover after parsing attributes in process `syz.2.889'. [ 126.639383][ T9185] netlink: 'syz.2.889': attribute type 10 has an invalid length. [ 126.764787][ T9185] batman_adv: batadv0: Adding interface: team0 [ 126.780882][ T9185] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.828607][ T9185] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 126.929206][ T9202] net_ratelimit: 3 callbacks suppressed [ 126.929226][ T9202] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 127.251464][ T9217] netlink: 'syz.0.895': attribute type 29 has an invalid length. [ 127.290595][ T9217] netlink: 16 bytes leftover after parsing attributes in process `syz.0.895'. [ 127.331030][ T9217] netlink: 60 bytes leftover after parsing attributes in process `syz.0.895'. [ 127.417155][ T9217] IPv6: sit1: Disabled Multicast RS [ 127.528660][ T9227] netlink: 'syz.0.895': attribute type 29 has an invalid length. [ 127.694294][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 127.781181][ T9232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.897'. [ 127.800978][ T9232] gretap0: entered promiscuous mode [ 127.821195][ T9232] macvtap1: entered promiscuous mode [ 127.834373][ T9232] macvtap1: entered allmulticast mode [ 127.839795][ T9232] gretap0: entered allmulticast mode [ 127.881500][ T9232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.897'. [ 128.252176][ T9247] netlink: 'syz.0.901': attribute type 5 has an invalid length. [ 128.479238][ T9264] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 128.480792][ T9261] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 128.794549][ T9273] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 128.890245][ T9275] ipip0: entered promiscuous mode [ 129.251100][ T9290] xt_hashlimit: size too large, truncated to 1048576 [ 129.332633][ T9298] x_tables: duplicate underflow at hook 3 [ 129.351786][ T9297] bridge_slave_1: entered promiscuous mode [ 129.377655][ T9297] netlink: 4 bytes leftover after parsing attributes in process `syz.4.916'. [ 129.542519][ T9297] bridge_slave_1 (unregistering): left promiscuous mode [ 129.589986][ T9306] IPVS: Unknown mcast interface: vcan0 [ 129.777980][ T9315] netlink: 'syz.3.921': attribute type 1 has an invalid length. [ 129.785789][ T9315] netlink: 'syz.3.921': attribute type 2 has an invalid length. [ 130.308729][ T9325] netlink: 232 bytes leftover after parsing attributes in process `syz.1.923'. [ 130.368458][ T9325] syz_tun: entered allmulticast mode [ 130.421546][ T9329] syz_tun: left allmulticast mode [ 130.429733][ T9328] lo speed is unknown, defaulting to 1000 [ 130.470997][ T9328] lo speed is unknown, defaulting to 1000 [ 130.481590][ T9328] lo speed is unknown, defaulting to 1000 [ 130.510309][ T9328] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 130.553180][ T9328] lo speed is unknown, defaulting to 1000 [ 130.563734][ T9328] lo speed is unknown, defaulting to 1000 [ 130.581523][ T9336] batadv_slave_0: entered promiscuous mode [ 130.605812][ T9328] lo speed is unknown, defaulting to 1000 [ 130.612443][ T9328] lo speed is unknown, defaulting to 1000 [ 130.645311][ T9336] netlink: 'syz.1.925': attribute type 4 has an invalid length. [ 130.658115][ T9328] lo speed is unknown, defaulting to 1000 [ 130.675673][ T9328] lo speed is unknown, defaulting to 1000 [ 130.694325][ T9328] lo speed is unknown, defaulting to 1000 [ 130.901284][ T9343] pimreg: entered allmulticast mode [ 130.946388][ T9355] batadv_slave_0: entered allmulticast mode [ 131.329517][ T9380] __nla_validate_parse: 5 callbacks suppressed [ 131.329536][ T9380] netlink: 4 bytes leftover after parsing attributes in process `syz.4.938'. [ 131.350301][ T9380] netlink: 4 bytes leftover after parsing attributes in process `syz.4.938'. [ 131.371911][ T9380] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 131.480438][ T9383] netlink: 4 bytes leftover after parsing attributes in process `syz.2.941'. [ 131.613158][ T9387] syzkaller0: entered promiscuous mode [ 131.622522][ T9387] syzkaller0: entered allmulticast mode [ 131.828757][ T9400] netlink: 48 bytes leftover after parsing attributes in process `syz.3.947'. [ 131.855688][ T9403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.948'. [ 131.880369][ T9403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.948'. [ 132.051990][ T9408] netlink: 72 bytes leftover after parsing attributes in process `syz.1.948'. [ 132.061206][ T9408] netlink: 12 bytes leftover after parsing attributes in process `syz.1.948'. [ 132.819258][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.313536][ T9401] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 133.329546][ T9404] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 133.365527][ T9408] netlink: 763 bytes leftover after parsing attributes in process `syz.1.948'. [ 133.596763][ T9439] netlink: 28 bytes leftover after parsing attributes in process `syz.2.955'. [ 133.659623][ T9443] lo speed is unknown, defaulting to 1000 [ 133.673623][ T9447] lo: entered allmulticast mode [ 133.679199][ T9447] lo: left allmulticast mode [ 134.227521][ T9493] lo speed is unknown, defaulting to 1000 [ 134.369786][ T9498] lo speed is unknown, defaulting to 1000 [ 134.563231][ T9522] bridge0: port 4(vlan2) entered blocking state [ 134.578085][ T9522] bridge0: port 4(vlan2) entered disabled state [ 134.603082][ T9522] vlan2: entered allmulticast mode [ 134.610341][ T9522] syz_tun: entered allmulticast mode [ 134.652741][ T9522] vlan2: entered promiscuous mode [ 134.661667][ T9522] syz_tun: entered promiscuous mode [ 134.672326][ T9522] bridge0: port 4(vlan2) entered blocking state [ 134.678737][ T9522] bridge0: port 4(vlan2) entered forwarding state [ 136.371764][ T9603] __nla_validate_parse: 45 callbacks suppressed [ 136.371783][ T9603] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1000'. [ 136.656567][ T9622] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1004'. [ 136.740045][ T9633] netlink: 'syz.2.1004': attribute type 10 has an invalid length. [ 136.925964][ T9646] netlink: 209672 bytes leftover after parsing attributes in process `syz.2.1011'. [ 136.957954][ T9649] netlink: 'syz.2.1011': attribute type 1 has an invalid length. [ 136.968326][ T9649] netlink: 208000 bytes leftover after parsing attributes in process `syz.2.1011'. [ 136.998578][ T9649] netlink: 'syz.2.1011': attribute type 2 has an invalid length. [ 137.011810][ T9649] netlink: 'syz.2.1011': attribute type 1 has an invalid length. [ 137.025117][ T9656] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1010'. [ 137.039401][ T9656] netlink: 'syz.0.1010': attribute type 7 has an invalid length. [ 137.051772][ T9656] netlink: 'syz.0.1010': attribute type 8 has an invalid length. [ 137.112210][ T9656] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1010'. [ 137.179245][ T9663] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1014'. [ 137.215959][ T9664] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1013'. [ 137.225154][ T9664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1013'. [ 137.256304][ T9657] syzkaller0: entered promiscuous mode [ 137.260328][ T9667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1015'. [ 137.271437][ T9657] syzkaller0: entered allmulticast mode [ 137.832429][ T9686] IPVS: set_ctl: invalid protocol: 2 172.20.20.14:20004 [ 141.066273][ T9700] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 141.075089][ T9701] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 141.111856][ T9676] lo speed is unknown, defaulting to 1000 [ 141.448055][ T9726] x_tables: duplicate underflow at hook 1 [ 141.554923][ T9739] xt_bpf: check failed: parse error [ 141.871518][ T9753] __nla_validate_parse: 4 callbacks suppressed [ 141.871538][ T9753] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1037'. [ 141.892646][ T9754] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1039'. [ 141.894091][ T9756] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1040'. [ 141.946911][ T9761] netlink: 'syz.2.1040': attribute type 1 has an invalid length. [ 141.949965][ T9754] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1039'. [ 141.955296][ T9761] netlink: 'syz.2.1040': attribute type 4 has an invalid length. [ 141.992610][ T9761] netlink: 15363 bytes leftover after parsing attributes in process `syz.2.1040'. [ 142.060036][ T9756] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1040'. [ 142.187611][ T9767] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1044'. [ 142.331353][ T9774] batadv_slave_1: entered promiscuous mode [ 142.340946][ T9774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1035'. [ 142.465679][ T9790] lo speed is unknown, defaulting to 1000 [ 142.554480][ T9795] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1051'. [ 142.572859][ T9792] lo speed is unknown, defaulting to 1000 [ 143.039606][ T9807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1054'. [ 143.537217][ T9831] sctp: [Deprecated]: syz.3.1060 (pid 9831) Use of struct sctp_assoc_value in delayed_ack socket option. [ 143.537217][ T9831] Use struct sctp_sack_info instead [ 143.669414][ T9842] netlink: del zone limit has 4 unknown bytes [ 143.690925][ T9838] sctp: [Deprecated]: syz.3.1060 (pid 9838) Use of int in max_burst socket option deprecated. [ 143.690925][ T9838] Use struct sctp_assoc_value instead [ 143.728013][ T9831] bridge0: port 3(gretap0) entered disabled state [ 143.741612][ T9831] ip6_vti0: left promiscuous mode [ 143.762957][ T9831] bridge0: port 4(vlan2) entered disabled state [ 143.787319][ T9846] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 143.820933][ T9831] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.829295][ T9831] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.037345][ T9831] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.048758][ T9831] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.100325][ T9831] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.111142][ T9831] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.120293][ T9831] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.129427][ T9831] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.168123][ T9831] ip6tnl1: left promiscuous mode [ 144.173167][ T9831] ip6tnl1: left allmulticast mode [ 144.182879][ T9831] bond1: left promiscuous mode [ 144.188818][ T9831] batadv1: left promiscuous mode [ 144.197336][ T9831] batadv1: left allmulticast mode [ 144.205677][ T9831] bond2: left promiscuous mode [ 144.210683][ T9831] veth5: left promiscuous mode [ 144.218203][ T9831] bond3: left promiscuous mode [ 144.223061][ T9831] ip6gre1: left promiscuous mode [ 144.241421][ T9831] ipip0: left promiscuous mode [ 144.334693][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 144.813612][ T9892] lo speed is unknown, defaulting to 1000 [ 144.843461][ T9889] netlink: 'syz.1.1075': attribute type 5 has an invalid length. [ 144.853992][ T9890] netlink: 'syz.1.1075': attribute type 21 has an invalid length. [ 144.864043][ T9889] netlink: 'syz.1.1075': attribute type 21 has an invalid length. [ 144.877424][ T9899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: macsec1 [ 144.924018][ T9899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.955072][ T9899] macsec1: entered allmulticast mode [ 144.960423][ T9899] dummy0: entered allmulticast mode [ 145.012954][ T9899] dummy0: left allmulticast mode [ 145.068589][ T9906] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.176136][ T9906] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.242015][ T9906] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.273274][ T9906] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.348627][ T9918] lo speed is unknown, defaulting to 1000 [ 145.527131][ T9929] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 2, id = 0 [ 145.916271][ T9942] netlink: 'syz.0.1085': attribute type 2 has an invalid length. [ 146.117164][ T9934] batadv_slave_0: left promiscuous mode [ 146.135140][ T9934] batadv_slave_0: left allmulticast mode [ 146.161745][ T9934] batadv_slave_1: left promiscuous mode [ 146.279881][ T9934] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.292990][ T9934] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.309332][ T9934] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.318022][ T9934] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.332297][ T9934] geneve2: left promiscuous mode [ 146.338722][ T9934] geneve2: left allmulticast mode [ 146.353004][ T9956] wg1: entered promiscuous mode [ 146.359142][ T9956] wg1: entered allmulticast mode [ 146.495136][ T9962] netlink: 'syz.2.1091': attribute type 1 has an invalid length. [ 147.050975][T10001] lo speed is unknown, defaulting to 1000 [ 147.261066][T10022] __nla_validate_parse: 13 callbacks suppressed [ 147.261085][T10022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1108'. [ 147.281713][T10022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1108'. [ 147.292511][T10022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1108'. [ 147.651828][T10055] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 147.760010][T10065] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.760068][T10066] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1123'. [ 147.769002][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.832017][T10068] mac80211_hwsim hwsim11 : renamed from wlan1 (while UP) [ 147.854467][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.863215][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.115281][T10083] netlink: 'syz.3.1125': attribute type 8 has an invalid length. [ 148.219107][T10079] lo speed is unknown, defaulting to 1000 [ 148.615830][T10104] netlink: 'syz.4.1131': attribute type 4 has an invalid length. [ 148.687467][T10111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1133'. [ 148.708701][T10109] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1134'. [ 148.849299][T10117] openvswitch: netlink: Message has 8 unknown bytes. [ 148.900770][T10117] syzkaller0: left promiscuous mode [ 148.920200][T10117] syzkaller0: left allmulticast mode [ 148.951083][T10123] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1138'. [ 148.973869][T10123] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1138'. [ 149.050336][T10123] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1138'. [ 149.442116][T10159] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1145'. [ 150.999516][T10161] vti0: entered promiscuous mode [ 151.112535][T10190] tipc: Enabled bearer , priority 0 [ 151.210257][T10190] syzkaller0: entered promiscuous mode [ 151.220120][T10190] syzkaller0: entered allmulticast mode [ 151.229803][T10190] tipc: Resetting bearer [ 151.271205][T10189] tipc: Resetting bearer [ 152.017061][ T6140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.025978][ T1094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.034327][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.678016][T10189] tipc: Disabling bearer [ 152.832711][T10232] netlink: 'syz.1.1166': attribute type 10 has an invalid length. [ 153.021628][T10249] xt_TPROXY: Can be used only with -p tcp or -p udp [ 153.076745][T10254] x_tables: duplicate underflow at hook 1 [ 153.170833][T10256] __nla_validate_parse: 3 callbacks suppressed [ 153.170849][T10256] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1176'. [ 153.239316][T10266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1173'. [ 153.309875][T10263] netlink: 'syz.4.1175': attribute type 1 has an invalid length. [ 153.313333][T10269] lo speed is unknown, defaulting to 1000 [ 153.335664][T10263] netlink: 208292 bytes leftover after parsing attributes in process `syz.4.1175'. [ 153.348922][T10268] lo speed is unknown, defaulting to 1000 [ 153.415714][T10263] netlink: 'syz.4.1175': attribute type 2 has an invalid length. [ 153.428241][T10263] netlink: 'syz.4.1175': attribute type 1 has an invalid length. [ 153.492826][T10281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.564625][T10283] syzkaller1: entered promiscuous mode [ 153.575706][T10283] syzkaller1: entered allmulticast mode [ 153.593633][T10283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1180'. [ 153.619498][T10283] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1180'. [ 153.652854][T10283] gretap1: entered promiscuous mode [ 153.854384][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.934532][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.056321][T10308] lo speed is unknown, defaulting to 1000 [ 154.465185][T10319] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1190'. [ 154.525372][T10319] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 154.625860][T10326] lo speed is unknown, defaulting to 1000 [ 154.695210][T10335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1193'. [ 154.704588][T10335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1193'. [ 154.713483][T10335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1193'. [ 155.373540][T10368] lo speed is unknown, defaulting to 1000 [ 155.820621][T10378] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1201'. [ 157.065487][ T63] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.302543][T10378] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 157.463554][T10416] netlink: 'syz.0.1211': attribute type 39 has an invalid length. [ 157.544689][T10420] netlink: 'syz.4.1213': attribute type 9 has an invalid length. [ 157.577636][T10420] bond0: option miimon: invalid value (18446744071578845188) [ 157.609504][T10420] bond0: option miimon: allowed values 0 - 2147483647 [ 157.775770][ T6140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.784253][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.879480][T10441] gre1: entered allmulticast mode [ 158.062802][T10462] lo speed is unknown, defaulting to 1000 [ 158.120614][T10466] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.158089][T10466] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.208195][T10466] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.227485][T10466] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.236550][T10466] af_packet: tpacket_rcv: packet too big, clamped from 65354 to 3710. macoff=82 [ 158.365962][T10481] __nla_validate_parse: 5 callbacks suppressed [ 158.365980][T10481] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1229'. [ 158.381544][T10481] netlink: 'syz.0.1229': attribute type 1 has an invalid length. [ 158.390416][T10481] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1229'. [ 158.940979][T10501] netlink: 'syz.2.1234': attribute type 1 has an invalid length. [ 158.981846][T10501] netlink: 'syz.2.1234': attribute type 2 has an invalid length. [ 159.010356][T10501] netlink: 'syz.2.1234': attribute type 1 has an invalid length. [ 159.108998][T10521] netlink: 'syz.4.1237': attribute type 2 has an invalid length. [ 159.171309][T10521] fþ²¹¥‰: entered promiscuous mode [ 159.188946][T10528] net_ratelimit: 3 callbacks suppressed [ 159.188965][T10528] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.213616][T10528] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1239'. [ 159.390574][T10546] tipc: Started in network mode [ 159.398778][T10546] tipc: Node identity , cluster identity 4711 [ 159.405648][T10546] tipc: Failed to obtain node identity [ 159.424246][T10546] tipc: Enabling of bearer rejected, failed to enable media [ 159.608368][T10565] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1248'. [ 159.639087][T10566] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1248'. [ 160.265090][T10601] openvswitch: netlink: Actions may not be safe on all matching packets [ 160.370874][T10609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1260'. [ 160.423869][T10614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.432390][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.607582][T10625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1267'. [ 160.805636][T10639] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1271'. [ 161.222094][T10677] netlink: 1256 bytes leftover after parsing attributes in process `syz.0.1283'. [ 161.232556][T10677] openvswitch: netlink: Missing key (keys=40, expected=80) [ 161.247159][T10680] wireguard0: entered promiscuous mode [ 161.251904][T10683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1285'. [ 161.253053][T10680] wireguard0: entered allmulticast mode [ 161.290565][T10677] vlan0: entered promiscuous mode [ 161.526530][T10704] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 162.095338][ T6144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.521266][T10735] : entered promiscuous mode [ 162.681816][T10742] openvswitch: netlink: Message has 8 unknown bytes. [ 162.713417][T10742] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.766006][T10748] tipc: Started in network mode [ 162.771184][T10748] tipc: Node identity ac14142f, cluster identity 4711 [ 162.778332][T10748] tipc: New replicast peer: 0.0.0.0 [ 162.790806][T10748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.812521][T10748] tipc: Enabled bearer , priority 1 [ 162.830539][T10752] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 162.858651][T10742] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.925598][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.959352][T10742] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.032910][T10742] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.051477][T10756] netlink: 'syz.2.1306': attribute type 3 has an invalid length. [ 163.064686][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.157422][T10742] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.173624][T10742] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.197450][T10742] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.264637][T10742] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.371150][T10763] sch_fq: defrate 117 ignored. [ 163.728189][T10789] netlink: 'syz.2.1316': attribute type 1 has an invalid length. [ 163.736505][T10789] __nla_validate_parse: 7 callbacks suppressed [ 163.736520][T10789] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1316'. [ 163.870142][T10796] netlink: 'syz.1.1319': attribute type 9 has an invalid length. [ 163.880603][T10798] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1318'. [ 163.883816][T10796] netlink: 'syz.1.1319': attribute type 6 has an invalid length. [ 163.903186][T10796] netlink: 'syz.1.1319': attribute type 7 has an invalid length. [ 163.911757][T10796] netlink: 'syz.1.1319': attribute type 8 has an invalid length. [ 163.920360][ T47] tipc: Node number set to 2886997039 [ 163.944806][T10800] netlink: 'syz.4.1320': attribute type 4 has an invalid length. [ 164.324362][ C1] net_ratelimit: 8 callbacks suppressed [ 164.324381][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.455994][T10829] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1327'. [ 164.810802][T10840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.819588][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.833861][T10840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.854331][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.864092][T10840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.905200][T10840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.924702][T10840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.935660][T10850] IPVS: set_ctl: invalid protocol: 12 224.0.0.2:20003 [ 164.969391][T10840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.004414][T10840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.485517][T10893] netlink: 'syz.4.1346': attribute type 1 has an invalid length. [ 165.501943][T10893] netlink: 'syz.4.1346': attribute type 1 has an invalid length. [ 165.613039][T10904] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1349'. [ 165.670903][T10915] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1352'. [ 166.398322][T10953] netlink: 'syz.4.1363': attribute type 1 has an invalid length. [ 166.406330][T10953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1363'. [ 166.504048][T10958] vlan0: entered promiscuous mode [ 166.509575][T10958] dummy0: entered promiscuous mode [ 166.841270][T10971] netlink: 15894 bytes leftover after parsing attributes in process `syz.0.1368'. [ 166.915732][T10978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1370'. [ 166.948680][T10981] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 167.072882][T10992] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1374'. [ 167.129498][T10993] netlink: 'syz.0.1375': attribute type 10 has an invalid length. [ 167.158644][T10993] team0: left promiscuous mode [ 167.163468][T10993] team_slave_0: left promiscuous mode [ 167.173141][T10993] team_slave_1: left promiscuous mode [ 167.187729][T10993] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.212233][T10993] team0: entered allmulticast mode [ 167.225052][T10993] team_slave_0: entered allmulticast mode [ 167.230989][T10993] team_slave_1: entered allmulticast mode [ 167.243180][T10993] bond0: (slave team0): Enslaving as an active interface with an up link [ 167.323922][T11011] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1379'. [ 167.423544][T11014] bond0: (slave syz_tun): Releasing backup interface [ 167.434913][T11014] syz_tun (unregistering): left allmulticast mode [ 167.591446][T11029] batadv2: entered allmulticast mode [ 168.481535][T11070] bond4: entered promiscuous mode [ 168.491047][T11070] 8021q: adding VLAN 0 to HW filter on device bond4 [ 168.896629][T11080] batman_adv: batadv0: Removing interface: team0 [ 168.947395][T11080] bridge_slave_0: left allmulticast mode [ 168.997314][T11080] bridge_slave_0: left promiscuous mode [ 169.033520][T11080] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.073906][T11080] bridge_slave_1: left allmulticast mode [ 169.086988][T11080] bridge_slave_1: left promiscuous mode [ 169.092820][T11080] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.114328][T11080] team0: Port device team_slave_0 removed [ 169.122625][T11080] team0: Failed to send options change via netlink (err -105) [ 169.137082][T11080] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 169.162227][T11080] team0: Port device team_slave_1 removed [ 169.171610][T11080] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.192361][T11080] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.212540][T11080] batman_adv: batadv0: Interface deactivated: macsec1 [ 169.224587][T11080] batman_adv: batadv0: Removing interface: macsec1 [ 169.260521][T11080] bond1: (slave gretap1): Releasing active interface [ 169.267403][T11091] __nla_validate_parse: 10 callbacks suppressed [ 169.267418][T11091] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1406'. [ 169.292080][T11091] validate_nla: 8 callbacks suppressed [ 169.292102][T11091] netlink: 'syz.4.1406': attribute type 1 has an invalid length. [ 169.311068][T11091] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1406'. [ 169.480901][T11098] syzkaller0: entered promiscuous mode [ 169.486469][T11098] syzkaller0: entered allmulticast mode [ 169.597552][T11108] tipc: Can't bind to reserved service type 1 [ 170.095841][ C1] net_ratelimit: 1026 callbacks suppressed [ 170.095861][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.269046][T11149] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1419'. [ 170.282461][T11149] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1419'. [ 170.358299][T11155] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1421'. [ 170.469419][T11155] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1421'. [ 170.480818][T11166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1424'. [ 170.490251][T11172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1425'. [ 170.510899][T11172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1425'. [ 170.553671][T11178] netlink: 37 bytes leftover after parsing attributes in process `syz.2.1426'. [ 170.724176][T11190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.737783][T11190] sctp: [Deprecated]: syz.0.1429 (pid 11190) Use of struct sctp_assoc_value in delayed_ack socket option. [ 170.737783][T11190] Use struct sctp_sack_info instead [ 170.932029][T11212] xt_hashlimit: size too large, truncated to 1048576 [ 171.022090][T11222] netlink: 'syz.2.1438': attribute type 39 has an invalid length. [ 171.134581][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.199166][T11233] lo speed is unknown, defaulting to 1000 [ 171.422296][T11245] 0ªX¹¦À: left allmulticast mode [ 171.453009][T11245] batadv_slave_1: left allmulticast mode [ 171.467361][T11245] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 171.476574][T11245] macsec1: left promiscuous mode [ 171.486827][T11245] vlan2: left promiscuous mode [ 171.491835][T11245] vlan2: left allmulticast mode [ 171.496983][T11245] hsr_slave_1: left allmulticast mode [ 171.513632][T11245] batadv1: left allmulticast mode [ 171.589471][T11245] vti0: left promiscuous mode [ 171.595476][T11245] gre1: left allmulticast mode [ 171.601758][T11245] batadv2: left allmulticast mode [ 171.750548][T11267] lo speed is unknown, defaulting to 1000 [ 171.864395][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.174541][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.081668][T11341] lo speed is unknown, defaulting to 1000 [ 173.226803][T11342] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 173.249409][T11342] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 173.267193][T11342] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 173.280398][T11342] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 173.418040][T11360] x_tables: duplicate underflow at hook 1 [ 173.509409][T11369] macsec0: entered allmulticast mode [ 173.516327][T11369] veth1_macvtap: entered allmulticast mode [ 173.522551][T11369] macsec0: left allmulticast mode [ 173.528056][T11369] veth1_macvtap: left allmulticast mode [ 173.617868][T11377] pimreg: left allmulticast mode [ 174.031062][T11400] lo speed is unknown, defaulting to 1000 [ 174.349659][T11407] syzkaller1: entered promiscuous mode [ 174.355786][T11407] syzkaller1: entered allmulticast mode [ 174.472162][T11418] __nla_validate_parse: 17 callbacks suppressed [ 174.472182][T11418] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1488'. [ 174.543549][T11420] tipc: Enabling of bearer rejected, already enabled [ 174.607722][T11424] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1490'. [ 174.641081][T11424] netlink: 'syz.0.1490': attribute type 13 has an invalid length. [ 174.686781][T11424] gretap0: refused to change device tx_queue_len [ 174.699903][T11424] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 174.731250][ T1207] lo speed is unknown, defaulting to 1000 [ 174.873654][T11437] netlink: 'syz.2.1495': attribute type 16 has an invalid length. [ 174.883459][T11437] netlink: 'syz.2.1495': attribute type 17 has an invalid length. [ 175.718803][T11496] lo speed is unknown, defaulting to 1000 [ 175.862006][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 175.868526][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 175.874622][ T55] Bluetooth: hci3: command 0x0406 tx timeout [ 176.205162][T11525] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1518'. [ 176.455041][T11542] x_tables: duplicate underflow at hook 1 [ 176.487710][T11532] pim6reg1: entered promiscuous mode [ 176.493051][T11532] pim6reg1: entered allmulticast mode [ 176.691012][T11551] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1527'. [ 176.777016][T11553] xt_TCPMSS: Only works on TCP SYN packets [ 176.813771][T11553] openvswitch: netlink: IPv4 tun info is not correct [ 176.974438][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 177.038109][T11569] team0: Device bond0 is already an upper device of the team interface [ 177.093355][T11576] openvswitch: netlink: Message has 8 unknown bytes. [ 177.278323][T11590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1536'. [ 177.298028][T11590] netlink: 'syz.0.1536': attribute type 20 has an invalid length. [ 177.314846][T11590] netlink: 'syz.0.1536': attribute type 21 has an invalid length. [ 177.360506][T11590] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.473177][T11600] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1540'. [ 177.738244][T11611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1543'. [ 179.010190][T11614] lo speed is unknown, defaulting to 1000 [ 179.141789][T11625] lo speed is unknown, defaulting to 1000 [ 179.148299][T11625] lo speed is unknown, defaulting to 1000 [ 179.149563][T11626] lo speed is unknown, defaulting to 1000 [ 179.163375][T11625] lo speed is unknown, defaulting to 1000 [ 179.224622][T11625] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 179.311685][T11625] lo speed is unknown, defaulting to 1000 [ 179.318746][T11625] lo speed is unknown, defaulting to 1000 [ 179.334566][T11625] lo speed is unknown, defaulting to 1000 [ 179.345959][T11625] lo speed is unknown, defaulting to 1000 [ 179.363832][T11631] lo speed is unknown, defaulting to 1000 [ 179.385621][T11625] lo speed is unknown, defaulting to 1000 [ 179.413348][T11625] lo speed is unknown, defaulting to 1000 [ 179.427452][T11625] lo speed is unknown, defaulting to 1000 [ 179.532523][T11635] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1549'. [ 179.951803][T11657] netlink: 'syz.3.1553': attribute type 1 has an invalid length. [ 180.034993][T11657] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 180.173589][T11673] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1559'. [ 180.206237][T11673] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.747090][T11740] lo speed is unknown, defaulting to 1000 [ 181.763239][T11740] lo speed is unknown, defaulting to 1000 [ 182.061122][T11746] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 182.393793][T11765] lo speed is unknown, defaulting to 1000 [ 182.415106][T11765] lo speed is unknown, defaulting to 1000 [ 182.856286][T11795] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1584'. [ 182.987642][T11801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1588'. [ 183.004922][T11801] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1588'. [ 183.050239][T11800] netlink: 'syz.3.1587': attribute type 10 has an invalid length. [ 183.068810][T11801] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1588'. [ 183.078655][T11800] batman_adv: batadv0: Adding interface: team0 [ 183.088288][T11800] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.121299][T11800] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 183.131504][T11806] netlink: 'syz.3.1587': attribute type 10 has an invalid length. [ 183.140247][T11806] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1587'. [ 183.150555][T11806] team0: entered promiscuous mode [ 183.155664][T11806] team_slave_0: entered promiscuous mode [ 183.161506][T11806] team_slave_1: entered promiscuous mode [ 183.167348][T11806] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 183.176385][T11806] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.183235][T11806] batman_adv: batadv0: Interface activated: team0 [ 183.189782][T11806] batman_adv: batadv0: Interface deactivated: team0 [ 183.209048][T11806] batman_adv: batadv0: Removing interface: team0 [ 183.230950][T11806] bridge0: port 5(team0) entered blocking state [ 183.241277][T11806] bridge0: port 5(team0) entered disabled state [ 183.262766][T11806] team0: entered allmulticast mode [ 183.272458][T11806] team_slave_0: entered allmulticast mode [ 183.278319][T11806] team_slave_1: entered allmulticast mode [ 183.284037][T11806] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 183.334718][T11806] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1587'. [ 183.556937][T11847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1596'. [ 183.577912][T11847] erspan0: entered promiscuous mode [ 183.586337][T11847] erspan0: left promiscuous mode [ 183.749101][T11854] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1599'. [ 184.338946][T11905] netlink: 'syz.3.1611': attribute type 11 has an invalid length. [ 184.379758][T11907] batman_adv: batadv0: Adding interface: dummy0 [ 184.386452][T11907] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.418061][T11907] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 184.833232][T11937] netlink: 'syz.0.1620': attribute type 10 has an invalid length. [ 184.845348][T11937] __nla_validate_parse: 2 callbacks suppressed [ 184.845367][T11937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1620'. [ 184.871640][T11938] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1619'. [ 184.884724][T11938] unsupported nlmsg_type 40 [ 184.937366][T11942] IPv6: Can't replace route, no match found [ 185.013327][T11946] lo speed is unknown, defaulting to 1000 [ 185.016819][T11949] IPv6: Can't replace route, no match found [ 185.042898][T11946] lo speed is unknown, defaulting to 1000 [ 185.197486][T11963] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1627'. [ 185.467438][T11974] netlink: 'syz.1.1632': attribute type 303 has an invalid length. [ 185.586754][T11974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1632'. [ 185.698671][T11974] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 185.725661][T11974] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 185.860994][T12006] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 186.222384][T12025] lo speed is unknown, defaulting to 1000 [ 186.269445][T12025] lo speed is unknown, defaulting to 1000 [ 186.323467][T12032] lo speed is unknown, defaulting to 1000 [ 186.332898][T12032] lo speed is unknown, defaulting to 1000 [ 186.441582][T12038] lo speed is unknown, defaulting to 1000 [ 186.513021][T12038] lo speed is unknown, defaulting to 1000 [ 186.793939][T12034] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1647'. [ 186.819211][T12032] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1647'. [ 187.081315][T12052] netlink: ct family unspecified [ 187.123694][T12052] openvswitch: netlink: Actions may not be safe on all matching packets [ 187.375312][T12066] netlink: 'syz.1.1656': attribute type 11 has an invalid length. [ 187.404663][T12066] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1656'. [ 187.653565][T12092] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1663'. [ 187.663891][T12092] netlink: 'syz.4.1663': attribute type 7 has an invalid length. [ 187.681404][T12092] netlink: 'syz.4.1663': attribute type 8 has an invalid length. [ 187.726630][T12092] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1663'. [ 187.781653][T12092] bond0: entered promiscuous mode [ 187.798007][T12092] mac80211_hwsim hwsim11 : entered promiscuous mode [ 187.806890][T12092] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 187.819286][T12092] bond0: left promiscuous mode [ 187.825491][T12092] mac80211_hwsim hwsim11 : left promiscuous mode [ 187.840051][T12092] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 187.862646][T12107] openvswitch: netlink: Actions may not be safe on all matching packets [ 188.141742][T12133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1675'. [ 188.186730][T12121] lo speed is unknown, defaulting to 1000 [ 188.193447][T12121] lo speed is unknown, defaulting to 1000 [ 188.624018][T12175] netlink: 'syz.4.1679': attribute type 16 has an invalid length. [ 188.632183][T12175] netlink: 'syz.4.1679': attribute type 17 has an invalid length. [ 188.746313][T12175] bridge0: port 1(gretap0) entered blocking state [ 188.752887][T12175] bridge0: port 1(gretap0) entered forwarding state [ 188.787831][T12175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.800601][T12175] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.813352][T12175] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 188.941474][T12196] batadv0: entered promiscuous mode [ 188.957548][T12196] batadv_slave_0: entered promiscuous mode [ 188.983881][T12196] batadv_slave_0: left promiscuous mode [ 189.002872][T12196] batadv0: left promiscuous mode [ 189.039248][ T30] audit: type=1804 audit(1743405421.740:2): pid=12208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1692" name="/newroot/316/cgroup.controllers" dev="tmpfs" ino=1632 res=1 errno=0 [ 189.068367][T12208] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 189.068809][ T30] audit: type=1800 audit(1743405421.740:3): pid=12208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1692" name="cgroup.controllers" dev="tmpfs" ino=1632 res=0 errno=0 [ 189.107628][ T30] audit: type=1804 audit(1743405421.760:4): pid=12208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1692" name="/newroot/316/cgroup.controllers" dev="tmpfs" ino=1632 res=1 errno=0 [ 189.141114][T12208] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 189.198208][T12208] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 189.257766][T12208] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 189.319671][T12208] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 189.338668][T12208] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 189.366947][T12208] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 189.388614][T12208] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 189.449894][T12228] x_tables: duplicate underflow at hook 3 [ 189.525917][T12234] lo speed is unknown, defaulting to 1000 [ 189.532673][T12234] lo speed is unknown, defaulting to 1000 [ 189.829886][T12251] xt_TCPMSS: Only works on TCP SYN packets [ 189.933006][T12260] netlink: 'syz.1.1709': attribute type 5 has an invalid length. [ 190.067575][T12263] lo speed is unknown, defaulting to 1000 [ 190.086316][T12263] lo speed is unknown, defaulting to 1000 [ 190.356868][T12273] lo speed is unknown, defaulting to 1000 [ 190.363117][T12273] lo speed is unknown, defaulting to 1000 [ 190.798826][T12267] __nla_validate_parse: 41 callbacks suppressed [ 190.798845][T12267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1710'. [ 191.081043][T12301] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1719'. [ 191.247131][T12307] lo speed is unknown, defaulting to 1000 [ 191.255230][T12307] lo speed is unknown, defaulting to 1000 [ 191.617439][T12337] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1729'. [ 191.927545][T12361] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1733'. [ 191.943174][T12358] netlink: 'syz.1.1735': attribute type 2 has an invalid length. [ 191.951301][T12358] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1735'. [ 192.020278][ T5148] Bluetooth: hci4: link tx timeout [ 192.031919][T12361] x_tables: duplicate underflow at hook 1 [ 192.032777][ T5148] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 192.046412][T12361] openvswitch: netlink: Message has 1 unknown bytes. [ 192.047608][ T5148] Bluetooth: hci4: link tx timeout [ 192.058322][ T5148] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 192.074564][T12361] openvswitch: netlink: Actions may not be safe on all matching packets [ 192.192546][T12375] syz.1.1738: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 192.221451][T12375] CPU: 0 UID: 0 PID: 12375 Comm: syz.1.1738 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 192.221482][T12375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 192.221495][T12375] Call Trace: [ 192.221501][T12375] [ 192.221508][T12375] dump_stack_lvl+0x241/0x360 [ 192.221551][T12375] ? __pfx_dump_stack_lvl+0x10/0x10 [ 192.221573][T12375] ? __pfx__printk+0x10/0x10 [ 192.221592][T12375] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 192.221627][T12375] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 192.221648][T12375] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 192.221671][T12375] warn_alloc+0x27c/0x410 [ 192.221690][T12375] ? __vmalloc_node_range_noprof+0x108/0x1390 [ 192.221708][T12375] ? __pfx_warn_alloc+0x10/0x10 [ 192.221726][T12375] ? kasan_save_track+0x3f/0x80 [ 192.221751][T12375] ? __kasan_kmalloc+0x9d/0xb0 [ 192.221778][T12375] ? xsk_setsockopt+0x449/0x840 [ 192.221796][T12375] ? do_sock_setsockopt+0x3b1/0x710 [ 192.221816][T12375] ? __x64_sys_setsockopt+0x1ee/0x280 [ 192.221842][T12375] ? do_syscall_64+0xf3/0x230 [ 192.221863][T12375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.221887][T12375] __vmalloc_node_range_noprof+0x128/0x1390 [ 192.221923][T12375] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 192.221943][T12375] ? __kasan_kmalloc+0x9d/0xb0 [ 192.221964][T12375] vmalloc_user_noprof+0x74/0x80 [ 192.221981][T12375] ? xskq_create+0xb6/0x170 [ 192.221999][T12375] xskq_create+0xb6/0x170 [ 192.222020][T12375] xsk_init_queue+0xa1/0x100 [ 192.222042][T12375] xsk_setsockopt+0x449/0x840 [ 192.222062][T12375] ? __pfx_xsk_setsockopt+0x10/0x10 [ 192.222079][T12375] ? __lock_acquire+0xad5/0xd80 [ 192.222107][T12375] ? __pfx_aa_sk_perm+0x10/0x10 [ 192.222131][T12375] ? aa_sock_opt_perm+0x79/0x120 [ 192.222156][T12375] ? __pfx_xsk_setsockopt+0x10/0x10 [ 192.222174][T12375] do_sock_setsockopt+0x3b1/0x710 [ 192.222198][T12375] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 192.222217][T12375] ? __fget_files+0x2a/0x420 [ 192.222241][T12375] ? __fget_files+0x39d/0x420 [ 192.222261][T12375] ? __fget_files+0x2a/0x420 [ 192.222291][T12375] __x64_sys_setsockopt+0x1ee/0x280 [ 192.222316][T12375] do_syscall_64+0xf3/0x230 [ 192.222337][T12375] ? clear_bhb_loop+0x45/0xa0 [ 192.222355][T12375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.222371][T12375] RIP: 0033:0x7f3e9878d169 [ 192.222393][T12375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.222408][T12375] RSP: 002b:00007f3e9965c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 192.222427][T12375] RAX: ffffffffffffffda RBX: 00007f3e989a6080 RCX: 00007f3e9878d169 [ 192.222440][T12375] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 192.222450][T12375] RBP: 00007f3e9880e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 192.222461][T12375] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.222472][T12375] R13: 0000000000000000 R14: 00007f3e989a6080 R15: 00007ffd6091b448 [ 192.222494][T12375] [ 192.222662][T12375] Mem-Info: [ 192.450571][T12377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1739'. [ 192.455074][T12375] active_anon:4029 inactive_anon:0 isolated_anon:0 [ 192.455074][T12375] active_file:1555 inactive_file:38353 isolated_file:0 [ 192.455074][T12375] unevictable:768 dirty:39 writeback:0 [ 192.455074][T12375] slab_reclaimable:11018 slab_unreclaimable:102631 [ 192.455074][T12375] mapped:29523 shmem:1433 pagetables:795 [ 192.455074][T12375] sec_pagetables:0 bounce:0 [ 192.455074][T12375] kernel_misc_reclaimable:0 [ 192.455074][T12375] free:1324018 free_pcp:686 free_cma:0 [ 192.585038][T12375] Node 0 active_anon:16116kB inactive_anon:0kB active_file:6220kB inactive_file:153340kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118092kB dirty:152kB writeback:0kB shmem:4196kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11324kB pagetables:3180kB sec_pagetables:0kB all_unreclaimable? no [ 192.617909][T12375] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 192.648680][T12375] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 192.681848][T12375] lowmem_reserve[]: 0 2490 2490 2490 2490 [ 192.689423][T12375] Node 0 DMA32 free:1371420kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:16080kB inactive_anon:0kB active_file:6220kB inactive_file:153016kB unevictable:1536kB writepending:152kB present:3129332kB managed:2550096kB mlocked:0kB bounce:0kB free_pcp:3332kB local_pcp:1456kB free_cma:0kB [ 192.727836][T12375] lowmem_reserve[]: 0 0 0 0 0 [ 192.732719][T12375] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:324kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 192.767138][T12375] lowmem_reserve[]: 0 0 0 0 0 [ 192.772284][T12375] Node 1 Normal free:3908576kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 192.803729][T12375] lowmem_reserve[]: 0 0 0 0 0 [ 192.808895][T12375] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 192.859105][T12375] Node 0 DMA32: 555*4kB (UME) 339*8kB (UM) 422*16kB (UM) 408*32kB (UME) 779*64kB (UM) 531*128kB (UME) 293*256kB (UME) 137*512kB (UM) 53*1024kB (UME) 6*2048kB (UME) 248*4096kB (UM) = 1370084kB [ 192.878919][T12390] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1742'. [ 192.907738][T12375] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 192.920658][T12375] Node 1 Normal: 190*4kB (UME) 48*8kB (UME) 40*16kB (UME) 227*32kB (UME) 98*64kB (UME) 28*128kB (UME) 11*256kB (UME) 10*512kB (UM) 5*1024kB (UME) 3*2048kB (UE) 945*4096kB (M) = 3908824kB [ 192.949781][T12375] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 192.965394][T12398] netlink: 'syz.4.1745': attribute type 10 has an invalid length. [ 192.966825][T12375] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 193.008951][T12375] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 193.020623][T12375] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 193.037562][T12375] 41341 total pagecache pages [ 193.042286][T12375] 0 pages in swap cache [ 193.049001][T12375] Free swap = 124940kB [ 193.054018][T12375] Total swap = 124996kB [ 193.058373][T12375] 2097051 pages RAM [ 193.062190][T12375] 0 pages HighMem/MovableOnly [ 193.067356][T12375] 427805 pages reserved [ 193.071539][T12375] 0 pages cma reserved [ 193.162076][T12411] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1748'. [ 193.582112][T12428] netlink: 'syz.0.1755': attribute type 39 has an invalid length. [ 193.808720][T12448] netlink: 'syz.0.1762': attribute type 10 has an invalid length. [ 193.818099][T12448] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1762'. [ 193.832418][T12448] geneve0: entered allmulticast mode [ 193.838519][T12448] team0: Port device geneve0 added [ 193.852309][T12450] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1763'. [ 194.058874][T12467] netlink: 'syz.4.1769': attribute type 11 has an invalid length. [ 194.096691][ T5148] Bluetooth: hci4: command 0x0405 tx timeout [ 194.121427][ T9843] ------------[ cut here ]------------ [ 194.127248][ T9843] refcount_t: underflow; use-after-free. [ 194.133139][ T9843] WARNING: CPU: 0 PID: 9843 at lib/refcount.c:28 refcount_warn_saturate+0x15a/0x1d0 [ 194.142584][ T9843] Modules linked in: [ 194.146753][ T9843] CPU: 0 UID: 0 PID: 9843 Comm: kbnepd bnep0 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 194.158566][ T9843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 194.168630][ T9843] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0 [ 194.174992][ T9843] Code: 40 a4 a0 8c e8 97 aa 86 fc 90 0f 0b 90 90 eb 99 e8 db 86 c7 fc c6 05 4a 57 4c 0b 01 90 48 c7 c7 a0 a4 a0 8c e8 77 aa 86 fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 b8 86 c7 fc c6 05 24 57 4c 0b 01 90 [ 194.194626][ T9843] RSP: 0018:ffffc9000e447700 EFLAGS: 00010246 [ 194.200679][ T9843] RAX: 3c6d6799afb22400 RBX: ffff888034135478 RCX: ffff88806f1a3c00 [ 194.208814][ T9843] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 194.216793][ T9843] RBP: 0000000000000003 R08: ffffffff81829db2 R09: fffffbfff1d7a73c [ 194.224779][ T9843] R10: dffffc0000000000 R11: fffffbfff1d7a73c R12: ffff888034135460 [ 194.232735][ T9843] R13: 1ffff11006826a8c R14: ffff888034135460 R15: ffffffff8643bd30 [ 194.240914][ T9843] FS: 0000000000000000(0000) GS:ffff888124fea000(0000) knlGS:0000000000000000 [ 194.249850][ T9843] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 194.258538][ T9843] CR2: 00002000000009c0 CR3: 000000006ec88000 CR4: 00000000003526f0 [ 194.266699][ T9843] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 194.274785][ T9843] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 194.282741][ T9843] Call Trace: [ 194.286037][ T9843] [ 194.288950][ T9843] ? __warn+0x165/0x4d0 [ 194.293090][ T9843] ? refcount_warn_saturate+0x15a/0x1d0 [ 194.298798][ T9843] ? report_bug+0x2b3/0x500 [ 194.303285][ T9843] ? refcount_warn_saturate+0x15a/0x1d0 [ 194.308834][ T9843] ? refcount_warn_saturate+0x15a/0x1d0 [ 194.314377][ T9843] ? refcount_warn_saturate+0x15c/0x1d0 [ 194.319906][ T9843] ? handle_bug+0x89/0x170 [ 194.324641][ T9843] ? exc_invalid_op+0x1a/0x50 [ 194.329335][ T9843] ? asm_exc_invalid_op+0x1a/0x20 [ 194.334413][ T9843] ? __pfx_klist_children_put+0x10/0x10 [ 194.339951][ T9843] ? __warn_printk+0x2a2/0x360 [ 194.344732][ T9843] ? refcount_warn_saturate+0x15a/0x1d0 [ 194.350261][ T9843] klist_dec_and_del+0x3ec/0x3f0 [ 194.355369][ T9843] ? __pfx_klist_children_put+0x10/0x10 [ 194.360900][ T9843] klist_del+0xa7/0x110 [ 194.365079][ T9843] device_del+0x2cb/0x9b0 [ 194.369392][ T9843] ? pm_runtime_set_memalloc_noio+0x1f2/0x260 [ 194.375469][ T9843] ? __pfx_device_del+0x10/0x10 [ 194.380302][ T9843] ? netdev_unregister_kobject+0x36b/0x470 [ 194.386253][ T9843] unregister_netdevice_many_notify+0x1f37/0x2510 [ 194.392715][ T9843] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 194.399621][ T9843] ? trace_contention_end+0x3c/0x120 [ 194.404938][ T9843] ? __mutex_lock+0x39b/0x1000 [ 194.409799][ T9843] ? __lock_acquire+0xad5/0xd80 [ 194.414886][ T9843] ? rtnl_net_dev_lock+0x271/0x320 [ 194.419994][ T9843] ? __pfx___mutex_lock+0x10/0x10 [ 194.425108][ T9843] unregister_netdevice_queue+0x383/0x400 [ 194.430841][ T9843] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 194.437114][ T9843] ? rtnl_net_dev_lock+0x37/0x320 [ 194.442120][ T9843] ? rtnl_net_dev_lock+0x302/0x320 [ 194.447393][ T9843] ? rtnl_net_dev_lock+0x37/0x320 [ 194.452423][ T9843] unregister_netdev+0x1f/0x60 [ 194.457208][ T9843] bnep_session+0x2e52/0x3050 [ 194.461867][ T9843] ? __schedule+0x1b20/0x50e0 [ 194.466554][ T9843] ? __lock_acquire+0xad5/0xd80 [ 194.471396][ T9843] ? do_raw_spin_lock+0x151/0x370 [ 194.476602][ T9843] ? __pfx_bnep_session+0x10/0x10 [ 194.481632][ T9843] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 194.487581][ T9843] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 194.493929][ T9843] ? __pfx_woken_wake_function+0x10/0x10 [ 194.499703][ T9843] ? __kthread_parkme+0x169/0x1d0 [ 194.504910][ T9843] ? __pfx_bnep_session+0x10/0x10 [ 194.509921][ T9843] kthread+0x7a9/0x920 [ 194.513974][ T9843] ? __pfx_bnep_session+0x10/0x10 [ 194.519043][ T9843] ? __pfx_kthread+0x10/0x10 [ 194.523627][ T9843] ? __pfx_kthread+0x10/0x10 [ 194.528226][ T9843] ? __pfx_kthread+0x10/0x10 [ 194.532798][ T9843] ? __pfx_kthread+0x10/0x10 [ 194.537579][ T9843] ? _raw_spin_unlock_irq+0x23/0x50 [ 194.542760][ T9843] ? lockdep_hardirqs_on+0x9d/0x150 [ 194.548098][ T9843] ? __pfx_kthread+0x10/0x10 [ 194.552707][ T9843] ret_from_fork+0x4b/0x80 [ 194.557132][ T9843] ? __pfx_kthread+0x10/0x10 [ 194.561709][ T9843] ret_from_fork_asm+0x1a/0x30 [ 194.566626][ T9843] [ 194.569642][ T9843] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 194.576907][ T9843] CPU: 0 UID: 0 PID: 9843 Comm: kbnepd bnep0 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 194.588693][ T9843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 194.598745][ T9843] Call Trace: [ 194.602017][ T9843] [ 194.604941][ T9843] dump_stack_lvl+0x241/0x360 [ 194.609613][ T9843] ? __pfx_dump_stack_lvl+0x10/0x10 [ 194.614796][ T9843] ? __pfx__printk+0x10/0x10 [ 194.619372][ T9843] ? vscnprintf+0x5d/0x90 [ 194.623709][ T9843] panic+0x349/0x880 [ 194.627605][ T9843] ? __warn+0x174/0x4d0 [ 194.631752][ T9843] ? __pfx_panic+0x10/0x10 [ 194.636154][ T9843] ? ret_from_fork_asm+0x1a/0x30 [ 194.641067][ T9843] __warn+0x344/0x4d0 [ 194.645031][ T9843] ? refcount_warn_saturate+0x15a/0x1d0 [ 194.650570][ T9843] report_bug+0x2b3/0x500 [ 194.654969][ T9843] ? refcount_warn_saturate+0x15a/0x1d0 [ 194.660519][ T9843] ? refcount_warn_saturate+0x15a/0x1d0 [ 194.666046][ T9843] ? refcount_warn_saturate+0x15c/0x1d0 [ 194.671590][ T9843] handle_bug+0x89/0x170 [ 194.675831][ T9843] exc_invalid_op+0x1a/0x50 [ 194.680312][ T9843] asm_exc_invalid_op+0x1a/0x20 [ 194.685148][ T9843] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0 [ 194.691283][ T9843] Code: 40 a4 a0 8c e8 97 aa 86 fc 90 0f 0b 90 90 eb 99 e8 db 86 c7 fc c6 05 4a 57 4c 0b 01 90 48 c7 c7 a0 a4 a0 8c e8 77 aa 86 fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 b8 86 c7 fc c6 05 24 57 4c 0b 01 90 [ 194.710873][ T9843] RSP: 0018:ffffc9000e447700 EFLAGS: 00010246 [ 194.716924][ T9843] RAX: 3c6d6799afb22400 RBX: ffff888034135478 RCX: ffff88806f1a3c00 [ 194.724873][ T9843] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 194.732909][ T9843] RBP: 0000000000000003 R08: ffffffff81829db2 R09: fffffbfff1d7a73c [ 194.740863][ T9843] R10: dffffc0000000000 R11: fffffbfff1d7a73c R12: ffff888034135460 [ 194.748811][ T9843] R13: 1ffff11006826a8c R14: ffff888034135460 R15: ffffffff8643bd30 [ 194.756761][ T9843] ? __pfx_klist_children_put+0x10/0x10 [ 194.762290][ T9843] ? __warn_printk+0x2a2/0x360 [ 194.767037][ T9843] klist_dec_and_del+0x3ec/0x3f0 [ 194.771961][ T9843] ? __pfx_klist_children_put+0x10/0x10 [ 194.777483][ T9843] klist_del+0xa7/0x110 [ 194.781638][ T9843] device_del+0x2cb/0x9b0 [ 194.785948][ T9843] ? pm_runtime_set_memalloc_noio+0x1f2/0x260 [ 194.792000][ T9843] ? __pfx_device_del+0x10/0x10 [ 194.797348][ T9843] ? netdev_unregister_kobject+0x36b/0x470 [ 194.803136][ T9843] unregister_netdevice_many_notify+0x1f37/0x2510 [ 194.809541][ T9843] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 194.816281][ T9843] ? trace_contention_end+0x3c/0x120 [ 194.821544][ T9843] ? __mutex_lock+0x39b/0x1000 [ 194.826292][ T9843] ? __lock_acquire+0xad5/0xd80 [ 194.831123][ T9843] ? rtnl_net_dev_lock+0x271/0x320 [ 194.836212][ T9843] ? __pfx___mutex_lock+0x10/0x10 [ 194.841217][ T9843] unregister_netdevice_queue+0x383/0x400 [ 194.846939][ T9843] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 194.853192][ T9843] ? rtnl_net_dev_lock+0x37/0x320 [ 194.858238][ T9843] ? rtnl_net_dev_lock+0x302/0x320 [ 194.863340][ T9843] ? rtnl_net_dev_lock+0x37/0x320 [ 194.868347][ T9843] unregister_netdev+0x1f/0x60 [ 194.873096][ T9843] bnep_session+0x2e52/0x3050 [ 194.877753][ T9843] ? __schedule+0x1b20/0x50e0 [ 194.882413][ T9843] ? __lock_acquire+0xad5/0xd80 [ 194.887248][ T9843] ? do_raw_spin_lock+0x151/0x370 [ 194.892260][ T9843] ? __pfx_bnep_session+0x10/0x10 [ 194.897278][ T9843] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 194.903163][ T9843] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 194.909716][ T9843] ? __pfx_woken_wake_function+0x10/0x10 [ 194.915382][ T9843] ? __kthread_parkme+0x169/0x1d0 [ 194.920397][ T9843] ? __pfx_bnep_session+0x10/0x10 [ 194.925404][ T9843] kthread+0x7a9/0x920 [ 194.929461][ T9843] ? __pfx_bnep_session+0x10/0x10 [ 194.934478][ T9843] ? __pfx_kthread+0x10/0x10 [ 194.939047][ T9843] ? __pfx_kthread+0x10/0x10 [ 194.943617][ T9843] ? __pfx_kthread+0x10/0x10 [ 194.948188][ T9843] ? __pfx_kthread+0x10/0x10 [ 194.952767][ T9843] ? _raw_spin_unlock_irq+0x23/0x50 [ 194.957944][ T9843] ? lockdep_hardirqs_on+0x9d/0x150 [ 194.963123][ T9843] ? __pfx_kthread+0x10/0x10 [ 194.967693][ T9843] ret_from_fork+0x4b/0x80 [ 194.972086][ T9843] ? __pfx_kthread+0x10/0x10 [ 194.976656][ T9843] ret_from_fork_asm+0x1a/0x30 [ 194.981401][ T9843] [ 196.069122][ T9843] Shutting down cpus with NMI [ 196.074143][ T9843] Kernel Offset: disabled [ 196.078558][ T9843] Rebooting in 86400 seconds..