last executing test programs: 5m4.102175319s ago: executing program 2 (id=6259): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffffff8, '\x00', 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket(0x2, 0x80805, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) pipe(&(0x7f0000000140)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 5m3.372299442s ago: executing program 1 (id=6351): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) mmap(&(0x7f00005a2000/0x8000)=nil, 0x8000, 0x5, 0x110, r0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}, 0x1, 0x0, 0x0, 0x4048810}, 0x140) sendto$packet(r0, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dda5e986f34c10d8c39c3002de8ec445ae083a4b7fc0", 0x23, 0x0, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="ad446050e878"}, 0x14) 5m3.177963725s ago: executing program 2 (id=6353): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x2}, @mss={0x2, 0x1}, @window={0x3, 0x8, 0x6}, @timestamp, @sack_perm, @window={0x3, 0x1, 0x5}], 0x8) sendto$inet(r0, &(0x7f00000007c0)='%', 0x1, 0xe044, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000380), 0x0, 0x480c1, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) 5m2.027476582s ago: executing program 1 (id=6354): r0 = socket$igmp(0x2, 0x3, 0x2) socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f0000000280)={{}, "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"}) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0xfc, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10) 5m1.58134149s ago: executing program 2 (id=6355): r0 = socket(0x200000100000011, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000240)) bind$packet(r0, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="34000000020000feffff7f0000000000d96e6c8d5e85080045f00d"], 0x34}], 0x1}, 0x0) 5m1.164529786s ago: executing program 1 (id=6358): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000700000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x18) socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) unshare(0x6a040000) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, 0x0, 0x0, 0x40000000, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r0, 0xffffffffffffffff, 0x5, 0x2}) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) socket$inet6(0xa, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x2401, 0x0) socket$kcm(0xa, 0x2, 0x73) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r5, @ANYBLOB="06001500070000000c00168008000100", @ANYRES16=r4], 0x38}}, 0x10) 5m0.728666402s ago: executing program 2 (id=6359): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) syz_emit_ethernet(0x6f, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x65, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x4e24, 0x4e20, 0x4d, 0x0, @opaque="b323ab2d40aa9d0e4367cc1831f849e132030663b9b28efb51f1e9b0ca9b9cad9788dfc5f03ec0e494e8d2c80a0357f904208695513dc48bbd9026385a3aad8c64f3f5d046"}}}}}, 0x0) 5m0.02656859s ago: executing program 2 (id=6362): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffffff8, '\x00', 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket(0x2, 0x80805, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) pipe(&(0x7f0000000140)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 4m59.877440981s ago: executing program 1 (id=6363): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) mmap(&(0x7f00005a2000/0x8000)=nil, 0x8000, 0x5, 0x110, r0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}, 0x1, 0x0, 0x0, 0x4048810}, 0x140) sendto$packet(r0, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dda5e986f34c10d8c39c3002de8ec445ae083a4b7fc0", 0x23, 0x0, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="ad446050e878"}, 0x14) 4m59.294472716s ago: executing program 2 (id=6365): socket$kcm(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0xf0b, 0x3, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x6}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xfffffffffffffff4}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48884}, 0x4090) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x38, 0x1403, 0x1, 0x70bd2d, 0x24dfdbf6, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_vlan\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004111}, 0x20040050) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, 0x0, &(0x7f0000000140)) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(0xffffffffffffffff, &(0x7f0000000040)="2700000014000707030e0000120f0a0011", 0x11) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r8], 0x14}, 0x1, 0x0, 0x0, 0x20000054}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, 0x0, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001480)=ANY=[@ANYBLOB="640000001000370400"/19, @ANYRES32=0x0, @ANYBLOB="000000000012800e00010069703665727370616b438e328c1743b9308706fb0005003000028014000600200100005de82c39093f7f8de94780ced20000000000ef56dc427dd915bbb1db89e0fc090000007dd1e229dd8e5ef06c5ba3f61b17a546a0e10907fe81"], 0x64}}, 0x0) recvmmsg$unix(r4, 0x0, 0x0, 0x26022, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x11, 0x0, 0x0, 0x0, 0x1, 0xd0, &(0x7f0000001780)=""/208, 0x40f00, 0xe, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)=[{0x2, 0x1, 0xd, 0xc}], 0x10, 0xb4d}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000001c0)='cachefiles_mark_active\x00', r11, 0x0, 0x10000000007f}, 0x18) 4m59.187201455s ago: executing program 1 (id=6366): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffc, {0x0, 0x0, 0x0, r7, {}, {0x6, 0xb}, {0x9, 0x6}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x9, 0x1, 0x9, 0x2, 0x5, 0x401}, {0x5, 0x0, 0x4, 0x400, 0x6}, 0xfffffffa, 0x80000000, 0x14ac}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4m57.318079861s ago: executing program 1 (id=6372): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000700000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x18) socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) unshare(0x6a040000) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, 0x0, 0x0, 0x40000000, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r0, 0xffffffffffffffff, 0x5, 0x2}) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) socket$inet6(0xa, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x2401, 0x0) socket$kcm(0xa, 0x2, 0x73) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r5, @ANYBLOB="06001500070000000c00168008000100", @ANYRES16=r4], 0x38}}, 0x10) 4m43.832669844s ago: executing program 32 (id=6365): socket$kcm(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0xf0b, 0x3, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x6}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xfffffffffffffff4}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48884}, 0x4090) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x38, 0x1403, 0x1, 0x70bd2d, 0x24dfdbf6, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_vlan\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004111}, 0x20040050) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, 0x0, &(0x7f0000000140)) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(0xffffffffffffffff, &(0x7f0000000040)="2700000014000707030e0000120f0a0011", 0x11) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r8], 0x14}, 0x1, 0x0, 0x0, 0x20000054}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, 0x0, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001480)=ANY=[@ANYBLOB="640000001000370400"/19, @ANYRES32=0x0, @ANYBLOB="000000000012800e00010069703665727370616b438e328c1743b9308706fb0005003000028014000600200100005de82c39093f7f8de94780ced20000000000ef56dc427dd915bbb1db89e0fc090000007dd1e229dd8e5ef06c5ba3f61b17a546a0e10907fe81"], 0x64}}, 0x0) recvmmsg$unix(r4, 0x0, 0x0, 0x26022, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x11, 0x0, 0x0, 0x0, 0x1, 0xd0, &(0x7f0000001780)=""/208, 0x40f00, 0xe, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)=[{0x2, 0x1, 0xd, 0xc}], 0x10, 0xb4d}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000001c0)='cachefiles_mark_active\x00', r11, 0x0, 0x10000000007f}, 0x18) 4m41.717678872s ago: executing program 33 (id=6372): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000700000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x18) socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) unshare(0x6a040000) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, 0x0, 0x0, 0x40000000, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r0, 0xffffffffffffffff, 0x5, 0x2}) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) socket$inet6(0xa, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x2401, 0x0) socket$kcm(0xa, 0x2, 0x73) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r5, @ANYBLOB="06001500070000000c00168008000100", @ANYRES16=r4], 0x38}}, 0x10) 5.959743245s ago: executing program 5 (id=7634): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) 5.745304963s ago: executing program 6 (id=7636): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd82, &(0x7f0000001440)={@remote, @random, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xd74, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @echo={0x8, 0x0, 0x0, 0x92, 0x0, "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"}}}}}, 0x0) 5.33108265s ago: executing program 0 (id=7638): socket$kcm(0x2, 0xa, 0x2) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x4788}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) 5.238944955s ago: executing program 5 (id=7639): socket$netlink(0x10, 0x3, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r2, 0x4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x28}], 0x1}}], 0x1, 0x0) 5.226108132s ago: executing program 6 (id=7641): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8915, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) socket$inet6(0xa, 0x3, 0x3e) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r0, 0x0, 0x104) socket$kcm(0x11, 0xa, 0x300) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000340)="18", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @private0, 0x80000001}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000180)="ed", 0x1}], 0x1}}], 0x2, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0xd, 0x1c80, 0xfefa, 0xff4e, 0xced, {0x0, @in6={{0xa, 0x4e23, 0x8000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7ff}}, 0x2, 0x7, 0x9, 0xffffffff, 0x5}}, &(0x7f0000000040)=0xb0) 4.690080889s ago: executing program 0 (id=7642): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffffff8, '\x00', 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket(0x2, 0x80805, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) pipe(&(0x7f0000000140)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 4.400256578s ago: executing program 5 (id=7644): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) getpid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="2e000400010002", 0x7) sendmsg$nl_route(r3, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004000) sendmsg$NFT_BATCH(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) openat$cgroup_ro(r1, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0) socket(0x3, 0x0, 0x4) connect$802154_dgram(r0, &(0x7f0000000240)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0302}}}, 0x14) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000003b80), r7) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x4040000) getsockopt$IP_VS_SO_GET_SERVICES(r9, 0x0, 0x482, &(0x7f00000000c0)=""/231, &(0x7f00000001c0)=0xe7) sendmsg$NFC_CMD_DISABLE_SE(r7, &(0x7f0000003c80)={0x0, 0x0, &(0x7f0000003c40)={&(0x7f0000003c00)={0x24, r8, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008011}, 0x8) 4.232216032s ago: executing program 3 (id=7645): epoll_create1(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e25, 0x0, @loopback, 0x18}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000240)=0x1, 0x4) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) sendto$packet(r0, &(0x7f0000000800)="cf8eb673595d8fbf0693d1c13a", 0xd, 0x890, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "2000a200009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) socketpair$unix(0x1, 0x3, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x400000, 0x0, 0xffffffffffffff1b, 0x7a}, 0x0, &(0x7f0000000280)={0x3fc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 4.190646225s ago: executing program 0 (id=7646): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x10, 0x1, 0x25dffbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xa, 0xffff}, {0xd, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x41}, @TCA_CAKE_MPU={0x8, 0xe, 0x25}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040040}, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x3}}, 0x0) setresgid(0x0, 0xee01, 0x0) syz_io_uring_setup(0x2bf3, &(0x7f0000000040)={0x0, 0x1323, 0x4000, 0x3, 0x2d4}, &(0x7f00000000c0), 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000001714000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4010}, 0x4008050) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000020000000a3c000000120a09000000000000000000020000000900020073797a320000000008000440040000000900010073797a30000000000800034000000007"], 0x64}, 0x1, 0x0, 0x0, 0x44800}, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="05000000ff7f000005000000070000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00V'], 0x48) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, &(0x7f0000002040)=0x4, 0x4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0x8, &(0x7f0000000440)=0xe, 0x4) sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000690005"], 0x28}}, 0x0) recvmmsg(r4, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/91, 0x5b}}, {{&(0x7f0000000000)=@isdn, 0x80, &(0x7f0000000640)=[{&(0x7f0000000080)=""/225, 0xe1}, {&(0x7f00000001c0)=""/65, 0x41}, {0x0}, {&(0x7f0000000240)=""/99, 0x63}, {&(0x7f00000002c0)=""/122, 0x7a}, {&(0x7f00000008c0)=""/35, 0x23}, {&(0x7f0000000500)=""/227, 0xe3}, {&(0x7f0000000600)=""/1, 0x1}], 0x8}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000700)=""/27, 0x1b}], 0x1, &(0x7f0000000780)=""/112, 0x70}}], 0x3, 0x40002002, 0x0) r5 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) set_mempolicy_home_node(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0) 3.926971137s ago: executing program 4 (id=7647): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x44, 0x14, 0x1, 0x0, 0x0, {0x2, 0x88}, [@INET_DIAG_REQ_BYTECODE={0x2e, 0x1, "fd2929bf64daedcfeb488e63463d8554add1da6e87f783980a4d1634c6450559443c29240956451306cf"}]}, 0x44}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x44}, 0x10) 3.71332344s ago: executing program 6 (id=7648): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(r0, 0x0, 0x0, 0x40010041, 0x0) 3.521848532s ago: executing program 3 (id=7649): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) 3.098731293s ago: executing program 4 (id=7650): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreq(r0, 0x0, 0x24, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x42}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r6) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r8, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090008000000000000000a100000000000000000000008001e0001"], 0x24}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x28, r7, 0x607, 0x270bd07, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x28}}, 0x4008400) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, 0x0, 0x20008850) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x74, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r14, {0x9}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0xd, 0x1, 0x3, 0x1, 0x4, 0x401, 0xe, 0xfffffffe, [{0x200, 0x500, 0x3, 0xe}, {0x6783, 0x2, 0x8001, 0x10}, {0x40000, 0x53, 0xa9, 0x80000001}]}}]}}]}, 0x74}}, 0x20000000) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0xc}, {0x0, 0xfff1}, {0x2, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0xdb, 0x7ff, 0x2, 0x9, 0x6, 0x20000002, 0xfffffffb, 0xc00000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) 2.940131525s ago: executing program 3 (id=7651): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a3100000000140004"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 2.856445565s ago: executing program 5 (id=7652): syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000300)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0xff, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x10, 0x0, @opaque="cbe66f1099d3a415"}}}}}, 0x0) 2.647250412s ago: executing program 6 (id=7653): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002a00)={0xfc, {"a2e3ad0e090d07f91b5e1a1887f70706d038e7ff7fc6e5539b203c0a8b089b3f32356c030890e0879b0a4ac6e70a9b334a959b6696048ed30af3988f7ef319520100ffe8d178708c523c921b1b5b31070d0773180acd3b78130daa61d8e8042001005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2ff7949d1f416e56c71b1931870262f5e801119242ca026bfcc21e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771a0000119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc18892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae1b9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982c04000000000000005c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80c1ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d5062c59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843ddbd8db411d8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227fff72de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e240100c0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f7524e2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e842729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458ffff5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a898a33a6d88e7cfe0e0000000000d80a4fe654578376e599aff3565b1d531f30912b9945fc83d38a155d5284edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295bf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e542ccea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000", 0x1000}}, 0x1006) 2.532581436s ago: executing program 0 (id=7654): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x7002}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000600)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) pread64(0xffffffffffffffff, &(0x7f0000002200)=""/89, 0x59, 0x10000) 2.315439479s ago: executing program 3 (id=7655): pipe(&(0x7f0000000140)={0xffffffffffffffff}) close(r0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000200)=0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, r0}, 0x94) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x80000001}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000300)={0xf001, 0x8000, 0x9, 0x0, r4}, &(0x7f0000000340)=0x10) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000240)=0x3d) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r5, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x38, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x24001850) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f00000003c0), &(0x7f0000000400)=0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x0, 0xe, 0x0, &(0x7f0000002580)="f0b9547ee7affa9daabd309a75d3", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) 2.207505956s ago: executing program 4 (id=7656): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffffff8, '\x00', 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket(0x2, 0x80805, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) pipe(&(0x7f0000000140)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.12306274s ago: executing program 5 (id=7657): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0xff, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x6, 0x7, 0x8001, 0xffffffff, 0x390, 0x6}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff2}, {0xb, 0xb}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.780584411s ago: executing program 6 (id=7658): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8915, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) socket$inet6(0xa, 0x3, 0x3e) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r0, 0x0, 0x104) socket$kcm(0x11, 0xa, 0x300) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000340)="18", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @private0, 0x80000001}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000180)="ed", 0x1}], 0x1}}], 0x2, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0xd, 0x1c80, 0xfefa, 0xff4e, 0xced, {0x0, @in6={{0xa, 0x4e23, 0x8000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7ff}}, 0x2, 0x7, 0x9, 0xffffffff, 0x5}}, &(0x7f0000000040)=0xb0) 1.544512419s ago: executing program 3 (id=7659): epoll_create1(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e25, 0x0, @loopback, 0x18}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000240)=0x1, 0x4) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) sendto$packet(r0, &(0x7f0000000800)="cf8eb673595d8fbf0693d1c13a", 0xd, 0x890, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "2000a200009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) pselect6(0x0, 0x0, 0x0, &(0x7f0000000280)={0x3fc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1.455732157s ago: executing program 4 (id=7660): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x44}, 0x10) 1.175319961s ago: executing program 0 (id=7661): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) 972.227499ms ago: executing program 5 (id=7662): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) getpid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="2e000400010002", 0x7) sendmsg$nl_route(r3, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004000) sendmsg$NFT_BATCH(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) openat$cgroup_ro(r1, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0) socket(0x3, 0x0, 0x4) connect$802154_dgram(r0, &(0x7f0000000240)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0302}}}, 0x14) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000003b80), r7) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x4040000) getsockopt$IP_VS_SO_GET_SERVICES(r9, 0x0, 0x482, &(0x7f00000000c0)=""/231, &(0x7f00000001c0)=0xe7) sendmsg$NFC_CMD_DISABLE_SE(r7, &(0x7f0000003c80)={0x0, 0x0, &(0x7f0000003c40)={&(0x7f0000003c00)={0x24, r8, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008011}, 0x8) 953.916711ms ago: executing program 4 (id=7663): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000001cc0), 0x0, 0x40010041, 0x0) 613.919136ms ago: executing program 0 (id=7664): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x10, 0x1, 0x25dffbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xa, 0xffff}, {0xd, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x41}, @TCA_CAKE_MPU={0x8, 0xe, 0x25}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040040}, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x3}}, 0x0) setresgid(0x0, 0xee01, 0x0) syz_io_uring_setup(0x2bf3, &(0x7f0000000040)={0x0, 0x1323, 0x4000, 0x3, 0x2d4}, &(0x7f00000000c0), 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000001714000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4010}, 0x4008050) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000020000000a3c000000120a09000000000000000000020000000900020073797a320000000008000440040000000900010073797a30000000000800034000000007"], 0x64}, 0x1, 0x0, 0x0, 0x44800}, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="05000000ff7f000005000000070000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00V'], 0x48) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, &(0x7f0000002040)=0x4, 0x4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0x8, &(0x7f0000000440)=0xe, 0x4) sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000690005"], 0x28}}, 0x0) recvmmsg(r4, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/91, 0x5b}}, {{&(0x7f0000000000)=@isdn, 0x80, &(0x7f0000000640)=[{&(0x7f0000000080)=""/225, 0xe1}, {&(0x7f00000001c0)=""/65, 0x41}, {0x0}, {&(0x7f0000000240)=""/99, 0x63}, {&(0x7f00000002c0)=""/122, 0x7a}, {&(0x7f00000008c0)=""/35, 0x23}, {&(0x7f0000000500)=""/227, 0xe3}, {&(0x7f0000000600)=""/1, 0x1}], 0x8}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000700)=""/27, 0x1b}], 0x1, &(0x7f0000000780)=""/112, 0x70}}], 0x3, 0x40002002, 0x0) r5 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) set_mempolicy_home_node(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0) 382.789297ms ago: executing program 4 (id=7665): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x80040007, 0x0, 0x0, 0x41100, 0x18}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='GPL\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b1a, &(0x7f0000000040)) 382.138855ms ago: executing program 6 (id=7666): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreq(r0, 0x0, 0x24, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x42}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r6) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r8, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090008000000000000000a100000000000000000000008001e0001"], 0x24}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x28, r7, 0x607, 0x270bd07, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x28}}, 0x4008400) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x74, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r14, {0x9}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0xd, 0x1, 0x3, 0x1, 0x4, 0x401, 0xe, 0xfffffffe, [{0x200, 0x500, 0x3, 0xe}, {0x6783, 0x2, 0x8001, 0x10}, {0x40000, 0x53, 0xa9, 0x80000001}]}}]}}]}, 0x74}}, 0x20000000) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0xc}, {0x0, 0xfff1}, {0x2, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0xdb, 0x7ff, 0x2, 0x9, 0x6, 0x20000002, 0xfffffffb, 0xc00000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) 0s ago: executing program 3 (id=7667): syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000300)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0xff, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x10, 0x0, @opaque="cbe66f1099d3a415"}}}}}, 0x0) kernel console output (not intermixed with test programs): 7][T17225] team_slave_0 (unregistering): left promiscuous mode [ 1745.411486][T17225] team0 (unregistering): Port device team_slave_0 removed [ 1745.423752][T19427] smc: removing ib device !yz! [ 1746.670976][T23708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5930'. [ 1746.684756][T23708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5930'. [ 1747.757898][T23603] bridge0: port 1(bridge_slave_0) entered blocking state [ 1747.765797][T23603] bridge0: port 1(bridge_slave_0) entered disabled state [ 1747.773792][T23603] bridge_slave_0: entered allmulticast mode [ 1747.784904][T23603] bridge_slave_0: entered promiscuous mode [ 1747.878776][T23714] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5931'. [ 1747.936739][T23603] bridge0: port 2(bridge_slave_1) entered blocking state [ 1747.944373][T23603] bridge0: port 2(bridge_slave_1) entered disabled state [ 1747.952299][T23603] bridge_slave_1: entered allmulticast mode [ 1747.963107][T23603] bridge_slave_1: entered promiscuous mode [ 1748.658768][T23603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1749.100740][T23603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1749.511304][T23603] team0: Port device team_slave_0 added [ 1749.597116][T23603] team0: Port device team_slave_1 added [ 1749.689275][T23603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1749.696912][T23603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1749.724071][T23603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1749.785034][T23603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1749.792580][T23603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1749.818956][T23603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1750.291851][T23603] hsr_slave_0: entered promiscuous mode [ 1750.302117][T23603] hsr_slave_1: entered promiscuous mode [ 1750.312410][T23603] debugfs: 'hsr0' already exists in 'hsr' [ 1750.318312][T23603] Cannot create hsr debugfs directory [ 1751.424803][T23755] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5943'. [ 1752.155255][T23603] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1752.185173][T23603] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1752.209054][T23603] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1752.328677][T23603] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1752.931763][T23791] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5951'. [ 1753.002898][T23791] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5951'. [ 1753.538203][T23603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1753.693849][T23603] 8021q: adding VLAN 0 to HW filter on device team0 [ 1753.717665][T23800] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5955'. [ 1753.835967][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1753.843568][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1753.932931][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1753.940531][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1754.165659][T23802] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5957'. [ 1754.966531][T23818] netlink: 200 bytes leftover after parsing attributes in process `syz.2.5961'. [ 1755.052833][T23821] netlink: 'syz.3.5962': attribute type 12 has an invalid length. [ 1755.448114][T23830] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5964'. [ 1755.904540][T23833] netlink: 'syz.2.5965': attribute type 1 has an invalid length. [ 1756.052682][T23830] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5964'. [ 1760.545265][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1761.897265][T23833] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1762.163236][T23603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1762.374291][T23878] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5968'. [ 1762.611512][T23886] syzkaller0: entered promiscuous mode [ 1762.617359][T23886] syzkaller0: entered allmulticast mode [ 1762.656704][T23603] veth0_vlan: entered promiscuous mode [ 1762.792916][T23603] veth1_vlan: entered promiscuous mode [ 1762.968876][T23603] veth0_macvtap: entered promiscuous mode [ 1763.047192][T23603] veth1_macvtap: entered promiscuous mode [ 1763.194861][T23603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1763.281332][T23603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1763.373352][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1763.418828][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1763.448446][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1763.469360][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1763.535497][T23896] netlink: 'syz.4.5975': attribute type 12 has an invalid length. [ 1763.737016][T23899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5976'. [ 1763.813893][T23899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5976'. [ 1764.620169][T23911] netlink: 'syz.3.5980': attribute type 1 has an invalid length. [ 1764.842970][T23916] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5981'. [ 1766.311877][T23911] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1766.493348][T23921] syzkaller0: entered promiscuous mode [ 1766.507497][T23921] syzkaller0: entered allmulticast mode [ 1767.651507][T23951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5990'. [ 1767.665962][T23950] netlink: 'syz.2.5988': attribute type 12 has an invalid length. [ 1767.687748][T23951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5990'. [ 1769.161926][T23967] netlink: 'syz.1.5995': attribute type 1 has an invalid length. [ 1770.807206][T23967] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1771.891364][T24000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6002'. [ 1771.968423][T24000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6002'. [ 1772.260350][T24005] netlink: 'syz.4.6003': attribute type 12 has an invalid length. [ 1772.738183][T24014] netlink: 'syz.2.6007': attribute type 1 has an invalid length. [ 1772.838172][T24014] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1775.144731][T24027] syzkaller0: entered promiscuous mode [ 1775.150568][T24027] syzkaller0: entered allmulticast mode [ 1775.365968][ T4791] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1775.376176][ T4791] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1775.502735][ T4791] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1775.510991][ T4791] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1775.862770][T24043] tipc: Enabled bearer , priority 0 [ 1775.904763][T24043] syzkaller0: entered promiscuous mode [ 1775.911977][T24043] syzkaller0: entered allmulticast mode [ 1776.026086][T24043] tipc: Resetting bearer [ 1776.070271][T24042] tipc: Resetting bearer [ 1776.103196][T24042] tipc: Disabling bearer [ 1776.243641][T24054] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6014'. [ 1776.288863][T24054] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6014'. [ 1776.901866][T24066] netlink: 'syz.2.6019': attribute type 1 has an invalid length. [ 1776.948222][T24064] netlink: 'syz.4.6016': attribute type 12 has an invalid length. [ 1777.104809][T24066] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1780.069029][T24107] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6027'. [ 1780.093835][T24107] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6027'. [ 1780.317139][T24095] syzkaller0: entered promiscuous mode [ 1780.323513][T24095] syzkaller0: entered allmulticast mode [ 1781.117050][T24124] netlink: 'syz.0.6033': attribute type 1 has an invalid length. [ 1781.167680][T24124] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6033'. [ 1781.361806][T24125] team0: Port device gretap1 added [ 1781.562298][T24128] syzkaller0: entered promiscuous mode [ 1781.568001][T24128] syzkaller0: entered allmulticast mode [ 1782.087303][T24141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6040'. [ 1782.128706][T24141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6040'. [ 1784.132067][T24169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6049'. [ 1784.201717][T24173] netlink: 'syz.4.6050': attribute type 1 has an invalid length. [ 1784.282287][T24175] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6050'. [ 1784.344313][T24173] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1784.833414][T24181] syzkaller0: entered promiscuous mode [ 1784.839104][T24181] syzkaller0: entered allmulticast mode [ 1785.093628][T24187] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6055'. [ 1785.130583][T24187] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6055'. [ 1785.332249][T24189] netlink: 'syz.4.6056': attribute type 12 has an invalid length. [ 1788.396749][T24218] netlink: 'syz.4.6066': attribute type 1 has an invalid length. [ 1788.475484][T24218] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1788.600778][T24222] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6066'. [ 1788.885351][T24225] syzkaller0: entered promiscuous mode [ 1788.891256][T24225] syzkaller0: entered allmulticast mode [ 1788.907359][T24226] tipc: Enabled bearer , priority 0 [ 1788.954534][T24228] syzkaller0: entered promiscuous mode [ 1788.960569][T24228] syzkaller0: entered allmulticast mode [ 1789.123206][T24226] tipc: Resetting bearer [ 1789.171361][T24224] tipc: Resetting bearer [ 1789.191310][T24224] tipc: Disabling bearer [ 1789.391966][T24233] netlink: 'syz.0.6071': attribute type 12 has an invalid length. [ 1789.421325][T24234] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6070'. [ 1789.488515][T24234] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6070'. [ 1789.603444][ T5803] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1789.615637][ T5803] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1789.625329][ T5803] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1789.646651][ T5803] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1789.658290][ T5803] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1790.195337][T24243] netlink: 'syz.3.6073': attribute type 1 has an invalid length. [ 1790.284391][T24243] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1790.312204][T24245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6074'. [ 1790.505676][T24247] bond3: (slave veth3): Enslaving as an active interface with a down link [ 1790.575289][T24243] vlan3: entered allmulticast mode [ 1790.580936][T24243] veth1: entered allmulticast mode [ 1790.589143][T24243] bond3: (slave vlan3): Opening slave failed [ 1791.709713][ T5803] Bluetooth: hci5: command tx timeout [ 1791.751118][T19427] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1791.781582][T24262] netlink: 'syz.4.6079': attribute type 1 has an invalid length. [ 1791.887239][T24262] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1791.983597][T19427] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1792.077850][T24235] chnl_net:caif_netlink_parms(): no params data found [ 1792.177997][T24273] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6083'. [ 1792.195289][T19427] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1792.378881][T19427] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1792.763011][T24280] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6084'. [ 1792.833291][T24280] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6084'. [ 1793.016944][T24268] syzkaller0: entered promiscuous mode [ 1793.022812][T24268] syzkaller0: entered allmulticast mode [ 1793.406168][T24289] netlink: 'syz.2.6087': attribute type 1 has an invalid length. [ 1793.798615][ T5803] Bluetooth: hci5: command tx timeout [ 1793.957049][T24304] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6090'. [ 1793.967220][T19427] bridge_slave_1: left allmulticast mode [ 1793.973230][T19427] bridge_slave_1: left promiscuous mode [ 1793.979857][T19427] bridge0: port 2(bridge_slave_1) entered disabled state [ 1794.046046][T19427] bridge_slave_0: left allmulticast mode [ 1794.052261][T19427] bridge_slave_0: left promiscuous mode [ 1794.058740][T19427] bridge0: port 1(bridge_slave_0) entered disabled state [ 1794.485896][T19427] dvmrp6 (unregistering): left allmulticast mode [ 1794.727046][T19427] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1794.748669][T19427] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1794.767185][T19427] bond0 (unregistering): Released all slaves [ 1794.794962][T19427] bond1 (unregistering): Released all slaves [ 1794.821846][T19427] bond2 (unregistering): Released all slaves [ 1794.879897][T19427] bond3 (unregistering): Released all slaves [ 1794.906175][T19427] bond4 (unregistering): Released all slaves [ 1794.940183][T19427] bond5 (unregistering): Released all slaves [ 1794.960656][T19427] bond6 (unregistering): Released all slaves [ 1795.004862][T24289] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 1795.113082][T24294] tipc: Enabled bearer , priority 0 [ 1795.132889][T19427] tipc: Left network mode [ 1795.163934][T24297] vlan4: entered allmulticast mode [ 1795.169266][T24297] veth1: entered allmulticast mode [ 1795.296843][T24298] syzkaller0: entered promiscuous mode [ 1795.302903][T24298] syzkaller0: entered allmulticast mode [ 1795.450158][T24305] tipc: Resetting bearer [ 1795.465530][T24288] tipc: Resetting bearer [ 1795.485150][T24288] tipc: Disabling bearer [ 1795.728987][T24235] bridge0: port 1(bridge_slave_0) entered blocking state [ 1795.736841][T24235] bridge0: port 1(bridge_slave_0) entered disabled state [ 1795.744836][T24235] bridge_slave_0: entered allmulticast mode [ 1795.756307][T24235] bridge_slave_0: entered promiscuous mode [ 1795.870222][ T5803] Bluetooth: hci5: command tx timeout [ 1795.924636][T19427] hsr_slave_0: left promiscuous mode [ 1795.932957][T19427] hsr_slave_1: left promiscuous mode [ 1795.941009][T19427] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1795.948564][T19427] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1796.023439][T19427] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1796.031257][T19427] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1796.122156][T19427] veth1_macvtap: left promiscuous mode [ 1796.127911][T19427] veth0_macvtap: left promiscuous mode [ 1796.133974][T19427] veth1_vlan: left promiscuous mode [ 1796.139630][T19427] veth0_vlan: left promiscuous mode [ 1796.196302][T24317] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6094'. [ 1796.297424][T24321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6097'. [ 1796.417404][T24324] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6097'. [ 1796.972452][T19427] team0 (unregistering): Port device team_slave_1 removed [ 1797.034323][T19427] team0 (unregistering): Port device team_slave_0 removed [ 1797.209191][T24235] bridge0: port 2(bridge_slave_1) entered blocking state [ 1797.217206][T24235] bridge0: port 2(bridge_slave_1) entered disabled state [ 1797.225035][T24235] bridge_slave_1: entered allmulticast mode [ 1797.234379][T24235] bridge_slave_1: entered promiscuous mode [ 1797.880319][T24235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1797.949814][ T5803] Bluetooth: hci5: command tx timeout [ 1797.985495][T24235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1798.088043][T24344] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6101'. [ 1798.321636][T24235] team0: Port device team_slave_0 added [ 1798.363324][T24235] team0: Port device team_slave_1 added [ 1798.614307][T24235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1798.626536][T24235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1798.654472][T24235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1798.751984][T24235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1798.759217][T24235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1798.785886][T24235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1798.851578][T24356] tipc: Enabled bearer , priority 0 [ 1798.928261][T24356] syzkaller0: entered promiscuous mode [ 1798.934260][T24356] syzkaller0: entered allmulticast mode [ 1798.983898][T24356] tipc: Resetting bearer [ 1799.133341][T24354] tipc: Resetting bearer [ 1799.158245][T24354] tipc: Disabling bearer [ 1799.203328][T24235] hsr_slave_0: entered promiscuous mode [ 1799.236198][T24235] hsr_slave_1: entered promiscuous mode [ 1799.408183][T24365] netlink: 'syz.3.6108': attribute type 7 has an invalid length. [ 1799.806697][T24373] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6109'. [ 1799.851446][T24373] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6109'. [ 1800.179160][T24376] syzkaller0: entered promiscuous mode [ 1800.185133][T24376] syzkaller0: entered allmulticast mode [ 1801.535047][T24235] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1801.680852][T24235] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1801.832933][T24235] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1801.925878][T24235] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1802.126626][T24398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6117'. [ 1803.603269][T24405] tipc: Enabled bearer , priority 0 [ 1803.742706][T24409] syzkaller0: entered promiscuous mode [ 1803.748491][T24409] syzkaller0: entered allmulticast mode [ 1803.794398][T24405] tipc: Resetting bearer [ 1803.877039][T24404] tipc: Resetting bearer [ 1804.161717][T24404] tipc: Disabling bearer [ 1805.142988][T24421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6123'. [ 1805.221067][T24235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1805.264522][T24421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6123'. [ 1805.534897][T24235] 8021q: adding VLAN 0 to HW filter on device team0 [ 1805.636054][T15146] bridge0: port 1(bridge_slave_0) entered blocking state [ 1805.643658][T15146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1805.695122][T24429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6125'. [ 1805.704723][T24429] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1805.712268][T24429] IPv6: NLM_F_CREATE should be set when creating new route [ 1805.764121][T15146] bridge0: port 2(bridge_slave_1) entered blocking state [ 1805.771693][T15146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1806.105701][T24436] syzkaller0: entered promiscuous mode [ 1806.111955][T24436] syzkaller0: entered allmulticast mode [ 1806.313422][T24439] netlink: 'syz.0.6128': attribute type 1 has an invalid length. [ 1806.538814][T24445] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6130'. [ 1807.472335][T24235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1807.906440][T24235] veth0_vlan: entered promiscuous mode [ 1807.974328][T24235] veth1_vlan: entered promiscuous mode [ 1808.359191][T24235] veth0_macvtap: entered promiscuous mode [ 1808.475642][T24235] veth1_macvtap: entered promiscuous mode [ 1808.686007][T24235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1808.794145][T24235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1808.887448][ T4791] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1808.934611][ T4791] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1808.982687][ T4791] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1809.013688][ T4791] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1809.101132][T24476] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6139'. [ 1809.111345][T24476] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1809.171671][T24477] netlink: 'syz.0.6140': attribute type 12 has an invalid length. [ 1809.286602][T24479] syzkaller0: entered promiscuous mode [ 1809.292602][T24479] syzkaller0: entered allmulticast mode [ 1809.583221][T24482] netlink: 'syz.2.6142': attribute type 1 has an invalid length. [ 1809.923821][T24489] Bluetooth: MGMT ver 1.23 [ 1809.982701][T24489] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6145'. [ 1811.568391][T24515] netlink: 'syz.2.6153': attribute type 12 has an invalid length. [ 1811.806351][T24520] syzkaller0: entered promiscuous mode [ 1811.812252][T24520] syzkaller0: entered allmulticast mode [ 1811.924583][T24524] netlink: 'syz.3.6155': attribute type 1 has an invalid length. [ 1813.224764][T24543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6161'. [ 1813.722994][T17225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1813.731687][T17225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1813.908785][ T1885] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1813.917990][ T1885] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1814.061371][T24551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6164'. [ 1814.381873][T24553] netlink: 'syz.4.6165': attribute type 12 has an invalid length. [ 1814.615801][T24558] syzkaller0: entered promiscuous mode [ 1814.621747][T24558] syzkaller0: entered allmulticast mode [ 1815.729235][T23604] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1815.738521][T23604] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1815.773888][T23604] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1815.840862][T23604] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1815.854448][T23604] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1817.482703][T24588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6177'. [ 1817.540645][T24567] chnl_net:caif_netlink_parms(): no params data found [ 1817.842303][T24592] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6179'. [ 1817.851992][T24592] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6179'. [ 1817.885732][T24591] netlink: 'syz.4.6178': attribute type 12 has an invalid length. [ 1817.956598][T24592] syzkaller0: entered promiscuous mode [ 1817.962460][T24592] syzkaller0: entered allmulticast mode [ 1818.063449][T24597] syzkaller0: entered promiscuous mode [ 1818.069297][T24597] syzkaller0: entered allmulticast mode [ 1818.116755][T23604] Bluetooth: hci1: command tx timeout [ 1818.708296][T24567] bridge0: port 1(bridge_slave_0) entered blocking state [ 1818.715956][T24567] bridge0: port 1(bridge_slave_0) entered disabled state [ 1818.723975][T24567] bridge_slave_0: entered allmulticast mode [ 1818.733459][T24567] bridge_slave_0: entered promiscuous mode [ 1818.815414][T24567] bridge0: port 2(bridge_slave_1) entered blocking state [ 1818.823666][T24567] bridge0: port 2(bridge_slave_1) entered disabled state [ 1818.834714][T24567] bridge_slave_1: entered allmulticast mode [ 1818.844367][T24567] bridge_slave_1: entered promiscuous mode [ 1819.170557][T24567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1819.243327][T24567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1819.680386][T24567] team0: Port device team_slave_0 added [ 1819.700041][T24567] team0: Port device team_slave_1 added [ 1819.983768][T24567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1819.992160][T24567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1820.018653][T24567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1820.071931][T24619] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1820.188679][T24567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1820.190017][T23604] Bluetooth: hci1: command tx timeout [ 1820.197673][T24567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1820.230316][T24567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1820.634080][T24567] hsr_slave_0: entered promiscuous mode [ 1820.651928][T24567] hsr_slave_1: entered promiscuous mode [ 1820.660835][T24567] debugfs: 'hsr0' already exists in 'hsr' [ 1820.666734][T24567] Cannot create hsr debugfs directory [ 1820.692825][T24631] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6193'. [ 1820.711721][T24631] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6193'. [ 1820.931237][T24633] syzkaller0: entered promiscuous mode [ 1820.936926][T24633] syzkaller0: entered allmulticast mode [ 1821.974030][T24646] tipc: Started in network mode [ 1821.979289][T24646] tipc: Node identity 7a929b7a3c8, cluster identity 4711 [ 1821.987278][T24646] tipc: Enabled bearer , priority 0 [ 1822.004039][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1822.055529][T24651] syzkaller0: entered promiscuous mode [ 1822.061611][T24651] syzkaller0: entered allmulticast mode [ 1822.266901][T24646] tipc: Resetting bearer [ 1822.269786][T23604] Bluetooth: hci1: command tx timeout [ 1822.374257][T24643] tipc: Resetting bearer [ 1822.428601][T24643] tipc: Disabling bearer [ 1822.687018][T24655] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1822.903387][T24567] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1823.115527][T24567] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1823.165926][T24567] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1823.221050][T24567] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1823.766367][T24671] tipc: Enabled bearer , priority 0 [ 1823.808341][T24671] syzkaller0: entered promiscuous mode [ 1823.816559][T24671] syzkaller0: entered allmulticast mode [ 1823.947676][T24671] tipc: Resetting bearer [ 1824.065362][T24670] tipc: Resetting bearer [ 1824.106838][T24670] tipc: Disabling bearer [ 1824.289028][T24567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1824.350295][T23604] Bluetooth: hci1: command tx timeout [ 1824.508505][T24567] 8021q: adding VLAN 0 to HW filter on device team0 [ 1824.594200][ T1885] bridge0: port 1(bridge_slave_0) entered blocking state [ 1824.601812][ T1885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1824.756496][ T1885] bridge0: port 2(bridge_slave_1) entered blocking state [ 1824.764107][ T1885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1825.393351][T24692] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1825.400889][T24692] IPv6: NLM_F_CREATE should be set when creating new route [ 1825.408280][T24692] IPv6: NLM_F_CREATE should be set when creating new route [ 1826.344781][T24567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1826.491045][T24708] tipc: Enabled bearer , priority 0 [ 1826.516070][T24708] syzkaller0: entered promiscuous mode [ 1826.521958][T24708] syzkaller0: entered allmulticast mode [ 1826.614435][T24710] tipc: Resetting bearer [ 1826.668509][T24709] tipc: Enabled bearer , priority 0 [ 1826.702525][T24706] tipc: Resetting bearer [ 1826.720625][T24706] tipc: Disabling bearer [ 1826.741730][T24709] syzkaller0: entered promiscuous mode [ 1826.747418][T24709] syzkaller0: entered allmulticast mode [ 1826.837776][T24567] veth0_vlan: entered promiscuous mode [ 1826.895801][T24709] tipc: Resetting bearer [ 1826.953033][T24567] veth1_vlan: entered promiscuous mode [ 1826.980951][T24707] tipc: Resetting bearer [ 1827.036201][T24707] tipc: Disabling bearer [ 1827.310793][T24567] veth0_macvtap: entered promiscuous mode [ 1827.381445][T24567] veth1_macvtap: entered promiscuous mode [ 1827.783304][T24567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1827.823136][T24567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1827.893610][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1827.916280][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1827.955914][T24726] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1828.087179][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1828.158400][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1829.411023][T24747] tipc: Enabled bearer , priority 0 [ 1829.446846][T24747] syzkaller0: entered promiscuous mode [ 1829.453198][T24747] syzkaller0: entered allmulticast mode [ 1829.513179][T24747] tipc: Resetting bearer [ 1829.578729][T24746] tipc: Resetting bearer [ 1829.618286][T24746] tipc: Disabling bearer [ 1832.017516][T24795] tipc: Enabled bearer , priority 0 [ 1832.056079][T24795] syzkaller0: entered promiscuous mode [ 1832.061964][T24795] syzkaller0: entered allmulticast mode [ 1832.217507][T24795] tipc: Resetting bearer [ 1832.278549][T24793] tipc: Resetting bearer [ 1832.331765][T24793] tipc: Disabling bearer [ 1832.816193][T24807] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6252'. [ 1832.995841][T24807] tipc: New replicast peer: 255.255.255.255 [ 1833.004821][T24807] tipc: Enabled bearer , priority 10 [ 1833.075575][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1833.083736][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1833.310885][ T1885] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1833.318898][ T1885] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1834.011199][T24824] netlink: 'syz.3.6167': attribute type 1 has an invalid length. [ 1834.119846][ T5857] tipc: Node number set to 1337812141 [ 1834.916946][T24836] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6261'. [ 1834.926905][T24836] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6261'. [ 1835.052714][T24833] syzkaller0: entered promiscuous mode [ 1835.058387][T24833] syzkaller0: entered allmulticast mode [ 1835.081237][T24835] tipc: Started in network mode [ 1835.086450][T24835] tipc: Node identity 628314e9d12f, cluster identity 4711 [ 1835.096215][T24835] tipc: Enabled bearer , priority 0 [ 1835.137883][ T5803] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1835.151074][ T5803] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1835.161745][ T5803] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1835.184766][ T5803] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1835.202843][ T5803] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1835.267212][T24835] syzkaller0: entered promiscuous mode [ 1835.273390][T24835] syzkaller0: entered allmulticast mode [ 1835.474226][T24835] tipc: Resetting bearer [ 1835.500163][T24834] tipc: Resetting bearer [ 1835.561880][T24834] tipc: Disabling bearer [ 1836.145771][T24846] netlink: 'syz.0.6265': attribute type 11 has an invalid length. [ 1837.027320][T24837] chnl_net:caif_netlink_parms(): no params data found [ 1837.070046][T24861] netlink: 'syz.3.6271': attribute type 1 has an invalid length. [ 1837.330014][ T5803] Bluetooth: hci0: command tx timeout [ 1838.908248][T24837] bridge0: port 1(bridge_slave_0) entered blocking state [ 1838.916138][T24837] bridge0: port 1(bridge_slave_0) entered disabled state [ 1838.924296][T24837] bridge_slave_0: entered allmulticast mode [ 1838.933812][T24837] bridge_slave_0: entered promiscuous mode [ 1839.090827][T24879] tipc: Enabled bearer , priority 0 [ 1839.098213][T24837] bridge0: port 2(bridge_slave_1) entered blocking state [ 1839.104357][T24885] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1839.106115][T24837] bridge0: port 2(bridge_slave_1) entered disabled state [ 1839.112895][T24885] IPv6: NLM_F_CREATE should be set when creating new route [ 1839.121174][T24837] bridge_slave_1: entered allmulticast mode [ 1839.136798][T24837] bridge_slave_1: entered promiscuous mode [ 1839.152712][T24883] syzkaller0: entered promiscuous mode [ 1839.158382][T24883] syzkaller0: entered allmulticast mode [ 1839.326446][T24879] tipc: Resetting bearer [ 1839.424023][ T5803] Bluetooth: hci0: command tx timeout [ 1839.685489][T24877] tipc: Resetting bearer [ 1839.719673][T24877] tipc: Disabling bearer [ 1839.773074][T24837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1839.838357][T24889] syz_tun: entered allmulticast mode [ 1839.862665][T24837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1839.933236][T24889] dvmrp6: entered allmulticast mode [ 1840.123522][T24887] syz_tun: left allmulticast mode [ 1840.167895][T24837] team0: Port device team_slave_0 added [ 1840.249950][T24837] team0: Port device team_slave_1 added [ 1840.440132][T24837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1840.447260][T24837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1840.473963][T24837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1840.574834][T24837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1840.582547][T24837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1840.612235][T24837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1841.205642][T24837] hsr_slave_0: entered promiscuous mode [ 1841.216064][T24837] hsr_slave_1: entered promiscuous mode [ 1841.233754][T24837] debugfs: 'hsr0' already exists in 'hsr' [ 1841.239810][T24837] Cannot create hsr debugfs directory [ 1841.461878][T24898] netlink: 'syz.4.6284': attribute type 1 has an invalid length. [ 1841.480517][ T5803] Bluetooth: hci0: command tx timeout [ 1842.907760][T24837] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1843.142234][T24837] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1843.286230][T24837] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1843.489920][T24837] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1843.550031][ T5803] Bluetooth: hci0: command tx timeout [ 1843.968999][T24930] netlink: 'syz.3.6295': attribute type 1 has an invalid length. [ 1843.992793][T24837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1844.068874][T24837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1844.184352][T24837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1844.242892][T24837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1845.239785][T24837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1845.376432][T24837] 8021q: adding VLAN 0 to HW filter on device team0 [ 1845.451910][ T1885] bridge0: port 1(bridge_slave_0) entered blocking state [ 1845.459506][ T1885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1845.551606][ T1885] bridge0: port 2(bridge_slave_1) entered blocking state [ 1845.559099][ T1885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1846.482387][T24960] netlink: 'syz.3.6307': attribute type 1 has an invalid length. [ 1847.235305][T24837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1847.706974][T24837] veth0_vlan: entered promiscuous mode [ 1847.784722][T24837] veth1_vlan: entered promiscuous mode [ 1848.059955][T24837] veth0_macvtap: entered promiscuous mode [ 1848.140475][T24837] veth1_macvtap: entered promiscuous mode [ 1848.647275][T24837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1848.732153][T24837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1848.807291][ T1142] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1848.836826][T15146] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1848.934847][T15146] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1848.998275][T19423] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1849.241980][T24994] netlink: 'syz.1.6320': attribute type 1 has an invalid length. [ 1851.906418][T25032] netlink: 'syz.1.6333': attribute type 1 has an invalid length. [ 1852.664825][T25046] tipc: Enabled bearer , priority 0 [ 1852.709825][T25046] syzkaller0: entered promiscuous mode [ 1852.715598][T25046] syzkaller0: entered allmulticast mode [ 1852.810849][T25044] tipc: Resetting bearer [ 1852.851040][T25044] tipc: Disabling bearer [ 1853.863922][T17225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1853.872790][T17225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1853.989178][T19423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1853.997381][T19423] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1854.486074][T25070] bond1: option resend_igmp: invalid value (256) [ 1854.492829][T25070] bond1: option resend_igmp: allowed values 0 - 255 [ 1854.586274][T25070] bond1 (unregistering): Released all slaves [ 1856.600014][T23604] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1856.658855][T23604] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1856.672299][T23604] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1856.736239][T23604] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1856.763824][T23604] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1856.852329][T25091] tipc: Enabled bearer , priority 0 [ 1856.875518][T25091] syzkaller0: entered promiscuous mode [ 1856.884321][T25091] syzkaller0: entered allmulticast mode [ 1857.190122][T25089] tipc: Resetting bearer [ 1857.324215][T25089] tipc: Disabling bearer [ 1857.508943][T25096] syz_tun: entered allmulticast mode [ 1857.601620][T25095] syz_tun: left allmulticast mode [ 1858.158599][T25090] chnl_net:caif_netlink_parms(): no params data found [ 1858.911959][ T5803] Bluetooth: hci3: command tx timeout [ 1859.843068][T25090] bridge0: port 1(bridge_slave_0) entered blocking state [ 1859.850779][T25090] bridge0: port 1(bridge_slave_0) entered disabled state [ 1859.862628][T25090] bridge_slave_0: entered allmulticast mode [ 1859.872475][T25090] bridge_slave_0: entered promiscuous mode [ 1859.883021][ T5803] Bluetooth: hci4: command 0x0406 tx timeout [ 1860.122300][T25090] bridge0: port 2(bridge_slave_1) entered blocking state [ 1860.129984][T25090] bridge0: port 2(bridge_slave_1) entered disabled state [ 1860.138043][T25090] bridge_slave_1: entered allmulticast mode [ 1860.148909][T25090] bridge_slave_1: entered promiscuous mode [ 1860.425688][T25134] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6365'. [ 1860.708078][T25133] tipc: Started in network mode [ 1860.713427][T25133] tipc: Node identity 7ac109a401c2, cluster identity 4711 [ 1860.721941][T25133] tipc: Enabled bearer , priority 0 [ 1860.739891][T25135] syzkaller0: entered promiscuous mode [ 1860.745562][T25135] syzkaller0: entered allmulticast mode [ 1860.798939][T25127] infiniband syz1: set active [ 1860.804048][T25127] infiniband syz1: added veth0_vlan [ 1860.826569][T25090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1860.893650][T25127] RDS/IB: syz1: added [ 1860.897878][T25127] smc: adding ib device syz1 with port count 1 [ 1860.904437][T25127] smc: ib device syz1 port 1 has no pnetid [ 1860.956971][T25133] tipc: Resetting bearer [ 1861.003269][T23604] Bluetooth: hci3: command tx timeout [ 1861.110985][T25090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1861.121506][T25128] tipc: Resetting bearer [ 1861.163070][T25128] tipc: Disabling bearer [ 1861.712381][T25090] team0: Port device team_slave_0 added [ 1861.890394][T25090] team0: Port device team_slave_1 added [ 1862.333451][T25158] netlink: 'syz.0.6373': attribute type 1 has an invalid length. [ 1862.601065][T25158] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1862.627109][T25090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1862.634481][T25090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1862.661014][T25090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1862.743919][T25161] vlan2: entered allmulticast mode [ 1862.749363][T25161] bond1: entered allmulticast mode [ 1862.767633][T25090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1862.775037][T25090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1862.801608][T25090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1863.075732][ T5803] Bluetooth: hci3: command tx timeout [ 1864.076344][T25090] hsr_slave_0: entered promiscuous mode [ 1864.086945][T25090] hsr_slave_1: entered promiscuous mode [ 1864.096083][T25090] debugfs: 'hsr0' already exists in 'hsr' [ 1864.102176][T25090] Cannot create hsr debugfs directory [ 1865.168393][ T5803] Bluetooth: hci3: command tx timeout [ 1865.551939][T25090] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1865.711333][T25090] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1865.986816][T25090] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1866.056891][T25182] tipc: Enabled bearer , priority 0 [ 1866.080801][T25181] syzkaller0: entered promiscuous mode [ 1866.086580][T25181] syzkaller0: entered allmulticast mode [ 1866.168218][T25090] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1866.422857][T25181] tipc: Resetting bearer [ 1866.592397][T25180] tipc: Resetting bearer [ 1866.634921][T25180] tipc: Disabling bearer [ 1866.874919][T25090] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1867.171042][T25090] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1867.217830][T25090] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1867.279076][T25090] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1867.436857][T25191] netlink: 'syz.0.6385': attribute type 1 has an invalid length. [ 1867.650484][T25191] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1867.684551][T25193] vlan3: entered allmulticast mode [ 1867.692523][T25193] bond2: entered allmulticast mode [ 1868.341483][T25090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1868.533260][T25090] 8021q: adding VLAN 0 to HW filter on device team0 [ 1868.609455][ T1885] bridge0: port 1(bridge_slave_0) entered blocking state [ 1868.616930][ T1885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1868.734441][ T1885] bridge0: port 2(bridge_slave_1) entered blocking state [ 1868.742094][ T1885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1869.232857][ T11] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1869.620575][ T11] usb 1-1: Using ep0 maxpacket: 16 [ 1869.700035][ T11] usb 1-1: config 0 has no interfaces? [ 1869.730447][ T11] usb 1-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 1869.740278][ T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1869.748464][ T11] usb 1-1: Product: syz [ 1869.753451][ T11] usb 1-1: Manufacturer: syz [ 1869.758215][ T11] usb 1-1: SerialNumber: syz [ 1869.826565][ T11] usb 1-1: config 0 descriptor?? [ 1870.151846][T25199] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6388'. [ 1870.234892][ T42] usb 1-1: USB disconnect, device number 37 [ 1870.379152][T25214] syzkaller1: entered promiscuous mode [ 1870.385064][T25214] syzkaller1: entered allmulticast mode [ 1870.554698][T25090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1872.633350][T25090] veth0_vlan: entered promiscuous mode [ 1872.715151][T25090] veth1_vlan: entered promiscuous mode [ 1872.796606][T25229] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6394'. [ 1872.806323][T25229] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1872.880396][T25229] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1873.127667][T25090] veth0_macvtap: entered promiscuous mode [ 1873.206985][T25090] veth1_macvtap: entered promiscuous mode [ 1873.356528][T25090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1873.528122][T25090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1873.610526][T19423] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1873.713920][T24035] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1873.738774][T24035] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1873.791645][T17225] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1874.278064][T25238] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6397'. [ 1874.290802][T25238] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6397'. [ 1874.310229][T25238] syzkaller0: entered promiscuous mode [ 1874.316008][T25238] syzkaller0: entered allmulticast mode [ 1874.816677][T25243] netlink: 'syz.3.6398': attribute type 10 has an invalid length. [ 1874.844137][T25243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1874.858365][T25243] team0: Port device bond0 added [ 1876.554413][T23604] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1876.628322][T23604] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1876.637659][T23604] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1876.674280][T23604] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1876.685598][T23604] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1877.524844][T25271] syz.3.6404: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1877.541852][T25271] CPU: 1 UID: 0 PID: 25271 Comm: syz.3.6404 Not tainted syzkaller #0 PREEMPT(none) [ 1877.541998][T25271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1877.542090][T25271] Call Trace: [ 1877.542156][T25271] [ 1877.542205][T25271] __dump_stack+0x26/0x30 [ 1877.542661][T25271] dump_stack_lvl+0x1df/0x270 [ 1877.542829][T25271] dump_stack+0x1e/0x25 [ 1877.542964][T25271] warn_alloc+0x470/0x690 [ 1877.543345][T25271] ? kmsan_get_metadata+0xfb/0x160 [ 1877.543550][T25271] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1877.543700][T25271] __vmalloc_node_range_noprof+0x133/0x2330 [ 1877.543974][T25271] ? kmsan_get_metadata+0xfb/0x160 [ 1877.544111][T25271] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1877.544272][T25271] ? should_fail_ex+0x45/0x8a0 [ 1877.544644][T25271] ? kmsan_get_metadata+0xfb/0x160 [ 1877.544777][T25271] ? kmsan_get_metadata+0xfb/0x160 [ 1877.544912][T25271] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1877.545062][T25271] ? kmsan_get_metadata+0xfb/0x160 [ 1877.545217][T25271] vmalloc_user_noprof+0xce/0x140 [ 1877.545376][T25271] ? xskq_create+0x11d/0x290 [ 1877.545811][T25271] xskq_create+0x11d/0x290 [ 1877.546001][T25271] xsk_init_queue+0xfd/0x1d0 [ 1877.546193][T25271] xsk_setsockopt+0x7f6/0xfe0 [ 1877.546372][T25271] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1877.546538][T25271] __sys_setsockopt+0x43e/0x580 [ 1877.546920][T25271] __ia32_sys_setsockopt+0xf3/0x1a0 [ 1877.547111][T25271] ia32_sys_call+0x24c2/0x4310 [ 1877.547305][T25271] __do_fast_syscall_32+0xb0/0x150 [ 1877.547643][T25271] ? irqentry_exit_to_user_mode+0x7f/0xa0 [ 1877.547865][T25271] do_fast_syscall_32+0x38/0x80 [ 1877.548038][T25271] do_SYSENTER_32+0x1f/0x30 [ 1877.548243][T25271] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1877.548441][T25271] RIP: 0023:0xf704d539 [ 1877.548556][T25271] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1877.548676][T25271] RSP: 002b:00000000f543d55c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 1877.548809][T25271] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000000011b [ 1877.548897][T25271] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000004 [ 1877.548984][T25271] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1877.549066][T25271] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1877.549154][T25271] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1877.549277][T25271] [ 1877.549332][T25271] Mem-Info: [ 1877.813982][T25271] active_anon:6015 inactive_anon:0 isolated_anon:0 [ 1877.813982][T25271] active_file:3460 inactive_file:40562 isolated_file:0 [ 1877.813982][T25271] unevictable:768 dirty:67 writeback:0 [ 1877.813982][T25271] slab_reclaimable:4379 slab_unreclaimable:33721 [ 1877.813982][T25271] mapped:37064 shmem:1515 pagetables:1555 [ 1877.813982][T25271] sec_pagetables:0 bounce:0 [ 1877.813982][T25271] kernel_misc_reclaimable:0 [ 1877.813982][T25271] free:342637 free_pcp:9300 free_cma:0 [ 1877.862591][T25271] Node 0 active_anon:24060kB inactive_anon:0kB active_file:13840kB inactive_file:162048kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:148324kB dirty:268kB writeback:0kB shmem:4524kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5760kB pagetables:5872kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1877.898883][T25271] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16kB pagetables:348kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1877.930712][T25271] Node 0 DMA free:4096kB boost:0kB min:164kB low:204kB high:244kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:4096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1877.963182][T25271] lowmem_reserve[]: 0 929 1242 1242 1242 [ 1877.969845][T25271] Node 0 DMA32 free:441256kB boost:0kB min:36800kB low:46000kB high:55200kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8684kB inactive_anon:0kB active_file:10240kB inactive_file:64224kB unevictable:0kB writepending:204kB zspages:0kB present:3129332kB managed:952032kB mlocked:0kB bounce:0kB free_pcp:22464kB local_pcp:13132kB free_cma:0kB [ 1878.005682][T25271] lowmem_reserve[]: 0 0 312 312 312 [ 1878.012286][T25271] Node 0 Normal free:20280kB boost:4096kB min:17076kB low:20320kB high:23564kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15444kB inactive_anon:0kB active_file:3600kB inactive_file:97824kB unevictable:1536kB writepending:64kB zspages:0kB present:1048580kB managed:320476kB mlocked:0kB bounce:0kB free_pcp:14004kB local_pcp:6384kB free_cma:0kB [ 1878.046062][T25271] lowmem_reserve[]: 0 0 0 0 0 [ 1878.051457][T25271] Node 1 Normal free:904916kB boost:0kB min:40156kB low:50192kB high:60228kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:991252kB mlocked:0kB bounce:0kB free_pcp:752kB local_pcp:752kB free_cma:0kB [ 1878.087034][T25271] lowmem_reserve[]: 0 0 0 0 0 [ 1878.093095][T25271] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 1878.106745][T25271] Node 0 DMA32: 456*4kB (UME) 476*8kB (UM) 262*16kB (UM) 100*32kB (UM) 99*64kB (UM) 82*128kB (UME) 49*256kB (UME) 23*512kB (UME) 10*1024kB (UM) 6*2048kB (UME) 89*4096kB (M) = 441248kB [ 1878.126851][T25271] Node 0 Normal: 782*4kB (UME) 364*8kB (UME) 126*16kB (UE) 20*32kB (E) 49*64kB (UME) 20*128kB (UME) 7*256kB (UME) 4*512kB (ME) 2*1024kB (UM) 0*2048kB 0*4096kB = 20280kB [ 1878.146034][T25271] Node 1 Normal: 3*4kB (UE) 5*8kB (ME) 8*16kB (UE) 15*32kB (UME) 13*64kB (UME) 8*128kB (UME) 5*256kB (UM) 4*512kB (UE) 4*1024kB (UM) 3*2048kB (UM) 217*4096kB (M) = 904916kB [ 1878.165161][T25271] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1878.175153][T25271] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1878.187286][T25271] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1878.198520][T25271] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1878.208995][T25271] 45495 total pagecache pages [ 1878.214052][T25271] 0 pages in swap cache [ 1878.218337][T25271] Free swap = 124996kB [ 1878.222843][T25271] Total swap = 124996kB [ 1878.227157][T25271] 2097051 pages RAM [ 1878.231339][T25271] 0 pages HighMem/MovableOnly [ 1878.236155][T25271] 1530087 pages reserved [ 1878.240731][T25271] 0 pages cma reserved [ 1878.895319][T25284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6406'. [ 1878.991684][T23604] Bluetooth: hci2: command tx timeout [ 1879.370342][ T5803] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1879.419078][ T5803] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1879.434396][ T5803] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1879.457391][ T5803] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1879.469942][ T5803] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1879.693264][T17225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1879.702065][T17225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1879.911143][T25290] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6408'. [ 1879.921042][T25290] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6408'. [ 1879.960076][T25290] syzkaller0: entered promiscuous mode [ 1879.965740][T25290] syzkaller0: entered allmulticast mode [ 1879.994724][T24035] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1880.002885][T24035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1881.147108][ T5803] Bluetooth: hci2: command tx timeout [ 1881.664776][ T5803] Bluetooth: hci6: command tx timeout [ 1883.158410][T25325] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6419'. [ 1883.168051][T25325] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6419'. [ 1883.230096][ T5803] Bluetooth: hci2: command tx timeout [ 1883.335220][T25325] syzkaller0: entered promiscuous mode [ 1883.341070][T25325] syzkaller0: entered allmulticast mode [ 1883.452943][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1883.502679][T25261] chnl_net:caif_netlink_parms(): no params data found [ 1883.709621][ T5803] Bluetooth: hci6: command tx timeout [ 1884.092728][T25285] chnl_net:caif_netlink_parms(): no params data found [ 1884.542424][T25344] netlink: 'syz.3.6422': attribute type 1 has an invalid length. [ 1884.653976][T25344] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1884.783384][T25347] vlan2: entered allmulticast mode [ 1884.788715][T25347] bond1: entered allmulticast mode [ 1885.309978][ T5803] Bluetooth: hci2: command tx timeout [ 1885.343259][T25354] tipc: Enabling of bearer rejected, failed to enable media [ 1885.713552][T25261] bridge0: port 1(bridge_slave_0) entered blocking state [ 1885.721216][T25261] bridge0: port 1(bridge_slave_0) entered disabled state [ 1885.729280][T25261] bridge_slave_0: entered allmulticast mode [ 1885.738935][T25261] bridge_slave_0: entered promiscuous mode [ 1885.780388][T25361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6426'. [ 1885.791200][ T5803] Bluetooth: hci6: command tx timeout [ 1885.904346][T25361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6426'. [ 1886.007912][T25285] bridge0: port 1(bridge_slave_0) entered blocking state [ 1886.016318][T25285] bridge0: port 1(bridge_slave_0) entered disabled state [ 1886.024582][T25285] bridge_slave_0: entered allmulticast mode [ 1886.034482][T25285] bridge_slave_0: entered promiscuous mode [ 1886.044828][T25367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6426'. [ 1886.242427][T25261] bridge0: port 2(bridge_slave_1) entered blocking state [ 1886.250349][T25261] bridge0: port 2(bridge_slave_1) entered disabled state [ 1886.258374][T25261] bridge_slave_1: entered allmulticast mode [ 1886.268444][T25261] bridge_slave_1: entered promiscuous mode [ 1886.372341][T25285] bridge0: port 2(bridge_slave_1) entered blocking state [ 1886.389044][T25285] bridge0: port 2(bridge_slave_1) entered disabled state [ 1886.397472][T25285] bridge_slave_1: entered allmulticast mode [ 1886.407399][T25285] bridge_slave_1: entered promiscuous mode [ 1886.972658][T25261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1887.006723][T25285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1887.063058][T25261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1887.110934][T25285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1887.560963][T25285] team0: Port device team_slave_0 added [ 1887.577755][T25261] team0: Port device team_slave_0 added [ 1887.593688][T25285] team0: Port device team_slave_1 added [ 1887.624583][T25261] team0: Port device team_slave_1 added [ 1887.899076][ T5803] Bluetooth: hci6: command tx timeout [ 1887.930786][T25285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1887.938022][T25285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1887.964769][T25285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1887.983435][T25285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1887.992291][T25285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1888.023096][T25285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1888.048378][T25261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1888.057070][T25261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1888.083735][T25261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1888.350087][T25261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1888.357231][T25261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1888.383679][T25261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1888.391387][T25391] netlink: 'syz.0.6433': attribute type 1 has an invalid length. [ 1888.524858][T25285] hsr_slave_0: entered promiscuous mode [ 1888.541792][T25285] hsr_slave_1: entered promiscuous mode [ 1888.553314][T25285] debugfs: 'hsr0' already exists in 'hsr' [ 1888.559518][T25285] Cannot create hsr debugfs directory [ 1888.965415][T25261] hsr_slave_0: entered promiscuous mode [ 1888.976026][T25261] hsr_slave_1: entered promiscuous mode [ 1888.985322][T25261] debugfs: 'hsr0' already exists in 'hsr' [ 1888.993339][T25261] Cannot create hsr debugfs directory [ 1889.258771][T25402] tipc: Enabling of bearer rejected, failed to enable media [ 1890.033471][T25414] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6440'. [ 1890.043714][T25414] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1890.146404][T25414] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1890.700280][T25285] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1890.740947][T25285] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1890.810790][T25285] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1890.871779][T25285] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1891.144035][T25261] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1891.270931][T25261] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1891.366257][T25261] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1891.458858][T25261] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1892.132089][T25285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1892.329195][T25285] 8021q: adding VLAN 0 to HW filter on device team0 [ 1892.504877][T19423] bridge0: port 1(bridge_slave_0) entered blocking state [ 1892.512464][T19423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1892.667656][T25261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1892.688007][T19423] bridge0: port 2(bridge_slave_1) entered blocking state [ 1892.695705][T19423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1892.793454][T25442] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6449'. [ 1892.911656][T25261] 8021q: adding VLAN 0 to HW filter on device team0 [ 1892.962064][ T4791] bridge0: port 1(bridge_slave_0) entered blocking state [ 1892.969732][ T4791] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1893.096670][T25285] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1893.151910][T15467] bridge0: port 2(bridge_slave_1) entered blocking state [ 1893.159530][T15467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1895.001741][T25285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1895.278062][T25470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6455'. [ 1895.582492][T25261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1896.554453][T25488] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6459'. [ 1896.901994][T25493] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6460'. [ 1897.278585][T25285] veth0_vlan: entered promiscuous mode [ 1897.422731][T25285] veth1_vlan: entered promiscuous mode [ 1897.554540][T25261] veth0_vlan: entered promiscuous mode [ 1897.681876][T25261] veth1_vlan: entered promiscuous mode [ 1897.910363][T25261] veth0_macvtap: entered promiscuous mode [ 1897.936762][T25261] veth1_macvtap: entered promiscuous mode [ 1898.003847][T25285] veth0_macvtap: entered promiscuous mode [ 1898.067768][T25285] veth1_macvtap: entered promiscuous mode [ 1898.164380][T25261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1898.437057][T25261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1898.545259][T19423] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1898.606089][T25285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1898.661446][T19423] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1898.803938][ T1142] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1898.823543][T25285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1898.868035][ T1142] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1898.958535][T25369] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1899.020464][T25513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6466'. [ 1899.034260][T25369] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1899.107255][T25369] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1899.166498][T25369] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1900.292246][T25529] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6470'. [ 1900.382437][T25528] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6471'. [ 1902.132348][T25561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6477'. [ 1903.556374][T25583] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6482'. [ 1905.083879][T19423] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1905.092207][T19423] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1905.265208][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1905.273929][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1905.675902][ T4791] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1905.684226][ T4791] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1905.807365][T15467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1905.815736][T15467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1906.111163][T25608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6488'. [ 1907.808147][T25627] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6492'. [ 1908.144192][T25639] syz_tun: entered allmulticast mode [ 1908.207195][T25639] dvmrp6: entered allmulticast mode [ 1909.334289][T25647] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6500'. [ 1909.344023][T25647] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1909.406220][T25647] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1910.160060][T25662] tipc: Enabling of bearer rejected, failed to enable media [ 1910.617417][T25669] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6508'. [ 1910.774050][T25680] syz_tun: entered allmulticast mode [ 1910.842598][T25680] dvmrp6: entered allmulticast mode [ 1911.849139][T25693] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6515'. [ 1911.859720][T25693] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6515'. [ 1911.933491][T25691] syzkaller0: entered promiscuous mode [ 1911.939279][T25691] syzkaller0: entered allmulticast mode [ 1912.938772][T25710] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6519'. [ 1912.995919][T25709] tipc: Enabled bearer , priority 0 [ 1913.130110][T25709] tipc: Resetting bearer [ 1913.202463][T25706] tipc: Disabling bearer [ 1913.477814][T25719] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6523'. [ 1913.877452][T25725] tipc: Enabled bearer , priority 0 [ 1913.958678][T25725] tipc: Resetting bearer [ 1913.994900][T25724] tipc: Disabling bearer [ 1914.259687][T25731] netlink: 'syz.5.6525': attribute type 1 has an invalid length. [ 1914.703032][T25736] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6529'. [ 1914.988327][T25738] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6531'. [ 1914.998075][T25738] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6531'. [ 1915.039185][T25738] syzkaller0: entered promiscuous mode [ 1915.045297][T25738] syzkaller0: entered allmulticast mode [ 1915.702171][T25750] tipc: Enabled bearer , priority 0 [ 1915.780650][T25753] syzkaller0: entered promiscuous mode [ 1915.786329][T25753] syzkaller0: entered allmulticast mode [ 1915.892617][T25754] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6536'. [ 1915.910575][T25747] tipc: Resetting bearer [ 1915.948423][T25747] tipc: Disabling bearer [ 1916.647310][T25765] tipc: Started in network mode [ 1916.653324][T25765] tipc: Node identity a2a902876a37, cluster identity 4711 [ 1916.661919][T25765] tipc: Enabled bearer , priority 0 [ 1916.762835][T25765] tipc: Resetting bearer [ 1916.873109][T25771] netlink: 'syz.4.6542': attribute type 1 has an invalid length. [ 1916.886146][T25763] tipc: Disabling bearer [ 1917.875090][T25784] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6547'. [ 1917.884627][T25784] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6547'. [ 1917.987582][T25785] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6549'. [ 1918.003161][T25784] syzkaller0: entered promiscuous mode [ 1918.009018][T25784] syzkaller0: entered allmulticast mode [ 1918.398545][T25793] dvmrp6: entered allmulticast mode [ 1918.441926][T25790] tipc: Enabled bearer , priority 0 [ 1918.473230][T25792] syzkaller0: entered promiscuous mode [ 1918.478909][T25792] syzkaller0: entered allmulticast mode [ 1918.608201][T25789] tipc: Resetting bearer [ 1918.683492][T25789] tipc: Disabling bearer [ 1919.427688][T25812] tipc: Started in network mode [ 1919.433157][T25812] tipc: Node identity defcaad929c4, cluster identity 4711 [ 1919.441330][T25812] tipc: Enabled bearer , priority 0 [ 1919.461186][T25809] netlink: 'syz.5.6557': attribute type 1 has an invalid length. [ 1919.563954][T25807] tipc: Resetting bearer [ 1919.674854][T25805] tipc: Disabling bearer [ 1920.243583][T25822] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6564'. [ 1920.618915][T25825] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6565'. [ 1920.628951][T25825] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6565'. [ 1920.681377][T25826] syz_tun: entered allmulticast mode [ 1920.731323][T25825] syzkaller0: entered promiscuous mode [ 1920.737011][T25825] syzkaller0: entered allmulticast mode [ 1920.780423][T25824] syz_tun: left allmulticast mode [ 1921.212451][T25833] tipc: Enabled bearer , priority 0 [ 1921.268998][T25837] syzkaller0: entered promiscuous mode [ 1921.274914][T25837] syzkaller0: entered allmulticast mode [ 1921.422495][T25842] netlink: 'syz.6.6572': attribute type 1 has an invalid length. [ 1921.468871][T25842] vlan2: entered allmulticast mode [ 1921.475453][T25842] veth1_to_hsr: entered allmulticast mode [ 1921.514823][T25833] tipc: Resetting bearer [ 1921.526271][T25846] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6572'. [ 1921.628756][T25832] tipc: Resetting bearer [ 1921.720259][T25832] tipc: Disabling bearer [ 1921.771607][T25848] netlink: 'syz.4.6573': attribute type 1 has an invalid length. [ 1922.642007][T25862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6575'. [ 1923.062422][T25864] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6579'. [ 1923.411745][T25215] IPVS: starting estimator thread 0... [ 1923.510364][T25873] IPVS: using max 240 ests per chain, 12000 per kthread [ 1923.616257][T25872] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6583'. [ 1923.625937][T25872] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6583'. [ 1923.708044][T25872] syzkaller0: entered promiscuous mode [ 1923.721442][T25872] syzkaller0: entered allmulticast mode [ 1924.039570][T25885] tipc: Enabled bearer , priority 0 [ 1924.041665][T25883] netlink: 'syz.6.6586': attribute type 1 has an invalid length. [ 1924.052634][T25885] syzkaller0: entered promiscuous mode [ 1924.068366][T25885] syzkaller0: entered allmulticast mode [ 1924.195847][T25883] vlan3: entered allmulticast mode [ 1924.201377][T25883] veth0_vlan: entered allmulticast mode [ 1924.216652][T25883] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6586'. [ 1924.256208][T25884] tipc: Resetting bearer [ 1924.343970][T25884] tipc: Disabling bearer [ 1925.735498][T25908] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6595'. [ 1925.891796][T25906] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6593'. [ 1927.191200][T25920] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6599'. [ 1927.200708][T25920] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6599'. [ 1927.293819][T25920] syzkaller0: entered promiscuous mode [ 1927.299741][T25920] syzkaller0: entered allmulticast mode [ 1927.381188][T25925] netlink: 'syz.4.6601': attribute type 1 has an invalid length. [ 1927.590660][T25925] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1927.788039][T25929] vlan2: entered allmulticast mode [ 1927.797074][T25929] bond1: entered allmulticast mode [ 1927.822743][T25932] tipc: Enabling of bearer rejected, failed to enable media [ 1927.867191][T25925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6601'. [ 1927.878499][T25925] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6601'. [ 1928.824976][T25951] tipc: Started in network mode [ 1928.835132][T25951] tipc: Node identity fa07c54d8ead, cluster identity 4711 [ 1928.847831][T25951] tipc: Enabled bearer , priority 0 [ 1928.907853][T25949] syzkaller0: entered promiscuous mode [ 1928.917384][T25949] syzkaller0: entered allmulticast mode [ 1929.038148][T25956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6609'. [ 1929.073101][T25951] tipc: Resetting bearer [ 1929.250311][T25947] tipc: Resetting bearer [ 1929.276389][T25947] tipc: Disabling bearer [ 1929.406555][T25953] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6608'. [ 1929.914259][T25959] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6610'. [ 1929.924350][T25959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1930.120276][T25959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1930.254852][T25967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6614'. [ 1930.451142][T25974] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6615'. [ 1930.460805][T25974] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6615'. [ 1930.523687][T25974] syzkaller0: entered promiscuous mode [ 1930.532881][T25974] syzkaller0: entered allmulticast mode [ 1931.221028][T25980] netlink: 'syz.5.6618': attribute type 1 has an invalid length. [ 1931.251447][T25982] tipc: Enabling of bearer rejected, failed to enable media [ 1931.299711][T25980] vlan2: entered allmulticast mode [ 1931.305064][T25980] mac80211_hwsim hwsim33 wlan1: entered allmulticast mode [ 1931.380162][T25984] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6619'. [ 1931.426663][T25988] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6618'. [ 1931.441847][T25988] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6618'. [ 1932.001962][T25993] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6622'. [ 1932.433399][T25999] tipc: Enabled bearer , priority 0 [ 1932.500882][T26002] syzkaller0: entered promiscuous mode [ 1932.506561][T26002] syzkaller0: entered allmulticast mode [ 1932.591686][T25999] tipc: Resetting bearer [ 1932.603488][T25998] tipc: Resetting bearer [ 1932.623138][T25998] tipc: Disabling bearer [ 1934.118118][T26022] __nla_validate_parse: 2 callbacks suppressed [ 1934.118197][T26022] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6630'. [ 1934.426365][T26032] netlink: 'syz.4.6634': attribute type 1 has an invalid length. [ 1934.517432][T26032] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1934.736307][T26032] vlan3: entered allmulticast mode [ 1934.741796][T26032] bond2: entered allmulticast mode [ 1934.822878][T26040] tipc: Enabling of bearer rejected, failed to enable media [ 1934.844478][T26032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6634'. [ 1934.853808][T26032] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6634'. [ 1935.169011][T26043] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6637'. [ 1936.243954][T26061] tipc: Enabled bearer , priority 0 [ 1936.393525][T26061] syzkaller0: entered promiscuous mode [ 1936.399299][T26061] syzkaller0: entered allmulticast mode [ 1936.434025][T26067] syzkaller0: entered promiscuous mode [ 1936.440055][T26067] syzkaller0: entered allmulticast mode [ 1936.472837][T26066] tipc: Resetting bearer [ 1936.517450][T26059] tipc: Resetting bearer [ 1936.583237][T26059] tipc: Disabling bearer [ 1937.739703][T19427] unregister_netdevice: waiting for lo to become free. Usage count = 2 [ 1937.749872][T19427] ref_tracker: netdev@ffff88801b569560 has 1/1 users at [ 1937.749872][T19427] netdev_get_by_index+0xf6/0x1b0 [ 1937.749872][T19427] fib6_nh_init+0x172/0x3400 [ 1937.749872][T19427] rtm_new_nexthop+0x64b8/0xd4d0 [ 1937.749872][T19427] rtnetlink_rcv_msg+0x106f/0x14b0 [ 1937.749872][T19427] netlink_rcv_skb+0x54d/0x680 [ 1937.749872][T19427] rtnetlink_rcv+0x35/0x40 [ 1937.749872][T19427] netlink_unicast+0xf04/0x12b0 [ 1937.749872][T19427] netlink_sendmsg+0x10b3/0x1250 [ 1937.749872][T19427] __sock_sendmsg+0x333/0x3d0 [ 1937.749872][T19427] ____sys_sendmsg+0x7e0/0xd80 [ 1937.749872][T19427] ___sys_sendmsg+0x271/0x3b0 [ 1937.749872][T19427] __sys_sendmsg+0x1aa/0x300 [ 1937.749872][T19427] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 1937.749872][T19427] ia32_sys_call+0x3f6c/0x4310 [ 1937.749872][T19427] __do_fast_syscall_32+0xb0/0x150 [ 1937.749872][T19427] do_fast_syscall_32+0x38/0x80 [ 1937.749872][T19427] [ 1938.106738][T26077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6647'. [ 1938.177922][T26086] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6651'. [ 1938.351315][T26093] tipc: Enabling of bearer rejected, failed to enable media [ 1939.868548][T26116] tipc: Enabled bearer , priority 0 [ 1939.930354][T26121] syzkaller0: entered promiscuous mode [ 1939.943008][T26121] syzkaller0: entered allmulticast mode [ 1940.023903][T26116] tipc: Resetting bearer [ 1940.089901][T26122] syzkaller0: entered promiscuous mode [ 1940.095579][T26122] syzkaller0: entered allmulticast mode [ 1940.120386][T26115] tipc: Resetting bearer [ 1940.172952][T26115] tipc: Disabling bearer [ 1941.109099][T26135] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6665'. [ 1941.448252][T26139] tipc: Enabling of bearer rejected, failed to enable media [ 1941.597971][T26143] netlink: 'syz.6.6670': attribute type 1 has an invalid length. [ 1941.792560][T23604] Bluetooth: hci1: command 0x0406 tx timeout [ 1942.153365][ T5803] Bluetooth: hci6: link tx timeout [ 1942.158785][ T5803] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 1942.486676][T26159] tipc: Enabled bearer , priority 0 [ 1942.582068][T26159] syzkaller0: entered promiscuous mode [ 1942.587770][T26159] syzkaller0: entered allmulticast mode [ 1942.758970][T26158] tipc: Resetting bearer [ 1942.857897][T26158] tipc: Disabling bearer [ 1942.981833][T26167] syzkaller0: entered promiscuous mode [ 1942.987683][T26167] syzkaller0: entered allmulticast mode [ 1943.100816][T26171] syzkaller0: entered promiscuous mode [ 1943.118378][T26171] syzkaller0: entered allmulticast mode [ 1943.632026][T26176] dummy0: entered promiscuous mode [ 1943.637454][T26176] vlan4: entered promiscuous mode [ 1944.010020][T26184] netlink: 'syz.3.6683': attribute type 1 has an invalid length. [ 1944.180968][T26185] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6682'. [ 1944.199960][ T5803] Bluetooth: hci6: command 0x0406 tx timeout [ 1944.513174][T26190] tipc: Enabling of bearer rejected, failed to enable media [ 1944.862417][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1945.680352][T26207] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6688'. [ 1946.209258][T26214] tipc: Enabled bearer , priority 0 [ 1946.255394][T26214] syzkaller0: entered promiscuous mode [ 1946.261315][T26214] syzkaller0: entered allmulticast mode [ 1946.433208][T26214] tipc: Resetting bearer [ 1946.475562][T26213] tipc: Resetting bearer [ 1946.503577][T26213] tipc: Disabling bearer [ 1946.637502][T26223] syzkaller0: entered promiscuous mode [ 1946.643351][T26223] syzkaller0: entered allmulticast mode [ 1947.061199][T26228] netlink: 'syz.0.6696': attribute type 1 has an invalid length. [ 1947.411653][T26230] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6697'. [ 1947.664768][T26234] syz_tun: left allmulticast mode [ 1947.691996][T26234] netlink: 'syz.3.6699': attribute type 11 has an invalid length. [ 1947.971905][T26240] tipc: Enabled bearer , priority 0 [ 1948.076386][T26240] tipc: Resetting bearer [ 1948.134025][T26238] tipc: Disabling bearer [ 1948.913394][T26251] tipc: Enabled bearer , priority 0 [ 1948.983728][T26251] syzkaller0: entered promiscuous mode [ 1948.989586][T26251] syzkaller0: entered allmulticast mode [ 1949.108340][T26251] tipc: Resetting bearer [ 1949.155951][T26249] tipc: Resetting bearer [ 1949.194669][T26249] tipc: Disabling bearer [ 1949.330395][T26259] syzkaller0: entered promiscuous mode [ 1949.336089][T26259] syzkaller0: entered allmulticast mode [ 1949.378422][T26258] netlink: 'syz.6.6710': attribute type 1 has an invalid length. [ 1949.527564][T26261] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6711'. [ 1950.130281][T26264] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6712'. [ 1951.667038][T26279] tipc: Enabled bearer , priority 0 [ 1951.823410][T26284] tipc: Resetting bearer [ 1952.105759][T26278] tipc: Disabling bearer [ 1952.740402][T26291] tipc: Enabled bearer , priority 0 [ 1952.778116][T26291] syzkaller0: entered promiscuous mode [ 1952.785135][T26291] syzkaller0: entered allmulticast mode [ 1952.905211][T26291] tipc: Resetting bearer [ 1952.931854][T26290] tipc: Resetting bearer [ 1953.002170][T26290] tipc: Disabling bearer [ 1953.117426][T26299] netlink: 'syz.3.6724': attribute type 1 has an invalid length. [ 1953.262036][T26298] syzkaller0: entered promiscuous mode [ 1953.272389][T26298] syzkaller0: entered allmulticast mode [ 1953.523714][T26302] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6726'. [ 1954.211897][T26310] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6730'. [ 1954.588614][T26320] tipc: Enabled bearer , priority 0 [ 1954.728405][T26320] tipc: Resetting bearer [ 1954.828049][T26319] tipc: Disabling bearer [ 1957.162830][T26351] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6742'. [ 1957.258831][T26351] vlan4: entered promiscuous mode [ 1957.264381][T26351] team0: entered promiscuous mode [ 1957.269878][T26351] team_slave_0: entered promiscuous mode [ 1957.276652][T26351] team_slave_1: entered promiscuous mode [ 1959.251526][T26364] syzkaller0: entered promiscuous mode [ 1959.257328][T26364] syzkaller0: entered allmulticast mode [ 1959.631301][T26370] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6750'. [ 1959.970760][T26374] netlink: 'syz.0.6752': attribute type 10 has an invalid length. [ 1959.998261][T26374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1960.030082][T26374] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1960.405943][T26381] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6755'. [ 1960.440229][T26381] vlan3: entered promiscuous mode [ 1960.445470][T26381] dummy0: entered promiscuous mode [ 1960.476800][T26382] syzkaller0: entered promiscuous mode [ 1960.483344][T26382] syzkaller0: entered allmulticast mode [ 1963.238825][T26413] netlink: 'syz.4.6766': attribute type 10 has an invalid length. [ 1963.241256][T26415] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6767'. [ 1963.277441][T26415] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6767'. [ 1963.358475][T26418] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6768'. [ 1963.416542][T26413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1963.438278][T26413] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1964.469130][T26423] syzkaller0: entered promiscuous mode [ 1964.475038][T26423] syzkaller0: entered allmulticast mode [ 1964.743029][T25215] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1965.038447][T25215] usb 5-1: Using ep0 maxpacket: 16 [ 1965.052913][T25215] usb 5-1: config 0 has no interfaces? [ 1965.083737][T25215] usb 5-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 1965.093192][T25215] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1965.101664][T25215] usb 5-1: Product: syz [ 1965.105996][T25215] usb 5-1: Manufacturer: syz [ 1965.110977][T25215] usb 5-1: SerialNumber: syz [ 1965.131221][T25215] usb 5-1: config 0 descriptor?? [ 1965.137414][ T5857] IPVS: starting estimator thread 0... [ 1965.232856][T26431] IPVS: using max 240 ests per chain, 12000 per kthread [ 1965.411000][T26425] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6770'. [ 1965.480070][T25215] usb 5-1: USB disconnect, device number 63 [ 1965.949677][T26439] tipc: Enabled bearer , priority 0 [ 1965.994982][T26439] syzkaller0: entered promiscuous mode [ 1966.001214][T26439] syzkaller0: entered allmulticast mode [ 1966.081507][T26439] tipc: Resetting bearer [ 1966.104728][T26438] tipc: Resetting bearer [ 1966.172513][T26438] tipc: Disabling bearer [ 1967.167129][T26457] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6779'. [ 1967.200852][T26457] vlan4: entered promiscuous mode [ 1967.206104][T26457] dummy0: entered promiscuous mode [ 1967.721284][T26464] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6782'. [ 1967.772338][T26464] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6782'. [ 1968.179000][T26472] syzkaller0: entered promiscuous mode [ 1968.185780][T26472] syzkaller0: entered allmulticast mode [ 1969.990514][T26494] tipc: Enabled bearer , priority 0 [ 1970.020556][T26494] syzkaller0: entered promiscuous mode [ 1970.026338][T26494] syzkaller0: entered allmulticast mode [ 1970.294661][T26494] tipc: Resetting bearer [ 1970.481841][T26491] tipc: Resetting bearer [ 1970.501105][T26491] tipc: Disabling bearer [ 1971.138507][T26507] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6795'. [ 1971.173121][T26507] vlan5: entered promiscuous mode [ 1971.396416][T26513] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6799'. [ 1971.460807][T26513] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6799'. [ 1972.017528][T26522] syzkaller0: entered promiscuous mode [ 1972.023687][T26522] syzkaller0: entered allmulticast mode [ 1973.065720][T26532] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1973.126439][T26534] tipc: Enabled bearer , priority 0 [ 1973.166172][T26534] syzkaller0: entered promiscuous mode [ 1973.172649][T26534] syzkaller0: entered allmulticast mode [ 1973.353846][T26534] tipc: Resetting bearer [ 1973.468534][T26533] tipc: Resetting bearer [ 1973.562465][T26533] tipc: Disabling bearer [ 1975.665853][T26565] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6816'. [ 1975.745854][T26565] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6816'. [ 1975.901361][T26567] syzkaller0: entered promiscuous mode [ 1975.907049][T26567] syzkaller0: entered allmulticast mode [ 1976.551473][T26579] tipc: Enabled bearer , priority 0 [ 1976.571874][T26580] syzkaller0: entered promiscuous mode [ 1976.577560][T26580] syzkaller0: entered allmulticast mode [ 1976.651859][T26579] tipc: Resetting bearer [ 1976.683984][T26578] tipc: Resetting bearer [ 1976.742026][T26578] tipc: Disabling bearer [ 1976.992724][T26587] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6823'. [ 1979.137935][T26618] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6835'. [ 1979.278584][T26624] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6835'. [ 1979.981945][T26627] tipc: Enabled bearer , priority 0 [ 1980.010346][T26629] syzkaller0: entered promiscuous mode [ 1980.016027][T26629] syzkaller0: entered allmulticast mode [ 1980.062474][T26627] tipc: Resetting bearer [ 1980.299570][T26625] tipc: Resetting bearer [ 1980.358587][T26625] tipc: Disabling bearer [ 1980.826603][T26642] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6841'. [ 1982.313129][T26663] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6850'. [ 1982.360211][ T5857] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1982.399754][T26663] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6850'. [ 1982.599712][ T5857] usb 4-1: Using ep0 maxpacket: 16 [ 1982.622166][T26667] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1982.663753][ T5857] usb 4-1: config 0 has no interfaces? [ 1982.714281][ T5857] usb 4-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 1982.724073][ T5857] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1982.732518][ T5857] usb 4-1: Product: syz [ 1982.744595][ T5857] usb 4-1: Manufacturer: syz [ 1982.754562][ T5857] usb 4-1: SerialNumber: syz [ 1982.765439][ T5857] usb 4-1: config 0 descriptor?? [ 1982.766882][ T5803] Bluetooth: hci3: command 0x0406 tx timeout [ 1983.021683][T26655] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6846'. [ 1983.139839][T11032] usb 4-1: USB disconnect, device number 56 [ 1983.346422][T26672] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6852'. [ 1983.571264][T26674] tipc: Enabled bearer , priority 0 [ 1983.612912][T26675] syzkaller0: entered promiscuous mode [ 1983.618599][T26675] syzkaller0: entered allmulticast mode [ 1983.754837][T26674] tipc: Resetting bearer [ 1984.053426][T26673] tipc: Resetting bearer [ 1984.062952][T11032] IPVS: starting estimator thread 0... [ 1984.232586][T26673] tipc: Disabling bearer [ 1984.410254][T26686] IPVS: using max 288 ests per chain, 14400 per kthread [ 1985.171766][T26690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6858'. [ 1985.929180][T26706] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1986.176558][T26710] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6866'. [ 1986.514978][T11032] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1986.708813][T11032] usb 5-1: Using ep0 maxpacket: 16 [ 1986.770134][T11032] usb 5-1: config 0 has no interfaces? [ 1986.782348][T26716] tipc: Enabled bearer , priority 0 [ 1986.813872][T11032] usb 5-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 1986.823722][T11032] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1986.837327][T11032] usb 5-1: Product: syz [ 1986.843076][T11032] usb 5-1: Manufacturer: syz [ 1986.847976][T11032] usb 5-1: SerialNumber: syz [ 1986.888166][ T5857] IPVS: starting estimator thread 0... [ 1986.889856][T11032] usb 5-1: config 0 descriptor?? [ 1986.896975][T26721] syzkaller0: entered promiscuous mode [ 1986.904747][T26721] syzkaller0: entered allmulticast mode [ 1986.962700][T26716] tipc: Resetting bearer [ 1987.006072][T26715] tipc: Resetting bearer [ 1987.030037][T26720] IPVS: using max 240 ests per chain, 12000 per kthread [ 1987.058806][T26715] tipc: Disabling bearer [ 1987.178380][T26712] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6868'. [ 1987.210719][ T5857] usb 5-1: USB disconnect, device number 64 [ 1987.231109][T26725] syzkaller0: entered promiscuous mode [ 1987.236805][T26725] syzkaller0: entered allmulticast mode [ 1989.017934][T26737] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6876'. [ 1989.432941][T26754] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6881'. [ 1989.654626][T26756] tipc: Enabled bearer , priority 0 [ 1989.764913][T26756] tipc: Resetting bearer [ 1989.872642][T26755] tipc: Disabling bearer [ 1990.159851][T26764] tipc: Enabled bearer , priority 0 [ 1990.186692][T26764] syzkaller0: entered promiscuous mode [ 1990.192660][T26764] syzkaller0: entered allmulticast mode [ 1990.349858][T26764] tipc: Resetting bearer [ 1990.365654][T26766] syzkaller0: entered promiscuous mode [ 1990.371570][T26766] syzkaller0: entered allmulticast mode [ 1990.431660][T26763] tipc: Resetting bearer [ 1990.462467][T26763] tipc: Disabling bearer [ 1992.699231][T26798] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6896'. [ 1994.402252][T26807] tipc: Enabling of bearer rejected, failed to enable media [ 1994.918142][T26811] tipc: Enabled bearer , priority 0 [ 1995.080492][T26816] syzkaller0: entered promiscuous mode [ 1995.086160][T26816] syzkaller0: entered allmulticast mode [ 1995.274998][T26811] tipc: Resetting bearer [ 1995.620383][T26810] tipc: Resetting bearer [ 1995.714608][T26810] tipc: Disabling bearer [ 1999.052847][T26777] Set syz1 is full, maxelem 65536 reached [ 2000.316621][T26848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6910'. [ 2000.774493][T26858] tipc: Enabled bearer , priority 0 [ 2001.460160][T26863] tipc: Resetting bearer [ 2001.546860][T26857] tipc: Disabling bearer [ 2003.233950][ T5806] Bluetooth: hci2: command 0x0406 tx timeout [ 2003.510910][T26887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6926'. [ 2003.521100][T26887] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2003.613715][T26887] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2004.120885][T26898] tipc: Enabled bearer , priority 0 [ 2004.185133][T26898] tipc: Resetting bearer [ 2004.226331][T26897] tipc: Disabling bearer [ 2006.309729][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 2007.172068][T26934] tipc: Enabled bearer , priority 0 [ 2007.258167][T26934] tipc: Resetting bearer [ 2007.328790][T26932] tipc: Disabling bearer [ 2007.719148][T26931] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6945'. [ 2008.776352][T26960] netlink: 'syz.3.6954': attribute type 1 has an invalid length. [ 2010.241803][T26980] tipc: Enabled bearer , priority 0 [ 2010.376769][T26982] tipc: Resetting bearer [ 2010.479762][T26978] tipc: Disabling bearer [ 2011.272256][T26997] netlink: 'syz.4.6970': attribute type 1 has an invalid length. [ 2011.587790][T26999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6966'. [ 2012.387798][T27012] tipc: Enabled bearer , priority 0 [ 2012.415706][T27011] syzkaller0: entered promiscuous mode [ 2012.423401][T27011] syzkaller0: entered allmulticast mode [ 2012.546623][T27011] tipc: Resetting bearer [ 2012.650623][T27010] tipc: Resetting bearer [ 2012.705743][T27010] tipc: Disabling bearer [ 2012.764872][T27017] syzkaller0: entered promiscuous mode [ 2012.770838][T27017] syzkaller0: entered allmulticast mode [ 2013.392496][T27024] tipc: Enabling of bearer rejected, failed to enable media [ 2013.776587][T27037] netlink: 'syz.6.6984': attribute type 1 has an invalid length. [ 2014.490271][T11032] IPVS: starting estimator thread 0... [ 2014.580176][T27046] IPVS: using max 240 ests per chain, 12000 per kthread [ 2014.910646][T27050] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6987'. [ 2015.127350][T27056] tipc: Enabled bearer , priority 0 [ 2015.159756][T27056] syzkaller0: entered promiscuous mode [ 2015.165433][T27056] syzkaller0: entered allmulticast mode [ 2015.293190][T27056] tipc: Resetting bearer [ 2015.314889][T27054] tipc: Resetting bearer [ 2015.336931][T27054] tipc: Disabling bearer [ 2015.495375][T27059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6989'. [ 2015.555233][T27063] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6993'. [ 2015.836534][T27065] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6993'. [ 2016.438099][T27073] netlink: 'syz.6.6997': attribute type 1 has an invalid length. [ 2016.804278][T27077] tipc: Enabling of bearer rejected, failed to enable media [ 2018.090245][T27097] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7003'. [ 2018.281419][T27100] tipc: Enabled bearer , priority 0 [ 2018.327441][T27100] syzkaller0: entered promiscuous mode [ 2018.333455][T27100] syzkaller0: entered allmulticast mode [ 2018.411229][T27099] tipc: Resetting bearer [ 2018.451032][T27099] tipc: Disabling bearer [ 2018.938456][T27109] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7008'. [ 2019.244319][T27114] netlink: 'syz.6.7012': attribute type 1 has an invalid length. [ 2020.690857][T27134] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7021'. [ 2020.738928][T27137] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7022'. [ 2020.760791][T27139] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7022'. [ 2020.770695][T27139] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 2020.852662][T27140] syzkaller0: entered promiscuous mode [ 2020.858341][T27140] syzkaller0: entered allmulticast mode [ 2020.962417][T27137] nbd: socks must be embedded in a SOCK_ITEM attr [ 2021.670631][T27153] netlink: 'syz.0.7026': attribute type 1 has an invalid length. [ 2022.020392][T24295] udevd[24295]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 2022.124070][T24295] udevd[24295]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 2022.566056][T27159] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7027'. [ 2023.773550][T27184] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7035'. [ 2024.531042][T27191] netlink: 'syz.4.7040': attribute type 1 has an invalid length. [ 2024.569009][T27190] tipc: Enabled bearer , priority 0 [ 2024.612161][T27190] syzkaller0: entered promiscuous mode [ 2024.624742][T27190] syzkaller0: entered allmulticast mode [ 2024.826417][T27188] tipc: Resetting bearer [ 2024.903702][T27188] tipc: Disabling bearer [ 2025.874023][T27213] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7047'. [ 2025.928154][T27209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2025.942070][T27209] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 2027.084632][T27230] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7052'. [ 2027.118886][T27231] netlink: 'syz.6.7053': attribute type 1 has an invalid length. [ 2027.243163][T27234] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7052'. [ 2027.252820][T27234] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 2027.330070][T27230] nbd: socks must be embedded in a SOCK_ITEM attr [ 2027.498017][T24295] udevd[24295]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 2027.680230][T24295] udevd[24295]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 2027.784475][T27242] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7057'. [ 2028.774038][T27259] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7060'. [ 2029.718554][T27275] netlink: 'syz.6.7067': attribute type 1 has an invalid length. [ 2030.418052][T27284] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7071'. [ 2030.606443][T27284] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7071'. [ 2031.327416][T27293] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7075'. [ 2032.243249][T27310] netlink: 'syz.3.7081': attribute type 1 has an invalid length. [ 2033.377953][T27325] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7088'. [ 2033.485629][T27327] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7088'. [ 2033.495372][T27327] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 2033.573028][T27325] nbd: socks must be embedded in a SOCK_ITEM attr [ 2033.779948][T24295] udevd[24295]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 2033.945970][T24295] udevd[24295]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 2034.011796][T27336] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7091'. [ 2034.943806][T27353] netlink: 'syz.5.7095': attribute type 1 has an invalid length. [ 2036.976543][T27378] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7105'. [ 2038.050315][T27391] netlink: 'syz.5.7108': attribute type 1 has an invalid length. [ 2038.911894][T27405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7115'. [ 2039.516509][T27420] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7120'. [ 2039.703917][T27420] nbd: socks must be embedded in a SOCK_ITEM attr [ 2040.223307][T27434] netlink: 'syz.0.7123': attribute type 1 has an invalid length. [ 2042.923189][T27456] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7130'. [ 2043.221904][T27460] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7132'. [ 2044.560386][T27483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7137'. [ 2045.361553][T27496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7144'. [ 2045.675947][T27498] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7145'. [ 2045.775149][T27498] nbd: socks must be embedded in a SOCK_ITEM attr [ 2046.028970][T27506] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7148'. [ 2046.396212][T24293] udevd[24293]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 2046.550462][T24293] udevd[24293]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 2047.995141][T27541] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7159'. [ 2048.536793][T27547] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7157'. [ 2048.975335][T27552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7163'. [ 2049.360928][T27557] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7165'. [ 2049.862833][T27566] netlink: 'syz.0.7169': attribute type 11 has an invalid length. [ 2050.225797][T27573] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7170'. [ 2050.540646][T27573] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7170'. [ 2051.034440][T27585] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7174'. [ 2051.492829][T27590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7178'. [ 2052.056998][T27593] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7177'. [ 2052.810963][T27609] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7184'. [ 2053.276892][T27621] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7187'. [ 2053.527850][T27621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7187'. [ 2053.678685][T27625] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7189'. [ 2054.548474][T27635] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7193'. [ 2055.982360][T27661] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7196'. [ 2056.908977][T27667] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7201'. [ 2057.058127][T27669] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7203'. [ 2057.200381][T27667] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7201'. [ 2057.254370][T27674] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7204'. [ 2059.311421][T27700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7215'. [ 2059.915335][T27710] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7214'. [ 2059.988225][T27716] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7217'. [ 2060.004003][T27713] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7218'. [ 2061.058806][T27724] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7222'. [ 2063.813958][T27756] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7233'. [ 2064.091587][T27753] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7232'. [ 2064.301112][T27762] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7235'. [ 2066.926574][T27794] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7247'. [ 2067.758740][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 2067.794198][T27800] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7248'. [ 2068.412194][T27810] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7252'. [ 2070.312588][T27835] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7263'. [ 2070.322247][T27835] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7263'. [ 2070.331825][T27835] netlink: 'syz.5.7263': attribute type 4 has an invalid length. [ 2071.625560][T27847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7266'. [ 2071.809049][T27858] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7270'. [ 2073.492140][T27872] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7275'. [ 2073.501913][T27872] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7275'. [ 2074.001161][T27872] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7275'. [ 2074.032770][T27880] tipc: Enabled bearer , priority 0 [ 2074.065300][T27880] syzkaller0: entered promiscuous mode [ 2074.071622][T27880] syzkaller0: entered allmulticast mode [ 2074.204487][T27879] tipc: Resetting bearer [ 2074.314471][T27879] tipc: Disabling bearer [ 2075.384193][T27902] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7286'. [ 2076.092299][T27895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7284'. [ 2078.040057][T19427] unregister_netdevice: waiting for lo to become free. Usage count = 2 [ 2078.049645][T19427] ref_tracker: netdev@ffff88801b569560 has 1/1 users at [ 2078.049645][T19427] netdev_get_by_index+0xf6/0x1b0 [ 2078.049645][T19427] fib6_nh_init+0x172/0x3400 [ 2078.049645][T19427] rtm_new_nexthop+0x64b8/0xd4d0 [ 2078.049645][T19427] rtnetlink_rcv_msg+0x106f/0x14b0 [ 2078.049645][T19427] netlink_rcv_skb+0x54d/0x680 [ 2078.049645][T19427] rtnetlink_rcv+0x35/0x40 [ 2078.049645][T19427] netlink_unicast+0xf04/0x12b0 [ 2078.049645][T19427] netlink_sendmsg+0x10b3/0x1250 [ 2078.049645][T19427] __sock_sendmsg+0x333/0x3d0 [ 2078.049645][T19427] ____sys_sendmsg+0x7e0/0xd80 [ 2078.049645][T19427] ___sys_sendmsg+0x271/0x3b0 [ 2078.049645][T19427] __sys_sendmsg+0x1aa/0x300 [ 2078.049645][T19427] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 2078.049645][T19427] ia32_sys_call+0x3f6c/0x4310 [ 2078.049645][T19427] __do_fast_syscall_32+0xb0/0x150 [ 2078.049645][T19427] do_fast_syscall_32+0x38/0x80 [ 2078.049645][T19427] [ 2079.158414][T27952] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7300'. [ 2079.833716][T27956] tipc: Enabled bearer , priority 0 [ 2079.846217][T27956] syzkaller0: entered promiscuous mode [ 2079.852850][T27956] syzkaller0: entered allmulticast mode [ 2080.030304][T27955] tipc: Resetting bearer [ 2080.089139][T27955] tipc: Disabling bearer [ 2080.605339][T27967] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7306'. [ 2080.897390][T27967] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7306'. [ 2082.622175][T28000] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7318'. [ 2083.482527][T28009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7322'. [ 2084.175081][T28019] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7325'. [ 2085.413457][T28039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7329'. [ 2086.271677][T28048] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7336'. [ 2086.357893][T28053] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7337'. [ 2086.497142][T28053] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7337'. [ 2086.712697][T28061] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7340'. [ 2086.908479][T28061] nbd: socks must be embedded in a SOCK_ITEM attr [ 2087.367459][T24295] udevd[24295]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 2087.517468][T24295] udevd[24295]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 2087.556892][T28071] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7341'. [ 2088.476118][T28082] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2088.483737][T28082] IPv6: NLM_F_CREATE should be set when creating new route [ 2088.491303][T28082] IPv6: NLM_F_CREATE should be set when creating new route [ 2089.357215][T28092] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7351'. [ 2089.399863][T28092] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7351'. [ 2089.894331][T28101] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7354'. [ 2090.658476][T28109] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7357'. [ 2092.167418][T28119] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2093.280998][T28133] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7365'. [ 2093.824028][T28144] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7369'. [ 2093.918977][T28144] nbd: socks must be embedded in a SOCK_ITEM attr [ 2094.112620][T24295] udevd[24295]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 2094.120392][T28148] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7370'. [ 2094.230482][T24295] udevd[24295]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 2094.395727][T28152] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7371'. [ 2095.598632][T28165] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7374'. [ 2095.944982][T28167] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2096.422774][T28175] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7380'. [ 2097.260354][T28189] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7383'. [ 2098.464606][T28202] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7387'. [ 2098.683289][T28209] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7389'. [ 2098.996099][T28209] nbd: socks must be embedded in a SOCK_ITEM attr [ 2099.414265][T24295] udevd[24295]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 2099.662708][T28217] netlink: 44 bytes leftover after parsing attributes in process `syz.6.7390'. [ 2100.232447][T28224] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2100.239960][T28224] IPv6: NLM_F_CREATE should be set when creating new route [ 2100.247333][T28224] IPv6: NLM_F_CREATE should be set when creating new route [ 2100.572538][T28230] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7395'. [ 2101.133319][T28236] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7398'. [ 2102.979654][T28255] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7403'. [ 2104.410678][T28271] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7409'. [ 2104.507236][T28268] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2104.559032][T28271] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7409'. [ 2104.876317][T28275] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7411'. [ 2105.496267][T28289] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7416'. [ 2105.584747][T28286] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7414'. [ 2105.594698][T28286] batadv0: entered promiscuous mode [ 2105.860948][T28289] nbd: socks must be embedded in a SOCK_ITEM attr [ 2106.716150][T24295] udevd[24295]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 2106.854926][T28306] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7420'. [ 2106.869210][T24295] udevd[24295]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 2108.478078][T28323] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7424'. [ 2108.501047][T28325] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7425'. [ 2108.852276][T28325] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7425'. [ 2109.175203][T28328] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2110.961860][T28357] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7434'. [ 2111.787583][T28371] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7438'. [ 2111.787843][T28372] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7439'. [ 2112.152073][T28372] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7439'. [ 2112.853404][T28376] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2112.861025][T28376] IPv6: NLM_F_CREATE should be set when creating new route [ 2112.868620][T28376] IPv6: NLM_F_CREATE should be set when creating new route [ 2115.313891][T28411] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7453'. [ 2116.243376][T28419] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2116.250952][T28419] IPv6: NLM_F_CREATE should be set when creating new route [ 2116.258393][T28419] IPv6: NLM_F_CREATE should be set when creating new route [ 2118.027031][T28447] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7465'. [ 2118.356726][T28451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7466'. [ 2118.867466][T28458] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2119.105661][T28462] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7470'. [ 2120.200422][T28481] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7476'. [ 2120.711717][T28488] syzkaller0: entered promiscuous mode [ 2120.717402][T28488] syzkaller0: entered allmulticast mode [ 2121.836078][T28505] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7487'. [ 2121.869723][T28502] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2123.338687][T28529] syzkaller0: entered promiscuous mode [ 2123.344793][T28529] syzkaller0: entered allmulticast mode [ 2123.866963][T28537] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7498'. [ 2124.090436][T28537] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7498'. [ 2124.345332][T28542] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2125.145829][T28556] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7504'. [ 2126.436854][T28572] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7512'. [ 2126.643364][T28581] syzkaller0: entered promiscuous mode [ 2126.649166][T28581] syzkaller0: entered allmulticast mode [ 2126.673201][T28572] nbd: socks must be embedded in a SOCK_ITEM attr [ 2127.340057][T28590] ip6erspan0: entered promiscuous mode [ 2127.510546][T28592] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2127.661657][T24295] udevd[24295]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 2128.283190][T23604] Bluetooth: hci6: link tx timeout [ 2128.288740][T23604] Bluetooth: hci6: killing stalled connection 10:aa:aa:aa:aa:aa [ 2129.023212][T28613] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7523'. [ 2129.192762][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 2130.349942][T23604] Bluetooth: hci6: command 0x0406 tx timeout [ 2130.991911][T28634] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2131.296524][T28638] tipc: Enabled bearer , priority 0 [ 2131.307590][T28638] syzkaller0: entered promiscuous mode [ 2131.314209][T28638] syzkaller0: entered allmulticast mode [ 2131.362928][T28638] tipc: Resetting bearer [ 2131.388246][T28637] tipc: Resetting bearer [ 2131.478353][T28637] tipc: Disabling bearer [ 2132.643304][T28656] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7539'. [ 2132.795611][T28659] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7540'. [ 2133.074013][T28659] nbd: socks must be embedded in a SOCK_ITEM attr [ 2133.195892][T24295] block nbd64: NBD_DISCONNECT [ 2134.067046][T28673] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2134.137533][T24295] udevd[24295]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 2134.691967][T28683] tipc: Enabled bearer , priority 0 [ 2134.807674][T28684] syzkaller0: entered promiscuous mode [ 2134.813531][T28684] syzkaller0: entered allmulticast mode [ 2134.861514][T28683] tipc: Resetting bearer [ 2134.941213][T28682] tipc: Resetting bearer [ 2134.991813][T28682] tipc: Disabling bearer [ 2136.843582][T28708] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7556'. [ 2137.226660][T28717] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2138.069505][T28725] tipc: Enabled bearer , priority 0 [ 2138.104276][T28725] syzkaller0: entered promiscuous mode [ 2138.110608][T28725] syzkaller0: entered allmulticast mode [ 2138.189577][T28725] tipc: Resetting bearer [ 2138.227631][T28723] tipc: Resetting bearer [ 2138.256683][T28723] tipc: Disabling bearer [ 2140.166940][T28752] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7573'. [ 2140.350980][T28755] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2140.621975][T28757] loop9: detected capacity change from 0 to 7 [ 2140.645644][T28757] Dev loop9: unable to read RDB block 7 [ 2140.651687][T28757] loop9: AHDI p3 p4 [ 2140.655954][T28757] loop9: partition table partially beyond EOD, truncated [ 2140.664921][T28757] loop9: p3 size 4227858431 extends beyond EOD, truncated [ 2141.038113][T24295] udevd[24295]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 2141.366541][T28762] tipc: Enabled bearer , priority 0 [ 2141.406667][T28762] tipc: Resetting bearer [ 2141.582343][T28761] tipc: Disabling bearer [ 2143.278597][T28792] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2143.310790][T28788] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2144.199187][T28805] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7593'. [ 2144.207301][T28803] tipc: Enabled bearer , priority 0 [ 2144.271561][T28807] syzkaller0: entered promiscuous mode [ 2144.277241][T28807] syzkaller0: entered allmulticast mode [ 2144.399887][T28803] tipc: Resetting bearer [ 2144.484746][T28800] tipc: Resetting bearer [ 2144.505033][T28800] tipc: Disabling bearer [ 2146.164703][T28814] syz.3.7596 (28814): drop_caches: 2 [ 2146.953963][T28831] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2147.973639][T28849] tipc: Enabled bearer , priority 0 [ 2148.032697][T28852] syzkaller0: entered promiscuous mode [ 2148.038380][T28852] syzkaller0: entered allmulticast mode [ 2148.126466][T28849] tipc: Resetting bearer [ 2148.150770][T28854] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7611'. [ 2148.203072][T28853] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7610'. [ 2148.232363][T28848] tipc: Resetting bearer [ 2148.267275][T28848] tipc: Disabling bearer [ 2148.949468][T28864] 9pnet_virtio: no channels available for device syz [ 2149.215802][T28866] tipc: Enabled bearer , priority 0 [ 2149.268423][T28867] syzkaller0: entered promiscuous mode [ 2149.277363][T28867] syzkaller0: entered allmulticast mode [ 2149.358219][T28866] tipc: Resetting bearer [ 2149.451174][T28865] tipc: Resetting bearer [ 2149.496478][T28865] tipc: Disabling bearer [ 2150.132624][T28878] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2151.262417][ T5806] Bluetooth: hci6: unexpected event for opcode 0x200d [ 2151.386191][T28897] tipc: Enabled bearer , priority 0 [ 2151.405387][T28897] syzkaller0: entered promiscuous mode [ 2151.411818][T28897] syzkaller0: entered allmulticast mode [ 2151.472686][T28897] tipc: Resetting bearer [ 2151.528967][T28895] tipc: Resetting bearer [ 2151.607401][T28895] tipc: Disabling bearer [ 2151.859022][T28905] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7628'. [ 2153.274046][T28917] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2153.312595][T28922] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7634'. [ 2153.415303][T28922] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7634'. [ 2154.302462][T28933] tipc: Enabled bearer , priority 0 [ 2154.336318][T28933] syzkaller0: entered promiscuous mode [ 2154.342526][T28933] syzkaller0: entered allmulticast mode [ 2154.438097][T28933] tipc: Resetting bearer [ 2154.474288][T28931] tipc: Resetting bearer [ 2154.588083][T28931] tipc: Disabling bearer [ 2155.045028][T28944] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7646'. [ 2155.629131][T28953] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7649'. [ 2155.676486][T28953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7649'. [ 2156.226809][T28958] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2156.372598][T28961] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7651'. [ 2156.382138][T28961] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7651'. [ 2157.255471][T28976] tipc: Enabled bearer , priority 0 [ 2157.324927][T28976] syzkaller0: entered promiscuous mode [ 2157.341121][T28976] syzkaller0: entered allmulticast mode [ 2157.465008][T28976] tipc: Resetting bearer [ 2157.585165][T28974] tipc: Resetting bearer [ 2157.682973][T28974] tipc: Disabling bearer [ 2158.018014][T28986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7661'. [ 2158.608494][T28993] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7664'. [ 2158.954700][T28997] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2158.975919][ T5447] ===================================================== [ 2158.983613][ T5447] BUG: KMSAN: kernel-infoleak in _copy_to_iter+0xef3/0x33f0 [ 2158.991359][ T5447] _copy_to_iter+0xef3/0x33f0 [ 2158.996193][ T5447] __skb_datagram_iter+0x196/0x12c0 [ 2159.001899][ T5447] skb_copy_datagram_iter+0x5b/0x1e0 [ 2159.007959][ T5447] netlink_recvmsg+0x4bb/0xfe0 [ 2159.013315][ T5447] sock_recvmsg+0x2df/0x390 [ 2159.017963][ T5447] ____sys_recvmsg+0x193/0x610 [ 2159.023099][ T5447] ___sys_recvmsg+0x20b/0x850 [ 2159.027953][ T5447] __x64_sys_recvmsg+0x20e/0x3d0 [ 2159.033347][ T5447] x64_sys_call+0x35f0/0x3e30 [ 2159.038204][ T5447] do_syscall_64+0xd9/0xfa0 [ 2159.043063][ T5447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2159.049102][ T5447] [ 2159.052969][ T5447] Uninit was stored to memory at: [ 2159.058404][ T5447] pskb_expand_head+0x310/0x1610 [ 2159.063951][ T5447] netlink_trim+0x496/0x500 [ 2159.076515][ T5447] netlink_broadcast_filtered+0x80/0x28f0 [ 2159.085224][ T5447] nlmsg_notify+0x15b/0x2f0 [ 2159.090136][ T5447] rtnl_notify+0xba/0x100 [ 2159.094729][ T5447] wireless_nlevent_process+0xfe/0x290 [ 2159.100758][ T5447] process_scheduled_works+0xb91/0x1d80 [ 2159.106692][ T5447] worker_thread+0xedf/0x1590 [ 2159.111766][ T5447] kthread+0xd5c/0xf00 [ 2159.116087][ T5447] ret_from_fork+0x1f5/0x4c0 [ 2159.121268][ T5447] ret_from_fork_asm+0x1a/0x30 [ 2159.126212][ T5447] [ 2159.128603][ T5447] Uninit was stored to memory at: [ 2159.134157][ T5447] wireless_send_event+0x67f/0x1530 [ 2159.139655][ T5447] ioctl_standard_iw_point+0x12b0/0x13f0 [ 2159.145446][ T5447] compat_standard_call+0x188/0x4c0 [ 2159.151094][ T5447] wext_ioctl_dispatch+0x192/0x7a0 [ 2159.156350][ T5447] compat_wext_handle_ioctl+0x1a1/0x300 [ 2159.162188][ T5447] compat_sock_ioctl+0x20c/0xff0 [ 2159.167265][ T5447] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 2159.181745][ T5447] ia32_sys_call+0x2d5f/0x4310 [ 2159.186742][ T5447] __do_fast_syscall_32+0xb0/0x150 [ 2159.194216][ T5447] do_fast_syscall_32+0x38/0x80 [ 2159.199532][ T5447] do_SYSENTER_32+0x1f/0x30 [ 2159.204220][ T5447] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2159.210853][ T5447] [ 2159.213248][ T5447] Local variable iwp created at: [ 2159.218244][ T5447] compat_standard_call+0x4a/0x4c0 [ 2159.223636][ T5447] wext_ioctl_dispatch+0x192/0x7a0 [ 2159.228911][ T5447] [ 2159.231463][ T5447] Bytes 60-63 of 64 are uninitialized [ 2159.237006][ T5447] Memory access of size 64 starts at ffff88804f254dc0 [ 2159.244086][ T5447] Data copied to user address 00007fffdbeb35b0 [ 2159.250453][ T5447] [ 2159.252874][ T5447] CPU: 0 UID: 101 PID: 5447 Comm: dhcpcd Not tainted syzkaller #0 PREEMPT(none) [ 2159.262384][ T5447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2159.280463][ T5447] ===================================================== [ 2159.287508][ T5447] Disabling lock debugging due to kernel taint [ 2159.295903][ T5447] Kernel panic - not syncing: kmsan.panic set ... [ 2159.302460][ T5447] CPU: 0 UID: 101 PID: 5447 Comm: dhcpcd Tainted: G B syzkaller #0 PREEMPT(none) [ 2159.313330][ T5447] Tainted: [B]=BAD_PAGE [ 2159.317558][ T5447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2159.327710][ T5447] Call Trace: [ 2159.331064][ T5447] [ 2159.334068][ T5447] __dump_stack+0x26/0x30 [ 2159.338552][ T5447] dump_stack_lvl+0x53/0x270 [ 2159.343292][ T5447] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2159.349253][ T5447] dump_stack+0x1e/0x25 [ 2159.353540][ T5447] vpanic+0x435/0xd30 [ 2159.357701][ T5447] panic+0x15d/0x160 [ 2159.361801][ T5447] kmsan_report+0x31c/0x320 [ 2159.366470][ T5447] ? kmsan_internal_check_memory+0x1e1/0x230 [ 2159.372648][ T5447] ? kmsan_copy_to_user+0xf1/0x190 [ 2159.377914][ T5447] ? _copy_to_iter+0xef3/0x33f0 [ 2159.382924][ T5447] ? __skb_datagram_iter+0x196/0x12c0 [ 2159.388478][ T5447] ? skb_copy_datagram_iter+0x5b/0x1e0 [ 2159.394116][ T5447] ? netlink_recvmsg+0x4bb/0xfe0 [ 2159.399247][ T5447] ? sock_recvmsg+0x2df/0x390 [ 2159.404071][ T5447] ? ____sys_recvmsg+0x193/0x610 [ 2159.409187][ T5447] ? ___sys_recvmsg+0x20b/0x850 [ 2159.414206][ T5447] ? __x64_sys_recvmsg+0x20e/0x3d0 [ 2159.419496][ T5447] ? x64_sys_call+0x35f0/0x3e30 [ 2159.424510][ T5447] ? do_syscall_64+0xd9/0xfa0 [ 2159.429350][ T5447] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2159.435566][ T5447] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 2159.441839][ T5447] ? kmsan_get_metadata+0xfb/0x160 [ 2159.447095][ T5447] ? kmsan_get_metadata+0xfb/0x160 [ 2159.452350][ T5447] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2159.458324][ T5447] ? kmsan_get_metadata+0xfb/0x160 [ 2159.463595][ T5447] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2159.469579][ T5447] ? __pfx__raw_spin_lock+0x1/0x10 [ 2159.474969][ T5447] ? kmsan_get_metadata+0xfb/0x160 [ 2159.480239][ T5447] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2159.486220][ T5447] kmsan_internal_check_memory+0x1e1/0x230 [ 2159.492256][ T5447] kmsan_copy_to_user+0xf1/0x190 [ 2159.497348][ T5447] _copy_to_iter+0xef3/0x33f0 [ 2159.502178][ T5447] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 2159.508715][ T5447] ? kmsan_get_metadata+0xfb/0x160 [ 2159.513971][ T5447] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2159.519940][ T5447] ? kmsan_get_metadata+0xfb/0x160 [ 2159.525237][ T5447] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 2159.531788][ T5447] __skb_datagram_iter+0x196/0x12c0 [ 2159.537182][ T5447] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 2159.543031][ T5447] skb_copy_datagram_iter+0x5b/0x1e0 [ 2159.548494][ T5447] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2159.554478][ T5447] netlink_recvmsg+0x4bb/0xfe0 [ 2159.559454][ T5447] ? aa_sock_msg_perm+0x29c/0x2f0 [ 2159.564923][ T5447] ? __pfx_netlink_recvmsg+0x10/0x10 [ 2159.570405][ T5447] sock_recvmsg+0x2df/0x390 [ 2159.575077][ T5447] ____sys_recvmsg+0x193/0x610 [ 2159.580030][ T5447] ? setup_fault_attr+0x260/0x300 [ 2159.585208][ T5447] ? stack_depot_save_flags+0x35/0x7b0 [ 2159.590962][ T5447] ___sys_recvmsg+0x20b/0x850 [ 2159.595845][ T5447] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2159.601802][ T5447] ? kmsan_get_metadata+0xfb/0x160 [ 2159.607048][ T5447] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2159.613001][ T5447] __x64_sys_recvmsg+0x20e/0x3d0 [ 2159.618125][ T5447] ? kmsan_get_metadata+0xfb/0x160 [ 2159.623390][ T5447] x64_sys_call+0x35f0/0x3e30 [ 2159.628222][ T5447] do_syscall_64+0xd9/0xfa0 [ 2159.632877][ T5447] ? clear_bhb_loop+0x40/0x90 [ 2159.637684][ T5447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2159.643712][ T5447] RIP: 0033:0x7f74606fb407 [ 2159.648216][ T5447] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 2159.667959][ T5447] RSP: 002b:00007fffdbeb34a0 EFLAGS: 00000202 ORIG_RAX: 000000000000002f [ 2159.676509][ T5447] RAX: ffffffffffffffda RBX: 00007f7460671740 RCX: 00007f74606fb407 [ 2159.684595][ T5447] RDX: 0000000000000040 RSI: 00007fffdbeb3520 RDI: 0000000000000009 [ 2159.692680][ T5447] RBP: 000055e1cfc22aa0 R08: 0000000000000000 R09: 0000000000000000 [ 2159.700758][ T5447] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000009 [ 2159.708819][ T5447] R13: 00007fffdbeb7680 R14: 0000000000000000 R15: 00007fffdbeb7670 [ 2159.716927][ T5447] [ 2159.720490][ T5447] Kernel Offset: disabled [ 2159.724878][ T5447] Rebooting in 86400 seconds..