last executing test programs: 2m14.336100474s ago: executing program 1 (id=286): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000002a00000045000000a400020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x14, 0x1c, 0x21, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000ec0)={0x4c, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x30, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0x4}, {0xa, 0x0, @default_ibss_ssid}, {0x4}, {0xa, 0x0, @default_ibss_ssid}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000002a00000045000000a400020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r3}, 0x10) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x14, 0x1c, 0x21, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000ec0)={0x4c, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x30, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0x4}, {0xa, 0x0, @default_ibss_ssid}, {0x4}, {0xa, 0x0, @default_ibss_ssid}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) (async) 2m14.087701274s ago: executing program 1 (id=290): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'bond0\x00', &(0x7f0000000040)=@ethtool_cmd={0x10, 0x2, 0x17f9, 0x7, 0x8, 0xc4, 0x1, 0x5, 0x9, 0x8, 0x3f4d3730, 0x8, 0x3, 0x4, 0x1, 0x7, [0x8000, 0x200008]}}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYBLOB="153e9e9e3bcb4a110f408923a23b975aef62d742003b9969586f04fa155f27d82d306f54f9bd4a24bb860aade39c17f5c6e6c9086d13278d730c1ced81f849c2eaee0ea14f8a6ab2eb018f46387f104e52890769800008f56ba0823d6feb0d7001732e914f802f5715e192b642da5f6bd8049c5b8d63650e488f2195c69b7e", @ANYRES16=0x0], 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0x401, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3ff}, 0x1c) (async) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r3, 0x84, 0x72, &(0x7f0000001f00)=""/4062, &(0x7f00000004c0)=0x744) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000150012800b0001006970766c616e00000400028708000500", @ANYRES32=r2], 0x44}}, 0x8000) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r6, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0) 2m13.850830249s ago: executing program 1 (id=293): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x26, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001c00010027bd7000ffdbdf2507000000", @ANYRES32=r6, @ANYBLOB="80008e040a0002aaaa0c000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x200440c5}, 0x14) sendmsg$can_raw(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x1d, r3}, 0x10, &(0x7f0000000580)={&(0x7f0000000500)=@canfd={{0x4, 0x1, 0x1}, 0x3d, 0x1, 0x0, 0x0, "5f885520c668977d43b8bd2b5f39b902b0c20db4b66adb2e85dc4f514782eb811768d5b969cf6bab67db5f7998bb972819eca27236e391986b7b05e455c78bb0"}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x240088c0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x20, 0x18, 0x229, 0x0, 0x0, {0x2}, [@nested={0xc, 0x9, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}]}, 0x20}}, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001380)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r9, {0x0, 0xffe0}, {}, {0xfff3, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x3, 0xa3}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 2m13.426270586s ago: executing program 1 (id=299): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffff"], 0x0, 0x2}, 0x90) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010001ffffdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800b000100697036746e6c00000800028004001300080004"], 0x40}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0xdb, 0x4, 0x0, 0xfffff7fc, 0x7, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) 2m12.980520525s ago: executing program 1 (id=304): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000006800010026bd7000fc0d0080000000000000000000000200030000000b0000000600070003000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000b40)=[{{&(0x7f00000000c0)={0xa, 0x20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000240)="ad", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)=',', 0x1}], 0x1, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000029000000360000003b000000000000001400000000000000290000000b000000000000020000000028"], 0x58}}], 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x482000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002140), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000002180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002200)={&(0x7f00000021c0)={0x24, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x7effe0fee0b28fb4}, 0x4000050) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd70}, 0x2d) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00000000a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001800010900000000ffdbdf2502140000ff000008030000020800010064010102"], 0x24}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r6) r8 = socket(0x10, 0x3, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="03008000000000000000000000080001000100"/28], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r9, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000580)=ANY=[@ANYBLOB="200000000103010800"/32], 0x20}}, 0x44) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x4101}, 0x10) socket(0x1e, 0x4, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r11 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x19, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0xfffffffffffffc73, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x4000000, 0x20000001, 0x4, 0x2}, 0x1, r12}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x5, 0x5, {0xff, 0x5}}]}, 0x90}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0x7, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4041) 2m12.661207111s ago: executing program 1 (id=309): r0 = socket(0x10, 0x3, 0x0) setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) (async) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, &(0x7f00000002c0)={0x1d, r5}, 0x18) (async) r7 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r7, &(0x7f0000000280)={0x1d, r5, 0x0, {0x0, 0xff}}, 0x18) sendmsg$can_j1939(r6, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r5, {0xa, 0x8}, {0x5, 0xfff3}, {0xfff1, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40}, 0xc4) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x983, 0x80, 0x0, 0x5}, 0x2, 0x1, 0x1, 0x0, 0x3ff, 0xf, 0xc, 0xf, 0x86, 0x6, {0x9, 0x10, 0x5, 0x603, 0xfffffff6, 0x80000000}}}}]}, 0x78}}, 0x4040040) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) recvmmsg(r8, &(0x7f0000004f80)=[{{&(0x7f0000000a00)=@ax25={{0x3, @default}, [@rose, @netrom, @default, @bcast, @default, @default, @rose, @null]}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000005180)=""/4110, 0x1000}, {&(0x7f0000000a80)=""/145, 0x91}, {&(0x7f0000000b40)=""/192, 0xc0}, {&(0x7f0000000c00)=""/214, 0xd6}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000d80)=""/104, 0x68}, {&(0x7f0000000d00)=""/54, 0x36}, {&(0x7f0000000e00)}, {&(0x7f0000000e40)=""/101, 0x65}, {&(0x7f0000000ec0)=""/67, 0x43}], 0xa, &(0x7f0000001000)=""/174, 0xae}, 0x10}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/59, 0x3b}, {&(0x7f0000001100)=""/172, 0xb7}, {&(0x7f00000011c0)=""/37, 0x25}, {&(0x7f0000001200)=""/199, 0xc7}, {&(0x7f0000001300)=""/232, 0x3d}], 0x5, &(0x7f0000001480)=""/17, 0x11}, 0x5}, {{&(0x7f00000014c0)=@ieee802154, 0x80, &(0x7f0000001580)=[{&(0x7f0000001540)=""/8, 0x8}], 0x1}, 0x5}, {{&(0x7f00000015c0)=@nl, 0x80, &(0x7f00000027c0)=[{&(0x7f0000001640)=""/12, 0xc}, {&(0x7f00000026c0)=""/255, 0xfffffffffffffe10}], 0x2, &(0x7f0000002800)=""/181, 0xb5}, 0x7f}, {{0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f0000005100)=""/101, 0x65}, {&(0x7f0000002940)=""/217, 0xd9}], 0x2}, 0x2}, {{&(0x7f0000002a80)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000004ec0)=[{&(0x7f0000002b00)=""/229, 0xe5}, {&(0x7f0000002c00)=""/4096, 0x1000}, {&(0x7f0000003c00)=""/89, 0x59}, {&(0x7f0000003c80)=""/156, 0x9c}, {&(0x7f0000003d40)=""/4096, 0x1000}, {&(0x7f0000004d40)=""/1, 0x1}, {&(0x7f0000004d80)=""/29, 0x1d}, {&(0x7f0000004dc0)=""/124, 0x7c}, {&(0x7f0000004e40)=""/74, 0x4a}], 0x9}, 0x7}], 0x6, 0x20, 0x0) write$bt_hci(r8, &(0x7f00000005c0)=ANY=[@ANYBLOB="286579af9101bb68321878f5545b77cddbf5034d0858827fa497db355aef6ac1ffb10177d2c5ccd791067d0192e6f32d5fda99113eb11a179c39dc3c803741cd797e2582cf89e80ea7ebfc4a6fa70a9e80afc5111f5e6f46b058ff5d8795fdb81a7d625799623d7456d3723ab98f5dc8baa475e48c40f9d1f479ab83a1070132743b16d923831e587e5cd0a5c525fb958020054f4cb48b7115b9c886442aeebb56cee9ed122e016fddaef9a86ce8d87f55"], 0x6) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001e000100fdffffff00000000020000000100000700000000080006000200000008000100"], 0x2c}, 0x1, 0x0, 0x0, 0x42816}, 0x0) (async) r11 = accept4(r9, 0x0, 0x0, 0x0) sendmmsg$inet(r11, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="4ca5eeb3", 0x4}, {0x0}], 0x2}}], 0x1, 0x8010) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) sendmsg$xdp(r0, &(0x7f0000000840)={&(0x7f0000000340)={0x2c, 0x1, r12, 0x21}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000680)="d512dd6cb5a4f384ed9a953ebfda0e06247ccf14ab9a20c71e66c95c436af48ae9bdb3f1c5c1b1c2b10f531d7f7880351df5fb792fdcdd4ce191d437eaa1c70b67de9ddccb13c891c5c6dc0fb0eea65646d4cf8a0a4676c86cdbb373585f69cd77a01f5d9a6a25ea96f20a39545cdf42ab67f20cba586b6f622ca058fd28a8f84cf47d7ec49fe5c2daeff40b", 0x8c}, {&(0x7f0000000740)="9529a030318ca2f908dc4982eeb92c692375436906ef791581f1e7ff2d7aad22512d1d9f99d04300a33976b4c157be0c8d13e2af88c3a13e18dafc42e8c466ba2d567f10ff2e1c6753ca1a714815e1bb7ed8d5e2fac4ff0dfcec041da89de2eb246563b7e48977fd5d793dfa6e5ecba634e75967c35dbd0d0f3e2347f87eacc5fab8ca6a7bb88aa88d543f60a9d930393c24cdd690210534d07b19cf82825eca7e7a9b1a65a6591d0c28cc9967ee71a1e5aecc86fc35980ff5c5d7e630aeb77cbd0eb5e6f65e4ab7646dfa21cc7972ee5858bda79456e1d77d466d6d996785be446789dfd178b2075fc6d272417a22", 0xef}, {&(0x7f0000000440)="2d36044918c8b21fbb2bfedf93256112c9d164601b885d9b6932108fb5c3ddfc3e8d82bb74b1a1f3d893f295c4cae9d33a884aea61db6c1b532474834e1f5c0bbd7a675375b8e5307a7085b5d069902f1be3e2fcffb7173c5d1a9b6621375ff27c7aa6804f21b7a0", 0x68}], 0x3}, 0x40000) 1m57.498103063s ago: executing program 32 (id=309): r0 = socket(0x10, 0x3, 0x0) setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) (async) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, &(0x7f00000002c0)={0x1d, r5}, 0x18) (async) r7 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r7, &(0x7f0000000280)={0x1d, r5, 0x0, {0x0, 0xff}}, 0x18) sendmsg$can_j1939(r6, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r5, {0xa, 0x8}, {0x5, 0xfff3}, {0xfff1, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40}, 0xc4) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x983, 0x80, 0x0, 0x5}, 0x2, 0x1, 0x1, 0x0, 0x3ff, 0xf, 0xc, 0xf, 0x86, 0x6, {0x9, 0x10, 0x5, 0x603, 0xfffffff6, 0x80000000}}}}]}, 0x78}}, 0x4040040) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) recvmmsg(r8, &(0x7f0000004f80)=[{{&(0x7f0000000a00)=@ax25={{0x3, @default}, [@rose, @netrom, @default, @bcast, @default, @default, @rose, @null]}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000005180)=""/4110, 0x1000}, {&(0x7f0000000a80)=""/145, 0x91}, {&(0x7f0000000b40)=""/192, 0xc0}, {&(0x7f0000000c00)=""/214, 0xd6}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000d80)=""/104, 0x68}, {&(0x7f0000000d00)=""/54, 0x36}, {&(0x7f0000000e00)}, {&(0x7f0000000e40)=""/101, 0x65}, {&(0x7f0000000ec0)=""/67, 0x43}], 0xa, &(0x7f0000001000)=""/174, 0xae}, 0x10}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/59, 0x3b}, {&(0x7f0000001100)=""/172, 0xb7}, {&(0x7f00000011c0)=""/37, 0x25}, {&(0x7f0000001200)=""/199, 0xc7}, {&(0x7f0000001300)=""/232, 0x3d}], 0x5, &(0x7f0000001480)=""/17, 0x11}, 0x5}, {{&(0x7f00000014c0)=@ieee802154, 0x80, &(0x7f0000001580)=[{&(0x7f0000001540)=""/8, 0x8}], 0x1}, 0x5}, {{&(0x7f00000015c0)=@nl, 0x80, &(0x7f00000027c0)=[{&(0x7f0000001640)=""/12, 0xc}, {&(0x7f00000026c0)=""/255, 0xfffffffffffffe10}], 0x2, &(0x7f0000002800)=""/181, 0xb5}, 0x7f}, {{0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f0000005100)=""/101, 0x65}, {&(0x7f0000002940)=""/217, 0xd9}], 0x2}, 0x2}, {{&(0x7f0000002a80)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000004ec0)=[{&(0x7f0000002b00)=""/229, 0xe5}, {&(0x7f0000002c00)=""/4096, 0x1000}, {&(0x7f0000003c00)=""/89, 0x59}, {&(0x7f0000003c80)=""/156, 0x9c}, {&(0x7f0000003d40)=""/4096, 0x1000}, {&(0x7f0000004d40)=""/1, 0x1}, {&(0x7f0000004d80)=""/29, 0x1d}, {&(0x7f0000004dc0)=""/124, 0x7c}, {&(0x7f0000004e40)=""/74, 0x4a}], 0x9}, 0x7}], 0x6, 0x20, 0x0) write$bt_hci(r8, &(0x7f00000005c0)=ANY=[@ANYBLOB="286579af9101bb68321878f5545b77cddbf5034d0858827fa497db355aef6ac1ffb10177d2c5ccd791067d0192e6f32d5fda99113eb11a179c39dc3c803741cd797e2582cf89e80ea7ebfc4a6fa70a9e80afc5111f5e6f46b058ff5d8795fdb81a7d625799623d7456d3723ab98f5dc8baa475e48c40f9d1f479ab83a1070132743b16d923831e587e5cd0a5c525fb958020054f4cb48b7115b9c886442aeebb56cee9ed122e016fddaef9a86ce8d87f55"], 0x6) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001e000100fdffffff00000000020000000100000700000000080006000200000008000100"], 0x2c}, 0x1, 0x0, 0x0, 0x42816}, 0x0) (async) r11 = accept4(r9, 0x0, 0x0, 0x0) sendmmsg$inet(r11, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="4ca5eeb3", 0x4}, {0x0}], 0x2}}], 0x1, 0x8010) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) sendmsg$xdp(r0, &(0x7f0000000840)={&(0x7f0000000340)={0x2c, 0x1, r12, 0x21}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000680)="d512dd6cb5a4f384ed9a953ebfda0e06247ccf14ab9a20c71e66c95c436af48ae9bdb3f1c5c1b1c2b10f531d7f7880351df5fb792fdcdd4ce191d437eaa1c70b67de9ddccb13c891c5c6dc0fb0eea65646d4cf8a0a4676c86cdbb373585f69cd77a01f5d9a6a25ea96f20a39545cdf42ab67f20cba586b6f622ca058fd28a8f84cf47d7ec49fe5c2daeff40b", 0x8c}, {&(0x7f0000000740)="9529a030318ca2f908dc4982eeb92c692375436906ef791581f1e7ff2d7aad22512d1d9f99d04300a33976b4c157be0c8d13e2af88c3a13e18dafc42e8c466ba2d567f10ff2e1c6753ca1a714815e1bb7ed8d5e2fac4ff0dfcec041da89de2eb246563b7e48977fd5d793dfa6e5ecba634e75967c35dbd0d0f3e2347f87eacc5fab8ca6a7bb88aa88d543f60a9d930393c24cdd690210534d07b19cf82825eca7e7a9b1a65a6591d0c28cc9967ee71a1e5aecc86fc35980ff5c5d7e630aeb77cbd0eb5e6f65e4ab7646dfa21cc7972ee5858bda79456e1d77d466d6d996785be446789dfd178b2075fc6d272417a22", 0xef}, {&(0x7f0000000440)="2d36044918c8b21fbb2bfedf93256112c9d164601b885d9b6932108fb5c3ddfc3e8d82bb74b1a1f3d893f295c4cae9d33a884aea61db6c1b532474834e1f5c0bbd7a675375b8e5307a7085b5d069902f1be3e2fcffb7173c5d1a9b6621375ff27c7aa6804f21b7a0", 0x68}], 0x3}, 0x40000) 1.628677203s ago: executing program 5 (id=1511): syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000300000000000889078ac1e0001ac1414aa"], 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@getstats={0x1c, 0x5e, 0x100, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, 0x1}, ["", "", "", ""]}, 0x1c}}, 0x0) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r2, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_FLOW={0x6}, @GTPA_LINK={0x8, 0x1, r5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x48000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)={[{0x2d, 'pids'}]}, 0x6) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00", 0x20) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) 1.384421917s ago: executing program 5 (id=1514): sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='p\x00@\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fedbdf250900000008000500be0000001400038005000800ff000000080001"], 0x30}, 0x1, 0x0, 0x0, 0x24000051}, 0x5) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40482, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$AUDIT_USER(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="e03f03"], 0x33fe0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)={0x14, r4, 0x711, 0x70bd27}, 0x14}, 0x1, 0x0, 0x0, 0x4004094}, 0x8894) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r3) sendmsg$AUDIT_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10}, 0x10}}, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), r5) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x2c, r6, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x4}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4048000) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f00000000c0)={0xff, 0x360, 0x3, 0xd1, 0xfffffffffffffff8, 0x7ff, 0x4, 0x6}, 0x0, 0x0, 0x0, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$IP6T_SO_GET_INFO(r7, 0x29, 0xb, 0x0, &(0x7f0000000080)=0x1a) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd70000000000067db000008000334", @ANYRES32=0x0, @ANYBLOB='\f'], 0x34}}, 0x8080) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710425000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 1.381862006s ago: executing program 3 (id=1515): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000000600"/19, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800e00010069703665727370616e0000002c0002801400180000000000000000000000000000000001"], 0x60}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r4, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x3, 0x0, 0x3, 0x0, {0xa, 0x4e21, 0x10000, @local}}}, 0x3a) getsockname$packet(r6, 0x0, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x42, 0x800000, 0x8, 0x7, 0x0, 0x81}) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x23, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0x7, 0xd99d}}]}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x200400c1}, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000005000000030000000000000e02000000000000000000000001000005000000000000000001000000000000000000005f002f5529519743f96a"], 0x0, 0x45, 0x0, 0x1}, 0x20) sendto$packet(r7, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r10, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @private=0xa010102}, 0x10) r11 = socket$l2tp(0x2, 0x2, 0x73) getsockname$l2tp(r11, 0x0, &(0x7f0000000040)) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000480)=0x3, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 1.113525769s ago: executing program 2 (id=1519): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) recvfrom$x25(r1, 0x0, 0x0, 0x40, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000340)={r2, r2, 0xd, 0x0, 0x0, 0x9, 0x1, 0x16c0, 0x5505, 0x8b, 0x1, 0x9, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000040)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xe5}) 1.088424292s ago: executing program 3 (id=1520): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_NH_ID={0x8, 0x1e, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) unshare(0xc040480) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x50, 0x0, 0x2, 0x101, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}]}, 0x50}}, 0x0) unshare(0xc040480) syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6092c01f00082f00fe8000000000000000000000000000bb00000000000000000000070000000000242065580000000000000021000086dd080088be4305400f10"], 0x0) socket$caif_stream(0x25, 0x1, 0x3) 1.036510976s ago: executing program 5 (id=1521): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="280000005f00013caf23b8000000000008"], 0x28}], 0x1}, 0x0) syz_emit_ethernet(0xaa, &(0x7f00000003c0)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x9c, 0x2, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @local, {[@rr={0x7, 0x3}, @ssrr={0x89, 0x2b, 0xae, [@loopback, @dev={0xac, 0x14, 0x14, 0x2d}, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @multicast2, @loopback, @broadcast]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@multicast1}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local}, {}, {@dev}, {@private=0x4}]}]}}}}}}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x7a7241, 0x0) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x23}}]}, 0x1c}}, 0x0) socket$kcm(0x29, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000000000)={'veth0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) 1.034081576s ago: executing program 4 (id=1522): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="160000001500010300000000000000000c001c00"], 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000c00)) epoll_create(0x4) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fcfc0000080011000000000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x20008005}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) pwrite64(r3, &(0x7f0000000100)='b', 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001240)=@newtaction={0x14, 0x30, 0x10, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x840) socket$netlink(0x10, 0x3, 0x0) 1.033519141s ago: executing program 0 (id=1523): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x44884) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4004004) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x1}]}}]}, 0x3c}}, 0x2000c800) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 923.45981ms ago: executing program 0 (id=1524): r0 = socket(0x1, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) r2 = socket(0x200000100000011, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, r4, 0x1, 0x7, 0x6, @local}, 0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000240)={'syztnl1\x00', r4, 0x700, 0x8000, 0xde, 0xc, {{0x2b, 0x4, 0x0, 0x2b, 0xac, 0x64, 0x0, 0x8, 0x29, 0x0, @local, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x4c, 0x51, 0x1, 0x6, [{@remote, 0x6}, {@multicast1, 0x19a6}, {@multicast2, 0x4}, {@private=0xa010100, 0x200}, {@broadcast, 0x9}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x7fffffff}, {@broadcast, 0x6}, {@empty, 0x7}, {@local, 0x5e}]}, @lsrr={0x83, 0x17, 0x91, [@empty, @dev={0xac, 0x14, 0x14, 0x26}, @private=0xa010101, @remote, @local]}, @generic={0x86, 0x3, "f3"}, @end, @ssrr={0x89, 0x1b, 0x8f, [@loopback, @empty, @dev={0xac, 0x14, 0x14, 0x2f}, @multicast1, @rand_addr=0x64010100, @private=0xa010100]}, @lsrr={0x83, 0x13, 0xc2, [@multicast1, @remote, @remote, @remote]}]}}}}}) sendmmsg$unix(r0, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/65, 0x41}], 0x1}}], 0x2, 0x0, 0x0) r5 = socket(0x1, 0x803, 0x0) sendto$unix(r5, 0x0, 0x0, 0x800, &(0x7f0000000700)=@file={0x1, './file0\x00'}, 0x6e) 901.658236ms ago: executing program 2 (id=1525): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0xf0, 0x14, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0xc4, 0x8, "4ad607bc5ebb6e99ce4f0b229e971dc482cf6fed63ea3983bb4ccf36ac81767b95f1447bd4573642b9b23a4bcc6f2f5b8156ec548c552702d3efeb403eb37b865596cf4ae0d178fb2cec0cd3c3b58aefedd04aba05e672e4390182f52808717a8524bd7bea888968b869a36986966da4bef2051f8b1530bc1b6a82e6ea061812468c3b685181c22b7fde4e7e2e2272beaffc06d3c947ba78423c44315e19f48beabac9f8981828556aa5bc6426cfe126b0e76203deccdaaaa6dbcbc407b4af5a"}]}, @NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x104, 0x0, 0x0, {0x3, 0x0, 0x9}}, @NFT_MSG_DELCHAIN={0x64, 0x5, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_CHAIN_HOOK={0x50, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'ip6gre0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'batadv0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'macsec0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x787fb12c}]}]}, @NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0xd3f691391279fa4f}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xa00}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x1e8}, 0x1, 0x0, 0x0, 0x4048800}, 0x20008000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x28, r3, 0xf01, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x4f}}}}}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r3, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x5, 0x59}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000000) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0xffffffffffffffee, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="940000000002010400000000000000000200000020000280140001a00800010000000000080002007f00000106000340000200003c0003802c00018014000300000000000000000000000000000000001400040000000000000000000000ffffe00000010c00010000000000240001801400018008000100ac1e000108000200ac1414020c000280050001"], 0x94}}, 0x0) 800.500693ms ago: executing program 5 (id=1526): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='`'], 0x60}}, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r5) sendmsg$IEEE802154_ASSOCIATE_REQ(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r6, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5}]}, 0x2c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4a}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x4820}, 0x4000080) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r2, @ANYRES16=r2, @ANYBLOB="0700000000000000050005000000180003800800040000000000080002000900000004000100180001801400020073797a5f74756e"], 0x44}}, 0x0) (async, rerun: 32) bind$bt_hci(r0, &(0x7f00000002c0)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (rerun: 32) close(r0) 781.106657ms ago: executing program 3 (id=1527): syz_emit_ethernet(0x3b6, &(0x7f0000000940)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, [{0x3, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1902"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f6164000000020000000000000000000000ffff008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x240080c5}, 0x24004841) 765.687664ms ago: executing program 4 (id=1528): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a0001000000000000000a00802020", @ANYRES32=0x0, @ANYBLOB="00040000"], 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 676.395857ms ago: executing program 5 (id=1529): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000500000000000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xffffffffffffff1b, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f332460916e6e893f1eeb0b723043c47c896ce0bce66a245ad99b8173d98cd824498949714ffaaca9f39817beb2de45406fb6db714e4b94bdae214fa68a0157eb3c00000000b6fc89398f2b9000f224891060017cfa6fa26fa7a34700458c60897d4a6148a1c11428607c40de60beac671e8e8fdecb03598aa623fa71f31bf0f871ab5c2ff88afc6002084e5b52710aee410e3e554d090d95983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed00000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608c5c50538eea153", 0xc8}, {&(0x7f00000004c0)="7ee25c099579d92f8da721f68a8100b6adf04e0cd543f7d26019d57e6a3ecf7ef34486da35c482845d517dc801cca9e4f248b15413a7e252b00a3878a791f64bd79d1d7cc97eed1cb0ad91426115a3b3bf2738347b0acfb01a5aeb09818f35ba6f394fcc023050ec0fab5b7405e7ce33e50e3efb3f9373ce372307160e67a6ab876630aa7d83b5f9cc93a11ddb6849c9cc173c0f9592e1c14ee8c687710260aefc1ce06038fa1b8b2e76f29703bb5fc7549318f6f4287daef439fd58863abc71e3b186e7998b8e60aba2a4bcc76eb07d365afc639fd8b115", 0xd8}, {&(0x7f0000000180)="a0a94f8518f2e7d417de2318f9700d66104c6a93da76b8fcaa99404227f34808d6ae2a7990b2c398", 0x28}], 0x3) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xf0, r3, 0x8, 0x0, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x54}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7}], @chandef_params, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x30}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x262}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x144}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1478}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x262}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x39}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0xf0}, 0x1, 0x0, 0x0, 0x269eebba08bd883}, 0x4008810) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r1, 0x5, 0x4}, 0x20) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)={0x5d4, r4, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x33}}}}, [@NL80211_ATTR_NAN_FUNC={0xc8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x20, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa}]}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x2}, @NL80211_NAN_SRF_INCLUDE={0x4}]}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_SERVICE_INFO={0xa0, 0xb, "27bdd5bfd509e56566d4d1a82bf892ef2c9a10eb00afbafc8383abcfd26cf767191935afdf4fa26e8d16a06601468bc36cd28c3bf980c77685508e103ed98d792e9960cc4bfd40b066e48777711782d3770551f40ca61dad6baae18adba92cd371ba22ab9741b67f35751ca09de0f5364798a06c020b399cc34ac0402354e0babdbae7a6822c2683c084d633f1a648a1986423cf2d63672f45d07215"}]}, @NL80211_ATTR_NAN_FUNC={0x10, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}]}, @NL80211_ATTR_NAN_FUNC={0xd4, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x45c}, @NL80211_NAN_FUNC_SERVICE_INFO={0x61, 0xb, "7194ca483898384f7bbb741e80b56ae53f8aab9700a3a9e4e54fa3c9e116905ab398a10deb45582fe636608f4dd258f413bd8675b3c77559ef9051faac943d244b440d229bfdd07515a1b69aed1c226f4d0872040c89f191b8ec44e511"}, @NL80211_NAN_FUNC_SERVICE_INFO={0x60, 0xb, "5d9653cba838d25838eea47e15e9fb914a8d9042c1133ebe13b4c29a6f617f5713c288f6f1949f193b96614874006e065341356707df815cd9d963d928e919bee4679d33260308585b4bf5edd43a04fbac2c7751b54b8bab66339e77"}]}, @NL80211_ATTR_NAN_FUNC={0x90, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0x82, 0xb, "2571acc6202c4013de44a54c6473195ea3eb8331d7d54ffc52e20be61188c2bbcf02e966064044d0079f346a640d228d0cc814df1a6d3205ab8a735fff3561ea743e429fd78b3a35ec1cbbda8f5ea394ed11c2b81fb97e6ec3ee2b4354f81e8293a8fc865fbe129ca3a3ed23d313fbe0200cfa3dc1305d2f9dead9b3514e"}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x80}]}, @NL80211_ATTR_NAN_FUNC={0x2f0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0x1c8, 0xd, 0x0, 0x1, [{0xef, 0x0, "1d195df79d4c4a8220fa7e4d3e8211d6558f2c1fc9b141fe6d7542014cdc756525ca3a7fc9263ad31a05c73bcf088c047d1a3aadac712c3c359a30c7d7115537515a65d5db25ea605f99ceadf6e9c56489e3e69c428f36709f1d6a227291fbd43d77a892114c937897410ff77df26f98f7108699e4bf57e989918b6317853ef8c361dda6f866bb1663e6479063f5e08fd8f482bba6336de6903e5c3476f2ad80a7bcc07945233fd14a59436925ac3417ea530af6506bca96b4e0ef1ea45ce4c5ccfe0ffabac34fac81d8ff3bf811e0f01c87e9c33e35033d9fd5b994bf3b8376b0cec501da6d7a7a9f4add"}, {0xd1, 0x0, "92860715b789c9654073ab3a58afdd760ffdd005eb975bd6011650c351f763af76c9b05e9b473130d1c3c46064cfdcc56ef69c176522e02734cd058fd4a4d08922ac3fee473e8029636bff73cf0d2cd7488b3cd6aa7ce741deeb351de3fa80a33fc45e725eccb7a24ca47ee066257fd9e88d3f4332955bdfa97176a311161010be3808f220a18e548bd60022ac408ddef97668995b6cb5497d29aac7f979ceb3f8326731e82dcdc3f5e443206ac7cf0878f1b26622446693ea9996b87f6bdf82baacb76ca6bd75f51dd505a99d"}]}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x24, 0xe, 0x0, 0x1, [{0x20, 0x0, "cea9e95f1490512205f10d11ed3f5f0fb3209a36a3267b42b7c56b83"}]}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0xd2}, @NL80211_NAN_FUNC_SERVICE_INFO={0xed, 0xb, "c99aa25d20789b4fb4024a33bc22a672eb34a5aa3dd514af8369f438744dc68b8628ef46580860553c83819340ba5245b43a2fae259ccee292b97fdbddd820f2d1788bdccbf2d4885f5f16de9be205c388732188c29c53e59ebc9dbbfcbfa94fd79dcbf2bd6278fbd46914ad09f57393c954eb73c27f867c35daf9b7d2195a75a95a5211cf2b38450bf93423140b87a8eae4adf182d84fb01f0d5e074356d28d2c5cc4923909302b58ec5e8ef4f659b406b154bb09497b401cfa633ec9b939350c372ccd839c0d5c1b8dad99cbfb94e4a55f344c779acf49e666cfb30953fa76739a672a9998060b1b"}]}, @NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0xa, 0xb, '{D)IGw'}, @NL80211_NAN_FUNC_TYPE={0x5}]}, @NL80211_ATTR_NAN_FUNC={0x50, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x4c, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x34, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x9}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x6c}]}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x9a}]}, @NL80211_ATTR_NAN_FUNC={0x14, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0xa}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x5}]}]}, 0x5d4}, 0x1, 0x0, 0x0, 0x20048000}, 0x4008040) 676.058697ms ago: executing program 2 (id=1530): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000000)=0x8, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) syz_emit_ethernet(0x7e, &(0x7f0000002340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60f3680900482ffffc020000000000000000000000000000ff020000000000000000000000000001242088a80000000003ff000000000800000086dd88a888be08"], 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x2, @remote, 0x4e24, 0x2, 'lblcr\x00', 0x1, 0x7fe00000, 0x7d}, 0x2c) setsockopt$inet6_int(r2, 0x29, 0xa, &(0x7f0000000080)=0x5, 0x4) 626.330149ms ago: executing program 3 (id=1531): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c00010062726964"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x4c, 0x24, 0xe0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xfff8}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x842}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x800}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}]}}]}, 0x4c}}, 0x4044080) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x8, 0x0, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x2, &(0x7f00000001c0)=""/49, &(0x7f0000000200)=0x31) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000440)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x60, 0x1403, 0x100, 0x70bd2d, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'pimreg1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x40014) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r6) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000500)="a87a2cf6617fe99243ef48f8a00ab7a5e7bc0cefba55bc01c269c448baeb4043ab175712ba25182630f015300b19a326c34e630d9d0cfbe9704fc10d337f47eeb71bf6d205fe0e4da98721b4982f5af8bc6bc5b345c8b5b30378abb7f9bfcf00a794ed1f63c8c7f9af67440644518bee921761f3b60ccda0a7463dd3af9141e57e72fcd46c9602afc66d7fafd94ee5", 0x8f) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4002}]}}]}, 0x3c}}, 0xc0) sendmsg$IEEE802154_ASSOCIATE_REQ(r5, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100000005000100000000000500070019000000050011007f0000000c0009000200aaaaaaaaaaaa06000a00ffff00000c0009"], 0x4c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) 612.786235ms ago: executing program 0 (id=1532): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r2, 0x6, 0x2b, 0x0, 0x0) setsockopt$inet6_tcp_buf(r1, 0x6, 0xd, &(0x7f0000000080)='>', 0x1) r3 = socket$nl_generic(0x11, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'ip6gre0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000011000100000000d33b81b8ce0bdde85d3b6b6ba0c0c9eeda6ddc5ce584cbf78cae7c6fb46302ed8ae7bc36ea6dec9347656d70c672d1d7eddfb402ac6c9b07655f351dfb27c0365812f59ad7a1747f7f085291d16c406bee9d9f140ec44c", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x240400c4) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x52, 0x3ab3666c4349b199, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) 544.431389ms ago: executing program 4 (id=1533): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x3000) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r3, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x4e22, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x6, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="140000000000000029000f000000000000"], 0x18}}], 0x2, 0x4001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x1000000, 0x12, r4, 0x80000000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r6, 0x0) mmap(&(0x7f0000692000/0x1000)=nil, 0x1000, 0x0, 0x12, r5, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) mmap(&(0x7f00005d5000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x3000) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) sendmmsg$inet6(r3, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x4e22, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x6, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="140000000000000029000f000000000000"], 0x18}}], 0x2, 0x4001) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x1000000, 0x12, r4, 0x80000000) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r6, 0x0) (async) mmap(&(0x7f0000692000/0x1000)=nil, 0x1000, 0x0, 0x12, r5, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) (async) ioctl$FS_IOC_RESVSP(r7, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) (async) 457.076333ms ago: executing program 2 (id=1534): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) getsockopt$inet_tcp_int(r1, 0x6, 0x2, 0x0, &(0x7f0000000900)) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1f, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200005245855db7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000bf020000000000008500000084000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 417.778282ms ago: executing program 0 (id=1535): sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="fc11000012000102000000000000000000000000bf401db100"/56, @ANYRES32, @ANYBLOB="00000000000000000000000000000000f50401", @ANYRESDEC], 0x11fc}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c00000000000000c9048000000000000094fb8d23dd3a000000"], 0x4c}, 0x1, 0x0, 0x0, 0x448d1}, 0xc000) 324.622183ms ago: executing program 4 (id=1536): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x3ff, 0x1000}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000100)={r2, 0x800}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newlink={0x34, 0x10, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x34}, 0x1, 0x2}, 0x0) 324.228864ms ago: executing program 5 (id=1537): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) listen(r0, 0x3) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r1, 0x0, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000140)) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) accept4(r0, 0x0, 0x0, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r7, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x7) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r5) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, r8, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x9}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4001090}, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='L{', 0x2}], 0x1) 236.139786ms ago: executing program 3 (id=1538): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r1, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4021}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x21, &(0x7f00000006c0)=@raw={'raw\x00', 0x9, 0x3, 0x208, 0xb8, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}, {{@ip={@dev, @empty, 0x0, 0x0, 'team0\x00', 'veth0_macvtap\x00'}, 0x0, 0x70, 0xe0}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "d747a3b2be34f8c0809a2d0e0c3e83db33055f35201078241f18c41298e8d27fae15db83081df04c2233cf6aeee560a70da700912dad2f5d5111750464582601"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) setsockopt$IP_VS_SO_SET_EDIT(r3, 0x0, 0x483, &(0x7f0000000040)={0x11, @dev={0xac, 0x14, 0x14, 0x27}, 0x4e23, 0x3, 'nq\x00', 0x8, 0x1b0e, 0x9}, 0x2c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x38, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x6, 0x81, 0x9, 0x2, 0x11, 0x3, 0x9]}}]}]}]}, 0x38}}, 0x0) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x38, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x6, 0x81, 0x9, 0x2, 0x11, 0x3, 0x9]}}]}]}]}, 0x38}}, 0x0) 229.604812ms ago: executing program 2 (id=1539): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@deltclass={0x24, 0x29, 0x200, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0x4, 0xfff3}, {0x10, 0xffe0}}}, 0x24}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x1, &(0x7f0000000180)="e2", 0xb, 0x1, 0x46d, 0xfff9, 0x3, 0x0, 0x8, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x7}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000084}, 0x8890) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 140.604821ms ago: executing program 0 (id=1540): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x5, 0x8) (async) socket(0x10, 0x5, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x2c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r2}, [@IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, 0x2c}}, 0x0) 140.35419ms ago: executing program 4 (id=1541): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000dc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @fwd={0x4}, @volatile={0x0, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x52}, 0x20) write(r2, &(0x7f0000000240)="94", 0x1) vmsplice(r3, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r1, r3, 0x2, 0x100000000000003) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}}, 0x0) 111.657836ms ago: executing program 3 (id=1542): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, &(0x7f0000000640)) r1 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x6}, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@delnexthop={0x28, 0x69, 0x200, 0x70bd26, 0x25dfdbfb, {}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="230f15390000000000000a00000008000280040004"], 0x1c}}, 0x0) 71.297427ms ago: executing program 0 (id=1543): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'erspan0\x00'}) socket(0x10, 0x80002, 0x0) close(0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgr\x01\x00p\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000000) r6 = openat$cgroup_subtree(r3, &(0x7f0000000380), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB='+pids '], 0x6) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRES16=r5], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x20000800) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYRES8=r4], 0x28}, 0x1, 0x0, 0x0, 0x4004010}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r8) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100ae84b48eb5cadd553d00000008000300", @ANYRES32=r11, @ANYBLOB="08005d0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x8084) r12 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r12, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r5, @ANYRES16=r4, @ANYRESOCT=r6], 0x26}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 413.11µs ago: executing program 2 (id=1544): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f00000001c0)={0x6, 'veth0_to_batadv\x00', {0x1}, 0x9}) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[], 0x32600) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/3128], &(0x7f00002bf000)='syzkaller\x00', 0x3, 0xb0, &(0x7f0000000040)=""/176, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r0, r2}) sendmsg$rds(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0x1039}], 0x1, 0x0, 0x0, 0x4000}, 0x0) write(r3, 0x0, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaacefaea80082211cec08004502001400810000002990786401017cffffffffdc2df468f598e25ec3c53454f9f843f5d2bac37263d21743160f5963a1351e71cb9c0d6bbf07ca9fac170e30e6fab38cbd8bd1165d9e8fe515b339d34bdf74a73b53019e"], 0x0) 0s ago: executing program 4 (id=1545): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed050c0000000000000006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x24000000) kernel console output (not intermixed with test programs): > 4 [ 87.530230][ T5850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.933489][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 88.180657][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 88.300871][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.309451][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.317506][ T5837] bridge_slave_0: entered allmulticast mode [ 88.327676][ T5837] bridge_slave_0: entered promiscuous mode [ 88.366437][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 88.377876][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.385062][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.392722][ T5837] bridge_slave_1: entered allmulticast mode [ 88.399908][ T5837] bridge_slave_1: entered promiscuous mode [ 88.479478][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 88.500806][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 88.553154][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.601787][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.744889][ T5837] team0: Port device team_slave_0 added [ 88.751696][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.758860][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.766409][ T5842] bridge_slave_0: entered allmulticast mode [ 88.774046][ T5842] bridge_slave_0: entered promiscuous mode [ 88.782415][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.789539][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.797346][ T5842] bridge_slave_1: entered allmulticast mode [ 88.805504][ T5842] bridge_slave_1: entered promiscuous mode [ 88.836245][ T5837] team0: Port device team_slave_1 added [ 88.887150][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.894629][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.905807][ T5845] bridge_slave_0: entered allmulticast mode [ 88.913060][ T5845] bridge_slave_0: entered promiscuous mode [ 88.937286][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.972317][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.979448][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.987044][ T5845] bridge_slave_1: entered allmulticast mode [ 88.995511][ T5845] bridge_slave_1: entered promiscuous mode [ 89.016026][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.075018][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.082500][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.108517][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.126121][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.133096][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.159001][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.183367][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.190578][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.197892][ T5846] bridge_slave_0: entered allmulticast mode [ 89.202091][ T5850] Bluetooth: hci0: command tx timeout [ 89.206058][ T5846] bridge_slave_0: entered promiscuous mode [ 89.216565][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.223828][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.231772][ T5848] bridge_slave_0: entered allmulticast mode [ 89.239361][ T5848] bridge_slave_0: entered promiscuous mode [ 89.267362][ T5842] team0: Port device team_slave_0 added [ 89.275165][ T5842] team0: Port device team_slave_1 added [ 89.282399][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.289557][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.298208][ T5846] bridge_slave_1: entered allmulticast mode [ 89.306048][ T5846] bridge_slave_1: entered promiscuous mode [ 89.312963][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.320103][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.327489][ T5848] bridge_slave_1: entered allmulticast mode [ 89.334587][ T5848] bridge_slave_1: entered promiscuous mode [ 89.357471][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.370058][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.431484][ T5850] Bluetooth: hci1: command tx timeout [ 89.453624][ T5845] team0: Port device team_slave_0 added [ 89.500677][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.513941][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.515647][ T5850] Bluetooth: hci2: command tx timeout [ 89.527968][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.539257][ T5845] team0: Port device team_slave_1 added [ 89.563432][ T5837] hsr_slave_0: entered promiscuous mode [ 89.570074][ T5837] hsr_slave_1: entered promiscuous mode [ 89.577105][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.584197][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.611034][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.614215][ T5850] Bluetooth: hci4: command tx timeout [ 89.624352][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.628583][ T5844] Bluetooth: hci3: command tx timeout [ 89.634293][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.634320][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.638006][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.780626][ T5848] team0: Port device team_slave_0 added [ 89.790313][ T5848] team0: Port device team_slave_1 added [ 89.811524][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.818508][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.844548][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.858609][ T5846] team0: Port device team_slave_0 added [ 89.868525][ T5846] team0: Port device team_slave_1 added [ 89.898754][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.906114][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.932163][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.983386][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.990358][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.016623][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.054473][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.061710][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.088095][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.129071][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.136251][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.164902][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.200771][ T5842] hsr_slave_0: entered promiscuous mode [ 90.207464][ T5842] hsr_slave_1: entered promiscuous mode [ 90.213714][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 90.219498][ T5842] Cannot create hsr debugfs directory [ 90.225990][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.233274][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.259317][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.302689][ T5845] hsr_slave_0: entered promiscuous mode [ 90.309080][ T5845] hsr_slave_1: entered promiscuous mode [ 90.315912][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 90.321691][ T5845] Cannot create hsr debugfs directory [ 90.442345][ T5848] hsr_slave_0: entered promiscuous mode [ 90.448628][ T5848] hsr_slave_1: entered promiscuous mode [ 90.455217][ T5848] debugfs: 'hsr0' already exists in 'hsr' [ 90.461030][ T5848] Cannot create hsr debugfs directory [ 90.545672][ T5846] hsr_slave_0: entered promiscuous mode [ 90.552791][ T5846] hsr_slave_1: entered promiscuous mode [ 90.558857][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 90.564740][ T5846] Cannot create hsr debugfs directory [ 90.936365][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.988051][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.005690][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.035577][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.095340][ T5845] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.111940][ T5845] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.133098][ T5845] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.150573][ T5845] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.229230][ T5842] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.256139][ T5842] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.271512][ T5844] Bluetooth: hci0: command tx timeout [ 91.277692][ T5842] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.289099][ T5842] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.349504][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.417471][ T5848] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.436100][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.458715][ T5848] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.469673][ T5848] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.491954][ T5848] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.505070][ T1002] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.511356][ T5844] Bluetooth: hci1: command tx timeout [ 91.512341][ T1002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.566981][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.574386][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.591212][ T5844] Bluetooth: hci2: command tx timeout [ 91.620676][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.660088][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.671677][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.682364][ T5844] Bluetooth: hci3: command tx timeout [ 91.682380][ T5850] Bluetooth: hci4: command tx timeout [ 91.695194][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.711884][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.775397][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.792281][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.837948][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.838888][ T24] cfg80211: failed to load regulatory.db [ 91.845171][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.889157][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.896338][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.926525][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.960777][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.967968][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.086768][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.094059][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.124457][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.185816][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.198482][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.290631][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.297846][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.331599][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.338746][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.366431][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.426806][ T5837] veth0_vlan: entered promiscuous mode [ 92.463316][ T5837] veth1_vlan: entered promiscuous mode [ 92.517306][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.584717][ T3473] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.591936][ T3473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.613581][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.620767][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.678412][ T5837] veth0_macvtap: entered promiscuous mode [ 92.698658][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.736704][ T5837] veth1_macvtap: entered promiscuous mode [ 92.826831][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.849698][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.907274][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.952811][ T5845] veth0_vlan: entered promiscuous mode [ 92.998650][ T5845] veth1_vlan: entered promiscuous mode [ 93.008050][ T3473] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.034189][ T3473] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.056002][ T3473] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.076618][ T3473] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.157162][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.247141][ T5845] veth0_macvtap: entered promiscuous mode [ 93.306013][ T5845] veth1_macvtap: entered promiscuous mode [ 93.357195][ T5844] Bluetooth: hci0: command tx timeout [ 93.368876][ T3473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.391962][ T3473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.458849][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.493475][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.505387][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.524994][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.534134][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.555614][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.569352][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.589419][ T5848] veth0_vlan: entered promiscuous mode [ 93.595942][ T5844] Bluetooth: hci1: command tx timeout [ 93.613839][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.624350][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.630483][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.664112][ T5848] veth1_vlan: entered promiscuous mode [ 93.673424][ T5844] Bluetooth: hci2: command tx timeout [ 93.752030][ T5850] Bluetooth: hci4: command tx timeout [ 93.757856][ T5844] Bluetooth: hci3: command tx timeout [ 93.804821][ T5846] veth0_vlan: entered promiscuous mode [ 93.823695][ T5842] veth0_vlan: entered promiscuous mode [ 93.859008][ T5848] veth0_macvtap: entered promiscuous mode [ 93.907992][ T5846] veth1_vlan: entered promiscuous mode [ 93.925229][ T5848] veth1_macvtap: entered promiscuous mode [ 93.939136][ T5842] veth1_vlan: entered promiscuous mode [ 94.005340][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.030312][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.105782][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.115957][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.121690][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.198381][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.214030][ T5842] veth0_macvtap: entered promiscuous mode [ 94.222621][ T5846] veth0_macvtap: entered promiscuous mode [ 94.255631][ T5842] veth1_macvtap: entered promiscuous mode [ 94.283218][ T5846] veth1_macvtap: entered promiscuous mode [ 94.329496][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.339421][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.375746][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.393162][ T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.432883][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.488454][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.532679][ T59] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.542357][ T59] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.555176][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.576639][ T59] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.616834][ T59] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.638504][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.661799][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.670748][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.680429][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.698571][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.699624][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.760676][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.824718][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.838704][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.008015][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.041432][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.150637][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.179329][ T5981] tipc: Started in network mode [ 95.179906][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.186250][ T5981] tipc: Node identity 1e36d23d6e0e, cluster identity 4711 [ 95.203901][ T5981] tipc: Enabled bearer , priority 0 [ 95.224549][ T5981] syzkaller0: entered promiscuous mode [ 95.230665][ T5981] syzkaller0: entered allmulticast mode [ 95.250382][ T1002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.269370][ T1002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.325264][ T5981] tipc: Resetting bearer [ 95.348246][ T5980] tipc: Resetting bearer [ 95.417909][ T5980] tipc: Disabling bearer [ 95.432009][ T5844] Bluetooth: hci0: command tx timeout [ 95.464803][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.464895][ T5986] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5'. [ 95.473176][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.671344][ T5844] Bluetooth: hci1: command tx timeout [ 95.719508][ T5997] tap0: tun_chr_ioctl cmd 1074025678 [ 95.726631][ T5997] tap0: group set to 0 [ 95.749999][ T5994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13'. [ 95.762522][ T5844] Bluetooth: hci2: command tx timeout [ 95.832658][ T5850] Bluetooth: hci4: command tx timeout [ 95.838196][ T5844] Bluetooth: hci3: command tx timeout [ 96.198233][ T6020] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.308873][ T6024] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21'. [ 96.325721][ T6031] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 96.370220][ T6031] netlink: 'syz.4.22': attribute type 10 has an invalid length. [ 96.387213][ T6024] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 96.413155][ T6031] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 96.513727][ T6037] netlink: 40 bytes leftover after parsing attributes in process `syz.2.24'. [ 96.525286][ T6037] netlink: 14 bytes leftover after parsing attributes in process `syz.2.24'. [ 96.550299][ T6039] netlink: 48 bytes leftover after parsing attributes in process `syz.4.25'. [ 96.663922][ T6037] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.669702][ T6041] Zero length message leads to an empty skb [ 96.707675][ T6037] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.764480][ T6037] bond0 (unregistering): Released all slaves [ 96.972920][ T6050] netlink: 'syz.0.29': attribute type 11 has an invalid length. [ 96.991414][ T6052] netlink: 224 bytes leftover after parsing attributes in process `syz.4.31'. [ 97.005306][ T6050] netlink: 64 bytes leftover after parsing attributes in process `syz.0.29'. [ 97.130131][ T6064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.33'. [ 97.151224][ T6058] netlink: 228 bytes leftover after parsing attributes in process `syz.1.32'. [ 97.516744][ T6084] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 97.569467][ T6084] 0ªî{X¹¦: entered allmulticast mode [ 97.580429][ T6084] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 97.617263][ T6087] netlink: 'syz.2.42': attribute type 12 has an invalid length. [ 97.668812][ T3473] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.679980][ T6087] netlink: 'syz.2.42': attribute type 12 has an invalid length. [ 97.703789][ T3473] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.736947][ T3473] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.795639][ T3473] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.036464][ T6105] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.215762][ T6105] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.225305][ T6105] bond0: (slave bond1): Enslaving as an active interface with an up link [ 98.324606][ T6120] openvswitch: netlink: Message has 5 unknown bytes. [ 98.332025][ T6119] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 98.429045][ T6121] macvtap1: entered promiscuous mode [ 98.435117][ T6121] vlan0: entered promiscuous mode [ 98.452391][ T6120] macvtap2: entered promiscuous mode [ 98.811829][ T6140] dvmrp1: entered allmulticast mode [ 99.465053][ T6160] syzkaller0: entered promiscuous mode [ 99.487415][ T6160] syzkaller0: entered allmulticast mode [ 100.992418][ T6211] __nla_validate_parse: 12 callbacks suppressed [ 100.992438][ T6211] netlink: 12 bytes leftover after parsing attributes in process `syz.3.72'. [ 101.102911][ T6219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.74'. [ 101.168105][ T6224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.75'. [ 101.383678][ T6232] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 101.566137][ T6242] netlink: 56 bytes leftover after parsing attributes in process `syz.1.82'. [ 102.030697][ T6262] tipc: Started in network mode [ 102.041882][ T6262] tipc: Node identity ead8bcae894f, cluster identity 4711 [ 102.057505][ T6262] tipc: Enabled bearer , priority 0 [ 102.078937][ T6262] syzkaller0: entered promiscuous mode [ 102.089971][ T6262] syzkaller0: entered allmulticast mode [ 102.132657][ T6262] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 102.256118][ T6262] tipc: Resetting bearer [ 102.287740][ T6275] pimreg: entered allmulticast mode [ 102.344733][ T6259] tipc: Resetting bearer [ 102.408208][ T6259] tipc: Disabling bearer [ 102.415719][ T6287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.96'. [ 102.425542][ T6285] openvswitch: netlink: VXLAN extension 173 out of range max 1 [ 102.445456][ T6281] netlink: 'syz.4.94': attribute type 13 has an invalid length. [ 102.464666][ T6285] netlink: 44 bytes leftover after parsing attributes in process `syz.3.95'. [ 102.490594][ T6287] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 102.504621][ T6285] netlink: 43 bytes leftover after parsing attributes in process `syz.3.95'. [ 102.531879][ T6290] netlink: 'syz.3.95': attribute type 1 has an invalid length. [ 102.577427][ T6285] netlink: 'syz.3.95': attribute type 6 has an invalid length. [ 102.606580][ T6285] netlink: 'syz.3.95': attribute type 5 has an invalid length. [ 102.633681][ T6285] netlink: 43 bytes leftover after parsing attributes in process `syz.3.95'. [ 102.809749][ T6300] syz.0.101 uses obsolete (PF_INET,SOCK_PACKET) [ 103.306338][ T6330] netlink: 24 bytes leftover after parsing attributes in process `syz.3.111'. [ 103.547037][ T6336] netlink: 12 bytes leftover after parsing attributes in process `syz.1.112'. [ 103.585555][ T6338] netlink: 'syz.0.115': attribute type 1 has an invalid length. [ 104.014664][ T6357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.055075][ T6357] bond0: (slave rose0): Enslaving as an active interface with an up link [ 104.087614][ T6366] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 104.126048][ T6357] tipc: Enabling of bearer rejected, failed to enable media [ 104.310578][ T6379] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20001 [ 104.568660][ T6389] IPv4: Oversized IP packet from 172.20.20.24 [ 104.576138][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 104.582996][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 105.534161][ T6418] netlink: 'syz.2.134': attribute type 10 has an invalid length. [ 105.788886][ T6447] bridge_slave_0: left allmulticast mode [ 105.808262][ T6447] bridge_slave_0: left promiscuous mode [ 105.834325][ T6447] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.908553][ T6455] netlink: 'syz.1.143': attribute type 2 has an invalid length. [ 105.926255][ T6447] bridge_slave_1: left allmulticast mode [ 105.939433][ T6447] bridge_slave_1: left promiscuous mode [ 105.950691][ T6447] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.980741][ T6459] netlink: 'syz.1.143': attribute type 1 has an invalid length. [ 105.999299][ T6447] bond0: (slave bond_slave_0): Releasing backup interface [ 106.030018][ T6447] bond0: (slave bond_slave_1): Releasing backup interface [ 106.084407][ T6447] team0: Port device team_slave_0 removed [ 106.116964][ T6447] team0: Port device team_slave_1 removed [ 106.171767][ T6447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.190347][ T6447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.202753][ T6447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.210333][ T6447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.225376][ T6447] bond0: (slave geneve1): Releasing backup interface [ 106.349988][ T6447] syz.4.141 (6447) used greatest stack depth: 19864 bytes left [ 107.121930][ T6502] __nla_validate_parse: 9 callbacks suppressed [ 107.121950][ T6502] netlink: 12 bytes leftover after parsing attributes in process `syz.0.154'. [ 107.573656][ T6518] netlink: 12 bytes leftover after parsing attributes in process `syz.3.157'. [ 108.597477][ T6540] netlink: 'syz.0.159': attribute type 1 has an invalid length. [ 108.612976][ T6540] netlink: 'syz.0.159': attribute type 1 has an invalid length. [ 109.035952][ T6492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.152'. [ 109.250487][ T6548] IPv6: Can't replace route, no match found [ 109.335625][ T6552] Bluetooth: MGMT ver 1.23 [ 109.565863][ T6564] netlink: 252 bytes leftover after parsing attributes in process `syz.3.167'. [ 109.742349][ T6568] netlink: 'syz.2.169': attribute type 2 has an invalid length. [ 109.981682][ T6576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.171'. [ 110.753037][ T6611] netlink: 68 bytes leftover after parsing attributes in process `syz.4.181'. [ 110.831328][ T6611] warning: `syz.4.181' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 111.181088][ T6632] netlink: 256 bytes leftover after parsing attributes in process `syz.1.189'. [ 111.215921][ T6634] netlink: 212172 bytes leftover after parsing attributes in process `syz.3.188'. [ 111.250293][ T6631] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.254053][ T6635] netlink: 212172 bytes leftover after parsing attributes in process `syz.3.188'. [ 111.258397][ T6631] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.650327][ T6655] netlink: 'syz.1.192': attribute type 10 has an invalid length. [ 111.678657][ T6655] netlink: 40 bytes leftover after parsing attributes in process `syz.1.192'. [ 111.715663][ T6660] netlink: 'syz.1.192': attribute type 10 has an invalid length. [ 111.788506][ T6651] lo: entered promiscuous mode [ 111.797035][ T6651] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 111.843603][ T6655] dummy0: entered promiscuous mode [ 111.849752][ T6655] bridge0: port 3(dummy0) entered blocking state [ 111.858803][ T6655] bridge0: port 3(dummy0) entered disabled state [ 111.875039][ T6655] dummy0: entered allmulticast mode [ 111.887311][ T6655] bridge0: port 3(dummy0) entered blocking state [ 111.894011][ T6655] bridge0: port 3(dummy0) entered forwarding state [ 111.936941][ T6660] team0: Port device geneve0 added [ 112.393469][ T6678] __nla_validate_parse: 1 callbacks suppressed [ 112.393489][ T6678] netlink: 28 bytes leftover after parsing attributes in process `syz.4.197'. [ 112.394493][ T6682] netlink: 96 bytes leftover after parsing attributes in process `syz.1.198'. [ 112.668300][ T6694] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.202'. [ 112.738466][ T6696] netlink: 'syz.4.201': attribute type 1 has an invalid length. [ 112.770721][ T6703] tipc: Started in network mode [ 112.824857][ T6703] tipc: Node identity 1696ae2358a, cluster identity 4711 [ 112.885652][ T6703] tipc: Enabled bearer , priority 0 [ 112.934533][ T6706] syzkaller0: entered promiscuous mode [ 112.940083][ T6706] syzkaller0: entered allmulticast mode [ 112.975326][ T6703] tipc: Resetting bearer [ 113.117901][ T5905] IPVS: starting estimator thread 0... [ 113.168281][ T6723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.207'. [ 113.192291][ T6703] tipc: Resetting bearer [ 113.261593][ T6725] IPVS: using max 33 ests per chain, 79200 per kthread [ 113.336906][ T6703] tipc: Disabling bearer [ 113.777732][ T6754] netlink: 'syz.4.216': attribute type 13 has an invalid length. [ 113.895640][ T6754] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 114.375545][ T6776] netlink: 24 bytes leftover after parsing attributes in process `syz.2.223'. [ 114.472764][ T6774] netlink: 56 bytes leftover after parsing attributes in process `syz.1.222'. [ 114.519458][ T6784] trusted_key: syz.3.226 sent an empty control message without MSG_MORE. [ 114.659147][ T6793] ip6erspan0: entered promiscuous mode [ 115.176445][ T6816] openvswitch: netlink: Missing valid actions attribute. [ 115.197344][ T6816] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.210674][ T6815] netlink: 32 bytes leftover after parsing attributes in process `syz.0.235'. [ 115.247056][ T6815] netlink: 12 bytes leftover after parsing attributes in process `syz.0.235'. [ 115.273320][ T6818] netlink: 16 bytes leftover after parsing attributes in process `syz.4.236'. [ 115.368705][ T6815] netlink: 16 bytes leftover after parsing attributes in process `syz.0.235'. [ 116.520006][ T6881] lo speed is unknown, defaulting to 1000 [ 116.576191][ T6881] lo speed is unknown, defaulting to 1000 [ 116.655726][ T6881] lo speed is unknown, defaulting to 1000 [ 116.739747][ T6881] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 116.853694][ T6881] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 116.953904][ T6920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.972054][ T6881] lo speed is unknown, defaulting to 1000 [ 116.980376][ T6881] lo speed is unknown, defaulting to 1000 [ 116.988325][ T6881] lo speed is unknown, defaulting to 1000 [ 117.002530][ T6881] lo speed is unknown, defaulting to 1000 [ 117.012420][ T6881] lo speed is unknown, defaulting to 1000 [ 117.530100][ T6941] __nla_validate_parse: 5 callbacks suppressed [ 117.530118][ T6941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.260'. [ 117.565876][ T6938] netdevsim netdevsim0: Direct firmware load for failed with error -2 [ 117.578169][ T6938] netdevsim netdevsim0: Falling back to sysfs fallback for: [ 117.588280][ T6941] netlink: 12 bytes leftover after parsing attributes in process `syz.1.260'. [ 117.642833][ T6941] netlink: 'syz.1.260': attribute type 7 has an invalid length. [ 117.753273][ T6949] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 117.760556][ T6949] IPv6: NLM_F_CREATE should be set when creating new route [ 117.785231][ T6949] netlink: 104 bytes leftover after parsing attributes in process `syz.2.261'. [ 117.902911][ T6957] netlink: 12 bytes leftover after parsing attributes in process `syz.4.266'. [ 118.042835][ T6964] netlink: 12 bytes leftover after parsing attributes in process `syz.3.269'. [ 118.052877][ T6964] netlink: 12 bytes leftover after parsing attributes in process `syz.3.269'. [ 118.063785][ T6962] netlink: 24 bytes leftover after parsing attributes in process `syz.4.267'. [ 118.073908][ T6961] bridge1: entered allmulticast mode [ 118.106256][ T6961] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 118.116263][ T6961] netlink: 64 bytes leftover after parsing attributes in process `syz.1.268'. [ 118.226470][ T6969] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 118.253220][ T6969] netlink: 44 bytes leftover after parsing attributes in process `syz.3.272'. [ 118.269880][ T6969] netlink: 43 bytes leftover after parsing attributes in process `syz.3.272'. [ 118.279290][ T6969] netlink: 'syz.3.272': attribute type 5 has an invalid length. [ 118.529654][ T6986] lo: entered allmulticast mode [ 118.538076][ T6986] tunl0: entered allmulticast mode [ 118.560322][ T6986] gre0: entered allmulticast mode [ 118.587273][ T6986] gretap0: entered allmulticast mode [ 118.598997][ T6986] erspan0: entered allmulticast mode [ 118.612812][ T6986] ip_vti0: entered allmulticast mode [ 118.620486][ T6986] ip6_vti0: entered allmulticast mode [ 118.646151][ T6986] sit0: entered allmulticast mode [ 118.665384][ T6986] ip6tnl0: entered allmulticast mode [ 118.686028][ T6986] ip6gre0: entered allmulticast mode [ 118.740222][ T6986] syz_tun: entered allmulticast mode [ 118.838822][ T6986] ip6gretap0: entered allmulticast mode [ 118.885111][ T6986] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.892943][ T6986] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.940206][ T6986] bridge0: entered allmulticast mode [ 118.978480][ T6986] vcan0: entered allmulticast mode [ 118.993871][ T6986] bond0: entered allmulticast mode [ 119.009391][ T6986] bond_slave_0: entered allmulticast mode [ 119.027338][ T6986] bond_slave_1: entered allmulticast mode [ 119.059245][ T6986] team0: entered allmulticast mode [ 119.074076][ T6986] team_slave_0: entered allmulticast mode [ 119.079978][ T6986] team_slave_1: entered allmulticast mode [ 119.096924][ T6986] dummy0: entered allmulticast mode [ 119.114267][ T6986] nlmon0: entered allmulticast mode [ 119.129698][ T6986] caif0: entered allmulticast mode [ 119.136249][ T6986] batadv0: entered allmulticast mode [ 119.145423][ T6986] veth0: entered allmulticast mode [ 119.154315][ T6986] veth1: entered allmulticast mode [ 119.191663][ T6986] wg0: entered allmulticast mode [ 119.214345][ T6986] wg1: entered allmulticast mode [ 119.223658][ T6986] wg2: entered allmulticast mode [ 119.230270][ T6986] veth0_to_bridge: entered allmulticast mode [ 119.240706][ T6986] veth1_to_bridge: entered allmulticast mode [ 119.252709][ T6986] veth0_to_bond: entered allmulticast mode [ 119.263570][ T6986] veth1_to_bond: entered allmulticast mode [ 119.280706][ T6986] veth0_to_team: entered allmulticast mode [ 119.293504][ T6986] veth1_to_team: entered allmulticast mode [ 119.304087][ T6986] veth0_to_batadv: entered allmulticast mode [ 119.313395][ T6986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.322884][ T6986] batadv_slave_0: entered allmulticast mode [ 119.332576][ T6986] veth1_to_batadv: entered allmulticast mode [ 119.343174][ T6986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.352408][ T6986] batadv_slave_1: entered allmulticast mode [ 119.370703][ T6986] xfrm0: entered allmulticast mode [ 119.379354][ T6986] veth0_to_hsr: entered allmulticast mode [ 119.389305][ T6986] hsr_slave_0: entered allmulticast mode [ 119.397745][ T6986] veth1_to_hsr: entered allmulticast mode [ 119.407562][ T6986] hsr_slave_1: entered allmulticast mode [ 119.416473][ T6986] hsr0: entered allmulticast mode [ 119.424369][ T6986] veth1_virt_wifi: entered allmulticast mode [ 119.434452][ T6986] veth0_virt_wifi: entered allmulticast mode [ 119.443821][ T6986] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 119.451895][ T6986] veth1_vlan: entered allmulticast mode [ 119.460588][ T6986] veth0_vlan: entered allmulticast mode [ 119.478562][ T6986] vlan0: entered allmulticast mode [ 119.484419][ T6986] vlan1: entered allmulticast mode [ 119.490152][ T6986] macvlan0: entered allmulticast mode [ 119.499003][ T6986] macvlan1: entered allmulticast mode [ 119.508294][ T6986] ipvlan0: entered allmulticast mode [ 119.514318][ T6986] ipvlan1: entered allmulticast mode [ 119.520131][ T6986] veth1_macvtap: entered allmulticast mode [ 119.528527][ T6986] veth0_macvtap: entered allmulticast mode [ 119.538535][ T6986] macvtap0: entered allmulticast mode [ 119.547036][ T6986] macsec0: entered allmulticast mode [ 119.556922][ T6986] geneve0: entered allmulticast mode [ 119.565397][ T6986] geneve1: entered allmulticast mode [ 119.574659][ T6986] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 119.582744][ T6986] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 119.590744][ T6986] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 119.603564][ T6986] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 119.614390][ T6986] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 119.632341][ T6986] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 119.641049][ T6986] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 119.648201][ T6986] syztnl0: entered allmulticast mode [ 119.653727][ T6986] bridge1: entered allmulticast mode [ 119.672911][ T5905] lo speed is unknown, defaulting to 1000 [ 119.689118][ T5905] syz2: Port: 1 Link DOWN [ 119.774822][ T6900] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.803522][ T7029] netlink: 'syz.2.284': attribute type 1 has an invalid length. [ 119.811146][ T6900] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.869685][ T6900] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.911202][ T6900] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.399626][ T7060] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 120.618743][ T7061] "syz.3.292" (7061) uses obsolete ecb(arc4) skcipher [ 120.934559][ T7087] netlink: 'syz.2.300': attribute type 1 has an invalid length. [ 120.998681][ T7087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.086873][ T7087] gretap1: entered promiscuous mode [ 121.153978][ T7087] bond0: (slave gretap1): making interface the new active one [ 121.182746][ T7087] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 121.225741][ T7095] macvlan2: entered promiscuous mode [ 121.254526][ T7095] macvlan2: entered allmulticast mode [ 121.260501][ T7095] bond0: entered promiscuous mode [ 121.267356][ T7095] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 121.279470][ T7095] bond0: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 121.297602][ T7095] bond0: left promiscuous mode [ 121.317046][ T7101] syzkaller0: entered allmulticast mode [ 121.462242][ T7112] netlink: 'syz.0.305': attribute type 6 has an invalid length. [ 121.489387][ T7112] netlink: 'syz.0.305': attribute type 1 has an invalid length. [ 121.708913][ C0] vcan0: j1939_session_tx_dat: 0xffff888032b06000: queue data error: -100 [ 121.736337][ T7125] netlink: 'syz.0.310': attribute type 4 has an invalid length. [ 122.001904][ T7135] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 122.517089][ T7171] Bluetooth: MGMT ver 1.23 [ 122.643670][ T7176] __nla_validate_parse: 84 callbacks suppressed [ 122.643687][ T7176] netlink: 24 bytes leftover after parsing attributes in process `syz.0.322'. [ 123.541311][ T7223] netlink: 'syz.2.332': attribute type 1 has an invalid length. [ 123.706029][ T7230] bond1: (slave bridge2): making interface the new active one [ 123.716166][ T7230] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 123.726470][ T7229] netlink: 64 bytes leftover after parsing attributes in process `syz.3.333'. [ 123.736207][ T7229] netlink: 64 bytes leftover after parsing attributes in process `syz.3.333'. [ 123.762961][ T7239] veth0: entered promiscuous mode [ 123.807202][ T7237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.334'. [ 123.859949][ T7239] netlink: 8 bytes leftover after parsing attributes in process `syz.0.334'. [ 124.043903][ T7252] sctp: [Deprecated]: syz.3.337 (pid 7252) Use of int in max_burst socket option deprecated. [ 124.043903][ T7252] Use struct sctp_assoc_value instead [ 124.285301][ T7263] netlink: 'syz.4.340': attribute type 1 has an invalid length. [ 124.509806][ T7277] netlink: 108 bytes leftover after parsing attributes in process `syz.2.344'. [ 124.626478][ T7280] netlink: 'syz.4.345': attribute type 13 has an invalid length. [ 124.642084][ T7280] netlink: 'syz.4.345': attribute type 58 has an invalid length. [ 124.662234][ T7280] netlink: 152 bytes leftover after parsing attributes in process `syz.4.345'. [ 125.039857][ T7293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.350'. [ 125.039872][ T7294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.350'. [ 125.313664][ T7304] netlink: 16 bytes leftover after parsing attributes in process `syz.0.354'. [ 125.372081][ T6905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.390159][ T6905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.472969][ T7316] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 125.521517][ T7318] netlink: 'syz.0.358': attribute type 10 has an invalid length. [ 125.570811][ T7318] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 125.694355][ T7322] sctp: [Deprecated]: syz.2.359 (pid 7322) Use of int in max_burst socket option. [ 125.694355][ T7322] Use struct sctp_assoc_value instead [ 125.733494][ T7326] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 126.361132][ T7358] netlink: 'syz.4.371': attribute type 2 has an invalid length. [ 131.264032][ T7455] __nla_validate_parse: 4 callbacks suppressed [ 131.264051][ T7455] netlink: 4 bytes leftover after parsing attributes in process `syz.0.394'. [ 131.448090][ T7455] bridge_slave_1: left allmulticast mode [ 131.471207][ T7455] bridge_slave_1: left promiscuous mode [ 131.478729][ T7455] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.511974][ T7455] bridge_slave_0: left allmulticast mode [ 131.536612][ T7455] bridge_slave_0: left promiscuous mode [ 131.551103][ T7455] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.670225][ T7473] sctp: failed to load transform for md5: -2 [ 132.498255][ T7519] netlink: 'syz.4.405': attribute type 10 has an invalid length. [ 132.590745][ T7521] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.605194][ T7521] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.698432][ T7521] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.716606][ T7521] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.799409][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.806220][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.816079][ T1301] clip:clip_start_xmit: skb_dst(skb) == NULL [ 132.884542][ T7521] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.898216][ T7521] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.942254][ T7540] netlink: 'syz.4.409': attribute type 13 has an invalid length. [ 132.979289][ T7521] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 133.008815][ T7521] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.027293][ T7540] veth0_macvtap: left promiscuous mode [ 133.034712][ T7540] macvtap0: entered allmulticast mode [ 133.050564][ T7540] macvtap0: refused to change device tx_queue_len [ 133.160759][ T6899] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.180632][ T6899] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.223439][ T6899] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.233547][ T6899] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.261153][ T6887] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.271486][ T6887] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.316564][ T6899] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.348917][ T6899] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.381122][ T7551] syz_tun: entered allmulticast mode [ 133.404912][ T7551] netlink: 'syz.0.414': attribute type 11 has an invalid length. [ 133.437302][ T7551] netlink: 28 bytes leftover after parsing attributes in process `syz.0.414'. [ 133.446278][ T7554] netlink: 16 bytes leftover after parsing attributes in process `syz.3.415'. [ 133.590141][ T7561] netlink: 132 bytes leftover after parsing attributes in process `syz.2.417'. [ 133.606510][ T7550] syz_tun: left allmulticast mode [ 133.614641][ T7561] netlink: 'syz.2.417': attribute type 2 has an invalid length. [ 133.708788][ T7569] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv_slave_0, syncid = 2, id = 0 [ 133.745523][ T7571] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 133.773546][ T7566] can: request_module (can-proto-3) failed. [ 134.497498][ T7611] tipc: Enabling of bearer rejected, failed to enable media [ 134.895644][ T7634] netlink: 308 bytes leftover after parsing attributes in process `syz.4.438'. [ 134.936524][ T7632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.437'. [ 135.597606][ T7664] netlink: 'syz.0.445': attribute type 3 has an invalid length. [ 135.609814][ T7664] netlink: 'syz.0.445': attribute type 1 has an invalid length. [ 135.730989][ T7667] nbd0: detected capacity change from 0 to 127 [ 135.869421][ T5844] block nbd0: Receive control failed (result -104) [ 135.969858][ T7686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.448'. [ 136.241305][ T7698] netlink: 13 bytes leftover after parsing attributes in process `syz.0.453'. [ 136.567470][ T7717] netlink: 'syz.4.458': attribute type 11 has an invalid length. [ 136.592471][ T7717] netlink: 'syz.4.458': attribute type 11 has an invalid length. [ 136.611170][ T7717] netlink: 152 bytes leftover after parsing attributes in process `syz.4.458'. [ 137.339108][ T7745] openvswitch: netlink: Missing valid actions attribute. [ 137.375019][ T7745] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.537239][ T7752] netlink: 111 bytes leftover after parsing attributes in process `syz.4.466'. [ 137.818463][ T5850] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 137.827601][ T5850] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 137.843982][ T5850] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 137.853361][ T5850] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 137.864204][ T5850] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 137.920301][ T7769] openvswitch: netlink: Unknown key attributes 2 [ 137.961706][ T7765] lo speed is unknown, defaulting to 1000 [ 138.182454][ T7771] netlink: 16 bytes leftover after parsing attributes in process `syz.3.469'. [ 138.236155][ T7775] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.469'. [ 138.489985][ T7765] chnl_net:caif_netlink_parms(): no params data found [ 138.807930][ T7807] netlink: 256 bytes leftover after parsing attributes in process `syz.4.477'. [ 138.840392][ T7807] unsupported nlmsg_type 40 [ 138.878398][ T7809] netlink: 'syz.4.477': attribute type 11 has an invalid length. [ 138.897777][ T7809] netlink: 224 bytes leftover after parsing attributes in process `syz.4.477'. [ 139.016293][ T7805] syzkaller0: entered promiscuous mode [ 139.034936][ T7805] syzkaller0: entered allmulticast mode [ 139.047947][ T7765] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.058983][ T7765] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.079848][ T7765] bridge_slave_0: entered allmulticast mode [ 139.090075][ T7765] bridge_slave_0: entered promiscuous mode [ 139.166405][ T7765] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.186136][ T7765] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.205444][ T7765] bridge_slave_1: entered allmulticast mode [ 139.228591][ T7765] bridge_slave_1: entered promiscuous mode [ 139.345324][ T7765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.385269][ T7765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.465227][ T7832] openvswitch: netlink: Unknown key attributes 2 [ 139.506362][ T7834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.483'. [ 139.594996][ T7841] netlink: 56 bytes leftover after parsing attributes in process `syz.4.482'. [ 139.620118][ T7765] team0: Port device team_slave_0 added [ 139.630482][ T7832] netlink: 'syz.4.482': attribute type 1 has an invalid length. [ 139.675087][ T7848] netlink: 'syz.2.483': attribute type 11 has an invalid length. [ 139.693696][ T7848] netlink: 224 bytes leftover after parsing attributes in process `syz.2.483'. [ 139.706162][ T7765] team0: Port device team_slave_1 added [ 139.911125][ T5850] Bluetooth: hci5: command tx timeout [ 140.012076][ T7765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.035847][ T7765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.126952][ T7765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.200019][ T7765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.228811][ T7765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.283892][ T7765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.298864][ T7857] lo speed is unknown, defaulting to 1000 [ 140.390647][ T7883] netlink: 12 bytes leftover after parsing attributes in process `syz.3.490'. [ 140.521634][ T7765] hsr_slave_0: entered promiscuous mode [ 140.537631][ T7765] hsr_slave_1: entered promiscuous mode [ 140.553450][ T7765] debugfs: 'hsr0' already exists in 'hsr' [ 140.575681][ T7765] Cannot create hsr debugfs directory [ 140.736327][ T7894] netlink: 'syz.4.493': attribute type 29 has an invalid length. [ 140.835009][ T7894] netlink: 'syz.4.493': attribute type 29 has an invalid length. [ 140.883106][ T7899] netlink: 'syz.3.495': attribute type 9 has an invalid length. [ 141.043786][ T7904] netlink: 'syz.4.496': attribute type 1 has an invalid length. [ 141.345466][ T7917] netlink: 'syz.2.500': attribute type 3 has an invalid length. [ 141.444258][ T7927] netlink: 'syz.3.501': attribute type 1 has an invalid length. [ 141.713894][ T7765] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 141.746301][ T7765] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 141.790863][ T7765] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 141.853614][ T7765] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 141.992256][ T5850] Bluetooth: hci5: command tx timeout [ 142.045515][ T7965] netlink: 'syz.2.508': attribute type 4 has an invalid length. [ 142.066854][ T7966] __nla_validate_parse: 8 callbacks suppressed [ 142.066871][ T7966] netlink: 24 bytes leftover after parsing attributes in process `syz.0.507'. [ 142.111943][ T7967] netlink: 'syz.2.508': attribute type 4 has an invalid length. [ 142.198095][ T7970] netlink: 16 bytes leftover after parsing attributes in process `syz.4.510'. [ 142.367264][ T7765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.456116][ T7765] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.483806][ T7975] netlink: 20 bytes leftover after parsing attributes in process `syz.0.511'. [ 142.513740][ T6900] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.521019][ T6900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.585765][ T7982] netlink: 24 bytes leftover after parsing attributes in process `syz.4.513'. [ 142.611624][ T6899] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.618754][ T6899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.658752][ T7981] bridge_slave_0: entered promiscuous mode [ 143.273178][ T6903] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.506375][ T7765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.545284][ T8029] nbd: must specify an index to disconnect [ 143.555990][ T8025] netlink: 'syz.2.522': attribute type 1 has an invalid length. [ 143.586626][ T8025] netlink: 184 bytes leftover after parsing attributes in process `syz.2.522'. [ 144.072000][ T5844] Bluetooth: hci5: command tx timeout [ 144.285605][ T5850] block nbd1: Receive control failed (result -32) [ 144.754251][ T8083] Driver unsupported XDP return value 0 on prog (id 92) dev N/A, expect packet loss! [ 144.775187][ T7765] veth0_vlan: entered promiscuous mode [ 144.932460][ T8090] netlink: 'syz.2.535': attribute type 2 has an invalid length. [ 144.950121][ T8094] netlink: 28 bytes leftover after parsing attributes in process `syz.3.537'. [ 144.971276][ T8092] netlink: 18 bytes leftover after parsing attributes in process `syz.4.536'. [ 145.017827][ T7765] veth1_vlan: entered promiscuous mode [ 145.024974][ T8094] netlink: 'syz.3.537': attribute type 7 has an invalid length. [ 145.036408][ T8099] netlink: 'syz.2.538': attribute type 1 has an invalid length. [ 145.057295][ T8094] netlink: 'syz.3.537': attribute type 8 has an invalid length. [ 145.121623][ T8094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.537'. [ 145.236646][ T7765] veth0_macvtap: entered promiscuous mode [ 145.268168][ T7765] veth1_macvtap: entered promiscuous mode [ 145.377856][ T7765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.400308][ T8114] sctp: [Deprecated]: syz.3.543 (pid 8114) Use of struct sctp_assoc_value in delayed_ack socket option. [ 145.400308][ T8114] Use struct sctp_sack_info instead [ 145.417657][ T7765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.494749][ T6901] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.520372][ T6901] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.568595][ T6901] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.590333][ T6901] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.740207][ T6901] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.758018][ T6901] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.808543][ T6887] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.825878][ T6887] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.850454][ T8129] netlink: 'syz.2.547': attribute type 10 has an invalid length. [ 146.078420][ T8143] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.551'. [ 146.102540][ T8141] macsec0: entered allmulticast mode [ 146.107897][ T8141] veth1_macvtap: entered allmulticast mode [ 146.152064][ T5850] Bluetooth: hci5: command tx timeout [ 146.798697][ T8184] netlink: 'syz.2.562': attribute type 11 has an invalid length. [ 146.818924][ T8184] netlink: 'syz.2.562': attribute type 11 has an invalid length. [ 146.842109][ T8184] netlink: 152 bytes leftover after parsing attributes in process `syz.2.562'. [ 146.868131][ T8186] netlink: 'syz.4.564': attribute type 28 has an invalid length. [ 146.888120][ T8186] netlink: 'syz.4.564': attribute type 3 has an invalid length. [ 147.182243][ T8196] netlink: 'syz.3.567': attribute type 16 has an invalid length. [ 147.202546][ T8198] __nla_validate_parse: 4 callbacks suppressed [ 147.202565][ T8198] netlink: 84 bytes leftover after parsing attributes in process `syz.4.566'. [ 147.260719][ T8196] netlink: 'syz.3.567': attribute type 3 has an invalid length. [ 147.315132][ T8196] netlink: 132 bytes leftover after parsing attributes in process `syz.3.567'. [ 147.365258][ T8195] vlan2: entered promiscuous mode [ 147.390302][ T8195] bridge0: entered promiscuous mode [ 147.419991][ T8195] vlan2: entered allmulticast mode [ 147.468998][ T8195] bridge0: entered allmulticast mode [ 147.581994][ T8195] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.566'. [ 147.888313][ T8210] netlink: 4 bytes leftover after parsing attributes in process `syz.5.569'. [ 148.088615][ T8211] lo speed is unknown, defaulting to 1000 [ 148.172702][ T8225] : renamed from bridge_slave_0 (while UP) [ 148.203288][ T8217] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 148.257251][ T8221] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 148.962441][ T8244] tipc: Enabled bearer , priority 0 [ 149.176686][ T8243] syzkaller0: entered promiscuous mode [ 149.261045][ T8243] syzkaller0: entered allmulticast mode [ 149.387390][ T8248] tipc: Resetting bearer [ 149.481122][ T8242] tipc: Resetting bearer [ 149.744274][ T8242] tipc: Disabling bearer [ 151.110488][ T8312] netlink: 64 bytes leftover after parsing attributes in process `syz.3.590'. [ 151.275750][ T8319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.592'. [ 151.956264][ T8363] netlink: 32 bytes leftover after parsing attributes in process `syz.2.604'. [ 152.571669][ T8382] netlink: 4 bytes leftover after parsing attributes in process `syz.5.609'. [ 152.643939][ T8390] netlink: 20 bytes leftover after parsing attributes in process `syz.4.610'. [ 152.742050][ T8399] netlink: 'syz.3.612': attribute type 10 has an invalid length. [ 152.818863][ T8399] dummy0: left allmulticast mode [ 152.860617][ T8399] dummy0: entered allmulticast mode [ 152.878737][ T8399] team0: Port device dummy0 added [ 152.901217][ T8408] netlink: 'syz.3.612': attribute type 10 has an invalid length. [ 152.926520][ T8400] netlink: 'syz.3.612': attribute type 10 has an invalid length. [ 153.017837][ T8400] dummy0: left allmulticast mode [ 153.069323][ T8400] team0: Port device dummy0 removed [ 153.145112][ T8400] dummy0: entered allmulticast mode [ 153.194567][ T8400] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 153.450442][ T8425] netlink: 104 bytes leftover after parsing attributes in process `syz.4.615'. [ 153.506494][ T8426] vlan3: entered promiscuous mode [ 153.617865][ T8428] tipc: Started in network mode [ 153.631163][ T8428] tipc: Node identity be6b4cb662c3, cluster identity 4711 [ 153.653188][ T8428] tipc: Enabled bearer , priority 0 [ 153.676796][ T8428] syzkaller0: entered allmulticast mode [ 153.733648][ T8428] tipc: Resetting bearer [ 153.782112][ T8437] netlink: 48 bytes leftover after parsing attributes in process `syz.4.618'. [ 154.039966][ T8440] tipc: Disabling bearer [ 154.523619][ T8478] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.629'. [ 154.925324][ T8500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.636'. [ 154.977455][ T8500] netlink: 260 bytes leftover after parsing attributes in process `syz.2.636'. [ 155.000881][ T8500] IPv6: sit1: Disabled Multicast RS [ 155.008955][ T8500] sit1: entered allmulticast mode [ 155.450042][ T8511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.640'. [ 156.357638][ T8551] netlink: 12 bytes leftover after parsing attributes in process `syz.5.653'. [ 156.370069][ T8551] netlink: 12 bytes leftover after parsing attributes in process `syz.5.653'. [ 156.430211][ T8551] bridge0: port 3(vlan2) entered blocking state [ 156.437341][ T8551] bridge0: port 3(vlan2) entered disabled state [ 156.444344][ T8551] vlan2: entered allmulticast mode [ 156.453447][ T8551] bridge0: entered allmulticast mode [ 156.464874][ T8551] vlan2: left allmulticast mode [ 156.471273][ T8551] bridge0: left allmulticast mode [ 157.527693][ T8601] netlink: 'syz.5.665': attribute type 6 has an invalid length. [ 157.734541][ T8604] __nla_validate_parse: 4 callbacks suppressed [ 157.734563][ T8604] netlink: 28 bytes leftover after parsing attributes in process `syz.2.666'. [ 158.109897][ T8620] IPVS: persistence engine module ip_vs_pe_À not found [ 158.257173][ T8636] netlink: 132 bytes leftover after parsing attributes in process `syz.0.674'. [ 158.374687][ T8640] netlink: 666 bytes leftover after parsing attributes in process `syz.5.675'. [ 158.807451][ T8667] netlink: 56 bytes leftover after parsing attributes in process `syz.2.680'. [ 159.172592][ T8684] netlink: 24 bytes leftover after parsing attributes in process `syz.5.683'. [ 159.234647][ T8670] netlink: 44 bytes leftover after parsing attributes in process `syz.5.683'. [ 159.485068][ T8700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.687'. [ 159.517392][ T8701] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.540315][ T8700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.687'. [ 159.930181][ T8720] netlink: 56 bytes leftover after parsing attributes in process `syz.3.690'. [ 159.960695][ T8720] netlink: 24 bytes leftover after parsing attributes in process `syz.3.690'. [ 160.022391][ T8726] veth0: entered promiscuous mode [ 160.043323][ T8724] veth0: left promiscuous mode [ 160.680436][ T8733] vlan0 (unregistering): left promiscuous mode [ 161.393560][ T8793] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 161.550682][ T8806] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 161.796051][ T8823] openvswitch: netlink: Actions may not be safe on all matching packets [ 162.875202][ T8880] __nla_validate_parse: 8 callbacks suppressed [ 162.875221][ T8880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.725'. [ 162.957319][ T8883] netlink: 24 bytes leftover after parsing attributes in process `syz.3.728'. [ 163.073084][ T8878] lo speed is unknown, defaulting to 1000 [ 163.430640][ T8901] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 163.544191][ T8916] tipc: Enabled bearer , priority 0 [ 163.576009][ T8917] netlink: 'syz.5.734': attribute type 1 has an invalid length. [ 163.587069][ T8910] syzkaller0: entered promiscuous mode [ 163.624081][ T8910] syzkaller0: entered allmulticast mode [ 163.757898][ T8913] netlink: 28 bytes leftover after parsing attributes in process `syz.5.734'. [ 163.960683][ T8917] 8021q: adding VLAN 0 to HW filter on device bond2 [ 164.016594][ T8920] 8021q: adding VLAN 0 to HW filter on device bond2 [ 164.025970][ T8920] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 164.050466][ T8920] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 164.087152][ T8924] gretap1: entered promiscuous mode [ 164.149764][ T8931] macvlan2: entered promiscuous mode [ 164.182906][ T8931] macvlan2: entered allmulticast mode [ 164.192004][ T8931] bond2: entered promiscuous mode [ 164.201590][ T8931] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 164.217719][ T8931] bond2: left promiscuous mode [ 164.223146][ T8946] netlink: 40 bytes leftover after parsing attributes in process `syz.0.739'. [ 164.266750][ T8932] tipc: Resetting bearer [ 164.328355][ T8909] tipc: Resetting bearer [ 164.429367][ T8950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.740'. [ 164.462665][ T8909] tipc: Disabling bearer [ 164.561064][ T8957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.741'. [ 164.569970][ T8957] netlink: 60 bytes leftover after parsing attributes in process `syz.2.741'. [ 164.617386][ T8957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.741'. [ 164.628989][ T8957] netlink: 60 bytes leftover after parsing attributes in process `syz.2.741'. [ 164.655080][ T8957] netlink: 104 bytes leftover after parsing attributes in process `syz.2.741'. [ 164.781523][ T8960] batman_adv: batadv0: Adding interface: wlan1 [ 164.845484][ T8960] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.887764][ T8960] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 164.987638][ T8978] netlink: 'syz.3.746': attribute type 23 has an invalid length. [ 165.076050][ T8984] netlink: 'syz.0.748': attribute type 6 has an invalid length. [ 165.088436][ T8971] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 165.166694][ T8980] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 165.167151][ T8987] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 166.107556][ T25] block nbd0: Possible stuck request ffff88802588e000: control (read@0,1024B). Runtime 30 seconds [ 166.120596][ T25] block nbd0: Possible stuck request ffff88802588e1c0: control (read@1024,1024B). Runtime 30 seconds [ 166.140963][ T25] block nbd0: Possible stuck request ffff88802588e380: control (read@2048,1024B). Runtime 30 seconds [ 166.152338][ T25] block nbd0: Possible stuck request ffff88802588e540: control (read@3072,1024B). Runtime 30 seconds [ 166.189786][ T9035] 8021q: adding VLAN 0 to HW filter on device bond3 [ 166.570649][ T9054] tipc: Can't bind to reserved service type 32 [ 166.732972][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888073122c00: rx timeout, send abort [ 166.742890][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888073122c00: 0x0ff02: (3) A timeout occurred and this is the connection abort to close the session. [ 166.767461][ T9060] netlink: 'syz.2.764': attribute type 21 has an invalid length. [ 167.018460][ T9062] tipc: Enabled bearer , priority 0 [ 167.179090][ T9061] tipc: Disabling bearer [ 167.213134][ T9071] tc_dump_action: action bad kind [ 167.263266][ T9076] : renamed from hsr0 (while UP) [ 167.290776][ C0] Unknown status report in ack skb [ 167.550453][ T9088] netlink: 'syz.5.774': attribute type 2 has an invalid length. [ 167.773877][ T9105] netlink: 'syz.5.777': attribute type 10 has an invalid length. [ 167.846669][ T9105] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 167.951160][ T9115] netlink: 'syz.2.778': attribute type 32 has an invalid length. [ 167.974837][ T9115] __nla_validate_parse: 6 callbacks suppressed [ 167.974855][ T9115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.778'. [ 167.998102][ T9115] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52) [ 168.320514][ T9132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.781'. [ 168.705352][ T9141] netlink: 'syz.5.784': attribute type 1 has an invalid length. [ 168.806439][ T9149] netlink: 68 bytes leftover after parsing attributes in process `syz.3.787'. [ 168.889790][ T9141] 8021q: adding VLAN 0 to HW filter on device bond3 [ 168.947071][ T9166] netlink: 'syz.3.787': attribute type 1 has an invalid length. [ 168.965081][ T9148] macvlan2: entered promiscuous mode [ 168.970538][ T9166] netlink: 224 bytes leftover after parsing attributes in process `syz.3.787'. [ 168.970751][ T9148] macvlan2: entered allmulticast mode [ 168.992415][ T9148] bond3: entered promiscuous mode [ 169.014679][ T9166] nbd: illegal input index 1048576 [ 169.027202][ T9168] netlink: 'syz.4.786': attribute type 21 has an invalid length. [ 169.031215][ T9148] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 169.092054][ T9148] bond3: left promiscuous mode [ 169.099010][ T9168] netlink: 204 bytes leftover after parsing attributes in process `syz.4.786'. [ 169.180986][ T9156] syzkaller1: entered promiscuous mode [ 169.199132][ T9156] syzkaller1: entered allmulticast mode [ 169.439196][ T9186] netlink: 36 bytes leftover after parsing attributes in process `syz.5.793'. [ 169.480237][ T9186] netlink: 12 bytes leftover after parsing attributes in process `syz.5.793'. [ 169.495432][ T9186] netlink: 256 bytes leftover after parsing attributes in process `syz.5.793'. [ 169.909971][ T9208] netlink: 12 bytes leftover after parsing attributes in process `syz.4.797'. [ 170.616314][ T9250] netlink: 28 bytes leftover after parsing attributes in process `syz.4.804'. [ 170.671100][ T9259] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 170.887642][ T9269] netlink: 'syz.3.809': attribute type 10 has an invalid length. [ 170.940253][ T9270] netlink: 'syz.3.809': attribute type 10 has an invalid length. [ 170.953950][ T9268] lo: left promiscuous mode [ 171.015753][ T9268] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.023712][ T9268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.031260][ T9268] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.038510][ T9268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.178742][ T9268] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 171.195886][ T5850] Bluetooth: hci5: command tx timeout [ 171.219112][ T9269] bridge_slave_1: left allmulticast mode [ 171.230131][ T9269] bridge_slave_1: left promiscuous mode [ 171.233741][ T9289] netlink: 'syz.5.811': attribute type 83 has an invalid length. [ 171.241742][ T9269] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.305482][ T9269] bridge_slave_1: entered allmulticast mode [ 171.322934][ T9269] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 171.757547][ T9315] netlink: 'syz.3.820': attribute type 1 has an invalid length. [ 171.855751][ T9320] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 172.378365][ T9348] netlink: 'syz.4.828': attribute type 2 has an invalid length. [ 172.467119][ T9354] 8021q: adding VLAN 0 to HW filter on device bond1 [ 172.616954][ T9362] vlan3: entered allmulticast mode [ 173.016826][ T9370] netlink: 'syz.3.833': attribute type 9 has an invalid length. [ 173.079007][ T9375] netlink: 'syz.2.834': attribute type 18 has an invalid length. [ 173.189790][ T9383] __nla_validate_parse: 10 callbacks suppressed [ 173.189809][ T9383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.836'. [ 173.233876][ T9383] netlink: 12 bytes leftover after parsing attributes in process `syz.0.836'. [ 173.860188][ T9420] netlink: 36 bytes leftover after parsing attributes in process `syz.5.843'. [ 174.148335][ T9433] netlink: 48 bytes leftover after parsing attributes in process `syz.0.847'. [ 174.189323][ T9433] netlink: 96 bytes leftover after parsing attributes in process `syz.0.847'. [ 174.820214][ T9472] netlink: 12 bytes leftover after parsing attributes in process `syz.4.856'. [ 174.916350][ T9477] netlink: 80 bytes leftover after parsing attributes in process `syz.3.858'. [ 175.175505][ T9487] netlink: 'syz.5.862': attribute type 33 has an invalid length. [ 175.183551][ T9489] syz.4.860: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 175.229052][ T9489] CPU: 1 UID: 0 PID: 9489 Comm: syz.4.860 Not tainted 6.16.0-syzkaller-06600-g1dbf1d590d10 #0 PREEMPT(full) [ 175.229079][ T9489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 175.229099][ T9489] Call Trace: [ 175.229107][ T9489] [ 175.229119][ T9489] dump_stack_lvl+0x189/0x250 [ 175.229147][ T9489] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.229167][ T9489] ? __pfx__printk+0x10/0x10 [ 175.229191][ T9489] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 175.229213][ T9489] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 175.229235][ T9489] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 175.229259][ T9489] warn_alloc+0x214/0x310 [ 175.229280][ T9489] ? stack_depot_save_flags+0x40/0x900 [ 175.229301][ T9489] ? __pfx_warn_alloc+0x10/0x10 [ 175.229323][ T9489] ? kasan_save_track+0x4f/0x80 [ 175.229349][ T9489] ? xskq_create+0x56/0x170 [ 175.229372][ T9489] ? xsk_init_queue+0xb0/0x110 [ 175.229395][ T9489] ? xsk_setsockopt+0x4dc/0x8d0 [ 175.229415][ T9489] ? do_sock_setsockopt+0x179/0x1b0 [ 175.229432][ T9489] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 175.229448][ T9489] ? do_syscall_64+0xfa/0x3b0 [ 175.229475][ T9489] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.229502][ T9489] __vmalloc_node_range_noprof+0x125/0x12f0 [ 175.229550][ T9489] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 175.229576][ T9489] ? __kasan_kmalloc+0x93/0xb0 [ 175.229606][ T9489] vmalloc_user_noprof+0xad/0xf0 [ 175.229624][ T9489] ? xskq_create+0xbf/0x170 [ 175.229651][ T9489] xskq_create+0xbf/0x170 [ 175.229678][ T9489] xsk_init_queue+0xb0/0x110 [ 175.229706][ T9489] xsk_setsockopt+0x4dc/0x8d0 [ 175.229733][ T9489] ? __pfx_xsk_setsockopt+0x10/0x10 [ 175.229757][ T9489] ? __pfx_aa_sk_perm+0x10/0x10 [ 175.229782][ T9489] ? aa_sock_opt_perm+0x74/0x110 [ 175.229807][ T9489] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 175.229829][ T9489] ? __pfx_xsk_setsockopt+0x10/0x10 [ 175.229854][ T9489] do_sock_setsockopt+0x179/0x1b0 [ 175.229876][ T9489] __x64_sys_setsockopt+0x13f/0x1b0 [ 175.229900][ T9489] do_syscall_64+0xfa/0x3b0 [ 175.229926][ T9489] ? lockdep_hardirqs_on+0x9c/0x150 [ 175.229952][ T9489] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.229970][ T9489] ? clear_bhb_loop+0x60/0xb0 [ 175.229993][ T9489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.230011][ T9489] RIP: 0033:0x7f617678eb69 [ 175.230041][ T9489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.230057][ T9489] RSP: 002b:00007f6177555038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 175.230095][ T9489] RAX: ffffffffffffffda RBX: 00007f61769b5fa0 RCX: 00007f617678eb69 [ 175.230110][ T9489] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 175.230121][ T9489] RBP: 00007f6176811df1 R08: 0000000000000004 R09: 0000000000000000 [ 175.230133][ T9489] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.230145][ T9489] R13: 0000000000000000 R14: 00007f61769b5fa0 R15: 00007ffcdc6fdf58 [ 175.230176][ T9489] [ 175.230190][ T9489] Mem-Info: [ 175.568988][ T9489] active_anon:6553 inactive_anon:0 isolated_anon:0 [ 175.568988][ T9489] active_file:1223 inactive_file:39862 isolated_file:0 [ 175.568988][ T9489] unevictable:768 dirty:101 writeback:0 [ 175.568988][ T9489] slab_reclaimable:11028 slab_unreclaimable:118452 [ 175.568988][ T9489] mapped:34319 shmem:1384 pagetables:1296 [ 175.568988][ T9489] sec_pagetables:0 bounce:0 [ 175.568988][ T9489] kernel_misc_reclaimable:0 [ 175.568988][ T9489] free:1299539 free_pcp:14974 free_cma:0 [ 175.733551][ T9506] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 175.775866][ T9489] Node 0 active_anon:26712kB inactive_anon:0kB active_file:4892kB inactive_file:159244kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:137576kB dirty:404kB writeback:0kB shmem:4200kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13608kB pagetables:5132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 175.817806][ T9489] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 175.853894][ T9489] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 175.995786][ T9489] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 176.042839][ T9513] netlink: 4 bytes leftover after parsing attributes in process `syz.2.868'. [ 176.052141][ T9489] Node 0 DMA32 free:1285460kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26144kB inactive_anon:0kB active_file:4892kB inactive_file:157416kB unevictable:1536kB writepending:404kB present:3129332kB managed:2560292kB mlocked:0kB bounce:0kB free_pcp:39896kB local_pcp:20952kB free_cma:0kB [ 176.100261][ T9518] netlink: 'syz.3.870': attribute type 9 has an invalid length. [ 176.121631][ T9489] lowmem_reserve[]: 0 0 1 1 1 [ 176.132768][ T9489] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1828kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 176.166618][ T9518] netlink: 212260 bytes leftover after parsing attributes in process `syz.3.870'. [ 176.209556][ T9522] netlink: 104 bytes leftover after parsing attributes in process `syz.0.871'. [ 176.239139][ T9489] lowmem_reserve[]: 0 0 0 0 0 [ 176.254165][ T9489] Node 1 Normal free:3897288kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:19584kB local_pcp:10176kB free_cma:0kB [ 176.365690][ T9489] lowmem_reserve[]: 0 0 0 0 0 [ 176.392248][ T9489] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 176.437447][ T9489] Node 0 DMA32: 1443*4kB (UME) 833*8kB (UM) 292*16kB (UM) 164*32kB (UME) 130*64kB (UME) 86*128kB (UME) 46*256kB (U) 32*512kB (UM) 9*1024kB (UM) 3*2048kB (ME) 293*4096kB (M) = 1285332kB [ 176.490696][ T9489] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 176.547538][ T9489] Node 1 Normal: 222*4kB (UE) 52*8kB (UME) 45*16kB (UME) 65*32kB (UME) 21*64kB (UME) 7*128kB (UME) 3*256kB (ME) 4*512kB (UME) 3*1024kB (UME) 1*2048kB (E) 948*4096kB (M) = 3897288kB [ 176.617965][ T9489] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 176.644579][ T9489] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 176.668635][ T9489] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 176.680262][ T9489] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 176.701493][ T9489] 42465 total pagecache pages [ 176.706331][ T9489] 0 pages in swap cache [ 176.712307][ T9489] Free swap = 124996kB [ 176.719423][ T9489] Total swap = 124996kB [ 176.725449][ T9489] 2097051 pages RAM [ 176.729384][ T9489] 0 pages HighMem/MovableOnly [ 176.738490][ T9489] 424872 pages reserved [ 176.743595][ T9489] 0 pages cma reserved [ 177.094460][ T9564] bridge_slave_0: left promiscuous mode [ 177.143412][ T9564] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.346091][ T9572] pim6reg: entered allmulticast mode [ 177.445543][ T9570] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.453256][ T9570] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.577546][ T9570] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.592526][ T5850] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 177.595680][ T9570] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.599660][ T5850] Bluetooth: hci0: command 0x0c1a tx timeout [ 177.706654][ T9579] pim6reg: left allmulticast mode [ 177.802330][ T6892] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.856015][ T6892] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.887051][ T6902] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.997131][ T9604] tipc: Invalid UDP bearer configuration [ 177.997198][ T9604] tipc: Enabling of bearer rejected, failed to enable media [ 178.049196][ T6901] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.073212][ T9606] netlink: 'syz.0.891': attribute type 30 has an invalid length. [ 178.114322][ T9606] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 178.168449][ T9606] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 178.461074][ T9624] ksmbd: Unknown IPC event: 3, ignore. [ 178.548082][ T9628] netlink: 'syz.0.898': attribute type 12 has an invalid length. [ 179.041918][ T9651] __nla_validate_parse: 4 callbacks suppressed [ 179.041935][ T9651] netlink: 12 bytes leftover after parsing attributes in process `syz.0.905'. [ 179.176804][ T9656] bridge1: port 1(veth0_to_bond) entered blocking state [ 179.209567][ T9659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.906'. [ 179.227475][ T9656] bridge1: port 1(veth0_to_bond) entered disabled state [ 179.252909][ T9656] veth0_to_bond: entered allmulticast mode [ 179.279174][ T9656] veth0_to_bond: entered promiscuous mode [ 179.460736][ T9671] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 179.509694][ T9678] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.909'. [ 179.573154][ T9678] netlink: 4 bytes leftover after parsing attributes in process `syz.5.909'. [ 179.911789][ T9692] tipc: Enabled bearer , priority 0 [ 180.276227][ T9692] syzkaller0: entered promiscuous mode [ 180.296949][ T9692] syzkaller0: entered allmulticast mode [ 180.591783][ T9727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.915'. [ 181.032464][ T5927] tipc: Node number set to 3702017206 [ 181.089984][ T9744] netlink: 12 bytes leftover after parsing attributes in process `syz.5.920'. [ 181.109756][ T9744] netlink: 12 bytes leftover after parsing attributes in process `syz.5.920'. [ 182.001550][ T9729] tipc: Resetting bearer [ 182.029420][ T9691] tipc: Resetting bearer [ 182.052826][ T9691] tipc: Disabling bearer [ 182.459314][ T9784] netlink: 56 bytes leftover after parsing attributes in process `syz.0.930'. [ 182.492739][ T9788] netlink: 12 bytes leftover after parsing attributes in process `syz.5.931'. [ 182.540102][ T9784] netlink: 12 bytes leftover after parsing attributes in process `syz.0.930'. [ 183.418975][ T9846] netlink: 'syz.2.947': attribute type 1 has an invalid length. [ 183.494537][ T9846] 8021q: adding VLAN 0 to HW filter on device bond2 [ 183.527476][ T9843] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 183.540199][ T9843] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 183.628387][ T9855] 8021q: adding VLAN 0 to HW filter on device bond2 [ 183.652258][ T9855] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 183.702140][ T9855] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 183.849495][ T9846] macvlan0: entered promiscuous mode [ 183.855107][ T9846] macvlan0: entered allmulticast mode [ 183.862004][ T9846] bond2: entered promiscuous mode [ 183.878013][ T9846] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 183.908302][ T9846] bond2: left promiscuous mode [ 185.196578][ T9948] wg2: left allmulticast mode [ 185.342438][ T9955] __nla_validate_parse: 5 callbacks suppressed [ 185.342457][ T9955] netlink: 14544 bytes leftover after parsing attributes in process `syz.4.972'. [ 185.494424][ T9968] team0: No ports can be present during mode change [ 185.845541][ T9985] netlink: 8 bytes leftover after parsing attributes in process `syz.4.980'. [ 185.989786][ T9994] netlink: 14 bytes leftover after parsing attributes in process `syz.0.984'. [ 186.047595][ T9998] netlink: 'syz.5.986': attribute type 1 has an invalid length. [ 186.126145][ T9994] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.158035][ T9994] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.210800][ T9994] bond0 (unregistering): (slave bond1): Releasing backup interface [ 186.245335][ T9994] bond0 (unregistering): Released all slaves [ 186.389113][ T9998] bond5: entered promiscuous mode [ 186.403906][ T9998] 8021q: adding VLAN 0 to HW filter on device bond5 [ 186.738697][T10030] netlink: 'syz.0.993': attribute type 11 has an invalid length. [ 186.760655][T10030] netlink: 'syz.0.993': attribute type 11 has an invalid length. [ 186.789760][T10030] netlink: 152 bytes leftover after parsing attributes in process `syz.0.993'. [ 186.945209][T10035] netlink: 12 bytes leftover after parsing attributes in process `syz.4.995'. [ 187.258994][T10049] netlink: 28 bytes leftover after parsing attributes in process `syz.5.998'. [ 187.285216][T10049] netlink: 28 bytes leftover after parsing attributes in process `syz.5.998'. [ 187.482992][T10058] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1000'. [ 187.750580][T10077] netlink: 'syz.2.1004': attribute type 5 has an invalid length. [ 188.397226][T10114] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1012'. [ 188.409800][T10114] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1012'. [ 188.940754][ T5905] IPVS: starting estimator thread 0... [ 188.950114][T10130] vlan3: entered allmulticast mode [ 188.970843][T10130] bridge0: entered allmulticast mode [ 188.996601][T10130] bridge0: port 1(vlan3) entered blocking state [ 189.014553][T10130] bridge0: port 1(vlan3) entered disabled state [ 189.051145][T10138] IPVS: using max 30 ests per chain, 72000 per kthread [ 189.157153][T10151] netlink: 'syz.0.1022': attribute type 4 has an invalid length. [ 189.428541][T10161] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 189.624538][T10172] netlink: 'syz.5.1028': attribute type 83 has an invalid length. [ 189.676229][T10172] ieee802154 phy0 wpan0: encryption failed: -22 [ 190.256985][T10204] bridge5: port 1(veth0_to_bond) entered blocking state [ 190.309728][T10204] bridge5: port 1(veth0_to_bond) entered disabled state [ 190.319976][T10204] veth0_to_bond: entered allmulticast mode [ 190.330766][T10204] veth0_to_bond: entered promiscuous mode [ 190.347298][T10205] vlan0: entered allmulticast mode [ 190.362258][T10214] __nla_validate_parse: 10 callbacks suppressed [ 190.362272][T10214] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1040'. [ 190.377970][T10205] veth1: entered allmulticast mode [ 190.391605][T10205] bridge5: port 2(vlan0) entered blocking state [ 190.398008][T10205] bridge5: port 2(vlan0) entered disabled state [ 190.412340][T10217] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1039'. [ 190.435354][T10205] vlan0: entered promiscuous mode [ 190.441884][T10218] ieee802154 phy0 wpan0: encryption failed: -22 [ 190.461506][T10205] veth1: entered promiscuous mode [ 190.652306][T10223] netlink: 'syz.4.1041': attribute type 28 has an invalid length. [ 190.660177][T10223] netlink: 'syz.4.1041': attribute type 3 has an invalid length. [ 190.684942][T10223] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1041'. [ 190.902021][T10230] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1044'. [ 190.910109][T10232] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 190.938731][T10230] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1044'. [ 191.012840][T10237] openvswitch: netlink: Key type 1799 is out of range max 32 [ 191.079186][T10238] netlink: 'syz.5.1046': attribute type 1 has an invalid length. [ 191.242137][T10238] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 191.298976][T10246] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1048'. [ 191.378110][T10251] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1048'. [ 191.424316][T10251] openvswitch: netlink: Flow key attr not present in new flow. [ 191.522473][T10251] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1048'. [ 191.605362][T10259] netlink: 632 bytes leftover after parsing attributes in process `syz.5.1050'. [ 191.635219][T10257] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1051'. [ 192.226087][T10289] netlink: 'syz.3.1059': attribute type 1 has an invalid length. [ 192.796230][T10315] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.238358][T10315] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.309934][T10339] netlink: 'syz.2.1072': attribute type 2 has an invalid length. [ 193.464631][T10315] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.662057][T10359] netlink: 'syz.5.1075': attribute type 1 has an invalid length. [ 193.738154][T10363] netlink: 'syz.5.1075': attribute type 6 has an invalid length. [ 193.796695][T10315] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.121737][ T36] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.200411][ T6898] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.235915][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 194.246120][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.256542][ T1301] clip:clip_start_xmit: skb_dst(skb) == NULL [ 194.305399][ T6898] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.377299][ T6899] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.412025][T10392] netlink: 'syz.2.1087': attribute type 10 has an invalid length. [ 194.506576][T10392] team0: Device veth1_macvtap failed to register rx_handler [ 194.511071][T10400] sctp: [Deprecated]: syz.0.1089 (pid 10400) Use of struct sctp_assoc_value in delayed_ack socket option. [ 194.511071][T10400] Use struct sctp_sack_info instead [ 194.535498][ T6898] syzkaller0: tun_net_xmit 76 [ 194.550781][ T6898] syzkaller0: tun_net_xmit 48 [ 194.561644][ T9] syzkaller0: tun_net_xmit 76 [ 194.638905][T10404] netlink: 'syz.5.1088': attribute type 15 has an invalid length. [ 196.027074][T10426] netlink: 'syz.0.1095': attribute type 1 has an invalid length. [ 196.083756][T10434] __nla_validate_parse: 8 callbacks suppressed [ 196.083774][T10434] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1098'. [ 196.171192][ T25] block nbd0: Possible stuck request ffff88802588e000: control (read@0,1024B). Runtime 60 seconds [ 196.185933][ T25] block nbd0: Possible stuck request ffff88802588e1c0: control (read@1024,1024B). Runtime 60 seconds [ 196.201689][ T25] block nbd0: Possible stuck request ffff88802588e380: control (read@2048,1024B). Runtime 60 seconds [ 196.228425][ T25] block nbd0: Possible stuck request ffff88802588e540: control (read@3072,1024B). Runtime 60 seconds [ 196.690625][T10458] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1104'. [ 197.093982][T10476] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 197.257388][T10483] netlink: 'syz.4.1111': attribute type 10 has an invalid length. [ 197.277083][T10483] bridge0: port 1(team0) entered blocking state [ 197.309644][T10483] bridge0: port 1(team0) entered disabled state [ 197.334755][T10483] team0: entered allmulticast mode [ 197.352639][T10483] team0: entered promiscuous mode [ 197.360594][T10486] netlink: 'syz.0.1112': attribute type 1 has an invalid length. [ 197.371378][T10485] netlink: 'syz.4.1111': attribute type 1 has an invalid length. [ 197.418467][T10486] netlink: 'syz.0.1112': attribute type 1 has an invalid length. [ 197.454831][T10486] netlink: 'syz.0.1112': attribute type 1 has an invalid length. [ 197.481748][T10486] netlink: 'syz.0.1112': attribute type 1 has an invalid length. [ 197.559649][T10486] netlink: 'syz.0.1112': attribute type 1 has an invalid length. [ 197.682227][T10500] tipc: Enabling of bearer rejected, failed to enable media [ 197.890700][T10516] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1119'. [ 197.912921][T10515] !: renamed from dummy0 (while UP) [ 198.109652][T10532] nftables ruleset with unbound chain [ 198.163657][T10535] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1123'. [ 198.343215][T10529] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1122'. [ 198.530216][T10546] vlan2: entered promiscuous mode [ 198.579335][T10546] bridge0: entered promiscuous mode [ 198.611542][T10546] vlan2: entered allmulticast mode [ 198.637975][T10546] bridge0: entered allmulticast mode [ 198.691995][T10557] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1124'. [ 198.727614][T10555] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1124'. [ 198.785106][T10555] tc_dump_action: action bad kind [ 199.080359][T10574] tipc: Started in network mode [ 199.100954][T10574] tipc: Node identity 36982686448e, cluster identity 4711 [ 199.108255][T10574] tipc: Enabled bearer , priority 0 [ 199.143005][T10584] syzkaller0: entered promiscuous mode [ 199.152165][T10584] syzkaller0: entered allmulticast mode [ 199.234514][T10584] tipc: Resetting bearer [ 199.281316][T10573] tipc: Resetting bearer [ 199.402970][T10573] tipc: Disabling bearer [ 199.478094][T10600] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1136'. [ 199.480018][T10603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1137'. [ 199.574083][T10605] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 199.708493][T10611] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 199.827295][T10614] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1142'. [ 199.978797][T10626] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 200.140326][T10640] netlink: del zone limit has 4 unknown bytes [ 200.908436][T10683] sctp: [Deprecated]: syz.0.1160 (pid 10683) Use of int in maxseg socket option. [ 200.908436][T10683] Use struct sctp_assoc_value instead [ 200.939892][T10683] sctp: [Deprecated]: syz.0.1160 (pid 10683) Use of int in max_burst socket option. [ 200.939892][T10683] Use struct sctp_assoc_value instead [ 200.956970][T10678] veth5: entered allmulticast mode [ 200.988803][T10678] veth7: entered allmulticast mode [ 201.039637][T10678] veth9: entered allmulticast mode [ 201.064122][T10678] veth11: entered allmulticast mode [ 201.159627][T10693] validate_nla: 125 callbacks suppressed [ 201.159645][T10693] netlink: 'syz.4.1162': attribute type 6 has an invalid length. [ 201.160844][T10678] veth13: entered allmulticast mode [ 201.199656][T10691] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1163'. [ 201.239431][T10678] veth15: entered allmulticast mode [ 201.246022][T10693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1162'. [ 201.289270][T10678] veth17: entered allmulticast mode [ 201.327271][T10678] veth19: entered allmulticast mode [ 201.449804][T10702] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1167'. [ 201.459692][T10702] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1167'. [ 201.480635][T10678] veth21: entered allmulticast mode [ 201.515862][T10678] veth23: entered allmulticast mode [ 201.602199][T10678] veth25: entered allmulticast mode [ 201.731997][T10678] veth27: entered allmulticast mode [ 201.751708][ T5850] Bluetooth: hci0: command tx timeout [ 201.793744][T10716] netem: change failed [ 202.045036][T10739] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1177'. [ 202.073854][T10746] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1175'. [ 202.132430][T10749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1175'. [ 202.586994][T10761] netlink: 14544 bytes leftover after parsing attributes in process `syz.4.1179'. [ 202.671383][T10776] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1182'. [ 202.724729][T10766] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1182'. [ 203.159798][T10805] netlink: 'syz.5.1193': attribute type 1 has an invalid length. [ 203.252767][T10805] 8021q: adding VLAN 0 to HW filter on device bond6 [ 203.379887][T10805] bond6: (slave gretap2): making interface the new active one [ 203.390855][T10805] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 203.668288][T10835] netlink: 'syz.3.1201': attribute type 1 has an invalid length. [ 203.694436][T10837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.738794][T10839] netlink: 'syz.2.1200': attribute type 15 has an invalid length. [ 203.788539][T10839] nbd: illegal input index -8454144 [ 203.865298][T10843] sctp: [Deprecated]: syz.4.1203 (pid 10843) Use of int in max_burst socket option. [ 203.865298][T10843] Use struct sctp_assoc_value instead [ 204.217146][T10867] netlink: 'syz.2.1208': attribute type 29 has an invalid length. [ 204.275000][T10867] netlink: 'syz.2.1208': attribute type 29 has an invalid length. [ 204.625872][T10888] netlink: 'syz.2.1214': attribute type 21 has an invalid length. [ 204.625872][T10889] netlink: 'syz.2.1214': attribute type 21 has an invalid length. [ 204.625962][T10889] netlink: 'syz.2.1214': attribute type 5 has an invalid length. [ 204.709924][T10888] netlink: 'syz.2.1214': attribute type 5 has an invalid length. [ 205.667472][T10941] sit0: entered promiscuous mode [ 205.711494][T10941] tipc: Enabling of bearer rejected, failed to enable media [ 206.135047][T10954] bond0: entered promiscuous mode [ 206.144791][T10954] bond_slave_0: entered promiscuous mode [ 206.150759][T10954] bond_slave_1: entered promiscuous mode [ 206.158354][T10954] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 206.168391][T10954] batadv0: entered promiscuous mode [ 206.178385][T10954] batadv0: left promiscuous mode [ 206.184751][T10954] bond0: left promiscuous mode [ 206.189662][T10954] bond_slave_0: left promiscuous mode [ 206.195567][T10954] bond_slave_1: left promiscuous mode [ 206.203139][T10954] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 206.683817][T10994] __nla_validate_parse: 17 callbacks suppressed [ 206.683836][T10994] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1242'. [ 206.709107][T10994] chnl_net:caif_netlink_parms(): no params data found [ 206.899139][T11002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1245'. [ 206.935675][T11002] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1245'. [ 207.185837][T11017] netlink: zone id is out of range [ 207.231502][T11017] netlink: zone id is out of range [ 207.264095][T11017] netlink: zone id is out of range [ 207.278124][T11017] netlink: zone id is out of range [ 207.303721][T11018] bond0: entered promiscuous mode [ 207.308942][T11018] bond0: entered allmulticast mode [ 207.314615][T11018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.318017][T11017] netlink: zone id is out of range [ 207.395708][T11017] netlink: zone id is out of range [ 207.444176][T11017] netlink: zone id is out of range [ 207.464740][T11017] netlink: zone id is out of range [ 207.484318][T11030] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1252'. [ 207.501172][T11017] netlink: zone id is out of range [ 207.506526][T11017] netlink: zone id is out of range [ 207.892370][T11046] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1257'. [ 208.016543][T11056] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1260'. [ 208.038230][T11049] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1259'. [ 208.238223][T11062] validate_nla: 4 callbacks suppressed [ 208.238242][T11062] netlink: 'syz.4.1261': attribute type 9 has an invalid length. [ 208.415525][T11076] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 208.492383][T11076] CPU: 1 UID: 0 PID: 11076 Comm: syz.3.1264 Not tainted 6.16.0-syzkaller-06600-g1dbf1d590d10 #0 PREEMPT(full) [ 208.492416][T11076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 208.492429][T11076] Call Trace: [ 208.492439][T11076] [ 208.492449][T11076] dump_stack_lvl+0x189/0x250 [ 208.492481][T11076] ? __pfx_dump_stack_lvl+0x10/0x10 [ 208.492504][T11076] ? __pfx__printk+0x10/0x10 [ 208.492532][T11076] ? kernfs_path_from_node+0x2c/0x260 [ 208.492558][T11076] ? kernfs_path_from_node+0x2c/0x260 [ 208.492580][T11076] ? kernfs_path_from_node+0x2c/0x260 [ 208.492606][T11076] ? kernfs_path_from_node+0x22c/0x260 [ 208.492628][T11076] ? kernfs_path_from_node+0x2c/0x260 [ 208.492656][T11076] sysfs_warn_dup+0x8e/0xa0 [ 208.492680][T11076] sysfs_do_create_link_sd+0xc0/0x110 [ 208.492708][T11076] device_add_class_symlinks+0x1cf/0x240 [ 208.492741][T11076] device_add+0x475/0xb50 [ 208.492773][T11076] wiphy_register+0x1ba6/0x28d0 [ 208.492824][T11076] ? __pfx_wiphy_register+0x10/0x10 [ 208.492876][T11076] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 208.492909][T11076] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 208.492938][T11076] ieee80211_register_hw+0x3425/0x4080 [ 208.492990][T11076] ? ieee80211_register_hw+0x1411/0x4080 [ 208.493027][T11076] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 208.493078][T11076] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 208.493146][T11076] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 208.493177][T11076] ? trace_kmalloc+0x1f/0xd0 [ 208.493205][T11076] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 208.493238][T11076] ? kstrndup+0xbf/0x160 [ 208.493274][T11076] hwsim_new_radio_nl+0xea4/0x1b10 [ 208.493308][T11076] ? __pfx___nla_validate_parse+0x10/0x10 [ 208.493351][T11076] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 208.493386][T11076] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 208.493423][T11076] ? __nla_parse+0x40/0x60 [ 208.493452][T11076] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 208.493488][T11076] genl_family_rcv_msg_doit+0x215/0x300 [ 208.493524][T11076] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 208.493566][T11076] ? bpf_lsm_capable+0x9/0x20 [ 208.493597][T11076] ? security_capable+0x7e/0x2e0 [ 208.493633][T11076] genl_rcv_msg+0x60e/0x790 [ 208.493667][T11076] ? __pfx_genl_rcv_msg+0x10/0x10 [ 208.493692][T11076] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 208.493759][T11076] netlink_rcv_skb+0x205/0x470 [ 208.493789][T11076] ? __lock_acquire+0xab9/0xd20 [ 208.493821][T11076] ? __pfx_genl_rcv_msg+0x10/0x10 [ 208.493849][T11076] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 208.493905][T11076] ? down_read+0x1ad/0x2e0 [ 208.493929][T11076] genl_rcv+0x28/0x40 [ 208.493952][T11076] netlink_unicast+0x82c/0x9e0 [ 208.494000][T11076] ? __pfx_netlink_unicast+0x10/0x10 [ 208.494034][T11076] ? netlink_sendmsg+0x642/0xb30 [ 208.494063][T11076] ? skb_put+0x11b/0x210 [ 208.494089][T11076] netlink_sendmsg+0x805/0xb30 [ 208.494134][T11076] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.494173][T11076] ? aa_sock_msg_perm+0x94/0x160 [ 208.494205][T11076] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 208.494229][T11076] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.494264][T11076] __sock_sendmsg+0x21c/0x270 [ 208.494297][T11076] ____sys_sendmsg+0x505/0x830 [ 208.494328][T11076] ? __pfx_____sys_sendmsg+0x10/0x10 [ 208.494363][T11076] ? import_iovec+0x74/0xa0 [ 208.494398][T11076] ___sys_sendmsg+0x21f/0x2a0 [ 208.494425][T11076] ? __pfx____sys_sendmsg+0x10/0x10 [ 208.494493][T11076] ? __fget_files+0x2a/0x420 [ 208.494513][T11076] ? __fget_files+0x3a0/0x420 [ 208.494548][T11076] __x64_sys_sendmsg+0x19b/0x260 [ 208.494575][T11076] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 208.494611][T11076] ? rcu_is_watching+0x15/0xb0 [ 208.494651][T11076] ? do_syscall_64+0xbe/0x3b0 [ 208.494689][T11076] do_syscall_64+0xfa/0x3b0 [ 208.494719][T11076] ? lockdep_hardirqs_on+0x9c/0x150 [ 208.494750][T11076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.494771][T11076] ? clear_bhb_loop+0x60/0xb0 [ 208.494799][T11076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.494820][T11076] RIP: 0033:0x7f518ef8eb69 [ 208.494840][T11076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.494858][T11076] RSP: 002b:00007f518fd42038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.494883][T11076] RAX: ffffffffffffffda RBX: 00007f518f1b6080 RCX: 00007f518ef8eb69 [ 208.494898][T11076] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000e [ 208.494911][T11076] RBP: 00007f518f011df1 R08: 0000000000000000 R09: 0000000000000000 [ 208.494924][T11076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.494936][T11076] R13: 0000000000000000 R14: 00007f518f1b6080 R15: 00007ffc0c3c4d18 [ 208.494978][T11076] [ 209.106831][T11089] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1266'. [ 209.285069][T11086] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1266'. [ 209.814449][T11131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1276'. [ 209.864499][T11131] netlink: 'syz.3.1276': attribute type 20 has an invalid length. [ 209.959421][T11131] netlink: 'syz.3.1276': attribute type 20 has an invalid length. [ 209.960996][ T6898] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.059759][ T6898] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.121174][ T6898] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.420787][T11150] pimreg: entered allmulticast mode [ 210.467625][T11159] dvmrp1: left allmulticast mode [ 210.511317][T11159] pimreg: left allmulticast mode [ 211.671041][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 211.677160][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 211.678442][ T5852] Bluetooth: hci3: command 0x0406 tx timeout [ 214.702237][ T5210] udevd[5210]: worker [5891] /devices/virtual/block/nbd0 is taking a long time [ 226.241009][ T25] block nbd0: Possible stuck request ffff88802588e000: control (read@0,1024B). Runtime 90 seconds [ 226.252176][ T25] block nbd0: Possible stuck request ffff88802588e1c0: control (read@1024,1024B). Runtime 90 seconds [ 226.263143][ T25] block nbd0: Possible stuck request ffff88802588e380: control (read@2048,1024B). Runtime 90 seconds [ 226.274827][ T25] block nbd0: Possible stuck request ffff88802588e540: control (read@3072,1024B). Runtime 90 seconds [ 235.831255][T11206] __nla_validate_parse: 4 callbacks suppressed [ 235.831274][T11206] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1287'. [ 235.926549][T11206] vlan2: entered allmulticast mode [ 236.725894][T11266] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1300'. [ 236.907451][T11269] tipc: Enabled bearer , priority 0 [ 237.076454][T11269] syzkaller0: entered promiscuous mode [ 237.082709][T11269] syzkaller0: entered allmulticast mode [ 237.089300][T11269] tipc: Resetting bearer [ 237.120548][T11278] pimreg: entered allmulticast mode [ 237.159794][T11280] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1305'. [ 237.169422][T11280] net_ratelimit: 16 callbacks suppressed [ 237.169439][T11280] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 237.342834][ T6902] tipc: Resetting bearer [ 237.479909][T11303] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 237.552172][T11268] tipc: Resetting bearer [ 237.746519][T11313] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1314'. [ 238.198270][T11331] sctp: [Deprecated]: syz.5.1315 (pid 11331) Use of struct sctp_assoc_value in delayed_ack socket option. [ 238.198270][T11331] Use struct sctp_sack_info instead [ 238.893931][T11268] tipc: Disabling bearer [ 238.906078][T11311] lo: entered allmulticast mode [ 238.913380][T11311] tunl0: entered allmulticast mode [ 238.919922][T11311] gre0: entered allmulticast mode [ 238.927481][T11311] gretap0: entered allmulticast mode [ 238.948232][T11311] erspan0: entered allmulticast mode [ 238.972671][T11311] ip_vti0: entered allmulticast mode [ 238.983856][T11311] ip6_vti0: entered allmulticast mode [ 238.990527][T11311] sit0: entered allmulticast mode [ 239.012369][T11311] ip6tnl0: entered allmulticast mode [ 239.031411][T11311] ip6gre0: entered allmulticast mode [ 239.055033][T11311] ip6gretap0: entered allmulticast mode [ 239.081326][T11311] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.088730][T11311] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.128332][T11311] bridge0: entered allmulticast mode [ 239.137174][T11311] vcan0: entered allmulticast mode [ 239.157972][T11311] team0: entered allmulticast mode [ 239.164895][T11311] team_slave_0: entered allmulticast mode [ 239.170744][T11311] team_slave_1: entered allmulticast mode [ 239.185441][T11311] dummy0: entered allmulticast mode [ 239.199133][T11311] nlmon0: entered allmulticast mode [ 239.207456][T11311] caif0: entered allmulticast mode [ 239.213681][T11311] batadv0: entered allmulticast mode [ 239.223205][T11311] veth0: entered allmulticast mode [ 239.239623][T11311] wg0: entered allmulticast mode [ 239.258257][T11311] wg1: entered allmulticast mode [ 239.268981][T11311] wg2: entered allmulticast mode [ 239.285185][T11311] veth0_to_bridge: entered allmulticast mode [ 239.298259][T11311] veth1_to_bridge: entered allmulticast mode [ 239.309373][T11311] bond_slave_0: entered allmulticast mode [ 239.315924][T11311] veth1_to_bond: entered allmulticast mode [ 239.325292][T11311] bond_slave_1: entered allmulticast mode [ 239.331992][T11311] veth0_to_team: entered allmulticast mode [ 239.342516][T11311] veth1_to_team: entered allmulticast mode [ 239.354496][T11311] veth0_to_batadv: entered allmulticast mode [ 239.363583][T11311] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.371787][T11311] batadv_slave_0: entered allmulticast mode [ 239.380545][T11311] veth1_to_batadv: entered allmulticast mode [ 239.389161][T11311] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.397149][T11311] batadv_slave_1: entered allmulticast mode [ 239.405952][T11311] xfrm0: entered allmulticast mode [ 239.414488][T11311] veth0_to_hsr: entered allmulticast mode [ 239.423259][T11311] hsr_slave_0: entered allmulticast mode [ 239.430804][T11311] veth1_to_hsr: entered allmulticast mode [ 239.439710][T11311] hsr_slave_1: entered allmulticast mode [ 239.449716][T11311] hsr0: entered allmulticast mode [ 239.457662][T11311] veth1_virt_wifi: entered allmulticast mode [ 239.466643][T11311] veth0_virt_wifi: entered allmulticast mode [ 239.475998][T11311] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 239.486468][T11311] veth1_macvtap: entered allmulticast mode [ 239.494097][T11311] veth0_macvtap: entered allmulticast mode [ 239.502734][T11311] macvtap0: entered allmulticast mode [ 239.509126][T11311] macsec0: entered allmulticast mode [ 239.518157][T11311] geneve0: entered allmulticast mode [ 239.526734][T11311] geneve1: entered allmulticast mode [ 239.538297][T11311] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 239.547744][T11311] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 239.556203][T11311] @: entered allmulticast mode [ 239.563379][T11311] syztnl0: entered allmulticast mode [ 239.569779][T11311] ip6tnl1: entered allmulticast mode [ 239.575658][T11311] syztnl2: entered allmulticast mode [ 239.582711][T11311] veth2: entered allmulticast mode [ 239.588029][T11311] veth3: entered allmulticast mode [ 239.597319][T11311] bond0: entered allmulticast mode [ 239.603013][T11311] gretap1: entered allmulticast mode [ 239.613306][T11311] gretap1: left promiscuous mode [ 239.619629][T11311] bridge1: entered allmulticast mode [ 239.650735][T11311] ipvlan2: entered allmulticast mode [ 239.658534][T11311] bond1: entered allmulticast mode [ 239.664226][T11311] bridge2: entered allmulticast mode [ 239.672979][T11311] netdevsim netdevsim2 eth0: entered allmulticast mode [ 239.680045][T11311] netdevsim netdevsim2 eth1: entered allmulticast mode [ 239.687957][T11311] netdevsim netdevsim2 eth2: entered allmulticast mode [ 239.695678][T11311] netdevsim netdevsim2 eth3: entered allmulticast mode [ 239.704309][T11311] ieee802154 phy1 wpan4: entered allmulticast mode [ 239.711694][T11311] ieee802154 phy1 wpan1: entered allmulticast mode [ 239.718987][T11311] gre1: entered allmulticast mode [ 239.725904][T11311] ip6tnl2: entered allmulticast mode [ 239.732993][T11311] gre2: entered allmulticast mode [ 239.739354][T11311] bridge3: entered allmulticast mode [ 239.747943][T11311] wireguard0: entered allmulticast mode [ 239.758043][T11311] bridge4: entered allmulticast mode [ 239.765670][T11311] bond2: entered allmulticast mode [ 239.772737][T11311] bridge5: entered allmulticast mode [ 239.780522][T11311] gre3: entered allmulticast mode [ 239.901496][ T6904] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.909904][ T6904] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.931779][ T6897] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.940168][ T6897] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.973635][T11348] veth0: entered promiscuous mode [ 239.994167][ T6897] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.015434][ T6897] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.073754][ T6897] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.121833][ T6897] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.131139][T11348] veth0: left promiscuous mode [ 240.205762][T11358] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1326'. [ 240.219853][T11359] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 240.344292][T11363] sch_fq: defrate 0 ignored. [ 241.128371][T11413] syzkaller1: entered promiscuous mode [ 241.141440][T11413] syzkaller1: entered allmulticast mode [ 241.763571][T11451] sit0: entered promiscuous mode [ 241.777877][T11451] sit0: left allmulticast mode [ 241.800825][T11455] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1352'. [ 241.811438][T11451] netlink: 'syz.3.1350': attribute type 1 has an invalid length. [ 241.820370][T11451] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1350'. [ 241.835640][T11456] netlink: 'syz.0.1351': attribute type 2 has an invalid length. [ 241.843638][T11456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1351'. [ 241.972302][T11461] IPVS: Error connecting to the multicast addr [ 241.979374][T11459] IPVS: Error connecting to the multicast addr [ 242.469883][T11488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1361'. [ 244.142860][T11569] : entered promiscuous mode [ 244.233667][T11581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1382'. [ 244.262448][T11579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1382'. [ 244.268088][T11584] netlink: 'syz.4.1384': attribute type 1 has an invalid length. [ 244.299992][T11584] netlink: 'syz.4.1384': attribute type 2 has an invalid length. [ 244.349353][T11584] nbd: must specify a device to reconfigure [ 244.372589][T11587] netlink: 'syz.0.1385': attribute type 10 has an invalid length. [ 244.407827][T11587] batman_adv: batadv0: Removing interface: wlan1 [ 244.598861][T11598] netlink: 'syz.0.1388': attribute type 1 has an invalid length. [ 244.624162][T11598] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1388'. [ 244.640693][T11603] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1389'. [ 244.657904][T11603] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1389'. [ 244.977937][T11621] netlink: 'syz.5.1394': attribute type 7 has an invalid length. [ 245.075185][T11625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1392'. [ 246.284882][T11679] syzkaller0: refused to change device tx_queue_len [ 246.976267][T11707] __nla_validate_parse: 1 callbacks suppressed [ 246.976287][T11707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1418'. [ 247.009896][T11707] openvswitch: netlink: Unknown nsh attribute 0 [ 247.044032][T11707] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.266738][T11722] ieee802154 phy0 wpan0: encryption failed: -126 [ 247.291565][T11722] macvlan0: entered allmulticast mode [ 247.318150][T11722] veth1_vlan: entered allmulticast mode [ 247.355681][T11728] veth1_vlan: left allmulticast mode [ 247.433419][T11733] netlink: 'syz.5.1426': attribute type 1 has an invalid length. [ 247.456530][T11728] macvlan0 (unregistering): left allmulticast mode [ 247.511317][ T5840] Bluetooth: hci4: command 0x0406 tx timeout [ 247.622627][T11743] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1428'. [ 247.658633][T11747] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1428'. [ 247.673863][T11746] Bluetooth: MGMT ver 1.23 [ 247.684758][T11748] delete_channel: no stack [ 247.830600][T11752] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1431'. [ 247.853447][T11752] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1431'. [ 247.957723][T11760] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1435'. [ 248.020562][T11763] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1433'. [ 248.054095][T11762] nbd2: detected capacity change from 0 to 127 [ 248.078479][ T5850] block nbd2: Receive control failed (result -104) [ 248.203825][T11772] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1438'. [ 248.279880][T11777] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1438'. [ 248.495599][T11791] netlink: 'syz.2.1443': attribute type 14 has an invalid length. [ 248.704862][T11797] netlink: 'syz.2.1446': attribute type 2 has an invalid length. [ 248.726843][T11803] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1447'. [ 248.795857][T11804] 8021q: VLANs not supported on vcan0 [ 248.878453][T11807] netlink: 'syz.2.1448': attribute type 1 has an invalid length. [ 248.890345][T11813] nftables ruleset with unbound set [ 249.187556][T11824] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 249.541773][T11854] netlink: 'syz.0.1460': attribute type 32 has an invalid length. [ 249.586898][T11849] bridge4: entered promiscuous mode [ 249.640973][T11849] bridge4: entered allmulticast mode [ 249.813510][T11863] 0ªî{X¹¦: renamed from gretap0 [ 249.865360][T11863] 0ªî{X¹¦: entered allmulticast mode [ 249.875115][T11863] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 250.024110][T11873] sctp: [Deprecated]: syz.0.1469 (pid 11873) Use of int in maxseg socket option. [ 250.024110][T11873] Use struct sctp_assoc_value instead [ 250.227104][T11887] netlink: 'syz.3.1474': attribute type 7 has an invalid length. [ 251.034489][T11923] NCSI netlink: No device for ifindex 0 [ 251.305888][T11944] vlan2: entered promiscuous mode [ 251.380259][T11947] netlink: 'syz.2.1491': attribute type 2 has an invalid length. [ 252.095960][T11988] netlink: 'syz.4.1502': attribute type 1 has an invalid length. [ 252.158867][T11988] 8021q: adding VLAN 0 to HW filter on device bond2 [ 252.273110][T11992] bond2: (slave veth9): Enslaving as an active interface with a down link [ 252.347215][T11988] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 252.358760][T11997] tipc: Enabling of bearer rejected, failed to enable media [ 252.372412][T12003] netlink: 'syz.3.1504': attribute type 1 has an invalid length. [ 252.380488][T12003] __nla_validate_parse: 17 callbacks suppressed [ 252.380504][T12003] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1504'. [ 252.385615][T12002] vlan4: entered allmulticast mode [ 252.402208][T12002] veth1: entered allmulticast mode [ 252.408042][T12002] veth1: entered promiscuous mode [ 252.414529][T12002] veth1: left promiscuous mode [ 252.421778][T12002] bond2: (slave vlan4): making interface the new active one [ 252.430237][T12002] veth1: entered promiscuous mode [ 252.436653][T12002] vlan4: entered promiscuous mode [ 252.442992][T12002] bond2: (slave vlan4): Enslaving as an active interface with an up link [ 252.699031][T12016] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1509'. [ 252.707147][T12019] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.1511'. [ 252.931310][T12027] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1515'. [ 252.990153][T12025] netlink: 'syz.5.1514': attribute type 3 has an invalid length. [ 253.004032][T12025] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1514'. [ 253.226596][T12040] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input6 [ 253.284869][T12044] veth0: mtu greater than device maximum [ 253.441660][T12053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1525'. [ 253.522117][T12062] netlink: 'syz.4.1528': attribute type 10 has an invalid length. [ 253.655096][T12067] IPVS: set_ctl: invalid protocol: 2 172.20.20.187:20004 [ 253.694414][T12070] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1531'. [ 254.253143][T12111] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 254.265100][T12111] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 254.273629][T12111] CPU: 0 UID: 0 PID: 12111 Comm: syz.4.1545 Not tainted 6.16.0-syzkaller-06600-g1dbf1d590d10 #0 PREEMPT(full) [ 254.285369][T12111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 254.295457][T12111] RIP: 0010:__xfrm_state_insert+0x1011/0x1450 [ 254.301566][T12111] Code: 18 00 74 08 4c 89 ef e8 bd 5d 0b f8 4d 89 65 00 41 80 3c 1e 00 74 08 48 89 ef e8 ba 5c 0b f8 4c 8b 75 00 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 91 5d 0b f8 4d 89 2e 41 80 3c 1f 00 [ 254.321201][T12111] RSP: 0018:ffffc9001fb274a0 EFLAGS: 00010246 [ 254.327302][T12111] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000080000 [ 254.335281][T12111] RDX: ffffc9000e86a000 RSI: 000000000000042b RDI: 000000000000042c [ 254.343262][T12111] RBP: ffff8880571ae670 R08: dffffc0000000000 R09: 0000000000000002 [ 254.351227][T12111] R10: 000000000000000a R11: 0000000000000002 R12: ffff8880571ae668 [ 254.359190][T12111] R13: ffff8880571ae668 R14: 0000000000000000 R15: 1ffff1100ae35cce [ 254.367248][T12111] FS: 00007f61775556c0(0000) GS:ffff888125c80000(0000) knlGS:0000000000000000 [ 254.376176][T12111] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 254.382761][T12111] CR2: 00002000000001c0 CR3: 000000007defe000 CR4: 00000000003526f0 [ 254.390750][T12111] Call Trace: [ 254.394025][T12111] [ 254.396954][T12111] ? xfrm_state_insert+0x44/0x60 [ 254.401897][T12111] xfrm_state_insert+0x54/0x60 [ 254.406661][T12111] ipcomp6_init_state+0x655/0x900 [ 254.411690][T12111] __xfrm_init_state+0xa73/0x13f0 [ 254.416712][T12111] ? __xfrm_init_state+0x7ef/0x13f0 [ 254.421919][T12111] xfrm_init_state+0x18/0xa0 [ 254.426512][T12111] pfkey_add+0x1d38/0x2e00 [ 254.430955][T12111] ? __pfx_pfkey_add+0x10/0x10 [ 254.435724][T12111] ? kmem_cache_free+0x18f/0x400 [ 254.440683][T12111] pfkey_sendmsg+0xbfe/0x1090 [ 254.445367][T12111] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 254.450495][T12111] ? aa_sock_msg_perm+0x94/0x160 [ 254.455446][T12111] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 254.460763][T12111] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 254.465882][T12111] __sock_sendmsg+0x21c/0x270 [ 254.470576][T12111] ____sys_sendmsg+0x505/0x830 [ 254.475345][T12111] ? __pfx_____sys_sendmsg+0x10/0x10 [ 254.480637][T12111] ? import_iovec+0x74/0xa0 [ 254.485149][T12111] ___sys_sendmsg+0x21f/0x2a0 [ 254.489830][T12111] ? __pfx____sys_sendmsg+0x10/0x10 [ 254.495044][T12111] ? __fget_files+0x2a/0x420 [ 254.499633][T12111] ? __fget_files+0x3a0/0x420 [ 254.504305][T12111] __x64_sys_sendmsg+0x19b/0x260 [ 254.509248][T12111] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 254.514735][T12111] ? rcu_is_watching+0x15/0xb0 [ 254.519534][T12111] ? do_syscall_64+0xbe/0x3b0 [ 254.524251][T12111] do_syscall_64+0xfa/0x3b0 [ 254.528763][T12111] ? lockdep_hardirqs_on+0x9c/0x150 [ 254.533965][T12111] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.540027][T12111] ? clear_bhb_loop+0x60/0xb0 [ 254.544744][T12111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.550657][T12111] RIP: 0033:0x7f617678eb69 [ 254.555086][T12111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.574716][T12111] RSP: 002b:00007f6177555038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 254.583157][T12111] RAX: ffffffffffffffda RBX: 00007f61769b5fa0 RCX: 00007f617678eb69 [ 254.591125][T12111] RDX: 0000000024000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 254.599092][T12111] RBP: 00007f6176811df1 R08: 0000000000000000 R09: 0000000000000000 [ 254.607051][T12111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.615017][T12111] R13: 0000000000000000 R14: 00007f61769b5fa0 R15: 00007ffcdc6fdf58 [ 254.623083][T12111] [ 254.626097][T12111] Modules linked in: [ 254.630228][T12111] ---[ end trace 0000000000000000 ]--- [ 254.635745][T12111] RIP: 0010:__xfrm_state_insert+0x1011/0x1450 [ 254.641885][T12111] Code: 18 00 74 08 4c 89 ef e8 bd 5d 0b f8 4d 89 65 00 41 80 3c 1e 00 74 08 48 89 ef e8 ba 5c 0b f8 4c 8b 75 00 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 91 5d 0b f8 4d 89 2e 41 80 3c 1f 00 [ 254.661559][T12111] RSP: 0018:ffffc9001fb274a0 EFLAGS: 00010246 [ 254.667662][T12111] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000080000 [ 254.675706][T12111] RDX: ffffc9000e86a000 RSI: 000000000000042b RDI: 000000000000042c [ 254.683766][T12111] RBP: ffff8880571ae670 R08: dffffc0000000000 R09: 0000000000000002 [ 254.691798][T12111] R10: 000000000000000a R11: 0000000000000002 R12: ffff8880571ae668 [ 254.699797][T12111] R13: ffff8880571ae668 R14: 0000000000000000 R15: 1ffff1100ae35cce [ 254.707822][T12111] FS: 00007f61775556c0(0000) GS:ffff888125c80000(0000) knlGS:0000000000000000 [ 254.716806][T12111] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 254.723439][T12111] CR2: 00002000000001c0 CR3: 000000007defe000 CR4: 00000000003526f0 [ 254.731465][T12111] Kernel panic - not syncing: Fatal exception in interrupt [ 254.739063][T12111] Kernel Offset: disabled [ 254.743386][T12111] Rebooting in 86400 seconds..