last executing test programs: 45.345814829s ago: executing program 0 (id=830): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={0x1d, 0x0, 0x1, {0x2, 0xf0}, 0x2}, 0x18) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454ce, 0x8) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000008100), 0x0, 0x40000) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=@ethtool_sset_info={0x37, 0xe, 0xffffffff}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) socket$inet_smc(0x2b, 0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400040, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r5}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='O', 0x28}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x82}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) 44.183131826s ago: executing program 0 (id=833): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710044000000000095000300"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x2f}, {0x7, 0x0, 0xb, 0x9}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44e8fe55a1180015000600142603600e1209", 0x1f}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab0700040005"], 0xfe33) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r4, &(0x7f00000002c0)="f9", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(r4, &(0x7f0000000300)="9552f8964b", 0x5, 0x801, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) socket$inet6(0xa, 0x800, 0x80) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x74, &(0x7f0000000200)={0x0, 0x0, 0x10}, &(0x7f0000000240)=0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r5, r6, 0x2, 0x2, 0x0, @void, @value}, 0x10) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r7, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000014c0), 0x0, 0x0}, 0x40) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x6}, 0x1c) r8 = accept4$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14, 0x80800) sendto$packet(r8, &(0x7f0000000340)="818d49f71739523883acf5214dfb640ca8b6d4b5bb95d30be3e36d7487700c9cf682627e1ca817ab165c497f1436856e2c4cbcee6ff5b2e2c11c81677a572866fef09668e6ba9521ff2248c9e092bd1cda1992978a8987f4e8b66701162fa99eb0e3d6d3a2ab85516a608a783e2b8fb4eabd492c9db556de25cf53f691cda212e60339d87bd2a16f2b7105420dc0a78493c8e9b0c8babe0e6b8c6a062b5197fdf442805606fd8baf17b150e4a733878e26984b9339e64f94390ded734a05556a18d505b0295b28e79fbb4dc0ae", 0xcd, 0x24000800, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000840)={@mcast1, r9}, 0x14) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000125bd7000ffdbdf250300000014000b00fe80000000000000000000000000001208000100", @ANYRES32=r9, @ANYBLOB="76b8ec6609fd1ad1"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4030051) 43.825754159s ago: executing program 0 (id=839): sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000009c0)=ANY=[@ANYBLOB="78010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x178}, 0x1, 0x0, 0x0, 0x5}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000000053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f0000000140)='syz1\x00', 0x1ff) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) listen(r5, 0x0) connect$bt_sco(r5, &(0x7f0000000000)={0x1f, @none}, 0x8) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bdaa, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xffe2}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0xc, 0x4}, {}, {0x3, 0xa}}}, 0x24}}, 0x4040001) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000080)=0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1e0000000a000000870000001000000040500400", @ANYRES32=r2, @ANYBLOB="090800000000000000000000000000000000000087437290ce4a50b913937c19906d8ce0fff4d1765a3d49f8b4a6b02d1e2dea9548664f216b01e494c29b72b68cd19b77493f0e4f442ae99aea9a1785bdd33e3d3354ecc373e3b6373279b447597124cb7778bd2d8f4e2f820448e97f4ededccbab8394569e7e918487ded09f65876a9254abeb1b1943b72d5cd4bedb6cfcaa2684f48712a5b57788717c141734950ed61a2df54260c7ea631385e3", @ANYRES32=r6, @ANYRES32, @ANYBLOB="0000000001000000040000000c00"/28], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x64}}, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCATTACH(r8, 0x4004743d, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[], 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES64=r5], 0x7c}}, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x31f2552d984251b8, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) 43.273102081s ago: executing program 0 (id=847): sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xffffffff00000003}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000600000008000100000000000c000d"], 0x28}}, 0x0) 28.769178168s ago: executing program 0 (id=847): sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xffffffff00000003}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000600000008000100000000000c000d"], 0x28}}, 0x0) 15.684978416s ago: executing program 0 (id=847): sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xffffffff00000003}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000600000008000100000000000c000d"], 0x28}}, 0x0) 2.577540246s ago: executing program 1 (id=1215): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$LINK_DETACH(0x22, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)={0x38, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}]}]}, 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x5b}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 2.372044883s ago: executing program 2 (id=1217): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000004c0)={0x184, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x10, 0x0, 0x1, [@generic="25b57e35619bf282cfcd8fba0cb7f2934efacde0a223b473fe77f3e5ba760d3793b2f943b7528ea34883bc4a506cf756740574b89d396af9b59638700500000005006f88d6e1db9b2b"]}, @nested={0x11e, 0x6, 0x0, 0x1, [@typed={0xf1, 0x12b, 0x0, 0x0, @binary="8eab44a5159d834f7a577417b5091d0aac85ef225fb8e3c8fdd2f87bc9333944af4d958747a97f5dfa8f3a0df989a8f4cfcc8a0b0c74808d8ddfb58a24ace32cd6545f956216b8471f880e80f1f26bdcc7e4a4205744b9ceb87f7e8ba79cf7a294a9009fb421d24d53c0707e155e078a7839c40f0105a02b9c169f981fa3c96661f8579e1edb7b3b4222e84bfc269b9600d7e7e52d0874b155d588b935b48ae618a36ca423735f466467d01823ab53aff4cffb81a84735653bf5e2656f1c5db992060d7766b7aac5fffd3d2aea3579c8074e0f8681f4f8192dcda190a364823142539c7ad525134d072c0655df"}, @generic="26c1e5e4409b7b2f21eaecd84205d99f8ad8c8696cd5d3eed9ad9a6c845fff292724b9ce7c1b"]}]}, 0x184}}, 0x0) 2.249377441s ago: executing program 1 (id=1218): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x29, 0xed, 0x5, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, 0x1, 0x700, 0x1ff, 0x6}}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=0xffffffffffffffff, 0x4) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000540)={0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_tracing={0x1a, 0x12, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x38000000, 0x0, 0x0, 0x0, 0x8}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xf}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9115}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @alu={0x7, 0x1, 0xa, 0xb, 0x6, 0x40, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x89}, @call={0x85, 0x0, 0x0, 0x3c}, @jmp={0x5, 0x0, 0x2, 0x0, 0xa, 0xfffffffffffffffc, 0x4}]}, &(0x7f0000000140)='syzkaller\x00', 0x1, 0xf1, &(0x7f0000000280)=""/241, 0x41100, 0x6, '\x00', r2, 0x1a, r3, 0x8, &(0x7f00000004c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0x6, 0x0, 0x5}, 0x10, 0x28872, r4, 0x0, &(0x7f00000005c0)=[r5], 0x0, 0x10, 0x4, @void, @value}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x810, r5, 0xc937a000) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x30}}, 0x0) 2.231984446s ago: executing program 2 (id=1219): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300c6a41d106c7200000001000000000000020000000a0001096f776e65720000000900fb6cebfec6010073797a300000030009e5010073797a3200000000a3ff821400000011000100"/157], 0x98}}, 0x4048010) 2.13598754s ago: executing program 3 (id=1220): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "3f60eb8f2777c39a", "5985e81ad0d9585bc175cbecd3f55eb699e3070cc206f3ba527c85bde06fbf19", "bc5ec28f", "b200"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000000)=@gcm_256={{}, '\x00', "d830005894bf527ae179a7173985202bbfb61b36f3678de8ea2d0d6616076243", '\x00', "7c5cec21291a43fe"}, 0x3) 2.05102656s ago: executing program 1 (id=1221): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x7f7aa7c5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000008000"/28], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x3e, 0x107, 0xfffffffc, 0x25dfdbfd, {0x1, 0x7c}, [@nested={0x10, 0x136, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x7}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x16, 0x0, 0x0, @str='\x8e\n'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x9f}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c00000000000000000000000000000000000000000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc4, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x7a, 0x5, 0x0, 0x7fff}, 0x8, 0x0, 0x1, 0x0, 0x3}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) sendto$inet6(r2, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r5, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r5, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, r6, 0x0, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x8, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "30b00afe4e70"}}}}}}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket(0x23, 0x2, 0x53f0800) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x17, 0xf, &(0x7f0000000080)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x65}}, {}, [], {{0x6}, {0x5}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2.023350992s ago: executing program 3 (id=1222): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x2}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @typedef={0x1, 0x0, 0x0, 0x12}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x5f]}}, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) sendmmsg$unix(r0, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)="47cea824d853cf", 0x7}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0xc0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x4}, @IFLA_BOND_UPDELAY={0x8, 0x4, 0x5}]}}}]}, 0x44}}, 0x0) 1.695451195s ago: executing program 2 (id=1224): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000000206050000000000000000000000000012000300686173683a6e65742c706f72740000000900020073797a32000000000500040000000000050005000a0000000500010006000000140007800800064000000000080008"], 0x60}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="61106c000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r2}, 0x57) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={r0, 0x7, 0x5, 0xfff}) write$tun(r4, &(0x7f0000000040)={@val={0x0, 0x88a2}, @void, @arp=@generic={0x137, 0xdadcfe6cd9fec0cc, 0x6, 0x4, 0x9, @local, "8a42a79a", @multicast, "99"}}, 0x1d) bpf$MAP_CREATE_CONST_STR(0x8, &(0x7f0000000240)={0x2, 0x4, 0x5, 0x1, 0x80, 0x0, 0x4, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r5, 0x11, 0x68, &(0x7f0000000540)=0x2000000, 0x4) setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000500)=0x2, 0x4) recvmmsg(r3, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000580)=""/202, 0xca}, {&(0x7f0000000840)=""/245, 0xf5}, {&(0x7f00000002c0)=""/35, 0x23}, {&(0x7f0000001940)=""/4098, 0x1002}, {&(0x7f00000004c0)=""/6, 0x6}, {&(0x7f00000006c0)=""/243, 0xf3}], 0x6}, 0x80000000}, {{&(0x7f00000000c0)=@nfc, 0x80, &(0x7f0000000480)=[{&(0x7f0000000340)=""/105, 0x69}, {&(0x7f00000001c0)=""/32, 0x20}, {&(0x7f00000003c0)=""/147, 0x93}], 0x3, &(0x7f0000000940)=""/221, 0xdd}, 0xfffffc00}, {{&(0x7f0000000a40)=@phonet, 0x80, &(0x7f0000000680)=[{&(0x7f0000000ac0)=""/94, 0x5e}, {&(0x7f0000000b40)=""/81, 0x51}], 0x2, &(0x7f0000002980)=""/4096, 0x1000}, 0x401}], 0x6, 0x20, 0x0) 1.453056826s ago: executing program 1 (id=1225): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xdf}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newtaction={0x4c, 0x30, 0x1, 0x0, 0x0, {}, [{0x38, 0x1, [@m_ife={0x34, 0x1, 0x0, 0x0, {{0x8}, {0xfde4, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0xefff}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x480c4}, 0x0) 1.384154192s ago: executing program 3 (id=1226): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) vmsplice(r0, &(0x7f00000007c0)=[{&(0x7f00000003c0)="ca7c329a6247c2d781afddc8949cf362b2d38127ad67962c08160305d57877cdb7d03a9685afea48bdb614dd06802f0c8e378080c635a19b99de9e50341263a20bdb70572e1799c2046d3f2812e012ad5104d44afcc9bdd3db7c62070a25c3873b6d0b182a2efd25d80f30dd3da127", 0x6f}, {&(0x7f0000000540)="dc2b5bb469cfbfb364187d4cd06e48b64f93b57933f556d65fc2e0adabaf5571957bff9d5724fc90a619c73167037c8afc5d59800eb56ddd9669ee3b82c6fd79026157ebc193b2465343c4eecfef97a5a9a3b20cb8162584d5e465021d128436efd34b7ece14ce8f436aec9a9afe425b6dd5b09260c9ed45a8f07151bba8f1061e040119ad8402e53b4873e0dd72871d63", 0x76}, {&(0x7f0000000640)="3ded5a835d104d06e47d92a52e5d218a9c18fb7bcf482b9ec0b4ba9abbf2df23aca8c252bca31728772d1d049554ebbe05a82009bf9356edb53b772c494e3afa94b9d12ee033f9d0dd1a89416ce6612df37770ff103b979a2c505e2162a3143ff60c611e3ddb2b42de651593126285a03aa8a1111f1001c9fa95eb3a63937dd70b", 0x81}, {&(0x7f0000000b40)="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", 0x1000}, {&(0x7f0000000700)="1562d8a0ce92ee097e70c71a4659e964ec111f0345c661c4eac756b828f46bf3f33b02de1e1909442801dd1f6eee5f9127cbc6d794e89f957997814fc773646a75e6d75a8ba02af7eb43db437e0ecf503d62db7bda3d062130be83fd0b7f941889708b5b9a51c9e58f3df850d1d1a5047285feb7f20827671c2f9765ed7da00a2c018c555aaf9c02c16e6861e310ef20", 0x90}], 0x5, 0x8) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) (async) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140), 0x4) (async) getsockopt$bt_hci(r1, 0x11a, 0x1, 0x0, &(0x7f0000000440)) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) pipe(&(0x7f0000000680)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$netlink(0x10, 0x3, 0x1d) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="9300000010001fff0000000001000000000000004c37", @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007665746800000000040002800000010000000000", @ANYRES32=r5, @ANYBLOB="060104008000000008000a00", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r6, 0x113, 0x3, &(0x7f0000000000)=0xffffffff, 0x4) 1.227625785s ago: executing program 2 (id=1227): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0) r1 = socket(0x26, 0x1, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r2, 0x10d, 0xf0, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r7, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpd_exec_t:s0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)={0x194, r5, 0x200, 0x70bd27, 0x8, {{}, {@val={0x8, 0x3, r6}, @void}}, [@crypto_settings=[@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}], @NL80211_ATTR_IE={0x16b, 0x2a, [@challenge={0x10, 0x1, 0x7e}, @random_vendor={0xdd, 0xfd, "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"}, @fast_bss_trans={0x37, 0x52, {0x0, 0x0, "d470d85d31cc44a075465c2694cc4131", "d9980e10ebf338421240c7c3909f69657980a7731d306f5519e29ed48774e5f3", "bca0913afe93b8075b716e0c4405751ce4906f1e613194d400bd3488a88cc95f"}}, @dsss={0x3, 0x1, 0x40}, @chsw_timing={0x68, 0x4, {0x1}}, @supported_rates={0x1, 0x6, [{0x48, 0x1}, {0xc}, {0x9, 0x1}, {0x1}, {0x1b}, {0x30, 0x1}]}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x800}, 0x200488c0) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r5, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4c010}, 0xc001) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r3}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0xc, 0x1, [{0x7f, 0x0, 0x1}, {0x200}]}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4804}, 0x0) getsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000580), &(0x7f00000005c0)=0x4) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000340)) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0xc4, r5, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x8}, {0x1, 0x5}, {0x8, 0x4}, {0x3, 0x3}, {0x3, 0x1}], "f1c81e82b1928b0b"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x3, 0x1}, {0xf7, 0x1}, {0x4, 0x2}, {0x6, 0x5}], "82e1fafc1551ed1e"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x1, 0x3}, {0xe, 0x2}, {0x9, 0x4}, {0x3c, 0x7}, {0x7, 0x7}, {0x7}, {0xe, 0x7}, {0xff, 0x7}, {0x1}, {0x3, 0x7}, {0xa}, {0x1, 0x2}, {0x8, 0x7}, {0xb1, 0x1}, {0x7, 0x2}, {0x1}, {0x8}, {0x9, 0x5}, {0x80, 0x6}], "1dc17bd5a60a736b"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0xff, 0x2}, {0x6, 0x5}, {0xbe, 0x6}, {0x7, 0x3}, {0x6, 0x6}], "dd35d33e16fe8513"}}, @NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x8}, {0xb, 0xe}, {0x8, 0x6}, {0x4, 0x6}, {0x7, 0x2}, {0x5}, {0x26, 0x5}, {0x2, 0x5}, {0x0, 0x2}, {0x5}], "8f4e098ecc07c30c"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x78, 0x4}, {0x40}, {0x0, 0xd}, {0x6, 0x6}, {0xc, 0x5}, {0xf8, 0x5}], "cdee4000e76cfc57"}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x44800}, 0x20008000) 1.206290541s ago: executing program 3 (id=1228): r0 = socket$kcm(0x10, 0x100000000002, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x2d}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x34, r5, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}]}, 0x34}}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x9, 0x7f, 0xfffffffb, 0x3f1, 0x63, 0x0, 0x9}, &(0x7f00000003c0)=0x9c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="260a00002000010300"/39], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) sendmsg$OSF_MSG_ADD(r6, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x710}, 0x1, 0x0, 0x0, 0x80}, 0x854) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000040)={0x84, @empty, 0x4e23, 0x3, 'ovf\x00', 0x1, 0x7, 0x4f}, 0x2c) syz_emit_ethernet(0x61, &(0x7f0000000b80)={@random="67c10aa09258", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, @void, {@mpls_uc={0x8847, {[{0x40, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x9}, {0x9}, {0x100}, {0x62, 0x0, 0x1}, {0x6f57}], @generic="8b2390c7214976407039b7850a86543ad52e60e1eb68479fe1dc766d815292d827f9fae0e3d933d9931d0a7e7b4aeab9f3a1f4"}}}}, &(0x7f00000001c0)={0x1, 0x1, [0x6c, 0x58b, 0xa8c, 0xa]}) setsockopt$IP_VS_SO_SET_EDITDEST(r9, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x4e21, 0x12002, 0xf, 0xe1b2, 0xfffffffd}}, 0x44) syz_emit_ethernet(0x221, &(0x7f0000000c00)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x1, 0x6, "227912", 0x1eb, 0x26e9e83c15db72d, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, {[@dstopts={0x2b, 0x5, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private2}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x31}}]}, @hopopts={0xc, 0xe, '\x00', [@generic={0x4, 0x1a, "661584d7d2173e65267d2a028c0739b92808c929d4b898fe49f8"}, @jumbo={0xc2, 0x4, 0xdd2}, @calipso={0x7, 0x40, {0x1, 0xe, 0x1, 0x9, [0x6, 0x5, 0x9, 0x6, 0x8000, 0xfffffffffffffff4, 0x1]}}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @routing={0x5e, 0x6, 0x1, 0x1, 0x0, [@empty, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}]}], "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"}}}}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000040000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000040000000160a01010000000000000000010000000900020073797a30000000000900010073797a30000000001400038008000240000000ab040001"], 0xc8}}, 0x0) 1.15221368s ago: executing program 1 (id=1229): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0x4d5, 0x32}, 0x0, @in6=@loopback, 0x1, 0x3, 0x0, 0xb7, 0x1fb, 0xffffffff, 0x6}}, 0xe8) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r4, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r5, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r6, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) ioctl$PPPIOCSNPMODE(r6, 0x4008744b, &(0x7f0000000000)={0x80fb, 0x1}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r7, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) sendmmsg(r0, &(0x7f0000000180), 0x400000000000077, 0x7600) 1.031879603s ago: executing program 2 (id=1230): ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x29, 0x5, 0x6, 0x3434, 0x45, @loopback, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x1, 0x7800, 0x1, 0x7}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002780)=ANY=[@ANYBLOB="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"], &(0x7f0000002740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) r3 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000002700)=[{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000001240)="a0dd055e94ad4c94c0f8d26bcfc8e9554396f0a5675d35dbc5efa207dc57b4a11aae36f43c4c2e32b37e70e4916cb8784e93a0f43cbcc7737b5b73301ae1920177fd368b4b5c87b5a94971317f42a05ff0ff680678b3208dc4e3c2b7ccaf60678c4b6b6b636062a05322e01c61204b81a5e4deeee6f90154e36625fcec9ddce046fc04eb1cef4e798521c8e0f349393540058d9d36fbe86af3e095c6cdf63675bfabc151a31e8c36420dc55eb38e20ec3785fe9b32c63e889cc2bab644188015beed989236c2739ad99a0a9aa584a51417256ec9a5fe49d250bf9235075f0a71ae", 0xe1}, {&(0x7f0000001340)="806c1f770db4fadbccb72d7d04bad2f87574dfabedede00e6607d88b3de65fd4240b4d94e0e8db50e88aa2847b31ceb46c83e9d6eb681a08f0c86d60003faf1a07f70c14b5596d856a5cafe083d4d4d677f9d81aecce5ca596183141d39ac3e4feb5c8279cf1200bccdb82cd85e2b51370a41348296c83d205bf7360f87bb5fecf78edc1ba110a9bcd97e676ec166c4fc6c359ac82617e8011dfdb5fca6c437dc10f1da18abb15e7dc458fcfe06522d1580429e6fc394ae623e3c2d0397721de50483efcf1ff9444647298710aaf2a73134551a1", 0xd4}, {&(0x7f0000001440)="56c87642adf48ff245c50a0c5aaa8686", 0x10}, {&(0x7f0000001480)="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", 0x1000}, {&(0x7f0000002480)="ce09bb82292448b235efeb9b0451e98fb6af6ae6a7e91a474734720eb996a18c04b4202e79aa9d7aebc27b2a9038d016021e8a0a176e7d1fbe98b067265852f5f09196b1dac76a7cc504277e98f278e3dafe16388474ef468c40dfdd409da56282bca30d89036ff109beec99ab9426e68de9c7ab98be43cba0f3182632d637ca6991890b87e839bf5132eaffca9dc197d3fbf5460ba642796e1ddf9a7f8435a325a7473c5bed249aaa6611191915144c4839b37fc8716e4723f69a89f493500ae204eb0d384a277149bce447", 0xcc}, {&(0x7f0000002580)="9adba8abdbab5a7dc85ef4d818b461f0fe20b6215f6bb4b8edcbb4864cc7627a7774cd832412d2f2f2a5c8e454e5dd4921bab509b6906bdf543ee13792e475410e8fa48d78443ec3eca6badf858699c6ecb149383c593ee011421572381064fe66ba6209dac4edddf7e0380188d2da0afce9d2143490ba99205557e4ab1634d860b6bfb0c122b2fe4f154aef96914b5fbd81f5d41644ae46e2ce7157f03412a920b07af19da67c7b50dd119d84cdbf8d8e65bcb0131fc209aabfe09de852244fbef85d3237c7532da04661d955fe3744b2747889b7734429", 0xd8}], 0x6, 0x0, 0x0, 0x40000}], 0x1, 0x4008004) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x18, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f00800fee0050000000000002f77fbac141416e000030a44079f03b180006000000000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xffffff23}, 0x2c) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r4, &(0x7f00000007c0)=[{{&(0x7f0000000380)=@in={0x2, 0x4e24, @local}, 0x80, 0x0}}], 0x1, 0x2c000011) 914.913781ms ago: executing program 1 (id=1231): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x48, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={0x0, 0x0, 0x10, r0}, 0x18) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000180)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.swap.events\x00', 0x275a, 0x0) sendfile(r3, r4, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$int_in(r7, 0x5452, &(0x7f0000000100)=0x9) connect$inet(r7, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r7) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) openat$cgroup_procs(r4, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x83, &(0x7f0000000000)={r8, 0x2}, 0x8) ioctl$HCIINQUIRY(r2, 0x400448e1, &(0x7f0000000000)={0x4, 0x8, "957008"}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x94, 0x24, 0x4ee4e6a52ff56541, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x64, 0x2, {{0xfffffffd, 0x0, 0x0, 0xb}, [@TCA_NETEM_LOSS={0x48, 0xd, 0x0, 0x1, [@NETEM_LOSS_GI={0x18}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GI={0x18, 0x1, {0x4, 0x9, 0x8de3, 0x56b, 0x3}}]}]}}}]}, 0x94}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 783.167844ms ago: executing program 4 (id=1232): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000100000000000000000000000000000000000000f1256f6a37c54588f0a607ddeb13799ef252bb2a4962d1b11905ca4752cd645ca25fe0d5740db6bc8c4076e1d0c4f84b2838274afb1f0a5927ba734473c2ba888478dd2f893bc37ccfb7c39d69de5236c7fd3441c5dceb5c248df748a954623d4d79a47258d48377df338165d94a580d6901"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="1807ad2b92a38a2c5560ef8c02b8951771f29c8b0000000000000018140000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000005a000000bca9000000000000350901000700000095000000000000003e9800000000000026080000020000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) (async) recvfrom$packet(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000140)=""/6, 0x2}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@bridge_setlink={0x2c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x8120}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x9}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4055}, 0x0) (async) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000010401030000000008000000000000080500010704000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x40000) 515.688775ms ago: executing program 4 (id=1233): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x99e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}]]}, 0x3c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="c000000001a49504d1ecf91f3a7dc20c9e598044220101030000000000000000000000056c000e802c00018014000300ff01000000000000000000000000000114000400fc000000000000000000000000000001060003400004000006000340000400002c00018014000300fe8000000000000000000000000000bb14000400fc00000000000000000000000000000504001880340010800800034000000009de0800034000000005080003400000000808000340000030000800034000000000"], 0xc0}, 0x1, 0x0, 0x0, 0x1}, 0x60000000) listen(r3, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000d40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r6, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000d80)={0x30, r7, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @random="898fb91260f7"}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r9, 0x0) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f00000003c0)='dctcp-reno\x00', 0xb) sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x48001) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x22020400) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r12, r13, 0x26, 0x0, 0x0, @void, @value}, 0x10) bind$inet6(r11, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000740)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x28, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xc2, 0x4, 0x0, 0x9, {[@md5sig={0x1d, 0x12, "fb6b9acd8f4e1c92833a2f1e90339d18"}]}}}}}}}}, 0x0) 425.027695ms ago: executing program 4 (id=1234): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x8, 0x2, 0x8) listen(r0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="7800000010003b1500"/20, @ANYRES32=0x0, @ANYRES64=r0], 0x78}}, 0x4000) 353.269377ms ago: executing program 4 (id=1235): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0xfffffffd, 0x0, 0x330, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b24, &(0x7f0000000000)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x7}}, [@TCA_RATE={0x6, 0x5, {0x18, 0x4c}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040810}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@newtaction={0x14, 0x12, 0xbf68af9d17701211, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) 183.845887ms ago: executing program 4 (id=1236): r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000400)=0xffffffffffffffff, 0x4) writev(r0, &(0x7f00000008c0)=[{&(0x7f0000000440)="78cde0e6169993b31a", 0x9}, {&(0x7f0000000480)="53c220c1f5305787057daeff2b98a6f353edb542c5aca3dd7be450962fe7c32c2eaba3e0474705a98b0899ab33122266a4140d8997a1c01cfcc8651212c402021fe96d1177648a42da4f1c61764bbcb620a565dd9a070b682038709550dd8a04a6229703d1e83543185635cbe436be2685b1b35a1bc341bff9dd0b03a803c2ae702581e10a01150c5cf6fd035bd92a1e4c0032a72357884dd7ff551b3b383c1028d3d93b42411f6f925ed30463365ed8025e8e35d082a3ee3c7cc543a29821edba61c7d52db7f47c107aa36c042817c5e9468994238807110ded2ad9addd37f4e277f159248f08", 0xe7}, {&(0x7f0000000580)="65ee70ae404fc29a526a4c4e2ad8d5b18a9fb0454e7471be4f0a227167494654363b3e414fc1d4d21460b9512ed7825dbfbc400345e74a925bb69ee6ff1c24e709d3c0fa432cb1a413f5697feff8bf12a2cee7084357eef7de3012587fc80db0fd7aeb9ce70c6caff6f738ce260ec0218a91c5037c396381988a8c3ede8900401a4e1541fe1b2c83e44f7be3646b41e7ca5560d0ba7df82e41ab6af5dfa3dc764aeeabcfee1bd4fa368d45279215b21a801aaf5dc711137a4bfe47a43abf401bc5804c871d8783e5743afbd0ec9825e604b426105ed3046a2723cef4714a0d955d66930b8340d93e275c7bf4fef5410d80ac554265b9", 0xf6}, {&(0x7f0000000680)="bab973246524755a99b410ad32fb156ac4786da52c7c20fdfdb478af607e2a445b4a7decf31b4841e9e63f75b67b9621a56595ba7a2c6b6e88d62c338cf269cc7429363532bffc1411a56dc2dbfab07ddc9aad6f2ba88a7d4f1ef2d54ddfb977740b6edc6cb4c7c3332a0e5e1d3f370157fdf33e9662a063180a6a843acf8d71eb2890552b8c6f20b6296bf6cf2718c35e372f1b596e50d64936d96e2cc6cf632c97818cf074db93fd6883375f9205b7d94d2a12dc6c41885cb2aed10e05420baef2d0696d64ce7cf6656b14e8b77958e506520d5bf8b1b0155d", 0xda}, {&(0x7f0000000780)="a91ae94622301304ef5ab1e9eae536e384b7c442e60fb36a271899056a56b9f3655a1f325d90005beb3f10db868061b1baa47efd1141c1fb65799095d2f020d506d551ac0597dd388a4f2461341351b2bf0d5f15deee6b296fe08ce482072d3018426c4f5d5912cbf4d0d773b0eef21cd27bfdf0fd3147421fe9d5c2eedc61a553ec0aa26ca28e2b210e78edfd5f4298e83123c4c33647b11d3f6673797983d0db8f4123c8653c85eb99dba259592b580ce3ed2b3d5667d8884b2b61b96f53416283cf", 0xc3}, {&(0x7f0000000880)="4c404177249744790520d1d9c5ccac87794c0217a97a06abda25577035c931cdf3208d69bc74f99abb3dbdfb39447d18df298fef6042fa", 0x37}], 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)={0x14, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000001c0)={0x4, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x88) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000180)="08001efbb07d586e", 0x8}], 0x1, 0x0, 0x0, 0x60000000}, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), 0xffffffffffffffff) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r6, 0x0, 0x1, &(0x7f00000003c0)=0x6, 0x4) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r4) sendmsg$NLBL_MGMT_C_LISTALL(r4, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x2c, r5, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '\x13:[\x00'}]}, 0x2c}}, 0x24000800) 182.083967ms ago: executing program 3 (id=1237): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet(0x2, 0xa, 0x101) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f0000000180)=0x7ffffe, 0x4) (async) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000003f0000000c00990000000000000000003c005e80080005000000000008000300000000000800090000000000100001000000000000000000000000000800070000000000080001"], 0x5c}}, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r7 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r7, &(0x7f00000028c0)={&(0x7f0000000040)={0xa, 0x4e21, 0x7, @mcast1, 0x200000}, 0x1c, 0x0, 0x0, &(0x7f0000002740)=[@pktinfo={{0x24, 0x29, 0x32, {@private1}}}], 0x28}, 0x48880) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x58, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000940)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000900)={&(0x7f00000007c0)=@bridge_setlink={0x138, 0x13, 0x0, 0x70bd26, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x0, 0x44}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0xfff}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x2}, @IFLA_AF_SPEC={0xd0, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}, @AF_INET6={0x5c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_INET6_TOKEN={0x14, 0x7, @private2}, @IFLA_INET6_TOKEN={0x14, 0x7, @private0}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}]}, @AF_INET6={0x6c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x1}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x7}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x6}, @IFLA_INET6_TOKEN={0x14, 0x7, @remote}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'ip6gretap0\x00'}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x100}, @IFLA_IFALIASn={0x4}, @IFLA_MASTER={0x8, 0xa, r9}, @IFLA_LINKMODE={0x5, 0x11, 0x2}, @IFLA_TXQLEN={0x8, 0xd, 0x4}]}, 0x138}, 0x1, 0x0, 0x0, 0x80}, 0x2000c040) (async, rerun: 32) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYRES8=r0], 0x114}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async, rerun: 32) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e20, @broadcast}}}, &(0x7f0000000540)=0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r10, 0x84, 0x1a, &(0x7f0000000580)={r11, 0xcd, "704067f5d2089dae12f5761fb7b8a57e024bb0660faf0b96805ff2efd8d86717fe645fc8ba01d8eb642711c8f24495af3d42ad433f25257ae7ce106ebd4a25a44e9be716926850ad4b8bbf3efbb05d545af693b5e197b0bf5a98a939f24f34fb01b26083b770fce1850f0fcdb8ba8a47bc5f9753a7ca579eb6a67038971854ac8c5b473e32999be54b3c6e0b5dffa5fa6215c488fa7c887f93529e8be0be028f562c0fe41af0b7980fb2daa601f4883bb873221a3972390bdf98baa31290013479963c06540b49baaee76425c4"}, &(0x7f0000000680)=0xd5) close(r5) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1b000000000000000000000000000000c6626505b961a2dea993c36d9b903242ba7b69b4723cef5fa3d2c47f52fb44689345df633bd2495557aefc8aaf76ed9e5427dbea5f9cb6a548de57ef3a317e39b351299731dd69e1b575b550fc4ccadf1e7de758fc11e03b863d776ec90d175b36b6655cf3e23515ed7f1fcffd0e1ec0243fa3df56a972cb4115e8bedc1436def3d174aa2976f19d7f87311bdc", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24, @ANYRES32, @ANYBLOB], 0x48) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xfffe, 0x2}, 0x6) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=ANY=[@ANYBLOB="380000000906010200000000000000000200ffff100007800c00018008000140e00000020900020073797a31000000000500010007000000ddfbfaf3b471aa214fa648327fcca46d32f44e73758080b0f22f70b07685f7761ced7d77ffc61ebdbaa514a5b997788a40f6c020f47af7d930657320f2edb44096c936e6b216d755d3bfaf48e3e872036d15e88deb6110e6cbf48c8a21ecb8b6c779a0e9747cb3665cf96be5d46dccf2a41223290074ef9b7bfd6963ceda36433c373da2108abd5c80d4a87a3f5e9b23f068bd02195428407a8d80b8411c1c70b02a433c166d9e0960d0871a330c5e2b9b1b9bd2"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0xe3c0, 0x0, r12, 0x1, '\x00', r9, 0xffffffffffffffff, 0x2, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x7, 0x8, 0x5, 0xc3a, {{0x13, 0x4, 0x0, 0x4, 0x4c, 0x65, 0xfff9, 0x8, 0x2f, 0x0, @loopback, @private=0xa010101, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x1b, 0xcd, [@remote, @private=0xa010100, @multicast2, @local, @empty, @loopback]}, @rr={0x7, 0x17, 0x4d, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr=0x64010102, @broadcast]}]}}}}}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000000140)=0xe8) 73.847275ms ago: executing program 4 (id=1238): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001000000300000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="000000000000000018cce2a6143ee4de7adc7f7978200012800b0069646765000010000290727740236500"/59], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r2, 0x29, 0x7, 0x0, &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mmap(&(0x7f0000159000/0x1000)=nil, 0x1000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f0000000000)=""/61, 0x32a000, 0x800, 0x200, 0x3}, 0x20) mmap(&(0x7f0000001000/0xc00000)=nil, 0x200000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_int(r3, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000580)=ANY=[@ANYBLOB='-', @ANYRESOCT], 0x9) r6 = socket$alg(0x26, 0x5, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000840)={'vcan0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000080)="18", 0x1, 0x0, &(0x7f00000000c0)={0x11, 0xc, r9, 0x1, 0x0, 0x6, @random="5e749af18789"}, 0x14) bind$alg(r6, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r10 = accept4(r6, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01fb00000000060700000000000808000300cc9905928eee0a8d1274f0c329d5087fa20038ecba78ab4c81a0924e41f62ef6450924b0626b0a2cc5eb13f4f0cdc2659eb20bc568d0a5", @ANYRES32=r11, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x240040c0) syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000711243000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$netlink(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)={0x40, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x2c, 0x11, 0x0, 0x1, [@generic="2fe5afbf24fbcccc554cd9761e79b8dad8a2018544a3f855448c77987d9d7a5233e2eb702840054f"]}]}, 0x40}], 0x1}, 0x0) 55.761173ms ago: executing program 2 (id=1239): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="480000003e00010000000000000000000080340018802d001c800800cf00000035e415cce0671a7f602403877efb6f804cc5811dea3454819dfe4317a9e25f6fdc1f40c0db55d2b6fd2d60298befa528f7e734b2d533fa2cde9f2d68a387565191fb5d19666df444b146", @ANYRES32=0x0, @ANYBLOB="f3cc50fe634d094ec09b27ebad7974a937072c2cb851ba4a0630dbb1fa35788811000000"], 0x48}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000ff7f00001c001a800800038004000500080000003e"], 0x44}}, 0x0) sendmsg$key(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x2, 0x11, 0x7, 0x6, 0x22, 0x0, 0x70bd27, 0x25dfdbfb, [@sadb_x_nat_t_port={0x1, 0x0, 0x4e20}, @sadb_key={0x1d, 0x8, 0x6f0, 0x0, "25275d37d45088a1ddd3b35293b56e7c4f9ed78188b8d879cdf640f765c6701fb05753f7105401e7e61b9f50f91c7ac2b49c8bfeec7ec3639cdcd3839de143797a6a274165db72daabce5e0297625a250a02ddb8d5598cb6e4e553798451e9380b19845003154f6a47cbcc3effae077d9c77fffbc9d55ab2e4dd35bcc36d487dcac135868e9d191b5c2f22ec2943208c05acd1bba45844b2ec0f312040175c5ac24eb194eaabc03926267ebb7c09ca4e59f0ce98cc59876ae46b2999685448fb112aab6f05978cfc2f7a91719c1639769369ca790766bca57f9fc3587c76"}, @sadb_x_sa2={0x2, 0x13, 0xfd, 0x0, 0x0, 0x70bd27}]}, 0x110}}, 0x44041) 0s ago: executing program 3 (id=1240): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x40, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x40}}, 0x40000) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1a3e000c}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '&\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x884) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000000)=0x10002, 0x4) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000240)) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x20) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x2000004, 0x4001011, r5, 0x34da2000) socket$l2tp(0x2, 0x2, 0x73) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.52' (ED25519) to the list of known hosts. [ 65.665867][ T5828] cgroup: Unknown subsys name 'net' [ 65.816532][ T5828] cgroup: Unknown subsys name 'cpuset' [ 65.825324][ T5828] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.140778][ T5828] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.691288][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.701020][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.709401][ T5857] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.717139][ T5857] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.726327][ T5856] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.733536][ T5857] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.735085][ T5856] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.748016][ T5858] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.756252][ T5856] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.763532][ T5858] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.772952][ T5856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.780419][ T5858] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.787943][ T5856] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.795998][ T5858] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.811010][ T5858] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.811528][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.837303][ T5857] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.844473][ T5860] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.854274][ T5857] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.861414][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.870969][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.878832][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.887725][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.915346][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.925866][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.411611][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.417239][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 71.418154][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.430799][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 71.674195][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 71.727078][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 71.792179][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.799505][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.808183][ T5843] bridge_slave_0: entered allmulticast mode [ 71.815448][ T5843] bridge_slave_0: entered promiscuous mode [ 71.824632][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.831770][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.838984][ T5843] bridge_slave_1: entered allmulticast mode [ 71.846617][ T5843] bridge_slave_1: entered promiscuous mode [ 71.854181][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.861271][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.868540][ T5839] bridge_slave_0: entered allmulticast mode [ 71.875622][ T5839] bridge_slave_0: entered promiscuous mode [ 71.884944][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.892079][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.899333][ T5839] bridge_slave_1: entered allmulticast mode [ 71.906881][ T5839] bridge_slave_1: entered promiscuous mode [ 71.977513][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 72.081921][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.094893][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.114622][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.125147][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.132367][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.139916][ T5844] bridge_slave_0: entered allmulticast mode [ 72.147422][ T5844] bridge_slave_0: entered promiscuous mode [ 72.154720][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.161847][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.169796][ T5838] bridge_slave_0: entered allmulticast mode [ 72.176930][ T5838] bridge_slave_0: entered promiscuous mode [ 72.185716][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.192854][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.200267][ T5838] bridge_slave_1: entered allmulticast mode [ 72.208588][ T5838] bridge_slave_1: entered promiscuous mode [ 72.217741][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.260925][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.268243][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.276046][ T5844] bridge_slave_1: entered allmulticast mode [ 72.283304][ T5844] bridge_slave_1: entered promiscuous mode [ 72.350488][ T5839] team0: Port device team_slave_0 added [ 72.387685][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.399332][ T5843] team0: Port device team_slave_0 added [ 72.408378][ T5843] team0: Port device team_slave_1 added [ 72.420491][ T5839] team0: Port device team_slave_1 added [ 72.441309][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.453618][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.464433][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.511391][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.518475][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.546053][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.616145][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.623412][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.630687][ T5846] bridge_slave_0: entered allmulticast mode [ 72.639341][ T5846] bridge_slave_0: entered promiscuous mode [ 72.647197][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.654500][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.680489][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.710032][ T5838] team0: Port device team_slave_0 added [ 72.717401][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.724465][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.750406][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.761636][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.769208][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.776595][ T5846] bridge_slave_1: entered allmulticast mode [ 72.784097][ T5846] bridge_slave_1: entered promiscuous mode [ 72.800584][ T5844] team0: Port device team_slave_0 added [ 72.810520][ T5844] team0: Port device team_slave_1 added [ 72.818280][ T5838] team0: Port device team_slave_1 added [ 72.839998][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.847547][ T5854] Bluetooth: hci3: command tx timeout [ 72.853181][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.879131][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.923715][ T5854] Bluetooth: hci1: command tx timeout [ 72.923781][ T55] Bluetooth: hci0: command tx timeout [ 72.929206][ T5842] Bluetooth: hci2: command tx timeout [ 72.972712][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.979722][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.005775][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.008968][ T5842] Bluetooth: hci4: command tx timeout [ 73.052039][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.085509][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.092480][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.118502][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.132287][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.139649][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.166073][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.187520][ T5843] hsr_slave_0: entered promiscuous mode [ 73.193900][ T5843] hsr_slave_1: entered promiscuous mode [ 73.202412][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.217505][ T5839] hsr_slave_0: entered promiscuous mode [ 73.223773][ T5839] hsr_slave_1: entered promiscuous mode [ 73.229722][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.237538][ T5839] Cannot create hsr debugfs directory [ 73.243794][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.250735][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.277244][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.334259][ T5846] team0: Port device team_slave_0 added [ 73.389388][ T5846] team0: Port device team_slave_1 added [ 73.478118][ T5838] hsr_slave_0: entered promiscuous mode [ 73.485182][ T5838] hsr_slave_1: entered promiscuous mode [ 73.491186][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.499275][ T5838] Cannot create hsr debugfs directory [ 73.509873][ T5844] hsr_slave_0: entered promiscuous mode [ 73.516681][ T5844] hsr_slave_1: entered promiscuous mode [ 73.522783][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.530593][ T5844] Cannot create hsr debugfs directory [ 73.553100][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.560062][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.586312][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.598668][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.605811][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.632293][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.842683][ T5846] hsr_slave_0: entered promiscuous mode [ 73.849130][ T5846] hsr_slave_1: entered promiscuous mode [ 73.855356][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.863016][ T5846] Cannot create hsr debugfs directory [ 74.141988][ T5839] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.154442][ T5839] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.180289][ T5839] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.216182][ T5839] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.282332][ T5843] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.296305][ T5843] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.310647][ T5843] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.344499][ T5843] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.404721][ T5844] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.416105][ T5844] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.426930][ T5844] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.437784][ T5844] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.549020][ T5838] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.561294][ T5838] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.585086][ T5838] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.596679][ T5838] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.678888][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.704147][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.727452][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.741196][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.751389][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.771450][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.809203][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.819091][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.876492][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.883755][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.895405][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.902516][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.923860][ T5842] Bluetooth: hci3: command tx timeout [ 74.960133][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.969295][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.976422][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.988969][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.996152][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.003515][ T5842] Bluetooth: hci2: command tx timeout [ 75.008771][ T5854] Bluetooth: hci1: command tx timeout [ 75.008916][ T5842] Bluetooth: hci0: command tx timeout [ 75.066610][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.083487][ T5842] Bluetooth: hci4: command tx timeout [ 75.111465][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.118639][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.139010][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.146171][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.194753][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.228425][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.277613][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.321583][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.331114][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.338229][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.380331][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.387515][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.416014][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.423209][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.522876][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.530078][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.637207][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.766012][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.858511][ T5839] veth0_vlan: entered promiscuous mode [ 75.920142][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.949712][ T5839] veth1_vlan: entered promiscuous mode [ 76.116696][ T5839] veth0_macvtap: entered promiscuous mode [ 76.152006][ T5839] veth1_macvtap: entered promiscuous mode [ 76.172544][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.201826][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.221281][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.241988][ T5844] veth0_vlan: entered promiscuous mode [ 76.255669][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.267240][ T5839] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.276809][ T5839] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.288365][ T5839] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.297110][ T5839] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.365329][ T5844] veth1_vlan: entered promiscuous mode [ 76.398953][ T5843] veth0_vlan: entered promiscuous mode [ 76.414883][ T5838] veth0_vlan: entered promiscuous mode [ 76.442458][ T5843] veth1_vlan: entered promiscuous mode [ 76.472874][ T5838] veth1_vlan: entered promiscuous mode [ 76.525602][ T5846] veth0_vlan: entered promiscuous mode [ 76.531797][ T5844] veth0_macvtap: entered promiscuous mode [ 76.560760][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.570835][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.576322][ T5844] veth1_macvtap: entered promiscuous mode [ 76.589622][ T5846] veth1_vlan: entered promiscuous mode [ 76.647679][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.662085][ T5838] veth0_macvtap: entered promiscuous mode [ 76.669743][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.691717][ T5843] veth0_macvtap: entered promiscuous mode [ 76.702069][ T5843] veth1_macvtap: entered promiscuous mode [ 76.717989][ T5838] veth1_macvtap: entered promiscuous mode [ 76.729400][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.741836][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.756288][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.770842][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.783984][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.794274][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.805080][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.816713][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.834123][ T5846] veth0_macvtap: entered promiscuous mode [ 76.864917][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.877009][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.877116][ T5839] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.888682][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.915057][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.926344][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.936401][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.947333][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.958629][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.971116][ T5846] veth1_macvtap: entered promiscuous mode [ 76.991681][ T5843] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.001297][ T5843] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.003727][ T5842] Bluetooth: hci3: command tx timeout [ 77.014822][ T5843] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.025833][ T5843] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.040090][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.070466][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.082478][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.093954][ T5842] Bluetooth: hci0: command tx timeout [ 77.094420][ T55] Bluetooth: hci1: command tx timeout [ 77.099362][ T5842] Bluetooth: hci2: command tx timeout [ 77.110690][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.120555][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.131052][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.142634][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.164386][ T5842] Bluetooth: hci4: command tx timeout [ 77.173040][ T5844] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.181748][ T5844] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.195304][ T5844] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.205642][ T5844] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.240850][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.261240][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.275242][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.291286][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.305668][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.317851][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.330042][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.357682][ T5838] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.366968][ T5838] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.378571][ T5838] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.387669][ T5838] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.399923][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.410919][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.420903][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.431570][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.441411][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.451901][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.461808][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.472593][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.485423][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.497311][ T5933] warning: `syz.2.6' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 77.525865][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.537815][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.550632][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.573041][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.590143][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.601003][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.610976][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.621593][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.633364][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.685760][ T5846] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.696455][ T5846] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.713687][ T5846] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.722413][ T5846] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.815076][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.823912][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.862714][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.875500][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.995890][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.026890][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.060469][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.077972][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.086564][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.099716][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.239526][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.264752][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.358096][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.403337][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.580481][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.607612][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.628541][ T5963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13'. [ 78.825705][ T5968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14'. [ 78.857606][ T5970] xt_ipcomp: unknown flags B [ 78.889373][ T5972] xt_ipcomp: unknown flags B [ 79.010334][ T5977] Bluetooth: MGMT ver 1.23 [ 79.084422][ T5842] Bluetooth: hci3: command tx timeout [ 79.165066][ T5842] Bluetooth: hci1: command tx timeout [ 79.165092][ T55] Bluetooth: hci0: command tx timeout [ 79.170744][ T5842] Bluetooth: hci2: command tx timeout [ 79.237203][ T5986] tipc: Started in network mode [ 79.242130][ T5986] tipc: Node identity a647da9140c7, cluster identity 4711 [ 79.251563][ T5842] Bluetooth: hci4: command tx timeout [ 79.273667][ T5986] tipc: Enabled bearer , priority 0 [ 79.479849][ T5990] syzkaller0: entered promiscuous mode [ 79.508377][ T5990] syzkaller0: entered allmulticast mode [ 79.516818][ T5990] tipc: Resetting bearer [ 79.559136][ T6000] netlink: 52 bytes leftover after parsing attributes in process `syz.1.23'. [ 79.568388][ T5984] tipc: Resetting bearer [ 79.609758][ T6002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.26'. [ 79.621450][ T6003] netlink: 20 bytes leftover after parsing attributes in process `syz.1.23'. [ 79.671726][ T6006] netlink: 12 bytes leftover after parsing attributes in process `syz.4.26'. [ 80.032281][ T6020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.26'. [ 80.295495][ T5916] tipc: Node number set to 3867204241 [ 80.517876][ T5984] tipc: Disabling bearer [ 80.857821][ T6031] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 81.091972][ T6042] bond0: option mode: unable to set because the bond device has slaves [ 81.480549][ T6060] netlink: 4 bytes leftover after parsing attributes in process `syz.4.42'. [ 81.596442][ T6024] Zero length message leads to an empty skb [ 81.679435][ T6069] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.701839][ T6074] netlink: 68 bytes leftover after parsing attributes in process `syz.1.45'. [ 81.854418][ T6060] netlink: 4 bytes leftover after parsing attributes in process `syz.4.42'. [ 82.182176][ T6081] lo speed is unknown, defaulting to 1000 [ 82.216769][ T6081] lo speed is unknown, defaulting to 1000 [ 82.242449][ T6081] lo speed is unknown, defaulting to 1000 [ 82.402391][ T6092] netlink: 'syz.1.54': attribute type 2 has an invalid length. [ 82.432395][ T6094] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 82.439445][ T6092] netlink: 'syz.1.54': attribute type 8 has an invalid length. [ 83.234181][ T52] lo speed is unknown, defaulting to 1000 [ 83.253031][ T6081] infiniband syz0: set active [ 83.280039][ T6081] infiniband syz0: added lo [ 83.305888][ T6081] syz0: rxe_create_cq: returned err = -12 [ 83.333429][ T6081] infiniband syz0: Couldn't create ib_mad CQ [ 83.339634][ T6081] infiniband syz0: Couldn't open port 1 [ 83.394109][ T6139] netlink: 'syz.2.65': attribute type 1 has an invalid length. [ 83.454200][ T6138] sctp: [Deprecated]: syz.4.66 (pid 6138) Use of int in max_burst socket option. [ 83.454200][ T6138] Use struct sctp_assoc_value instead [ 83.489034][ T6081] RDS/IB: syz0: added [ 83.501559][ T6081] smc: adding ib device syz0 with port count 1 [ 83.513907][ T6081] smc: ib device syz0 port 1 has pnetid [ 83.533254][ T5906] lo speed is unknown, defaulting to 1000 [ 83.541638][ T6081] lo speed is unknown, defaulting to 1000 [ 83.712485][ T6156] netlink: 'syz.2.69': attribute type 1 has an invalid length. [ 83.732870][ T6158] netlink: 'syz.3.70': attribute type 1 has an invalid length. [ 83.795093][ T6156] 8021q: adding VLAN 0 to HW filter on device bond2 [ 83.817449][ T6157] __nla_validate_parse: 69 callbacks suppressed [ 83.817465][ T6157] netlink: 28 bytes leftover after parsing attributes in process `syz.4.68'. [ 83.837351][ T6157] netlink: 28 bytes leftover after parsing attributes in process `syz.4.68'. [ 83.847694][ T6157] netlink: 36 bytes leftover after parsing attributes in process `syz.4.68'. [ 83.898610][ T6161] bond2: (slave veth3): Enslaving as an active interface with a down link [ 83.968336][ T6156] ip6gretap1: entered promiscuous mode [ 83.983287][ T6161] trusted_key: syz.2.69 sent an empty control message without MSG_MORE. [ 83.998629][ T6156] bond2: (slave ip6gretap1): making interface the new active one [ 84.031559][ T6156] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 84.056889][ T6081] lo speed is unknown, defaulting to 1000 [ 84.188413][ T6171] xt_TCPMSS: Only works on TCP SYN packets [ 84.196695][ T6170] sock: sock_timestamping_bind_phc: sock not bind to device [ 84.211381][ T6170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.74'. [ 84.234102][ T6175] xt_TCPMSS: Only works on TCP SYN packets [ 84.382457][ T6178] sctp: [Deprecated]: syz.2.78 (pid 6178) Use of struct sctp_assoc_value in delayed_ack socket option. [ 84.382457][ T6178] Use struct sctp_sack_info instead [ 84.390119][ T6181] syz.3.79 uses obsolete (PF_INET,SOCK_PACKET) [ 84.497984][ T6184] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 84.616922][ T6190] netlink: 108 bytes leftover after parsing attributes in process `syz.1.82'. [ 84.836607][ T6203] netlink: 176 bytes leftover after parsing attributes in process `syz.1.85'. [ 84.866744][ T6203] netlink: 32 bytes leftover after parsing attributes in process `syz.1.85'. [ 84.911047][ T6081] lo speed is unknown, defaulting to 1000 [ 85.488922][ T6232] netlink: 4 bytes leftover after parsing attributes in process `syz.1.95'. [ 85.829065][ T6246] netlink: 4 bytes leftover after parsing attributes in process `syz.1.98'. [ 85.858228][ T6081] lo speed is unknown, defaulting to 1000 [ 85.873106][ T6246] bridge_slave_1: left allmulticast mode [ 85.885303][ T6246] bridge_slave_1: left promiscuous mode [ 85.899775][ T6246] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.997077][ T6246] bridge_slave_0: left allmulticast mode [ 86.002772][ T6246] bridge_slave_0: left promiscuous mode [ 86.030666][ T6246] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.107952][ T6261] netlink: 4 bytes leftover after parsing attributes in process `syz.3.102'. [ 86.173867][ T6256] bond0: option ad_select: unable to set because the bond device is up [ 86.203386][ T6257] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 86.385027][ T6081] lo speed is unknown, defaulting to 1000 [ 86.446025][ T6269] netlink: 'syz.1.105': attribute type 1 has an invalid length. [ 86.805180][ T1209] cfg80211: failed to load regulatory.db [ 86.890053][ T6291] syzkaller1: entered promiscuous mode [ 86.913712][ T6291] syzkaller1: entered allmulticast mode [ 87.140469][ T6305] netlink: 'syz.4.114': attribute type 4 has an invalid length. [ 87.162376][ T6306] unsupported nlmsg_type 40 [ 87.169809][ T6305] netlink: 'syz.4.114': attribute type 4 has an invalid length. [ 87.337116][ T6315] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 87.710968][ T6333] netlink: 'syz.3.125': attribute type 2 has an invalid length. [ 87.753525][ T6339] netlink: 'syz.3.125': attribute type 2 has an invalid length. [ 87.810145][ T1209] IPVS: starting estimator thread 0... [ 87.826648][ T6333] syz.3.125 (6333) used greatest stack depth: 19096 bytes left [ 87.945914][ T6347] IPVS: using max 27 ests per chain, 64800 per kthread [ 88.596873][ T6390] netlink: 'syz.3.143': attribute type 1 has an invalid length. [ 88.633073][ T6390] netlink: 'syz.3.143': attribute type 3 has an invalid length. [ 88.753242][ T6392] dvmrp0: entered allmulticast mode [ 88.824722][ T6408] pimreg: entered allmulticast mode [ 88.847820][ T6408] netlink: 'syz.3.148': attribute type 15 has an invalid length. [ 88.867435][ T6408] pimreg: left allmulticast mode [ 89.043315][ T6418] Bluetooth: MGMT ver 1.23 [ 89.097385][ T6419] __nla_validate_parse: 15 callbacks suppressed [ 89.097403][ T6419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.152'. [ 89.233519][ T6425] pimreg: entered allmulticast mode [ 89.348067][ T6429] pimreg: left allmulticast mode [ 89.408098][ T6433] netlink: 16 bytes leftover after parsing attributes in process `syz.3.157'. [ 89.784337][ T6448] netlink: 44 bytes leftover after parsing attributes in process `syz.1.162'. [ 89.826053][ T6448] netlink: 43 bytes leftover after parsing attributes in process `syz.1.162'. [ 89.828088][ T6450] netlink: 'syz.3.163': attribute type 1 has an invalid length. [ 89.847696][ T6450] netlink: 'syz.3.163': attribute type 2 has an invalid length. [ 89.858129][ T6448] netlink: 'syz.1.162': attribute type 6 has an invalid length. [ 89.859204][ T6450] netlink: 'syz.3.163': attribute type 1 has an invalid length. [ 89.877396][ T6448] netlink: 'syz.1.162': attribute type 5 has an invalid length. [ 89.892047][ T6448] netlink: 43 bytes leftover after parsing attributes in process `syz.1.162'. [ 90.772345][ T6477] xfrm0 speed is unknown, defaulting to 1000 [ 90.806319][ T6477] xfrm0 speed is unknown, defaulting to 1000 [ 90.830334][ T6477] xfrm0 speed is unknown, defaulting to 1000 [ 90.859435][ T6477] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 90.870224][ T6483] netlink: 56 bytes leftover after parsing attributes in process `syz.2.173'. [ 90.892114][ T6483] netlink: 12 bytes leftover after parsing attributes in process `syz.2.173'. [ 90.902405][ T6477] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 90.929845][ T6483] netlink: 31 bytes leftover after parsing attributes in process `syz.2.173'. [ 90.939955][ T6483] netlink: 31 bytes leftover after parsing attributes in process `syz.2.173'. [ 90.964016][ T6477] xfrm0 speed is unknown, defaulting to 1000 [ 90.972159][ T6477] xfrm0 speed is unknown, defaulting to 1000 [ 90.982673][ T6477] xfrm0 speed is unknown, defaulting to 1000 [ 91.012059][ T6477] xfrm0 speed is unknown, defaulting to 1000 [ 91.039057][ T6477] xfrm0 speed is unknown, defaulting to 1000 [ 91.151547][ T6489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.175'. [ 91.187548][ T6489] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 91.562703][ T6517] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.571985][ T6517] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.582015][ T6517] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.590872][ T6517] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.839160][ T6528] xt_CT: No such helper "snmp_trap" [ 92.268900][ T6560] x_tables: unsorted entry at hook 3 [ 92.269364][ T6554] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 92.619998][ T6572] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.636949][ T6572] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.649511][ T6572] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 92.665384][ T6572] bond0 (unregistering): Released all slaves [ 94.251375][ T6620] __nla_validate_parse: 11 callbacks suppressed [ 94.251395][ T6620] netlink: 28 bytes leftover after parsing attributes in process `syz.2.213'. [ 94.322836][ T6620] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.402148][ T6620] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.530206][ T6637] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.552121][ T6643] bridge_slave_0: left allmulticast mode [ 94.579801][ T6643] bridge_slave_0: left promiscuous mode [ 94.599986][ T6643] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.637190][ T6648] netlink: 24 bytes leftover after parsing attributes in process `syz.1.222'. [ 94.678478][ T6643] bridge_slave_1: left allmulticast mode [ 94.686240][ T6643] bridge_slave_1: left promiscuous mode [ 94.713217][ T6643] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.750071][ T6643] bond0: (slave bond_slave_0): Releasing backup interface [ 94.795213][ T6643] bond0: (slave bond_slave_1): Releasing backup interface [ 94.798457][ T6659] IPVS: set_ctl: invalid protocol: 26467 117.112.0.5:20001 [ 94.822408][ T52] IPVS: starting estimator thread 0... [ 94.846861][ T6643] team0: Port device team_slave_0 removed [ 94.874677][ T6643] team0: Port device team_slave_1 removed [ 94.887137][ T6643] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.895256][ T6643] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.905658][ T6643] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.913689][ T6643] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.928482][ T978] lo speed is unknown, defaulting to 1000 [ 94.943223][ T6661] IPVS: using max 36 ests per chain, 86400 per kthread [ 95.079770][ T6663] macvlan2: entered promiscuous mode [ 95.472613][ T1209] IPVS: starting estimator thread 0... [ 95.822974][ T6674] IPVS: using max 35 ests per chain, 84000 per kthread [ 96.187840][ T6693] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.233'. [ 96.237956][ T6695] syzkaller1: entered promiscuous mode [ 96.269844][ T6695] syzkaller1: entered allmulticast mode [ 96.283171][ T6693] netlink: zone id is out of range [ 96.364862][ T6693] netlink: zone id is out of range [ 96.383060][ T6693] netlink: get zone limit has 8 unknown bytes [ 97.358711][ T6728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.241'. [ 97.730007][ T6747] bond0: option ad_select: unable to set because the bond device is up [ 98.026315][ T6763] netlink: 44 bytes leftover after parsing attributes in process `syz.2.254'. [ 98.043904][ T6763] netlink: 43 bytes leftover after parsing attributes in process `syz.2.254'. [ 98.073046][ T6763] validate_nla: 4 callbacks suppressed [ 98.073061][ T6763] netlink: 'syz.2.254': attribute type 5 has an invalid length. [ 98.088440][ T6763] netlink: 43 bytes leftover after parsing attributes in process `syz.2.254'. [ 98.118195][ T6763] netlink: 20 bytes leftover after parsing attributes in process `syz.2.254'. [ 98.163822][ T6771] netlink: 20 bytes leftover after parsing attributes in process `syz.1.258'. [ 98.173985][ T6771] netlink: 20 bytes leftover after parsing attributes in process `syz.1.258'. [ 98.366673][ T6738] Bluetooth: hci3: Opcode 0x080f failed: -4 [ 98.486090][ T6781] bridge1: entered allmulticast mode [ 98.971723][ T6810] netlink: 'syz.1.272': attribute type 33 has an invalid length. [ 99.057928][ T6812] team0: entered promiscuous mode [ 99.063162][ T6812] team_slave_0: entered promiscuous mode [ 99.086015][ T6812] team_slave_1: entered promiscuous mode [ 99.100386][ T6812] batadv_slave_1: entered promiscuous mode [ 99.539791][ T6835] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 99.563799][ T5842] Bluetooth: hci3: command 0x080f tx timeout [ 99.651827][ T6840] sock: sock_timestamping_bind_phc: sock not bind to device [ 99.887749][ T6857] netlink: 104 bytes leftover after parsing attributes in process `syz.0.287'. [ 99.981310][ T6860] netlink: 'syz.1.288': attribute type 10 has an invalid length. [ 100.055488][ T6860] team0: Device veth0_macvtap failed to register rx_handler [ 100.071708][ T6863] netlink: 108 bytes leftover after parsing attributes in process `syz.3.289'. [ 100.105696][ T6863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.289'. [ 100.508236][ T6893] netlink: 14 bytes leftover after parsing attributes in process `syz.1.296'. [ 100.761447][ T6909] x_tables: duplicate underflow at hook 2 [ 100.821741][ T6893] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.842118][ T6893] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.890674][ T6912] x_tables: duplicate entry at hook 1 [ 100.895858][ T6893] bond0 (unregistering): Released all slaves [ 101.120063][ T6919] netlink: 176 bytes leftover after parsing attributes in process `syz.3.307'. [ 101.187520][ T6919] ip6gretap0: entered promiscuous mode [ 101.194012][ T6931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.309'. [ 101.200249][ T6919] netlink: 176 bytes leftover after parsing attributes in process `syz.3.307'. [ 101.245080][ T6933] netlink: 'syz.1.310': attribute type 1 has an invalid length. [ 101.306636][ T6933] netlink: 'syz.1.310': attribute type 3 has an invalid length. [ 101.317694][ T6933] netlink: 224 bytes leftover after parsing attributes in process `syz.1.310'. [ 101.320222][ T6931] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 101.360315][ T6931] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 101.377704][ T6931] gretap1: entered promiscuous mode [ 101.385687][ T6931] gretap1: entered allmulticast mode [ 101.401600][ T6930] netlink: 340 bytes leftover after parsing attributes in process `syz.1.310'. [ 101.758851][ T6954] netlink: 'syz.2.316': attribute type 1 has an invalid length. [ 101.788522][ T6954] netlink: 'syz.2.316': attribute type 2 has an invalid length. [ 101.793771][ T6936] bridge_slave_0: entered promiscuous mode [ 101.950575][ T6962] netlink: 32 bytes leftover after parsing attributes in process `syz.1.319'. [ 102.249405][ T5211] udevd[5211]: worker [5861] terminated by signal 33 (Unknown signal 33) [ 102.279565][ T5211] udevd[5211]: worker [5861] failed while handling '/devices/virtual/block/loop0' [ 102.408384][ T6985] FAULT_INJECTION: forcing a failure. [ 102.408384][ T6985] name failslab, interval 1, probability 0, space 0, times 1 [ 102.455171][ T6985] CPU: 1 UID: 0 PID: 6985 Comm: syz.0.328 Not tainted 6.15.0-rc2-syzkaller-00282-gd861a5dbb960 #0 PREEMPT(full) [ 102.455219][ T6985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 102.455243][ T6985] Call Trace: [ 102.455250][ T6985] [ 102.455257][ T6985] dump_stack_lvl+0x241/0x360 [ 102.455295][ T6985] ? __pfx_dump_stack_lvl+0x10/0x10 [ 102.455318][ T6985] ? __pfx__printk+0x10/0x10 [ 102.455345][ T6985] ? __pfx___might_resched+0x10/0x10 [ 102.455367][ T6985] should_fail_ex+0x424/0x570 [ 102.455397][ T6985] should_failslab+0xac/0x100 [ 102.455417][ T6985] __kmalloc_noprof+0xdf/0x4d0 [ 102.455433][ T6985] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 102.455449][ T6985] ? apparmor_capable+0x13b/0x1b0 [ 102.455468][ T6985] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 102.455492][ T6985] genl_rcv_msg+0x819/0xf00 [ 102.455526][ T6985] ? __pfx_genl_rcv_msg+0x10/0x10 [ 102.455546][ T6985] ? __dev_queue_xmit+0x1780/0x3f60 [ 102.455561][ T6985] ? kasan_save_track+0x3f/0x80 [ 102.455580][ T6985] ? __kasan_slab_alloc+0x66/0x80 [ 102.455607][ T6985] ? do_syscall_64+0xf3/0x210 [ 102.455643][ T6985] ? __lock_acquire+0xad5/0xd80 [ 102.455666][ T6985] ? __pfx_mptcp_pm_nl_del_addr_doit+0x10/0x10 [ 102.455707][ T6985] netlink_rcv_skb+0x208/0x480 [ 102.455728][ T6985] ? __pfx_genl_rcv_msg+0x10/0x10 [ 102.455753][ T6985] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 102.455796][ T6985] ? netlink_deliver_tap+0x2e/0x1b0 [ 102.455823][ T6985] genl_rcv+0x28/0x40 [ 102.455844][ T6985] netlink_unicast+0x7f8/0x9a0 [ 102.455872][ T6985] ? __pfx_netlink_unicast+0x10/0x10 [ 102.455898][ T6985] ? skb_put+0x114/0x1f0 [ 102.455925][ T6985] netlink_sendmsg+0x8c3/0xcd0 [ 102.455959][ T6985] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.455984][ T6985] ? aa_sock_msg_perm+0x91/0x160 [ 102.456010][ T6985] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.456027][ T6985] __sock_sendmsg+0x221/0x270 [ 102.456051][ T6985] ____sys_sendmsg+0x523/0x860 [ 102.456076][ T6985] ? __pfx_____sys_sendmsg+0x10/0x10 [ 102.456089][ T6985] ? __fget_files+0x2a/0x420 [ 102.456109][ T6985] ? __fget_files+0x2a/0x420 [ 102.456134][ T6985] __sys_sendmsg+0x271/0x360 [ 102.456155][ T6985] ? __pfx___sys_sendmsg+0x10/0x10 [ 102.456230][ T6985] ? do_syscall_64+0xb6/0x210 [ 102.456250][ T6985] do_syscall_64+0xf3/0x210 [ 102.456267][ T6985] ? clear_bhb_loop+0x45/0xa0 [ 102.456286][ T6985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.456302][ T6985] RIP: 0033:0x7fb11e98e969 [ 102.456321][ T6985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.456333][ T6985] RSP: 002b:00007fb11f80b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.456351][ T6985] RAX: ffffffffffffffda RBX: 00007fb11ebb5fa0 RCX: 00007fb11e98e969 [ 102.456363][ T6985] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000006 [ 102.456373][ T6985] RBP: 00007fb11f80b090 R08: 0000000000000000 R09: 0000000000000000 [ 102.456383][ T6985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.456392][ T6985] R13: 0000000000000000 R14: 00007fb11ebb5fa0 R15: 00007fff0d4a8d18 [ 102.456421][ T6985] [ 102.991070][ T6990] netlink: 'syz.4.330': attribute type 1 has an invalid length. [ 103.071391][ T6997] netlink: 'syz.4.330': attribute type 1 has an invalid length. [ 103.288899][ T7022] Cannot find add_set index 0 as target [ 103.737040][ T7051] x_tables: duplicate underflow at hook 2 [ 103.755418][ T7051] x_tables: duplicate underflow at hook 1 [ 103.898286][ T7059] netlink: 'syz.4.352': attribute type 29 has an invalid length. [ 104.316616][ T7084] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 104.500326][ T7093] xt_l2tp: missing protocol rule (udp|l2tpip) [ 105.663099][ T7112] __nla_validate_parse: 45 callbacks suppressed [ 105.663118][ T7112] netlink: 20 bytes leftover after parsing attributes in process `syz.0.365'. [ 106.299640][ T7153] x_tables: ip6_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 106.324815][ T7155] sctp: [Deprecated]: syz.0.375 (pid 7155) Use of int in maxseg socket option. [ 106.324815][ T7155] Use struct sctp_assoc_value instead [ 106.691931][ T7169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.378'. [ 106.780958][ T7169] erspan0: entered promiscuous mode [ 106.829422][ T7169] macvtap1: entered promiscuous mode [ 106.838408][ T7169] macvtap1: entered allmulticast mode [ 106.853575][ T7169] erspan0: entered allmulticast mode [ 107.377091][ T7210] netlink: 'syz.2.388': attribute type 5 has an invalid length. [ 107.578717][ T10] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 107.588582][ T10] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 107.596194][ T10] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 107.604272][ T10] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 107.611681][ T10] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 107.619214][ T10] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 107.626745][ T10] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x3 [ 107.634764][ T10] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x1 [ 107.653589][ T10] hid-generic 0005:16C0:5505.0001: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 107.874978][ T52] IPVS: starting estimator thread 0... [ 108.004064][ T7232] IPVS: using max 27 ests per chain, 64800 per kthread [ 108.243963][ T7250] netlink: 20 bytes leftover after parsing attributes in process `syz.2.399'. [ 108.815693][ T7274] bridge_slave_0: left allmulticast mode [ 108.851198][ T7274] bridge_slave_0: left promiscuous mode [ 108.882327][ T7274] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.966512][ T7274] bridge_slave_1: left allmulticast mode [ 108.972200][ T7274] bridge_slave_1: left promiscuous mode [ 109.015152][ T7274] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.062275][ T7274] bond0: (slave bond_slave_0): Releasing backup interface [ 109.102566][ T7274] bond0: (slave bond_slave_1): Releasing backup interface [ 109.152643][ T7274] team_slave_0: left promiscuous mode [ 109.215724][ T7274] team0: Port device team_slave_0 removed [ 109.245092][ T7274] team_slave_1: left promiscuous mode [ 109.260097][ T7274] team0: Port device team_slave_1 removed [ 109.278564][ T7274] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.307152][ T7274] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.356423][ T7274] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.376599][ T7274] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.406445][ T7309] netlink: 128 bytes leftover after parsing attributes in process `syz.2.410'. [ 109.433064][ T7309] netlink: 20 bytes leftover after parsing attributes in process `syz.2.410'. [ 109.644970][ T7314] dccp_v4_rcv: dropped packet with invalid checksum [ 109.924827][ T7329] IPVS: set_ctl: invalid protocol: 108 10.1.1.1:20000 [ 110.249405][ T7347] netlink: 'syz.1.421': attribute type 21 has an invalid length. [ 110.277065][ T7347] IPv6: NLM_F_CREATE should be specified when creating new route [ 110.292572][ T7347] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 110.300150][ T7347] IPv6: NLM_F_CREATE should be set when creating new route [ 110.307474][ T7347] IPv6: NLM_F_CREATE should be set when creating new route [ 110.314782][ T7347] IPv6: NLM_F_CREATE should be set when creating new route [ 110.509004][ T7347] IPv6: Can't replace route, no match found [ 110.957786][ T7382] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 110.987229][ T7382] team0: Device macvtap1 is already an upper device of the team interface [ 111.256856][ T7401] netlink: 9 bytes leftover after parsing attributes in process `syz.1.436'. [ 111.267808][ T7402] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 111.320826][ T7401] ï‰Oܼ: renamed from hsr0 (while UP) [ 111.415280][ T7401] ï‰Oܼ: entered promiscuous mode [ 111.426643][ T7401] A link change request failed with some changes committed already. Interface ï‰Oܼ may have been left with an inconsistent configuration, please check. [ 111.505026][ T7405] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 111.546296][ T7413] netlink: 52 bytes leftover after parsing attributes in process `syz.0.438'. [ 111.557575][ T7413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.438'. [ 111.661930][ T7419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.438'. [ 111.779802][ T7425] netlink: 56 bytes leftover after parsing attributes in process `syz.1.442'. [ 112.172003][ T7442] x_tables: unsorted underflow at hook 2 [ 112.191713][ T7442] netlink: 'syz.4.447': attribute type 2 has an invalid length. [ 112.205382][ T7442] netlink: 'syz.4.447': attribute type 8 has an invalid length. [ 112.206651][ T7444] Driver unsupported XDP return value 0 on prog (id 75) dev N/A, expect packet loss! [ 112.263897][ T7442] netlink: 132 bytes leftover after parsing attributes in process `syz.4.447'. [ 112.579224][ T7463] netlink: 2 bytes leftover after parsing attributes in process `syz.3.451'. [ 112.689490][ T7463] netlink: 60 bytes leftover after parsing attributes in process `syz.3.451'. [ 112.713406][ T7465] netlink: 60 bytes leftover after parsing attributes in process `syz.3.451'. [ 112.758943][ T7480] IPv6: sit1: Disabled Multicast RS [ 112.786490][ T7480] sit1: entered allmulticast mode [ 113.046291][ T7498] netlink: 'syz.4.459': attribute type 1 has an invalid length. [ 113.224859][ T7513] FAULT_INJECTION: forcing a failure. [ 113.224859][ T7513] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 113.244385][ T7513] CPU: 1 UID: 0 PID: 7513 Comm: syz.3.461 Not tainted 6.15.0-rc2-syzkaller-00282-gd861a5dbb960 #0 PREEMPT(full) [ 113.244410][ T7513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 113.244420][ T7513] Call Trace: [ 113.244426][ T7513] [ 113.244433][ T7513] dump_stack_lvl+0x241/0x360 [ 113.244463][ T7513] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.244485][ T7513] ? __pfx__printk+0x10/0x10 [ 113.244518][ T7513] should_fail_ex+0x424/0x570 [ 113.244547][ T7513] _copy_to_user+0x31/0xb0 [ 113.244570][ T7513] simple_read_from_buffer+0xc4/0x170 [ 113.244598][ T7513] proc_fail_nth_read+0x1ef/0x260 [ 113.244618][ T7513] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 113.244637][ T7513] ? rw_verify_area+0x246/0x630 [ 113.244657][ T7513] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 113.244683][ T7513] vfs_read+0x21f/0xb90 [ 113.244710][ T7513] ? __pfx___mutex_lock+0x10/0x10 [ 113.244729][ T7513] ? __pfx_vfs_read+0x10/0x10 [ 113.244753][ T7513] ? __fget_files+0x2a/0x420 [ 113.244770][ T7513] ? __fget_files+0x39d/0x420 [ 113.244784][ T7513] ? __fget_files+0x2a/0x420 [ 113.244808][ T7513] ksys_read+0x19d/0x2d0 [ 113.244830][ T7513] ? __pfx_ksys_read+0x10/0x10 [ 113.244856][ T7513] ? do_syscall_64+0xb6/0x210 [ 113.244875][ T7513] do_syscall_64+0xf3/0x210 [ 113.244892][ T7513] ? clear_bhb_loop+0x45/0xa0 [ 113.244911][ T7513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.244925][ T7513] RIP: 0033:0x7f254ff8d37c [ 113.244940][ T7513] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 113.244953][ T7513] RSP: 002b:00007f2550e44030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 113.244972][ T7513] RAX: ffffffffffffffda RBX: 00007f25501b6080 RCX: 00007f254ff8d37c [ 113.244983][ T7513] RDX: 000000000000000f RSI: 00007f2550e440a0 RDI: 0000000000000007 [ 113.244994][ T7513] RBP: 00007f2550e44090 R08: 0000000000000000 R09: 0000000000000000 [ 113.245003][ T7513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 113.245013][ T7513] R13: 0000000000000000 R14: 00007f25501b6080 R15: 00007ffe702cc028 [ 113.245042][ T7513] [ 113.517873][ T7520] Bluetooth: MGMT ver 1.23 [ 113.875312][ T7536] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 113.942716][ T7536] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 113.959760][ T7536] gretap1: entered promiscuous mode [ 113.967215][ T7536] gretap1: entered allmulticast mode [ 113.996928][ T7551] netlink: 'syz.4.472': attribute type 4 has an invalid length. [ 114.047200][ T7548] netlink: 'syz.4.472': attribute type 4 has an invalid length. [ 114.079455][ T7530] syz.2.463 (7530) used greatest stack depth: 19032 bytes left [ 114.229601][ T7560] netlink: 36 bytes leftover after parsing attributes in process `syz.1.474'. [ 114.849978][ T7598] bridge_slave_1: left allmulticast mode [ 114.879946][ T7598] bridge_slave_1: left promiscuous mode [ 114.899900][ T7598] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.934914][ T7598] bridge_slave_0: left allmulticast mode [ 114.941684][ T7598] bridge_slave_0: left promiscuous mode [ 114.948123][ T7598] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.326463][ T7651] __nla_validate_parse: 6 callbacks suppressed [ 116.326483][ T7651] netlink: 12 bytes leftover after parsing attributes in process `syz.2.491'. [ 116.556910][ T7681] netlink: 'syz.1.498': attribute type 2 has an invalid length. [ 116.976654][ T7697] netlink: 'syz.0.503': attribute type 4 has an invalid length. [ 117.215338][ T7710] netlink: 20 bytes leftover after parsing attributes in process `syz.0.508'. [ 117.449903][ T7721] netlink: 48 bytes leftover after parsing attributes in process `syz.2.512'. [ 118.606785][ T7747] netlink: 12 bytes leftover after parsing attributes in process `syz.4.518'. [ 118.663182][ T7735] netlink: 108 bytes leftover after parsing attributes in process `syz.0.517'. [ 118.704095][ T7735] netlink: 108 bytes leftover after parsing attributes in process `syz.0.517'. [ 118.733696][ T7735] netlink: 84 bytes leftover after parsing attributes in process `syz.0.517'. [ 118.774879][ T7750] netlink: 40 bytes leftover after parsing attributes in process `syz.2.519'. [ 118.844203][ T7750] netlink: 'syz.2.519': attribute type 163 has an invalid length. [ 118.885836][ T7750] netlink: 80 bytes leftover after parsing attributes in process `syz.2.519'. [ 118.900960][ T7750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.922441][ T7757] netlink: 'syz.3.520': attribute type 10 has an invalid length. [ 119.055532][ T7757] batman_adv: batadv0: Adding interface: wlan0 [ 119.103326][ T7757] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.220208][ T7757] batman_adv: batadv0: Interface activated: wlan0 [ 119.325309][ T7778] xt_limit: Overflow, try lower: 0/0 [ 119.601567][ T7792] netlink: 20 bytes leftover after parsing attributes in process `syz.4.530'. [ 119.999209][ T7814] netlink: 'syz.1.538': attribute type 1 has an invalid length. [ 120.000018][ T7807] lo speed is unknown, defaulting to 1000 [ 120.027578][ T7814] netlink: 'syz.1.538': attribute type 1 has an invalid length. [ 120.894974][ T7851] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 121.181011][ T7863] DRBG: could not allocate digest TFM handle: hmac(sha384) [ 121.460745][ T7889] __nla_validate_parse: 8 callbacks suppressed [ 121.460763][ T7889] netlink: 20 bytes leftover after parsing attributes in process `syz.2.560'. [ 121.481321][ T7892] netlink: 24 bytes leftover after parsing attributes in process `syz.3.562'. [ 121.654809][ T7807] xfrm0 speed is unknown, defaulting to 1000 [ 121.744901][ T7898] netlink: 12 bytes leftover after parsing attributes in process `syz.1.564'. [ 121.787426][ T7905] Dead loop on virtual device ip6_vti0, fix it urgently! [ 121.812725][ T7898] tc_dump_action: action bad kind [ 121.832269][ T7905] Dead loop on virtual device ip6_vti0, fix it urgently! [ 121.854821][ T7905] Dead loop on virtual device ip6_vti0, fix it urgently! [ 121.869813][ T7905] Dead loop on virtual device ip6_vti0, fix it urgently! [ 121.878424][ T7905] Dead loop on virtual device ip6_vti0, fix it urgently! [ 121.896238][ T7898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.564'. [ 121.906702][ T7905] Dead loop on virtual device ip6_vti0, fix it urgently! [ 121.946619][ T7911] netlink: 40 bytes leftover after parsing attributes in process `syz.2.567'. [ 121.957819][ T7913] netlink: 64 bytes leftover after parsing attributes in process `syz.3.569'. [ 121.983052][ T7912] netlink: 64 bytes leftover after parsing attributes in process `syz.3.569'. [ 122.282621][ T7927] x_tables: duplicate underflow at hook 1 [ 122.656785][ T7942] xt_TCPMSS: Only works on TCP SYN packets [ 122.695076][ T7931] sit1: entered promiscuous mode [ 122.705252][ T7931] sit1: entered allmulticast mode [ 122.865883][ T7948] netlink: 'syz.0.580': attribute type 23 has an invalid length. [ 122.898863][ T7951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.580'. [ 122.947031][ T7951] openvswitch: netlink: nsh attr 0 has unexpected len 32764 expected 0 [ 123.004001][ T7951] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 123.554237][ T7979] netlink: 24 bytes leftover after parsing attributes in process `syz.2.590'. [ 123.568080][ T7978] ieee802154 phy0 wpan0: encryption failed: -22 [ 123.583383][ T7981] netlink: 16 bytes leftover after parsing attributes in process `syz.0.594'. [ 123.606122][ T7984] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 124.020190][ T7998] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.069130][ T7998] bond0: (slave bond1): Enslaving as an active interface with an up link [ 124.796831][ T8053] netlink: 'syz.0.620': attribute type 11 has an invalid length. [ 125.751507][ T8109] bond0: (slave macvlan3): Opening slave failed [ 125.755362][ T8113] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 126.074920][ T8128] pimreg: entered allmulticast mode [ 126.086690][ T8128] dvmrp0: left allmulticast mode [ 126.091766][ T8128] pimreg: left allmulticast mode [ 126.201814][ T8136] xt_CT: No such helper "pptp" [ 127.199911][ T8174] veth0: entered promiscuous mode [ 127.271667][ T8174] veth0: left promiscuous mode [ 127.385673][ T8187] __nla_validate_parse: 6 callbacks suppressed [ 127.385692][ T8187] netlink: 24 bytes leftover after parsing attributes in process `syz.1.651'. [ 127.651291][ T8201] netlink: 'syz.3.656': attribute type 21 has an invalid length. [ 127.659587][ T8201] netlink: 'syz.3.656': attribute type 1 has an invalid length. [ 128.730008][ T8253] syz.4.671: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 128.748815][ T8253] CPU: 0 UID: 0 PID: 8253 Comm: syz.4.671 Not tainted 6.15.0-rc2-syzkaller-00282-gd861a5dbb960 #0 PREEMPT(full) [ 128.748840][ T8253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 128.748858][ T8253] Call Trace: [ 128.748865][ T8253] [ 128.748872][ T8253] dump_stack_lvl+0x241/0x360 [ 128.748909][ T8253] ? __pfx_dump_stack_lvl+0x10/0x10 [ 128.748931][ T8253] ? __pfx__printk+0x10/0x10 [ 128.748952][ T8253] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 128.748973][ T8253] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 128.748990][ T8253] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 128.749010][ T8253] warn_alloc+0x27c/0x410 [ 128.749036][ T8253] ? __pfx_warn_alloc+0x10/0x10 [ 128.749063][ T8253] ? xskq_create+0xb6/0x170 [ 128.749078][ T8253] ? __get_vm_area_node+0x1c8/0x2d0 [ 128.749094][ T8253] ? __get_vm_area_node+0x25c/0x2d0 [ 128.749119][ T8253] __vmalloc_node_range_noprof+0x634/0x1390 [ 128.749172][ T8253] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 128.749195][ T8253] ? __kasan_kmalloc+0x9d/0xb0 [ 128.749221][ T8253] vmalloc_user_noprof+0x74/0x80 [ 128.749241][ T8253] ? xskq_create+0xb6/0x170 [ 128.749254][ T8253] xskq_create+0xb6/0x170 [ 128.749271][ T8253] xsk_init_queue+0xa1/0x100 [ 128.749298][ T8253] xsk_setsockopt+0x4f9/0x840 [ 128.749321][ T8253] ? __pfx_xsk_setsockopt+0x10/0x10 [ 128.749341][ T8253] ? __pfx_aa_sk_perm+0x10/0x10 [ 128.749358][ T8253] ? __lock_acquire+0xad5/0xd80 [ 128.749381][ T8253] ? aa_sock_opt_perm+0x79/0x120 [ 128.749406][ T8253] ? __pfx_xsk_setsockopt+0x10/0x10 [ 128.749427][ T8253] do_sock_setsockopt+0x3b1/0x710 [ 128.749457][ T8253] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 128.749477][ T8253] ? __fget_files+0x2a/0x420 [ 128.749495][ T8253] ? __fget_files+0x39d/0x420 [ 128.749509][ T8253] ? __fget_files+0x2a/0x420 [ 128.749532][ T8253] __x64_sys_setsockopt+0x187/0x210 [ 128.749561][ T8253] do_syscall_64+0xf3/0x210 [ 128.749580][ T8253] ? clear_bhb_loop+0x45/0xa0 [ 128.749599][ T8253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.749615][ T8253] RIP: 0033:0x7f21fc98e969 [ 128.749634][ T8253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.749647][ T8253] RSP: 002b:00007f21fd725038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 128.749665][ T8253] RAX: ffffffffffffffda RBX: 00007f21fcbb6160 RCX: 00007f21fc98e969 [ 128.749681][ T8253] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000003 [ 128.749690][ T8253] RBP: 00007f21fca10ab1 R08: 0000000000000004 R09: 0000000000000000 [ 128.749700][ T8253] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 128.749710][ T8253] R13: 0000000000000001 R14: 00007f21fcbb6160 R15: 00007ffc22a8ae98 [ 128.749739][ T8253] [ 128.749859][ T8253] Mem-Info: [ 129.032481][ T8253] active_anon:5550 inactive_anon:0 isolated_anon:0 [ 129.032481][ T8253] active_file:1239 inactive_file:38327 isolated_file:0 [ 129.032481][ T8253] unevictable:768 dirty:80 writeback:0 [ 129.032481][ T8253] slab_reclaimable:9745 slab_unreclaimable:103093 [ 129.032481][ T8253] mapped:28571 shmem:1441 pagetables:907 [ 129.032481][ T8253] sec_pagetables:0 bounce:0 [ 129.032481][ T8253] kernel_misc_reclaimable:0 [ 129.032481][ T8253] free:1332468 free_pcp:373 free_cma:0 [ 129.078903][ T8253] Node 0 active_anon:22200kB inactive_anon:0kB active_file:4956kB inactive_file:153232kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114184kB dirty:320kB writeback:0kB shmem:4228kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11220kB pagetables:3628kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 129.112750][ T8253] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 129.169422][ T8253] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 129.201079][ T8253] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 129.207978][ T8253] Node 0 DMA32 free:1412712kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:22092kB inactive_anon:0kB active_file:4956kB inactive_file:153140kB unevictable:1536kB writepending:320kB present:3129332kB managed:2547268kB mlocked:0kB bounce:0kB free_pcp:3064kB local_pcp:1052kB free_cma:0kB [ 129.240195][ T8253] lowmem_reserve[]: 0 0 0 0 0 [ 129.278946][ T8261] netlink: 4 bytes leftover after parsing attributes in process `syz.3.673'. [ 129.300784][ T8253] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 129.373991][ T8266] netlink: 96 bytes leftover after parsing attributes in process `syz.0.674'. [ 129.397152][ T8253] lowmem_reserve[]: 0 0 0 0 0 [ 129.401935][ T8253] Node 1 Normal free:3900704kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 129.450934][ T8253] lowmem_reserve[]: 0 0 0 0 0 [ 129.493047][ T8253] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 129.556329][ T8276] netlink: ct family unspecified [ 129.567009][ T8276] openvswitch: netlink: Actions may not be safe on all matching packets [ 129.575969][ T8253] Node 0 DMA32: 2*4kB (U) 51*8kB (UME) 43*16kB (UME) 85*32kB (UME) 68*64kB (UME) 109*128kB (UME) 54*256kB (UME) 38*512kB (UM) 20*1024kB (UM) 3*2048kB (M) 325*4096kB (M) = 1413232kB [ 129.610341][ T8253] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 129.711079][ T8253] Node 1 Normal: 260*4kB (UE) 60*8kB (UME) 51*16kB (UME) 234*32kB (UME) 107*64kB (UME) 38*128kB (UME) 21*256kB (UME) 6*512kB (UM) 2*1024kB (ME) 3*2048kB (UE) 943*4096kB (M) = 3900704kB [ 129.785252][ T8253] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 129.815388][ T8253] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 129.843682][ T8253] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 129.873493][ T8253] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 129.886988][ T8253] 41008 total pagecache pages [ 129.892025][ T8253] 0 pages in swap cache [ 129.923569][ T8253] Free swap = 124996kB [ 129.931351][ T8253] Total swap = 124996kB [ 129.949642][ T8253] 2097051 pages RAM [ 129.968708][ T8297] sctp: [Deprecated]: syz.2.684 (pid 8297) Use of int in maxseg socket option. [ 129.968708][ T8297] Use struct sctp_assoc_value instead [ 129.981540][ T8253] 0 pages HighMem/MovableOnly [ 129.996564][ T8253] 428576 pages reserved [ 130.000757][ T8253] 0 pages cma reserved [ 130.283398][ T55] Bluetooth: hci4: command 0x0405 tx timeout [ 130.380559][ T8320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.691'. [ 130.401071][ T8320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.691'. [ 130.539368][ T8333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.241247][ T8341] syz.3.699 (8341) used obsolete PPPIOCDETACH ioctl [ 131.262378][ T8341] netlink: 12 bytes leftover after parsing attributes in process `syz.3.699'. [ 131.284537][ T8341] geneve2: entered promiscuous mode [ 131.433341][ T8349] netlink: 'syz.1.704': attribute type 3 has an invalid length. [ 131.489193][ T8351] netlink: 216 bytes leftover after parsing attributes in process `syz.4.705'. [ 131.523551][ T8351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.705'. [ 131.808659][ T8367] netlink: 96 bytes leftover after parsing attributes in process `syz.2.709'. [ 131.952136][ T8379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.714'. [ 132.191944][ T8388] netlink: zone id is out of range [ 132.210753][ T8388] netlink: get zone limit has 8 unknown bytes [ 132.279711][ T8396] openvswitch: netlink: Flow actions attr not present in new flow. [ 132.347507][ T8396] No such timeout policy "syz0" [ 132.517778][ T8409] netlink: 'syz.2.724': attribute type 4 has an invalid length. [ 132.545390][ T8409] __nla_validate_parse: 3 callbacks suppressed [ 132.545407][ T8409] netlink: 17 bytes leftover after parsing attributes in process `syz.2.724'. [ 132.769156][ T8423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.727'. [ 132.850636][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.857098][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.589216][ T8463] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 133.612202][ T8463] netlink: 'syz.2.739': attribute type 11 has an invalid length. [ 133.896187][ T8473] netlink: 48 bytes leftover after parsing attributes in process `syz.2.743'. [ 133.929783][ T8481] netlink: 8 bytes leftover after parsing attributes in process `syz.3.747'. [ 133.999654][ T8485] netlink: 8 bytes leftover after parsing attributes in process `syz.3.747'. [ 134.018190][ T8484] netlink: 56 bytes leftover after parsing attributes in process `syz.1.749'. [ 134.102829][ T8484] lo speed is unknown, defaulting to 1000 [ 134.193272][ T8494] netlink: 12 bytes leftover after parsing attributes in process `syz.3.750'. [ 134.209254][ T8494] netlink: 12 bytes leftover after parsing attributes in process `syz.3.750'. [ 134.360682][ T8500] netlink: 24 bytes leftover after parsing attributes in process `syz.3.751'. [ 134.507225][ T8501] netlink: 24 bytes leftover after parsing attributes in process `syz.3.751'. [ 134.677682][ T8506] netlink: 'syz.3.752': attribute type 7 has an invalid length. [ 134.686635][ T8484] xfrm0 speed is unknown, defaulting to 1000 [ 134.693695][ T8506] netlink: 'syz.3.752': attribute type 8 has an invalid length. [ 134.727322][ T8506] bond0: entered promiscuous mode [ 134.737658][ T8506] syz_tun: entered promiscuous mode [ 134.750004][ T8506] gretap0: entered promiscuous mode [ 134.757464][ T8506] hsr2: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 134.962825][ T8519] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 135.158844][ T8528] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 135.237246][ T1209] IPVS: starting estimator thread 0... [ 135.259919][ T8528] macvlan3: entered promiscuous mode [ 135.272241][ T8528] macvlan3: entered allmulticast mode [ 135.337162][ T8537] IPVS: using max 30 ests per chain, 72000 per kthread [ 135.526873][ T8547] netlink: 'syz.2.763': attribute type 11 has an invalid length. [ 135.597563][ T8551] x_tables: duplicate underflow at hook 1 [ 135.623001][ T8552] x_tables: duplicate underflow at hook 1 [ 135.937035][ T8565] x_tables: duplicate underflow at hook 1 [ 135.969402][ T8564] pimreg: entered allmulticast mode [ 136.449072][ T8589] netlink: 'syz.2.780': attribute type 15 has an invalid length. [ 136.468286][ T8590] netlink: 'syz.2.780': attribute type 15 has an invalid length. [ 136.540645][ T30] audit: type=1800 audit(1745521745.183:2): pid=8578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.776" name="cgroup.controllers" dev="tmpfs" ino=691 res=0 errno=0 [ 137.106360][ T8617] netlink: 'syz.3.787': attribute type 10 has an invalid length. [ 137.127116][ T8622] netlink: 'syz.3.787': attribute type 10 has an invalid length. [ 137.264173][ T8632] set match dimension is over the limit! [ 137.966188][ T55] Bluetooth: hci4: command 0x0405 tx timeout [ 138.263383][ T8655] x_tables: duplicate underflow at hook 3 [ 138.923943][ T8669] __nla_validate_parse: 10 callbacks suppressed [ 138.923964][ T8669] netlink: 16 bytes leftover after parsing attributes in process `syz.2.798'. [ 140.378652][ T8689] netlink: 'syz.1.805': attribute type 2 has an invalid length. [ 140.741022][ T8719] netlink: 132 bytes leftover after parsing attributes in process `syz.1.812'. [ 140.778409][ T8722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.814'. [ 140.899213][ T8726] netlink: 80 bytes leftover after parsing attributes in process `syz.1.817'. [ 141.310242][ T8747] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 141.406187][ T8745] pim6reg: entered allmulticast mode [ 141.425980][ T8749] pim6reg: left allmulticast mode [ 141.455088][ T8747] input: failed to attach handler evdev to device input5, error: -4 [ 141.509158][ T8765] netlink: 20 bytes leftover after parsing attributes in process `syz.4.827'. [ 141.838807][ T8782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.832'. [ 142.789643][ T8777] tunl0: entered promiscuous mode [ 142.806313][ T8777] netlink: 'syz.1.831': attribute type 3 has an invalid length. [ 142.844736][ T8777] netlink: 9 bytes leftover after parsing attributes in process `syz.1.831'. [ 143.032282][ T8786] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.833'. [ 143.216022][ T8805] netlink: 'syz.4.838': attribute type 32 has an invalid length. [ 143.615003][ T8823] netlink: 'syz.1.844': attribute type 10 has an invalid length. [ 143.635674][ T8823] veth0_vlan: entered allmulticast mode [ 143.681748][ T8823] team0: Device veth0_vlan failed to register rx_handler [ 143.747144][ T8825] netlink: 12 bytes leftover after parsing attributes in process `syz.2.845'. [ 143.763717][ T8823] syz.1.844 (8823) used greatest stack depth: 16984 bytes left [ 143.778908][ T8825] tc_dump_action: action bad kind [ 143.947245][ T992] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.128862][ T8832] netlink: 'syz.1.848': attribute type 13 has an invalid length. [ 144.132953][ T992] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.177289][ T8842] netlink: 68 bytes leftover after parsing attributes in process `syz.4.851'. [ 144.356259][ T8842] netlink: 666 bytes leftover after parsing attributes in process `syz.4.851'. [ 144.381409][ T8851] netlink: 20 bytes leftover after parsing attributes in process `syz.1.848'. [ 144.478349][ T8830] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 144.590541][ T992] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.678659][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 144.689071][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 144.702216][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 144.712730][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 144.725039][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 144.800699][ T992] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.836853][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802486c000: rx timeout, send abort [ 144.839629][ T8877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.909636][ T8879] netlink: 'syz.1.857': attribute type 10 has an invalid length. [ 144.958775][ T8867] lo speed is unknown, defaulting to 1000 [ 145.302357][ T8892] unsupported nla_type 52263 [ 145.337607][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802486e000: rx timeout, send abort [ 145.346867][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802486c000: abort rx timeout. Force session deactivation [ 145.672485][ T8915] netlink: 'syz.4.865': attribute type 6 has an invalid length. [ 145.717695][ T8911] xt_CT: No such helper "pptp" [ 145.845896][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802486e000: abort rx timeout. Force session deactivation [ 146.106817][ T992] bond0 (unregistering): Released all slaves [ 146.133018][ T8867] xfrm0 speed is unknown, defaulting to 1000 [ 146.375674][ T8934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.869'. [ 146.388892][ T8934] netlink: 12 bytes leftover after parsing attributes in process `syz.2.869'. [ 146.782998][ T55] Bluetooth: hci4: command tx timeout [ 146.865564][ T8962] netlink: 'syz.4.874': attribute type 1 has an invalid length. [ 146.916544][ T8962] netlink: 'syz.4.874': attribute type 1 has an invalid length. [ 146.929615][ T8967] netlink: 'syz.1.876': attribute type 24 has an invalid length. [ 146.996164][ T8973] netlink: 'syz.2.877': attribute type 10 has an invalid length. [ 147.246244][ T8973] team0: Device veth1_macvtap failed to register rx_handler [ 147.316066][ T8983] netlink: 128 bytes leftover after parsing attributes in process `syz.4.879'. [ 147.363147][ T992] hsr_slave_0: left promiscuous mode [ 147.387577][ T992] hsr_slave_1: left promiscuous mode [ 147.413677][ T8990] netlink: 128 bytes leftover after parsing attributes in process `syz.4.879'. [ 147.442507][ T992] veth1_macvtap: left promiscuous mode [ 147.454119][ T992] veth0_macvtap: left promiscuous mode [ 147.460528][ T992] veth1_vlan: left promiscuous mode [ 147.471917][ T992] veth0_vlan: left promiscuous mode [ 147.618433][ T9003] x_tables: duplicate underflow at hook 2 [ 148.362218][ T12] smc: removing ib device syz0 [ 148.844045][ T55] Bluetooth: hci4: command tx timeout [ 149.941118][ T8983] validate_nla: 2 callbacks suppressed [ 149.941133][ T8983] netlink: 'syz.4.879': attribute type 4 has an invalid length. [ 149.956112][ T8983] netlink: 'syz.4.879': attribute type 5 has an invalid length. [ 149.965642][ T8983] netlink: 3 bytes leftover after parsing attributes in process `syz.4.879'. [ 149.976129][ T8990] netlink: 'syz.4.879': attribute type 4 has an invalid length. [ 149.991237][ T8990] netlink: 'syz.4.879': attribute type 5 has an invalid length. [ 150.031362][ T8990] netlink: 3 bytes leftover after parsing attributes in process `syz.4.879'. [ 150.090345][ T5847] lo speed is unknown, defaulting to 1000 [ 150.115406][ T8867] chnl_net:caif_netlink_parms(): no params data found [ 150.122342][ T5847] syz0: Port: 1 Link DOWN [ 150.364435][ T9032] nbd: couldn't find device at index 65536 [ 150.406285][ T9033] netlink: 'syz.4.889': attribute type 4 has an invalid length. [ 150.582001][ T9042] netlink: 60 bytes leftover after parsing attributes in process `syz.4.891'. [ 150.691195][ T9042] netlink: 20 bytes leftover after parsing attributes in process `syz.4.891'. [ 150.750539][ T8867] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.777026][ T8867] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.789005][ T8867] bridge_slave_0: entered allmulticast mode [ 150.802057][ T8867] bridge_slave_0: entered promiscuous mode [ 150.816262][ T8867] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.827508][ T8867] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.836117][ T8867] bridge_slave_1: entered allmulticast mode [ 150.850068][ T8867] bridge_slave_1: entered promiscuous mode [ 150.923297][ T55] Bluetooth: hci4: command tx timeout [ 151.010091][ T8867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.021665][ T992] IPVS: stop unused estimator thread 0... [ 151.062710][ T8867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.203472][ T9078] netlink: 16 bytes leftover after parsing attributes in process `syz.3.897'. [ 151.220773][ T8867] team0: Port device team_slave_0 added [ 151.238881][ T8867] team0: Port device team_slave_1 added [ 151.443892][ T8867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.466414][ T8867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.492959][ T9085] sock: sock_timestamping_bind_phc: sock not bind to device [ 151.515269][ T8867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.585744][ T9090] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 151.595092][ T8867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.602299][ T8867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.656563][ T8867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.777845][ T8867] hsr_slave_0: entered promiscuous mode [ 151.793946][ T8867] hsr_slave_1: entered promiscuous mode [ 151.810485][ T8867] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.822925][ T8867] Cannot create hsr debugfs directory [ 151.857366][ T9102] IPVS: set_ctl: invalid protocol: 47 100.1.1.0:20003 [ 152.086012][ T9113] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 152.143566][ T9118] netlink: 32 bytes leftover after parsing attributes in process `syz.2.912'. [ 152.256156][ T9126] netlink: 'syz.1.913': attribute type 4 has an invalid length. [ 152.313053][ T9128] netlink: 'syz.1.913': attribute type 4 has an invalid length. [ 152.377675][ T9137] netlink: 'syz.2.916': attribute type 2 has an invalid length. [ 152.388927][ T9137] netlink: 244 bytes leftover after parsing attributes in process `syz.2.916'. [ 152.498831][ T9132] batman_adv: batadv0: Interface deactivated: wlan0 [ 152.514887][ T9132] batman_adv: batadv0: Removing interface: wlan0 [ 153.003205][ T55] Bluetooth: hci4: command tx timeout [ 153.077972][ T9177] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 153.107503][ T9178] netlink: 12 bytes leftover after parsing attributes in process `syz.3.923'. [ 153.170138][ T9174] can: request_module (can-proto-4) failed. [ 153.374270][ T9194] netlink: 13 bytes leftover after parsing attributes in process `syz.2.929'. [ 153.479806][ T9197] netlink: 20 bytes leftover after parsing attributes in process `syz.1.930'. [ 153.507818][ T9197] netlink: 'syz.1.930': attribute type 1 has an invalid length. [ 153.837127][ T8867] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 153.860812][ T8867] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 153.922982][ T8867] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 153.949682][ T9207] netlink: 'syz.3.932': attribute type 10 has an invalid length. [ 153.950555][ T8867] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 154.108363][ T9207] geneve0: entered promiscuous mode [ 154.116607][ T9207] team0: Port device geneve0 added [ 154.240993][ T9222] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.335378][ T9222] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.443379][ T9238] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 154.716726][ T8867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.760062][ T8867] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.833847][ T8643] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.841094][ T8643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.892186][ T8643] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.899414][ T8643] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.908459][ T9248] xt_TCPMSS: Only works on TCP SYN packets [ 155.121088][ T9262] __nla_validate_parse: 9 callbacks suppressed [ 155.121109][ T9262] netlink: 12 bytes leftover after parsing attributes in process `syz.3.945'. [ 155.147168][ T9262] geneve2: entered promiscuous mode [ 155.182723][ T9269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.946'. [ 155.581354][ T8867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.610033][ T9289] lo speed is unknown, defaulting to 1000 [ 155.667183][ T9289] lo speed is unknown, defaulting to 1000 [ 155.731974][ T8867] veth0_vlan: entered promiscuous mode [ 155.750610][ T9289] lo speed is unknown, defaulting to 1000 [ 155.759429][ T9296] netlink: 'syz.4.950': attribute type 10 has an invalid length. [ 155.773694][ T8867] veth1_vlan: entered promiscuous mode [ 155.811408][ T9296] veth1_macvtap: left promiscuous mode [ 155.901435][ T9296] openvswitch: netlink: Key type 30 is not supported [ 155.915957][ T9289] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 155.924016][ T8867] veth0_macvtap: entered promiscuous mode [ 155.976135][ T8867] veth1_macvtap: entered promiscuous mode [ 156.057426][ T8867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.061334][ T9296] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.092063][ T8867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.116102][ T8867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.140986][ T8867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.163869][ T9298] netlink: 157 bytes leftover after parsing attributes in process `syz.4.950'. [ 156.186991][ T8867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.208062][ T8867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.249098][ T8867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.302293][ T9289] lo speed is unknown, defaulting to 1000 [ 156.332054][ T8867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.374336][ T8867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.409844][ T8867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.460628][ T8867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.480864][ T8867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.511036][ T8867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.546726][ T8867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.602731][ T9289] lo speed is unknown, defaulting to 1000 [ 156.616334][ T9313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.953'. [ 156.647496][ T8867] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.665170][ T8867] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.677122][ T8867] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.687207][ T8867] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.702344][ T9289] lo speed is unknown, defaulting to 1000 [ 156.788141][ T9289] lo speed is unknown, defaulting to 1000 [ 156.810098][ T9289] lo speed is unknown, defaulting to 1000 [ 156.935012][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.967031][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.085703][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.132084][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.275122][ T9350] x_tables: duplicate underflow at hook 1 [ 157.303779][ T9350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.961'. [ 157.362307][ T9350] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 157.379216][ T9350] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 157.388962][ T9350] gretap3: entered promiscuous mode [ 157.403126][ T9350] gretap3: entered allmulticast mode [ 157.510239][ T9359] netlink: 'syz.4.965': attribute type 1 has an invalid length. [ 157.526959][ T9359] netlink: 'syz.4.965': attribute type 4 has an invalid length. [ 157.586479][ T9359] netlink: 188 bytes leftover after parsing attributes in process `syz.4.965'. [ 157.653060][ T9359] NCSI netlink: No device for ifindex 458760 [ 158.096156][ T1164] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.354672][ T1164] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.411889][ T9405] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 158.438142][ T9405] netlink: 'syz.1.974': attribute type 33 has an invalid length. [ 158.532077][ T1164] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.581265][ T9410] netlink: 32 bytes leftover after parsing attributes in process `syz.3.976'. [ 158.600834][ T9410] netlink: 32 bytes leftover after parsing attributes in process `syz.3.976'. [ 158.789303][ T1164] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.229355][ T9445] netlink: 146840 bytes leftover after parsing attributes in process `syz.1.984'. [ 159.414433][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 159.433083][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 159.441413][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 159.443751][ T1164] bridge_slave_1: left allmulticast mode [ 159.449769][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 159.461954][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 159.528342][ T1164] bridge_slave_1: left promiscuous mode [ 159.567167][ T1164] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.628507][ T9462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.988'. [ 159.642621][ T1164] bridge_slave_0: left allmulticast mode [ 159.668978][ T1164] bridge_slave_0: left promiscuous mode [ 159.686747][ T1164] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.278925][ T1164] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.290749][ T1164] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.300886][ T1164] bond0 (unregistering): Released all slaves [ 160.328798][ T9465] pim6reg: entered allmulticast mode [ 160.343978][ T9470] netlink: 'syz.4.991': attribute type 2 has an invalid length. [ 160.543882][ T9491] xt_TCPMSS: Only works on TCP SYN packets [ 160.670798][ T9450] xfrm0 speed is unknown, defaulting to 1000 [ 160.695823][ T9501] netlink: 144 bytes leftover after parsing attributes in process `syz.3.997'. [ 160.714824][ T9450] lo speed is unknown, defaulting to 1000 [ 160.844866][ T9511] netlink: 4 bytes leftover after parsing attributes in process `syz.3.999'. [ 161.148905][ T1164] hsr_slave_0: left promiscuous mode [ 161.169318][ T1164] hsr_slave_1: left promiscuous mode [ 161.189534][ T1164] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.213967][ T1164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.256705][ T1164] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.274730][ T1164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.354739][ T1164] veth1_macvtap: left promiscuous mode [ 161.360314][ T1164] veth0_macvtap: left promiscuous mode [ 161.371040][ T1164] veth1_vlan: left promiscuous mode [ 161.376548][ T1164] veth0_vlan: left promiscuous mode [ 161.562996][ T55] Bluetooth: hci4: command tx timeout [ 161.829104][ T1164] team0 (unregistering): Port device team_slave_1 removed [ 161.865534][ T1164] team0 (unregistering): Port device team_slave_0 removed [ 162.373433][ T9561] netlink: 'syz.1.1009': attribute type 8 has an invalid length. [ 162.636325][ T9558] batadv_slave_1 (unregistering): left promiscuous mode [ 162.706330][ T9450] chnl_net:caif_netlink_parms(): no params data found [ 163.001220][ T9590] netlink: 'syz.1.1016': attribute type 1 has an invalid length. [ 163.029799][ T9590] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 163.037260][ T9590] IPv6: NLM_F_CREATE should be set when creating new route [ 163.147508][ T9590] netlink: 'syz.1.1016': attribute type 1 has an invalid length. [ 163.196925][ T9590] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 163.315352][ T9450] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.353047][ T9450] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.360383][ T9450] bridge_slave_0: entered allmulticast mode [ 163.394816][ T9450] bridge_slave_0: entered promiscuous mode [ 163.430219][ T9450] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.461112][ T9615] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1020'. [ 163.467143][ T9450] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.490991][ T9620] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1023'. [ 163.509788][ T9450] bridge_slave_1: entered allmulticast mode [ 163.519711][ T9450] bridge_slave_1: entered promiscuous mode [ 163.647174][ T55] Bluetooth: hci4: command tx timeout [ 163.771496][ T9629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1025'. [ 163.788565][ T9633] netlink: 'syz.4.1026': attribute type 4 has an invalid length. [ 163.802758][ T9450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.830174][ T9629] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1025'. [ 163.847793][ T9636] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1027'. [ 163.850486][ T9450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.967656][ T9629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1025'. [ 163.984665][ T9629] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1025'. [ 164.066364][ T9629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1025'. [ 164.097530][ T9450] team0: Port device team_slave_0 added [ 164.130922][ T9450] team0: Port device team_slave_1 added [ 164.261090][ T9450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.268134][ T9450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.301011][ T9450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.422335][ T9450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.432578][ T9450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.466012][ T9450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.488283][ T9662] netlink: 'syz.3.1033': attribute type 15 has an invalid length. [ 164.728837][ T9450] hsr_slave_0: entered promiscuous mode [ 164.747756][ T9450] hsr_slave_1: entered promiscuous mode [ 164.764217][ T9450] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 164.772955][ T9450] Cannot create hsr debugfs directory [ 165.308687][ T9700] netlink: 'syz.1.1041': attribute type 1 has an invalid length. [ 165.357472][ T9703] tc_dump_action: action bad kind [ 165.525253][ T9719] netlink: 'syz.4.1045': attribute type 1 has an invalid length. [ 165.581255][ T9708] tunl0: left promiscuous mode [ 165.681723][ T9714] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 165.698755][ T992] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 165.729925][ T55] Bluetooth: hci4: command tx timeout [ 165.778689][ T9700] 8021q: adding VLAN 0 to HW filter on device bond1 [ 165.810437][ T9734] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 165.841312][ T9725] veth3: entered promiscuous mode [ 165.856466][ T13] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 165.871054][ T9725] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 165.936411][ T9724] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 165.964242][ T5906] lo speed is unknown, defaulting to 1000 [ 165.979480][ T5906] syz2: Port: 1 Link DOWN [ 166.152439][ T9743] __nla_validate_parse: 87 callbacks suppressed [ 166.152455][ T9743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1048'. [ 166.173208][ T9743] netlink: 50 bytes leftover after parsing attributes in process `syz.3.1048'. [ 166.182325][ T9743] netlink: 50 bytes leftover after parsing attributes in process `syz.3.1048'. [ 166.220292][ T9748] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 166.426615][ T9761] netlink: 'syz.3.1054': attribute type 2 has an invalid length. [ 166.434668][ T9761] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1054'. [ 166.464588][ T9762] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1052'. [ 166.489771][ T9757] bond0: entered promiscuous mode [ 166.503420][ T9757] bond0: entered allmulticast mode [ 166.513723][ T9757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.616335][ T9767] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1056'. [ 166.741294][ T9757] bond0 (unregistering): Released all slaves [ 166.871502][ T9762] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1052'. [ 166.882599][ T9773] hsr0: entered promiscuous mode [ 167.162264][ T9450] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 167.284061][ T9450] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 167.357311][ T9450] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 167.384963][ T9450] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 167.394742][ T9799] netlink: 'syz.4.1061': attribute type 29 has an invalid length. [ 167.440042][ T9773] hsr0: left promiscuous mode [ 167.530524][ T9804] ipvlan0: entered promiscuous mode [ 167.548652][ T9804] ipvlan0: entered allmulticast mode [ 167.578145][ T9804] veth0_vlan: entered allmulticast mode [ 167.631759][ T9812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1063'. [ 167.807597][ T55] Bluetooth: hci4: command tx timeout [ 167.896053][ T9450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.932368][ T9450] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.963447][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.970676][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.027330][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.030951][ T9832] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1068'. [ 168.034545][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.244841][ T9834] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 168.540868][ T9858] netlink: 'syz.4.1076': attribute type 11 has an invalid length. [ 168.570472][ T9859] netlink: 'syz.4.1076': attribute type 11 has an invalid length. [ 168.621088][ T9858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1076'. [ 168.729516][ T9450] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.822579][ T9450] veth0_vlan: entered promiscuous mode [ 168.841499][ T9450] veth1_vlan: entered promiscuous mode [ 168.886845][ T9450] veth0_macvtap: entered promiscuous mode [ 168.898073][ T9450] veth1_macvtap: entered promiscuous mode [ 168.937226][ T9450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.966772][ T9450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.003793][ T9450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.027080][ T9450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.063734][ T9450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.087209][ T9450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.101936][ T9450] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.157070][ T9450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.202320][ T9450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.245313][ T9450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.288649][ T9450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.356035][ T9450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.386436][ T9450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.420808][ T9450] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.457526][ T9903] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 169.517202][ T9903] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 169.542689][ T9904] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 169.552496][ T9904] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 169.569385][ T9450] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.587298][ T9450] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.647396][ T9450] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.690616][ T9450] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.416638][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.473097][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.580896][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.610130][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.798535][ T9967] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 170.817457][ T9970] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 170.831233][ T9967] netlink: 'syz.4.1101': attribute type 11 has an invalid length. [ 170.946270][ T9970] team0: Port device team_slave_0 removed [ 171.084027][ T55] Bluetooth: hci2: command tx timeout [ 171.212283][ T9985] bond2: entered promiscuous mode [ 171.221891][ T9991] __nla_validate_parse: 8 callbacks suppressed [ 171.221909][ T9991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1109'. [ 171.228109][ T9985] 8021q: adding VLAN 0 to HW filter on device bond2 [ 171.401781][T10001] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1107'. [ 171.600783][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.744037][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.925210][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.958908][T10023] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 172.109929][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.167328][T10028] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1118'. [ 172.192458][T10028] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.1118'. [ 172.212364][T10028] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.1118'. [ 172.269336][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 172.287215][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 172.299780][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 172.311018][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 172.319491][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 172.483547][ T12] bridge_slave_1: left allmulticast mode [ 172.489240][ T12] bridge_slave_1: left promiscuous mode [ 172.518384][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.532767][ T12] bridge_slave_0: left allmulticast mode [ 172.538899][ T12] bridge_slave_0: left promiscuous mode [ 172.545113][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.952490][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.965169][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.975665][ T12] bond0 (unregistering): Released all slaves [ 172.994634][T10036] xfrm0 speed is unknown, defaulting to 1000 [ 173.047975][T10036] lo speed is unknown, defaulting to 1000 [ 173.421383][T10087] xt_TPROXY: Can be used only with -p tcp or -p udp [ 173.440890][T10091] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1131'. [ 173.613932][T10085] virt_wifi0 speed is unknown, defaulting to 1000 [ 173.615835][T10088] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 173.632048][T10088] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 173.673301][T10085] virt_wifi0 speed is unknown, defaulting to 1000 [ 173.688147][T10083] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 173.737857][T10085] virt_wifi0 speed is unknown, defaulting to 1000 [ 173.778916][T10085] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 173.843369][T10111] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1134'. [ 173.870611][T10085] virt_wifi0 speed is unknown, defaulting to 1000 [ 173.899735][T10081] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 173.928435][T10085] virt_wifi0 speed is unknown, defaulting to 1000 [ 173.948062][T10111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1134'. [ 174.063577][T10085] virt_wifi0 speed is unknown, defaulting to 1000 [ 174.070173][T10118] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1135'. [ 174.153749][T10085] virt_wifi0 speed is unknown, defaulting to 1000 [ 174.197090][T10085] virt_wifi0 speed is unknown, defaulting to 1000 [ 174.198381][T10127] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1136'. [ 174.252324][T10085] virt_wifi0 speed is unknown, defaulting to 1000 [ 174.365352][ T55] Bluetooth: hci4: command tx timeout [ 174.373808][ T12] hsr_slave_0: left promiscuous mode [ 174.397213][ T12] hsr_slave_1: left promiscuous mode [ 174.405892][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.415523][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.457010][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.478422][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.554532][ T12] veth1_macvtap: left promiscuous mode [ 174.560188][ T12] veth0_macvtap: left promiscuous mode [ 174.566544][ T12] veth1_vlan: left promiscuous mode [ 174.572604][ T12] veth0_vlan: left promiscuous mode [ 174.985075][ T12] team0 (unregistering): Port device team_slave_1 removed [ 175.025314][ T12] team0 (unregistering): Port device team_slave_0 removed [ 175.449287][T10137] syzkaller0: entered promiscuous mode [ 175.454977][T10137] syzkaller0: entered allmulticast mode [ 176.453009][ T55] Bluetooth: hci4: command tx timeout [ 176.865177][T10036] chnl_net:caif_netlink_parms(): no params data found [ 177.143009][T10191] veth0_to_hsr: entered promiscuous mode [ 177.168824][T10191] netlink: 'syz.1.1149': attribute type 4 has an invalid length. [ 177.499675][T10207] __nla_validate_parse: 5 callbacks suppressed [ 177.499695][T10207] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1153'. [ 178.490743][T10190] veth0_to_hsr: left promiscuous mode [ 178.533372][ T55] Bluetooth: hci4: command tx timeout [ 178.592306][T10213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1154'. [ 178.601224][T10208] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 178.729849][T10218] tipc: Can't bind to reserved service type 2 [ 178.959407][T10221] netlink: 'syz.1.1157': attribute type 1 has an invalid length. [ 178.967463][T10221] netlink: 'syz.1.1157': attribute type 2 has an invalid length. [ 179.168077][T10036] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.213170][T10036] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.220427][T10036] bridge_slave_0: entered allmulticast mode [ 179.244213][T10036] bridge_slave_0: entered promiscuous mode [ 179.251173][T10243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1163'. [ 179.267279][T10238] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1162'. [ 179.284870][T10036] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.302278][T10036] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.312499][T10036] bridge_slave_1: entered allmulticast mode [ 179.335153][T10036] bridge_slave_1: entered promiscuous mode [ 179.414393][T10036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.447598][T10252] netlink: 'syz.1.1164': attribute type 1 has an invalid length. [ 179.472058][T10036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.632035][T10252] 8021q: adding VLAN 0 to HW filter on device bond3 [ 179.784063][T10253] 8021q: adding VLAN 0 to HW filter on device bond3 [ 179.848291][T10253] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 179.908928][T10253] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 179.971453][T10269] netlink: 516 bytes leftover after parsing attributes in process `syz.3.1166'. [ 180.067865][T10036] team0: Port device team_slave_0 added [ 180.142212][T10036] team0: Port device team_slave_1 added [ 180.293612][T10036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.300662][T10036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.327763][T10036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.341401][T10036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.350531][T10279] netlink: 'syz.4.1168': attribute type 21 has an invalid length. [ 180.358555][T10279] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1168'. [ 180.368181][T10036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.395337][T10036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.464343][T10279] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1168'. [ 180.471976][T10288] delete_channel: no stack [ 180.494792][T10288] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1171'. [ 180.519959][T10288] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1171'. [ 180.540750][T10288] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1171'. [ 180.560808][T10293] netlink: 'syz.1.1172': attribute type 3 has an invalid length. [ 180.603242][ T55] Bluetooth: hci4: command tx timeout [ 180.666444][T10296] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 180.785625][T10036] hsr_slave_0: entered promiscuous mode [ 180.800525][T10036] hsr_slave_1: entered promiscuous mode [ 180.808262][T10036] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 180.820423][T10036] Cannot create hsr debugfs directory [ 182.074307][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.089354][T10382] xfrm1: entered promiscuous mode [ 182.113160][T10382] xfrm1: entered allmulticast mode [ 182.118998][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.902399][T10036] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 182.973540][T10036] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 183.015152][T10036] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 183.016135][T10412] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 183.079231][T10036] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 183.268593][T10420] netlink: 'syz.2.1205': attribute type 30 has an invalid length. [ 183.671207][T10036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.792069][T10036] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.800273][T10440] __nla_validate_parse: 3 callbacks suppressed [ 183.800292][T10440] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1207'. [ 183.825999][T10440] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1207'. [ 183.828580][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.842144][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.917739][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.925004][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.206072][T10455] netlink: 'syz.1.1210': attribute type 4 has an invalid length. [ 184.441826][T10468] netlink: 'syz.3.1214': attribute type 1 has an invalid length. [ 184.488787][T10468] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1214'. [ 184.678123][T10475] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.720942][T10036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.789877][T10036] veth0_vlan: entered promiscuous mode [ 184.836621][T10036] veth1_vlan: entered promiscuous mode [ 184.921160][T10492] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1219'. [ 184.952896][T10036] veth0_macvtap: entered promiscuous mode [ 184.986583][T10036] veth1_macvtap: entered promiscuous mode [ 185.006208][T10492] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1219'. [ 185.049899][T10036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.067536][T10500] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 185.079493][T10036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.092508][T10036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.143262][T10036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.163114][T10036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.175470][T10036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.228508][T10036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.253369][T10036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.299852][T10036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.330266][T10036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.358232][T10036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.382978][T10036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.398592][T10036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.425040][T10036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.433382][T10499] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 185.570040][T10036] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.600774][T10036] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.663195][T10036] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.672022][T10036] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.691677][T10524] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1225'. [ 185.721598][T10524] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1225'. [ 186.038591][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.049099][T10544] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 186.058643][T10544] netlink: 'syz.3.1228': attribute type 1 has an invalid length. [ 186.066875][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.138390][T10547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1231'. [ 186.146401][ T3509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.156932][ T3509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.975883][T10551] Bluetooth: hci4: Opcode 0x080f failed: -4 [ 187.044061][T10471] ------------[ cut here ]------------ [ 187.049718][T10471] refcount_t: underflow; use-after-free. [ 187.055598][T10471] WARNING: CPU: 1 PID: 10471 at lib/refcount.c:28 refcount_warn_saturate+0x15a/0x1d0 [ 187.065091][T10471] Modules linked in: [ 187.069150][T10471] CPU: 1 UID: 0 PID: 10471 Comm: kbnepd bnep0 Not tainted 6.15.0-rc2-syzkaller-00282-gd861a5dbb960 #0 PREEMPT(full) [ 187.081391][T10471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 187.091465][T10471] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0 [ 187.097622][T10471] Code: e0 69 a1 8c e8 17 12 7e fc 90 0f 0b 90 90 eb 99 e8 9b b6 be fc c6 05 0a d4 45 0b 01 90 48 c7 c7 40 6a a1 8c e8 f7 11 7e fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 78 b6 be fc c6 05 e4 d3 45 0b 01 90 [ 187.117934][T10471] RSP: 0018:ffffc9000417f700 EFLAGS: 00010246 [ 187.124009][T10471] RAX: 66c7a16ad0989400 RBX: ffff888029986c78 RCX: ffff888030140000 [ 187.131987][T10471] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 187.140203][T10471] RBP: 0000000000000003 R08: ffffffff818218d2 R09: fffffbfff1d7a960 [ 187.148296][T10471] R10: dffffc0000000000 R11: fffffbfff1d7a960 R12: ffff888029986c60 [ 187.156265][T10471] R13: 1ffff11005330d8c R14: ffff888029986c60 R15: ffffffff864ed640 [ 187.164493][T10471] FS: 0000000000000000(0000) GS:ffff88812509a000(0000) knlGS:0000000000000000 [ 187.173430][T10471] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 187.179994][T10471] CR2: 000055558864c808 CR3: 000000007d1ca000 CR4: 00000000003526f0 [ 187.187961][T10471] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 187.195923][T10471] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 187.203892][T10471] Call Trace: [ 187.207151][T10471] [ 187.210069][T10471] klist_dec_and_del+0x3ec/0x3f0 [ 187.215055][T10471] ? __pfx_klist_children_put+0x10/0x10 [ 187.220588][T10471] klist_del+0xa7/0x110 [ 187.224752][T10471] device_del+0x2cb/0x9b0 [ 187.229067][T10471] ? pm_runtime_set_memalloc_noio+0x1f2/0x260 [ 187.235333][T10471] ? __pfx_device_del+0x10/0x10 [ 187.240333][T10471] ? netdev_unregister_kobject+0x36b/0x470 [ 187.246148][T10471] unregister_netdevice_many_notify+0x2069/0x2640 [ 187.252574][T10471] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 187.259333][T10471] ? trace_contention_end+0x3c/0x120 [ 187.264715][T10471] ? __mutex_lock+0x380/0x10c0 [ 187.269462][T10471] ? __lock_acquire+0xad5/0xd80 [ 187.274321][T10471] ? __lock_acquire+0xad5/0xd80 [ 187.279158][T10471] ? __pfx___mutex_lock+0x10/0x10 [ 187.284183][T10471] unregister_netdevice_queue+0x383/0x400 [ 187.289915][T10471] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 187.296151][T10471] ? rtnl_net_dev_lock+0x37/0x320 [ 187.301243][T10471] ? rtnl_net_dev_lock+0x302/0x320 [ 187.306351][T10471] ? rtnl_net_dev_lock+0x37/0x320 [ 187.311369][T10471] unregister_netdev+0x1f/0x60 [ 187.316162][T10471] bnep_session+0x2e52/0x3050 [ 187.320824][T10471] ? __schedule+0x1ba6/0x5240 [ 187.325503][T10471] ? __lock_acquire+0xad5/0xd80 [ 187.330341][T10471] ? do_raw_spin_lock+0x151/0x370 [ 187.335385][T10471] ? __pfx_bnep_session+0x10/0x10 [ 187.340635][T10471] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 187.346641][T10471] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 187.352972][T10471] ? __pfx_woken_wake_function+0x10/0x10 [ 187.358587][T10471] ? __kthread_parkme+0x1a8/0x200 [ 187.363645][T10471] ? __pfx_bnep_session+0x10/0x10 [ 187.368652][T10471] kthread+0x7b7/0x940 [ 187.372722][T10471] ? __pfx_bnep_session+0x10/0x10 [ 187.377746][T10471] ? __pfx_kthread+0x10/0x10 [ 187.382316][T10471] ? __pfx_kthread+0x10/0x10 [ 187.386920][T10471] ? __pfx_kthread+0x10/0x10 [ 187.391495][T10471] ? __pfx_kthread+0x10/0x10 [ 187.396076][T10471] ? _raw_spin_unlock_irq+0x23/0x50 [ 187.401274][T10471] ? lockdep_hardirqs_on+0x9d/0x150 [ 187.406479][T10471] ? __pfx_kthread+0x10/0x10 [ 187.411050][T10471] ret_from_fork+0x4b/0x80 [ 187.415538][T10471] ? __pfx_kthread+0x10/0x10 [ 187.420109][T10471] ret_from_fork_asm+0x1a/0x30 [ 187.424874][T10471] [ 187.427896][T10471] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 187.435152][T10471] CPU: 1 UID: 0 PID: 10471 Comm: kbnepd bnep0 Not tainted 6.15.0-rc2-syzkaller-00282-gd861a5dbb960 #0 PREEMPT(full) [ 187.447359][T10471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 187.457394][T10471] Call Trace: [ 187.460655][T10471] [ 187.463575][T10471] dump_stack_lvl+0x241/0x360 [ 187.468240][T10471] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.473417][T10471] ? __pfx__printk+0x10/0x10 [ 187.477990][T10471] ? vscnprintf+0x5d/0x90 [ 187.482318][T10471] panic+0x349/0x880 [ 187.486195][T10471] ? __warn+0x174/0x4d0 [ 187.490331][T10471] ? __pfx_panic+0x10/0x10 [ 187.494739][T10471] ? ret_from_fork_asm+0x1a/0x30 [ 187.499656][T10471] __warn+0x344/0x4d0 [ 187.503621][T10471] ? refcount_warn_saturate+0x15a/0x1d0 [ 187.509161][T10471] report_bug+0x2b3/0x500 [ 187.513467][T10471] ? refcount_warn_saturate+0x15a/0x1d0 [ 187.518990][T10471] ? refcount_warn_saturate+0x15a/0x1d0 [ 187.524522][T10471] ? refcount_warn_saturate+0x15c/0x1d0 [ 187.530045][T10471] handle_bug+0x89/0x170 [ 187.534269][T10471] exc_invalid_op+0x1a/0x50 [ 187.538752][T10471] asm_exc_invalid_op+0x1a/0x20 [ 187.543581][T10471] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0 [ 187.549716][T10471] Code: e0 69 a1 8c e8 17 12 7e fc 90 0f 0b 90 90 eb 99 e8 9b b6 be fc c6 05 0a d4 45 0b 01 90 48 c7 c7 40 6a a1 8c e8 f7 11 7e fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 78 b6 be fc c6 05 e4 d3 45 0b 01 90 [ 187.569308][T10471] RSP: 0018:ffffc9000417f700 EFLAGS: 00010246 [ 187.575442][T10471] RAX: 66c7a16ad0989400 RBX: ffff888029986c78 RCX: ffff888030140000 [ 187.583389][T10471] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 187.591336][T10471] RBP: 0000000000000003 R08: ffffffff818218d2 R09: fffffbfff1d7a960 [ 187.599287][T10471] R10: dffffc0000000000 R11: fffffbfff1d7a960 R12: ffff888029986c60 [ 187.607237][T10471] R13: 1ffff11005330d8c R14: ffff888029986c60 R15: ffffffff864ed640 [ 187.615186][T10471] ? __pfx_klist_children_put+0x10/0x10 [ 187.621158][T10471] ? __warn_printk+0x2a2/0x360 [ 187.625914][T10471] klist_dec_and_del+0x3ec/0x3f0 [ 187.630831][T10471] ? __pfx_klist_children_put+0x10/0x10 [ 187.636357][T10471] klist_del+0xa7/0x110 [ 187.640492][T10471] device_del+0x2cb/0x9b0 [ 187.644817][T10471] ? pm_runtime_set_memalloc_noio+0x1f2/0x260 [ 187.650862][T10471] ? __pfx_device_del+0x10/0x10 [ 187.655687][T10471] ? netdev_unregister_kobject+0x36b/0x470 [ 187.661477][T10471] unregister_netdevice_many_notify+0x2069/0x2640 [ 187.667879][T10471] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 187.674613][T10471] ? trace_contention_end+0x3c/0x120 [ 187.679874][T10471] ? __mutex_lock+0x380/0x10c0 [ 187.684617][T10471] ? __lock_acquire+0xad5/0xd80 [ 187.689450][T10471] ? __lock_acquire+0xad5/0xd80 [ 187.694281][T10471] ? __pfx___mutex_lock+0x10/0x10 [ 187.699286][T10471] unregister_netdevice_queue+0x383/0x400 [ 187.704986][T10471] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 187.711205][T10471] ? rtnl_net_dev_lock+0x37/0x320 [ 187.716209][T10471] ? rtnl_net_dev_lock+0x302/0x320 [ 187.721298][T10471] ? rtnl_net_dev_lock+0x37/0x320 [ 187.726301][T10471] unregister_netdev+0x1f/0x60 [ 187.731042][T10471] bnep_session+0x2e52/0x3050 [ 187.735696][T10471] ? __schedule+0x1ba6/0x5240 [ 187.740358][T10471] ? __lock_acquire+0xad5/0xd80 [ 187.745190][T10471] ? do_raw_spin_lock+0x151/0x370 [ 187.750199][T10471] ? __pfx_bnep_session+0x10/0x10 [ 187.755208][T10471] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 187.761099][T10471] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 187.767408][T10471] ? __pfx_woken_wake_function+0x10/0x10 [ 187.773047][T10471] ? __kthread_parkme+0x1a8/0x200 [ 187.778072][T10471] ? __pfx_bnep_session+0x10/0x10 [ 187.783114][T10471] kthread+0x7b7/0x940 [ 187.787178][T10471] ? __pfx_bnep_session+0x10/0x10 [ 187.792198][T10471] ? __pfx_kthread+0x10/0x10 [ 187.796778][T10471] ? __pfx_kthread+0x10/0x10 [ 187.801347][T10471] ? __pfx_kthread+0x10/0x10 [ 187.805917][T10471] ? __pfx_kthread+0x10/0x10 [ 187.810487][T10471] ? _raw_spin_unlock_irq+0x23/0x50 [ 187.815668][T10471] ? lockdep_hardirqs_on+0x9d/0x150 [ 187.821242][T10471] ? __pfx_kthread+0x10/0x10 [ 187.825812][T10471] ret_from_fork+0x4b/0x80 [ 187.830212][T10471] ? __pfx_kthread+0x10/0x10 [ 187.834885][T10471] ret_from_fork_asm+0x1a/0x30 [ 187.839648][T10471] [ 188.930519][T10471] Shutting down cpus with NMI [ 188.935484][T10471] Kernel Offset: disabled [ 188.939798][T10471] Rebooting in 86400 seconds..