last executing test programs: 52.703350771s ago: executing program 2 (id=404): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa", 0x1c}], 0x1, 0x0, 0x6b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c000038000480312d"], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="000000e8ff07000014000300000000000000000000000000000000001800128008000100707070000c000280", @ANYRES32], 0x4c}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000002380)=[{{&(0x7f0000000480)={0xa, 0x0, 0x0, @private0, 0x7fffffff}, 0x1c, &(0x7f0000000b00)=[{&(0x7f0000000580)='3', 0x1}], 0x1}}], 0x1, 0x44191) listen(r2, 0x100) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000330001002bbd7000fedbdb2505000000080004"], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000540)={0x3b}, 0x8) accept4(r2, 0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'team0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={r5, 0x3ff, 0xfffffffffffffffb, 0x9}) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f00000000c0)=0x5, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000040010000000000000101410000001c001700060000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r4, &(0x7f0000000340)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47380c988ca", 0xe}, {&(0x7f0000000440)="197cc163df7ce9d0b02650c9824bb25cb9048c6fee30d513dc41d4a41a1a56ea7b1057b2cef35eaa5e6df250", 0x2c}], 0x2) 51.619530876s ago: executing program 2 (id=421): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="02"], 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000f00)=ANY=[@ANYRES32=r3, @ANYRES32=r0, @ANYBLOB="02"], 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a0400eb2636037f00000000", @ANYRES32=r7, @ANYBLOB="020000000000800080001200080001007674693674000200600004"], 0xa0}}, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'pim6reg0\x00', 0xf795709167401376}) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x400, 0x0, 0xfffffffc, {0x0, 0x0, 0x4c, 0x0, 0x80c3}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}]}, 0x30}, 0x1, 0xffffa888}, 0x8810) setsockopt$sock_int(r4, 0x1, 0x1e, &(0x7f0000000040)=0x7, 0x4) 51.345584845s ago: executing program 2 (id=425): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x6}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x97}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) 50.925899183s ago: executing program 2 (id=431): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4000004}, 0x10) write(r1, &(0x7f0000000080)="240000001a007f0214f9f4070009040802000000000000050002000008000f40fe00000e", 0x24) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f00000000c0)="ff02040000ffffffffffffffff1f2be82db1af000000000067fe1cb179677d61919628112bced517fc77fae568d60362075da39de5cf54dba400c03efd78d77fc259993b83cf6d81bb0abc66080400f2f9e9dd44633c12ee2f98d327291b45278d3e787edc9e1e815bf027301f9720ca7f8ff6afa0ab8eb0", 0x78) (async) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000080)=ANY=[], 0x8) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000131401010000000000000000080001"], 0x20}}, 0x24004010) 31.460077652s ago: executing program 2 (id=431): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4000004}, 0x10) write(r1, &(0x7f0000000080)="240000001a007f0214f9f4070009040802000000000000050002000008000f40fe00000e", 0x24) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f00000000c0)="ff02040000ffffffffffffffff1f2be82db1af000000000067fe1cb179677d61919628112bced517fc77fae568d60362075da39de5cf54dba400c03efd78d77fc259993b83cf6d81bb0abc66080400f2f9e9dd44633c12ee2f98d327291b45278d3e787edc9e1e815bf027301f9720ca7f8ff6afa0ab8eb0", 0x78) (async) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000080)=ANY=[], 0x8) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000131401010000000000000000080001"], 0x20}}, 0x24004010) 28.779480346s ago: executing program 3 (id=578): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC(r0, 0x0, 0x5, &(0x7f0000001740)={@local, @private, 0x0, "50195b9ae2d280a88343baee300eb695f9a491328803d89ff721bbc0b17cce26"}, 0x3c) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f00000001c0)={0x1d, r3}, 0x10) sendmsg$can_raw(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "0a08000000000100"}, 0x10}}, 0x0) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x16, 0x0, "0af5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d1408407e5a774ef95f2fc1b947e00f000000123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6803e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x3}, @in=@empty, 0x0, 0x0, 0x1, 0x4, 0xa}, {0xbd1, 0x0, 0x40000003, 0x2000000000, 0x0, 0x0, 0x0, 0xb}, {0x81, 0x2, 0x0, 0xfffffffffffffffd}, 0x2000000, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x32}, 0x0, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000}}, 0xe8) recvmmsg(r5, &(0x7f0000005680)=[{{&(0x7f0000002780)=@ieee802154, 0x80, &(0x7f0000003ac0)=[{&(0x7f0000002800)=""/200, 0xc8}, {&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000003900)=""/154, 0x9a}, {&(0x7f0000001700)=""/43, 0x2b}, {&(0x7f00000039c0)=""/225, 0xe1}], 0x5, &(0x7f0000003b40)=""/222, 0xde}, 0x4}, {{&(0x7f0000003c40)=@xdp, 0x80, &(0x7f0000003d80)=[{&(0x7f0000003cc0)=""/71, 0x47}, {&(0x7f0000003d40)=""/1, 0x1}], 0x2, &(0x7f0000003dc0)=""/229, 0xe5}, 0x401}, {{&(0x7f0000003ec0)=@caif=@dgm, 0x80, &(0x7f0000004080)=[{&(0x7f0000003f40)}, {&(0x7f0000003f80)=""/227, 0xe3}], 0x2, &(0x7f00000040c0)=""/40, 0x28}, 0x3}, {{&(0x7f0000004100)=@x25, 0x80, &(0x7f0000004200)=[{&(0x7f0000004180)=""/80, 0x50}], 0x1}, 0x3ff}, {{&(0x7f0000004240)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000005380)=[{&(0x7f00000042c0)=""/35, 0x23}, {&(0x7f0000004300)=""/97, 0x61}, {&(0x7f0000004380)=""/4096, 0x1000}], 0x3, &(0x7f00000053c0)=""/61, 0x3d}, 0x4}, {{0x0, 0x0, &(0x7f00000055c0)=[{&(0x7f0000005400)=""/138, 0x8a}, {&(0x7f00000054c0)=""/171, 0xab}, {&(0x7f0000005580)=""/58, 0x3a}], 0x3, &(0x7f0000005600)=""/99, 0x63}, 0xffffffff}], 0x6, 0x12000, &(0x7f0000005800)) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xffe0) sendmmsg$inet6(r5, &(0x7f00000015c0)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0xf}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000140)="89e56b9089cbe8e40ab063162e10608381b8da2612345c2879de897b7aed7e1546869bf167ee16408551cb3a78b91c55c05723ed7964cc6c0d138eeecb77f92b16d8c929e1cb320194e90fc92717d5d53f98195e6fadcc4d22da20b3cacea0909e53f99583af17ca38f4d6", 0x6b}, {&(0x7f0000000440)="fc8907e839fab0b032d9280f2452a959499507b20b69cb10fb91443287f0c0bac09dece29d2698af32341d533348b16fba0d36c369166b52a1cacb0a079e00f35d19327adca4fb6738dcba260cfeefb51fd2aafe169aaa41", 0x58}, {&(0x7f00000004c0)="b20f831fccfaa48656d3f3c24e953143e1a496d8f676a08e6760a26982f15a1a8ffc8610d1d05b89adea2f1b677d6feb362f875c8c12c1d46da66b7324a72e3143a183622ca30f5707b80bafb423dde698e8c805dbe8c4715308f55557a85929a7a3ad47bc8ca5f565d395b11f2fab5f558033901dc24fff902ad23fb7d27e63efd5c94d1740c00345ae3022b6e6b20f", 0x90}, {&(0x7f0000000580)="43b81efb8a4c3c2481c7164f140bab2e61f5d0648691cf0b669fc66a0abac3ceb36805b337eebb3f613e7b3dd28a34329343938c1e8a43dec8c217083197b5656f1045d92cd505e34433bceb4a155dcbec7e7d1c6df5f5f2dc2e914e5fd555365ed8ba54dc6c3b2dbacc5d638fb94d443be1a1e6819491e11484d87260381f4742ffe93dbee2256fb59ce94ea0883a077213172929c4ff243ea56d48be0d106ca05ee4d3d94b4c5cc9088b823038cabb8187b1f0ed12054bd3e5a51ff1c0e2ba97032b47b4f086bc3b7d123b66485db6ac2ac0b422978b298d16d4646d3945bdbb87cacc42adafb0c3c655ce9b710b20b4795390ee71dfb5e1f74cc246", 0xfd}], 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/432], 0x1c0}}, {{&(0x7f0000000840)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000001780)="119633dc6bc61f081846b35b4d99ef48dbc9ac253e4df0dbd31b1cffa0be6bf5498e43e186b799072dd00da8fc0ae91a5253848ae4aa15206574fff680729c1286dbf080e4c23464d6216ef149860170ce6694c2f79ae5f31f4fde5712514ac44bf5131ba7789a18c730fc04d660b4735fbd9fc689a5d3a3c36579cf867af05eb7283b03e0b0387fa8173fe9a26522aff3e0cb581bb502fe5b4ec9e702e8f8a5ab8b447ee5e7df7b65a5537d8e0755ad74c9ae2c6f7bfbacf7c4b0ae5dbefeaddb0e2f35ea0e123839f35a337f31e39ab4f3e0c44a14e07582104625d34a48d23bf4d445fdc4942d388d337197b50a2881dcb932766c6ff7b51ada79428e08545919f38d2cf9f7d5e27bd989a7902ca9db757ee70115c1e2b40a871438caded4cd4d10e09acf5d70ba9986e5273a4c7b11b9f5ce5a28ab92d2700692d58a654bdd8f69eb76c297bba6d9290cec1ef714bb1e68eeddd5d24a807b0a98d04b899e47eec19c801682b7fac224b043897d6c123888ef871e580a5119f6a915375d2b8bae738f0f4ca7b9e96ca2b08af71b4abaa62be8b36c14f8b47b1883eb28f7ca619068afa12586b153785aa81eaf0bc3f4c70e7f729166516b590f12d31d923901eef68af787bc31eefc8fa9160a8539d5d8a30c88c49738b740db285204dd0f7486525a493534c9f60c5c83f3b841b07f2eb02e0ea4c6cc46705e7f3f7a5d9029fe9b7166cc9598365757e4fe9cd92811af4e20a81870a4e35aa2024fbe7b7a1bca8896bddca76fb512d5c4b9ce651e439ffb7b96d777bd05a40b1f0f44a43e11bff967c07291099656760cca6a1e73e48e88bfb4a01cc134b68110ab274f08aaeffbd3b5fcdeea9133d75831bf946467f31300e970f156d216c1c46eaf7fc7fb56190ea7212686da5fc1f2b3fe52b07f0f38573a246c0d2ee86222222609a126aa2610aae7d1ea1a236c610aec99c630f5535f4a8719a50132cf6cf9697457b807e3b6f80ca92d81675de6728791f1f6a1b57f30cb2a809668cc162406683c6210db84bdc1434050f6297d8e74b4d0ef40de6d0f4b338f17c0f45e6beb5dec3bc4ac9616ee1f2c7299eeec869528d25ad72a0aec62788d5ce605b5a2fc49b43741e5392ebb51aa973d8e223433592f6efc8fd2ab9e522a80fc37a90f01a0a01317e4f8402b04af4b3916a2d41a6d261bcaf16fd42f6a472470d0b89ad2bf778dd71bb5b9ac75fe3d0d3f29a0d8d12b7e28d7fce977df92f418481022109461b277d3add047e1abef59fce9feba2a9081f025743752b3f8f6e1f1967d184a2f40e8fbae1ad1e012e657f54f401a3ac5c08e9904e57c31516624bb3dad938ae0b4f292d475cc3e136826e213f677d5878f41f76ad55117fb467710721ed0b21c9f6a31c5cbd88413ec3818560e405122e28df98ef1d1baf8bb697a14a6863e156157f0809395fd87077268130e77af51b34a431f277c408a8682acc10a18ce2ac150622291a993668aec901cc028361f8ddb4e6dfec6f408ea7266e0261142ceb5c057d908df674937dc802b6150b220cfc346f39d06f84b20a9b8551d32ab9624b63c583b69c7a09e7c54ce5473fbd126dcf7c3cd29505959e0108fe71c53ecf606bf94d991e695a4cadd01de872fd701adf36a854805e750fa780b2da3f93c4f7a58e5e7c95b4a4f6dedbb019b8c2ebec8a8af4e379314c96767a1779022e5b5bc624e00c467c3853d7dedfd42f8f2d3c8f37c446622112a29ea51c2763ed0dda9509e8bfcd7f25a086ac4717081322bd8c26be938e5b2fc4f5b3b7d17e177cd099ea376c2bcd41c28cb85013f4c6f0bb5b73a07ac3bfebad7df627c82ce675896013c2cd0a9c1f2e4691f499b0ac5cb77cf93eebc292ace5603b42328649830685f0b2e420744fe13f0f554dae2310e942e66253c6f7f092b3bec16be3deee47c595ce2bc336be40e963eeb4605056e4fc128bab4f72486a431f7cb9e2732120b15267f1fd4e897e70244c2414bc1e986d96a322bbb6692dc73ed027f2842efe5a6339689f85120669d4d269aca140741e92c1551107fbb2025888ec0131905d97e615cc436d0220890087948bba00d8cb84cc5e0565cdbcd4d9ffe91a4aa6aa776c3c32612126a2613e90ced06c0c1021d87f03ff4ced34c9fe7ddbba0c11b2786dc3cca4bcc0af19f9b55b7dda206660d8420a81322f9d76579188b2001629d892c0646c0a3259dead5d952095ea84f01d78d43cbf039035688effcb7aa2ffc3c9b6b72cf1662e7ad11f4744b472629f750dce93ac3ae7928967b93f04489fe14c1fc22c376f1713f4963c50ff038279b80d82247b9ee91d0a056b970c656d17152d24d1a811116c1f21f02beb50d607913ed7327be5bfdc72855040f0181405fe14a9975f2431207d43eb49ff70636d9433a8ed418fad8bcbb80d231eeca43992596ddf2affb10ee7afb8a9139f5fd9d4c8bac1d8fb032977824cd35b2a7cd2192ddab75fb26b9ce2c272e69a5585d12fb0bc90d620de332418d0529563a19e805504b8a443bc107a08369ea5e8ac3d7d414cfdf14347192162b789d935e69b40e48886b996076c563bb117df3ca5519ce932957eacd10eead4b1823e707f9ee8dd3643526f9a3c8c8f8702ee382f16726d35025cc65be222a29d6ec1851c4cd6d1399bd56ec7afe29d5c803fbf940381c6e38217e4ed0d4bccc322d68873a63c85182e43a9d58b0193b617f3b3e25645f0ffb77e9d814cbe41b849bee1d6d6ca855f4b826d24bf31c0338361d96b0a7841db9187e1e7efe1e927ba284735f92bb006df9b9279116a80185d79f3d8b6c54d98d0279532d07ba1923bca4450b231d6b5f95b477b2765aba708e1e38803753be981207d899a7d1ac5070588bff90a884031a2dc9aa3058db571930972446fe5761cb4564614996619683f038082433984aa0011dc57a0c5fe719ab2017b679ee9fe44767ae15c3f460bbe89b4019ddf4a53bc111e1f9fb9a52d8e4ea2580decdc8330972988ba5849932490a08cea4f01e1c2fbe055978e10679f27f5e49ee1627bbb62e52f317b4f6ca6599836d3f622edb461b39a6ad0fd690d6b78911f10c1d731d3df4e0a015f30bae387bc1cfd2de12dad18525c05866ccc21715be499190b8679ffbe26eb0f37cbf1bab72a3a6e13009f05dc861e4a16cdbab0fe06bde4826e84af7316d61714c2d71afde3ea2f40f1390151f27bdd7d8ca05bf1e1190921ef0b23edbcc5ec972105f986182ed338b5519e06ee5864c47768f6443cb36591c15058666b12a0d46e4733149dddb4910c75553db4521f3d078edd554afe0b6da5033b53d9eda9499c07841a99425639a0b0035da3df15d051445ad3b24a7010848a443228700c4a813fed22bd12a570c6eca7a390f0e6ff8bc0ce1dde274d03350a1511c85f17f9ad85c336c917681c01b2cf3b5af2832e994bab3520068b919a9560ae6f2c632bd98cfa616e55542436cc105bdd91143d78e9fa0a19420f7ab7798f4af4e96447f1d87e583d1e24fe7a4e19e24b837b3ee760054c7e0dbc85f7edac41a95931109f3160fd731eec282c440fb116dcee1ad8b53d50eed3a1adee7275bf93aab58c5f6377167740549b8f13ca55bde0495e708c0071c7f3b06b1a9d418fe016128d0bbd6221f4438301243a61c2e673602ad8470df86236addc364f55d0ef469dd97168311f2bf0f756a5103aa0ff80f68b3d241b095672c386a73a5a807878d62b69014d655c028c12ed1f3d59cfede1af4403844d18232f59d71d014119ba6925f30c53115762d15d150151b5d7b6c0a2abaef12ad5a305bc927c942b7a90fe41a85d4d39046a5a47b2a8a500681449e16a7be5084e3ad894bb5054cab4172438de2976e4592b33d27697df26c91551037fe7bd0d399f89d0515f6d5b5d9ae021988f96d932a0eb70f7bb78071296b24e7c17d2700e44f62dfbfb8209b2661da8fe60615a5e1cc4cf4af6c4d1c52a1781add0cf6baf905bdb058ec1e140bd2805503b432aac3606b10a1069d79e2a2cd047ccab78efd8c5f185d3bd88990d983301e334e1e28177af153791484cbcc42a89cd5a22283512d661d90df766ec18179136aa332839bb88e8453148d8dd3d4d945f457a18b1945d734575986c70b24fe68728121accc42bcf2c5ac5a328e770a4d0619e0f52d0866050553ba371006cba2fc99a6d3becb67ca5da480a80715f9603210f83848aeed1f6dacd70745edb2147ae921ae3bbaf716303e5cbab16a0099c37550b962e78ec9ba99775d10efe89432e861491bb8b93209ab84de0b9796d43b4c6dfce4276165869e72385b28bcb767930c562692cfa0c575f9ac6a38682f86a7a9c5d977c48da31b9cb3962095a1c28fc79c48ec6292f610d64bbfc1f755577b13868bc0eaea6621320df4acc11a8ca2e97cbf0e2358584c465771870e84f4423c5842f56118af724f30249139e00e3d1728cd0a1ea2c2ebbd7a03a98a3a1a87226d894c61639c5215eeb6a390af67149bdabc2c887d5085c0bdcab8a86e48f9a58c8a90a6b150d3a1c310268d8e5ff9d9ef6a975969af154ccaa0c4d90c529201d30b293e0c72642b0d0abda50d3787d021f9777fe0f50aaab6213a2eea594b6c54a4d82cc82b41d9024c109bc5cad9eb7ecf3437a4e51815e3683aaad7a6df4291a5e4e08375c05594c2261c6ba8cb9213a05f52ecb68c1fb6d672d07b07ec77badf7248d4ed70b76cf0f71aff9dcb3a5d0300e1417f0fadf1c3ce1f11719529bf394e025867abe9844dd849f1c2eaa6213e9b3ba26ad84a9d32dc6e3e428c8638df9fcedb78f472a732006d1599992308a537a4ce66cbc4f1a83e6e45d6c8371ce67d620bc0d6f790fb58ac3e6dc54a83d999ee67001634b8bcba1f5a66f6122739d48ac356d9169a41fbd7dcbd6621bc077be31fc6d49e6d05b8c36331827c2b1dd0b4e94826830d4b19d743af84159c8b9aad9121fff2fee2e4039a64d813ea66d1abd73a7cd2b6da20a2a16c7bf8389761cbf17485736879565ea1dfabce1886353a3df8a05026ea33dca6714db2005c0dae3d27f5695ca9bc874f7ca004dbc18d7fc0998d9365a489874b64299ab275d7887813492b68d6f191de74ee859d4491ca9cdbf76dbde1ab6251f9d3df4478f3810b04eb89f51ce4ad843d30e68a49a001c140dc10a6c5ef93d6d24fe3accbae40945172a1dddf9a30f3bc435ffc806ac548ea027e5b123ee030d49d648009480f581b9722b751f2ad03ba804cd643c4835589322429647dd5abfc5072d2365c2ce3109c318721507fcc1efabf64b2699492921605c3fe3e99d1a049aa49353c7377d506a087b7d553f1cad2f29fe8edfd4ae336eea9a272946bae00b3cf17ef4efc5dfb399c6f838fea9a110883c83e121bc41549838e07e5be9ab89b39b0e09ee953446af1eac33f2f387221be299b1920a25303741a4ec9bed74dc2fe52416e74ca4444b49fd274e197d07d3f8ba1a0b4b9ec4c777972b65cb7606c54d27c35afb4f1dbd5f78b8309303c6584285876f6cb597f4c1c39505550d04387ea9b8cb74e6092e718966a9ac24909c31e13822d0509de92d4fa9acdbff7a163fd62ac455897f44129314f51c5fd5d9dce0ba17704051b6f909ae370ee60a28a717f66ed2dd3cf5605d3bc1738838852710538a5d8834363888e6519654102649b5737fb5e5607ae016c846f99d86591c79847334ecc969ce06314c0b61555cc38d755fd6118eeaa64c1cdfb61c028eca4a2b3a5d673957b97475f4c", 0x1000}], 0x1}}, {{&(0x7f00000008c0)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c, &(0x7f0000000a80)=[{&(0x7f0000000900)="d72c3b209552e5581de82e97ea3829cffe18a8f09cfa1ed54173e05c8f0914a0579214392d55c6ced81396078679f38a0cba2d500517c508d432f457e33dc191d7959eec34b52808a488ccf654ab0515695c2645e1c63770", 0x58}, {&(0x7f0000000980)="c35dfc7e9ba78c95773071b58365d90fbb4595e6f4c7fe873cc555d5ed8c834925a542d5914f16a5628efa38543d1f20a0d5ebec2b7241a7ca3d79954699a98e661c305300b1998a17796023feb882225cc53d83ce609f21fdddb119ece29d590dfd586fd9d7f162ca7084e78f8e66ce4102eb9990bc2cde3086415328396dca4bd4935f49d185c34108fab6cb17137d460f208078943ff0f0f626808dd5230b60eb6019f47ddd9feeb05e098b5fb2d2c1a6edf79a55220f710f3ef458ec88972f4aba4f181efb75a32a386aa264", 0xce}], 0x2, &(0x7f0000000ac0)=[@dstopts={{0x20, 0x29, 0x37, {0x16, 0x0, '\x00', [@pad1]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x89}}}, @tclass={{0x14, 0x29, 0x43, 0x81}}, @tclass={{0x14, 0x29, 0x43, 0x9}}, @dontfrag={{0x14}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @dstopts={{0x18, 0x29, 0x37, {0x3a}}}, @tclass={{0x14, 0x29, 0x43, 0x5}}, @hoplimit={{0x14, 0x29, 0x34, 0x3}}], 0xe0}}, {{&(0x7f0000000bc0)={0xa, 0x4e20, 0x0, @remote, 0x480}, 0x1c, &(0x7f0000000ec0)=[{&(0x7f0000000c00)="6f289967622a77b379179b4d607196b4868a296b2d0746e2fee2db1771a4926ff0e45cd587b8298f085d24922cb0346cd770e04e6783df9e93f60b351d98854119fe293be57aa5f7b9f11fdb4b3c3363566a9b267a7b4ef567e6e0148272fe542fe38d5c19f7aa59b100dd4726e550a54dd326056482765d46856c8345303078bf4974bcd7b08f9d46f7a428ed1245bd", 0x90}, {&(0x7f0000000cc0)="28b23cb12b6c844d3e6c9f1f68e7177226cfef5384285fbaa2b625e7ea5857375ff1cbc3d1e939a6d0b102b17dcac075127eb08c64baacd2ec3638cbd6c5325bc9909d1005e4c47001c28f38b7b97526fa3e89e618cd44d401ed6001fa4a51e121fc5f2ccfc365a86ba77dc6de08a8563ddfb2509673d78a75c33acf", 0x7c}, {&(0x7f0000000d40)="1c23731d58c7b890dca4219365ed97c34cbb42c3a53217b40be4bbfa7088c49ce9723ee4de6f71ce9495320d7ff8cad4ee7bf6f41856cf05ab8f9bf6a74186aee41d02e402e2bd0ec70c67ce86590899402c769120b184621e3451a1939f291acfb8ce5a9e74972b9623e0d073b7c17d2726b6fd0c8ed7a6a86a3bc8538d3efdcd431d76d28d7af811900a8b6b52bb3c355600a39e7c9bf06cdccdd36e616bd3b103e3fbcd830a6ab2e2dc23ef32beebb68030778e05d9e4f071e7c480f88deb40eda7bda17d5ae02c5fc159442bc2264c50466d3dfeb643cdfc607562fa5ea76dc150619958270b39", 0xe9}, {&(0x7f0000000e40)="f7304505a1f93ff7d5d0f9fccf4acfd38bb8431b7aa9f052087a1924bb58295ae81e6cd614f04c692bca81af9165ec25fecc663a2aa9673afb9722c08483b61e5a8940169a30f61d0a49f807339d7ab3861f39675c0eb7523a9b1b76f1d2c85d87176a2015474879977bf9585b287dfd820ce332046d", 0x76}], 0x4, &(0x7f0000000f00)=[@tclass={{0x14, 0x29, 0x43, 0x10}}, @dstopts={{0x120, 0x29, 0x37, {0x2c, 0x20, '\x00', [@generic={0x9, 0xc2, "d3153d4b27a1cc8ea9969ca084e3dbc602c00a6d8b6738b3bec36d8b7f99d45dcd3eeec2bd5763afd14e9906627b04ef4ecb279d44f82fcafa8d557f83e7b1d9c72dc93d05e5f01b03a7d4d48a466735a2183d3f4201a7189e365be775fe091a72061728f13e4efe8cf898a98303823a9c80dd4911d0ce3cb1a3e5c1b7e1aeef52d4604f887d6493c503c9be09a0cc814c81515579b82ef85a7db6c326eb10f191f430ae51c89fa48d5d6e108ff2b154f525ddb8428d3469324e52c8dcf6c272e3b7"}, @pad1, @calipso={0x7, 0x18, {0x3, 0x4, 0x4f, 0xfffa, [0x0, 0x4]}}, @jumbo={0xc2, 0x4, 0xffff}, @hao={0xc9, 0x10, @mcast1}, @jumbo={0xc2, 0x4, 0x984}, @ra={0x5, 0x2, 0xaa63}]}}}, @rthdr={{0x78, 0x29, 0x39, {0x6, 0xc, 0x2, 0x80, 0x0, [@remote, @rand_addr=' \x01\x00', @mcast1, @dev={0xfe, 0x80, '\x00', 0x16}, @dev={0xfe, 0x80, '\x00', 0x34}, @local]}}}, @hoplimit={{0x14}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0xa2, 0x1, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x5}, @pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0x7}}], 0x208}}, {{&(0x7f0000001140)={0xa, 0x4e21, 0x1, @remote, 0x9}, 0x1c, &(0x7f0000001480)=[{&(0x7f0000001180)="c48e70c4d6e0868f13a6dd59d26426954ea22b74349af0df4f0d0ae2491cc3d4b1377f26ef2b6ac48a1342071f3b3efe940a5308a3a2f911b445cd79de41baa6d6b6fbfa", 0x44}, {&(0x7f0000001200)="4bd24bd51ff3d49e19e611ca5c25535cee12c9571f3b60af4f85cacba77ad41524afe8dae85faa7c1c778f65f3e6ca7feb42afa6f9d5aa4239958eca8202d22efe160ef6b79374157691f28f6bc2009e3be9", 0x52}, {&(0x7f0000001280)="5254f9d856802c71114c5823fa54e5d2acebbb9eef4b46996062a903cda35672466f7c25d516bd5d08e297023bd345c26cb131b6ceb42f3c9f83f56e2439ae5f7a295f6bb896b412947de3118839a167efd8a76b22f70f40d3a968dbdea7e6860c2c87bbb53db5b0ba8f57f9b363086231e375c30388fcfb436fb4e35d51949f1729c7d5679d3c32d6af9edf2e1b34a826414c8dce3f8dfea9d6dd438cb7dc7f0d042c5a013bdf2892e90a2fb4cc830c", 0xb0}, {&(0x7f0000001340)="d2440c11e26f10ad6dbdd962fd1132229da6deaa74e028d6968a93a7a1300c2feb0028af8d5e5c82047684492a70dd0e0fe17b5823fc86960038c300fc738dd93b9312458da8ede3208f0b3fa4095c13b904ef609ffab4b1f2310e8072f2df89620aa4d3f44d080eca06b26e8aaece23522e1238144801d5841e0e35e53ad614b8e6ddff6bd0aece4c10d4fae3c3f3f6bb1b6ff58048758073290725c82ea917a69c928640e634c0199cd0a477885dd1d6a7715f6ab539fb58ab31b4eea6224a4a3d782b2157e901cdb75d65997ea169b05bc32d27958916f00fb0e88bfa15ada1165a9e599b585f", 0xe8}, {&(0x7f0000001440)="8686603bf34bb367417ba9c3e170ecc7", 0x10}], 0x5, &(0x7f0000001500)=[@dontfrag={{0x14, 0x29, 0x3e, 0x6}}, @rthdr={{0x48, 0x29, 0x39, {0x2c, 0x6, 0x0, 0xd4, 0x0, [@private1, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x3c, 0x2, '\x00', [@hao={0xc9, 0x10, @private2}]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x4, 0x2, 0x2, 0x40, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}]}}}], 0xb8}}], 0x5, 0x14) 28.308144181s ago: executing program 3 (id=584): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) syz_emit_ethernet(0x42, &(0x7f0000000300)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@ssrr={0x89, 0x7, 0xfa, [@remote]}, @generic={0x7, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4e0, 0x0, 0x11, 0x148, 0x448, 0x10, 0x448, 0x2a8, 0x2a8, 0x448, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x360, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gretap0\x00', {0x11, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x8}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0xfffc, 0x0, 0x0, 'syz0\x00', 'syz1\x00', {0x9}}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x3, 0x0, 0x2, 0x0, 0x18}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, 'veth1_to_hsr\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x540) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xffffff9b}], 0x1, 0x1) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x4}, [@NHA_OIF={0x8, 0x5, r1}]}, 0x20}}, 0x0) 28.238772344s ago: executing program 3 (id=586): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0200000002"], 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000000000000000000000000009500160000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005345c0f63cdc2e82818254950ee03568b8809a1f04c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab66c1aae9314d7381fcfeb970bea672010000000000000043144648a07a975bd89dc398712376610faa54f12495b4659be8673086f6f3543205d4bc4ce05b8b961103673dff7f158052e62bfbdcddde6985f3f1ac5d9a94cc53207899762a07282a1914452d11858e795a3ca30a101af5574f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5ed44039aab46419496362e54cfad05b4004ac71a003d7b85d07191bed4e5a8908263722d4146f7ed569985439baa355cf3d8731f5e7a237bc06d035a8d601f21746d880819f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c5b9f87d988c9fbd2b9d9b4e2d71753b1549fa734f0b2e5fcf9549804cddad721971637f9c9730a9cc384eed30345979db9c93e1c52f42cad0a4d4f9436d3f39b0ed09c395dc6e970366087a8e4daeeb1b017006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f710c490ecd085d2811a7555c53030000007f00000000bfa6478eb96b079c277e2910b7ccdc3d672ed34aa65278c549e2abb549ad954884289130bc71cee2b7de62bf48129ae1af052a2d46a6165eb0954dac7265f1f425735acf6377793946b3229e861d8ea49806b3b533345d36ecef9df700000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c000000aaae37f044bcadeb0f6846582b7653665aa336db9f0384d3c7ddf79c2e0000000000000000000000000000000000000000000000e154aa0d3e41986a668ee1e5ef93a8ceac75f44aae95e26742f895f287111f8ee86f7e3ffb63cfb0e345cf7fc63dd2b0d30977899c6f03640040af4db71f7452bfc79a05118d8bb42b63b195771e42f9942ec626bd4b5461b74324012164e8"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffd5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r6, r5, 0x2, 0x6, 0x4000}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x24}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 28.164504464s ago: executing program 3 (id=587): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xf0) getsockopt$ax25_int(r2, 0x101, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)={0x64, r3, 0x1, 0x0, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x50, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="2c88c31b56608956c63c6ac364d51278b5fab5c2651d8f2c"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "4b3e47b340ffe357"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="9483e398467c93ac702c38006e2268f3eadef04cc59e938f65ebb2ab30594bf1"}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000005700)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r5, &(0x7f0000006b80)={0x0, 0x0, &(0x7f0000005800)=[{&(0x7f0000005740)="ee4ce40279", 0x5}], 0x1}, 0xc0c1) ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000007840)) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x12c, r6, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3800000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xd1d}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'ip6erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x280000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth0_to_bridge\x00'}}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x10, 0x3, "592366606da9ef0badb8d459"}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000004) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000440), r7) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) syz_init_net_socket$x25(0xb, 0x5, 0x27) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000940)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r7, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000c40)={0x20, r8, 0x539, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8, 0x1, r10}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040840}, 0xc840) sendmmsg(r7, &(0x7f0000000400)=[{{&(0x7f0000000340)=@isdn={0x22, 0x4, 0xf9, 0xf, 0x6}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000001100)="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", 0x1000}, {&(0x7f0000000480)="36de1fc8ef1a86b647d9fd79a37601bc54354e9865823b45b738b6372fbbbfa14873b23f51a9a21541135451acf8917d23ee11d6256f8e0e397f8994892e4149eaf4cc8a466a4f4ed902579607da0f88f4cb03c4fb95822fed4764dda94f05eeb16da161620313b74ba79bfb4bfbd5f8d311729c800541b4fbbdb40e68834dc4c7bdc5946bc51423d64e3942a29e18e776855000b0c42b191708a1a597d715d6b0442d171bafdff55f32c5e6c6594a134902c08c56f2638c7e1ec284bff44f7e4e94aeb2fd548882c07e1d9140a06c3f0415c7906f544604bf7bd7e6f0469be0560a46739b8a2f858ecaa0", 0xeb}], 0x2, &(0x7f0000002840)=ANY=[@ANYBLOB="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"], 0x720}}], 0x1, 0x40000) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r11, 0x0, 0x24, &(0x7f0000000580)={@empty, @empty, r10}, 0xc) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r12, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) listen(r12, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60ff00f500140600fe8000000000000000000000000000aafe800000000000000000000000aa00004e220000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c2000090780000"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11}}}}}}}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="98000000100001002abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a009000000000000140003006e657464657673696d3000000000000008002800babc00005c0016805800018054000c8014"], 0x98}, 0x1, 0x0, 0x0, 0x24040854}, 0x40000) 26.819722357s ago: executing program 3 (id=588): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) r1 = getpid() write$cgroup_pid(r0, &(0x7f0000000040)=r1, 0x12) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @dev, @empty}, &(0x7f0000000100)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@mpls_newroute={0xcc, 0x18, 0x10, 0x70bd26, 0x25dfdbfd, {0x1c, 0x10, 0x10, 0x5, 0xfc, 0x1, 0x0, 0x2, 0x400}, [@RTA_NEWDST={0x84, 0x13, [{0x16fe, 0x0, 0x1}, {0x1f}, {0x4}, {0xffffa, 0x0, 0x1}, {0x7150}, {0x37c, 0x0, 0x1}, {0x3ff, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x1}, {0x7}, {0x1, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x7c5}, {0x800}, {0x3d5d, 0x0, 0x1}, {0x400, 0x0, 0x1}, {0x2}, {0x4}, {0x649, 0x0, 0x1}, {0x8}, {0x2a, 0x0, 0x1}, {0x1}, {0xfff, 0x0, 0x1}, {0xe03}, {0xc}, {0x1}, {0x647, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x1}, {0x7}, {0x5, 0x0, 0x1}, {0x3, 0x0, 0x1}]}, @RTA_OIF={0x8, 0x4, r2}, @RTA_OIF={0x8}, @RTA_DST={0x8, 0x1, {0x7}}, @RTA_MULTIPATH={0xc, 0x9, {0x7, 0x10, 0x6a, r3}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x8}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x4880) openat$cgroup_subtree(r0, &(0x7f0000000300), 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000340)={0x0, 0x8}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000003c0)={r4}, &(0x7f0000000400)=0x8) r5 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000440)=r1) sendmsg$tipc(r0, &(0x7f0000000900)={&(0x7f0000000480)=@name={0x1e, 0x2, 0x3, {{0x40, 0x3}, 0x1}}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)="f9d9a02eba96b9829f7e302317f940387a6e9e435099ab13fe80dd0c6bcdf5d4168ca039c658844faf3acc2a09e479d57a7d87b3db96c4e0fc5eef9c5a9327bbddf0cddd18c60548585979ae2071e430ee2c3d7ef9017db556bfe99a8b7ffe875eeb5bc9a5c11add4a1bb9b87b6a7331d7dd29b5f527a2425b6147f028d4e87285500be4aef54f1c5e92c13deac04169586e42f7fb01ab7f06d6dc1800fc58e8b4de3f41287ee6b6899896e9dc380e1cbf01478d598bfa3fc55949d64f85c91dd1123a2d148d2bcc240d3175748678a0a028c12781b5444eee41b13e161f7b2a5ce053", 0xe3}, {&(0x7f00000005c0)="a3904da50d9a277fbb5d855624fdaa5bff8496fe00dbd827f934141fafcfba9df9caebd19470d5c5fed6eec8b0a4fc4535de5e4b9c556d3dba8cac870f3a7ce494e2fbfbd8e8d9af106f3aa1eb361862751132d8cfd83fb0d076821dd211ee77a01aad028ffcb4f2c847c32e0bd2ae60fc5c3abb92a2393a20e6f3b40a9dcb120a374a5da52f0e134195f7f8b9e2500b3f2b60e1b360d1f42f4e2e0a55f6b66018aed44b4bba068b", 0xa8}, {&(0x7f0000000680)="0a78729960f462ec834fad8a3e3d6854343ad8ae30f5ac0b0d8bd6b6bbea46c23d086b9fd7d080003fcd3e9037baf253a24cbe5d4e8d2d27a75081e3a9b6530a72e91aded1e13890c61aae0e35e957c855716c55950548bdc0eea2857d2085ecbb4d19760cbb13fc4939a772f3e62bed979928ba0ecdbca5846e6427e8025d8988c4d3be35b8e4749eebeec39ce0c997cffe6139d8382425b09bebc3c6d81a077bd4b0e3fb038fc48a5aa937ac74d2ff56143c9d316b68ffedfa5550772e07a2b7d947bb7bca5235c654657d1dd6c2", 0xcf}, {&(0x7f0000000780)="c56867e39cdb6adeaa9c7a729b5592f85b37762608b8286a11fd03e7572298317f3bd45bee652d0bbc454bcaaacbb5be318c7b40150cc4e8a54d2d4649f99ce791389ea94dbc6531701f6f6f2c9492b233d92ce54c6cf5a81655b44248", 0x5d}], 0x4, &(0x7f0000000840)="2dbab51a9cb9f749a8036992cf7c5842e50091e98f6f987855cb1c3ca4165697102dee40cb5204046e4f9f42c60b4c6c6d01150c1f99d9ef9fde65d5632bfd75985dc245ac923316df8010a62d3424f2b3b54d9215ee5abeeaf106d370c4b5d861e902ddf1a51460753c3d80f258f77f167d262665d6eeb20a3ef134fa5ba97759868c5034d1248128f20afa292353bf989cb6016700c9d37c49ab4326528693e4b445b524c937292a7bf3c58bd2", 0xae, 0x48aae759fc163e9a}, 0x200088b9) r6 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r0, r6, &(0x7f0000000940)=0x3, 0xffff) accept4$tipc(r0, 0x0, &(0x7f0000000980), 0x800) r7 = socket(0x0, 0x1, 0x8) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000009c0)) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r7, 0x84, 0x7, &(0x7f0000000a00)={0x80000001}, 0x4) r8 = openat$cgroup_ro(r7, &(0x7f0000000a40)='memory.numa_stat\x00', 0x0, 0x0) r9 = accept$inet6(r7, &(0x7f0000000a80)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000ac0)=0x1c) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x20010, r9, 0xf535c000) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000b40), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x34, r10, 0x8, 0x70bd26, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0xc, 0x1, @udp='udp:syz2\x00'}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c40), 0xffffffffffffffff) read(r0, &(0x7f0000000c80)=""/225, 0xe1) r12 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r12, &(0x7f0000000d80)={0x1d, r3, 0x0, {0x0, 0x1, 0x3}, 0x1}, 0x18) socket(0x2a, 0x80000, 0x7a4e) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_GET(r13, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e00)={0xac, r11, 0x400, 0x70bd2a, 0x0, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x24008080}, 0x40000) 14.289525668s ago: executing program 2 (id=431): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4000004}, 0x10) write(r1, &(0x7f0000000080)="240000001a007f0214f9f4070009040802000000000000050002000008000f40fe00000e", 0x24) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f00000000c0)="ff02040000ffffffffffffffff1f2be82db1af000000000067fe1cb179677d61919628112bced517fc77fae568d60362075da39de5cf54dba400c03efd78d77fc259993b83cf6d81bb0abc66080400f2f9e9dd44633c12ee2f98d327291b45278d3e787edc9e1e815bf027301f9720ca7f8ff6afa0ab8eb0", 0x78) (async) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000080)=ANY=[], 0x8) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000131401010000000000000000080001"], 0x20}}, 0x24004010) 13.712731039s ago: executing program 3 (id=588): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) r1 = getpid() write$cgroup_pid(r0, &(0x7f0000000040)=r1, 0x12) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @dev, @empty}, &(0x7f0000000100)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@mpls_newroute={0xcc, 0x18, 0x10, 0x70bd26, 0x25dfdbfd, {0x1c, 0x10, 0x10, 0x5, 0xfc, 0x1, 0x0, 0x2, 0x400}, [@RTA_NEWDST={0x84, 0x13, [{0x16fe, 0x0, 0x1}, {0x1f}, {0x4}, {0xffffa, 0x0, 0x1}, {0x7150}, {0x37c, 0x0, 0x1}, {0x3ff, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x1}, {0x7}, {0x1, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x7c5}, {0x800}, {0x3d5d, 0x0, 0x1}, {0x400, 0x0, 0x1}, {0x2}, {0x4}, {0x649, 0x0, 0x1}, {0x8}, {0x2a, 0x0, 0x1}, {0x1}, {0xfff, 0x0, 0x1}, {0xe03}, {0xc}, {0x1}, {0x647, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x1}, {0x7}, {0x5, 0x0, 0x1}, {0x3, 0x0, 0x1}]}, @RTA_OIF={0x8, 0x4, r2}, @RTA_OIF={0x8}, @RTA_DST={0x8, 0x1, {0x7}}, @RTA_MULTIPATH={0xc, 0x9, {0x7, 0x10, 0x6a, r3}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x8}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x4880) openat$cgroup_subtree(r0, &(0x7f0000000300), 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000340)={0x0, 0x8}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000003c0)={r4}, &(0x7f0000000400)=0x8) r5 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000440)=r1) sendmsg$tipc(r0, &(0x7f0000000900)={&(0x7f0000000480)=@name={0x1e, 0x2, 0x3, {{0x40, 0x3}, 0x1}}, 0x10, &(0x7f0000000800)=[{&(0x7f00000004c0)="f9d9a02eba96b9829f7e302317f940387a6e9e435099ab13fe80dd0c6bcdf5d4168ca039c658844faf3acc2a09e479d57a7d87b3db96c4e0fc5eef9c5a9327bbddf0cddd18c60548585979ae2071e430ee2c3d7ef9017db556bfe99a8b7ffe875eeb5bc9a5c11add4a1bb9b87b6a7331d7dd29b5f527a2425b6147f028d4e87285500be4aef54f1c5e92c13deac04169586e42f7fb01ab7f06d6dc1800fc58e8b4de3f41287ee6b6899896e9dc380e1cbf01478d598bfa3fc55949d64f85c91dd1123a2d148d2bcc240d3175748678a0a028c12781b5444eee41b13e161f7b2a5ce053", 0xe3}, {&(0x7f00000005c0)="a3904da50d9a277fbb5d855624fdaa5bff8496fe00dbd827f934141fafcfba9df9caebd19470d5c5fed6eec8b0a4fc4535de5e4b9c556d3dba8cac870f3a7ce494e2fbfbd8e8d9af106f3aa1eb361862751132d8cfd83fb0d076821dd211ee77a01aad028ffcb4f2c847c32e0bd2ae60fc5c3abb92a2393a20e6f3b40a9dcb120a374a5da52f0e134195f7f8b9e2500b3f2b60e1b360d1f42f4e2e0a55f6b66018aed44b4bba068b", 0xa8}, {&(0x7f0000000680)="0a78729960f462ec834fad8a3e3d6854343ad8ae30f5ac0b0d8bd6b6bbea46c23d086b9fd7d080003fcd3e9037baf253a24cbe5d4e8d2d27a75081e3a9b6530a72e91aded1e13890c61aae0e35e957c855716c55950548bdc0eea2857d2085ecbb4d19760cbb13fc4939a772f3e62bed979928ba0ecdbca5846e6427e8025d8988c4d3be35b8e4749eebeec39ce0c997cffe6139d8382425b09bebc3c6d81a077bd4b0e3fb038fc48a5aa937ac74d2ff56143c9d316b68ffedfa5550772e07a2b7d947bb7bca5235c654657d1dd6c2", 0xcf}, {&(0x7f0000000780)="c56867e39cdb6adeaa9c7a729b5592f85b37762608b8286a11fd03e7572298317f3bd45bee652d0bbc454bcaaacbb5be318c7b40150cc4e8a54d2d4649f99ce791389ea94dbc6531701f6f6f2c9492b233d92ce54c6cf5a81655b44248", 0x5d}], 0x4, &(0x7f0000000840)="2dbab51a9cb9f749a8036992cf7c5842e50091e98f6f987855cb1c3ca4165697102dee40cb5204046e4f9f42c60b4c6c6d01150c1f99d9ef9fde65d5632bfd75985dc245ac923316df8010a62d3424f2b3b54d9215ee5abeeaf106d370c4b5d861e902ddf1a51460753c3d80f258f77f167d262665d6eeb20a3ef134fa5ba97759868c5034d1248128f20afa292353bf989cb6016700c9d37c49ab4326528693e4b445b524c937292a7bf3c58bd2", 0xae, 0x48aae759fc163e9a}, 0x200088b9) r6 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r0, r6, &(0x7f0000000940)=0x3, 0xffff) accept4$tipc(r0, 0x0, &(0x7f0000000980), 0x800) r7 = socket(0x0, 0x1, 0x8) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000009c0)) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r7, 0x84, 0x7, &(0x7f0000000a00)={0x80000001}, 0x4) r8 = openat$cgroup_ro(r7, &(0x7f0000000a40)='memory.numa_stat\x00', 0x0, 0x0) r9 = accept$inet6(r7, &(0x7f0000000a80)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000ac0)=0x1c) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x20010, r9, 0xf535c000) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000b40), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x34, r10, 0x8, 0x70bd26, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0xc, 0x1, @udp='udp:syz2\x00'}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c40), 0xffffffffffffffff) read(r0, &(0x7f0000000c80)=""/225, 0xe1) r12 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r12, &(0x7f0000000d80)={0x1d, r3, 0x0, {0x0, 0x1, 0x3}, 0x1}, 0x18) socket(0x2a, 0x80000, 0x7a4e) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_GET(r13, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e00)={0xac, r11, 0x400, 0x70bd2a, 0x0, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x24008080}, 0x40000) 1.993900995s ago: executing program 0 (id=776): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x46, &(0x7f0000000100)=0x8, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000004900010000000000000000000a000700", @ANYRES32=0x0, @ANYBLOB="000000000800020000000000140001"], 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="85000000350000009c0000000000000025000000fffffff19500000d000000004bea11fade2d6950bdaebf39f5d5e2c5dec1e666c3a573"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x8000000, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) 1.816967967s ago: executing program 0 (id=779): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001a00000125bd7000fdba45251c800003fd04c8080005000005001a000600000005001a0004000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40011}, 0x54) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x50, 0x30, 0x1, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_mpls={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x3}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x50}}, 0x0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) socket$unix(0x1, 0x5, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'geneve1\x00'}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r5, 0x0, 0x4000000) (async) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r6, &(0x7f00000003c0)={0xa, 0xfffb, 0x3000000, @mcast2, 0x5}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) (async) write(r6, &(0x7f00000000c0)="8f2a0a65bd8c3a2b0304000e0580a7b6070d63e286a5cefe", 0x5ac) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r7) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) (async) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="000229bd7000ffdbdf253e000000080001007043690011000200303030303a30303a31302e30000000001c008200756c7469636173740005008300010000000800010070636900110002af190155040000003a31302e30000004001c008200736f757263655f6d61635f69735f6d756c746963617374020500830001000000080001007063690011000200303030303a30303a31302e30000000001c008200956f757263655f6d61635f69735f6d756c746963617374000500830000000000865422e1d5f2104c24479abbaff8066014d10a07b4f99b94f88d9a11fc1061a92cb43378dc8e74aceceffcee88b99b97d5f22d07f70f88b0dd603b79ceff75d94ad96d3d19ca11ee464cf3d5c0c831"], 0xd4}, 0x1, 0x0, 0x0, 0x44001}, 0x20008080) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r8, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000001c0)={0x14, r9, 0x31f, 0x70bc29, 0x1, {0x26}}, 0x14}, 0x1, 0x0, 0x0, 0x200040d1}, 0x41800) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r12], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x88010) (async) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000ffdbdf256700000008000300f80141af67a0a2e0c4bcd3c412cacca114a09bd10d3be69a02a7c89aa9f60c2cad874fc206ae001cd3d54ad11c2fde28fc3b0ecb4060adccf5a7dd929cc901cf", @ANYRESOCT=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004040) 1.694956132s ago: executing program 1 (id=781): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0x4, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070400008500000021000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f00000006c0)=[{{&(0x7f0000000000)={0xa, 0x40, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)="18", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0xfffffffb, @remote, 0x5}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)='.', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r3, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608c5c50538eea153", 0xc8}, {&(0x7f00000004c0)="7ee25c099579d92f8da721f68a8100b6adf04e0cd543f7d26019d57e6a3ecf7ef34486da35c482845d517dc801cca9e4f248b15413a7e252b0", 0x39}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000009c0)={0x0, @in6={{0xa, 0x4e23, 0xab9, @local, 0x8}}}, &(0x7f0000000100)=0x84) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x5, 0xe, 0x0, &(0x7f0000000000)="251200d800"/14, 0x0, 0x7ff, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.604106467s ago: executing program 0 (id=782): r0 = socket(0xa, 0x2, 0x0) close(r0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x21, 0x0, &(0x7f0000003c00)) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@multicast, @link_local, @val={@void, {0x8100, 0x1}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x4, 0x5}}}}}}}, 0x0) 1.501208603s ago: executing program 1 (id=784): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r3) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x54, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4800) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa0028000}) 1.384496998s ago: executing program 0 (id=785): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000880)={0x0, 0xfffffffffffffe62, &(0x7f0000000840)={&(0x7f00000009c0)=@bridge_getlink={0x28, 0x12, 0x101, 0x0, 0xffffffe0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xc3}]}, 0x28}}, 0x0) r2 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x9000, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000900], 0x2, 0x0, &(0x7f0000000900)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'caif0\x00'}) 1.253632357s ago: executing program 1 (id=786): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="250300000000000000001600000014000180100001006574683a697036745a6e6c30"], 0x28}}, 0x4000000) unshare(0x6020400) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448cc, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001880)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x158, 0x111, 0x4b4, 0x158, 0xd4feffff, 0x2b0, 0x20a, 0x278, 0x2b0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'vlan1\x00'}, 0x7a, 0x118, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x80000001, 0x80}}, @common=@unspec=@connlabel={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@dst={{0x48}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) 1.100064038s ago: executing program 4 (id=787): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000020905000000000000000000000000003c0002002d00018014000300fc01000000000000000000000000000014000400fe8000000000000000000000000000aa0c0002800400010000000000"], 0x50}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000020905000000000000000000000000003c0002002d00018014000300fc01000000000000000000000000000014000400fe8000000000000000000000000000aa0c0002800400010000000000"], 0x50}}, 0x0) (async) 1.083564846s ago: executing program 0 (id=788): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4020) getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000580), &(0x7f0000000180)=0x1) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes-aesni)\x00'}, 0x58) (async) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f0000000180)=""/212, 0x2e, 0x91, 0x1}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f0000000180)=""/212, 0x2e, 0x91, 0x1}, 0x20) accept4(r3, 0x0, 0x0, 0x800) (async) r4 = accept4(r3, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000200)=@ccm_128={{0x303}, "cf021868911e1276", "3f29d6e7dcec155db6af5503099ee30f", "17b84a70", "6bf873711fbeee8e"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) (async) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) shutdown(r0, 0x0) 966.542731ms ago: executing program 1 (id=789): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x200, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0x8}, {0xa, 0xfff3}, {0xb, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}]}}]}, 0x44}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x1e, 0x4, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, r3, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x20040080) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000900)=@req3={0x0, 0xfffffff9, 0x800, 0x75ae, 0xdffffff7, 0xfffffff9, 0x5}, 0x1c) recvmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000480)=""/217, 0xd9}], 0x1}, 0x10101) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000780)={0x8, 'virt_wifi0\x00', {'vlan0\x00'}, 0x1}) sendmmsg$inet6(r4, &(0x7f00000007c0)=[{{&(0x7f00000001c0)={0xa, 0x4e22, 0x800, @local, 0x6}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000280)="5016f6ffbbfbf8bf5d01178dca767a7f7fa6288ed95ea0cba33dba5f05a123ac8741b93c21d67b7c6aedb38894c9a3899030757cd3d664c930110349495f94da7954bf20e8197e5fbf23aa1aede662e833879fca6f6728ea74862c6d", 0x5c}, {&(0x7f0000000580)="d951769bd033af3de952060a2a2014838032bd6e6b2980d5de6c5bacd62aa23fc0c2410be91930e063523b76fb711ece03a19ff37b37d0a6296ee38d454beccb942d3235af58e501fd7d9252e91835e90735ffebddde842a9e9e7652f2371d8cd395423b999fb204e84f26d63d94510d79d19bdb7a4563028b0993e4ef0e9d99a811e8644354529a6b7c5ef536a9697eef07d8afc8f5d7fbca1ac3466ff06a8171aca4e64aef309fff2a1af7f21cb0583b0e66f5ed1e08fc4934a9775c7bac16dfdb519dae6e6eaa715461090c9f679bf8a2fcafbb170a55380e095ce1c0a006c191aba161816fc4742746245b", 0xed}, {&(0x7f0000000300)="8e3b42454aef481980f46fc1a011e0c241128711c728b6f3718608ea9b40383fd95f4b3a2bc2c491e657bb2876eb898287f6f5d691623708d21f053c7a42cc6e7bc34047f279a5a6f23f7062a54277c95541af1382fb371d8a0704d10688a51b3e2c6d960adb0a5a83dfc22ba9c591056f1bca5de6447bd11a4ba4bc89f0", 0x7e}, {&(0x7f0000000680)="ae1655fa3bc9e6f86a77a3fb5524b48b29d2a8dbd28ced749b76b710f3cb56eb0c9f0fa1fd5a911c9e73aad32040357cf3cfbdb3572c824492c772d6c24caa7c9e1017637a7cb035ad117acc18249944dcb7ff712ee1eb64664308aaabd3dc57ffe4f74ccda2122c512a3ba2cf82208fd7b4357232a65c53553a882ee96a717467c28992313f23eacec3f548a8420dcfa432410145e70776820cfd8b178b6042e83b16ea25c98297ae4067f03c63e5c61a19875c", 0xb4}], 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="28000000fcdce1798200fb8f002900000004000000ff020000000000070001000001767e6cb5c73ec9b918f4ad89eaed4cbe4812372d8a368667195a3d75f87ae72c3016bef5b9ff6f2b1b2d3834e073141a2327552a1d4de0ab4e68879caa79996adc1d19fe570faef05cc30809486a7cdfad9c37bae4b9aaf44e2040bed9aab6157f65005c834f0f1e259e6bdfb73145d5306cf5f84b331648447bed3f64274b9f670e8e"], 0x28}}], 0x1, 0x40000) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a010400000000000000000200000048000480440001800c0001007061796c6f616400340002800800044000000000080005400000000808000340000000000800024000000000080006400000000108000840000000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) 775.846354ms ago: executing program 0 (id=790): socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0xfa) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3}}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r0, 0x0, 0x10001, 0xffffffff}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, r1}, 0x50) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x18, 0x1409, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000700)="a8", 0x1}], 0x1}}], 0x1, 0x4004441) shutdown(r0, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="4c87fe555ceb79157b1e507ff4d3cc053321e42ae89f596427188b4877ab8f1776c0685784f1174c6401ecc1dd6e2a77bc79238f87ad9215a92ff203a30099e77c543e702b4a4438d358616381745f24f74e585498af129c4b173b242f445b08135f7fa40eb7ba78160ff4f0c80e1b324d0c234cb7f43a3ff9e9535dc16000c797113a039f4508a09144090000009f38a90a24f173b3e68377e4272950a80cfcd3aa6850e917bc7e57370060f5e6db941d67fc98a1e98103830b821657438325578d2af822dd4fc13ea7a7eef8d9be4e715aec8fd6cadc41c8da5ce9da2b9e1559d92a1936fc2b3a00000000000000000072200e10ba6269b634f10f7098c65ba67ba65c0e2687637e131fb8d5ba6c12c09c8356853c434a44ff0878e496dcf9a4f5ca02c293279948f37ebb28843f92c87c057a3b410e04418557d5deda7ddd3bd1d384d64ec980187e8b64a0696571a49e847db79349c9b3c3fab5f1f977bde4d802d9026ae0c11744eb1525c5195fd215d7a432497f35c2f2cfcd2b6336b26dfef0cb968c910ea2af5cdd4d58cc08535d5514", 0x2, 0x0, 0x10000}, 0x24) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_HANDLE(r4, 0x113, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000061116c000000000017000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb0121b40700000000000040000000400000000c0000008acef25001000084010000000a00000003000000060000000000000000000001050000002000000000000000000000030000000002000000020020a69e000000000c000000002e2e61618261005f00"], 0x0, 0x64}, 0x28) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffff}) r7 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000040)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x16, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x95}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x58, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_STATUS={0x8}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xffff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}]}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xffff0001}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 774.939116ms ago: executing program 4 (id=791): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=@ipv4_newrule={0x38, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x3}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth0_macvtap\x00'}, @FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x10) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) (async) r2 = socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$unix(r3, &(0x7f0000000100)=@abs={0x27}, 0x6e) (async) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfef2) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x9, &(0x7f0000000100), 0x4) sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x75}], 0x1}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, 0x0}, 0x94) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x24, r5, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}}, 0x0) 528.289025ms ago: executing program 4 (id=792): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f00000000c0)={0x4, &(0x7f0000000040)=[{0x91, 0x7, 0xe, 0x2773cf56}, {0x8001, 0x7, 0x6, 0x1000}, {0x1, 0x0, 0x7b, 0x91a6}, {0x381a, 0x6, 0x8, 0x28}]}, 0x10) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r3, 0xc040ff0b, 0x0) 388.861815ms ago: executing program 4 (id=793): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083, 0x715cb}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x10012, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0xb5, &(0x7f000000cf3d)=""/181, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, r0, 0x8, 0x0, 0xfffffffffffffd53}, 0x94) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$BTRFS_IOC_SYNC(r2, 0x9408, 0x0) 260.265184ms ago: executing program 1 (id=794): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr=0xfffffffe}, 0x2, 0x4}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000280)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000730107000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13}, 0x94) 204.032731ms ago: executing program 4 (id=795): r0 = socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)={0x2c, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x10}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendto$packet(r1, &(0x7f0000000000)='g', 0x48, 0x0, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000206030000000019000000000d0000000c000300686173683a6970000500040000000031000000000500050002000000050001000600"/68], 0x44}}, 0x0) sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0x24044000) sendto$inet(r0, &(0x7f0000000140)="8cb65834601f8a47254041b83ec039d3923e5b02c83b590a1dcc7cab8728eab9395c4769403671c276ae2f3f539d6ebc92cda4db5a4bd2582ea2e54f04c5df417013a88bb17729a76a1494af2bb92429effe5684977e275353e31eec1476f2e1a6b62048c94517a63fa8eb5c04f73714808d6f09944cb8e2a8dc5d2617c751c0cf92bfb61c89768d60950bd05b416671bd4c9e601c7fb657058ee7fe444bf7", 0x9f, 0x1c014, 0x0, 0x0) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000005060101000000000000000001000008050001001f000000"], 0x1c}}, 0x8084) 181.185277ms ago: executing program 1 (id=796): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000200), 0x8) sendto$inet(r0, &(0x7f0000000700)="ab12bb69", 0x4, 0x488c0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendto$inet(r1, &(0x7f0000000100)="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", 0xfd, 0x40080, &(0x7f0000000040)={0x2, 0x4e24, @private=0xa010102}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000001cc0), &(0x7f0000001d00)=0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r3, &(0x7f0000000880)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0x800, @remote, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000004c0)="0508686b2271148b4fb759c0c22a04946ade14", 0x13}], 0x1}}, {{&(0x7f0000000540)={0xa, 0x4e21, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000580)="860d4fdf6609238947ba4523ceb9bd6532003345419bcfdf9c99fa301ae4d670cec8da099fe7164722fc99b813617e1a71b63da8549b3729e5141bcbc5d041cd2b39f9c6a3a9d27ac3781f370d863c774214b53edfea40d59fd9a05ade", 0x5d}], 0x1054, &(0x7f0000000640)=[@dstopts={{0x20, 0x29, 0x37, {0x4, 0x0, '\x00', [@ra={0x5, 0x2, 0x400}]}}}], 0x20}}], 0x2, 0x4010) recvfrom$inet(r0, &(0x7f0000000740)=""/251, 0xfb, 0x1, &(0x7f0000000840)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) shutdown(r3, 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES8=r2, @ANYRES64=0x0, @ANYRES16=r3], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r8], 0x54}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r11, @ANYBLOB="0174"], 0x20}}, 0x0) setsockopt(r3, 0x84, 0x83, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x5}, 0x8) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0xe01, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x60}, 0x1, 0x0, 0x0, 0x20048880}, 0x0) 0s ago: executing program 4 (id=797): pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x40000}, 0x0) splice(r0, 0x0, r2, 0x0, 0x10d00, 0xf) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x2c}}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000600)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0xfffffffd, 0x0, 0x0, 0x8}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}]}, 0x60}, 0x1, 0x7}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.92' (ED25519) to the list of known hosts. [ 83.691697][ T5818] cgroup: Unknown subsys name 'net' [ 83.796058][ T5818] cgroup: Unknown subsys name 'cpuset' [ 83.805209][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.513806][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.552921][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.558578][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.561154][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.576651][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.586214][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.594709][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.603600][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.612916][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.621539][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.629347][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.638744][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.644049][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.646676][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.660864][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.668238][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.677142][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.691736][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.703624][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.712053][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.712088][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.720153][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.735766][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.751018][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.759757][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.769713][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.243861][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 89.516107][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.523859][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.532065][ T5828] bridge_slave_0: entered allmulticast mode [ 89.539448][ T5828] bridge_slave_0: entered promiscuous mode [ 89.549728][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.557033][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.564519][ T5828] bridge_slave_1: entered allmulticast mode [ 89.571974][ T5828] bridge_slave_1: entered promiscuous mode [ 89.677427][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 89.768428][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 89.784547][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.797457][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 89.835718][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.886740][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 89.968516][ T5828] team0: Port device team_slave_0 added [ 90.023427][ T5828] team0: Port device team_slave_1 added [ 90.036443][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.043863][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.051352][ T5838] bridge_slave_0: entered allmulticast mode [ 90.058609][ T5838] bridge_slave_0: entered promiscuous mode [ 90.120234][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.128284][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.135731][ T5838] bridge_slave_1: entered allmulticast mode [ 90.144828][ T5838] bridge_slave_1: entered promiscuous mode [ 90.256440][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.265436][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.272746][ T5841] bridge_slave_0: entered allmulticast mode [ 90.280024][ T5841] bridge_slave_0: entered promiscuous mode [ 90.289649][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.296945][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.323015][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.336082][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.343496][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.352032][ T5835] bridge_slave_0: entered allmulticast mode [ 90.359494][ T5835] bridge_slave_0: entered promiscuous mode [ 90.370329][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.393964][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.401554][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.408810][ T5841] bridge_slave_1: entered allmulticast mode [ 90.416272][ T5841] bridge_slave_1: entered promiscuous mode [ 90.428502][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.438144][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.464647][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.476017][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.483445][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.490657][ T5835] bridge_slave_1: entered allmulticast mode [ 90.498941][ T5835] bridge_slave_1: entered promiscuous mode [ 90.508276][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.595214][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.602571][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.609924][ T5831] bridge_slave_0: entered allmulticast mode [ 90.618570][ T5831] bridge_slave_0: entered promiscuous mode [ 90.626999][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.634895][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.642796][ T5831] bridge_slave_1: entered allmulticast mode [ 90.650093][ T5831] bridge_slave_1: entered promiscuous mode [ 90.674380][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.700498][ T5838] team0: Port device team_slave_0 added [ 90.724601][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.738002][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.742364][ T5840] Bluetooth: hci0: command tx timeout [ 90.754987][ T5838] team0: Port device team_slave_1 added [ 90.818662][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.821561][ T5836] Bluetooth: hci3: command tx timeout [ 90.828582][ T5845] Bluetooth: hci1: command tx timeout [ 90.833940][ T5836] Bluetooth: hci4: command tx timeout [ 90.844838][ T5840] Bluetooth: hci2: command tx timeout [ 90.863567][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.893528][ T5828] hsr_slave_0: entered promiscuous mode [ 90.900305][ T5828] hsr_slave_1: entered promiscuous mode [ 90.937919][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.950459][ T5841] team0: Port device team_slave_0 added [ 90.960582][ T5841] team0: Port device team_slave_1 added [ 90.984913][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.992024][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.018316][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.074757][ T5835] team0: Port device team_slave_0 added [ 91.081938][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.089024][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.115707][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.154269][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.161553][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.187754][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.201918][ T5835] team0: Port device team_slave_1 added [ 91.218358][ T5831] team0: Port device team_slave_0 added [ 91.246977][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.254359][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.280507][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.328738][ T5831] team0: Port device team_slave_1 added [ 91.370327][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.377632][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.404304][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.479945][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.487164][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.514282][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.539531][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.547628][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.574094][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.587399][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.594744][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.621136][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.637405][ T5841] hsr_slave_0: entered promiscuous mode [ 91.645962][ T5841] hsr_slave_1: entered promiscuous mode [ 91.652539][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.660329][ T5841] Cannot create hsr debugfs directory [ 91.693790][ T5838] hsr_slave_0: entered promiscuous mode [ 91.700296][ T5838] hsr_slave_1: entered promiscuous mode [ 91.707286][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.715378][ T5838] Cannot create hsr debugfs directory [ 91.919775][ T5835] hsr_slave_0: entered promiscuous mode [ 91.926303][ T5835] hsr_slave_1: entered promiscuous mode [ 91.933404][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.941026][ T5835] Cannot create hsr debugfs directory [ 92.020438][ T5831] hsr_slave_0: entered promiscuous mode [ 92.027857][ T5831] hsr_slave_1: entered promiscuous mode [ 92.034215][ T10] cfg80211: failed to load regulatory.db [ 92.041764][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.049582][ T5831] Cannot create hsr debugfs directory [ 92.345283][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.387465][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.420290][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.432423][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.524782][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.573905][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.597014][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.636767][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.733810][ T5841] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.760835][ T5841] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.773938][ T5841] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.785331][ T5841] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.821621][ T5836] Bluetooth: hci0: command tx timeout [ 92.859759][ T5835] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.879848][ T5835] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.892525][ T5835] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.901703][ T5836] Bluetooth: hci1: command tx timeout [ 92.907188][ T5836] Bluetooth: hci3: command tx timeout [ 92.913161][ T5846] Bluetooth: hci2: command tx timeout [ 92.918034][ T5845] Bluetooth: hci4: command tx timeout [ 92.964945][ T5835] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.079795][ T5831] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.108893][ T5831] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.120041][ T5831] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.134050][ T5831] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.185585][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.203871][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.258707][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.295538][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.302990][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.319480][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.342831][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.350273][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.360812][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.368093][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.396055][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.408489][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.415807][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.550043][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.577782][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.602979][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.610195][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.639854][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.699136][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.713160][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.720458][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.797782][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.805055][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.819321][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.826583][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.858204][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.948448][ T2978] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.955793][ T2978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.046085][ T2978] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.053344][ T2978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.209030][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.240326][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.420810][ T5838] veth0_vlan: entered promiscuous mode [ 94.439278][ T5828] veth0_vlan: entered promiscuous mode [ 94.489384][ T5838] veth1_vlan: entered promiscuous mode [ 94.534410][ T5828] veth1_vlan: entered promiscuous mode [ 94.697330][ T5828] veth0_macvtap: entered promiscuous mode [ 94.745664][ T5828] veth1_macvtap: entered promiscuous mode [ 94.768514][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.790042][ T5838] veth0_macvtap: entered promiscuous mode [ 94.816418][ T5838] veth1_macvtap: entered promiscuous mode [ 94.834615][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.870295][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.896960][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.905081][ T5846] Bluetooth: hci0: command tx timeout [ 94.918523][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.936356][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.950344][ T5838] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.959555][ T5838] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.969699][ T5838] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.983073][ T5838] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.992496][ T5846] Bluetooth: hci2: command tx timeout [ 94.998055][ T5846] Bluetooth: hci4: command tx timeout [ 95.004318][ T5845] Bluetooth: hci3: command tx timeout [ 95.009875][ T5845] Bluetooth: hci1: command tx timeout [ 95.041673][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.050011][ T5828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.067443][ T5828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.078190][ T5828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.091121][ T5828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.252279][ T5831] veth0_vlan: entered promiscuous mode [ 95.333242][ T5831] veth1_vlan: entered promiscuous mode [ 95.403226][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.413493][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.415776][ T5841] veth0_vlan: entered promiscuous mode [ 95.488996][ T5831] veth0_macvtap: entered promiscuous mode [ 95.514199][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.525851][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.548031][ T5841] veth1_vlan: entered promiscuous mode [ 95.569859][ T5831] veth1_macvtap: entered promiscuous mode [ 95.600580][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.630897][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.662467][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.670421][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.699290][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.739099][ T5841] veth0_macvtap: entered promiscuous mode [ 95.762409][ T5835] veth0_vlan: entered promiscuous mode [ 95.775073][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.799946][ T5838] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.825398][ T5841] veth1_macvtap: entered promiscuous mode [ 95.850030][ T5835] veth1_vlan: entered promiscuous mode [ 95.869942][ T5831] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.880775][ T5831] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.894119][ T5831] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.911173][ T5831] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.050113][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.067208][ T5951] syz_tun: entered allmulticast mode [ 96.095866][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.131547][ T5835] veth0_macvtap: entered promiscuous mode [ 96.150078][ T5951] syz_tun: left allmulticast mode [ 96.175626][ T5841] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.191410][ T5841] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.200282][ T5841] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.227026][ T5841] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.244319][ T5955] netlink: 'syz.1.6': attribute type 28 has an invalid length. [ 96.258019][ T5955] netlink: 'syz.1.6': attribute type 3 has an invalid length. [ 96.293446][ T5955] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6'. [ 96.320121][ T5956] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.334797][ T5835] veth1_macvtap: entered promiscuous mode [ 96.337498][ T5956] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.385967][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.407353][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.414815][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.421150][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.498101][ T5835] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.507963][ T5835] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.517331][ T5835] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.526610][ T5835] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.652350][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.717266][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.797414][ T5965] netdevsim netdevsim1: Direct firmware load for failed with error -2 [ 96.824047][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.832269][ T5965] netdevsim netdevsim1: Falling back to sysfs fallback for: [ 96.849730][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.883956][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.900636][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.983715][ T5836] Bluetooth: hci0: command tx timeout [ 97.028050][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.060330][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.072033][ T5836] Bluetooth: hci1: command tx timeout [ 97.073551][ T5845] Bluetooth: hci4: command tx timeout [ 97.079208][ T5836] Bluetooth: hci3: command tx timeout [ 97.085390][ T5846] Bluetooth: hci2: command tx timeout [ 97.097650][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.102491][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.265238][ T5971] Zero length message leads to an empty skb [ 97.370332][ T5975] netlink: 48 bytes leftover after parsing attributes in process `syz.3.11'. [ 97.528412][ T5977] syzkaller1: entered promiscuous mode [ 97.561626][ T5977] syzkaller1: entered allmulticast mode [ 97.626216][ T5977] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (1452) ! [ 97.726427][ T5988] netlink: 232 bytes leftover after parsing attributes in process `syz.2.12'. [ 97.780944][ T5993] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12'. [ 97.839085][ T5988] warning: `syz.2.12' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 98.052768][ T5998] netlink: 14 bytes leftover after parsing attributes in process `syz.3.15'. [ 98.135117][ T6000] IPVS: Unknown mcast interface: pim6reg1 [ 98.443504][ T5998] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.460332][ T5998] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.472651][ T5998] bond0 (unregistering): Released all slaves [ 98.513929][ T6024] netlink: 40 bytes leftover after parsing attributes in process `syz.4.20'. [ 98.821842][ T6029] netlink: 12 bytes leftover after parsing attributes in process `syz.1.21'. [ 99.567532][ T6056] openvswitch: netlink: IP tunnel TTL not specified. [ 99.691979][ T6058] netlink: 36 bytes leftover after parsing attributes in process `syz.3.32'. [ 99.846956][ T6065] netlink: 28 bytes leftover after parsing attributes in process `syz.1.33'. [ 100.112647][ T6073] syz.2.37 uses obsolete (PF_INET,SOCK_PACKET) [ 100.265941][ T6078] netlink: 28 bytes leftover after parsing attributes in process `syz.3.39'. [ 100.571929][ T6078] netlink: 'syz.3.39': attribute type 3 has an invalid length. [ 100.696174][ T6097] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 100.929521][ T6106] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 101.527359][ T6129] __nla_validate_parse: 6 callbacks suppressed [ 101.527380][ T6129] netlink: 16 bytes leftover after parsing attributes in process `syz.3.53'. [ 101.835923][ T6140] netlink: 'syz.2.56': attribute type 5 has an invalid length. [ 102.030987][ T6147] gre1: entered promiscuous mode [ 102.061384][ T6147] gre1: entered allmulticast mode [ 102.514746][ T6169] netlink: 4 bytes leftover after parsing attributes in process `syz.4.66'. [ 102.533024][ T6166] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 102.550124][ T6166] bridge0: entered allmulticast mode [ 102.570335][ T6172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.66'. [ 102.752295][ T6170] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 102.778375][ T6180] netlink: 40 bytes leftover after parsing attributes in process `syz.0.68'. [ 102.914319][ T6170] netlink: 662 bytes leftover after parsing attributes in process `syz.2.64'. [ 103.024801][ T6191] netlink: 'syz.4.70': attribute type 12 has an invalid length. [ 103.044844][ T6191] netlink: 'syz.4.70': attribute type 29 has an invalid length. [ 103.059819][ T6191] netlink: 148 bytes leftover after parsing attributes in process `syz.4.70'. [ 103.075538][ T6191] netlink: 'syz.4.70': attribute type 2 has an invalid length. [ 103.083638][ T6191] netlink: 35 bytes leftover after parsing attributes in process `syz.4.70'. [ 103.116073][ T6193] netlink: 8 bytes leftover after parsing attributes in process `syz.0.71'. [ 103.184640][ T6193] netlink: 'syz.0.71': attribute type 27 has an invalid length. [ 103.272050][ T6194] x_tables: unsorted underflow at hook 2 [ 103.717523][ T6216] No such timeout policy "syz0" [ 103.986732][ T6226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.78'. [ 104.052065][ T6228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.80'. [ 104.083194][ T6228] delete_channel: no stack [ 104.116167][ T6231] C: renamed from lo (while UP) [ 105.299694][ T6254] netlink: 'syz.3.87': attribute type 1 has an invalid length. [ 105.315393][ T6254] netlink: 'syz.3.87': attribute type 1 has an invalid length. [ 105.336830][ T6264] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.433492][ T6264] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.712578][ T6275] Cannot find add_set index 0 as target [ 105.855208][ T6284] vlan2: entered promiscuous mode [ 105.860636][ T6284] vlan2: entered allmulticast mode [ 105.896238][ T6284] hsr_slave_1: entered allmulticast mode [ 105.900477][ T6285] ieee802154 phy0 wpan0: encryption failed: -22 [ 106.162259][ T6298] ip6_vti0: mtu less than device minimum [ 106.202326][ T6300] syz.1.101: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 106.245069][ T6300] CPU: 1 UID: 0 PID: 6300 Comm: syz.1.101 Not tainted 6.16.0-rc3-syzkaller-00136-g561aa0e22b70 #0 PREEMPT(full) [ 106.245102][ T6300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 106.245124][ T6300] Call Trace: [ 106.245133][ T6300] [ 106.245142][ T6300] dump_stack_lvl+0x189/0x250 [ 106.245189][ T6300] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 106.245219][ T6300] ? __pfx_dump_stack_lvl+0x10/0x10 [ 106.245255][ T6300] ? __pfx__printk+0x10/0x10 [ 106.245279][ T6300] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 106.245303][ T6300] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 106.245335][ T6300] warn_alloc+0x214/0x310 [ 106.245359][ T6300] ? stack_depot_save_flags+0x40/0x900 [ 106.245391][ T6300] ? __pfx_warn_alloc+0x10/0x10 [ 106.245418][ T6300] ? kasan_save_track+0x4f/0x80 [ 106.245450][ T6300] ? xskq_create+0x56/0x170 [ 106.245479][ T6300] ? xsk_init_queue+0xb0/0x110 [ 106.245504][ T6300] ? xsk_setsockopt+0x43f/0x710 [ 106.245539][ T6300] ? do_sock_setsockopt+0x257/0x3e0 [ 106.245562][ T6300] ? __x64_sys_setsockopt+0x18b/0x220 [ 106.245584][ T6300] ? do_syscall_64+0xfa/0x3b0 [ 106.245601][ T6300] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.245632][ T6300] __vmalloc_node_range_noprof+0x125/0x12f0 [ 106.245690][ T6300] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 106.245722][ T6300] ? __kasan_kmalloc+0x93/0xb0 [ 106.245745][ T6300] vmalloc_user_noprof+0xad/0xf0 [ 106.245769][ T6300] ? xskq_create+0xbf/0x170 [ 106.245800][ T6300] xskq_create+0xbf/0x170 [ 106.245834][ T6300] xsk_init_queue+0xb0/0x110 [ 106.245866][ T6300] xsk_setsockopt+0x43f/0x710 [ 106.245897][ T6300] ? __pfx_xsk_setsockopt+0x10/0x10 [ 106.245924][ T6300] ? __lock_acquire+0xab9/0xd20 [ 106.245961][ T6300] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 106.245989][ T6300] ? __pfx_xsk_setsockopt+0x10/0x10 [ 106.246018][ T6300] do_sock_setsockopt+0x257/0x3e0 [ 106.246047][ T6300] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 106.246074][ T6300] ? __fget_files+0x2a/0x420 [ 106.246101][ T6300] __x64_sys_setsockopt+0x18b/0x220 [ 106.246126][ T6300] do_syscall_64+0xfa/0x3b0 [ 106.246140][ T6300] ? lockdep_hardirqs_on+0x9c/0x150 [ 106.246166][ T6300] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.246182][ T6300] ? clear_bhb_loop+0x60/0xb0 [ 106.246203][ T6300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.246220][ T6300] RIP: 0033:0x7f1c2098e929 [ 106.246242][ T6300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.246258][ T6300] RSP: 002b:00007f1c21781038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 106.246279][ T6300] RAX: ffffffffffffffda RBX: 00007f1c20bb5fa0 RCX: 00007f1c2098e929 [ 106.246292][ T6300] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 106.246303][ T6300] RBP: 00007f1c20a10b39 R08: 0000000000000004 R09: 0000000000000000 [ 106.246314][ T6300] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.246324][ T6300] R13: 0000000000000000 R14: 00007f1c20bb5fa0 R15: 00007ffd89028858 [ 106.246351][ T6300] [ 106.553108][ T6303] Bluetooth: MGMT ver 1.23 [ 106.559224][ T6303] __nla_validate_parse: 8 callbacks suppressed [ 106.559245][ T6303] netlink: 44 bytes leftover after parsing attributes in process `syz.1.101'. [ 106.574565][ T6300] Mem-Info: [ 106.577727][ T6300] active_anon:5540 inactive_anon:0 isolated_anon:0 [ 106.577727][ T6300] active_file:1190 inactive_file:39827 isolated_file:0 [ 106.577727][ T6300] unevictable:768 dirty:404 writeback:0 [ 106.577727][ T6300] slab_reclaimable:9979 slab_unreclaimable:96977 [ 106.577727][ T6300] mapped:29163 shmem:1364 pagetables:1090 [ 106.577727][ T6300] sec_pagetables:0 bounce:0 [ 106.577727][ T6300] kernel_misc_reclaimable:0 [ 106.577727][ T6300] free:1333493 free_pcp:15491 free_cma:0 [ 106.581970][ T6274] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 106.624120][ T6300] Node 0 active_anon:22160kB inactive_anon:0kB active_file:4760kB inactive_file:159104kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116652kB dirty:1616kB writeback:0kB shmem:3920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11916kB pagetables:4224kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 106.664693][ T6300] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 106.696366][ T6300] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 106.726743][ T6300] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 106.732743][ T6300] Node 0 DMA32 free:1409540kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22112kB inactive_anon:0kB active_file:4760kB inactive_file:157276kB unevictable:1536kB writepending:1616kB present:3129332kB managed:2561004kB mlocked:0kB bounce:0kB free_pcp:49216kB local_pcp:26152kB free_cma:0kB [ 106.768804][ T6300] lowmem_reserve[]: 0 0 1 1 1 [ 106.773677][ T6300] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1828kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 106.803098][ T6300] lowmem_reserve[]: 0 0 0 0 0 [ 106.810353][ T6300] Node 1 Normal free:3909056kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:13216kB local_pcp:7040kB free_cma:0kB [ 106.841693][ T6300] lowmem_reserve[]: 0 0 0 0 0 [ 106.846674][ T6300] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 106.859716][ T6300] Node 0 DMA32: 251*4kB (UME) 141*8kB (UM) 13*16kB (UME) 14*32kB (UME) 10*64kB (UME) 5*128kB (UM) 4*256kB (M) 9*512kB (UME) 5*1024kB (M) 5*2048kB (ME) 338*4096kB (M) = 1409508kB [ 106.892058][ T6300] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 106.979094][ T6300] Node 1 Normal: 162*4kB (UE) 35*8kB (UME) 42*16kB (UME) 80*32kB (UME) 22*64kB (UME) 4*128kB (UME) 2*256kB (M) 2*512kB (M) 2*1024kB (UM) 0*2048kB 952*4096kB (ME) = 3909056kB [ 107.018985][ T6312] netlink: 'syz.0.104': attribute type 34 has an invalid length. [ 107.056225][ T6300] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 107.091601][ T6300] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 107.132218][ T6300] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 107.150039][ T6316] netlink: 24 bytes leftover after parsing attributes in process `syz.4.106'. [ 107.181772][ T6300] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 107.193413][ T6320] netlink: 32 bytes leftover after parsing attributes in process `syz.3.107'. [ 107.247274][ T6300] 42819 total pagecache pages [ 107.257487][ T6300] 0 pages in swap cache [ 107.275756][ T6324] netlink: 64 bytes leftover after parsing attributes in process `syz.0.108'. [ 107.284775][ T6300] Free swap = 124996kB [ 107.284793][ T6300] Total swap = 124996kB [ 107.284806][ T6300] 2097051 pages RAM [ 107.284815][ T6300] 0 pages HighMem/MovableOnly [ 107.284824][ T6300] 424694 pages reserved [ 107.284833][ T6300] 0 pages cma reserved [ 107.341734][ T6326] netlink: 64 bytes leftover after parsing attributes in process `syz.0.108'. [ 107.621914][ T5846] Bluetooth: hci0: command 0x0401 tx timeout [ 107.976617][ T6354] netlink: 11 bytes leftover after parsing attributes in process `syz.1.116'. [ 108.236223][ T6363] netlink: 80 bytes leftover after parsing attributes in process `syz.0.119'. [ 108.271880][ T6364] netlink: 'syz.4.118': attribute type 11 has an invalid length. [ 108.279801][ T6364] netlink: 224 bytes leftover after parsing attributes in process `syz.4.118'. [ 108.586592][ T6375] netlink: 52 bytes leftover after parsing attributes in process `syz.0.122'. [ 108.671590][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 109.008147][ T6387] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 109.120656][ T6392] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.129'. [ 109.149239][ T6392] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 109.201571][ T6394] sctp: [Deprecated]: syz.4.130 (pid 6394) Use of int in max_burst socket option. [ 109.201571][ T6394] Use struct sctp_assoc_value instead [ 109.266527][ T6398] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 109.294217][ T6398] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 109.337538][ T6399] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 109.395762][ T6399] batman_adv: batadv0: Adding interface: netdevsim0 [ 109.421775][ T6399] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.512392][ T6399] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 110.091686][ T6433] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 110.126944][ T6433] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 110.727266][ T6460] netlink: 'syz.4.150': attribute type 1 has an invalid length. [ 110.759713][ T6471] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.778928][ T6471] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.799849][ T6471] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.221808][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.613355][ T6498] __nla_validate_parse: 5 callbacks suppressed [ 111.613377][ T6498] netlink: 28 bytes leftover after parsing attributes in process `syz.4.162'. [ 111.630619][ T6493] xt_CT: No such helper "syz0" [ 111.639038][ T6498] netlink: 28 bytes leftover after parsing attributes in process `syz.4.162'. [ 111.829137][ T6506] netlink: 156 bytes leftover after parsing attributes in process `syz.0.165'. [ 112.043450][ T6509] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.052318][ T6509] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.143742][ T6509] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 112.168455][ T6520] No such timeout policy "syz0" [ 112.339809][ T6523] netlink: 72 bytes leftover after parsing attributes in process `syz.1.171'. [ 112.349997][ T6523] Unknown options in mask 1f4 [ 112.524526][ T6534] netlink: 28 bytes leftover after parsing attributes in process `syz.4.172'. [ 112.730393][ T6540] netlink: 'syz.1.174': attribute type 11 has an invalid length. [ 112.741669][ T5845] Bluetooth: hci4: command 0x0405 tx timeout [ 112.749405][ T6540] netlink: 228 bytes leftover after parsing attributes in process `syz.1.174'. [ 112.872294][ T6549] Illegal XDP return value 16128 on prog (id 61) dev syz_tun, expect packet loss! [ 113.210814][ T6560] netlink: 'syz.3.180': attribute type 1 has an invalid length. [ 113.359176][ T6563] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.370078][ T6563] bond0: (slave bond1): making interface the new active one [ 113.379976][ T6563] bond0: (slave bond1): Enslaving as an active interface with an up link [ 113.395156][ T6560] netlink: 28 bytes leftover after parsing attributes in process `syz.3.180'. [ 113.408220][ T6560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.421767][ T6560] netlink: 8 bytes leftover after parsing attributes in process `syz.3.180'. [ 113.431273][ T6560] netlink: 8 bytes leftover after parsing attributes in process `syz.3.180'. [ 113.553679][ T6567] bond0: (slave gretap1): Enslaving as a backup interface with an up link [ 114.140859][ T6594] netlink: 40 bytes leftover after parsing attributes in process `syz.0.186'. [ 114.329505][ T5945] IPVS: starting estimator thread 0... [ 114.451467][ T6599] IPVS: using max 25 ests per chain, 60000 per kthread [ 114.469663][ T6605] syzkaller1: entered promiscuous mode [ 114.495117][ T6605] syzkaller1: entered allmulticast mode [ 114.633049][ T6589] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 115.870978][ T6661] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.928346][ T6661] bridge_slave_1 (unregistering): left allmulticast mode [ 115.950202][ T6661] bridge_slave_1 (unregistering): left promiscuous mode [ 115.971476][ T6661] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.021731][ T5846] Bluetooth: hci0: command 0x0401 tx timeout [ 116.135445][ T6668] netlink: 'syz.4.209': attribute type 1 has an invalid length. [ 116.174491][ T6668] netlink: 'syz.4.209': attribute type 2 has an invalid length. [ 116.470892][ T6683] tipc: Started in network mode [ 116.499397][ T6683] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 116.535697][ T6683] tipc: Enabled bearer , priority 10 [ 116.753522][ T6691] xt_CT: You must specify a L4 protocol and not use inversions on it [ 116.893010][ T6699] Bluetooth: MGMT ver 1.23 [ 117.376025][ T6710] veth1_macvtap: left promiscuous mode [ 117.418918][ T6711] pimreg: entered allmulticast mode [ 117.438943][ T6715] netlink: 'syz.2.226': attribute type 29 has an invalid length. [ 117.657001][ T24] tipc: Node number set to 10463914 [ 117.682195][ T6725] netlink: 'syz.1.229': attribute type 2 has an invalid length. [ 117.689934][ T6725] __nla_validate_parse: 7 callbacks suppressed [ 117.689949][ T6725] netlink: 119 bytes leftover after parsing attributes in process `syz.1.229'. [ 117.719622][ T6723] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 118.550476][ T6771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.241'. [ 118.800745][ T6774] syz.4.243 (6774) used greatest stack depth: 17992 bytes left [ 118.901727][ T5846] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 118.909074][ T5845] Bluetooth: hci0: command 0x0401 tx timeout [ 118.982132][ T6791] netlink: 36 bytes leftover after parsing attributes in process `syz.4.248'. [ 119.023419][ T6793] netlink: 'syz.3.247': attribute type 23 has an invalid length. [ 119.045299][ T6794] Bluetooth: MGMT ver 1.23 [ 119.622003][ T6813] vlan2: entered promiscuous mode [ 119.656999][ T6813] vlan2: entered allmulticast mode [ 119.710974][ T6813] hsr_slave_1: entered allmulticast mode [ 119.767141][ T6822] netlink: 'syz.2.258': attribute type 11 has an invalid length. [ 119.828650][ T6822] netlink: 224 bytes leftover after parsing attributes in process `syz.2.258'. [ 120.344485][ T6846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.264'. [ 120.388486][ T6849] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 120.553573][ T6854] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 120.614926][ T6854] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.624124][ T6854] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.939148][ T6872] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 120.989803][ T6875] IPv4: Oversized IP packet from 127.202.26.0 [ 120.999660][ T6872] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 121.001918][ T6877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.273'. [ 121.036621][ T6877] netlink: 12 bytes leftover after parsing attributes in process `syz.4.273'. [ 121.053264][ T6877] netlink: 'syz.4.273': attribute type 7 has an invalid length. [ 121.064795][ T6872] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 121.620042][ T6895] netlink: 36 bytes leftover after parsing attributes in process `syz.4.280'. [ 121.895726][ T6906] netlink: 12 bytes leftover after parsing attributes in process `syz.3.284'. [ 121.922007][ T6908] netlink: 24 bytes leftover after parsing attributes in process `syz.1.285'. [ 122.024750][ T6906] 8021q: adding VLAN 0 to HW filter on device bond2 [ 122.126623][ T6920] netlink: 'syz.1.285': attribute type 1 has an invalid length. [ 122.192319][ T6925] xt_hashlimit: size too large, truncated to 1048576 [ 122.219076][ T6926] x_tables: unsorted underflow at hook 1 [ 122.248279][ T6918] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 122.836216][ T6942] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.898825][ T6942] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.113835][ T6929] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 123.171010][ T6942] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.201001][ T6942] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.279564][ T6942] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.289064][ T6942] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.479244][ T6977] __nla_validate_parse: 1 callbacks suppressed [ 123.479267][ T6977] netlink: 4 bytes leftover after parsing attributes in process `syz.4.296'. [ 123.752392][ T6988] x_tables: duplicate underflow at hook 1 [ 124.227934][ T7000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.302'. [ 124.231845][ T7008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.305'. [ 124.239030][ T7007] syzkaller1: entered promiscuous mode [ 124.275249][ T7007] syzkaller1: entered allmulticast mode [ 124.285019][ T7011] netlink: 12 bytes leftover after parsing attributes in process `syz.0.302'. [ 124.294460][ T7011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.302'. [ 124.403352][ T7011] team_slave_0: entered promiscuous mode [ 124.409365][ T7011] team_slave_1: entered promiscuous mode [ 124.527698][ T7020] netlink: 108 bytes leftover after parsing attributes in process `syz.1.307'. [ 124.835479][ T7029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.308'. [ 124.877074][ T7035] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 124.904749][ T7034] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 124.926035][ T7036] netlink: 88 bytes leftover after parsing attributes in process `syz.3.309'. [ 125.156956][ T7041] xt_TPROXY: Can be used only with -p tcp or -p udp [ 125.205094][ T7048] netlink: 'syz.0.313': attribute type 1 has an invalid length. [ 125.251785][ T7048] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 125.379145][ T7046] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 125.688903][ T7068] netlink: 44 bytes leftover after parsing attributes in process `syz.4.322'. [ 125.750736][ T7070] netlink: 348 bytes leftover after parsing attributes in process `syz.0.323'. [ 127.075546][ T7131] syzkaller1: entered promiscuous mode [ 127.087812][ T7131] syzkaller1: entered allmulticast mode [ 127.231557][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.422613][ T7142] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.073717][ T7175] netdevsim netdevsim4: Direct firmware load for failed with error -2 [ 128.090289][ T7175] netdevsim netdevsim4: Falling back to sysfs fallback for: [ 128.262336][ T7185] netlink: 'syz.1.361': attribute type 8 has an invalid length. [ 128.841400][ T7209] netlink: 'syz.0.368': attribute type 1 has an invalid length. [ 128.865662][ T7209] __nla_validate_parse: 7 callbacks suppressed [ 128.865682][ T7209] netlink: 244 bytes leftover after parsing attributes in process `syz.0.368'. [ 129.242572][ T7220] netlink: 64 bytes leftover after parsing attributes in process `syz.0.371'. [ 129.264450][ T7220] netlink: 64 bytes leftover after parsing attributes in process `syz.0.371'. [ 129.327399][ T7226] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 129.363390][ T7229] netlink: 16 bytes leftover after parsing attributes in process `syz.2.374'. [ 129.492359][ T7233] netlink: 20 bytes leftover after parsing attributes in process `syz.0.375'. [ 129.658072][ T7239] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.378'. [ 129.720511][ T7238] ip6gre1: entered promiscuous mode [ 130.094973][ T7259] netlink: 40 bytes leftover after parsing attributes in process `syz.1.385'. [ 130.135734][ T7259] netlink: 40 bytes leftover after parsing attributes in process `syz.1.385'. [ 130.170852][ T7259] netlink: 40 bytes leftover after parsing attributes in process `syz.1.385'. [ 130.182904][ T7259] netlink: 40 bytes leftover after parsing attributes in process `syz.1.385'. [ 131.176781][ T7280] team0 (unregistering): Port device team_slave_0 removed [ 131.262633][ T7280] team0 (unregistering): Port device team_slave_1 removed [ 132.255329][ T7361] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 132.275350][ T7361] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 132.311141][ T7369] xt_addrtype: ipv6 does not support BROADCAST matching [ 132.989578][ T7398] vxcan1: tx address claim with dlc 0 [ 132.997034][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.006671][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.335855][ T7412] netlink: 'syz.4.423': attribute type 2 has an invalid length. [ 133.364776][ T7412] netlink: 'syz.4.423': attribute type 1 has an invalid length. [ 133.392956][ T7412] netlink: 'syz.4.423': attribute type 1 has an invalid length. [ 133.437739][ T7412] netlink: 'syz.4.423': attribute type 2 has an invalid length. [ 133.451050][ T7412] netlink: 'syz.4.423': attribute type 1 has an invalid length. [ 133.477339][ T7412] netlink: 'syz.4.423': attribute type 1 has an invalid length. [ 133.504942][ T7412] netlink: 'syz.4.423': attribute type 1 has an invalid length. [ 133.554199][ T7412] netlink: 'syz.4.423': attribute type 1 has an invalid length. [ 133.775168][ T7427] netlink: 'syz.0.430': attribute type 10 has an invalid length. [ 133.839482][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.878053][ T7428] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 133.900242][ T7433] __nla_validate_parse: 69 callbacks suppressed [ 133.900261][ T7433] netlink: 68 bytes leftover after parsing attributes in process `syz.4.432'. [ 133.902971][ T7427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.936285][ T7427] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 134.001029][ T7431] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 134.018391][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.133571][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.314181][ T12] batman_adv: batadv0: Removing interface: netdevsim0 [ 134.344307][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.662107][ T7452] team0: Device vti0 is of different type [ 135.030510][ T12] bridge_slave_0: left allmulticast mode [ 135.051397][ T12] bridge_slave_0: left promiscuous mode [ 135.058298][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.098085][ T7472] syz.1.443: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 135.121042][ T7472] CPU: 1 UID: 0 PID: 7472 Comm: syz.1.443 Not tainted 6.16.0-rc3-syzkaller-00136-g561aa0e22b70 #0 PREEMPT(full) [ 135.121066][ T7472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 135.121076][ T7472] Call Trace: [ 135.121084][ T7472] [ 135.121091][ T7472] dump_stack_lvl+0x189/0x250 [ 135.121128][ T7472] ? __pfx_dump_stack_lvl+0x10/0x10 [ 135.121155][ T7472] ? __pfx__printk+0x10/0x10 [ 135.121180][ T7472] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 135.121201][ T7472] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 135.121222][ T7472] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 135.121243][ T7472] warn_alloc+0x214/0x310 [ 135.121269][ T7472] ? __pfx_warn_alloc+0x10/0x10 [ 135.121299][ T7472] ? __get_vm_area_node+0x28f/0x300 [ 135.121318][ T7472] ? hash_ip_create+0x741/0x1410 [ 135.121345][ T7472] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 135.121400][ T7472] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 135.121429][ T7472] ? rcu_is_watching+0x15/0xb0 [ 135.121463][ T7472] ? hash_ip_create+0x741/0x1410 [ 135.121485][ T7472] ? hash_ip_create+0x741/0x1410 [ 135.121506][ T7472] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 135.121528][ T7472] ? hash_ip_create+0x741/0x1410 [ 135.121552][ T7472] ? hash_ip_create+0x6d5/0x1410 [ 135.121581][ T7472] hash_ip_create+0x741/0x1410 [ 135.121604][ T7472] ? __lock_acquire+0xab9/0xd20 [ 135.121647][ T7472] ? __pfx_hash_ip_create+0x10/0x10 [ 135.121674][ T7472] ? __nla_parse+0x40/0x60 [ 135.121703][ T7472] ? __pfx_hash_ip_create+0x10/0x10 [ 135.121730][ T7472] ip_set_create+0xa97/0x1940 [ 135.121761][ T7472] ? ip_set_create+0x4a2/0x1940 [ 135.121805][ T7472] ? __pfx_ip_set_create+0x10/0x10 [ 135.121879][ T7472] nfnetlink_rcv_msg+0xb4a/0x1130 [ 135.121912][ T7472] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 135.121966][ T7472] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 135.122043][ T7472] ? __lock_acquire+0xab9/0xd20 [ 135.122091][ T7472] netlink_rcv_skb+0x208/0x470 [ 135.122115][ T7472] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 135.122149][ T7472] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 135.122186][ T7472] ? bpf_lsm_capable+0x9/0x20 [ 135.122205][ T7472] ? security_capable+0x7e/0x2e0 [ 135.122240][ T7472] nfnetlink_rcv+0x26a/0x2520 [ 135.122272][ T7472] ? unwind_get_return_address+0x4d/0x90 [ 135.122304][ T7472] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 135.122327][ T7472] ? arch_stack_walk+0xfc/0x150 [ 135.122362][ T7472] ? stack_trace_save+0x9c/0xe0 [ 135.122388][ T7472] ? stack_depot_save_flags+0x40/0x900 [ 135.122420][ T7472] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 135.122454][ T7472] ? kasan_save_track+0x4f/0x80 [ 135.122483][ T7472] ? kasan_save_track+0x3e/0x80 [ 135.122520][ T7472] ? __lock_acquire+0xab9/0xd20 [ 135.122576][ T7472] ? __lock_acquire+0xab9/0xd20 [ 135.122615][ T7472] ? netlink_deliver_tap+0x2e/0x1b0 [ 135.122644][ T7472] ? netlink_deliver_tap+0x2e/0x1b0 [ 135.122666][ T7472] ? netlink_deliver_tap+0x2e/0x1b0 [ 135.122696][ T7472] netlink_unicast+0x75b/0x8d0 [ 135.122728][ T7472] netlink_sendmsg+0x805/0xb30 [ 135.122762][ T7472] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.122790][ T7472] ? aa_sock_msg_perm+0x94/0x160 [ 135.122818][ T7472] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 135.122845][ T7472] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.122871][ T7472] __sock_sendmsg+0x21c/0x270 [ 135.122907][ T7472] ____sys_sendmsg+0x505/0x830 [ 135.122940][ T7472] ? __pfx_____sys_sendmsg+0x10/0x10 [ 135.122978][ T7472] ? import_iovec+0x74/0xa0 [ 135.123003][ T7472] ___sys_sendmsg+0x21f/0x2a0 [ 135.123041][ T7472] ? __pfx____sys_sendmsg+0x10/0x10 [ 135.123118][ T7472] ? __fget_files+0x2a/0x420 [ 135.123141][ T7472] ? __fget_files+0x3a0/0x420 [ 135.123177][ T7472] __x64_sys_sendmsg+0x19b/0x260 [ 135.123207][ T7472] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 135.123246][ T7472] ? rcu_is_watching+0x15/0xb0 [ 135.123285][ T7472] ? do_syscall_64+0xbe/0x3b0 [ 135.123309][ T7472] do_syscall_64+0xfa/0x3b0 [ 135.123326][ T7472] ? lockdep_hardirqs_on+0x9c/0x150 [ 135.123356][ T7472] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.123377][ T7472] ? clear_bhb_loop+0x60/0xb0 [ 135.123403][ T7472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.123423][ T7472] RIP: 0033:0x7f1c2098e929 [ 135.123442][ T7472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.123460][ T7472] RSP: 002b:00007f1c21760038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.123482][ T7472] RAX: ffffffffffffffda RBX: 00007f1c20bb6080 RCX: 00007f1c2098e929 [ 135.123497][ T7472] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 135.123509][ T7472] RBP: 00007f1c20a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 135.123522][ T7472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.123534][ T7472] R13: 0000000000000000 R14: 00007f1c20bb6080 R15: 00007ffd89028858 [ 135.123568][ T7472] [ 135.657767][ T7472] Mem-Info: [ 135.660981][ T7472] active_anon:5789 inactive_anon:0 isolated_anon:0 [ 135.660981][ T7472] active_file:1256 inactive_file:39842 isolated_file:0 [ 135.660981][ T7472] unevictable:768 dirty:87 writeback:0 [ 135.660981][ T7472] slab_reclaimable:10243 slab_unreclaimable:98529 [ 135.660981][ T7472] mapped:29167 shmem:1369 pagetables:1124 [ 135.660981][ T7472] sec_pagetables:0 bounce:0 [ 135.660981][ T7472] kernel_misc_reclaimable:0 [ 135.660981][ T7472] free:1336224 free_pcp:10145 free_cma:0 [ 135.719149][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 135.728408][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 135.738687][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 135.748795][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 135.756717][ T7472] Node 0 active_anon:22956kB inactive_anon:0kB active_file:5024kB inactive_file:159164kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116668kB dirty:348kB writeback:0kB shmem:3940kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12496kB pagetables:4360kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 135.759213][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 135.791835][ T7472] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 135.831272][ T7472] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 135.867927][ T7472] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 135.881650][ T7472] Node 0 DMA32 free:1419952kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22908kB inactive_anon:0kB active_file:5024kB inactive_file:157336kB unevictable:1536kB writepending:344kB present:3129332kB managed:2561004kB mlocked:0kB bounce:0kB free_pcp:28644kB local_pcp:13432kB free_cma:0kB [ 135.962456][ T7472] lowmem_reserve[]: 0 0 1 1 1 [ 135.967377][ T7472] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1828kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 136.005229][ T7472] lowmem_reserve[]: 0 0 0 0 0 [ 136.010183][ T7472] Node 1 Normal free:3909568kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:12752kB local_pcp:6192kB free_cma:0kB [ 136.066500][ T7472] lowmem_reserve[]: 0 0 0 0 0 [ 136.072610][ T7472] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 136.094056][ T7472] Node 0 DMA32: 392*4kB (ME) 233*8kB (ME) 110*16kB (UME) 68*32kB (ME) 46*64kB (UME) 25*128kB (UME) 8*256kB (M) 13*512kB (UME) 11*1024kB (UME) 5*2048kB (UM) 336*4096kB (M) = 1419976kB [ 136.116856][ T7472] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 136.129498][ T7472] Node 1 Normal: 162*4kB (UE) 35*8kB (UME) 42*16kB (UME) 88*32kB (UME) 26*64kB (UME) 4*128kB (UME) 2*256kB (M) 2*512kB (M) 2*1024kB (UM) 0*2048kB 952*4096kB (ME) = 3909568kB [ 136.147331][ T7472] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 136.157449][ T7472] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 136.166973][ T7472] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 136.176956][ T7472] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 136.187452][ T7472] 42467 total pagecache pages [ 136.193190][ T7472] 0 pages in swap cache [ 136.204956][ T7472] Free swap = 124996kB [ 136.216484][ T7472] Total swap = 124996kB [ 136.220830][ T7472] 2097051 pages RAM [ 136.229307][ T7472] 0 pages HighMem/MovableOnly [ 136.250381][ T7472] 424694 pages reserved [ 136.254728][ T7472] 0 pages cma reserved [ 136.486677][ T6981] hid-generic 0005:0C45:0004.0001: item fetching failed at offset 0/1 [ 136.496289][ T6981] hid-generic 0005:0C45:0004.0001: probe with driver hid-generic failed with error -22 [ 136.733492][ T7502] netlink: 16 bytes leftover after parsing attributes in process `syz.3.449'. [ 136.755304][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.767184][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.780422][ T12] bond0 (unregistering): Released all slaves [ 136.799228][ T12] bond1 (unregistering): Released all slaves [ 136.822804][ T7473] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 136.834204][ T7473] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 136.843331][ T7473] gretap1: entered promiscuous mode [ 136.848672][ T7473] gretap1: entered allmulticast mode [ 137.003784][ T12] tipc: Disabling bearer [ 137.071559][ T12] tipc: Left network mode [ 137.078893][ T7509] netlink: 'syz.0.450': attribute type 83 has an invalid length. [ 137.178988][ T7512] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.452'. [ 137.942065][ T5846] Bluetooth: hci3: command tx timeout [ 139.014468][ T7532] can: request_module (can-proto-0) failed. [ 139.114764][ T12] hsr_slave_0: left promiscuous mode [ 139.139748][ T12] hsr_slave_1: left promiscuous mode [ 139.153818][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.195834][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.224099][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.241595][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.327432][ T12] veth1_macvtap: left promiscuous mode [ 139.348190][ T12] veth0_macvtap: left promiscuous mode [ 139.359106][ T7552] No such timeout policy "syz0" [ 139.368842][ T12] veth1_vlan: left promiscuous mode [ 139.390649][ T12] veth0_vlan: left promiscuous mode [ 139.630186][ T7563] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.021526][ T5846] Bluetooth: hci3: command tx timeout [ 140.029798][ T12] team0 (unregistering): Port device team_slave_1 removed [ 140.069293][ T12] team0 (unregistering): Port device team_slave_0 removed [ 140.414196][ T7543] tipc: Started in network mode [ 140.419348][ T7543] tipc: Node identity , cluster identity 4711 [ 140.427035][ T7543] tipc: Failed to set node id, please configure manually [ 140.434559][ T7543] tipc: Enabling of bearer rejected, failed to enable media [ 140.788864][ T7572] syzkaller0: entered promiscuous mode [ 140.836217][ T7572] syzkaller0: entered allmulticast mode [ 140.873426][ T7581] vlan4: entered promiscuous mode [ 140.880567][ T7581] bridge0: entered promiscuous mode [ 141.270565][ T7478] chnl_net:caif_netlink_parms(): no params data found [ 141.503034][ T7618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.474'. [ 141.964269][ T7637] netlink: 12 bytes leftover after parsing attributes in process `syz.0.479'. [ 142.101631][ T5846] Bluetooth: hci3: command tx timeout [ 142.238001][ T7478] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.306169][ T7478] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.334096][ T7478] bridge_slave_0: entered allmulticast mode [ 142.358839][ T7478] bridge_slave_0: entered promiscuous mode [ 142.405885][ T7478] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.433757][ T7478] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.444961][ T7478] bridge_slave_1: entered allmulticast mode [ 142.453443][ T7478] bridge_slave_1: entered promiscuous mode [ 142.701594][ T7668] netlink: 32 bytes leftover after parsing attributes in process `syz.3.483'. [ 142.778551][ T7668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.483'. [ 142.832943][ T7478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.860528][ T7671] netlink: 4 bytes leftover after parsing attributes in process `syz.0.484'. [ 142.876997][ T7478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.196808][ T7478] team0: Port device team_slave_0 added [ 143.561374][ T7679] team0 (unregistering): Port device team_slave_0 removed [ 143.580669][ T7679] team0 (unregistering): Port device team_slave_1 removed [ 143.624651][ T7478] team0: Port device team_slave_1 added [ 143.907269][ T7478] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.921360][ T7478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.000483][ T7478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.055859][ T7478] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.076071][ T7478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.181611][ T5846] Bluetooth: hci3: command tx timeout [ 144.211445][ T7478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.246897][ T7721] x_tables: duplicate underflow at hook 1 [ 144.515785][ T7738] netlink: 24 bytes leftover after parsing attributes in process `syz.3.501'. [ 144.543775][ T7728] syzkaller0: entered promiscuous mode [ 144.549478][ T7728] syzkaller0: entered allmulticast mode [ 144.575944][ T7478] hsr_slave_0: entered promiscuous mode [ 144.583123][ T7478] hsr_slave_1: entered promiscuous mode [ 144.590158][ T7478] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 144.599585][ T7478] Cannot create hsr debugfs directory [ 144.645998][ T7738] block nbd3: NBD_DISCONNECT [ 144.955041][ T7748] netlink: 'syz.3.503': attribute type 13 has an invalid length. [ 144.964426][ T7748] netlink: 'syz.3.503': attribute type 17 has an invalid length. [ 147.513434][ T7748] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 147.534859][ T7750] netlink: 80 bytes leftover after parsing attributes in process `syz.1.504'. [ 147.549249][ T7750] netlink: 80 bytes leftover after parsing attributes in process `syz.1.504'. [ 148.433690][ T7790] netlink: 32 bytes leftover after parsing attributes in process `syz.3.515'. [ 148.505535][ T7799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.516'. [ 148.589923][ T7798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.517'. [ 148.651756][ T7801] netlink: 4 bytes leftover after parsing attributes in process `syz.4.518'. [ 148.731732][ T7801] netlink: 4 bytes leftover after parsing attributes in process `syz.4.518'. [ 148.792941][ T7801] netlink: 4 bytes leftover after parsing attributes in process `syz.4.518'. [ 148.888903][ T7809] netlink: 20 bytes leftover after parsing attributes in process `syz.1.520'. [ 149.656841][ T7478] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 149.729110][ T7478] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 149.815917][ T7478] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 149.888651][ T7478] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 149.909504][ T7853] No such timeout policy "syz0" [ 150.110649][ T7865] netlink: 20 bytes leftover after parsing attributes in process `syz.3.534'. [ 150.233306][ T7478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.314240][ T7478] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.354150][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.361498][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.394998][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.402393][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.716605][ T7890] netlink: 'syz.1.542': attribute type 4 has an invalid length. [ 150.729870][ T7890] netlink: 'syz.1.542': attribute type 4 has an invalid length. [ 150.792772][ T7890] netlink: 'syz.1.542': attribute type 83 has an invalid length. [ 150.887969][ T7897] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.408194][ T7478] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.598940][ T7478] veth0_vlan: entered promiscuous mode [ 151.616955][ T7938] netlink: 'syz.1.553': attribute type 14 has an invalid length. [ 151.638571][ T7938] netlink: 'syz.1.553': attribute type 13 has an invalid length. [ 151.656242][ T7942] C: entered promiscuous mode [ 151.665621][ T7942] tunl0: entered promiscuous mode [ 151.683825][ T7942] gre0: entered promiscuous mode [ 151.700921][ T7942] gretap0: entered promiscuous mode [ 151.718109][ T7942] erspan0: entered promiscuous mode [ 151.737560][ T7942] ip_vti0: entered promiscuous mode [ 151.750398][ T7478] veth1_vlan: entered promiscuous mode [ 151.870553][ T7478] veth0_macvtap: entered promiscuous mode [ 151.935527][ T7478] veth1_macvtap: entered promiscuous mode [ 152.034874][ T7478] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.099466][ T7478] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.167724][ T7478] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.191118][ T7478] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.206324][ T7478] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.217463][ T7478] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.259992][ T7967] netlink: 'syz.4.560': attribute type 11 has an invalid length. [ 152.648452][ T1000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.696048][ T1000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.811408][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.858992][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.969237][ T7988] openvswitch: netlink: Actions may not be safe on all matching packets [ 153.356829][ T74] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.536967][ T74] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.703977][ T74] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.928654][ T74] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.621924][ T74] bridge_slave_1: left allmulticast mode [ 154.678817][ T74] bridge_slave_1: left promiscuous mode [ 154.699492][ T74] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.772887][ T74] bridge_slave_0: left allmulticast mode [ 154.800888][ T74] bridge_slave_0: left promiscuous mode [ 154.811364][ T74] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.894474][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 154.909688][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 154.918671][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 154.930399][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 154.956750][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 155.690208][ T74] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.705474][ T74] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.718179][ T74] bond0 (unregistering): Released all slaves [ 155.738082][ T8041] __nla_validate_parse: 11 callbacks suppressed [ 155.738102][ T8041] netlink: 20 bytes leftover after parsing attributes in process `syz.4.573'. [ 155.781944][ T8041] tipc: Invalid UDP bearer configuration [ 155.782010][ T8041] tipc: Enabling of bearer rejected, failed to enable media [ 155.805219][ T8043] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 155.808305][ T8069] netlink: 'syz.1.577': attribute type 2 has an invalid length. [ 156.036106][ T8080] team_slave_0: mtu greater than device maximum [ 156.045767][ T8083] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 156.207689][ T8092] netlink: 'syz.0.582': attribute type 11 has an invalid length. [ 156.221473][ T8092] netlink: 224 bytes leftover after parsing attributes in process `syz.0.582'. [ 156.271973][ T8094] netlink: 56 bytes leftover after parsing attributes in process `syz.4.583'. [ 156.359738][ T8097] xt_l2tp: unknown flags: 18 [ 156.478290][ T8105] netlink: 16 bytes leftover after parsing attributes in process `syz.0.585'. [ 156.557293][ T8106] netlink: 14 bytes leftover after parsing attributes in process `syz.0.585'. [ 156.982963][ T5846] Bluetooth: hci3: command tx timeout [ 157.956510][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.997859][ T8106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.010614][ T8106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.027847][ T8106] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 158.039107][ T8106] bond0 (unregistering): Released all slaves [ 158.075379][ T74] hsr_slave_0: left promiscuous mode [ 158.083856][ T74] hsr_slave_1: left promiscuous mode [ 158.110512][ T74] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.127681][ T74] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.163435][ T74] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.191790][ T74] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.291850][ T74] veth1_macvtap: left promiscuous mode [ 158.297501][ T74] veth0_macvtap: left promiscuous mode [ 158.321453][ T74] veth1_vlan: left promiscuous mode [ 158.326976][ T74] veth0_vlan: left promiscuous mode [ 158.332277][ T8120] xt_hashlimit: size too large, truncated to 1048576 [ 158.483966][ T8126] netlink: 36 bytes leftover after parsing attributes in process `syz.4.595'. [ 158.650077][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 158.661105][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 158.670943][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 158.679984][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 158.696567][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 158.991945][ T74] team0 (unregistering): Port device team_slave_1 removed [ 159.030974][ T74] team0 (unregistering): Port device team_slave_0 removed [ 159.071277][ T5846] Bluetooth: hci3: command tx timeout [ 159.200242][ T8133] x_tables: ip_tables: udp match: only valid for protocol 17 [ 159.218536][ T8133] x_tables: ip_tables: udp match: only valid for protocol 17 [ 159.256125][ T8133] x_tables: ip_tables: udp match: only valid for protocol 17 [ 159.279485][ T8133] x_tables: ip_tables: udp match: only valid for protocol 17 [ 159.292886][ T8133] x_tables: ip_tables: udp match: only valid for protocol 17 [ 159.312703][ T8133] x_tables: ip_tables: udp match: only valid for protocol 17 [ 159.330485][ T8133] x_tables: ip_tables: udp match: only valid for protocol 17 [ 159.340360][ T8133] x_tables: ip_tables: udp match: only valid for protocol 17 [ 159.355407][ T8133] x_tables: ip_tables: udp match: only valid for protocol 17 [ 159.369031][ T8133] x_tables: ip_tables: udp match: only valid for protocol 17 [ 159.658923][ T8138] netlink: 'syz.0.597': attribute type 21 has an invalid length. [ 159.699712][ T8138] netlink: 128 bytes leftover after parsing attributes in process `syz.0.597'. [ 159.709299][ T8138] netlink: 'syz.0.597': attribute type 4 has an invalid length. [ 159.717509][ T8138] netlink: 'syz.0.597': attribute type 5 has an invalid length. [ 159.725716][ T8138] netlink: 3 bytes leftover after parsing attributes in process `syz.0.597'. [ 160.241136][ T8045] chnl_net:caif_netlink_parms(): no params data found [ 160.262085][ T10] IPVS: starting estimator thread 0... [ 160.290813][ T8128] chnl_net:caif_netlink_parms(): no params data found [ 160.351311][ T8166] IPVS: using max 26 ests per chain, 62400 per kthread [ 160.628394][ T8182] Cannot find del_set index 5 as target [ 160.736744][ T74] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.748114][ T5846] Bluetooth: hci1: command tx timeout [ 160.935049][ T74] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.962691][ T8045] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.970100][ T8045] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.988167][ T8045] bridge_slave_0: entered allmulticast mode [ 160.996351][ T8045] bridge_slave_0: entered promiscuous mode [ 161.012796][ T8045] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.030257][ T8045] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.038077][ T8045] bridge_slave_1: entered allmulticast mode [ 161.050650][ T8045] bridge_slave_1: entered promiscuous mode [ 161.059154][ T8128] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.073354][ T8128] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.084212][ T8128] bridge_slave_0: entered allmulticast mode [ 161.095595][ T8128] bridge_slave_0: entered promiscuous mode [ 161.141956][ T5846] Bluetooth: hci3: command tx timeout [ 161.160124][ T74] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.284752][ T74] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.312873][ T8128] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.320421][ T8128] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.335904][ T8128] bridge_slave_1: entered allmulticast mode [ 161.347581][ T8128] bridge_slave_1: entered promiscuous mode [ 161.473849][ T8045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.488669][ T8045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.570652][ T8128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.650237][ T8128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.675854][ T8045] team0: Port device team_slave_0 added [ 161.740439][ T8045] team0: Port device team_slave_1 added [ 162.011865][ T8128] team0: Port device team_slave_0 added [ 162.045161][ T8128] team0: Port device team_slave_1 added [ 162.139440][ T8045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.156474][ T8045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.210399][ T8045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.265903][ T8045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.285008][ T8045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.328644][ T8045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.369026][ T74] bridge_slave_1: left allmulticast mode [ 162.376706][ T74] bridge_slave_1: left promiscuous mode [ 162.392771][ T74] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.417550][ T74] bridge_slave_0: left allmulticast mode [ 162.425304][ T74] bridge_slave_0: left promiscuous mode [ 162.433783][ T74] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.669536][ T74] bond0 (unregistering): (slave gretap1): Releasing backup interface [ 162.822216][ T5846] Bluetooth: hci1: command tx timeout [ 162.993959][ T74] bond0 (unregistering): (slave bond1): Releasing backup interface [ 163.003424][ T74] bond0 (unregistering): Released all slaves [ 163.106442][ T74] bond1 (unregistering): Released all slaves [ 163.205255][ T74] bond2 (unregistering): Released all slaves [ 163.226585][ T8128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.234830][ T5846] Bluetooth: hci3: command tx timeout [ 163.241898][ T8128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.268465][ T8128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.341548][ T8128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.348766][ T8128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.435456][ T8128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.695402][ T8045] hsr_slave_0: entered promiscuous mode [ 163.709489][ T8045] hsr_slave_1: entered promiscuous mode [ 163.716247][ T8045] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.723977][ T8045] Cannot create hsr debugfs directory [ 163.763721][ T8128] hsr_slave_0: entered promiscuous mode [ 163.770349][ T8128] hsr_slave_1: entered promiscuous mode [ 163.777759][ T8128] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.785787][ T8128] Cannot create hsr debugfs directory [ 164.122575][ T8252] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.130352][ T8252] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.138029][ T8252] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.145237][ T8252] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.184903][ T8252] bridge0: left allmulticast mode [ 164.206450][ T8252] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 164.259800][ T8260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.275883][ T74] hsr_slave_0: left promiscuous mode [ 164.291520][ T74] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.299128][ T74] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.324118][ T74] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.332266][ T74] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.352052][ T74] veth1_macvtap: left promiscuous mode [ 164.358373][ T74] veth0_macvtap: left promiscuous mode [ 164.364214][ T74] veth1_vlan: left promiscuous mode [ 164.369721][ T74] veth0_vlan: left promiscuous mode [ 164.383934][ T8265] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.629'. [ 164.404062][ T8265] netlink: zone id is out of range [ 164.409374][ T8265] netlink: zone id is out of range [ 164.415197][ T8265] netlink: zone id is out of range [ 164.420470][ T8265] netlink: zone id is out of range [ 164.426314][ T8265] netlink: zone id is out of range [ 164.432176][ T8265] netlink: zone id is out of range [ 164.438628][ T8265] netlink: get zone limit has 8 unknown bytes [ 164.619201][ T8271] netlink: 12 bytes leftover after parsing attributes in process `syz.0.629'. [ 164.901366][ T5846] Bluetooth: hci1: command tx timeout [ 165.914810][ T8306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.639'. [ 166.562199][ T8045] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 166.580477][ T8045] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 166.616103][ T8045] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 166.668126][ T8045] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 166.875198][ T8128] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 166.959816][ T8128] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 166.977053][ T8362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.656'. [ 166.986064][ T5846] Bluetooth: hci1: command tx timeout [ 166.997355][ T8128] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 167.008930][ T8365] netlink: 4 bytes leftover after parsing attributes in process `syz.4.654'. [ 167.040323][ T8362] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 167.074028][ T8128] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 167.268751][ T8382] netlink: 16 bytes leftover after parsing attributes in process `syz.4.658'. [ 167.293713][ T8045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.358585][ T8045] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.398512][ T7339] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.405737][ T7339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.459452][ T7339] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.466845][ T7339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.495707][ T8128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.548151][ T8390] netlink: 16 bytes leftover after parsing attributes in process `syz.0.660'. [ 167.591978][ T8128] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.658466][ T7328] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.665759][ T7328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.748845][ T7332] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.756129][ T7332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.886283][ T8394] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 168.370357][ T8045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.585891][ T8045] veth0_vlan: entered promiscuous mode [ 168.636980][ T8045] veth1_vlan: entered promiscuous mode [ 168.739452][ T8045] veth0_macvtap: entered promiscuous mode [ 168.753610][ T8431] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.777417][ T8045] veth1_macvtap: entered promiscuous mode [ 168.808639][ T8433] netlink: 'syz.1.669': attribute type 11 has an invalid length. [ 168.855310][ T8433] netlink: 108 bytes leftover after parsing attributes in process `syz.1.669'. [ 168.855654][ T8128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.883309][ T8433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.669'. [ 168.919970][ T8045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.971095][ T8045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.012995][ T8045] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.030586][ T8045] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.040671][ T8045] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.047094][ T8444] netlink: 'syz.0.670': attribute type 11 has an invalid length. [ 169.051425][ T8045] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.076200][ T8438] netlink: 6 bytes leftover after parsing attributes in process `syz.4.671'. [ 169.123885][ T8445] lo speed is unknown, defaulting to 1000 [ 169.190145][ T8445] lo speed is unknown, defaulting to 1000 [ 169.217229][ T8446] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 169.231124][ T8128] veth0_vlan: entered promiscuous mode [ 169.265003][ T8445] lo speed is unknown, defaulting to 1000 [ 169.295339][ T8128] veth1_vlan: entered promiscuous mode [ 169.370508][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.398914][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.477046][ T8128] veth0_macvtap: entered promiscuous mode [ 169.485534][ T8453] xt_hashlimit: size too large, truncated to 1048576 [ 169.495845][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.507534][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.533104][ T8128] veth1_macvtap: entered promiscuous mode [ 169.592796][ T8128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.616876][ T8128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.651997][ T8128] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.673893][ T8128] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.689738][ T8128] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.699490][ T8128] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.770104][ T8455] tipc: Started in network mode [ 169.783064][ T8455] tipc: Node identity 8a8198c8a99a, cluster identity 4711 [ 169.808558][ T8455] tipc: Enabled bearer , priority 0 [ 169.827455][ T5916] lo speed is unknown, defaulting to 1000 [ 169.835141][ T8456] syzkaller0: entered promiscuous mode [ 169.840676][ T8456] syzkaller0: entered allmulticast mode [ 169.846800][ T8445] infiniband syz0: set active [ 169.857592][ T8445] infiniband syz0: added lo [ 169.890859][ T8460] No such timeout policy "syz0" [ 169.969118][ T8445] RDS/IB: syz0: added [ 169.982441][ T8445] smc: adding ib device syz0 with port count 1 [ 170.002149][ T8445] smc: ib device syz0 port 1 has pnetid [ 170.022701][ T8456] tipc: Resetting bearer [ 170.053243][ T8456] tipc: Disabling bearer [ 170.079335][ T8445] lo speed is unknown, defaulting to 1000 [ 170.093644][ T43] lo speed is unknown, defaulting to 1000 [ 170.126968][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.155394][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.228464][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.237992][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.386849][ T8477] netlink: 32 bytes leftover after parsing attributes in process `syz.4.681'. [ 170.652225][ T1165] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.683882][ T8445] lo speed is unknown, defaulting to 1000 [ 170.864768][ T1165] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.185204][ T1165] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.277249][ T8445] lo speed is unknown, defaulting to 1000 [ 171.339005][ T8488] netlink: 28 bytes leftover after parsing attributes in process `syz.4.683'. [ 171.352990][ T1165] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.375625][ T8488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.683'. [ 171.409071][ T8488] netlink: 4 bytes leftover after parsing attributes in process `syz.4.683'. [ 171.463103][ T8489] netlink: 80 bytes leftover after parsing attributes in process `syz.0.684'. [ 171.476722][ T8489] netlink: 80 bytes leftover after parsing attributes in process `syz.0.684'. [ 171.835409][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 171.855929][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 171.866658][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 171.880039][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 171.888519][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 171.896027][ T1165] bridge_slave_1: left allmulticast mode [ 171.936698][ T1165] bridge_slave_1: left promiscuous mode [ 171.955262][ T1165] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.970578][ T1165] bridge_slave_0: left allmulticast mode [ 171.980521][ T1165] bridge_slave_0: left promiscuous mode [ 172.003279][ T1165] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.169280][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 172.186868][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 172.200658][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 172.219637][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 172.233469][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 172.440168][ T1165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.456597][ T1165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.467074][ T1165] bond0 (unregistering): Released all slaves [ 172.491258][ T8445] lo speed is unknown, defaulting to 1000 [ 173.016979][ T8445] lo speed is unknown, defaulting to 1000 [ 173.018896][ T8520] IPVS: Unknown mcast interface: pim6reg1 [ 173.385980][ T8498] lo speed is unknown, defaulting to 1000 [ 173.390429][ T8530] netlink: 20 bytes leftover after parsing attributes in process `syz.0.696'. [ 173.586826][ T8543] tipc: Started in network mode [ 173.601816][ T8543] tipc: Node identity ac1414aa, cluster identity 4711 [ 173.610022][ T8543] tipc: Enabled bearer , priority 10 [ 173.767586][ T8550] netlink: 144 bytes leftover after parsing attributes in process `syz.0.703'. [ 173.795017][ T8504] lo speed is unknown, defaulting to 1000 [ 173.808033][ T8551] netlink: 16 bytes leftover after parsing attributes in process `syz.4.702'. [ 173.941326][ T5845] Bluetooth: hci1: command tx timeout [ 174.031534][ T8558] syz_tun: entered allmulticast mode [ 174.044311][ T8561] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 174.050663][ T8560] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 174.073445][ T8557] syz_tun: left allmulticast mode [ 174.268829][ T5845] Bluetooth: hci3: command tx timeout [ 174.681001][ T8498] chnl_net:caif_netlink_parms(): no params data found [ 174.692654][ T8583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.713'. [ 174.721573][ T5887] tipc: Node number set to 2886997162 [ 174.754016][ T1165] hsr_slave_0: left promiscuous mode [ 174.774790][ T1165] hsr_slave_1: left promiscuous mode [ 174.781073][ T1165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.790088][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.800375][ T1165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.809684][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.833050][ T1165] veth1_macvtap: left promiscuous mode [ 174.838848][ T1165] veth0_macvtap: left promiscuous mode [ 174.845513][ T1165] veth1_vlan: left promiscuous mode [ 174.850947][ T1165] veth0_vlan: left promiscuous mode [ 175.347972][ T1165] team0 (unregistering): Port device team_slave_1 removed [ 175.397942][ T1165] team0 (unregistering): Port device team_slave_0 removed [ 175.798335][ T8583] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.807462][ T8583] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.820253][ T8583] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.830373][ T8583] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.846109][ T8583] geneve2: entered promiscuous mode [ 175.851626][ T8583] geneve2: entered allmulticast mode [ 176.022031][ T5845] Bluetooth: hci1: command tx timeout [ 176.074954][ T8597] TCP: TCP_TX_DELAY enabled [ 176.154644][ T8603] __nla_validate_parse: 3 callbacks suppressed [ 176.154666][ T8603] netlink: 16 bytes leftover after parsing attributes in process `syz.4.716'. [ 176.353417][ T5845] Bluetooth: hci3: command tx timeout [ 176.438769][ T8504] chnl_net:caif_netlink_parms(): no params data found [ 176.506758][ T8498] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.515358][ T8498] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.523430][ T8498] bridge_slave_0: entered allmulticast mode [ 176.545578][ T8498] bridge_slave_0: entered promiscuous mode [ 176.608678][ T8498] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.633018][ T8498] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.649192][ T8498] bridge_slave_1: entered allmulticast mode [ 176.674033][ T8498] bridge_slave_1: entered promiscuous mode [ 176.928723][ T8498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.997756][ T1165] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.037287][ T8498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.097128][ T1165] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.138419][ T8504] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.149502][ T8504] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.162852][ T8504] bridge_slave_0: entered allmulticast mode [ 177.170980][ T8504] bridge_slave_0: entered promiscuous mode [ 177.184192][ T8504] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.196273][ T8504] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.203684][ T8504] bridge_slave_1: entered allmulticast mode [ 177.213839][ T8504] bridge_slave_1: entered promiscuous mode [ 177.308402][ T1165] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.415986][ T8498] team0: Port device team_slave_0 added [ 177.429414][ T8498] team0: Port device team_slave_1 added [ 177.515747][ T1165] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.550413][ T8504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.616186][ T8504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.680727][ T8498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.692487][ T8498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.726454][ T8498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.780315][ T8498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.806550][ T8498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.836712][ T8498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.864756][ T8504] team0: Port device team_slave_0 added [ 177.881708][ T8504] team0: Port device team_slave_1 added [ 178.008804][ T8504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.016632][ T8504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.044950][ T8504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.101689][ T5845] Bluetooth: hci1: command tx timeout [ 178.116176][ T8678] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 178.133412][ T8682] netlink: 32 bytes leftover after parsing attributes in process `syz.1.738'. [ 178.158178][ T8504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.183606][ T8504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.226135][ T8679] netlink: 'syz.1.738': attribute type 10 has an invalid length. [ 178.240211][ T8504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.272410][ T8498] hsr_slave_0: entered promiscuous mode [ 178.287562][ T8498] hsr_slave_1: entered promiscuous mode [ 178.297766][ T8498] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.311382][ T8498] Cannot create hsr debugfs directory [ 178.358777][ T8685] netdevsim netdevsim4: Direct firmware load for failed with error -2 [ 178.361881][ T1165] bridge_slave_1: left allmulticast mode [ 178.376592][ T8685] netdevsim netdevsim4: Falling back to sysfs fallback for: [ 178.387678][ T1165] bridge_slave_1: left promiscuous mode [ 178.393896][ T1165] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.404921][ T1165] bridge_slave_0: left allmulticast mode [ 178.410603][ T1165] bridge_slave_0: left promiscuous mode [ 178.417102][ T1165] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.425161][ T5845] Bluetooth: hci3: command tx timeout [ 178.765620][ T1165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.777032][ T1165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.789173][ T1165] bond0 (unregistering): Released all slaves [ 179.047097][ T8504] hsr_slave_0: entered promiscuous mode [ 179.057004][ T8504] hsr_slave_1: entered promiscuous mode [ 179.067207][ T8504] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 179.078595][ T8504] Cannot create hsr debugfs directory [ 179.273373][ T8699] sctp: [Deprecated]: syz.4.744 (pid 8699) Use of int in max_burst socket option. [ 179.273373][ T8699] Use struct sctp_assoc_value instead [ 179.290835][ T8705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.745'. [ 179.633649][ T8717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.751'. [ 179.754527][ T8715] net_ratelimit: 1 callbacks suppressed [ 179.754547][ T8715] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 179.831446][ T1165] hsr_slave_0: left promiscuous mode [ 179.842827][ T1165] hsr_slave_1: left promiscuous mode [ 179.848958][ T1165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.865874][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.874385][ T1165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.883639][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.908101][ T1165] veth1_macvtap: left promiscuous mode [ 179.914099][ T1165] veth0_macvtap: left promiscuous mode [ 179.921082][ T1165] veth1_vlan: left promiscuous mode [ 179.926959][ T1165] veth0_vlan: left promiscuous mode [ 180.181871][ T5845] Bluetooth: hci1: command tx timeout [ 180.483268][ T1165] team0 (unregistering): Port device team_slave_1 removed [ 180.505583][ T5845] Bluetooth: hci3: command tx timeout [ 180.530290][ T1165] team0 (unregistering): Port device team_slave_0 removed [ 181.123173][ T8732] x_tables: duplicate underflow at hook 1 [ 181.157582][ T8729] openvswitch: netlink: Message has -1 unknown bytes. [ 181.163431][ T8734] netlink: 'syz.1.758': attribute type 1 has an invalid length. [ 181.180174][ T8734] netlink: 228 bytes leftover after parsing attributes in process `syz.1.758'. [ 181.193329][ T8734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.758'. [ 181.460246][ T8745] netlink: 'syz.4.762': attribute type 10 has an invalid length. [ 181.479093][ T8746] netlink: 'syz.4.762': attribute type 10 has an invalid length. [ 181.487323][ T8747] netlink: 4 bytes leftover after parsing attributes in process `syz.0.759'. [ 181.487670][ T8745] netlink: 40 bytes leftover after parsing attributes in process `syz.4.762'. [ 181.505337][ T8746] netlink: 40 bytes leftover after parsing attributes in process `syz.4.762'. [ 181.539857][ T8746] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 181.589462][ T8748] netlink: 28 bytes leftover after parsing attributes in process `syz.4.762'. [ 181.661740][ T8745] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 181.843391][ T8504] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 181.866069][ T8504] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 181.892626][ T8504] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 181.924127][ T8504] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 181.947347][ T8767] netlink: 48 bytes leftover after parsing attributes in process `syz.1.766'. [ 181.948536][ T8768] netlink: 48 bytes leftover after parsing attributes in process `syz.1.766'. [ 182.170133][ T8498] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 182.215942][ T8498] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 182.263395][ T8784] netlink: 12 bytes leftover after parsing attributes in process `syz.4.770'. [ 182.276309][ T8498] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 182.300810][ T8498] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 182.358266][ T8787] syz_tun: entered allmulticast mode [ 182.456883][ T8504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.514734][ T8787] syz_tun: left allmulticast mode [ 182.579305][ T8504] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.616516][ T7339] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.623845][ T7339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.718255][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.725490][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.908658][ T8498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.978548][ T8816] Cannot find add_set index 1 as target [ 183.022204][ T8498] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.055275][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.062625][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.165917][ T7339] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.173621][ T7339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.245324][ T8827] netlink: 'syz.4.783': attribute type 10 has an invalid length. [ 183.280887][ T8827] veth0_vlan: entered allmulticast mode [ 183.527134][ T8504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.557502][ T8837] xt_limit: Overflow, try lower: 2147483649/128 [ 183.571110][ T8839] netlink: 'syz.4.787': attribute type 1 has an invalid length. [ 183.579133][ T8839] netlink: 'syz.4.787': attribute type 1 has an invalid length. [ 183.621074][ T8839] netlink: 'syz.4.787': attribute type 1 has an invalid length. [ 183.674167][ T8839] netlink: 'syz.4.787': attribute type 1 has an invalid length. [ 183.734673][ T8504] veth0_vlan: entered promiscuous mode [ 183.777352][ T8504] veth1_vlan: entered promiscuous mode [ 183.912127][ T8504] veth0_macvtap: entered promiscuous mode [ 183.953290][ T8504] veth1_macvtap: entered promiscuous mode [ 183.999270][ T8504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.034757][ T8504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.049956][ T8853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.789'. [ 184.072159][ T8504] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.081427][ T8853] netlink: 'syz.1.789': attribute type 12 has an invalid length. [ 184.095755][ T8853] netlink: 'syz.1.789': attribute type 11 has an invalid length. [ 184.115903][ T8504] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.126647][ T8504] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.141738][ T8504] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.225425][ T8498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.389654][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.414293][ T8498] veth0_vlan: entered promiscuous mode [ 184.421809][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.493259][ T8498] veth1_vlan: entered promiscuous mode [ 184.518494][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.529131][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.616483][ T8498] veth0_macvtap: entered promiscuous mode [ 184.647923][ T8498] veth1_macvtap: entered promiscuous mode [ 184.685563][ T8504] ------------[ cut here ]------------ [ 184.691986][ T8504] refcount_t: underflow; use-after-free. [ 184.698878][ T8504] WARNING: CPU: 1 PID: 8504 at lib/refcount.c:28 refcount_warn_saturate+0x11a/0x1d0 [ 184.709090][ T8504] Modules linked in: [ 184.713886][ T8504] CPU: 1 UID: 0 PID: 8504 Comm: syz-executor Not tainted 6.16.0-rc3-syzkaller-00136-g561aa0e22b70 #0 PREEMPT(full) [ 184.726457][ T8504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 184.737733][ T8504] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0 [ 184.745238][ T8504] Code: c0 42 e2 8b e8 f7 7a c2 fc 90 0f 0b 90 90 eb d7 e8 5b d2 fe fc c6 05 5f 8b c9 0a 01 90 48 c7 c7 20 43 e2 8b e8 d7 7a c2 fc 90 <0f> 0b 90 90 eb b7 e8 3b d2 fe fc c6 05 3c 8b c9 0a 01 90 48 c7 c7 [ 184.765980][ T8504] RSP: 0000:ffffc9000483f7d8 EFLAGS: 00010246 [ 184.772613][ T8504] RAX: 21c29d1b1d733e00 RBX: 0000000000000003 RCX: ffff888025525a00 [ 184.780731][ T8504] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 184.789274][ T8504] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 184.798789][ T8504] R10: dffffc0000000000 R11: fffffbfff1bfaa04 R12: ffff8880586b8c00 [ 184.807450][ T8504] R13: ffff888059ffe460 R14: ffff888059ffe478 R15: dffffc0000000000 [ 184.815985][ T8504] FS: 0000000000000000(0000) GS:ffff888125d50000(0000) knlGS:0000000000000000 [ 184.825324][ T8504] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 184.833042][ T8504] CR2: 00007f5d66ffee50 CR3: 0000000059bc2000 CR4: 00000000003526f0 [ 184.841905][ T8504] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 184.849945][ T8504] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 184.858348][ T8504] Call Trace: [ 184.862209][ T8504] [ 184.865188][ T8504] klist_dec_and_del+0x3c7/0x3d0 [ 184.870360][ T8504] klist_remove+0x1bd/0x340 [ 184.875007][ T8504] ? __pfx_klist_children_put+0x10/0x10 [ 184.880632][ T8504] ? __pfx_klist_remove+0x10/0x10 [ 184.885792][ T8504] ? __pfx_kobject_move+0x10/0x10 [ 184.890875][ T8504] ? get_device_parent+0x366/0x3a0 [ 184.896627][ T8504] device_move+0x193/0x700 [ 184.901123][ T8504] hci_conn_del_sysfs+0xb8/0x170 [ 184.906179][ T8504] hci_conn_del+0x8ff/0xcb0 [ 184.910739][ T8504] hci_conn_hash_flush+0x191/0x230 [ 184.916147][ T8504] hci_dev_close_sync+0xaef/0x1330 [ 184.921690][ T8504] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 184.927292][ T8504] ? up_write+0x1c4/0x420 [ 184.931739][ T8504] hci_unregister_dev+0x21a/0x510 [ 184.937080][ T8504] vhci_release+0x80/0xd0 [ 184.941683][ T8504] ? __pfx_vhci_release+0x10/0x10 [ 184.946791][ T8504] __fput+0x449/0xa70 [ 184.951011][ T8504] task_work_run+0x1d1/0x260 [ 184.956036][ T8504] ? __pfx_task_work_run+0x10/0x10 [ 184.961255][ T8504] ? kmem_cache_free+0x18f/0x400 [ 184.966263][ T8504] do_exit+0x6b5/0x22e0 [ 184.970473][ T8504] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 184.975953][ T8504] ? __pfx_do_exit+0x10/0x10 [ 184.980606][ T8504] ? _raw_spin_unlock_irq+0x23/0x50 [ 184.986421][ T8504] ? lockdep_hardirqs_on+0x9c/0x150 [ 184.991790][ T8504] do_group_exit+0x21c/0x2d0 [ 184.996516][ T8504] __x64_sys_exit_group+0x3f/0x40 [ 185.001751][ T8504] x64_sys_call+0x21ba/0x21c0 [ 185.006492][ T8504] do_syscall_64+0xfa/0x3b0 [ 185.011016][ T8504] ? lockdep_hardirqs_on+0x9c/0x150 [ 185.016668][ T8504] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.022841][ T8504] ? clear_bhb_loop+0x60/0xb0 [ 185.027571][ T8504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.033608][ T8504] RIP: 0033:0x7fd7c598e929 [ 185.038361][ T8504] Code: Unable to access opcode bytes at 0x7fd7c598e8ff. [ 185.046021][ T8504] RSP: 002b:00007fff934903c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 185.054579][ T8504] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd7c598e929 [ 185.063054][ T8504] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 185.071089][ T8504] RBP: 00007fd7c59ee8f0 R08: 00007fff9348e167 R09: 0000000000000003 [ 185.079463][ T8504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.087690][ T8504] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007fff93490580 [ 185.095853][ T8504] [ 185.098996][ T8504] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 185.106302][ T8504] CPU: 1 UID: 0 PID: 8504 Comm: syz-executor Not tainted 6.16.0-rc3-syzkaller-00136-g561aa0e22b70 #0 PREEMPT(full) [ 185.118813][ T8504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 185.128998][ T8504] Call Trace: [ 185.132500][ T8504] [ 185.135468][ T8504] dump_stack_lvl+0x99/0x250 [ 185.140334][ T8504] ? __asan_memcpy+0x40/0x70 [ 185.144989][ T8504] ? __pfx_dump_stack_lvl+0x10/0x10 [ 185.150234][ T8504] ? __pfx__printk+0x10/0x10 [ 185.154907][ T8504] panic+0x2db/0x790 [ 185.158924][ T8504] ? __pfx_panic+0x10/0x10 [ 185.163389][ T8504] __warn+0x31b/0x4b0 [ 185.167399][ T8504] ? refcount_warn_saturate+0x11a/0x1d0 [ 185.173138][ T8504] ? refcount_warn_saturate+0x11a/0x1d0 [ 185.178701][ T8504] report_bug+0x2be/0x4f0 [ 185.183055][ T8504] ? refcount_warn_saturate+0x11a/0x1d0 [ 185.188625][ T8504] ? refcount_warn_saturate+0x11a/0x1d0 [ 185.194187][ T8504] ? refcount_warn_saturate+0x11c/0x1d0 [ 185.199764][ T8504] handle_bug+0x84/0x160 [ 185.204040][ T8504] exc_invalid_op+0x1a/0x50 [ 185.208568][ T8504] asm_exc_invalid_op+0x1a/0x20 [ 185.213445][ T8504] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0 [ 185.219617][ T8504] Code: c0 42 e2 8b e8 f7 7a c2 fc 90 0f 0b 90 90 eb d7 e8 5b d2 fe fc c6 05 5f 8b c9 0a 01 90 48 c7 c7 20 43 e2 8b e8 d7 7a c2 fc 90 <0f> 0b 90 90 eb b7 e8 3b d2 fe fc c6 05 3c 8b c9 0a 01 90 48 c7 c7 [ 185.239248][ T8504] RSP: 0000:ffffc9000483f7d8 EFLAGS: 00010246 [ 185.245343][ T8504] RAX: 21c29d1b1d733e00 RBX: 0000000000000003 RCX: ffff888025525a00 [ 185.253508][ T8504] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 185.261520][ T8504] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 185.269552][ T8504] R10: dffffc0000000000 R11: fffffbfff1bfaa04 R12: ffff8880586b8c00 [ 185.277562][ T8504] R13: ffff888059ffe460 R14: ffff888059ffe478 R15: dffffc0000000000 [ 185.285863][ T8504] ? refcount_warn_saturate+0x119/0x1d0 [ 185.291434][ T8504] klist_dec_and_del+0x3c7/0x3d0 [ 185.296404][ T8504] klist_remove+0x1bd/0x340 [ 185.301048][ T8504] ? __pfx_klist_children_put+0x10/0x10 [ 185.306636][ T8504] ? __pfx_klist_remove+0x10/0x10 [ 185.311704][ T8504] ? __pfx_kobject_move+0x10/0x10 [ 185.316748][ T8504] ? get_device_parent+0x366/0x3a0 [ 185.321882][ T8504] device_move+0x193/0x700 [ 185.326360][ T8504] hci_conn_del_sysfs+0xb8/0x170 [ 185.331333][ T8504] hci_conn_del+0x8ff/0xcb0 [ 185.335867][ T8504] hci_conn_hash_flush+0x191/0x230 [ 185.341091][ T8504] hci_dev_close_sync+0xaef/0x1330 [ 185.346238][ T8504] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 185.351811][ T8504] ? up_write+0x1c4/0x420 [ 185.356167][ T8504] hci_unregister_dev+0x21a/0x510 [ 185.361239][ T8504] vhci_release+0x80/0xd0 [ 185.365625][ T8504] ? __pfx_vhci_release+0x10/0x10 [ 185.370673][ T8504] __fput+0x449/0xa70 [ 185.374689][ T8504] task_work_run+0x1d1/0x260 [ 185.379309][ T8504] ? __pfx_task_work_run+0x10/0x10 [ 185.384444][ T8504] ? kmem_cache_free+0x18f/0x400 [ 185.389403][ T8504] do_exit+0x6b5/0x22e0 [ 185.393607][ T8504] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 185.399025][ T8504] ? __pfx_do_exit+0x10/0x10 [ 185.403660][ T8504] ? _raw_spin_unlock_irq+0x23/0x50 [ 185.408907][ T8504] ? lockdep_hardirqs_on+0x9c/0x150 [ 185.414160][ T8504] do_group_exit+0x21c/0x2d0 [ 185.418791][ T8504] __x64_sys_exit_group+0x3f/0x40 [ 185.423850][ T8504] x64_sys_call+0x21ba/0x21c0 [ 185.428552][ T8504] do_syscall_64+0xfa/0x3b0 [ 185.433076][ T8504] ? lockdep_hardirqs_on+0x9c/0x150 [ 185.438307][ T8504] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.444428][ T8504] ? clear_bhb_loop+0x60/0xb0 [ 185.449143][ T8504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.455058][ T8504] RIP: 0033:0x7fd7c598e929 [ 185.459494][ T8504] Code: Unable to access opcode bytes at 0x7fd7c598e8ff. [ 185.466631][ T8504] RSP: 002b:00007fff934903c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 185.475070][ T8504] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd7c598e929 [ 185.483059][ T8504] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 185.491131][ T8504] RBP: 00007fd7c59ee8f0 R08: 00007fff9348e167 R09: 0000000000000003 [ 185.499136][ T8504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.507145][ T8504] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007fff93490580 [ 185.515169][ T8504] [ 185.518357][ T8504] Kernel Offset: disabled [ 185.522703][ T8504] Rebooting in 86400 seconds..