last executing test programs: 1m3.697936884s ago: executing program 1 (id=177): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071120d000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 53.547394106s ago: executing program 1 (id=177): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071120d000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 40.001138693s ago: executing program 1 (id=177): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071120d000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 29.234401087s ago: executing program 1 (id=177): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071120d000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 20.062278897s ago: executing program 4 (id=1247): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x4, 0x7, 0xc, 0xdfffff97, 0x18, @dev={0xfe, 0x80, '\x00', 0x3e}, @loopback={0x0, 0x460c6}, 0x40, 0x10, 0x3, 0x10}}) 19.87121431s ago: executing program 4 (id=1249): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)="67d8902400aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c14498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f7}], 0x2}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000340)=0x10) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x201, 0xca25, 0x5, r7}, 0x10) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x1000000, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x7}, @TCA_CAKE_TARGET={0x8, 0x8, 0xa47a}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40021}, 0x0) 19.655961852s ago: executing program 4 (id=1250): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@cgroup=r2, 0x2, 0x0, 0x3ff, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newtaction={0x70, 0x30, 0xb, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_vlan={0x58, 0x1, 0x0, 0x0, {{0x9}, {0x20}, {0xd, 0x6, "84c8279ec5dd8dd408"}, {0x7, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 19.392162732s ago: executing program 4 (id=1254): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) (async, rerun: 64) socket(0x10, 0x80002, 0x0) (async, rerun: 64) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r3, 0x104, 0x7, &(0x7f0000000080), 0x4) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {0x9}, {}, {0xfff3, 0xfffa}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) 19.199932094s ago: executing program 4 (id=1257): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000080)={0x20, 0x0, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000401}, 0x2004c084) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c0002800600"], 0x24}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000287900000000000000000100000a20000000000a01040000000000000000010000030900010073797a300000000014000000020a010200000000000000000000000520000000060a010400000000000000000100fffe0900010073797a3000000000140000001100010000000000000000000700000a"], 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r3) (async) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000100)="d98b252ae5a0c37794379b02f92255926b6e9f818c004888541e0b665f5ed13fe821d7151d0b52e2bcf0fc55be6e115c7cd5431392c2d456b588c9a119b7bd866af33c9fea6cad75a22f5418d34bc50d5481ed1b0395a627a09d43054715bb3ec715316defbec056b4d8ece32d620ce0e45bd09d8425ba00b1708ddee3cc2df81177a25516a4e4eccfe1a2a1f51f140ae86078a1fcf3b93c85ff3d2230f2662ab4d6202da7b31de2d8385d24cd41799e3b9e53c81e1c517a24eb7683ea4868b92f8fdd2da9ffdd37583e8283426afdba771cdfbbbe2c3bc7adb3e29d58c8058b4e5aef45", 0xe4) (async) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_IFACE(r7, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, r9, 0x8, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x60000000) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r10, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x2c, r11, 0x19, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x44004094) (async) sendmsg$NL802154_CMD_GET_INTERFACE(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, r6, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 18.792869839s ago: executing program 1 (id=177): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071120d000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.261961524s ago: executing program 4 (id=1257): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000080)={0x20, 0x0, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000401}, 0x2004c084) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c0002800600"], 0x24}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000287900000000000000000100000a20000000000a01040000000000000000010000030900010073797a300000000014000000020a010200000000000000000000000520000000060a010400000000000000000100fffe0900010073797a3000000000140000001100010000000000000000000700000a"], 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r3) (async) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000100)="d98b252ae5a0c37794379b02f92255926b6e9f818c004888541e0b665f5ed13fe821d7151d0b52e2bcf0fc55be6e115c7cd5431392c2d456b588c9a119b7bd866af33c9fea6cad75a22f5418d34bc50d5481ed1b0395a627a09d43054715bb3ec715316defbec056b4d8ece32d620ce0e45bd09d8425ba00b1708ddee3cc2df81177a25516a4e4eccfe1a2a1f51f140ae86078a1fcf3b93c85ff3d2230f2662ab4d6202da7b31de2d8385d24cd41799e3b9e53c81e1c517a24eb7683ea4868b92f8fdd2da9ffdd37583e8283426afdba771cdfbbbe2c3bc7adb3e29d58c8058b4e5aef45", 0xe4) (async) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_IFACE(r7, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, r9, 0x8, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x60000000) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r10, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x2c, r11, 0x19, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x44004094) (async) sendmsg$NL802154_CMD_GET_INTERFACE(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, r6, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 9.019358437s ago: executing program 1 (id=177): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071120d000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.86898288s ago: executing program 0 (id=1348): r0 = socket$inet6(0xa, 0x802, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaa08c82553c54d08004504004c00000000040690780a010102ac1414aa00014e200a36152c0d7d4e2286ad0ecedde8672626b5a58a05b411f618a7c82ad8999e792ba22e950c562198d0a2619c28a8fc0ebd153eaaf2ca4d5de9aa7f1892ac919244f9b78c1110e4e1e8d66148099e0fb3706c0e2242ad70dc0853460dbc2348ec50a7f54a9c38c1580de16fa03efb185ea7fa41f0c5d388a89ff814113f65a463004bf189ca7cf8b2674003e88a247a0217f928bcbaf32cb741e7c957a92e9cbb836376fc35ff91e9ef997eb3fb586aad9559b980fc834b011e80", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="3c000000907800001312b3e480a7613088fd71106c027deb3b1113126ff10ff662227a1ee386aead7cbb04f5"], 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x310, 0xffffffff, 0x98, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x278, 0x278, 0x278, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@unspec=@CLASSIFY={0x28}}, {{@uncond, 0x287, 0xd8, 0x138, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth0\x00', {0xff}, 'virt_wifi0\x00', {}, 0x0, 0x5}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x6]}, {0x0, [0x1, 0x6, 0x1], 0x0, 0x3}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x11e, 0x0, 0x6}, {0x0, 0x0, 0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x370) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1d, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008040000b70300000000000085000000a400000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r2, 0x6180, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_USERDATA={0x9, 0x6, "814643369c"}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb4}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0xc0189436, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYRESHEX=r0], 0x18) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1, '\x00', 0x0, r3, 0x4, 0x5}, 0x50) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x4}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r6, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc86a00", "4617a9f6040839230fb7fead776dd8dc", "c6db0872", "a44a883fca4400"}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r5}, &(0x7f0000000380), &(0x7f0000000500)=r4}, 0x20) connect$inet6(r0, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) socket$pppoe(0x18, 0x1, 0x0) unshare(0x6a040000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}, 0xd0}) socket$pppoe(0x18, 0x1, 0x0) 1.416069628s ago: executing program 2 (id=1350): unshare(0x20000400) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_KEY(r0, 0x0, 0xc000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="010026bd7000fbdbdf257400000008000300", @ANYRES64=r0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0xf0) r2 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb11001800000000dfc082047d46"], &(0x7f0000001f80)=""/226, 0x26, 0xe2, 0x2}, 0x28) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x4e24, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r8, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r8}, 0x20) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) listen(r9, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r7, &(0x7f0000000280), &(0x7f0000000100)=@tcp6=r9, 0x2}, 0x20) shutdown(r9, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a0010f60000000004000200"], 0x1c}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5}, 0x0, 0x0}, 0x20) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x4000000) 1.365747897s ago: executing program 0 (id=1351): r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000480)=[{}], 0x1, 0x10000200) syz_emit_ethernet(0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd6002adf700383a00fe880000000000000000000000000001ff020000000000000000000000000001020090780000000060fd906300003a000000010001000000000000008f33c22b6fa06b4a1cc2046f2eca679000"], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0xfc9d, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201"], 0x1508}}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0xea5, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="b91e233c000000030601040000000000000000070000080900020073797a31000000000900020073797a300000000005000100070000000500010007"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000002c0)={0x10000014}) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={'macvlan1\x00', {0x2, 0x4e22, @private=0xa010101}}) socket$inet(0xa, 0x801, 0x7) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x6}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x80000000, 0x7}}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x88, 0x24, 0xd0f, 0x70bd29, 0x25dfdbfe, {0x60, 0x0, 0x0, r5, {}, {0xffe0, 0xa}, {0x2, 0x10}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x8, 0xf, 0xf, 0x1, 0x0, 0xf, 0x2, 0xd, 0xc, 0x0, 0xe, 0xf, 0x8, 0xe, 0x0, 0x6], 0x1, [0xfce3, 0x7fff, 0xf800, 0xa83, 0x401, 0x4, 0x401, 0x0, 0x5, 0xfffb, 0x10, 0x7f, 0x2, 0xffff, 0x2, 0x2], [0x2, 0x8, 0x9, 0x3ff, 0x0, 0x3ff, 0x2, 0xe15, 0x33c, 0x3ff, 0x0, 0x3f, 0x0, 0xa735, 0x2, 0xc]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x54}, 0x4000) 1.212053337s ago: executing program 2 (id=1353): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1008}, 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x14, r2, 0x303, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)={0x34, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}]}, 0x34}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x53e}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f00000000c0)=0x21, 0x4) sendto$inet6(r0, &(0x7f0000000000)='=', 0x1, 0x24000810, 0x0, 0x0) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x162) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz1\x00', 0x200002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000040)=r6, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000b2000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000540)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) sendmsg$inet(r8, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024001d0010c411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab", 0x42}, {&(0x7f0000000440)="0000e100000000000068", 0xa}], 0x2}, 0x0) 1.157521842s ago: executing program 3 (id=1354): listen(0xffffffffffffffff, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x10) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r5, 0x0, r4, 0x0, 0x406f413, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0xa, 0x3, 0x2, 0x4c, @local, @remote, 0x8, 0x7, 0x6, 0x7}}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x20000003, 0xcc, 0x4, 0x20, r0, 0xffffffff, '\x00', r7, r3, 0x0, 0x5, 0x4, 0x1}, 0x50) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x7c, 0x5, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc}]}, @NFTA_CHAIN_USERDATA={0x9, 0xc, "df2295debb"}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}, @NFTA_CHAIN_HOOK={0x1c, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x31e68769}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x47c482fe}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffff7}]}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x11c}}, 0x4041) 1.028508548s ago: executing program 2 (id=1355): syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={0x1, 0x58, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0x58, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1, 0x8e165bd}}]}}]}, 0x48}}, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000880)={'ip6_vti0\x00', &(0x7f0000000800)={'ip6tnl0\x00', 0x0, 0x4, 0xff, 0x7, 0xfffffffa, 0x8, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x80, 0x6}}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000a40)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a00)={&(0x7f00000008c0)={0x130, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKINFO_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x9}, @ETHTOOL_A_LINKINFO_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x4040880}, 0x5) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r10, 0x0, r12, 0x0, 0x25a5, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x29, 0x81, 0xb5, 0x3, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x20}, 0x40, 0x7, 0xe, 0x5}}) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x0, 0x400, 0x0, 0x8ef5, 0x30112, r10, 0x1, '\x00', r13, r10, 0x3, 0x4, 0x4, 0x0, @void, @value, @value=r10}, 0x50) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r14, 0x10f, 0x81, &(0x7f0000000080), 0x4) (async) sendmmsg$inet(r14, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r15) (async) r16 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r16, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000000008010100000000000000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x44040}, 0x4001) 939.927258ms ago: executing program 3 (id=1356): r0 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='cpu.pressure\x00', 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x1e, &(0x7f0000001780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@tail_call, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ldst={0x0, 0xeefa3bba727757e3, 0x1, 0xc, 0x5, 0xfffffffffffffff4, 0xffffffffffffffff}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @ldst={0x0, 0x3, 0x4, 0x7861cebc4ac36391, 0xa, 0x10}, @exit]}, &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) setsockopt$MRT_FLUSH(r2, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) r4 = socket$kcm(0x10, 0x2, 0x10) recvmsg$kcm(r4, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x12100) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="1400000023003517d25a806f8b6394f90324fc60", 0x14}], 0x1}, 0x0) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x4, 0x9, 0x3202, @vifc_lcl_ifindex, @local}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="6c000000020601000600000600000000000000000e0003006269746d61703a697000000005000400010000000900020073797a3000000000240007800c00028008000140000003000c000180080001400000000a080006401c02000005000500020000000500010006"], 0x6c}}, 0x40000) splice(r5, 0x0, r1, &(0x7f0000000280), 0x5, 0x10) sendmsg$nl_route(r1, 0x0, 0x20000004) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001700)={r3, 0x0, 0x1000, 0xe0, &(0x7f0000000540)="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", &(0x7f0000001540)=""/224, 0x6, 0x0, 0x3c, 0x47, &(0x7f0000001640)="25fbabdf40b1ca5bc40f4fa545401b95e0efb94328077ef36e4110ed98e02ef07fc887c485ea2ec38a8699997af383f79827c6bf81660065b93375e1", &(0x7f0000001680)="e3be86bdc57a144842e730cd64cf2e100ba4d4060a94b6ba1fdd441adcae831c70778d2126b4233d6371badaf1a90bca3c4e5f9c4a26776ee0f7f435ebff7a02efbd42238ed893", 0x7}, 0x50) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x33, &(0x7f0000000040)=0x1000, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000040)={0x10000000}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x82, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0xf5, 0x0, 0x4, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x2f, 0x9, @multicast2, @remote, {[@timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@rand_addr=0x86dd, 0x2}, {@broadcast, 0x80}, {@dev={0xac, 0x14, 0x14, 0x32}}, {@rand_addr, 0x4f}, {@multicast2}, {@loopback}, {@local, 0x4}, {@remote, 0xfffffffe}]}]}}}}}}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000040)={0x0, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r8, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x61}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) pipe(&(0x7f0000000140)) 912.650258ms ago: executing program 0 (id=1357): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000840)='tasks\x00', 0x2, 0x0) r2 = getpid() write$cgroup_pid(r1, &(0x7f00000000c0)=r2, 0x12) r3 = socket$inet(0x2, 0x1, 0x0) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r4 = openat$cgroup_ro(r0, &(0x7f0000000040)='memory.numa_stat\x00', 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendfile(r5, r4, 0x0, 0x3) 877.691897ms ago: executing program 2 (id=1358): setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000340)="56446fed53a96a60e752aa1d5b85f20b3abdbcedddc6135485640f39f1f3cb9b5ed94bdea5b67687d4ec61ca6ba9135ad330600ffa019eb521b1710c8fa6c25cbc3d1ecc060835ac0cf3a444a7e3642c653581c15b8f4fc45adbbd88c45cd3c98c06300330b6a172f6efb887be60f65fc12478a06900e39e08b05d0fc0fbec6474026ab71987948a1ada382629", 0x8d) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe, 0x0, &(0x7f0000000300)="0000ffffffffa000f2710063d2ac", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@deltaction={0x40, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xfffffffffffffedd, 0x1, 'ipt\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}]}, 0x40}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) recvmmsg(r1, &(0x7f0000003300)=[{{&(0x7f0000001800)=@caif=@util, 0x80, &(0x7f0000001900)=[{&(0x7f0000001880)=""/88, 0x58}], 0x1, &(0x7f0000001940)=""/52, 0x34}, 0x8}, {{&(0x7f0000001980)=@l2, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001a00)=""/76, 0x4c}, {&(0x7f0000001a80)=""/39, 0x27}, {&(0x7f0000001ac0)=""/65, 0x41}, {&(0x7f0000001b40)=""/185, 0xb9}, {&(0x7f0000001c00)=""/171, 0xab}, {&(0x7f0000001cc0)=""/110, 0x6e}, {&(0x7f0000001d40)=""/16, 0x10}, {&(0x7f0000001d80)=""/105, 0x69}, {&(0x7f0000001e00)=""/45, 0x2d}, {&(0x7f0000001e40)=""/26, 0x1a}], 0xa, &(0x7f0000001f40)=""/166, 0xa6}, 0x6}, {{&(0x7f0000002000)=@nl, 0x80, &(0x7f0000003280)=[{&(0x7f0000002080)=""/131, 0x83}, {&(0x7f0000002140)=""/43, 0x2b}, {&(0x7f0000002180)=""/103, 0x67}, {&(0x7f0000002200)=""/113, 0x71}, {&(0x7f0000002280)=""/4096, 0x1000}], 0x5}, 0xfff}], 0x3, 0x10100, &(0x7f00000033c0)={0x77359400}) (async) bind$alg(r3, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) (async) r4 = socket$inet6(0xa, 0x2, 0x0) (async) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r7, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r8, 0x5f501}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004) (async) sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @dev={0xac, 0x14, 0x14, 0x27}}}}], 0x20}}], 0x1, 0x80) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) (async) r9 = accept4(r3, 0x0, 0x0, 0x80800) read(r9, &(0x7f0000009180)=""/77, 0x4d) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="001dda1fb3ee47f400", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b0001006272696467650000200002800800080088a8ffff05000700070000000a0014000180c200000d0000"], 0x50}}, 0x0) (async) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='pids.events\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r11, 0x84, 0xc, &(0x7f0000001740), &(0x7f0000001780)=0x4) unshare(0x4000400) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 798.237599ms ago: executing program 0 (id=1359): r0 = socket(0x10, 0x3, 0x0) (async) r1 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = epoll_create1(0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x6d}, 0x8) (async) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f00000001c0)=0x439b, 0x4) (async) sendmmsg$inet6(r4, &(0x7f00000002c0)=[{{&(0x7f0000000200)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c, 0x0}}], 0x1, 0x4004000) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x20000014}) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)={0xa0000001}) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0xffbfff}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r6, &(0x7f0000003f40)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="1c", 0x1}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000008000600791c0000000000000000"], 0x18, 0x48060}], 0x1, 0x200000d0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe000002000000000800040001000000", 0x24) (async) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x1}, 0x20) (async) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1, 0x42031, 0xffffffffffffffff, 0x80000000) 683.345585ms ago: executing program 2 (id=1360): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000180)="00050002", 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000100)=0x1, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, &(0x7f00000003c0)=""/200, 0x0, 0xffffff2a, 0x1, 0x7}, 0x28) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) r3 = socket$alg(0x26, 0x5, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000240)="cfc9ff8a0a25873c7c9c8f11ae3a85522656117a8ccb1a36ecff6784e177dccb52a04273ea5df67df81520c1405c2d95637aa30029ee0dd0ce1a10572f9a95d83318479fe9244324ef52f57528985db2e616abff2db75a7a54f7bf35e2c74d2b97c03b666d3ed47898d4a5cabc3daba9aaab178fa7b8b4016f6fb1c4b6286b4d025a19f30c7d6b140906b358cf486f0939c8657e4bf768f8373154fb704c891ddd396112dbfbe4cbe9c78d29ed84f0ca4865", 0xb2) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001200000008000800000001000800090000000000180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}}, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000180)={'gretap0\x00', 0x0, 0x1, 0x700, 0x5000000, 0x0, {{0xe, 0x4, 0x0, 0x1, 0x38, 0x66, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@generic={0x86, 0x3, "d7"}, @cipso={0x86, 0x10, 0x2, [{0x2, 0xa, "fcb1f0f46a3cc70f"}]}, @lsrr={0x83, 0xf, 0xa7, [@private=0xa010102, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) setsockopt$MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f0000000200)={0x1, 0x0, 0x3, r7, 0x2}, 0xc) r8 = socket(0x10, 0x2, 0x0) write(r8, &(0x7f00000003c0)="1c0000001a009b8a140000003b9b30e6c9dc7c64d5524a1f009d9503", 0x1c) 682.310436ms ago: executing program 3 (id=1361): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r0, &(0x7f0000000340), &(0x7f0000000a00)=""/4096}, 0x20) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="d40100001000000018000000000000000000000000000000950000000000000038720a013653e84c584fdd38a1990000df9e190a587bed507002e83640d72226cbc0c89b926a"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xdd, &(0x7f0000000000)=""/156}, 0x80) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="88010000"], 0x188}}, 0x0) 591.010627ms ago: executing program 3 (id=1362): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b70700000100e0ff5070000028000000770000000000000095000200000000007ae9413df8ff0af5aa35339f4b382c4cad9db6fa7a9b857b72abaca100af1ba23d699b89e890c10500000000000000000000000000ac0e064c27bdfbd301150500000000000000bfdc995279d64072aacbb0595b95060000009ad3bf16a461e48e955a772d4062093f4cb1c3d9532abad2085401f098eb039ae4f4103699b9e079227e98cc07c09c1a72cb6d47cef1595e84d21951010f0274b1445a2ad6a7ad73827cccc21842599e0ae7b91f0b878b9267aa0b28d69a74ffdea613e892f0f9ff94e690b6ad68e4cb6dd65fd7bf3124702c6b1c2aea53ee0cb83ff1807459c7cba77cedca0bff6d8370c33e2bd9cebd29c152ff9dc8c2772fe552fecfcd1778b0838100000031d521207e5223d86508416780983c2f380bc01cefe9773a9a5cd5b24aa24a561e72393c0ce2bf44825b05c138779fe74f884c2472ab45c2af60289cb199963312dd1929096c6f49d116f1612a7b97f77169fa5e8a66a372ef8e3ee7167f7d2a26fc6c3cfa4dc5860277223d6eb3460e3b10a0dc9495635a9fca19d7beb5e700498b43bdadc916c01264d22d7969530633f94b257fbc5da7a96820e31444c0b0f62619c9e351996185e4015510875b774666ba5c0ba9845ad25b578d"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x15}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=@deltaction={0x18, 0x31, 0xf964cc2c8a2e644d, 0x70bd2d, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = socket(0x16, 0x2, 0xfffffffd) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000140)=""/194, 0x221000, 0x1800, 0xa}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000080)=0x200, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r3, @ANYRESOCT=r2, @ANYRESDEC], 0x30}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000340)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_NAT_SRC={0x8c, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}]}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x2]}, @CTA_TUPLE_REPLY={0x4}]}, 0xac}, 0x1, 0x0, 0x0, 0x24000000}, 0x200080d0) 330.551987ms ago: executing program 3 (id=1363): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)={0x244, 0x7, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x218, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x1d0, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x1c0, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x8b, 0x3, "4f3bc6ac73da6fd33ae876fdd93a116444bee5aeb5225000d0bc9c66e64d938682e5e5cbebae3ad11d74118989b6e8070767ccd72bcfa5fd606587f56e905f4001f042730780de7320872aa83018b7963ac1b54fe6782681f8cdc4c84398b92d7eababe8c59f43b3c788a6a6aa1315c23b703c1470591dd5a99e465dd53b1290d414b7c5b32282"}, @NFTA_MATCH_NAME={0xc, 0x1, 'rateest\x00'}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0xe7, 0x3, "37cf8af675462eac94e69fac2cf2550756c97c6ffc416bb234d14baeb18da8a929ab025e28916a805cc863fdedf5bdf34ba9a419043f1c991910a8642b2823857ac4483c81fe65964ff8a041425cecf24da98f5144ed06436ed634d77f30679fb23fdb67fcb26dd67fbd070222d55ce53e93041533ace9cb455499567c4d7312f7b4c9e1cb2f1dc24d6da163609bf968552006597ec44c08fddbe18e9199508205c5b691e05d1c94a3f7fa6b3ec89ee069dd30b323fa045bc8f9a25cbb53cec63c1c09569211e82c746d9ad5d2b604a34cf6a96170d86aa5502406a06f4638370cfe8c"}, @NFTA_MATCH_NAME={0xb, 0x1, 'length\x00'}, @NFTA_MATCH_INFO={0x26, 0x3, "bdf83ecdb6b84368b2344a21168bd3955bd1612b00d054840c47cd43d14bd2e317d8"}]}}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}]}, 0x244}, 0x1, 0x0, 0x0, 0x4010}, 0x10) r1 = socket$caif_seqpacket(0x25, 0x5, 0x5) connect$caif(r1, &(0x7f0000000340)=@util={0x25, "73934e814239e14e05796771f76d5b1e"}, 0x18) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r2, 0x89e8) r3 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000003dc0)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000380)="807a6dfd44d407224f07251c2b4e4d69a3d2b320ea35068eb4ee8c9537b3cb8045fc2aa44767b818f75f97d5742f03e2185a958de02b80dbef044734382c4529363bb9039829cfdb8f2d5c87a5766d98172af9fc213e1465580ddd8d7cd3e17354f9d8b21d393fbdf92c4be890a76ba8413403ad13689cedb6203bfc32c8c5119613157cd105c6f6a3a8bcdb1ea10e95edc031e4eefdfdfde1e1c94353941a8544b59f79395606871a56", 0xaa}, {&(0x7f0000000440)="3cb16fff1b84100a1ac2c30ab2369fc98754970c811d0a24a9c7d5591e24364e74f31b6677", 0x25}, {&(0x7f0000000480)="6427bcad118fd7a8659a2ff4c789f82f246ad020fec69f09de13fb9ab232aa3c5272f6cc5b0f4a16d08c1162fb11ade62ffc3ffea75b1edc1527c1ecdd675f4bed6458663c0d688a018325e9d33953d229106d8a665b6315f5bbcda21b5810e3db6bce4ba349621ac8c95a5e65cda78494f462a61e220a82a5cea98ad2352159b930285a537964848058fc2ab17a7c02e6f4a646b62a723074cd4db11d98b81cfa6af3e1f430a7b18949c7649403cae92f72f27fc8086771a0639ae34c18b9c9c7af27667b12622b42a7af0533f968f1ed8933ae9fb99fc461611eef677398b7070dbfcb830807f546533d4295775672351b93188ebe7e", 0xf7}, {&(0x7f0000000580)="a06af098f6526fa087cc95f9127c5bbb0da23751412f8409f41496464e488e62f2f932ee4f2aa288fbefa9a1d6a9d6ad17742598b890e622616a3dacc89fcc2965f58ae8ebe9c513d3358761e9724b4fac72527e020a979d", 0x58}], 0x4, &(0x7f0000000640)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0xc0, 0x117, 0x2, 0xa9, "12711213a17842590c02dec0a487c1fca00846c8009c4986d1395c88119d582eac3f9102504f23f7d079f661db7f307f6fa4b3d2eafbceddd165b10875a894d34c6125fbf41349dcc1e020d412615378c9a5d7b56c6122f921e3f56a0a61f7c7fc4194b7ca9ad69c50b1e298a33e54c303b7d999dbbed9fe2f1aa70653e2418b2c3672a6d4b618c81990d2f7c407eb166c99ae60ef947246438abe0e22d2b3538bf146311eefb4806d"}, @assoc={0x18, 0x117, 0x4, 0x100}, @assoc={0x18, 0x117, 0x4, 0x5}, @iv={0xe8, 0x117, 0x2, 0xd4, "1b403e2d82ebd6ded99ae36213a7a799ac28a63129a252c254c7125b45ad33f936a3d353aa2c13a1dd754ff46436e713950c95b19a6cf259bdb05e6567b52478c1756732544a440b625806513c3884902f08d72513417c90491b4f250f3c2a7503495551b670e2d047b7d9d2da63975a33b76858c70f45b34c8855b8c33c2d8b571b675ab941bb3de8faa636f8d3cf0831a38ec175000ef0366256e0c9972ea2eca4bc8ca25e049cdbe46ea00fcac7f0a1a677eacdb18019d17ee76260546c0cbeaa6a13c1fd92ce2887383195056f537a31019c"}, @iv={0x18}], 0x208, 0x4000800}, {0x0, 0x0, &(0x7f0000000880), 0x0, &(0x7f00000008c0)=[@assoc={0x18, 0x117, 0x4, 0xcd}, @assoc={0x18, 0x117, 0x4, 0x2}], 0x30, 0x880}, {0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000900)="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", 0x1000}], 0x1, &(0x7f0000001940)=[@op={0x18}, @iv={0x110, 0x117, 0x2, 0xfb, "5cea451d8d41055711cd2d13ad1902c419f04ce5e99fa7f6850cfdd5d0cde4df81eea210674567f8788bbf1e7967c04ffe89e2c228c451e96d75e46b8abde7dacf94e1763d039293b608da38bca8c629c0370c313795b740033121aedded52f1f600638b4de62cefd706235a2199096a6108371fd42595489fcfe2c5a1e277523e72680d274f612a7c95f53c24e822f725ca84a0875aefd3d78ef2d0074c1b9b8740b4031e5426124240cb8a03c7bfff814dedcb369be95f5fd43a774691b601bfb500590996f3ae23aea71ffa65f83c6fa02f6662d5fd151a061828b510c163a3f2ac5b00aa537344cd47296420f4bfd0c0956c889b486c017519"}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0xb0, 0x117, 0x2, 0x96, "ee819b948e2e047973797f8f90486456cc0d8592d1da7ab2d145b17781dc262682706fb382ab5e6c11fe27dc35c950fdf43d9460e2f57dd318004cc5144a7b116c1c3ce2c0e0385ea2f8bf21b1971fc84cd478321bc42c8d223f38a4258db1c4059bf807f40b156062effc58337221516a50d7a9427199cd625ce1e50f13d3ff21679cd24d912d43fe43219864dd6f2d48bf81a640e1"}, @assoc={0x18, 0x117, 0x4, 0x6}, @op={0x18}], 0x220, 0x1}, {0x0, 0x0, &(0x7f0000002d40)=[{&(0x7f0000001b80)="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", 0x1000}, {&(0x7f0000002b80)="e33f31129b5e0a0946d9b6052516c796641384ff9be4998b70e8b5eddeb84c83706a7adeb7f26bab0c479c427b38f65f5263ea05bb9ceb618fef03d373af30d0af645def1c9ad29c83a0738e0664e8973ea941470f2349b7b11636de4c35a31b9c32cb42147ebe25a70b2f5427771f674f85ce95d2d6d0f9de50c067be28bf4f4e5153261c4d93cf1ac7fc6c3f55b6aeff15", 0x92}, {&(0x7f0000002c40)="914e005309647feb1d770d2a54edbe508b427448d35eb5b0990ddece32813a4a56dac9ef387389cb4eec76378b293d71c9dd35d18a85a5b8eafee627b8b85b335b911a5d652615ccbd7d35b6a204fc7217655dcd76d31da2d514c902a4b28a55cdef4f3953e25af19ca67ca50e5bcd4b60ecdf476fb907095b84ae4d1924acabc529260c8535de34e818721496a4317c4c2e68d53c7207334703b37212f4cd9fc7e8c696286f401732c994706c25e4c4a0a6adac0d61d4c16677d704c619cd4689824dfd2fbfb485edc45111a8f70362af5ec60265", 0xd5}], 0x3, &(0x7f0000002d80)=[@iv={0x1018, 0x117, 0x2, 0x1000, "55bdf4b53f2ca9c22b282486038c15d2953ce827d750cde9ba4db82db25be106b87d67243e8672ac440c2a64fbfff94410b701a487c39a4f892ba844c750c7651b7e39468e21fb27edfd476e47ca749e27332e3371c0c91edf5bb6f1775e1c43bd3266ba98fcd67b7d89123534f890ee897a694d2839cedf916b1e719c94392e0bb313beca3c2b0e0a274874c6b9dcf9cea915a577b2d18ce1c3a05bfbe30eed3b4577846d328ccae849eccd8913c6f605b444bea8a33332d33c167a0c421b4d6a35249249c0fb942658dce215a00c3ff7cbd2dde32fda464778f3278ca1f4daca8efeead84d8d252dedf09edb61f85b1636d9b42b5193c826b335e5ca4c83286596a892e8fb3aceafb753d4df273a9607cf9baca8abd8b509c86ba0bff9ec67367f41a3c4c3b15dd8bd212cdde32c916b156d84be1123f64cb89a30c8e39738ee52fe10c8d17a4b65bf09f57a6a6b6497e7c14dc44c47a2331c526fe66732c324f5c8000942b9a86fa0c2741937ad6a94105883072bcbf1427af5518beba68f03055b3fde773a22e9f5ea098f14a16383f871634a0cb073e268dcf80ed497ab2b50e460fc527bc1c5544d6baae85946796482e84d4b675d546deea5b888faedafbd0f77193abd9197fa52e3378978d2ef6f3197aaae1ec80af9767fb72a690fe4a95527abd37f139a2ad2e5c3321e99e8265b494ac52dd495e6f4fafa601046743ae2847955779f4e5b9169cde3bf98bf0ac725de1664100a21bf861ce2daaca9fb9c3a7390716ede790882d3888e5dd45b6406446a715d6b3a92e29254ba315884e2b30e415e20250c6c201e8c35a9e1e55560bf26987db15ce6e4aca007c0218c9c00796d0f73cb57a355fcfb3ac7000c1da050d72b74f528ce75d0fb3e66e8fc35970a7ad810fd6cdef0518430b74604aae30278c6c44d913ab2595679bde1bc3e008545349e7029d724c38272bfde5a835620c5705b1c7b45c5c9c62b1678e01e1ae524c6e5e666a3239d48768367190b37b1e8194ffcb66bee7770b88385032efbd3d5bd28f0536e3c38932338b8fa4fcdda7d5f60d73a85cec8d12059de60aac97bd68f151e81b47e0dc15716fab9f98b28ad874adc65d59eace93129cde49c10e6daab8a69e703d5272922d1787cd980694ed7b9e6d1a09524c76258ebd2463d54d1909e4a5cd86e448bb0d16731390e05a20a84d35af2376ca1b59a3f89783e5cfaf447350431c60be6370f90bc3845ab5223193b37f8624fe863704742b0e163023503311754ab59fc8da97b5581f4a92e7025c8989da6d4e8bc1e09441472b57dc32c835786b41cc5bb10a4a209024dcde767bac398be8bf54696b5a65b8d98da6ddffcdff05ffc7731c027d1632646b0150860dcb82e0f44d77a89c358e9aeeb0a0245e7bffa0219d43b7bf76778088448a091cd4b7c11d03f4f899d5b4b1f553e25b424a62fb6211799be6149f814e334e3830c266c0607ae07d4093012c5e53e1f452e480d2724bb2099fe7c47bf04a2b683df66baff9139077bcda38453e86172e3b8b764c842614b7f471c900281a625853f56d3ce55d2250c4ab6b3637c4258e065c4c01b2c3a75a406ae5755c10bff69f58a4da9e693e00a2df7acd51dc0019244b9cbeadd4638ccab48f54cd55fa03ec4fae700132de52e5e098f35074e963235b8bb3309929e045fa5d4984efa74886a3b33542486dc9d41a383705d40b3bf5e1894b9c5bd46a3d247ac64c44e6307ca55c05b3bdd19bd5c696ea01ec013753ecd09b23ffb1e7e33a75a6175af58947f9919517cd6b5f8baf7edbe3c22b9c969f10fff848f1da90cf37b1190b15ba1faea6ff6e238907adc7c2e1cdbc91a4a2630c3b57d8b1620df41e2fbdf353bd5b01dc07de0a84124c7fa4f1c7c2d9309f21b9e4e23c9f102ca9b7d02b34938ac69867f36e89c40ab291198679197c4a739bd6494266bccde05d5de60ebc71ebdb50370a94c56075941169431004b74e66ccab277ccb70b5ce3ad61faadd7a7d333d9de934d36320b12e89dc7dc74aafc17323e73b0e59517686d0e32408c22f0246d255de9a4d1277d9d02cf8c953078b93047198c331699d5864fd593767ceab7c0687d1d36058854b3abae99c8807a5c76aebde8e4596f3e50129c114489ac12e5a2f26f5e046393a55dd725a133b01b33b6de0c8d7b5801bd45baa6a4dd7d62277d05451b44c4059a8c567e70ad3b915ae6e627a35f62de03c3df32e429f7025440078cf715da78c8f0ce05e27a2395ab20d9521b24388b4002d4651dbf60556e2d6e8d72528f5d15bad340d8fe5d53993da14e825aa2f422267c9b751ad1cda6c46b432d3fd60f189ac49f0b0c4c06c22b95656def06d588d599d4b6cf534c27ca43b0d333d9006801495c1fba608a97a121f499b57a27a2eb1e6d02f9ea53ea019345d5f1dfcd1bd18b74996c88b5e48852975e48d7d6d4f2c3da8bff250307d92dac6c3e4390825c6c969509c1a483aa45c45502b0d149ff800e3a0644744376c2eace13b779ce861aeba776bf65ce19ac840d636309683eabd299299eec4e88db65e82abcfc852ea2fb59633b95f7e142c38cbe160bb1ff50a4e278789051b521c34160bccb4ca3e2a0455a68c40c077f03ab764882d32a657e5e76fabdaefc9cb00813de3079fe3ff71fe72951656db1feab1c5f82d9264a849c79f847c28f1fd9defc371e233e0145b6c04102915b41f75a4d1e18f1137af9dbe0bd6ac6400b3da691b60025a552c768c0c16fea76ed0ca2d5fd747e6ab49395cc24e70acd8abd3544df8bc00a7cb632a932a7b77e27ff12b4f7b4ac7cbc539356228c258ed5a89eb889ee6a06f20f4f726cefb57ea5e5b8c921f1f17c09433e683c9a8317f87bf66014996e11dcf4b8371d76b3b727a780e57b258800c6a70e989b2d8a2b03505535e0000b37cb410212e3cf3368140f7c8200424b5ac11978441bfbfd75fe78c81513cab75f9918245cd4ee3e0e9e061cb09e0ddde9b5262af16d4e66ff77de070e09eedfab4f07b20e922d738d08292b61159c7533a4e3d59c4950ce6ab3cc426f21fa0e2fa5ba32d70b532ea9b7c33940db3ae20270e66fadc2964299e8380c34c6e609bf195c74fe76688aa0922761de1df603fa0a6f87c8152f9c5904605f3133132e52ab8d91f21fbe24ab1b0c18d73901b13ca5f2d10477d96c23c1553ee8c3104f711bc75fe05de4b7bbf44297a48e12c304dba9dea2be93baf92f791891ca8af23bd929fe9ef2d33ca40c91307088b6848d7edeeea28a077747fcfd995fb397f613745f13964d80b5dcc261992d0bb4f3cf1256402816eaa96114814dc012829fb8f1562239e89fa64339547b78e75dca376dd31e68d1186500f96c19d42a6c93f8d45c9ce9563b68128385416b18722c8a7de93050fae0b64ff3f154e75d9aca172ffd4710324132112d408b597bd2f95ed38732aa675c08506df823f60c27dec4a2b640d871cf9ec29c93ae55b699106e3e77d26ebb246526519a3b400e96f542f12956b01a7a9d4e57af7cbfb40c3979d747078a3ae24d4485fa094ff65d40b3825bb212060934ad1a1ba25c00b424c96af6a81d4a2425c3f99ad44ea5b4b716cb4369a012a90aa706d14f160648f4a6cf6ef62385fda1c66241d610fc48c10144b187204a42869f460eb191145f13b36607b63622730e8a84601a221b76bbe6de61c9ac18cc694f47cc4b6fb104ffa8fc2fbf5ed46bb69fbe30b48f12566ea62c260b3cdf85cf8da87a5295f9b26c5a9fe2f53816e1666b62d9bb216b24a9f7cc80fb131f2e48cb5f6f73542aa9f58b30a741620c30b6308af5559e2332329377f7e40799a66ba65689a9c103e91193eacca8ad26d8ce16a0a4a2b84396446076f085649c2fb26e507cfc50dd84ca9926c6c6a001e9e5501a991e9eb9c23bdf34091e12dd688b0507bf3ae489d85fb099f20875a948a31de62750684309743d25dff51e86d4c4b8eb5b79f144a8aec186530c7fcfaf020e0865028329359a9f33606015e1aaa8bcd37a181011ad8466f415b5fffab66548f484f774a163d12e7bc6e8141bda2e02cd1c05a835df7b978fbd048740d2c598c85f5e15faa340d8d2fbceb1321010c231efa03c4696e3ed841ac9954457cccc8a41d9052cf0c5e1bab27942b8ccbe28cdfb07c6d65ff3bc4e0ca912fec88f5d4cad2f86d7c961e7e253e12a01b373f085056e3dfbee69a0679660b61fffa66513705ed42d97e1e6f087b6fee88eea529be10fba2a7021c249a6408045527fa65fa46459eba79bfa966dd7f8e133fb1390a5f39971b3210f6767b4866fe6b9f8fe2ab5460c689c0267daca7a44470a40b1957c07015478b2b5f84eb043ebfa1553269b878839eba0ebdc0326fa6dfd5abd8525b68f62ae71e63aea9bf82fef2eb6ddc90e6d526107c2a728bb082f64806497e1f829c52d3c2523e33238409d289da16aaa5decf547dbf95d17304a7acb691875645eee4a0f46c81e54afd3d7720407009c840798289e0c3b14d8caf612db3bd2ee653fa32ce971e89bb6c6574389e71e223d9245d21e17b9c1de6717d62a971de08bd6725d17a1b1b596b853322039958193699496c772d23f3bef8c4edf650658869af280c8e5bfcde04efa4d2b57037bded468ed4245ba60ae8e1dde15d3f98f02e033cca1d8d0e42998648508e64316cba34699074b6e4d2cda8d0f82a7ecb9301dfb87cf0f87f052125eabe4544ec09d46b4efa33b5deae0f6594b924f77780b53d31167b27d040fdfbd17f4dc23de79cb42e37b054dc8048334f7edf1c153e6cd02faf9cb1cd204ab4c4aa7b40024029d03531b1a426906fcf889831693af520bae7b9ae7782dc6335982316c9b9f99f88d7e70a7de00ff5790aaed1c17124a096d8c3e530c35cb3d13eb96d3b07452366e1ff2d1850376e5c9255f8e905302b829d48f229ffa93a4ffe03688ad1784ccaf4459e553e4c5a67b8422c176db17775619b19008169707bc1690b96a32494c7bad334228779a9f77c749331dd9dad291b7faeb57b9293deb6a8b455ad05964c7161f8203d2989c88e98b77233f053544ad2f67028e4cd340a080e17b1a511203ec0e860e707f3d64f98cf40f7931be08fd96e4bba33d5f9cb9f0f7a86220a74d697f3faa5e370bf34ebde77695929bdba94a2f8cbcaebd7c3222a338cebb83d06ad5c346611a0febfee024bc01787b50b84b69cb865501124baf1f9e1be83eab99589d0e739ac38d170757232b01486a74b95a43d62fee854788b62b8464ab113033660f14642fbd778277cbd93a7f729343d603bd44140d67c6ca38ed40f80005cdec3acf440e6f69f9aced0b05cedcf60d783a02b89c197f8b225efbe2b09ff526eca4e0e18d19985262a8d072ec78651e1cddde3ef2e300af67555b6c1fa4afcfb3ad362040141502a826e6a6cbc2deb7d138998aebcfa82220f8b6a99acc0b1f01a73d7ed8222005863902b44393ccd1ce54efbf798a9050906fee4d99ac4b43514469315b3db28ce986ab435374ee425023d3f79c91fc3400fe4239d834e2f4b87db9963bcdffda0e5c68ecb70a9f795cb4987478bad0522ee559482c6af3f3a954ab7dae4ca59b2698aa6ebb4f134cd5a21e5358db82f32b369df6432be67a0622475a64e572384a0a115267a60afb503914c0b17a652b829cce773dd28eae85400aba3d9d907e59798bf9ee749aec461900039e90a1d5944b8704934c4c9deb78395a4947069ba334a805503cdd483222701df479b06b02d7fa"}, @op={0x18}], 0x1030, 0x22044000}], 0x4, 0x54) r4 = accept4$x25(r2, 0x0, &(0x7f0000003ec0), 0x80400) recvfrom$x25(r4, &(0x7f0000003f00)=""/106, 0x6a, 0x0, &(0x7f0000003f80), 0x12) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000004080)={&(0x7f0000003fc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000004040)={&(0x7f0000004000)={0x14, 0x6, 0x1, 0x801, 0x0, 0x0, {0x7, 0x0, 0xa}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000802}, 0x44000) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000040c0)={@empty, 0x3, 0x2, 0x0, 0x2, 0xfff, 0x9}, 0x20) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000004140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000004180)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r6, &(0x7f0000004280)={&(0x7f0000004100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000004240)={&(0x7f00000041c0)={0x64, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_KEY={0x4}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}}, 0x20000800) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000004300), r6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000004340)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000004380)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000043c0)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000004400)={0xffffffffffffffff}) socketpair(0x23, 0x4, 0xffffff7f, &(0x7f0000004440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000004580)={&(0x7f00000042c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000004540)={&(0x7f0000004480)={0x94, r9, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_SOCKETS={0x58, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r14}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r15}}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x80}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '+'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x94}, 0x1, 0x0, 0x0, 0x40000}, 0x1) getsockopt$inet_buf(r15, 0x0, 0x2c, &(0x7f00000045c0)=""/64, &(0x7f0000004600)=0x40) connect$x25(r16, &(0x7f0000004640)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) sendmsg$nl_generic(r16, &(0x7f0000004980)={&(0x7f0000004680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000004940)={&(0x7f00000046c0)={0x244, 0x16, 0x200, 0x70bd27, 0x25dfdbfe, {0xb}, [@generic="b211c3dce003fed7755a1cae41313bacfbd7b533da6b237727d1fed8755c4d30e81fb7c93e2053f421b8e8d2a5b7b0fe3d25406330855a1d6cb4949914dd2fa3ab960f67fc0019a043e80bcad7b44352b3397d1384f7cf887e706a89cd9a2df3a4156838328d6d9cd176f0be72d08fb3e874ca7f03d94e1c466aff9be11750e92b51110aade81ccc7191e783c3eed2d34578e4576e91e22d60cb", @typed={0xeb, 0xb9, 0x0, 0x0, @binary="c6e2c5b0b06def95541350015b42387520fef6c27fcb75071569a86cfdd7c28d5df3c2f40722ba6eccf974f4d4eafe5c32f6410e03da81ad3b8a42783711465bd5193d09dd2c2b66d679fdd9d2d3775494b70d6fa3f1b8b747b24a77f9df7047fc18e9756321c5b7d986387acd7b83e1aa41afd0c197c0c78deed87bd5a4152242c3096700cd37f00d3afffc28cbf2d1221c1261b0979f62493264116801fd74b225351fb9da05b0b192ca786fa0bc3256c80ce04bac088195032afd958fd3e5bf7e983c3c609efd4a26a7ffc9162bdb11360b0c5f1c4f7299989c6d2eeafd39c0d01b01d83132"}, @generic="4fc558d2910636854534c19ccffb72e6ef3c14ee2522dd82e3d74bf4e7c26d9b10cbe5c040e2c0d12d2e6c025b4c6a42f3c1fd7a744d42caa2a0f74c320badceeb0f48e184dd87a38e2bf47c0e8a54e03399426ff04e07e9ede48de5", @nested={0x20, 0x3d55, 0x0, 0x1, [@typed={0x8, 0x14e, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x132, 0x0, 0x0, @pid}, @nested={0x4, 0x108}, @typed={0x8, 0x108, 0x0, 0x0, @u32=0x7fff}]}, @generic="7f6fca2af4367b06cdcb4ff5534696333ff3c2fa378a8de3613a702d7d89", @generic, @typed={0x4, 0x150}, @typed={0xc, 0x15, 0x0, 0x0, @u64=0x1}]}, 0x244}, 0x1, 0x0, 0x0, 0x80}, 0x40008) r17 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r17, 0x8983, &(0x7f00000049c0)={0x7, 'sit0\x00', {0x2}}) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r12, 0x80286722, &(0x7f0000004a40)={&(0x7f0000004a00)=""/2, 0x2, 0x7fffffff, 0x4}) 275.972508ms ago: executing program 2 (id=1364): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000300)={0x0, 0x0}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r3, 0x0, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000200)) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x24010) openat$tun(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random}) r4 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0) sendto$inet6(r4, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000580)="5197d3e195e4", 0x6}], 0x1}}, {{&(0x7f0000000600)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c, &(0x7f0000000940)=[{&(0x7f0000000640)}, {&(0x7f0000002b80)}], 0x2}}], 0x3, 0x4048040) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0900000003000000040001000500000000000000", @ANYRES32, @ANYBLOB='\x00\x00\b\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(0x3) 235.60988ms ago: executing program 0 (id=1365): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x29, 0x5, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x8fdff, {0x0, 0x0, 0x0, r3, {0x0, 0xffed}, {0xf, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xe70, 0x6, 0x3, 0x7ca, 0x6960, 0xff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000) 48.524787ms ago: executing program 3 (id=1366): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={0x4c, r1, 0x20, 0xfffffffd, 0x25dfdbbc, {0x4f}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xab, 0x3}}, {0x8}, {0x6, 0x11, 0xffff}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="14ebfff30ce4c1edf20342ce8d42dbd4cce994112411d21985032bba3f3bccea57fceb921b7778fb138afaccb01e2ef841ad762fbbebe807b53bb67af95ff4d8acf8b3006672f41a577d891de3a9b40acff68ba45a1c91a46bf405340cd66a", @ANYRES16=r3, @ANYBLOB="0100000000000000000054000000"], 0x14}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x7fffffff, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x7fffffff, 0xfffffffe, 0xfffffffd, 0x100000}}]}]}}}]}, 0x68}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @local, 0x9}, 0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000f00)={'veth1_macvtap\x00', &(0x7f00000003c0)=@ethtool_perm_addr={0x4b, 0x4a, "4b721b782a17a7b6a00d963e3f7fdafda2073830fb8cfb34eb7cbd173ed6f04cba5a1e6a6f0ef6c61346d54f61bd850519514421d1f3050000f99b355dcb6ab9ed36e7e245825e2998b6"}}) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@private2, @in=@rand_addr=0x64010100, 0x4e20, 0x0, 0x0, 0x7, 0xa}, {0x10000000010000, 0x3, 0x41, 0x0, 0x8, 0x0, 0x8000000000000000, 0xfffffffffffffff5}, {0x2, 0x8, 0xfffffffffffffffc, 0x9}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@private2, 0x2, 0x6c}, 0x2, @in=@empty, 0x3509, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x100, 0x0, 0x25dfdbff}, 0x20}}, 0x0) close(r2) 0s ago: executing program 0 (id=1367): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x10, 0x6169, 0x9, 0xd3, 0x0, 0xffffeffa, 0x7, 0x2ac8}}}}]}, 0x58}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0x9, 0xa}, {0x1, 0xc}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x36}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0xfff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0x4000) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) kernel console output (not intermixed with test programs): terface with an up link [ 179.095407][ T8169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.149856][ T8252] netlink: 32 bytes leftover after parsing attributes in process `syz.3.537'. [ 179.181355][ T8251] netlink: 24 bytes leftover after parsing attributes in process `syz.0.538'. [ 179.183056][ T8169] team0: Port device team_slave_0 added [ 179.199806][ T8169] team0: Port device team_slave_1 added [ 179.305596][ T8169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.326341][ T8169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.373964][ T8169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.398742][ T8264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.541'. [ 179.410436][ T8262] mac80211_hwsim hwsim14 wlan1: entered allmulticast mode [ 179.437284][ T8169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.445980][ T8169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.507039][ T8169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.611977][ T8275] netlink: 60 bytes leftover after parsing attributes in process `syz.3.543'. [ 179.684950][ T8169] hsr_slave_0: entered promiscuous mode [ 179.712159][ T8279] netlink: 44 bytes leftover after parsing attributes in process `syz.4.544'. [ 179.713265][ T8169] hsr_slave_1: entered promiscuous mode [ 179.740334][ T8169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 179.753118][ T8169] Cannot create hsr debugfs directory [ 179.776089][ T8279] netlink: 12 bytes leftover after parsing attributes in process `syz.4.544'. [ 179.813516][ T8278] netlink: 52 bytes leftover after parsing attributes in process `syz.2.545'. [ 180.021772][ T8286] _ÐZ`Ô€@ÿÿ: entered promiscuous mode [ 180.140087][ T8300] netlink: 'syz.3.552': attribute type 10 has an invalid length. [ 180.167830][ T8300] bridge0: port 3(syz_tun) entered disabled state [ 180.180486][ T8300] syz_tun: left allmulticast mode [ 180.188392][ T8300] bridge0: port 3(syz_tun) entered disabled state [ 180.225300][ T8300] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 180.507661][ T51] Bluetooth: hci3: command tx timeout [ 181.010324][ T8334] netlink: 'syz.4.560': attribute type 10 has an invalid length. [ 181.071448][ T8334] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 181.235016][ T8340] bond5: entered promiscuous mode [ 181.240447][ T8340] bond5: entered allmulticast mode [ 181.246167][ T8340] 8021q: adding VLAN 0 to HW filter on device bond5 [ 181.590939][ T8169] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 181.684175][ T8169] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 181.733857][ T8169] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 181.771662][ T8169] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 181.859389][ T8368] netlink: 'syz.0.569': attribute type 10 has an invalid length. [ 182.031107][ T8371] bond0: (slave syz_tun): Releasing backup interface [ 182.064717][ T8371] bridge_slave_0: left allmulticast mode [ 182.070952][ T8371] bridge_slave_0: left promiscuous mode [ 182.076737][ T8371] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.096957][ T8371] bridge_slave_1: left allmulticast mode [ 182.102828][ T8371] bridge_slave_1: left promiscuous mode [ 182.110009][ T8371] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.123551][ T8371] bond0: (slave bond_slave_0): Releasing backup interface [ 182.134735][ T8371] bond0: (slave bond_slave_1): Releasing backup interface [ 182.155245][ T8371] team0: Port device team_slave_0 removed [ 182.173488][ T8371] team0: Port device team_slave_1 removed [ 182.415890][ T8169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.480637][ T8169] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.495426][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.502783][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.523419][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.530600][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.558144][ T8386] syz.0.572: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 182.578005][ T8386] CPU: 0 UID: 0 PID: 8386 Comm: syz.0.572 Not tainted 6.16.0-rc4-syzkaller-00991-g6b9fd8857b9f #0 PREEMPT(full) [ 182.578037][ T8386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 182.578056][ T8386] Call Trace: [ 182.578064][ T8386] [ 182.578073][ T8386] dump_stack_lvl+0x189/0x250 [ 182.578116][ T8386] ? __pfx_dump_stack_lvl+0x10/0x10 [ 182.578140][ T8386] ? __pfx__printk+0x10/0x10 [ 182.578167][ T8386] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 182.578196][ T8386] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 182.578226][ T8386] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 182.578254][ T8386] warn_alloc+0x214/0x310 [ 182.578280][ T8386] ? stack_depot_save_flags+0x40/0x900 [ 182.578313][ T8386] ? __pfx_warn_alloc+0x10/0x10 [ 182.578348][ T8386] ? kasan_save_track+0x4f/0x80 [ 182.578370][ T8386] ? xskq_create+0x56/0x170 [ 182.578389][ T8386] ? xsk_init_queue+0xb0/0x110 [ 182.578408][ T8386] ? xsk_setsockopt+0x43f/0x710 [ 182.578426][ T8386] ? do_sock_setsockopt+0x257/0x3e0 [ 182.578454][ T8386] ? __x64_sys_setsockopt+0x18b/0x220 [ 182.578479][ T8386] ? do_syscall_64+0xfa/0x3b0 [ 182.578502][ T8386] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.578527][ T8386] __vmalloc_node_range_noprof+0x125/0x12f0 [ 182.578584][ T8386] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 182.578610][ T8386] ? xskq_create+0x56/0x170 [ 182.578634][ T8386] ? __kasan_kmalloc+0x93/0xb0 [ 182.578660][ T8386] vmalloc_user_noprof+0xad/0xf0 [ 182.578685][ T8386] ? xskq_create+0xbf/0x170 [ 182.578709][ T8386] xskq_create+0xbf/0x170 [ 182.578735][ T8386] xsk_init_queue+0xb0/0x110 [ 182.578761][ T8386] xsk_setsockopt+0x43f/0x710 [ 182.578785][ T8386] ? __pfx_xsk_setsockopt+0x10/0x10 [ 182.578805][ T8386] ? do_futex+0x333/0x420 [ 182.578828][ T8386] ? __lock_acquire+0xab9/0xd20 [ 182.578851][ T8386] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 182.578866][ T8386] ? __pfx_xsk_setsockopt+0x10/0x10 [ 182.578885][ T8386] do_sock_setsockopt+0x257/0x3e0 [ 182.578914][ T8386] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 182.578960][ T8386] __x64_sys_setsockopt+0x18b/0x220 [ 182.578993][ T8386] do_syscall_64+0xfa/0x3b0 [ 182.579014][ T8386] ? lockdep_hardirqs_on+0x9c/0x150 [ 182.579038][ T8386] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.579057][ T8386] ? clear_bhb_loop+0x60/0xb0 [ 182.579080][ T8386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.579098][ T8386] RIP: 0033:0x7fcacff8e929 [ 182.579125][ T8386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.579143][ T8386] RSP: 002b:00007fcad0dd2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 182.579164][ T8386] RAX: ffffffffffffffda RBX: 00007fcad01b5fa0 RCX: 00007fcacff8e929 [ 182.579179][ T8386] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a [ 182.579192][ T8386] RBP: 00007fcad0010b39 R08: 0000000000000004 R09: 0000000000000000 [ 182.579204][ T8386] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.579216][ T8386] R13: 0000000000000000 R14: 00007fcad01b5fa0 R15: 00007fffad33d8b8 [ 182.579248][ T8386] [ 182.579261][ T8386] Mem-Info: [ 182.640874][ T8169] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 182.647931][ T51] Bluetooth: hci3: command tx timeout [ 182.869220][ T8386] active_anon:7306 inactive_anon:0 isolated_anon:0 [ 182.869220][ T8386] active_file:1425 inactive_file:39880 isolated_file:0 [ 182.869220][ T8386] unevictable:768 dirty:135 writeback:0 [ 182.869220][ T8386] slab_reclaimable:11269 slab_unreclaimable:114148 [ 182.869220][ T8386] mapped:33933 shmem:4212 pagetables:1350 [ 182.869220][ T8386] sec_pagetables:0 bounce:0 [ 182.869220][ T8386] kernel_misc_reclaimable:0 [ 182.869220][ T8386] free:1309379 free_pcp:14199 free_cma:0 [ 182.984488][ T8386] Node 0 active_anon:29032kB inactive_anon:0kB active_file:5700kB inactive_file:159316kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:131696kB dirty:536kB writeback:0kB shmem:15392kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12412kB pagetables:5288kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 183.032027][ T149] wlan1: Trigger new scan to find an IBSS to join [ 183.070293][ T8386] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 183.128591][ T8386] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 183.258651][ T8390] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 183.278290][ T8386] lowmem_reserve[]: 0 2498 2499 2499 2499 [ 183.284117][ T8386] Node 0 DMA32 free:1328264kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19140kB inactive_anon:0kB active_file:5700kB inactive_file:157744kB unevictable:1536kB writepending:532kB present:3129332kB managed:2558316kB mlocked:0kB bounce:0kB free_pcp:44232kB local_pcp:16924kB free_cma:0kB [ 183.352930][ T8386] lowmem_reserve[]: 0 0 1 1 1 [ 183.406898][ T8386] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1572kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 183.456837][ T8386] lowmem_reserve[]: 0 0 0 0 0 [ 183.472227][ T8386] Node 1 Normal free:3901276kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:14788kB local_pcp:6500kB free_cma:0kB [ 183.546394][ T8386] lowmem_reserve[]: 0 0 0 0 0 [ 183.557077][ T8386] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 183.579224][ T8386] Node 0 DMA32: 774*4kB (UM) 362*8kB (UME) 176*16kB (UME) 467*32kB (UME) 485*64kB (UM) 407*128kB (UME) 337*256kB (UME) 295*512kB (UM) 235*1024kB (UME) 7*2048kB (UM) 178*4096kB (UM) = 1328264kB [ 183.628273][ T8406] bond0: (slave 77ÿ): Releasing backup interface [ 183.640595][ T8386] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 183.640737][ T8386] Node 1 Normal: 145*4kB (UME) 41*8kB (UME) 37*16kB (UME) 94*32kB (UME) 35*64kB (UME) 8*128kB (UME) 3*256kB (ME) 3*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 949*4096kB (M) = 3901276kB [ 183.640931][ T8386] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 183.689684][ T8386] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 183.705547][ T8406] bond0: (slave bond_slave_1): Releasing backup interface [ 183.713824][ T8411] netlink: 'syz.2.577': attribute type 10 has an invalid length. [ 183.733379][ T8406] team0: Port device team_slave_0 removed [ 183.745957][ T8406] team0: Port device team_slave_1 removed [ 183.752973][ T8406] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.760962][ T8386] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 183.772062][ T8406] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.780493][ T8386] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 183.789904][ T8386] 42683 total pagecache pages [ 183.794652][ T8386] 0 pages in swap cache [ 183.801007][ T8406] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.808570][ T8386] Free swap = 124996kB [ 183.812731][ T8386] Total swap = 124996kB [ 183.816889][ T8386] 2097051 pages RAM [ 183.821038][ T8406] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.830204][ T8386] 0 pages HighMem/MovableOnly [ 183.835058][ T8386] 425430 pages reserved [ 183.845972][ T8386] 0 pages cma reserved [ 183.850313][ T8410] pimreg: left allmulticast mode [ 183.905295][ T8411] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 183.965782][ T8169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.086510][ T8169] veth0_vlan: entered promiscuous mode [ 184.123980][ T8169] veth1_vlan: entered promiscuous mode [ 184.146274][ T8425] __nla_validate_parse: 7 callbacks suppressed [ 184.146293][ T8425] netlink: 36 bytes leftover after parsing attributes in process `syz.2.584'. [ 184.221059][ T8169] veth0_macvtap: entered promiscuous mode [ 184.252458][ T8169] veth1_macvtap: entered promiscuous mode [ 184.332503][ T8169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.371001][ T8169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.471301][ T149] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.495294][ T149] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.539786][ T149] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.568202][ T149] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.670227][ T51] Bluetooth: hci3: command tx timeout [ 184.791336][ T8452] netlink: 16 bytes leftover after parsing attributes in process `syz.3.589'. [ 184.792698][ T149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.849075][ T149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.033249][ T8456] netlink: 32 bytes leftover after parsing attributes in process `syz.0.592'. [ 185.088721][ T8456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.592'. [ 185.212466][ T8460] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.240866][ T2984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.256595][ T2984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.336824][ T8460] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.470569][ T8460] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.602906][ T8460] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.714484][ T8476] pim6reg: entered allmulticast mode [ 185.748697][ T8476] netlink: 20 bytes leftover after parsing attributes in process `syz.0.595'. [ 185.842841][ T1162] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.940295][ T1162] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.960982][ T1162] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.055902][ T1095] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.162308][ T2984] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.306855][ T2984] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.663357][ T2984] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.721601][ T2984] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.811082][ T2984] bridge_slave_1: left allmulticast mode [ 186.816745][ T2984] bridge_slave_1: left promiscuous mode [ 186.822615][ T2984] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.833573][ T2984] bridge_slave_0: left allmulticast mode [ 186.839524][ T2984] bridge_slave_0: left promiscuous mode [ 186.845286][ T2984] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.131435][ T2984] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.143050][ T2984] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.156928][ T2984] bond0 (unregistering): Released all slaves [ 187.345842][ T2984] hsr_slave_0: left promiscuous mode [ 187.351969][ T2984] hsr_slave_1: left promiscuous mode [ 187.358296][ T2984] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.365885][ T2984] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.376109][ T2984] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.383837][ T2984] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.401870][ T2984] veth1_macvtap: left promiscuous mode [ 187.409930][ T2984] veth0_macvtap: left promiscuous mode [ 187.415509][ T2984] veth1_vlan: left promiscuous mode [ 187.421029][ T2984] veth0_vlan: left promiscuous mode [ 187.891427][ T5859] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 187.907779][ T5859] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 187.916929][ T5859] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 187.925549][ T5859] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 187.945452][ T5859] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 188.115178][ T2984] team0 (unregistering): Port device team_slave_1 removed [ 188.149553][ T2984] team0 (unregistering): Port device team_slave_0 removed [ 188.548457][ T8492] vlan2: entered allmulticast mode [ 188.553766][ T8492] batadv_slave_1: entered allmulticast mode [ 188.638531][ T8512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.603'. [ 188.962874][ T8528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.607'. [ 188.988533][ T8532] netlink: 20 bytes leftover after parsing attributes in process `syz.3.609'. [ 189.105096][ T8539] netlink: 'syz.0.608': attribute type 2 has an invalid length. [ 189.115599][ T8539] netlink: 'syz.0.608': attribute type 1 has an invalid length. [ 189.125792][ T8528] xt_socket: unknown flags 0xd0 [ 189.141657][ T8539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.608'. [ 189.181383][ T8539] netlink: 24 bytes leftover after parsing attributes in process `syz.0.608'. [ 189.486244][ T8507] chnl_net:caif_netlink_parms(): no params data found [ 190.013821][ T8507] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.028964][ T5859] Bluetooth: hci3: command tx timeout [ 190.033780][ T8507] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.046515][ T8507] bridge_slave_0: entered allmulticast mode [ 190.055267][ T8507] bridge_slave_0: entered promiscuous mode [ 190.064595][ T8507] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.075533][ T8507] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.084860][ T8507] bridge_slave_1: entered allmulticast mode [ 190.095089][ T8507] bridge_slave_1: entered promiscuous mode [ 190.106020][ T8572] netlink: 28 bytes leftover after parsing attributes in process `syz.2.615'. [ 190.276014][ T8507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.299141][ T8507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.505520][ T8507] team0: Port device team_slave_0 added [ 190.518339][ T8587] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 190.532542][ T8587] netlink: 12 bytes leftover after parsing attributes in process `syz.2.620'. [ 190.670239][ T8507] team0: Port device team_slave_1 added [ 190.915036][ T8607] netlink: 32 bytes leftover after parsing attributes in process `syz.2.624'. [ 190.947813][ T8603] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.624'. [ 191.025939][ T43] IPVS: starting estimator thread 0... [ 191.028340][ T8507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.043745][ T8507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.072719][ T8507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.091571][ T8607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.624'. [ 191.118493][ T8507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.125933][ T8507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.173455][ T8507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.207721][ T8610] IPVS: using max 32 ests per chain, 76800 per kthread [ 191.436632][ T8626] netlink: 'syz.3.630': attribute type 1 has an invalid length. [ 191.481931][ T8507] hsr_slave_0: entered promiscuous mode [ 191.511029][ T8507] hsr_slave_1: entered promiscuous mode [ 191.532881][ T8507] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 191.541743][ T8507] Cannot create hsr debugfs directory [ 191.660457][ T8636] netlink: 504 bytes leftover after parsing attributes in process `syz.0.632'. [ 192.107680][ T5859] Bluetooth: hci3: command tx timeout [ 192.285617][ T8665] netlink: 4 bytes leftover after parsing attributes in process `syz.4.639'. [ 192.365698][ T8665] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.494566][ T8665] bridge_slave_1 (unregistering): left allmulticast mode [ 192.505032][ T8665] bridge_slave_1 (unregistering): left promiscuous mode [ 192.514217][ T8665] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.615342][ T8675] SET target dimension over the limit! [ 192.972131][ T8507] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 192.982297][ T8507] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 192.995583][ T8507] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 193.007603][ T12] wlan1: Trigger new scan to find an IBSS to join [ 193.048617][ T8507] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 193.219703][ T8507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.305693][ T8507] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.360485][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.367710][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.429721][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.436932][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.447152][ T30] audit: type=1107 audit(1751855372.580:3): pid=8703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='2iæÎnë¹cY^þG@K'Ö.ôoÈÆmBŒ^Øõp*Þ €‹î·T:TÎÆ„wwmüt,"D>_=øÂbH]îX¶__OƒŠ,” >ôÿ€¶J'†FM°÷gbLÕ-q‹ö{ã3šã°½'Œð÷ce®Püãö²åz7¿K_8NªP7¼ÏâÛ5²'¢¶·)\¯ r.ýŸ5hÌ–HÙT”ž °-÷Ï' [ 193.810562][ T8726] netlink: 'syz.3.651': attribute type 13 has an invalid length. [ 193.818533][ T8726] macvtap0: entered promiscuous mode [ 193.858577][ T8726] macvtap0: refused to change device tx_queue_len [ 193.992793][ T8737] netlink: 'syz.4.655': attribute type 11 has an invalid length. [ 194.033826][ T8737] netlink: 224 bytes leftover after parsing attributes in process `syz.4.655'. [ 194.063637][ T8507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.157174][ T8507] veth0_vlan: entered promiscuous mode [ 194.174671][ T8507] veth1_vlan: entered promiscuous mode [ 194.189132][ T5859] Bluetooth: hci3: command tx timeout [ 194.282123][ T8746] veth5: entered promiscuous mode [ 194.289465][ T8507] veth0_macvtap: entered promiscuous mode [ 194.326383][ T8507] veth1_macvtap: entered promiscuous mode [ 194.341188][ T8750] tipc: Started in network mode [ 194.356053][ T8750] tipc: Node identity 5663718c65c8, cluster identity 4711 [ 194.373441][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.379980][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.386476][ T8750] tipc: Enabled bearer , priority 0 [ 194.418794][ T8750] syzkaller0: entered promiscuous mode [ 194.424303][ T8750] syzkaller0: entered allmulticast mode [ 194.436827][ T8507] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.476322][ T8750] tipc: Resetting bearer [ 194.500807][ T8507] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.528325][ T8749] tipc: Resetting bearer [ 194.581924][ T8749] tipc: Disabling bearer [ 194.671842][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.750587][ T149] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.800983][ T8758] netlink: 20 bytes leftover after parsing attributes in process `syz.2.660'. [ 194.830463][ T149] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.861879][ T149] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.888551][ T8775] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20001 [ 195.046909][ T8786] wg2: entered promiscuous mode [ 195.052417][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.067927][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.092093][ T8786] netlink: 20 bytes leftover after parsing attributes in process `syz.4.665'. [ 195.165431][ T2984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.190640][ T2984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.257312][ T8792] netlink: 'syz.3.666': attribute type 1 has an invalid length. [ 195.267247][ T8792] netlink: 228 bytes leftover after parsing attributes in process `syz.3.666'. [ 195.281860][ T8792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.666'. [ 195.295036][ T8792] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20002 [ 195.547215][ T8798] bridge3: entered promiscuous mode [ 195.580510][ T8803] bridge4: entered promiscuous mode [ 195.728183][ T8809] netlink: 72 bytes leftover after parsing attributes in process `syz.4.673'. [ 195.745215][ T8809] netlink: 8 bytes leftover after parsing attributes in process `syz.4.673'. [ 195.958176][ T149] wlan1: Trigger new scan to find an IBSS to join [ 195.974334][ T8826] netlink: 12 bytes leftover after parsing attributes in process `syz.3.679'. [ 196.891115][ T2996] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00 [ 197.345111][ T8823] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 197.444877][ T1162] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.533475][ T1162] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.620196][ T8838] netlink: 44 bytes leftover after parsing attributes in process `syz.0.680'. [ 197.627190][ T8833] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.647977][ T8838] netlink: 43 bytes leftover after parsing attributes in process `syz.0.680'. [ 197.667942][ T8838] netlink: 'syz.0.680': attribute type 6 has an invalid length. [ 197.687776][ T8838] netlink: 'syz.0.680': attribute type 5 has an invalid length. [ 197.695463][ T8838] netlink: 43 bytes leftover after parsing attributes in process `syz.0.680'. [ 198.163668][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 198.176787][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 198.209781][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 198.218711][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 198.228138][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 198.307078][ T1162] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.440922][ T1162] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.562775][ T8887] netlink: 'syz.4.689': attribute type 1 has an invalid length. [ 198.933029][ T1162] bridge_slave_1: left allmulticast mode [ 198.941932][ T1162] bridge_slave_1: left promiscuous mode [ 198.949346][ T1162] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.966000][ T1162] bridge_slave_0: left allmulticast mode [ 198.978886][ T1162] bridge_slave_0: left promiscuous mode [ 198.986143][ T1162] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.479130][ T1162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.492852][ T1162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.503333][ T1162] bond0 (unregistering): Released all slaves [ 199.714226][ T8865] chnl_net:caif_netlink_parms(): no params data found [ 199.920951][ T8931] net_ratelimit: 56 callbacks suppressed [ 199.920968][ T8931] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 200.081873][ T8941] hsr0: entered promiscuous mode [ 200.090965][ T8941] hsr0: entered allmulticast mode [ 200.106918][ T8945] netlink: 'syz.2.706': attribute type 4 has an invalid length. [ 200.118019][ T8941] hsr_slave_0: entered allmulticast mode [ 200.141918][ T8945] netlink: 'syz.2.706': attribute type 2 has an invalid length. [ 200.149821][ T8941] hsr_slave_1: entered allmulticast mode [ 200.229608][ T8945] __nla_validate_parse: 5 callbacks suppressed [ 200.229629][ T8945] netlink: 16 bytes leftover after parsing attributes in process `syz.2.706'. [ 200.261124][ T1162] hsr_slave_0: left promiscuous mode [ 200.267748][ T5168] Bluetooth: hci3: command tx timeout [ 200.276796][ T1162] hsr_slave_1: left promiscuous mode [ 200.286620][ T8956] netlink: 'syz.4.710': attribute type 3 has an invalid length. [ 200.296462][ T1162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.305456][ T1162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.313818][ T8956] netlink: 8 bytes leftover after parsing attributes in process `syz.4.710'. [ 200.324232][ T1162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.332197][ T1162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.368648][ T1162] veth1_macvtap: left promiscuous mode [ 200.374391][ T1162] veth0_macvtap: left promiscuous mode [ 200.380227][ T1162] veth1_vlan: left promiscuous mode [ 200.385735][ T1162] veth0_vlan: left promiscuous mode [ 200.526287][ T8964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.964696][ T1162] team0 (unregistering): Port device team_slave_1 removed [ 201.010186][ T1162] team0 (unregistering): Port device team_slave_0 removed [ 201.406209][ T8960] macsec2: entered promiscuous mode [ 201.417158][ T8960] macsec2: entered allmulticast mode [ 201.423186][ T8963] netlink: 32 bytes leftover after parsing attributes in process `syz.4.711'. [ 201.523743][ T8865] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.535363][ T8865] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.547126][ T8865] bridge_slave_0: entered allmulticast mode [ 201.555563][ T8865] bridge_slave_0: entered promiscuous mode [ 201.560521][ T5168] Bluetooth: hci1: command 0x0406 tx timeout [ 201.561745][ T5866] Bluetooth: hci2: command 0x0406 tx timeout [ 201.587264][ T8865] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.620708][ T8865] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.638123][ T8865] bridge_slave_1: entered allmulticast mode [ 201.651225][ T8865] bridge_slave_1: entered promiscuous mode [ 201.658169][ T8978] netlink: 'syz.3.714': attribute type 32 has an invalid length. [ 201.671241][ T8973] netlink: 'syz.0.713': attribute type 3 has an invalid length. [ 201.784155][ T8976] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.841251][ T8981] geneve2: entered promiscuous mode [ 201.857312][ T8981] netlink: 4 bytes leftover after parsing attributes in process `syz.3.715'. [ 201.963560][ T8976] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.009378][ T8865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.033092][ T8865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.080044][ T8989] netlink: 104 bytes leftover after parsing attributes in process `syz.0.719'. [ 202.098920][ T8989] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 202.128546][ T8993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.719'. [ 202.176118][ T8976] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.321843][ T8976] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.344470][ T8865] team0: Port device team_slave_0 added [ 202.358815][ T5859] Bluetooth: hci3: command tx timeout [ 202.379705][ T9003] netlink: 4388 bytes leftover after parsing attributes in process `syz.3.721'. [ 202.403732][ T9004] netlink: 4388 bytes leftover after parsing attributes in process `syz.3.721'. [ 202.433052][ T9006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.722'. [ 202.435511][ T8865] team0: Port device team_slave_1 added [ 202.459616][ T9007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.722'. [ 202.513494][ T9004] C: renamed from team_slave_0 [ 202.521800][ T9004] netlink: 'syz.3.721': attribute type 1 has an invalid length. [ 202.530423][ T9004] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 202.546076][ T9003] netlink: 'syz.3.721': attribute type 1 has an invalid length. [ 202.554179][ T9003] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 202.635292][ T8865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.653189][ T8865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.694121][ T8865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.710319][ T8865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.717401][ T8865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.743633][ T8865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.897043][ T2984] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.985379][ T2984] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.106800][ T8865] hsr_slave_0: entered promiscuous mode [ 203.124126][ T8865] hsr_slave_1: entered promiscuous mode [ 203.138599][ T8865] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.146358][ T8865] Cannot create hsr debugfs directory [ 203.155883][ T2996] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.165032][ T9034] netlink: 'syz.3.730': attribute type 1 has an invalid length. [ 203.179162][ T9034] netlink: 'syz.3.730': attribute type 1 has an invalid length. [ 203.231896][ T2996] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.383510][ T9045] netlink: 'syz.0.732': attribute type 3 has an invalid length. [ 203.509560][ T9048] block nbd3: not configured, cannot reconfigure [ 203.807838][ T9055] vlan2: entered allmulticast mode [ 203.813012][ T9055] veth1: entered allmulticast mode [ 204.407801][ T9079] netlink: 'syz.2.745': attribute type 1 has an invalid length. [ 204.438025][ T5859] Bluetooth: hci3: command tx timeout [ 204.479458][ T9079] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 204.609809][ T8865] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 204.714181][ T8865] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 204.764343][ T8865] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 204.803730][ T9099] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 204.833218][ T9093] netlink: 'syz.3.747': attribute type 16 has an invalid length. [ 204.995417][ T8865] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 205.073832][ T9093] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 205.460024][ T8865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.520653][ T9132] __nla_validate_parse: 20 callbacks suppressed [ 205.520670][ T9132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.755'. [ 205.566473][ T9130] bridge_slave_0: left allmulticast mode [ 205.605696][ T9130] bridge_slave_0: left promiscuous mode [ 205.633008][ T9133] validate_nla: 1 callbacks suppressed [ 205.633029][ T9133] netlink: 'syz.4.756': attribute type 30 has an invalid length. [ 205.661505][ T9130] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.693239][ T9130] bond0: (slave bond_slave_0): Releasing backup interface [ 205.711731][ T9130] bond0: (slave bond_slave_1): Releasing backup interface [ 205.721110][ T9137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.758'. [ 205.732896][ T9137] netlink: 'syz.3.758': attribute type 2 has an invalid length. [ 205.752490][ T9130] team0: Port device team_slave_0 removed [ 205.780879][ T9130] team0: Port device team_slave_1 removed [ 205.795962][ T9130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.806146][ T9130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.816325][ T9130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.829482][ T9130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.840101][ T9141] netlink: 'syz.3.760': attribute type 1 has an invalid length. [ 205.852834][ T9130] bond0: (slave wlan1): Releasing backup interface [ 205.867151][ T9130] bond1: (slave vcan1): Releasing backup interface [ 205.886497][ T9130] vcan1: left promiscuous mode [ 205.896015][ T9130] bond2: (slave gretap1): Releasing active interface [ 205.913189][ T8865] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.174497][ T9141] 8021q: adding VLAN 0 to HW filter on device bond2 [ 206.262751][ T9150] netlink: 165 bytes leftover after parsing attributes in process `syz.0.761'. [ 206.275067][ T9147] bond2: (slave gretap2): making interface the new active one [ 206.292498][ T9147] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 206.302374][ T2996] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.314444][ T9140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.324406][ T2996] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.334122][ T2996] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.365355][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.372577][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.394690][ T9150] IPv6: sit1: Disabled Multicast RS [ 206.405393][ T9150] sit1: entered allmulticast mode [ 206.444813][ T2996] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.481817][ T2996] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.489064][ T2996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.508222][ T5859] Bluetooth: hci3: command tx timeout [ 206.640609][ T9162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.765'. [ 206.649629][ T9162] netlink: 16 bytes leftover after parsing attributes in process `syz.2.765'. [ 206.663018][ T9162] netlink: 'syz.2.765': attribute type 49 has an invalid length. [ 206.671578][ T9162] netlink: 56 bytes leftover after parsing attributes in process `syz.2.765'. [ 206.993939][ T9179] netlink: 'syz.3.768': attribute type 11 has an invalid length. [ 207.042330][ T8865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.128351][ T8865] veth0_vlan: entered promiscuous mode [ 207.571024][ T8865] veth1_vlan: entered promiscuous mode [ 207.650418][ T8865] veth0_macvtap: entered promiscuous mode [ 207.672739][ T8865] veth1_macvtap: entered promiscuous mode [ 207.773259][ T9192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.773'. [ 207.775802][ T8865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.811718][ T9192] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 207.849499][ T8865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.859666][ T9193]  (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 207.872134][ T9192] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.918199][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.940499][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.968324][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.024084][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.175247][ T9203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.777'. [ 208.210224][ T9203] ipvlan1: entered promiscuous mode [ 208.219550][ T9203] ipvlan1: left promiscuous mode [ 208.245993][ T2996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.277777][ T2996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.324470][ T2984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.333332][ T2984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.396989][ T9215] x_tables: duplicate underflow at hook 4 [ 208.686837][ T9230] netlink: 32 bytes leftover after parsing attributes in process `syz.2.784'. [ 208.774210][ T9236] netlink: 16 bytes leftover after parsing attributes in process `syz.4.787'. [ 208.992254][ T2996] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.130365][ T2996] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.353082][ T2996] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.612401][ T2996] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.704806][ T2996] bridge_slave_1: left allmulticast mode [ 209.717439][ T2996] bridge_slave_1: left promiscuous mode [ 209.728235][ T2996] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.740369][ T2996] bridge_slave_0: left allmulticast mode [ 209.746045][ T2996] bridge_slave_0: left promiscuous mode [ 209.751908][ T2996] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.046900][ T2996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.058193][ T2996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.070019][ T2996] bond0 (unregistering): Released all slaves [ 210.311910][ T2996] hsr_slave_0: left promiscuous mode [ 210.319716][ T2996] hsr_slave_1: left promiscuous mode [ 210.325948][ T2996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.333787][ T2996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.341989][ T2996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.351992][ T2996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.372595][ T2996] veth1_macvtap: left promiscuous mode [ 210.378259][ T2996] veth0_macvtap: left promiscuous mode [ 210.383989][ T2996] veth1_vlan: left promiscuous mode [ 210.392420][ T2996] veth0_vlan: left promiscuous mode [ 210.905919][ T9266] netlink: 4 bytes leftover after parsing attributes in process `syz.4.792'. [ 211.024792][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 211.034664][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 211.043952][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 211.058921][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 211.073559][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 211.267820][ T2996] team0 (unregistering): Port device team_slave_1 removed [ 211.305751][ T2996] team0 (unregistering): Port device team_slave_0 removed [ 211.813111][ T9272] netlink: 104 bytes leftover after parsing attributes in process `syz.2.793'. [ 211.930665][ T9275] netlink: 12 bytes leftover after parsing attributes in process `syz.0.796'. [ 212.002216][ T9280] bridge0: port 1(erspan0) entered blocking state [ 212.013037][ T9280] bridge0: port 1(erspan0) entered disabled state [ 212.019870][ T9280] erspan0: entered allmulticast mode [ 212.037421][ T9280] erspan0: entered promiscuous mode [ 212.045659][ T9280] bridge0: port 1(erspan0) entered blocking state [ 212.052322][ T9280] bridge0: port 1(erspan0) entered forwarding state [ 212.116746][ T9277] unknown channel width for channel at 909000KHz? [ 212.117311][ T9289] erspan0: left allmulticast mode [ 212.166806][ T9289] erspan0: left promiscuous mode [ 212.194939][ T9289] bridge0: port 1(erspan0) entered disabled state [ 212.262256][ T9280] netlink: 20 bytes leftover after parsing attributes in process `syz.2.797'. [ 212.336077][ T9293] netlink: 24 bytes leftover after parsing attributes in process `syz.3.800'. [ 212.357670][ T9298] netlink: 28 bytes leftover after parsing attributes in process `syz.0.801'. [ 212.386396][ T9293] openvswitch: netlink: Flow key attr not present in new flow. [ 212.524645][ T9304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.803'. [ 212.562751][ T9269] chnl_net:caif_netlink_parms(): no params data found [ 212.738504][ T9318] xt_CONNSECMARK: invalid mode: 254 [ 212.884626][ T9318] bond0: (slave wlan1): Releasing backup interface [ 212.975669][ T9269] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.998305][ T9269] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.024847][ T9269] bridge_slave_0: entered allmulticast mode [ 213.039633][ T9269] bridge_slave_0: entered promiscuous mode [ 213.069277][ T9269] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.076823][ T9269] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.108888][ T9329] netlink: 24 bytes leftover after parsing attributes in process `syz.2.809'. [ 213.149212][ T51] Bluetooth: hci3: command tx timeout [ 213.194978][ T9269] bridge_slave_1: entered allmulticast mode [ 213.206037][ T9269] bridge_slave_1: entered promiscuous mode [ 213.319181][ T9269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.347439][ T9269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.461524][ T9269] team0: Port device team_slave_0 added [ 213.486915][ T9269] team0: Port device team_slave_1 added [ 213.499174][ T9340] netlink: 12 bytes leftover after parsing attributes in process `syz.2.813'. [ 213.576221][ T9345] netlink: 4 bytes leftover after parsing attributes in process `syz.0.815'. [ 213.595603][ T9349] netlink: 'syz.4.814': attribute type 18 has an invalid length. [ 213.625092][ T9269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.658207][ T9269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.710728][ T9269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.775364][ T9269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.794105][ T9269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.882339][ T9269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.093365][ T9269] hsr_slave_0: entered promiscuous mode [ 214.120337][ T9269] hsr_slave_1: entered promiscuous mode [ 214.139552][ T9269] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 214.147157][ T9269] Cannot create hsr debugfs directory [ 214.596095][ T9403] netlink: 'syz.2.830': attribute type 10 has an invalid length. [ 214.615157][ T9400] netlink: 'syz.2.830': attribute type 10 has an invalid length. [ 214.765865][ T9414] Illegal XDP return value 2887472423 on prog (id 439) dev N/A, expect packet loss! [ 215.220282][ T9269] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 215.227595][ T51] Bluetooth: hci3: command tx timeout [ 215.737187][ T9269] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 215.772234][ T9269] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 215.902754][ T9269] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 216.011879][ T9455] netlink: 'syz.0.843': attribute type 9 has an invalid length. [ 216.046702][ T9455] netlink: 'syz.0.843': attribute type 6 has an invalid length. [ 216.776861][ T9498] __nla_validate_parse: 10 callbacks suppressed [ 216.776874][ T9498] netlink: 32 bytes leftover after parsing attributes in process `syz.0.848'. [ 216.818979][ T9498] netlink: 32 bytes leftover after parsing attributes in process `syz.0.848'. [ 216.876374][ T9269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.914612][ T9269] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.941138][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.948486][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.966057][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.973333][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.325214][ T51] Bluetooth: hci3: command tx timeout [ 217.391558][ T9269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.526969][ T9269] veth0_vlan: entered promiscuous mode [ 217.556058][ T9269] veth1_vlan: entered promiscuous mode [ 217.660829][ T9525] netlink: 36 bytes leftover after parsing attributes in process `syz.4.855'. [ 217.672396][ T9269] veth0_macvtap: entered promiscuous mode [ 217.989920][ T9269] veth1_macvtap: entered promiscuous mode [ 218.013013][ T9530] 8021q: VLANs not supported on ip_vti0 [ 218.133356][ T9269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.180239][ T9269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.226865][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.257761][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.283289][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.311613][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.507703][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.536147][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.623560][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.647823][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.710967][ T9550] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.735152][ T9552] netlink: 28 bytes leftover after parsing attributes in process `syz.4.865'. [ 218.833157][ T9552] vlan0: entered promiscuous mode [ 218.865527][ T9550] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.987063][ T9550] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.156043][ T9550] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.260270][ T9578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.871'. [ 219.276071][ T149] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.402455][ T149] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.463466][ T1162] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.491627][ T1162] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.522661][ T1162] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.541783][ T1162] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.775986][ T149] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.022575][ T149] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.101426][ T149] bridge_slave_1: left allmulticast mode [ 220.107289][ T149] bridge_slave_1: left promiscuous mode [ 220.113056][ T149] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.123443][ T149] bridge_slave_0: left allmulticast mode [ 220.129319][ T149] bridge_slave_0: left promiscuous mode [ 220.135096][ T149] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.420079][ T149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.434278][ T149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.444280][ T149] bond0 (unregistering): Released all slaves [ 220.633513][ T149] hsr_slave_0: left promiscuous mode [ 220.640476][ T149] hsr_slave_1: left promiscuous mode [ 220.646301][ T149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.654059][ T149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.662553][ T149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.670647][ T149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.692342][ T149] veth1_macvtap: left promiscuous mode [ 220.697942][ T149] veth0_macvtap: left promiscuous mode [ 220.703484][ T149] veth1_vlan: left promiscuous mode [ 220.709112][ T149] veth0_vlan: left promiscuous mode [ 221.009481][ T9589] netlink: 24 bytes leftover after parsing attributes in process `syz.3.875'. [ 221.321495][ T9606] netlink: 164 bytes leftover after parsing attributes in process `syz.2.879'. [ 221.343395][ T9606] netlink: 164 bytes leftover after parsing attributes in process `syz.2.879'. [ 221.355709][ T9606] netlink: 164 bytes leftover after parsing attributes in process `syz.2.879'. [ 221.369538][ T9606] netlink: 164 bytes leftover after parsing attributes in process `syz.2.879'. [ 221.425507][ T5859] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 221.438476][ T5859] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 221.456059][ T5859] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 221.484732][ T5859] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 221.492860][ T5859] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 221.536318][ T149] team0 (unregistering): Port device team_slave_1 removed [ 221.593802][ T149] team0 (unregistering): Port device team_slave_0 removed [ 222.029967][ T9616] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.120817][ T9616] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.191086][ T9627] __nla_validate_parse: 62 callbacks suppressed [ 222.191105][ T9627] netlink: 788 bytes leftover after parsing attributes in process `syz.0.884'. [ 222.228986][ T9622] bridge4: entered promiscuous mode [ 222.330002][ T9627] netlink: 32 bytes leftover after parsing attributes in process `syz.0.884'. [ 222.356335][ T9616] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.462481][ T9616] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.486015][ T9635] netlink: 12 bytes leftover after parsing attributes in process `syz.3.887'. [ 222.530984][ T9639] netlink: 12 bytes leftover after parsing attributes in process `syz.0.889'. [ 222.855319][ T9608] chnl_net:caif_netlink_parms(): no params data found [ 222.980891][ T9656] netlink: 'syz.3.894': attribute type 39 has an invalid length. [ 223.106477][ T9608] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.116146][ T9608] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.123864][ T9608] bridge_slave_0: entered allmulticast mode [ 223.158837][ T9608] bridge_slave_0: entered promiscuous mode [ 223.169238][ T9608] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.176788][ T9608] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.176803][ T9665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.895'. [ 223.188016][ T9608] bridge_slave_1: entered allmulticast mode [ 223.218253][ T9608] bridge_slave_1: entered promiscuous mode [ 223.243721][ T9667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.896'. [ 223.339449][ T1162] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.417307][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.440716][ T9608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.470319][ T2996] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.485491][ T9608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.547993][ T51] Bluetooth: hci3: command tx timeout [ 223.575649][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.635898][ T9675] netlink: 12 bytes leftover after parsing attributes in process `syz.3.899'. [ 223.665424][ T9675] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 223.705847][ T9675] tipc: Enabled bearer , priority 10 [ 223.729628][ T9608] team0: Port device team_slave_0 added [ 223.746548][ T9608] team0: Port device team_slave_1 added [ 223.780995][ T9690] netlink: 248 bytes leftover after parsing attributes in process `syz.0.902'. [ 223.904627][ T9608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.929002][ T9608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.966415][ T9608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.999183][ T9608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.008038][ T9608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.058829][ T9608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.232824][ T9608] hsr_slave_0: entered promiscuous mode [ 224.240006][ T9608] hsr_slave_1: entered promiscuous mode [ 224.258377][ T9608] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 224.266078][ T9608] Cannot create hsr debugfs directory [ 224.511760][ T9721] netlink: 8 bytes leftover after parsing attributes in process `syz.4.913'. [ 224.837959][ T5913] tipc: Node number set to 866873740 [ 225.486236][ T1162] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.517657][ T1162] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.611647][ T1162] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.640026][ T51] Bluetooth: hci3: command tx timeout [ 225.666377][ T1162] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.843548][ T9758] netlink: 44 bytes leftover after parsing attributes in process `syz.2.921'. [ 225.874213][ T9756] netlink: 'syz.4.920': attribute type 15 has an invalid length. [ 225.887884][ T9758] netlink: 'syz.2.921': attribute type 6 has an invalid length. [ 225.895570][ T9758] netlink: 'syz.2.921': attribute type 5 has an invalid length. [ 225.910235][ T9608] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 225.941253][ T9608] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 225.968414][ T9608] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 226.001809][ T9608] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 226.216477][ T9784] netlink: 'syz.0.925': attribute type 3 has an invalid length. [ 226.321542][ T9608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.371249][ T9608] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.402990][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.410514][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.433616][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.440914][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.009713][ T5934] IPVS: starting estimator thread 0... [ 227.041622][ T9819] gtp1: entered promiscuous mode [ 227.055954][ T9819] gtp1: entered allmulticast mode [ 227.117963][ T9820] IPVS: using max 27 ests per chain, 64800 per kthread [ 227.152341][ T9824] pim6reg1: entered promiscuous mode [ 227.165047][ T9824] pim6reg1: entered allmulticast mode [ 227.215444][ T9608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.226247][ T9824] netlink: 'syz.2.934': attribute type 9 has an invalid length. [ 227.386953][ T9608] veth0_vlan: entered promiscuous mode [ 227.479825][ T9608] veth1_vlan: entered promiscuous mode [ 227.524240][ T9608] veth0_macvtap: entered promiscuous mode [ 227.545630][ T9608] veth1_macvtap: entered promiscuous mode [ 227.575585][ T9838] syzkaller1: entered promiscuous mode [ 227.586680][ T9838] syzkaller1: entered allmulticast mode [ 227.670653][ T9608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.685046][ T9608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.707825][ T51] Bluetooth: hci3: command tx timeout [ 227.782862][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.811074][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.862636][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.868572][ T9850] __nla_validate_parse: 4 callbacks suppressed [ 227.868590][ T9850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.944'. [ 227.889288][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.065835][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.086602][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.141817][ T2996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.154560][ T2996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.495084][ T51] Bluetooth: hci4: link tx timeout [ 228.500327][ T9877] netlink: 'syz.2.955': attribute type 13 has an invalid length. [ 228.503099][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 228.520910][ T5859] Bluetooth: hci4: link tx timeout [ 228.526153][ T5859] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 228.870791][ T9890] geneve2: entered promiscuous mode [ 229.097142][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.112353][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.140323][ T9900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.169347][ T9907] netlink: 4 bytes leftover after parsing attributes in process `syz.4.963'. [ 229.180701][ T9907] sctp: [Deprecated]: syz.4.963 (pid 9907) Use of int in max_burst socket option. [ 229.180701][ T9907] Use struct sctp_assoc_value instead [ 229.200035][ T9907] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 229.394110][ T2996] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.986521][ T2996] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.196634][ T2996] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.252929][ T2996] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.327232][ T2996] bridge_slave_1: left allmulticast mode [ 230.332978][ T2996] bridge_slave_1: left promiscuous mode [ 230.341811][ T2996] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.351889][ T2996] bridge_slave_0: left allmulticast mode [ 230.357853][ T2996] bridge_slave_0: left promiscuous mode [ 230.363624][ T2996] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.587768][ T5859] Bluetooth: hci4: command 0x0406 tx timeout [ 230.687700][ T2996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.699605][ T2996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.709804][ T2996] bond0 (unregistering): Released all slaves [ 230.965225][ T2996] hsr_slave_0: left promiscuous mode [ 230.971386][ T2996] hsr_slave_1: left promiscuous mode [ 230.977214][ T2996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.985959][ T2996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.995001][ T2996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.004059][ T2996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.023209][ T2996] veth1_macvtap: left promiscuous mode [ 231.029095][ T2996] veth0_macvtap: left promiscuous mode [ 231.034659][ T2996] veth1_vlan: left promiscuous mode [ 231.040040][ T2996] veth0_vlan: left promiscuous mode [ 231.157112][ T9926] netlink: 16 bytes leftover after parsing attributes in process `syz.2.966'. [ 231.574651][ T9945] Cannot find add_set index 2 as target [ 231.735401][ T5859] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 231.752013][ T5859] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 231.763900][ T5859] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 231.773604][ T5859] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 231.785466][ T5859] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 232.307099][ T2996] team0 (unregistering): Port device team_slave_1 removed [ 232.361895][ T2996] team0 (unregistering): Port device team_slave_0 removed [ 232.770165][ T9955] nbd0: detected capacity change from 0 to 63 [ 232.806201][ T5859] block nbd0: Receive control failed (result -32) [ 233.004962][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 233.036336][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 233.044346][ T5854] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 233.231883][ T5947] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 233.328873][ T5947] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 233.433570][ T9983] netlink: 16 bytes leftover after parsing attributes in process `syz.4.984'. [ 233.576150][ T2996] bridge_slave_1: left allmulticast mode [ 233.596787][ T2996] bridge_slave_1: left promiscuous mode [ 233.617880][ T2996] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.642394][ T2996] bridge_slave_0: left allmulticast mode [ 233.653845][ T2996] bridge_slave_0: left promiscuous mode [ 233.662161][ T2996] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.731197][ T9997] netlink: 16 bytes leftover after parsing attributes in process `syz.3.989'. [ 233.739445][ T9998] netlink: 24 bytes leftover after parsing attributes in process `syz.4.988'. [ 233.849678][T10002] netlink: 12 bytes leftover after parsing attributes in process `syz.3.989'. [ 233.875423][ T5859] Bluetooth: hci3: command tx timeout [ 234.121450][ T2996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.132621][ T2996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.144371][ T2996] bond0 (unregistering): Released all slaves [ 234.297696][ T2996] : left promiscuous mode [ 234.405207][T10013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.992'. [ 234.425257][T10013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.992'. [ 234.465771][T10016] netlink: 32 bytes leftover after parsing attributes in process `syz.0.992'. [ 234.591001][ T9948] chnl_net:caif_netlink_parms(): no params data found [ 234.639040][T10024] netlink: 'syz.4.995': attribute type 1 has an invalid length. [ 234.646809][T10024] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.995'. [ 234.884644][ T2996] hsr_slave_0: left promiscuous mode [ 234.891155][ T2996] hsr_slave_1: left promiscuous mode [ 234.897092][ T2996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.904832][ T2996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.916574][ T2996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.924189][ T2996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.942774][ T2996] veth1_macvtap: left promiscuous mode [ 234.948595][ T2996] veth0_macvtap: left promiscuous mode [ 234.954261][ T2996] veth1_vlan: left promiscuous mode [ 234.959975][ T2996] veth0_vlan: left promiscuous mode [ 235.392832][ T2996] team0 (unregistering): Port device team_slave_1 removed [ 235.432563][ T2996] team0 (unregistering): Port device team_slave_0 removed [ 235.794397][T10038] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 235.955532][ T5859] Bluetooth: hci3: command tx timeout [ 236.022497][ T9948] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.038891][ T9948] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.056590][ T9948] bridge_slave_0: entered allmulticast mode [ 236.067288][T10056] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.1003'. [ 236.078845][ T9948] bridge_slave_0: entered promiscuous mode [ 236.106038][ T9948] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.152166][ T9948] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.169975][ T9948] bridge_slave_1: entered allmulticast mode [ 236.197304][ T9948] bridge_slave_1: entered promiscuous mode [ 236.267176][T10061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1005'. [ 236.283299][T10064] pimreg3: entered allmulticast mode [ 236.300109][T10062] pimreg3: left allmulticast mode [ 236.371530][ T9948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.384185][ T9948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.523065][T10078] netlink: 'syz.4.1011': attribute type 3 has an invalid length. [ 236.549264][ T9948] team0: Port device team_slave_0 added [ 236.606885][ T9948] team0: Port device team_slave_1 added [ 236.675964][T10082] netlink: 'syz.3.1013': attribute type 18 has an invalid length. [ 236.713293][ T9948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.720593][ T9948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.734399][T10087] netlink: 'syz.3.1013': attribute type 18 has an invalid length. [ 236.747229][ T9948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.803617][ T9948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.817588][ T9948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.863192][T10095] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.872819][ T9948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.056455][ T9948] hsr_slave_0: entered promiscuous mode [ 237.063922][ T9948] hsr_slave_1: entered promiscuous mode [ 237.307716][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 237.672839][T10127] Bluetooth: MGMT ver 1.23 [ 237.986754][T10138] bond2: entered promiscuous mode [ 238.000141][T10138] 8021q: adding VLAN 0 to HW filter on device bond2 [ 238.028013][ T5859] Bluetooth: hci3: command tx timeout [ 238.159379][ T9948] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 238.211547][ T9948] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 238.226511][ T9948] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 238.241161][ T9948] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 238.415424][ T9948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.466773][ T9948] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.506168][ T149] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.513482][ T149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.564049][ T149] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.571284][ T149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.611615][T10157] __nla_validate_parse: 9 callbacks suppressed [ 238.611636][T10157] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1035'. [ 238.683591][T10159] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1036'. [ 238.690917][T10157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1035'. [ 238.931322][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802828f800: rx timeout, send abort [ 239.285241][T10180] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1040'. [ 239.532917][ T9948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.748377][ T9948] veth0_vlan: entered promiscuous mode [ 239.777069][ T9948] veth1_vlan: entered promiscuous mode [ 239.878811][ T9948] veth0_macvtap: entered promiscuous mode [ 239.900314][ T9948] veth1_macvtap: entered promiscuous mode [ 239.928904][ T9948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.951138][ T9948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.984528][T10202] netlink: 'syz.2.1047': attribute type 23 has an invalid length. [ 239.998873][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.018814][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.064000][T10204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1047'. [ 240.092810][T10204] netlink: 15 bytes leftover after parsing attributes in process `syz.2.1047'. [ 240.103552][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.113013][ T5859] Bluetooth: hci3: command tx timeout [ 240.119527][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.170727][T10207] netlink: 'syz.3.1048': attribute type 12 has an invalid length. [ 240.185498][T10207] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.1048'. [ 240.231076][T10209] pimreg: entered allmulticast mode [ 240.257144][T10209] netlink: 'syz.0.1049': attribute type 2 has an invalid length. [ 240.300849][T10209] k›*·]‘: entered promiscuous mode [ 240.452254][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.463648][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.507761][ T2996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.529882][ T2996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.634140][T10229] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1054'. [ 240.636907][T10230] netlink: 'syz.0.1055': attribute type 1 has an invalid length. [ 240.789197][T10242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1057'. [ 240.819257][T10242] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 240.989818][T10253] netlink: 'syz.4.1061': attribute type 1 has an invalid length. [ 241.049681][T10253] 8021q: adding VLAN 0 to HW filter on device bond6 [ 241.103022][T10252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.270452][T10267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1064'. [ 241.512289][T10279] veth0_to_bridge: entered promiscuous mode [ 241.526405][T10278] veth0_to_bridge: left promiscuous mode [ 241.673487][T10288] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 242.073129][ T5913] IPVS: starting estimator thread 0... [ 242.124509][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.151097][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.179484][T10316] IPVS: using max 29 ests per chain, 69600 per kthread [ 242.196996][T10314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.587876][ T51] Bluetooth: hci3: command 0x0405 tx timeout [ 242.622683][T10338] openvswitch: netlink: Port -1156311892 exceeds max allowable 65535 [ 242.731028][T10312] xt_CT: No such helper "snmp" [ 243.412561][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.497858][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.566411][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.634560][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.720500][ T36] bridge_slave_1: left allmulticast mode [ 243.726295][ T36] bridge_slave_1: left promiscuous mode [ 243.732520][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.741614][ T36] bridge_slave_0: left allmulticast mode [ 243.747252][ T36] bridge_slave_0: left promiscuous mode [ 243.753478][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.062361][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.073262][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.084489][ T36] bond0 (unregistering): Released all slaves [ 244.313339][ T36] hsr_slave_0: left promiscuous mode [ 244.320357][ T36] hsr_slave_1: left promiscuous mode [ 244.326158][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.333756][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.341751][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.349377][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.369995][ T36] veth1_macvtap: left promiscuous mode [ 244.375548][ T36] veth0_macvtap: left promiscuous mode [ 244.381486][ T36] veth1_vlan: left promiscuous mode [ 244.386752][ T36] veth0_vlan: left promiscuous mode [ 244.756031][ T36] team0 (unregistering): Port device team_slave_1 removed [ 244.794131][ T36] team0 (unregistering): Port device team_slave_0 removed [ 245.164768][T10375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.449007][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 245.459223][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 245.468571][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 245.493197][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 245.502241][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 245.707242][T10369] vlan0: left promiscuous mode [ 245.724057][T10369] macvtap0: left promiscuous mode [ 245.770262][T10369] mac80211_hwsim hwsim14 wlan1: left allmulticast mode [ 245.780749][T10369] erspan0: left allmulticast mode [ 245.786892][T10369] macvtap1: left promiscuous mode [ 245.797305][T10369] macvtap1: left allmulticast mode [ 245.806791][T10369] geneve2: left promiscuous mode [ 245.816159][T10369] vlan2: left allmulticast mode [ 245.821242][T10369] veth1: left allmulticast mode [ 245.837139][T10369] bridge4: left promiscuous mode [ 245.856738][T10369] gtp1: left promiscuous mode [ 245.867505][T10369] gtp1: left allmulticast mode [ 245.957135][T10376] __nla_validate_parse: 4 callbacks suppressed [ 245.957149][T10376] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1091'. [ 245.976991][ T9492] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.987300][ T9492] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.007786][ T9492] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.016188][ T9492] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.038751][ T9492] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.077633][ T9492] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.097650][ T9492] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.122091][ T9492] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.187729][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 246.511129][T10416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1100'. [ 246.820570][T10381] chnl_net:caif_netlink_parms(): no params data found [ 247.086510][T10449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1107'. [ 247.548014][ T51] Bluetooth: hci3: command tx timeout [ 248.329936][T10441] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1107'. [ 248.405771][T10459] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1109'. [ 248.590816][T10449] ieee80211 phy54: Failed to add default virtual iface [ 248.599808][T10381] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.623493][T10381] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.641098][T10381] bridge_slave_0: entered allmulticast mode [ 248.660294][T10381] bridge_slave_0: entered promiscuous mode [ 248.680853][T10381] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.693122][T10381] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.716469][T10381] bridge_slave_1: entered allmulticast mode [ 248.728130][T10381] bridge_slave_1: entered promiscuous mode [ 248.920883][T10381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.936893][T10381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.040297][T10381] team0: Port device team_slave_0 added [ 249.049549][T10381] team0: Port device team_slave_1 added [ 249.115261][T10381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.123076][T10381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.181442][T10494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1118'. [ 249.207553][T10381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.234631][T10381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.253110][T10381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.285044][T10381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.301540][T10500] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1120'. [ 249.356352][T10502] ieee802154 phy0 wpan0: encryption failed: -22 [ 249.366883][T10494] team0: Port device team_slave_1 removed [ 249.477402][T10381] hsr_slave_0: entered promiscuous mode [ 249.505531][T10381] hsr_slave_1: entered promiscuous mode [ 249.627808][ T51] Bluetooth: hci3: command tx timeout [ 249.645154][T10510] netlink: 'syz.0.1121': attribute type 12 has an invalid length. [ 249.664155][T10510] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.1121'. [ 250.253629][T10381] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 250.275047][T10381] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 250.296772][T10533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1131'. [ 250.307385][T10381] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 250.339899][T10381] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 250.346610][T10535] netlink: 'syz.3.1132': attribute type 3 has an invalid length. [ 250.643319][T10381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.666639][T10381] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.702731][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.709979][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.752141][T10559] 8021q: VLANs not supported on ip6tnl0 [ 250.796775][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.803997][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.031447][T10580] netlink: 'syz.0.1142': attribute type 1 has an invalid length. [ 251.113910][T10580] bond0: entered promiscuous mode [ 251.119172][T10580] bond0: entered allmulticast mode [ 251.162417][T10589] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 251.365362][T10601] syzkaller1: entered promiscuous mode [ 251.373943][T10601] syzkaller1: entered allmulticast mode [ 251.455093][T10381] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.540263][T10381] veth0_vlan: entered promiscuous mode [ 251.554807][T10381] veth1_vlan: entered promiscuous mode [ 251.659416][T10381] veth0_macvtap: entered promiscuous mode [ 251.696065][T10381] veth1_macvtap: entered promiscuous mode [ 251.717729][ T51] Bluetooth: hci3: command tx timeout [ 251.845702][T10381] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.955228][T10381] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.077329][ T9492] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.086339][ T9492] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.204583][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.277565][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.468388][T10654] sctp: [Deprecated]: syz.0.1157 (pid 10654) Use of struct sctp_assoc_value in delayed_ack socket option. [ 252.468388][T10654] Use struct sctp_sack_info instead [ 252.575603][T10651] netlink: 3696 bytes leftover after parsing attributes in process `syz.0.1157'. [ 252.623259][T10654] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.632328][T10651] netlink: 3696 bytes leftover after parsing attributes in process `syz.0.1157'. [ 252.767833][ T149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.776317][ T149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.878415][ T1095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.892632][ T1095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.305227][T10668] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1162'. [ 253.436182][T10680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1165'. [ 253.450772][T10680] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1165'. [ 253.585736][T10687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1167'. [ 253.595666][T10687] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1167'. [ 253.640852][ T9492] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.865434][ T9492] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.020126][ T9492] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.099013][ T9492] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.266509][ T9492] bridge_slave_1: left allmulticast mode [ 254.275910][ T9492] bridge_slave_1: left promiscuous mode [ 254.282655][ T9492] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.296598][ T9492] bridge_slave_0: left allmulticast mode [ 254.304002][ T9492] bridge_slave_0: left promiscuous mode [ 254.312956][ T9492] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.771495][ T9492] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.783823][ T9492] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.794627][ T9492] bond0 (unregistering): Released all slaves [ 255.056448][ T9492] hsr_slave_0: left promiscuous mode [ 255.063006][ T9492] hsr_slave_1: left promiscuous mode [ 255.069286][ T9492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.076718][ T9492] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.088580][ T9492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.096025][ T9492] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.124068][ T9492] veth1_macvtap: left promiscuous mode [ 255.129817][ T9492] veth0_macvtap: left promiscuous mode [ 255.135397][ T9492] veth1_vlan: left promiscuous mode [ 255.140993][ T9492] veth0_vlan: left promiscuous mode [ 255.525358][ T9492] team0 (unregistering): Port device team_slave_1 removed [ 255.565167][ T9492] team0 (unregistering): Port device team_slave_0 removed [ 255.797703][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.804064][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.165008][ T5859] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 256.195556][ T5859] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 256.212712][ T5859] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 256.234558][ T5859] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 256.245213][ T5859] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 256.520650][T10714] batadv1: entered promiscuous mode [ 256.548145][T10717] netlink: 'syz.3.1172': attribute type 12 has an invalid length. [ 256.556104][T10717] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1172'. [ 256.625669][T10722] ip6gre1: entered promiscuous mode [ 256.678066][T10709] chnl_net:caif_netlink_parms(): no params data found [ 257.177897][T10750] netlink: 'syz.3.1181': attribute type 1 has an invalid length. [ 257.212519][T10709] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.245889][T10709] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.255671][T10709] bridge_slave_0: entered allmulticast mode [ 257.273286][T10709] bridge_slave_0: entered promiscuous mode [ 257.291851][T10709] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.302387][T10709] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.311652][T10709] bridge_slave_1: entered allmulticast mode [ 257.323341][T10709] bridge_slave_1: entered promiscuous mode [ 257.607108][T10770] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1187'. [ 257.643105][T10709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.669982][T10774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1188'. [ 257.696121][T10774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1188'. [ 257.697923][T10766] 8021q: adding VLAN 0 to HW filter on device bond3 [ 257.718310][T10766] bond0: (slave bond3): Enslaving as an active interface with an up link [ 257.732051][T10709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.907413][T10709] team0: Port device team_slave_0 added [ 257.920516][T10709] team0: Port device team_slave_1 added [ 257.991115][T10785] netlink: 'syz.2.1193': attribute type 1 has an invalid length. [ 258.011964][T10785] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1193'. [ 258.025775][T10783] C: renamed from team_slave_0 (while UP) [ 258.040931][T10783] netlink: 'syz.0.1192': attribute type 3 has an invalid length. [ 258.048921][T10783] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1192'. [ 258.058190][T10788] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1194'. [ 258.071908][T10783] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 258.142852][T10709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.165377][T10709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.195331][T10709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.234910][T10709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.246594][T10709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.277893][T10709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.357116][ T51] Bluetooth: hci3: command tx timeout [ 258.383020][T10709] hsr_slave_0: entered promiscuous mode [ 258.396815][T10709] hsr_slave_1: entered promiscuous mode [ 259.047187][T10825] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1209'. [ 259.056694][T10825] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1209'. [ 259.066110][T10825] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1209'. [ 259.216204][T10834] netlink: 'syz.0.1212': attribute type 4 has an invalid length. [ 259.243613][T10834] netlink: 'syz.0.1212': attribute type 4 has an invalid length. [ 259.404030][T10709] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 259.458945][T10709] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 259.540442][T10709] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 259.555555][T10709] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 259.615331][T10850] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 259.863885][T10843] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1213'. [ 260.041976][T10863] lo: entered promiscuous mode [ 260.051292][T10863] tunl0: entered promiscuous mode [ 260.058559][T10863] gre0: entered promiscuous mode [ 260.067797][T10863] gretap0: entered promiscuous mode [ 260.084084][T10863] erspan0: entered promiscuous mode [ 260.097328][T10863] ip_vti0: entered promiscuous mode [ 260.105616][T10863] ip6_vti0: entered promiscuous mode [ 260.113670][T10863] sit0: entered promiscuous mode [ 260.145988][T10863] ip6tnl0: entered promiscuous mode [ 260.160643][T10866] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.180343][T10863] ip6gre0: entered promiscuous mode [ 260.197915][T10863] syz_tun: entered promiscuous mode [ 260.220547][T10863] ip6gretap0: entered promiscuous mode [ 260.263038][T10863] bridge0: entered promiscuous mode [ 260.270313][T10863] bond0: entered promiscuous mode [ 260.280903][T10863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.288315][ T5947] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 260.307419][T10863] dummy0: entered promiscuous mode [ 260.330058][T10863] nlmon0: entered promiscuous mode [ 260.387853][T10863] caif0: entered promiscuous mode [ 260.392927][T10863] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 260.427946][ T51] Bluetooth: hci3: command tx timeout [ 260.458215][ T5854] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 260.773505][T10893] bridge0: entered allmulticast mode [ 260.835920][T10884] xt_CT: No such helper "snmp" [ 260.846700][T10709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.941671][T10709] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.045466][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.052698][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.267167][ T9492] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.274440][ T9492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.291576][T10906] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 261.353157][ T2996] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 261.383399][T10908] netlink: 'syz.0.1229': attribute type 30 has an invalid length. [ 261.466276][T10914] xt_connbytes: Forcing CT accounting to be enabled [ 261.514100][T10914] xt_bpf: check failed: parse error [ 262.178839][T10709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.311588][T10709] veth0_vlan: entered promiscuous mode [ 262.340926][T10709] veth1_vlan: entered promiscuous mode [ 262.393556][T10961] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.434798][T10709] veth0_macvtap: entered promiscuous mode [ 262.480415][ T49] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 262.508238][ T51] Bluetooth: hci3: command tx timeout [ 262.520665][ T49] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 262.556536][T10709] veth1_macvtap: entered promiscuous mode [ 262.661098][T10709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.705052][T10709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.775233][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.796214][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.816492][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.853116][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.984952][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.001985][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.089119][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.111642][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.220806][T10992] __nla_validate_parse: 10 callbacks suppressed [ 263.220826][T10992] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1250'. [ 263.247020][T10991] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1251'. [ 263.254293][T10992] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1250'. [ 263.277788][T10992] netlink: 'syz.4.1250': attribute type 6 has an invalid length. [ 263.308819][ T5947] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 263.373075][T10998] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1251'. [ 263.429598][T10991] 8021q: adding VLAN 0 to HW filter on device bond1 [ 263.477691][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 263.874062][ T1162] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.105386][ T1162] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.221715][ T1162] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.355690][ T1162] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.363269][ T5859] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 264.375553][ T5859] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 264.384653][ T5859] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 264.394243][ T5859] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 264.402635][ T5859] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 264.486275][ T1162] bridge_slave_1: left allmulticast mode [ 264.492143][ T1162] bridge_slave_1: left promiscuous mode [ 264.498096][ T1162] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.507055][ T1162] bridge_slave_0: left allmulticast mode [ 264.514160][ T1162] bridge_slave_0: left promiscuous mode [ 264.520124][ T1162] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.802993][ T1162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.813907][ T1162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.828295][ T1162] bond0 (unregistering): Released all slaves [ 265.032505][T11013] chnl_net:caif_netlink_parms(): no params data found [ 265.078854][ T1162] hsr_slave_0: left promiscuous mode [ 265.084900][ T1162] hsr_slave_1: left promiscuous mode [ 265.091282][ T1162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.100031][ T1162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.108186][ T1162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.115615][ T1162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.135645][ T1162] veth1_macvtap: left promiscuous mode [ 265.141358][ T1162] veth0_macvtap: left promiscuous mode [ 265.146918][ T1162] veth1_vlan: left promiscuous mode [ 265.155422][ T1162] veth0_vlan: left promiscuous mode [ 265.564367][ T1162] team0 (unregistering): Port device team_slave_1 removed [ 265.602791][ T1162] team0 (unregistering): Port device team_slave_0 removed [ 266.098892][T11028] veth0: entered promiscuous mode [ 266.104629][T11028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1260'. [ 266.427803][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 266.447769][ T51] Bluetooth: hci1: command tx timeout [ 266.509543][T11013] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.547974][T11013] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.555262][T11013] bridge_slave_0: entered allmulticast mode [ 266.573755][T11013] bridge_slave_0: entered promiscuous mode [ 266.624357][T11013] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.644602][ T5859] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 266.651153][T11013] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.659384][ T5859] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 266.684410][ T5859] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 266.689813][T11013] bridge_slave_1: entered allmulticast mode [ 266.704736][ T5859] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 266.712592][ T5859] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 266.727792][T11013] bridge_slave_1: entered promiscuous mode [ 266.847847][T11053] netlink: zone id is out of range [ 266.853028][T11053] netlink: del zone limit has 4 unknown bytes [ 266.962741][T11013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.127435][T11059] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.155855][T11013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.383828][T11013] team0: Port device team_slave_0 added [ 267.399032][T11013] team0: Port device team_slave_1 added [ 267.465828][T11059] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.605189][T11059] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.632586][T11013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.644088][T11013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.671692][T11013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.716861][T11013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.737300][T11013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.767911][T11078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 267.785969][T11013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.842954][T11059] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.008373][T11013] hsr_slave_0: entered promiscuous mode [ 268.014663][T11013] hsr_slave_1: entered promiscuous mode [ 268.094358][ T1095] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.171275][ T149] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.193856][T11043] chnl_net:caif_netlink_parms(): no params data found [ 268.201609][T11089] netlink: del zone limit has 4 unknown bytes [ 268.244104][ T36] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.302967][ T49] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.507909][ T51] Bluetooth: hci1: command tx timeout [ 268.611708][T11102] bridge6: entered allmulticast mode [ 268.635260][T11043] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.650123][T11043] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.657394][T11043] bridge_slave_0: entered allmulticast mode [ 268.668005][T11043] bridge_slave_0: entered promiscuous mode [ 268.676683][T11043] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.686207][T11043] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.694830][T11043] bridge_slave_1: entered allmulticast mode [ 268.704603][T11043] bridge_slave_1: entered promiscuous mode [ 268.747615][ T51] Bluetooth: hci3: command tx timeout [ 268.777344][T11043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.794063][T11109] tun0: tun_chr_ioctl cmd 2147767520 [ 268.804533][T11043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.929742][T11043] team0: Port device team_slave_0 added [ 268.951595][T11043] team0: Port device team_slave_1 added [ 269.103890][T11043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.116230][T11043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.146423][T11043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.162964][T11043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.174907][T11043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.202675][T11043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.301922][T11043] hsr_slave_0: entered promiscuous mode [ 269.309036][T11043] hsr_slave_1: entered promiscuous mode [ 269.319786][T11043] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 269.330164][T11043] Cannot create hsr debugfs directory [ 269.462675][T11013] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 269.491041][T11013] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 269.512691][T11013] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 269.544582][T11013] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 269.572667][T11134] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1286'. [ 270.015404][T11013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.040345][T11150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1289'. [ 270.124257][T11013] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.145690][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.152847][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.211743][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.218951][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.300835][T11156] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1290'. [ 270.515068][T11043] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 270.554255][T11043] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 270.578153][T11043] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 270.594304][ T51] Bluetooth: hci1: command tx timeout [ 270.614722][T11043] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 270.830553][ T51] Bluetooth: hci3: command 0x041b tx timeout [ 270.894240][T11043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.936408][T11043] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.998817][T11188] netlink: 'syz.0.1295': attribute type 1 has an invalid length. [ 271.006985][T11193] netlink: 'syz.0.1295': attribute type 1 has an invalid length. [ 271.041443][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.048685][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.105851][T11193] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1295'. [ 271.132365][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.139586][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.162308][T11193] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1295'. [ 271.183235][T11013] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.497030][T11212] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 271.546815][T11212] sch_tbf: burst 0 is lower than device veth1_macvtap mtu (1514) ! [ 271.568980][T11212] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1300'. [ 271.808209][T11043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.865690][T11228] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.924059][T11043] veth0_vlan: entered promiscuous mode [ 271.947215][T11043] veth1_vlan: entered promiscuous mode [ 271.989948][T11013] veth0_vlan: entered promiscuous mode [ 272.017066][T11013] veth1_vlan: entered promiscuous mode [ 272.124164][T11238] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1305'. [ 272.138134][T11043] veth0_macvtap: entered promiscuous mode [ 272.169927][T11013] veth0_macvtap: entered promiscuous mode [ 272.186281][T11043] veth1_macvtap: entered promiscuous mode [ 272.232585][T11043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.267018][T11043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.291353][T11013] veth1_macvtap: entered promiscuous mode [ 272.312762][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.335256][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.381207][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.401559][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.437130][T11013] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.454861][T11013] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.464043][T11244] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1307'. [ 272.565966][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.620833][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.648844][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.662634][T11253] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1309'. [ 272.672084][ T5859] Bluetooth: hci1: command tx timeout [ 272.725530][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.847674][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.855528][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.874961][T11266] sctp: [Deprecated]: syz.3.1312 (pid 11266) Use of struct sctp_assoc_value in delayed_ack socket option. [ 272.874961][T11266] Use struct sctp_sack_info instead [ 272.909483][ T5859] Bluetooth: hci3: command 0x041b tx timeout [ 272.945616][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.966514][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.978647][ T9492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.027786][ T9492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.152254][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.173722][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.435296][T11284] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 273.584797][ T149] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.602576][T11287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1318'. [ 273.739646][ T149] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.866920][ T149] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.089455][ T149] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.347828][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 274.434592][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 274.446556][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 274.454571][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 274.463375][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 274.471462][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 274.486984][ T149] bridge_slave_1: left allmulticast mode [ 274.493471][ T149] bridge_slave_1: left promiscuous mode [ 274.500043][ T149] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.511625][ T149] bridge_slave_0: left allmulticast mode [ 274.517308][ T149] bridge_slave_0: left promiscuous mode [ 274.523304][ T149] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.811823][ T149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.823128][ T149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.833585][ T149] bond0 (unregistering): Released all slaves [ 275.064552][T11298] chnl_net:caif_netlink_parms(): no params data found [ 275.119218][ T149] hsr_slave_0: left promiscuous mode [ 275.125118][ T149] hsr_slave_1: left promiscuous mode [ 275.131015][ T149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.139022][ T149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.146751][ T149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.154601][ T149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.175451][ T149] veth1_macvtap: left promiscuous mode [ 275.181155][ T149] veth0_macvtap: left promiscuous mode [ 275.186814][ T149] veth1_vlan: left promiscuous mode [ 275.192316][ T149] veth0_vlan: left promiscuous mode [ 275.623752][ T149] team0 (unregistering): Port device team_slave_1 removed [ 275.667175][ T149] team0 (unregistering): Port device team_slave_0 removed [ 276.089414][T11298] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.096601][T11298] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.105787][T11298] bridge_slave_0: entered allmulticast mode [ 276.115922][T11298] bridge_slave_0: entered promiscuous mode [ 276.124893][T11298] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.132148][T11298] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.139739][T11298] bridge_slave_1: entered allmulticast mode [ 276.146833][T11298] bridge_slave_1: entered promiscuous mode [ 276.283291][T11298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.306234][T11312] netlink: 452 bytes leftover after parsing attributes in process `syz.3.1322'. [ 276.325591][T11311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1321'. [ 276.335211][T11311] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1321'. [ 276.347147][T11298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.385652][T11313] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1321'. [ 276.527612][ T5859] Bluetooth: hci1: command tx timeout [ 276.594828][T11298] team0: Port device team_slave_0 added [ 276.705001][T11298] team0: Port device team_slave_1 added [ 276.911054][T11298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.933843][T11298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.961793][T11326] netlink: 'syz.0.1325': attribute type 1 has an invalid length. [ 276.969839][T11326] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1325'. [ 276.988270][T11326] netlink: 'syz.0.1325': attribute type 1 has an invalid length. [ 276.996190][T11326] netlink: 'syz.0.1325': attribute type 1 has an invalid length. [ 277.010420][T11298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.022153][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 277.031561][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 277.040072][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 277.050139][T11298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.057296][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 277.064578][T11298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.092188][T11298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.102853][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 277.115574][T11328] lo speed is unknown, defaulting to 1000 [ 277.193404][T11328] lo speed is unknown, defaulting to 1000 [ 277.199778][T11334] netlink: 'syz.0.1327': attribute type 13 has an invalid length. [ 277.208264][T11334] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1327'. [ 277.272911][T11328] lo speed is unknown, defaulting to 1000 [ 277.294473][T11328] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 277.316236][T11328] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 277.354341][ T149] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.382149][T11329] lo speed is unknown, defaulting to 1000 [ 277.393379][T11328] lo speed is unknown, defaulting to 1000 [ 277.393718][T11343] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1329'. [ 277.466335][T11328] lo speed is unknown, defaulting to 1000 [ 277.495548][T11298] hsr_slave_0: entered promiscuous mode [ 277.507005][T11298] hsr_slave_1: entered promiscuous mode [ 277.535492][ T149] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.560426][T11328] lo speed is unknown, defaulting to 1000 [ 277.580567][T11328] lo speed is unknown, defaulting to 1000 [ 277.664547][T11353] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1332'. [ 277.671465][ T149] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.707314][T11328] lo speed is unknown, defaulting to 1000 [ 277.759851][T11328] lo speed is unknown, defaulting to 1000 [ 277.780812][T11328] lo speed is unknown, defaulting to 1000 [ 277.819681][ T149] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.155398][T11366] veth1_to_team: entered promiscuous mode [ 278.381859][ T149] bridge_slave_1: left allmulticast mode [ 278.388149][ T149] bridge_slave_1: left promiscuous mode [ 278.395312][ T149] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.407131][ T149] bridge_slave_0: left allmulticast mode [ 278.415219][ T149] bridge_slave_0: left promiscuous mode [ 278.422228][ T149] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.590683][ T51] Bluetooth: hci1: command tx timeout [ 278.807336][ T149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.820439][ T149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.831600][ T149] bond0 (unregistering): Released all slaves [ 278.857430][T11329] chnl_net:caif_netlink_parms(): no params data found [ 278.885385][T11379] lo speed is unknown, defaulting to 1000 [ 279.147792][ T51] Bluetooth: hci3: command tx timeout [ 279.335909][T11329] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.343569][T11329] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.351111][T11329] bridge_slave_0: entered allmulticast mode [ 279.359078][T11329] bridge_slave_0: entered promiscuous mode [ 279.387845][T11329] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.395097][T11329] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.402665][T11329] bridge_slave_1: entered allmulticast mode [ 279.410890][T11329] bridge_slave_1: entered promiscuous mode [ 279.455857][ T149] hsr_slave_0: left promiscuous mode [ 279.464451][ T149] hsr_slave_1: left promiscuous mode [ 279.472611][ T149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.480131][ T149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.501797][ T149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.509489][ T149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.541140][ T149] veth1_macvtap: left promiscuous mode [ 279.546815][ T149] veth0_macvtap: left promiscuous mode [ 279.553322][ T149] veth1_vlan: left promiscuous mode [ 279.558979][ T149] veth0_vlan: left promiscuous mode [ 280.134961][ T149] team0 (unregistering): Port device team_slave_1 removed [ 280.173443][ T149] team0 (unregistering): Port device team_slave_0 removed [ 280.574429][T11329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.613694][T11329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.667832][ T51] Bluetooth: hci1: command tx timeout [ 280.829799][T11329] team0: Port device team_slave_0 added [ 280.846022][T11329] team0: Port device team_slave_1 added [ 280.961990][T11329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.967114][T11415] Cannot find del_set index 286 as target [ 280.971379][T11329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.013406][T11329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.033215][T11408] lo speed is unknown, defaulting to 1000 [ 281.040485][T11329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.051353][T11329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.078105][T11329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.113812][T11298] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 281.143789][T11415] lo speed is unknown, defaulting to 1000 [ 281.147663][T11298] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 281.172403][T11298] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 281.215468][T11298] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 281.227695][ T51] Bluetooth: hci3: command tx timeout [ 281.275080][T11329] hsr_slave_0: entered promiscuous mode [ 281.282163][T11329] hsr_slave_1: entered promiscuous mode [ 281.288666][T11329] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 281.296444][T11329] Cannot create hsr debugfs directory [ 281.566860][T11437] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.568859][T11435] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1351'. [ 281.672522][T11440] netlink: 'syz.2.1353': attribute type 29 has an invalid length. [ 281.688347][T11440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1353'. [ 282.017204][T11451] pimreg3: entered allmulticast mode [ 282.112276][T11464] netlink: 'syz.0.1359': attribute type 10 has an invalid length. [ 282.392805][T11464] team0: Device veth0_vlan failed to register rx_handler [ 282.501833][T11298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.596916][T11298] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.599918][T11485] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1364'. [ 282.637310][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.644534][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.733909][ T149] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.741159][ T149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.758032][ T51] Bluetooth: hci1: command tx timeout [ 282.846601][T11494] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000035: 0000 [#1] SMP KASAN PTI [ 282.858692][T11494] KASAN: null-ptr-deref in range [0x00000000000001a8-0x00000000000001af] [ 282.867093][T11494] CPU: 0 UID: 0 PID: 11494 Comm: syz.0.1367 Not tainted 6.16.0-rc4-syzkaller-00991-g6b9fd8857b9f #0 PREEMPT(full) [ 282.879134][T11494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 282.889188][T11494] RIP: 0010:htb_qlen_notify+0x31/0xc0 [ 282.894550][T11494] Code: 41 56 41 55 41 54 53 49 89 f6 49 89 ff 49 bc 00 00 00 00 00 fc ff df e8 ed 6a 3e f8 49 8d 9e a8 01 00 00 49 89 dd 49 c1 ed 03 <43> 0f b6 44 25 00 84 c0 75 4d 8b 2b 31 ff 89 ee e8 0a 6f 3e f8 85 [ 282.914316][T11494] RSP: 0018:ffffc9000424f0f0 EFLAGS: 00010206 [ 282.920371][T11494] RAX: ffffffff8981f513 RBX: 00000000000001a8 RCX: 0000000000080000 [ 282.928324][T11494] RDX: ffffc900048a2000 RSI: 00000000000003c8 RDI: 00000000000003c9 [ 282.936276][T11494] RBP: dffffc0000000000 R08: ffff888052b20000 R09: 0000000000000002 [ 282.944229][T11494] R10: 00000000ffffffff R11: ffffffff8981f4f0 R12: dffffc0000000000 [ 282.952189][T11494] R13: 0000000000000035 R14: 0000000000000000 R15: ffff88802f69e000 [ 282.960158][T11494] FS: 00007fcad0dd26c0(0000) GS:ffff888125c16000(0000) knlGS:0000000000000000 [ 282.969078][T11494] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 282.975649][T11494] CR2: 00002000000012c0 CR3: 000000001beba000 CR4: 00000000003526f0 [ 282.983608][T11494] Call Trace: [ 282.986877][T11494] [ 282.989802][T11494] qdisc_tree_reduce_backlog+0x299/0x480 [ 282.995430][T11494] ? qdisc_tree_reduce_backlog+0x3c/0x480 [ 283.001150][T11494] hhf_change+0x764/0xad0 [ 283.005489][T11494] ? __pfx_hhf_change+0x10/0x10 [ 283.010333][T11494] ? __pfx_hhf_init+0x10/0x10 [ 283.014998][T11494] hhf_init+0x213/0x950 [ 283.019139][T11494] ? __pfx_hhf_init+0x10/0x10 [ 283.023892][T11494] qdisc_create+0x7a9/0xea0 [ 283.028419][T11494] tc_modify_qdisc+0x1426/0x2010 [ 283.033397][T11494] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 283.038772][T11494] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 283.044219][T11494] rtnetlink_rcv_msg+0x77c/0xb70 [ 283.049152][T11494] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 283.054257][T11494] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 283.059781][T11494] ? ref_tracker_free+0x63a/0x7d0 [ 283.064792][T11494] ? __copy_skb_header+0xa7/0x550 [ 283.069813][T11494] ? __pfx_ref_tracker_free+0x10/0x10 [ 283.075183][T11494] netlink_rcv_skb+0x205/0x470 [ 283.079943][T11494] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 283.085414][T11494] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 283.090700][T11494] ? netlink_deliver_tap+0x2e/0x1b0 [ 283.095893][T11494] ? netlink_deliver_tap+0x2e/0x1b0 [ 283.101124][T11494] netlink_unicast+0x758/0x8d0 [ 283.105973][T11494] netlink_sendmsg+0x805/0xb30 [ 283.110767][T11494] ? __pfx_netlink_sendmsg+0x10/0x10 [ 283.116048][T11494] ? aa_sock_msg_perm+0x94/0x160 [ 283.120982][T11494] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 283.126381][T11494] ? __pfx_netlink_sendmsg+0x10/0x10 [ 283.131684][T11494] __sock_sendmsg+0x219/0x270 [ 283.136358][T11494] ____sys_sendmsg+0x505/0x830 [ 283.141123][T11494] ? __pfx_____sys_sendmsg+0x10/0x10 [ 283.146410][T11494] ? import_iovec+0x74/0xa0 [ 283.150921][T11494] ___sys_sendmsg+0x21f/0x2a0 [ 283.155600][T11494] ? __pfx____sys_sendmsg+0x10/0x10 [ 283.160807][T11494] ? __fget_files+0x2a/0x420 [ 283.165388][T11494] ? __fget_files+0x3a0/0x420 [ 283.170063][T11494] __x64_sys_sendmsg+0x19b/0x260 [ 283.175076][T11494] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 283.180551][T11494] ? rcu_is_watching+0x15/0xb0 [ 283.185306][T11494] ? do_syscall_64+0xbe/0x3b0 [ 283.189978][T11494] do_syscall_64+0xfa/0x3b0 [ 283.194475][T11494] ? lockdep_hardirqs_on+0x9c/0x150 [ 283.199677][T11494] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.205733][T11494] ? clear_bhb_loop+0x60/0xb0 [ 283.210422][T11494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.216400][T11494] RIP: 0033:0x7fcacff8e929 [ 283.221029][T11494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.240667][T11494] RSP: 002b:00007fcad0dd2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 283.249079][T11494] RAX: ffffffffffffffda RBX: 00007fcad01b5fa0 RCX: 00007fcacff8e929 [ 283.257041][T11494] RDX: 0000000000004000 RSI: 0000200000000280 RDI: 0000000000000003 [ 283.265003][T11494] RBP: 00007fcad0010b39 R08: 0000000000000000 R09: 0000000000000000 [ 283.272962][T11494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 283.280920][T11494] R13: 0000000000000000 R14: 00007fcad01b5fa0 R15: 00007fffad33d8b8 [ 283.288890][T11494] [ 283.291898][T11494] Modules linked in: [ 283.295932][T11494] ---[ end trace 0000000000000000 ]--- [ 283.301436][T11494] RIP: 0010:htb_qlen_notify+0x31/0xc0 [ 283.306841][T11494] Code: 41 56 41 55 41 54 53 49 89 f6 49 89 ff 49 bc 00 00 00 00 00 fc ff df e8 ed 6a 3e f8 49 8d 9e a8 01 00 00 49 89 dd 49 c1 ed 03 <43> 0f b6 44 25 00 84 c0 75 4d 8b 2b 31 ff 89 ee e8 0a 6f 3e f8 85 [ 283.326490][T11494] RSP: 0018:ffffc9000424f0f0 EFLAGS: 00010206 [ 283.332600][T11494] RAX: ffffffff8981f513 RBX: 00000000000001a8 RCX: 0000000000080000 [ 283.332640][ T51] Bluetooth: hci3: command tx timeout [ 283.340603][T11494] RDX: ffffc900048a2000 RSI: 00000000000003c8 RDI: 00000000000003c9 [ 283.340620][T11494] RBP: dffffc0000000000 R08: ffff888052b20000 R09: 0000000000000002 [ 283.340633][T11494] R10: 00000000ffffffff R11: ffffffff8981f4f0 R12: dffffc0000000000 [ 283.340647][T11494] R13: 0000000000000035 R14: 0000000000000000 R15: ffff88802f69e000 [ 283.340660][T11494] FS: 00007fcad0dd26c0(0000) GS:ffff888125c16000(0000) knlGS:0000000000000000 [ 283.340676][T11494] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 283.393890][T11494] CR2: 00002000000012c0 CR3: 000000001beba000 CR4: 00000000003526f0 [ 283.401968][T11494] Kernel panic - not syncing: Fatal exception in interrupt [ 283.409514][T11494] Kernel Offset: disabled [ 283.413830][T11494] Rebooting in 86400 seconds..